15 files changed, 8732 insertions, 3155 deletions

diff --git a/doc/book-enea-linux-open-source/doc/licenses.xml b/doc/book-enea-linux-open-source/doc/licenses.xml
index 9972da7..3e37328 100644
--- a/doc/book-enea-linux-open-source/doc/licenses.xml
+++ b/doc/book-enea-linux-open-source/doc/licenses.xml
@@ -1,1567 +1,3786 @@
-<?xml version="1.0" encoding="UTF-8"?>
+<?xml version="1.0" encoding="ISO-8859-1"?>
 <!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
 <chapter id="enea_linux_packages">
   <title>Packages and Licenses</title>
- <section id="licenses_packages">
 
-   <title>Packages</title>
+  <section id="licenses_packages">
+    <title>Packages</title>
 
-
-  <!--This chapter contains a generated list of all packages that Enea Linux
+    <!--This chapter contains a generated list of all packages that Enea Linux
 supports, e.g. busybox, with a short explanatory blurb and links to package
 specific documentation.-->
 
-  <informaltable>
-    <tgroup cols="4">
-      <colspec colwidth="2*"/>
-      <colspec colwidth="2*"/>
-      <colspec colwidth="5*"/>
-      <colspec colwidth="2*"/>
-
-      <thead>
-        <row>
-          <entry align="center">Package Name</entry>
-          <entry align="center">Version</entry>
-          <entry align="center">Description</entry>
-          <entry align="center">License</entry>
-        </row>
-      </thead>
-
-      <tbody valign="top">
-<row>
- <entry>acl</entry>
- <entry>2.2.52</entry>
- <entry>Utilities for managing POSIX Access Control Lists.</entry>
- <entry> LGPL-2.1, GPL-2.0</entry>
-</row>
-<row>
- <entry>alsa-lib</entry>
- <entry>1.1.3</entry>
- <entry>ALSA sound library.</entry>
- <entry> LGPL-2.1, GPL-2.0</entry>
-</row>
-<row>
- <entry>apt</entry>
- <entry>1.2.12</entry>
- <entry>Advanced front-end for dpkg.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>asciidoc</entry>
- <entry>8.6.9</entry>
- <entry>AsciiDoc is a text document format for writing short documents articles books and UNIX man pages.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>atk</entry>
- <entry>2.22.0</entry>
- <entry>Accessibility toolkit for GNOME.</entry>
- <entry> GPL-2.0, LGPL-2.0</entry>
-</row>
-<row>
- <entry>attr</entry>
- <entry>2.4.47</entry>
- <entry>Utilities for manipulating filesystem extended attributes.</entry>
- <entry> LGPL-2.1, GPL-2.0</entry>
-</row>
-<row>
- <entry>autoconf</entry>
- <entry>2.69</entry>
- <entry>Autoconf is an extensible package of M4 macros that produce shell scripts to automatically configure software source code packages. Autoconf creates a configuration script for a package from a template file that lists the operating system features that the package can use in the form of M4 macro calls.</entry>
- <entry> GPL-2.0, GPL-3.0</entry>
-</row>
-<row>
- <entry>automake</entry>
- <entry>1.15</entry>
- <entry>Automake is a tool for automatically generating `Makefile.in' files compliant with the GNU Coding Standards. Automake requires the use of Autoconf.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>babeltrace</entry>
- <entry>1.5.2</entry>
- <entry>Babeltrace provides trace read and write libraries in host side as well as a trace converter which used to convert LTTng 2.0 traces into human-readable log.</entry>
- <entry> MIT, GPL-2.0</entry>
-</row>
-<row>
- <entry>base-files</entry>
- <entry>3.0.14</entry>
- <entry>The base-files package creates the basic system directory structure and provides a small set of key configuration files for the system.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>base-passwd</entry>
- <entry>3.5.29</entry>
- <entry>The master copies of the user database files (/etc/passwd and /etc/group). The update-passwd tool is also provided to keep the system databases synchronized with these master files.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>bash-completion</entry>
- <entry>2.5</entry>
- <entry>Programmable Completion for Bash 4.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>bash</entry>
- <entry>4.3.30</entry>
- <entry>An sh-compatible command language interpreter.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>bc</entry>
- <entry>1.06</entry>
- <entry>Arbitrary precision calculator language.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>bcm2835-bootfiles</entry>
- <entry>20171029</entry>
- <entry>Closed source binary files to help boot the ARM on the BCM2835.</entry>
- <entry>Proprietary</entry>
-</row>
-<row>
- <entry>bind</entry>
- <entry>9.10.3-P3</entry>
- <entry>ISC Internet Domain Name Server.</entry>
- <entry> ISC, BSD</entry>
-</row>
-<row>
- <entry>binutils-cross-aarch64</entry>
- <entry>2.28</entry>
- <entry>The GNU Binutils are a collection of binary tools. The main ones are ld (GNU Linker) and as (GNU Assembler). This package also includes addition tools such as addr2line (Converts addresses into filenames and line numbers) ar (utility for creating modifying and extracting archives) nm (list symbols in object files) objcopy (copy and translate object files) objdump (Display object information) and other tools and related libraries.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>binutils</entry>
- <entry>2.28</entry>
- <entry>The GNU Binutils are a collection of binary tools. The main ones are ld (GNU Linker) and as (GNU Assembler). This package also includes addition tools such as addr2line (Converts addresses into filenames and line numbers) ar (utility for creating modifying and extracting archives) nm (list symbols in object files) objcopy (copy and translate object files) objdump (Display object information) and other tools and related libraries.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>bison</entry>
- <entry>3.0.4</entry>
- <entry>Bison is a general-purpose parser generator that converts an annotated context-free grammar into an LALR(1) or GLR parser for that grammar. Bison is upward compatible with Yacc: all properly-written Yacc grammars ought to work with Bison with no change. Anyone familiar with Yacc should be able to use Bison with little trouble.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>blktrace</entry>
- <entry>1.1.0</entry>
- <entry>Generates traces of I/O traffic on block devices.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>bluez5</entry>
- <entry>5.43</entry>
- <entry>Linux Bluetooth stack V5 userland components. These include a system configurations daemons tools and system libraries.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>busybox</entry>
- <entry>1.24.1</entry>
- <entry>BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides minimalist replacements for most of the utilities you usually find in GNU fileutils shellutils etc. The utilities in BusyBox generally have fewer options than their full-featured GNU cousins; however the options that are included provide the expected functionality and behave very much like their GNU counterparts. BusyBox provides a fairly complete POSIX environment for any small or embedded system.</entry>
- <entry> GPL-2.0, BSD-4-Clause</entry>
-</row>
-<row>
- <entry>bzip2</entry>
- <entry>1.0.6</entry>
- <entry>bzip2 compresses files using the Burrows-Wheeler block-sorting text compression algorithm and Huffman coding. Compression is generally considerably better than that achieved by more conventional LZ77/LZ78-based compressors and approaches the performance of the PPM family of statistical compressors.</entry>
- <entry>BSD-4-Clause</entry>
-</row>
-<row>
- <entry>ca-certificates</entry>
- <entry>20161130</entry>
- <entry>This package includes PEM files of CA certificates to allow SSL-based applications to check for the authenticity of SSL connections. This derived from Debian's CA Certificates.</entry>
- <entry> GPL-2.0, MPL-2.0</entry>
-</row>
-<row>
- <entry>cairo</entry>
- <entry>1.14.8</entry>
- <entry>Cairo is a multi-platform library providing anti-aliased vector-based rendering for multiple target backends. Paths consist of line segments and cubic splines and can be rendered at any width with various join and cap styles. All colors may be specified with optional translucence (opacity/alpha) and combined using the extended Porter/Duff compositing algebra as found in the X Render Extension.</entry>
- <entry> MPL-1.0, LGPL-2.1, GPL-3.0</entry>
-</row>
-<row>
- <entry>cantarell-fonts</entry>
- <entry>0.0.24</entry>
- <entry>The Cantarell font typeface is designed as a contemporary Humanist sans serif and was developed for on-screen reading, in particular reading web pages on an HTC Dream mobile phone.</entry>
- <entry>0.0.24</entry>
-</row>
-<row>
- <entry>ccache</entry>
- <entry>3.3.4</entry>
- <entry>ccache is a compiler cache. It speeds up recompilation by caching the result of previous compilations and detecting when the same compilation is being done again. Supported languages are C C\+\+ Objective-C and Objective-C++.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>chrpath</entry>
- <entry>0.16</entry>
- <entry>chrpath allows you to change the rpath (where the application looks for libraries) in an application. It does not (yet) allow you to add an rpath if there isn't one already.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>cmake</entry>
- <entry>3.7.2</entry>
- <entry>Cross-platform open-source make system.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>compositeproto</entry>
- <entry>0.4.2</entry>
- <entry>This package provides the wire protocol for the X composite extension. The X composite extension provides three related mechanisms for compositing and off-screen storage.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>coreutils</entry>
- <entry>8.26</entry>
- <entry>The GNU Core Utilities provide the basic file shell and text manipulation utilities. These are the core utilities which are expected to exist on every system.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>cross-localedef</entry>
- <entry>2.25</entry>
- <entry>Cross locale generation tool for glibc.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>cryptodev-linux</entry>
- <entry>1.8</entry>
- <entry>A /dev/crypto device driver header file.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>curl</entry>
- <entry>7.53.1</entry>
- <entry>Command line tool and library for client-side URL transfers.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>damageproto</entry>
- <entry>1.2.1</entry>
- <entry>This package provides the wire protocol for the DAMAGE extension. The DAMAGE extension allows applications to receive information about changes made to pixel contents of windows and pixmaps.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>db</entry>
- <entry>5.3.28</entry>
- <entry>Berkeley Database v5.</entry>
- <entry>Sleepycat</entry>
-</row>
-<row>
- <entry>dbus-glib</entry>
- <entry>0.108</entry>
- <entry>GLib bindings for the D-Bus message bus that integrate the D-Bus library with the GLib thread abstraction and main loop.</entry>
- <entry> AFL-2.0, GPL-2.0</entry>
-</row>
-<row>
- <entry>dbus-test</entry>
- <entry>1.10.14</entry>
- <entry>D-Bus test package (for D-bus functionality testing only).</entry>
- <entry> AFL-2.0, GPL-2.0</entry>
-</row>
-<row>
- <entry>dbus</entry>
- <entry>1.10.14</entry>
- <entry>"D-Bus is a message bus system a simple way for applications to talk to one another. In addition to interprocess communication D-Bus helps coordinate process lifecycle; it makes it simple and reliable to code a \""single instance\"" application or daemon and to launch applications and daemons on demand when their services are needed."</entry>
- <entry> AFL-2.0, GPL-2.0</entry>
-</row>
-<row>
- <entry>debianutils</entry>
- <entry>4.8.1</entry>
- <entry>Miscellaneous utilities specific to Debian.</entry>
- <entry> GPL-2.0</entry>
-</row>
-<row>
- <entry>depmodwrapper</entry>
- <entry>1.0</entry>
- <entry>Wrapper script for the Linux kernel module dependency indexer.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>dhcp</entry>
- <entry>4.3.5</entry>
- <entry>DHCP (Dynamic Host Configuration Protocol) is a protocol which allows individual devices on an IP network to get their own network configuration information from a server. DHCP helps make it easier to administer devices.</entry>
- <entry>ISC</entry>
-</row>
-<row>
- <entry>diffstat</entry>
- <entry>1.61</entry>
- <entry>diffstat reads the output of diff and displays a histogram of the insertions deletions and modifications per-file. It is useful for reviewing large complex patch files.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>diffutils</entry>
- <entry>3.5</entry>
- <entry>Diffutils contains the GNU diff diff3 sdiff and cmp utilities. These programs are usually used for creating patch files.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>docbook-xml-dtd4</entry>
- <entry>4.5</entry>
- <entry>Document type definitions for verification of XML data files against the DocBook rule set it ships with the latest DocBook 4.5 XML DTD as well as a selected set of legacy DTDs for use with older documents including 4.0 4.1.2 4.2 4.3 and 4.4</entry>
- <entry>OASIS</entry>
-</row>
-<row>
- <entry>docbook-xsl-stylesheets</entry>
- <entry>1.79.1</entry>
- <entry>XSL stylesheets for processing DocBook XML to various output formats.</entry>
- <entry>1.79.1</entry>
-</row>
-<row>
- <entry>dosfstools</entry>
- <entry>4.1</entry>
- <entry>DOS FAT Filesystem Utilities.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>dpkg</entry>
- <entry>1.18.10</entry>
- <entry>Package maintenance system from Debian.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>dtc</entry>
- <entry>1.4.2</entry>
- <entry>The Device Tree Compiler is a tool used to manipulate the Open-Firmware-like device tree used by PowerPC kernels.</entry>
- <entry> GPL-2.0, BSD</entry>
-</row>
-<row>
- <entry>e2fsprogs</entry>
- <entry>1.43.4</entry>
- <entry>The Ext2 Filesystem Utilities (e2fsprogs) contain all of the standard utilities for creating fixing configuring  and debugging ext2 filesystems.</entry>
- <entry> GPL-2.0, LGPL-2.0, BSD, MIT</entry>
-</row>
-<row>
- <entry>ed</entry>
- <entry>1.14.1</entry>
- <entry>Line-oriented text editor.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>elfutils</entry>
- <entry>0.168</entry>
- <entry>Utilities and libraries for handling compiled object files.</entry>
- <entry> GPL-3.0, Elfutils-Exception</entry>
-</row>
-<row>
- <entry>enea-image-standard-sdk</entry>
- <entry>1.0</entry>
- <entry>Full featured image for the Standard profile</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>expat</entry>
- <entry>2.2.0</entry>
- <entry>Expat is an XML parser library written in C. It is a stream-oriented parser in which an application registers handlers for things the parser might find in the XML document (like start tags)</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>file</entry>
- <entry>5.30</entry>
- <entry>File attempts to classify files depending on their contents and prints a description if a match is found.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>findutils</entry>
- <entry>4.6.0</entry>
- <entry>The GNU Find Utilities are the basic directory searching utilities of the GNU operating system. These programs are typically used in conjunction with other programs to provide modular and powerful directory search and file locating capabilities to other commands.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>firmware</entry>
- <entry>20171029</entry>
- <entry>Pre-compiled binaries of the Raspberry Pi kernel and modules, userspace libraries, and bootloader/GPU firmware.</entry>
- <entry>LICENSE.broad- com</entry>
-</row>
-<row>
- <entry>fixesproto</entry>
- <entry>5.0</entry>
- <entry>This package provides the wire protocol for the X Fixes extension. This extension is designed to provide server-side support for application work arounds to shortcomings in the core X window system.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>flex</entry>
- <entry>2.6.0</entry>
- <entry>Flex is a fast lexical analyser generator. Flex is a tool for generating programs that recognize lexical patterns in text.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>fontconfig</entry>
- <entry>2.12.1</entry>
- <entry>Fontconfig is a font configuration and customization library which does not depend on the X Window System. It is designed to locate fonts within the system and select them according to requirements specified by applications. Fontconfig is not a rasterization library nor does it impose a particular rasterization library on the application. The X-specific library 'Xft' uses fontconfig along with freetype to specify and rasterize fonts.</entry>
- <entry> MIT, PD</entry>
-</row>
-<row>
- <entry>freetype</entry>
- <entry>2.7.1</entry>
- <entry>FreeType is a software font engine that is designed to be small efficient highly customizable and portable while capable of producing high-quality output (glyph images). It can be used in graphics libraries display servers font conversion tools text image generation tools and many other products as well.</entry>
- <entry> FreeType, GPL-2.0</entry>
-</row>
-<row>
- <entry>fuse</entry>
- <entry>2.9.4</entry>
- <entry>FUSE (Filesystem in Userspace) is a simple interface for userspace programs to export a virtual filesystem to the Linux kernel. FUSE also aims to provide a secure method for non privileged users to create and mount their own filesystem implementations.</entry>
- <entry> GPL-2.0, LGPL-2.0</entry>
-</row>
-<row>
- <entry>gawk</entry>
- <entry>4.1.4</entry>
- <entry>The GNU version of awk a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>gcc-cross-aarch64</entry>
- <entry>6.3.0</entry>
- <entry>GNU cc and gcc C compilers.</entry>
- <entry> GPL-3.0-with-GCC-exception, GPL-3.0</entry>
-</row>
-<row>
- <entry>gcc-cross-initial-aarch64</entry>
- <entry>6.3.0</entry>
- <entry>GNU cc and gcc C compilers.</entry>
- <entry> GPL-3.0-with-GCC-exception, GPL-3.0</entry>
-</row>
-<row>
- <entry>gcc-source-6.3.0</entry>
- <entry>6.3.0</entry>
- <entry>GNU cc and gcc C compilers.</entry>
- <entry> GPL-3.0-with-GCC-exception, GPL-3.0</entry>
-</row>
-<row>
- <entry>gcc</entry>
- <entry>6.3.0</entry>
- <entry>Runtime libraries from GCC.</entry>
- <entry>GPL-3.0-with-GCC-exception</entry>
-</row>
-<row>
- <entry>gdb</entry>
- <entry>7.12.1</entry>
- <entry>GNU debugger.</entry>
- <entry> GPL-2.0, GPL-3.0, LGPL-2.0, LGPL-3.0</entry>
-</row>
-<row>
- <entry>gdbm</entry>
- <entry>1.12</entry>
- <entry>Key/value database library with extensible hashing.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>gdk-pixbuf</entry>
- <entry>2.36.5</entry>
- <entry>Image loading library for GTK+.</entry>
- <entry>LGPL-2.0</entry>
-</row>
-<row>
- <entry>gettext-minimal</entry>
- <entry>0.19.8.1</entry>
- <entry>Contains the m4 macros sufficient to support building autoconf/automake. This provides a significant build time speedup by the removal of gettext-native from most dependency chains (now only needed for gettext for the target).</entry>
- <entry>FSF-Unlimited</entry>
-</row>
-<row>
- <entry>gettext</entry>
- <entry>0.19.8.1</entry>
- <entry>GNU gettext is a set of tools that provides a framework to help other programs produce multi-lingual messages. These tools include a set of conventions about how programs should be written to support message catalogs a directory and file naming organization for the message catalogs themselves a runtime library supporting the retrieval of translated messages and a few stand-alone programs to massage in various ways the sets of translatable and already translated strings.</entry>
- <entry> GPL-3.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>glib-2.0</entry>
- <entry>2.50.3</entry>
- <entry>GLib is a general-purpose utility library which provides many useful data types macros type conversions string utilities file utilities a main loop abstraction and so on.</entry>
- <entry> LGPL-2.0, BSD, PD</entry>
-</row>
-<row>
- <entry>glibc-locale</entry>
- <entry>2.25</entry>
- <entry>Locale data from glibc.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>glibc-mtrace</entry>
- <entry>2.25</entry>
- <entry>mtrace utility provided by glibc</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>glibc</entry>
- <entry>2.25</entry>
- <entry>The GNU C Library is used as the system C library in most systems with the Linux kernel.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>gmp</entry>
- <entry>6.1.2</entry>
- <entry>GMP is a free library for arbitrary precision arithmetic operating on signed integers rational numbers and floating point numbers</entry>
- <entry> GPL-2.0, LGPL-3.0</entry>
-</row>
-<row>
- <entry>gnome-common</entry>
- <entry>3.18.0</entry>
- <entry>Common macros for building GNOME applications.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>gnome-desktop-testing</entry>
- <entry>2014.1</entry>
- <entry>Test runner for GNOME-style installed tests.</entry>
- <entry>LGPL-2.0</entry>
-</row>
-<row>
- <entry>gnome-themes-standard</entry>
- <entry>3.22.2</entry>
- <entry>GTK+2 standard themes.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>gnu-config</entry>
- <entry>20150728</entry>
- <entry>Tool that installs the GNU config.guess / config.sub into a directory tree</entry>
- <entry>20150728</entry>
-</row>
-<row>
- <entry>gnutls</entry>
- <entry>3.5.9</entry>
- <entry>GNU Transport Layer Security Library.</entry>
- <entry> GPL-3.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>gobject-introspection</entry>
- <entry>1.50.0</entry>
- <entry>Middleware layer between GObject-using C libraries and language bindings.</entry>
- <entry> LGPL-2.0, GPL-2.0</entry>
-</row>
-<row>
- <entry>gperf</entry>
- <entry>3.0.4</entry>
- <entry>GNU gperf is a perfect hash function generator</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>grep</entry>
- <entry>3.0</entry>
- <entry>GNU grep utility.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>groff</entry>
- <entry>1.22.3</entry>
- <entry>The groff (GNU troff) software is a typesetting package which reads plain text mixed with formatting commands and produces formatted output.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>gtk+</entry>
- <entry>2.24.31</entry>
- <entry>GTK+ is a multi-platform toolkit for creating graphical user interfaces. Offering a complete set of widgets GTK+ is suitable for projects ranging from small one-off projects to complete application suites.</entry>
- <entry> LGPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>gtk-doc</entry>
- <entry>1.25</entry>
- <entry>Gtk-doc is a set of scripts that extract specially formatted comments from glib-based software and produce a set of html documentation files from them</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>gtk-icon-utils</entry>
- <entry>3.22.8</entry>
- <entry>gtk-update-icon-cache and gtk-encode-symbolic-svg built from GTK+ natively for build time and on-host postinst script execution.</entry>
- <entry> LGPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>harfbuzz</entry>
- <entry>1.4.1</entry>
- <entry>HarfBuzz is an OpenType text shaping engine.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>hicolor-icon-theme</entry>
- <entry>0.15</entry>
- <entry>Default icon theme that all icon themes automatically inherit from.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>icu</entry>
- <entry>58.2</entry>
- <entry>The International Component for Unicode (ICU) is a mature portable set of C/C++ and Java libraries for Unicode support software internationalization (I18N) and globalization (G11N) giving applications the same results on all platforms.</entry>
- <entry>ICU</entry>
-</row>
-<row>
- <entry>inputproto</entry>
- <entry>2.3.2</entry>
- <entry>This package provides the wire protocol for the X Input extension. The extension supports input devices other then the core X keyboard and pointer.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>intltool</entry>
- <entry>0.51.0</entry>
- <entry>Utility scripts for internationalizing XML.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>kbd</entry>
- <entry>2.0.4</entry>
- <entry>Keytable files and keyboard utilities.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>kbproto</entry>
- <entry>1.0.7</entry>
- <entry>This package provides the wire protocol for the X Keyboard extension. This extension is used to control options related to keyboard handling and layout.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>kern-tools</entry>
- <entry>0.2</entry>
- <entry>Tools for managing Yocto Project style branched kernels.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>keymaps</entry>
- <entry>1.0</entry>
- <entry>Keymaps and initscript to set the keymap on bootup.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>kmod</entry>
- <entry>23</entry>
- <entry>kmod is a set of tools to handle common tasks with Linux kernel modules like insert remove list check properties resolve dependencies and aliases.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>latencytop</entry>
- <entry>0.5</entry>
- <entry>Linux tool for measuring and fixing latency.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>ldconfig</entry>
- <entry>2.12.1</entry>
- <entry>A standalone native ldconfig build.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>less</entry>
- <entry>487</entry>
- <entry>Less is a program similar to more i.e. a terminal based program for viewing text files and the output from other programs. Less offers many features beyond those that more does.</entry>
- <entry> GPL-3.0, BSD-2-Clause</entry>
-</row>
-<row>
- <entry>libaio</entry>
- <entry>0.3.110</entry>
- <entry>Asynchronous input/output library that uses the kernels native interface</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>libarchive</entry>
- <entry>3.2.2</entry>
- <entry>C library and command-line tools for reading and writing tar cpio zip ISO and other archive formats</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>libcap</entry>
- <entry>2.25</entry>
- <entry>Library for getting/setting POSIX.1e capabilities.</entry>
- <entry> BSD, GPL-2.0</entry>
-</row>
-<row>
- <entry>libcgroup</entry>
- <entry>0.41</entry>
- <entry>libcgroup is a library that abstracts the control group file system in Linux. Control groups allow you to limit account and isolate resource usage (CPU memory disk I/O etc.) of groups of processes.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>libcheck</entry>
- <entry>0.10.0</entry>
- <entry>Check - unit testing framework for C code.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>libcroco</entry>
- <entry>0.6.11</entry>
- <entry>Cascading Style Sheet (CSS) parsing and manipulation toolkit.</entry>
- <entry> LGPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>liberation-fonts</entry>
- <entry>1.04</entry>
- <entry>The Liberation(tm) Fonts is a font family originally created by Ascender(c) which aims at metric compatibility with Arial Times New Roman Courier New.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>libevent</entry>
- <entry>2.0.22</entry>
- <entry>An asynchronous event notification library.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>libffi</entry>
- <entry>3.2.1</entry>
- <entry>The `libffi' library provides a portable high level programming interface to various calling conventions.  This allows a programmer to call any function specified by a call interface description at run time. FFI stands for Foreign Function Interface.  A foreign function interface is the popular name for the interface that allows code written in one language to call code written in another language.  The `libffi' library really only provides the lowest machine dependent layer of a fully featured foreign function interface.  A layer must exist above `libffi' that handles type conversions for values passed between the two languages.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libgcc</entry>
- <entry>6.3.0</entry>
- <entry>GNU cc and gcc C compilers.</entry>
- <entry>GPL-3.0-with-GCC-exception</entry>
-</row>
-<row>
- <entry>libical</entry>
- <entry>2.0.0</entry>
- <entry>iCal and scheduling (RFC 2445 2446 2447) library.</entry>
- <entry> LGPL-2.1, MPL-1.0</entry>
-</row>
-<row>
- <entry>libice</entry>
- <entry>1.0.9</entry>
- <entry>The Inter-Client Exchange (ICE) protocol provides a generic framework for building protocols on top of reliable byte-stream transport connections. It provides basic mechanisms for setting up and shutting down connections for performing authentication for negotiating versions and for reporting errors. </entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libidn</entry>
- <entry>1.33</entry>
- <entry>Implementation of the Stringprep Punycode and IDNA specifications defined by the IETF Internationalized Domain Names (IDN) working group.</entry>
- <entry> LGPL-2.1, LGPL-3.0, GPL-3.0</entry>
-</row>
-<row>
- <entry>libjpeg-turbo</entry>
- <entry>1.5.1</entry>
- <entry>libjpeg-turbo is a derivative of libjpeg that uses SIMD instructions (MMX SSE2 NEON) to accelerate baseline JPEG compression and decompression</entry>
- <entry>BSD-3-Clause</entry>
-</row>
-<row>
- <entry>libmpc</entry>
- <entry>1.0.3</entry>
- <entry>Mpc is a C library for the arithmetic of complex numbers with arbitrarily high precision and correct rounding of the result. It is built upon and follows the same principles as Mpfr</entry>
- <entry>LGPL-3.0</entry>
-</row>
-<row>
- <entry>libnewt</entry>
- <entry>0.52.19</entry>
- <entry>Newt is a programming library for color text mode widget based user interfaces. Newt can be used to add stacked windows entry widgets checkboxes radio buttons labels plain text fields scrollbars etc. to text mode user interfaces. This package also contains the shared library needed by programs built with newt as well as a /usr/bin/dialog replacement called whiptail.  Newt is based on the slang library.</entry>
- <entry>LGPL-2.0</entry>
-</row>
-<row>
- <entry>libnfsidmap</entry>
- <entry>0.25</entry>
- <entry>NFS id mapping library.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>libnl</entry>
- <entry>3.2.29</entry>
- <entry>A library for applications dealing with netlink sockets.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>libpcre</entry>
- <entry>8.40</entry>
- <entry>The PCRE library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as Perl 5. PCRE has its own native API as well as a set of wrapper functions that correspond to the POSIX regular expression API.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>libpng</entry>
- <entry>1.6.28</entry>
- <entry>PNG image format decoding library.</entry>
- <entry>Libpng</entry>
-</row>
-<row>
- <entry>libpthread-stubs</entry>
- <entry>0.3</entry>
- <entry>This library provides weak aliases for pthread functions not provided in libc or otherwise available by default.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>librsvg</entry>
- <entry>2.40.16</entry>
- <entry>Library for rendering SVG files.</entry>
- <entry>LGPL-2.0</entry>
-</row>
-<row>
- <entry>libsdl</entry>
- <entry>1.2.15</entry>
- <entry>Simple DirectMedia Layer is a cross-platform multimedia library designed to provide low level access to audio keyboard mouse joystick 3D hardware via OpenGL and 2D video framebuffer.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>libsm</entry>
- <entry>1.2.2</entry>
- <entry>"The Session Management Library (SMlib) is a low-level \""C\"" language interface to XSMP.  The purpose of the X Session Management Protocol (XSMP) is to provide a uniform mechanism for users to save and restore their sessions.  A session is a group of clients each of which has a particular state."</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libtirpc</entry>
- <entry>1.0.1</entry>
- <entry>Libtirpc is a port of Suns Transport-Independent RPC library to Linux</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>libtool</entry>
- <entry>2.4.6</entry>
- <entry>This is GNU libtool a generic library support script. Libtool hides the complexity of generating special library types (such as shared libraries) behind a consistent interface.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>libunistring</entry>
- <entry>0.9.7</entry>
- <entry>Text files are nowadays usually encoded in Unicode and may consist of very different scripts from Latin letters to Chinese Hanzi with many kinds of special characters accents right-to-left writing marks hyphens Roman numbers and much more. But the POSIX platform APIs for text do not contain adequate functions for dealing with particular properties of many Unicode characters. In fact the POSIX APIs for text have several assumptions at their base which don't hold for Unicode text.  This library provides functions for manipulating Unicode strings and for manipulating C strings according to the Unicode standard.  This package contains documentation.</entry>
- <entry> LGPL-3.0, GPL-2.0</entry>
-</row>
-<row>
- <entry>liburcu</entry>
- <entry>0.9.3</entry>
- <entry>Userspace RCU (read-copy-update) library.</entry>
- <entry> LGPL-2.1, MIT</entry>
-</row>
-<row>
- <entry>libusb-compat</entry>
- <entry>0.1.5</entry>
- <entry>libusb-0.1 compatible layer for libusb1 a drop-in replacement that aims to look feel and behave exactly like libusb-0.1</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>libusb1</entry>
- <entry>1.0.21</entry>
- <entry>Userspace library to access USB (version 1.0).</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>libx11</entry>
- <entry>1.6.4</entry>
- <entry>This package provides a client interface to the X Window System otherwise known as 'Xlib'.  It provides a complete API for the basic functions of the window system.</entry>
- <entry> MIT, BSD</entry>
-</row>
-<row>
- <entry>libxau</entry>
- <entry>1.0.8</entry>
- <entry>libxau provides the main interfaces to the X11 authorisation handling which controls authorisation for X connections both client-side and server-side.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxcb</entry>
- <entry>1.12</entry>
- <entry>The X protocol C-language Binding (XCB) is a replacement for Xlib featuring a small footprint latency hiding direct access to the protocol improved threading support and extensibility.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxcomposite</entry>
- <entry>0.4.4</entry>
- <entry>The composite extension provides three related mechanisms: per-hierarchy storage automatic shadow update and external parent. In per-hierarchy storage the rendering of an entire hierarchy of windows is redirected to off-screen storage. In automatic shadow update when a hierarchy is rendered off-screen the X server provides an automatic mechanism for presenting those contents within the parent window.  In external parent a mechanism for providing redirection of compositing transformations through a client.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxcursor</entry>
- <entry>1.1.14</entry>
- <entry>Xcursor is a simple library designed to help locate and load cursors. Cursors can be loaded from files or memory. A library of common cursors exists which map to the standard X cursor names. Cursors can exist in several sizes and the library automatically picks the best size.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxdamage</entry>
- <entry>1.1.4</entry>
- <entry>'Damage' is a term that describes changes make to pixel contents of windows and pixmaps.  Damage accumulates as drawing occurs in the drawable.  Each drawing operation 'damages' one or more rectangular areas within the drawable.  The rectangles are guaranteed to include the set of pixels modified by each operation but may include significantly more than just those pixels.  The DAMAGE extension allows applications to either receive the raw rectangles as a stream of events or to have them partially processed within the X server to reduce the amount of data transmitted as well as reduce the processing latency once the repaint operation has started.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxdmcp</entry>
- <entry>1.1.2</entry>
- <entry>The purpose of the X Display Manager Control Protocol (XDMCP) is to provide a uniform mechanism for an autonomous display to request login service from a remote host. An X terminal (screen keyboard mouse processor network interface) is a prime example of an autonomous display.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxext</entry>
- <entry>1.3.3</entry>
- <entry>libXext provides an X Window System client interface to several extensions to the X protocol. The supported protocol extensions are DOUBLE-BUFFER DPMS Extended-Visual-Information LBX MIT_SHM MIT_SUNDRY-NONSTANDARD Multi-Buffering SECURITY SHAPE SYNC TOG-CUP XC-APPGROUP XC-MISC XTEST. libXext also provides a small set of utility functions to aid authors of client APIs for X protocol extensions.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxfixes</entry>
- <entry>5.0.3</entry>
- <entry>X applications have often needed to work around various shortcomings in the core X window system. This extension is designed to provide the minimal server-side support necessary to eliminate problems caused by these workarounds.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxft</entry>
- <entry>2.3.2</entry>
- <entry>Xft was designed to provide good support for scalable fonts and to do so efficiently.  Unlike the core fonts system it supports features such as anti-aliasing and sub-pixel rasterisation. Perhaps more importantly it gives applications full control over the way glyphs are rendered making fine typesetting and WYSIWIG display possible. Finally it allows applications to use fonts that are not installed system-wide for displaying documents with embedded fonts.  Xft is not compatible with the core fonts system: usage of Xft requires fairly extensive changes to toolkits (user-interface libraries).</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxkbcommon</entry>
- <entry>0.7.1</entry>
- <entry>libxkbcommon is a keymap compiler and support library which processes a reduced subset of keymaps as defined by the XKB specification.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>libxml-parser-perl</entry>
- <entry>2.44</entry>
- <entry>XML::Parser - A perl module for parsing XML documents.</entry>
- <entry> Artistic-1.0, GPL-1.0</entry>
-</row>
-<row>
- <entry>libxml2</entry>
- <entry>2.9.4</entry>
- <entry>The XML Parser Library allows for manipulation of XML files.  Libxml2 exports Push and Pull type parser interfaces for both XML and HTML.  It can do DTD validation at parse time on a parsed document instance or with an arbitrary DTD.  Libxml2 includes complete XPath XPointer and Xinclude implementations.  It also has a SAX like interface which is designed to be compatible with Expat.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxrandr</entry>
- <entry>1.5.1</entry>
- <entry>The X Resize Rotate and Reflect Extension called RandR for short brings the ability to resize rotate and reflect the root window of a screen. It is based on the X Resize and Rotate Extension as specified in the Proceedings of the 2001 Usenix Technical Conference [RANDR].</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxrender</entry>
- <entry>0.9.10</entry>
- <entry>The X Rendering Extension (Render) introduces digital image composition as the foundation of a new rendering model within the X Window System. Rendering geometric figures is accomplished by client-side tessellation into either triangles or trapezoids.  Text is drawn by loading glyphs into the server and rendering sets of them.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>libxslt</entry>
- <entry>1.1.29</entry>
- <entry>GNOME XSLT library.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>linux-libc-headers</entry>
- <entry>4.10</entry>
- <entry>Sanitized set of kernel headers for the C library's use.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>linux-raspberrypi</entry>
- <entry>4.9.59</entry>
- <entry>Linux Kernel for Raspberry Pi</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>lsb</entry>
- <entry>4.1</entry>
- <entry>LSB support for OpenEmbedded.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>lsbinitscripts</entry>
- <entry>9.68</entry>
- <entry>SysV init scripts which are only used in an LSB image.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>lttng-modules</entry>
- <entry>2.9.1</entry>
- <entry>The lttng-modules 2.0 package contains the kernel tracer modules</entry>
- <entry> LGPL-2.1, GPL-2.0, MIT</entry>
-</row>
-<row>
- <entry>lttng-tools</entry>
- <entry>2.9.4</entry>
- <entry>The Linux trace toolkit is a suite of tools designed to extract program execution details from the Linux operating system and interpret them.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>lttng-ust</entry>
- <entry>2.9.0</entry>
- <entry>The LTTng UST 2.x package contains the userspace tracer library to trace userspace codes.</entry>
- <entry> LGPL-2.1, MIT, GPL-2.0</entry>
-</row>
-<row>
- <entry>lzip</entry>
- <entry>1.16</entry>
- <entry>Lossless data compressor based on the LZMA algorithm.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>lzo</entry>
- <entry>2.09</entry>
- <entry>Lossless data compression library.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>lzop</entry>
- <entry>1.03</entry>
- <entry>lzop is a compression utility which is designed to be a companion to gzip. \nIt is based on the LZO data compression library and its main advantages over \ngzip are much higher compression and decompression speed at the cost of some \ncompression ratio. The lzop compression utility was designed with the goals \nof reliability speed portability and with reasonable drop-in compatibility \nto gzip.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>m4</entry>
- <entry>1.4.18</entry>
- <entry>GNU m4 is an implementation of the traditional Unix macro processor.  It is mostly SVR4 compatible although it has some extensions (for example handling more than 9 positional parameters to macros). GNU M4 also has built-in functions for including files running shell commands doing arithmetic etc.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>make</entry>
- <entry>4.2.1</entry>
- <entry>Make is a tool which controls the generation of executables and other non-source files of a program from the program's source files.  Make gets its knowledge of how to build your program from a file called the makefile which lists each of the non-source files and how to compute it from other files.</entry>
- <entry> GPL-3.0, LGPL-2.0</entry>
-</row>
-<row>
- <entry>makedepend</entry>
- <entry>1.0.5</entry>
- <entry>The makedepend program reads each sourcefile in sequence and parses it like a C-preprocessor processing all #include #define  #undef #ifdef #ifndef #endif #if #elif and #else directives so that it can correctly tell which #include directives would be used in a compilation. Any #include directives can reference files having other #include directives and parsing will occur in these files as well.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>makedevs</entry>
- <entry>1.0.1</entry>
- <entry>Tool for creating device nodes.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>man</entry>
- <entry>1.6g</entry>
- <entry>A set of documentation tools: man apropos and whatis</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>mingetty</entry>
- <entry>1.08</entry>
- <entry>Compact getty terminal handler for virtual consoles only.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>mklibs</entry>
- <entry>0.1.43</entry>
- <entry>mklibs produces cut-down shared libraries that contain only the routines required by a particular set of executables.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>mpfr</entry>
- <entry>3.1.5</entry>
- <entry>C library for multiple-precision floating-point computations with exact rounding.</entry>
- <entry> GPL-3.0, LGPL-3.0</entry>
-</row>
-<row>
- <entry>mtools</entry>
- <entry>4.0.18</entry>
- <entry>Mtools is a collection of utilities to access MS-DOS disks from GNU and Unix without mounting them.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>ncurses</entry>
- <entry>6.0</entry>
- <entry>SVr4 and XSI-Curses compatible curses library and terminfo tools including tic infocmp captoinfo. Supports color multiple highlights forms-drawing characters and automatic recognition of keypad and function-key sequences. Extensions include resizable windows and mouse support on both xterm and Linux console using the gpm library.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>netbase</entry>
- <entry>5.4</entry>
- <entry>This package provides the necessary infrastructure for basic TCP/IP based networking</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>nettle</entry>
- <entry>3.3</entry>
- <entry>A low level cryptographic library.</entry>
- <entry> LGPL-3.0, GPL-2.0</entry>
-</row>
-<row>
- <entry>nfs-utils</entry>
- <entry>1.3.4</entry>
- <entry>The nfs-utils package provides a daemon for the kernel NFS server and related tools.</entry>
- <entry> MIT, GPL-2.0, BSD</entry>
-</row>
-<row>
- <entry>nspr</entry>
- <entry>4.13.1</entry>
- <entry>Netscape Portable Runtime Library.</entry>
- <entry> GPL-2.0, MPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>nss</entry>
- <entry>3.28.1</entry>
- <entry>Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3 TLS PKCS 5 PKCS 7 PKCS 11 PKCS 12 S/MIME X.509 v3 certificates and other security standards.</entry>
- <entry> MPL-2.0, GPL-2.0, MPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>openssh</entry>
- <entry>7.4p1</entry>
- <entry>Secure rlogin/rsh/rcp/telnet replacement (OpenSSH) Ssh (Secure Shell) is a program for logging into a remote machine and for executing commands on a remote machine.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>openssl</entry>
- <entry>1.0.2k</entry>
- <entry>Secure Socket Layer (SSL) binary and related cryptographic tools.</entry>
- <entry>OpenSSL</entry>
-</row>
-<row>
- <entry>opkg-utils</entry>
- <entry>0.3.4</entry>
- <entry>Additional utilities for the opkg package manager.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>os-release</entry>
- <entry>1.0</entry>
- <entry>The /etc/os-release file contains operating system identification data.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-boot</entry>
- <entry>1.0</entry>
- <entry>The minimal set of packages required to boot the system</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-buildessential</entry>
- <entry>1.0</entry>
- <entry>Essential build dependencies.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-eclipse-debug</entry>
- <entry>1.0</entry>
- <entry>Remote debugging tools for Eclipse integration.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-nfs</entry>
- <entry>1.0</entry>
- <entry>NFS package groups.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-sdk</entry>
- <entry>1.0</entry>
- <entry>Software development tools.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-ssh-openssh</entry>
- <entry>1.0</entry>
- <entry>OpenSSH SSH client/server.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-standalone-sdk-target</entry>
- <entry>1.0</entry>
- <entry>Target packages for the standalone SDK.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-tools-debug</entry>
- <entry>1.0</entry>
- <entry>Debugging tools.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>packagegroup-core-tools-profile</entry>
- <entry>1.0</entry>
- <entry>Profiling tools.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>pango</entry>
- <entry>1.40.3</entry>
- <entry>Pango is a library for laying out and rendering of text with an emphasis on internationalization. Pango can be used anywhere that text layout is needed though most of the work on Pango so far has been done in the context of the GTK+ widget toolkit. Pango forms the core of text and font handling for GTK+-2.x.</entry>
- <entry>LGPL-2.0</entry>
-</row>
-<row>
- <entry>parted</entry>
- <entry>3.2</entry>
- <entry>Disk partition editing/resizing utility.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>patch</entry>
- <entry>2.7.5</entry>
- <entry>patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files producing patched versions.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>pciutils</entry>
- <entry>3.5.2</entry>
- <entry>The PCI Utilities package contains a library for portable access to PCI bus configuration space and several utilities based on this library.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>perf</entry>
- <entry>1.0</entry>
- <entry>Performance counters for Linux are a new kernel-based subsystem that provide a framework for all things performance analysis. It covers hardware level (CPU/PMU Performance Monitoring Unit) features and software features (software counters tracepoints) as well.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>perl</entry>
- <entry>5.24.1</entry>
- <entry>Perl scripting language.</entry>
- <entry> Artistic-1.0, GPL-1.0</entry>
-</row>
-<row>
- <entry>pigz</entry>
- <entry>2.3.4</entry>
- <entry>pigz which stands for parallel implementation of gzip is a fully functional replacement for gzip that exploits multiple processors and multiple cores to the hilt when compressing data. pigz was written by Mark Adler and uses the zlib and pthread libraries.</entry>
- <entry> Zlib, Apache-2.0</entry>
-</row>
-<row>
- <entry>pixman</entry>
- <entry>0.34.0</entry>
- <entry>Pixman provides a library for manipulating pixel regions -- a set of Y-X banded rectangles image compositing using the Porter/Duff model and implicit mask generation for geometric primitives including trapezoids triangles and rectangles.</entry>
- <entry> MIT, PD</entry>
-</row>
-<row>
- <entry>pkgconfig</entry>
- <entry>0.29.1</entry>
- <entry>pkg-config is a helper tool used when compiling applications and libraries. It helps determined the correct compiler/link options.  It is also language-agnostic.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>popt</entry>
- <entry>1.16</entry>
- <entry>Library for parsing command line options.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>powertop</entry>
- <entry>2.8</entry>
- <entry>Linux tool to diagnose issues with power consumption and power management.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>prelink</entry>
- <entry>1.0</entry>
- <entry>The prelink package contains a utility which modifies ELF shared libraries and executables so that far fewer relocations need to be resolved at runtime and thus programs come up faster.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>procps</entry>
- <entry>3.3.12</entry>
- <entry>Procps contains a set of system utilities that provide system information about processes using the /proc filesystem. The package includes the programs ps top vmstat w kill and skill.</entry>
- <entry> GPL-2.0, LGPL-2.0</entry>
-</row>
-<row>
- <entry>pseudo</entry>
- <entry>1.8.2</entry>
- <entry>Pseudo gives fake root capabilities to a normal user.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>ptest-runner</entry>
- <entry>2.0.2</entry>
- <entry>The ptest-runner2 package installs a ptest-runner program which loops through all installed ptest test suites and runs them in sequence.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>python</entry>
- <entry>2.7.13</entry>
- <entry>The Python Programming Language.</entry>
- <entry>Python-2.0</entry>
-</row>
-<row>
- <entry>python3-dbus</entry>
- <entry>1.2.4</entry>
- <entry>Python bindings for the DBus inter-process communication system.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>python3-pycairo</entry>
- <entry>1.10.0</entry>
- <entry>Python bindings for the Cairo canvas library.</entry>
- <entry>LGPL-3.0</entry>
-</row>
-<row>
- <entry>python3-pygobject</entry>
- <entry>3.22.0</entry>
- <entry>Python GObject bindings.</entry>
- <entry>LGPL-2.1</entry>
-</row>
-<row>
- <entry>python3-setuptools</entry>
- <entry>32.1.1</entry>
- <entry>Download build install upgrade and uninstall Python packages.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>python3</entry>
- <entry>3.5.2</entry>
- <entry>The Python Programming Language.</entry>
- <entry>Python-2.0</entry>
-</row>
-<row>
- <entry>qemu</entry>
- <entry>2.8.0</entry>
- <entry>Fast open source processor emulator.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>qemuwrapper</entry>
- <entry>1.0</entry>
- <entry>QEMU wrapper script.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>quilt</entry>
- <entry>0.65</entry>
- <entry>Tool for working with series of patches.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>quota</entry>
- <entry>4.03</entry>
- <entry>Tools for monitoring &amp; limiting user disk usage per filesystem.</entry>
- <entry> BSD, GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>randrproto</entry>
- <entry>1.5.0</entry>
- <entry>This package provides the wire protocol for the X Resize Rotate and Reflect extension. This extension provides the ability to resize rotate and reflect the root window of a screen.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>readline</entry>
- <entry>7.0</entry>
- <entry>The GNU Readline library provides a set of functions for use by applications that allow users to edit command lines as they are typed in. Both Emacs and vi editing modes are available. The Readline library includes  additional functions to maintain a list of previously-entered command lines to recall and perhaps reedit those lines and perform csh-like history expansion on previous commands.</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>renderproto</entry>
- <entry>0.11.1</entry>
- <entry>This package provides the wire protocol for the X Rendering extension. This is the basis the image composition within the X window system.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>rpcbind</entry>
- <entry>0.2.4</entry>
- <entry>The rpcbind utility is a server that converts RPC program numbers into universal addresses.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>rpi-config</entry>
- <entry>git</entry>
- <entry>Commented config.txt file for the Raspberry Pi. The Raspberry Pi config.txt file is read by the GPU before the ARM core is initialised. It can be used to set various                system configuration parameters.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>rpi-u-boot-scr</entry>
- <entry>1.0</entry>
- <entry>U-boot boot scripts for Raspberry Pi.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>rpm</entry>
- <entry>4.13.90</entry>
- <entry>The RPM Package Manager (RPM) is a powerful command line driven package management system capable of installing uninstalling verifying querying and updating software packages. Each software package consists of an archive of files along with information about the package like its version a description etc.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>run-postinsts</entry>
- <entry>1.0</entry>
- <entry>Runs postinstall scripts on first boot of the target device.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>sed</entry>
- <entry>4.2.2</entry>
- <entry>Stream EDitor (text filtering utility).</entry>
- <entry>GPL-3.0</entry>
-</row>
-<row>
- <entry>shadow-securetty</entry>
- <entry>4.2.1</entry>
- <entry>Provider of the machine specific securetty file.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>shadow-sysroot</entry>
- <entry>4.2.1</entry>
- <entry>Shadow utils requirements for useradd.bbclass.</entry>
- <entry> BSD, Artistic-1.0</entry>
-</row>
-<row>
- <entry>shadow</entry>
- <entry>4.2.1</entry>
- <entry>Tools to change and administer password and group data.</entry>
- <entry> BSD, Artistic-1.0</entry>
-</row>
-<row>
- <entry>shared-mime-info</entry>
- <entry>1.8</entry>
- <entry>Shared MIME type database and specification.</entry>
- <entry>LGPL-2.0</entry>
-</row>
-<row>
- <entry>slang</entry>
- <entry>2.3.1a</entry>
- <entry>S-Lang is an interpreted language and a programming library. The S-Lang language was designed so that it can be easily embedded into a program to provide the program with a powerful extension language. The S-Lang library provided in this package provides the S-Lang extension language. S-Lang's syntax resembles C which makes it easy to recode S-Lang procedures in C if you need to.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>sqlite3</entry>
- <entry>3.17.0</entry>
- <entry>Embeddable SQL database engine.</entry>
- <entry>PD</entry>
-</row>
-<row>
- <entry>strace</entry>
- <entry>4.16</entry>
- <entry>System call tracing tool.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>systemd-compat-units</entry>
- <entry>1.0</entry>
- <entry>Enhances systemd compatilibity with existing SysVinit scripts.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>systemd-serialgetty</entry>
- <entry>1.0</entry>
- <entry>Serial terminal support for systemd.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>systemd-systemctl</entry>
- <entry>1.0</entry>
- <entry>Wrapper for enabling systemd services.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>systemd</entry>
- <entry>232</entry>
- <entry>systemd is a system and service manager for Linux compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities uses socket and D-Bus activation for starting services offers on-demand starting of daemons keeps track of processes using Linux cgroups supports snapshotting and restoring of the system state maintains mount and automount points and implements an elaborate transactional dependency-based service control logic. It can work as a drop-in replacement for sysvinit.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>tcf-agent</entry>
- <entry>1.4.0</entry>
- <entry>Target Communication Framework for the Eclipse IDE.</entry>
- <entry> EPL-1.0, EDL-1.0</entry>
-</row>
-<row>
- <entry>tcl</entry>
- <entry>8.6.6</entry>
- <entry>Tool Command Language.</entry>
- <entry> tcl, BSD-3-Clause</entry>
-</row>
-<row>
- <entry>tcp-wrappers</entry>
- <entry>7.6</entry>
- <entry>Tools for monitoring and filtering incoming requests for tcp services.</entry>
- <entry>BSD</entry>
-</row>
-<row>
- <entry>texinfo-dummy</entry>
- <entry>1.0</entry>
- <entry>Fake version of the texinfo utility suite.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>trace-cmd</entry>
- <entry>2.6</entry>
- <entry>User interface to Ftrace.</entry>
- <entry> GPL-2.0, LGPL-2.1</entry>
-</row>
-<row>
- <entry>tzcode</entry>
- <entry>2017b</entry>
- <entry>tzcode timezone zoneinfo utils -- zic zdump tzselect.</entry>
- <entry> PD, BSD, BSD-3-Clause</entry>
-</row>
-<row>
- <entry>tzdata</entry>
- <entry>2017b</entry>
- <entry>Timezone data.</entry>
- <entry> PD, BSD, BSD-3-Clause</entry>
-</row>
-<row>
- <entry>u-boot-mkimage</entry>
- <entry>2017.01</entry>
- <entry>U-Boot bootloader image creation tool.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>u-boot</entry>
- <entry>2017.01</entry>
- <entry>Universal Boot Loader for embedded devices.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>unifdef</entry>
- <entry>2.11</entry>
- <entry>Selectively remove #ifdef statements from sources.</entry>
- <entry>BSD-2-Clause</entry>
-</row>
-<row>
- <entry>update-rc.d</entry>
- <entry>0.7</entry>
- <entry>update-rc.d is a utility that allows the management of symlinks to the initscripts in the /etc/rcN.d directory structure.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>util-linux</entry>
- <entry>2.29.1</entry>
- <entry>Util-linux includes a suite of basic system administration utilities commonly found on most Linux systems. Some of the more important utilities include disk partitioning kernel message management filesystem creation and system login.</entry>
- <entry> GPL-2.0, LGPL-2.1, BSD</entry>
-</row>
-<row>
- <entry>util-macros</entry>
- <entry>1.19.1</entry>
- <entry>M4 autotools macros used by various X.org programs.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>volatile-binds</entry>
- <entry>1.0</entry>
- <entry>Volatile bind mount setup and configuration for read-only-rootfs</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>xcb-proto</entry>
- <entry>1.12</entry>
- <entry>Function prototypes for the X protocol C-language Binding (XCB). XCB is a replacement for Xlib featuring a small footprint latency hiding direct access to the protocol improved threading support and extensibility.</entry>
- <entry>MIT</entry>
-</row>
-<row>
- <entry>xextproto</entry>
- <entry>7.3.0</entry>
- <entry>This package provides the wire protocol for several X extensions. These protocol extensions include DOUBLE-BUFFER DPMS Extended-Visual-Information LBX MIT_SHM MIT_SUNDRY-NONSTANDARD Multi-Buffering SECURITY SHAPE SYNC TOG-CUP XC-APPGROUP XC-MISC XTEST. In addition a small set of utility functions are also available.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>xkeyboard-config</entry>
- <entry>2.20</entry>
- <entry>The non-arch keyboard configuration database for X Window.  The goal is to provide the consistent well-structured frequently released open source of X keyboard configuration data for X Window System implementations.  The project is targeted to XKB-based systems.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>xmlto</entry>
- <entry>0.0.28</entry>
- <entry>A shell-script tool for converting XML files to various formats.</entry>
- <entry>GPL-2.0</entry>
-</row>
-<row>
- <entry>xproto</entry>
- <entry>7.0.31</entry>
- <entry>This package provides the basic headers for the X Window System.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>xtrans</entry>
- <entry>1.3.5</entry>
- <entry>The X Transport Interface is intended to combine all system and transport specific code into a single place. This API should be used by all libraries clients and servers of the X Window System. Use of this API should allow the addition of new types of transports and support for new platforms without making any changes to the source except in the X Transport Interface code.</entry>
- <entry> MIT</entry>
-</row>
-<row>
- <entry>xz</entry>
- <entry>5.2.3</entry>
- <entry>Utilities for managing LZMA compressed files.</entry>
- <entry> GPL-2.0, LGPL-2.1, PD</entry>
-</row>
-<row>
- <entry>Yocto Plugins</entry>
- <entry>1.4.1.2017- 12061321</entry>
- <entry>Yocto Project SDK Plug-in.</entry>
- <entry>Eclipse Distribution License - v 1.0</entry>
-</row>
-<row>
- <entry>zlib</entry>
- <entry>1.2.11</entry>
- <entry>Zlib is a general-purpose patent-free lossless data compression library which is used by many different programs.</entry>
- <entry>Zlib</entry>
-</row>
-   </tbody>
-  </tgroup>
- </informaltable>
-  </section> 
- <section id="open_source_license">
- <title>Open Source Licenses</title>
-<section id="lic_0">
-<title>AFL-2.0</title>
-<para><programlisting>
+    <informaltable>
+      <tgroup cols="4">
+        <colspec colwidth="2*" />
+
+        <colspec colwidth="2*" />
+
+        <colspec colwidth="5*" />
+
+        <colspec colwidth="2*" />
+
+        <thead>
+          <row>
+            <entry align="center">Package Name</entry>
+
+            <entry align="center">Version</entry>
+
+            <entry align="center">Description</entry>
+
+            <entry align="center">License</entry>
+          </row>
+        </thead>
+
+        <tbody valign="top">
+          <row>
+            <entry>acl</entry>
+
+            <entry>2.2.52</entry>
+
+            <entry>Utilities for managing POSIX Access Control Lists.</entry>
+
+            <entry>LGPL-2.1, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>acpica</entry>
+
+            <entry>20170303</entry>
+
+            <entry>The ACPI Component Architecture (ACPICA) project provides
+            an OS-independent reference implementation of the Advanced
+            Configuration and Power Interface Specification (ACPI). ACPICA
+            code contains those portions of ACPI meant to be directly
+            integrated into the host OS as a kernel-resident subsystem and a
+            small set of tools to assist in developing and debugging ACPI
+            tables.</entry>
+
+            <entry>BSD, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>acpid</entry>
+
+            <entry>2.0.28</entry>
+
+            <entry>A daemon for delivering ACPI events.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>alsa-lib</entry>
+
+            <entry>1.1.5</entry>
+
+            <entry>ALSA sound library.</entry>
+
+            <entry>LGPL-2.1, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>alsa-plugins</entry>
+
+            <entry>1.1.5</entry>
+
+            <entry>ALSA Plugins.</entry>
+
+            <entry>LGPL-2.1, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>alsa-state</entry>
+
+            <entry>0.2.0</entry>
+
+            <entry>Alsa Scenario Files - an init script and state files to
+            restore sound state at system boot and save it at system shut
+            down.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>alsa-utils</entry>
+
+            <entry>1.1.5</entry>
+
+            <entry>ALSA sound utilities.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>apt</entry>
+
+            <entry>1.2.24</entry>
+
+            <entry>Advanced front-end for dpkg.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>asciidoc</entry>
+
+            <entry>8.6.9</entry>
+
+            <entry>AsciiDoc is a text document format for writing short
+            documents articles books and UNIX man pages.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>attr</entry>
+
+            <entry>2.4.47</entry>
+
+            <entry>Utilities for manipulating filesystem extended
+            attributes.</entry>
+
+            <entry>LGPL-2.1, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>autoconf-archive</entry>
+
+            <entry>2016.09.16</entry>
+
+            <entry>a collection of freely re-usable Autoconf macros.</entry>
+
+            <entry>GPL-3.0-with-autoconf-exception</entry>
+          </row>
+
+          <row>
+            <entry>autoconf</entry>
+
+            <entry>2.69</entry>
+
+            <entry>Autoconf is an extensible package of M4 macros that produce
+            shell scripts to automatically configure software source code
+            packages. Autoconf creates a configuration script for a package
+            from a template file that lists the operating system features that
+            the package can use in the form of M4 macro calls.</entry>
+
+            <entry>GPL-2.0, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>automake</entry>
+
+            <entry>1.15.1</entry>
+
+            <entry>Automake is a tool for automatically generating
+            `Makefile.in' files compliant with the GNU Coding Standards.
+            Automake requires the use of Autoconf.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>avahi</entry>
+
+            <entry>0.7</entry>
+
+            <entry>"Avahi is a fully LGPL framework for Multicast DNS Service
+            Discovery. It allows programs to publish and discover services and
+            hosts running on a local network with no specific configuration.
+            This tool implements IPv4LL ""Dynamic Configuration of IPv4
+            Link-Local Addresses"" (IETF RFC3927) a protocol for automatic IP
+            address configuration from the link-local 169.254.0.0/16 range
+            without the need for a central server."</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>babeltrace</entry>
+
+            <entry>1.5.4</entry>
+
+            <entry>Babeltrace provides trace read and write libraries in host
+            side as well as a trace converter which used to convert LTTng 2.0
+            traces into human-readable log.</entry>
+
+            <entry>MIT, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>base-files</entry>
+
+            <entry>3.0.14</entry>
+
+            <entry>The base-files package creates the basic system directory
+            structure and provides a small set of key configuration files for
+            the system.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>base-passwd</entry>
+
+            <entry>3.5.29</entry>
+
+            <entry>The master copies of the user database files (/etc/passwd
+            and /etc/group). The update-passwd tool is also provided to keep
+            the system databases synchronized with these master files.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>bash-completion</entry>
+
+            <entry>2.7</entry>
+
+            <entry>Programmable Completion for Bash 4.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>bash</entry>
+
+            <entry>4.4.12</entry>
+
+            <entry>An sh-compatible command language interpreter.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>bc</entry>
+
+            <entry>1.06</entry>
+
+            <entry>Arbitrary precision calculator language.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>bind</entry>
+
+            <entry>9.10.6</entry>
+
+            <entry>ISC Internet Domain Name Server.</entry>
+
+            <entry>ISC, BSD</entry>
+          </row>
+
+          <row>
+            <entry>binutils-cross-x86_64</entry>
+
+            <entry>2.30</entry>
+
+            <entry>The GNU Binutils are a collection of binary tools. The main
+            ones are ld (GNU Linker) and as (GNU Assembler). This package also
+            includes addition tools such as addr2line (Converts addresses into
+            filenames and line numbers) ar (utility for creating modifying and
+            extracting archives) nm (list symbols in object files) objcopy
+            (copy and translate object files) objdump (Display object
+            information) and other tools and related libraries.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>binutils</entry>
+
+            <entry>2.30</entry>
+
+            <entry>The GNU Binutils are a collection of binary tools. The main
+            ones are ld (GNU Linker) and as (GNU Assembler). This package also
+            includes addition tools such as addr2line (Converts addresses into
+            filenames and line numbers) ar (utility for creating modifying and
+            extracting archives) nm (list symbols in object files) objcopy
+            (copy and translate object files) objdump (Display object
+            information) and other tools and related libraries.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>bison</entry>
+
+            <entry>3.0.4</entry>
+
+            <entry>Bison is a general-purpose parser generator that converts
+            an annotated context-free grammar into an LALR(1) or GLR parser
+            for that grammar. Bison is upward compatible with Yacc: all
+            properly-written Yacc grammars ought to work with Bison with no
+            change. Anyone familiar with Yacc should be able to use Bison with
+            little trouble.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>bjam</entry>
+
+            <entry>1.66.0</entry>
+
+            <entry>Portable Boost.Jam build tool for boost.</entry>
+
+            <entry>BSL-1.0, MIT, Python-2.0</entry>
+          </row>
+
+          <row>
+            <entry>blktrace</entry>
+
+            <entry>1.2.0</entry>
+
+            <entry>Generates traces of I/O traffic on block devices.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>bluez5</entry>
+
+            <entry>5.48</entry>
+
+            <entry>Linux Bluetooth stack V5 userland components. These include
+            a system configurations daemons tools and system
+            libraries.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>boost</entry>
+
+            <entry>1.66.0</entry>
+
+            <entry>Free peer-reviewed portable C++ source libraries.</entry>
+
+            <entry>BSL-1.0, MIT, Python-2.0</entry>
+          </row>
+
+          <row>
+            <entry>btrfs-tools</entry>
+
+            <entry>4.13.3</entry>
+
+            <entry>Btrfs is a new copy on write filesystem for Linux aimed at
+            implementing advanced features while focusing on fault tolerance
+            repair and easy administration. This package contains utilities
+            (mkfs fsck btrfsctl) used to work with btrfs and an utility
+            (btrfs-convert) to make a btrfs filesystem from an ext3.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>busybox</entry>
+
+            <entry>1.27.2</entry>
+
+            <entry>BusyBox combines tiny versions of many common UNIX
+            utilities into a single small executable. It provides minimalist
+            replacements for most of the utilities you usually find in GNU
+            fileutils shellutils etc. The utilities in BusyBox generally have
+            fewer options than their full-featured GNU cousins; however the
+            options that are included provide the expected functionality and
+            behave very much like their GNU counterparts. BusyBox provides a
+            fairly complete POSIX environment for any small or embedded
+            system.</entry>
+
+            <entry>GPL-2.0, BSD-4-Clause</entry>
+          </row>
+
+          <row>
+            <entry>bzip2</entry>
+
+            <entry>1.0.6</entry>
+
+            <entry>bzip2 compresses files using the Burrows-Wheeler
+            block-sorting text compression algorithm and Huffman coding.
+            Compression is generally considerably better than that achieved by
+            more conventional LZ77/LZ78-based compressors and approaches the
+            performance of the PPM family of statistical compressors.</entry>
+
+            <entry>BSD-4-Clause</entry>
+          </row>
+
+          <row>
+            <entry>ca-certificates</entry>
+
+            <entry>20170717</entry>
+
+            <entry>This package includes PEM files of CA certificates to allow
+            SSL-based applications to check for the authenticity of SSL
+            connections. This derived from Debian's CA Certificates.</entry>
+
+            <entry>GPL-2.0, MPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>cairo</entry>
+
+            <entry>1.14.12</entry>
+
+            <entry>Cairo is a multi-platform library providing anti-aliased
+            vector-based rendering for multiple target backends. Paths consist
+            of line segments and cubic splines and can be rendered at any
+            width with various join and cap styles. All colors may be
+            specified with optional translucence (opacity/alpha) and combined
+            using the extended Porter/Duff compositing algebra as found in the
+            X Render Extension.</entry>
+
+            <entry>MPL-1.0, LGPL-2.1, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>cantarell-fonts</entry>
+
+            <entry>0.0.24</entry>
+
+            <entry>The Cantarell font typeface is designed as a contemporary
+            Humanist sans serif and was developed for on-screen reading; in
+            particular reading web pages on an HTC Dream mobile phone.</entry>
+
+            <entry>OFL-1.1</entry>
+          </row>
+
+          <row>
+            <entry>ccache</entry>
+
+            <entry>3.3.5</entry>
+
+            <entry>ccache is a compiler cache. It speeds up recompilation by
+            caching the result of previous compilations and detecting when the
+            same compilation is being done again. Supported languages are C
+            C\+\+ Objective-C and Objective-C++.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>chrpath</entry>
+
+            <entry>0.16</entry>
+
+            <entry>chrpath allows you to change the rpath (where the
+            application looks for libraries) in an application. It does not
+            (yet) allow you to add an rpath if there isn't one
+            already.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>cinematicexperience</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Cinematic Experience collects many of the new Qt5 QtQuick
+            2.0 features into the same UX demo application. It uses particles
+            sprites path animation custom shaders etc. features which Qt5
+            introduces for QML UIs.</entry>
+
+            <entry>CC-BY-3.0</entry>
+          </row>
+
+          <row>
+            <entry>cmake</entry>
+
+            <entry>3.10.3</entry>
+
+            <entry>Cross-platform open-source make system.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>coreutils</entry>
+
+            <entry>8.29</entry>
+
+            <entry>The GNU Core Utilities provide the basic file shell and
+            text manipulation utilities. These are the core utilities which
+            are expected to exist on every system.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>cross-localedef</entry>
+
+            <entry>2.27</entry>
+
+            <entry>Cross locale generation tool for glibc.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>cryptodev-linux</entry>
+
+            <entry>1.9</entry>
+
+            <entry>A /dev/crypto device driver header file.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>curl</entry>
+
+            <entry>7.61.0</entry>
+
+            <entry>Command line tool and library for client-side URL
+            transfers.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>cwautomacros</entry>
+
+            <entry>20110201</entry>
+
+            <entry>Collection of autoconf m4 macros.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>db</entry>
+
+            <entry>5.3.28</entry>
+
+            <entry>Berkeley Database v5.</entry>
+
+            <entry>Sleepycat</entry>
+          </row>
+
+          <row>
+            <entry>dbus-glib</entry>
+
+            <entry>0.108</entry>
+
+            <entry>GLib bindings for the D-Bus message bus that integrate the
+            D-Bus library with the GLib thread abstraction and main
+            loop.</entry>
+
+            <entry>AFL-2.0, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>dbus-test</entry>
+
+            <entry>1.12.2</entry>
+
+            <entry>D-Bus test package (for D-bus functionality testing
+            only).</entry>
+
+            <entry>AFL-2.0, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>dbus</entry>
+
+            <entry>1.12.2</entry>
+
+            <entry>"D-Bus is a message bus system a simple way for
+            applications to talk to one another. In addition to interprocess
+            communication D-Bus helps coordinate process lifecycle; it makes
+            it simple and reliable to code a \""single instance\"" application
+            or daemon and to launch applications and daemons on demand when
+            their services are needed."</entry>
+
+            <entry>AFL-2.0, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>debianutils</entry>
+
+            <entry>4.8.4</entry>
+
+            <entry>Miscellaneous utilities specific to Debian.</entry>
+
+            <entry>GPL-2.0, SMAIL_GPL</entry>
+          </row>
+
+          <row>
+            <entry>depmodwrapper</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Wrapper script for the Linux kernel module dependency
+            indexer.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>dhcp</entry>
+
+            <entry>4.3.6</entry>
+
+            <entry>DHCP (Dynamic Host Configuration Protocol) is a protocol
+            which allows individual devices on an IP network to get their own
+            network configuration information from a server. DHCP helps make
+            it easier to administer devices.</entry>
+
+            <entry>ISC</entry>
+          </row>
+
+          <row>
+            <entry>diffstat</entry>
+
+            <entry>1.61</entry>
+
+            <entry>diffstat reads the output of diff and displays a histogram
+            of the insertions deletions and modifications per-file. It is
+            useful for reviewing large complex patch files.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>diffutils</entry>
+
+            <entry>3.6</entry>
+
+            <entry>Diffutils contains the GNU diff diff3 sdiff and cmp
+            utilities. These programs are usually used for creating patch
+            files.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>docbook-xml-dtd4</entry>
+
+            <entry>4.5</entry>
+
+            <entry>Document type definitions for verification of XML data
+            files against the DocBook rule set it ships with the latest
+            DocBook 4.5 XML DTD as well as a selected set of legacy DTDs for
+            use with older documents including 4.0 4.1.2 4.2 4.3 and
+            4.4</entry>
+
+            <entry>OASIS</entry>
+          </row>
+
+          <row>
+            <entry>docbook-xsl-stylesheets</entry>
+
+            <entry>1.79.1</entry>
+
+            <entry>XSL stylesheets for processing DocBook XML to various
+            output formats.</entry>
+
+            <entry>XSL</entry>
+          </row>
+
+          <row>
+            <entry>dpkg</entry>
+
+            <entry>1.18.24</entry>
+
+            <entry>Package maintenance system from Debian.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>dri2proto</entry>
+
+            <entry>2.8</entry>
+
+            <entry>This package provides the wire protocol for the Direct
+            Rendering Ifnrastructure 2. DIR is required for may hardware
+            accelerated OpenGL drivers.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>dtc</entry>
+
+            <entry>1.4.5</entry>
+
+            <entry>The Device Tree Compiler is a tool used to manipulate the
+            Open-Firmware-like device tree used by PowerPC kernels.</entry>
+
+            <entry>GPL-2.0, BSD</entry>
+          </row>
+
+          <row>
+            <entry>dwarfsrcfiles</entry>
+
+            <entry>1.0</entry>
+
+            <entry>A small utility for printing debig source file locations
+            embedded in binaries.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>e2fsprogs</entry>
+
+            <entry>1.43.8</entry>
+
+            <entry>The Ext2 Filesystem Utilities (e2fsprogs) contain all of
+            the standard utilities for creating fixing configuring and
+            debugging ext2 filesystems.</entry>
+
+            <entry>GPL-2.0, LGPL-2.0, BSD, MIT</entry>
+          </row>
+
+          <row>
+            <entry>ed</entry>
+
+            <entry>1.14.2</entry>
+
+            <entry>Line-oriented text editor.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>elfutils</entry>
+
+            <entry>0.170</entry>
+
+            <entry>Utilities and libraries for handling compiled object
+            files.</entry>
+
+            <entry>GPL-3.0, Elfutils-Exception</entry>
+          </row>
+
+          <row>
+            <entry>enea-image-standard-sdk</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Full featured image for the Standard profile</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>expat</entry>
+
+            <entry>2.2.5</entry>
+
+            <entry>Expat is an XML parser library written in C. It is a
+            stream-oriented parser in which an application registers handlers
+            for things the parser might find in the XML document (like start
+            tags)</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>file</entry>
+
+            <entry>5.32</entry>
+
+            <entry>File attempts to classify files depending on their contents
+            and prints a description if a match is found.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>findutils</entry>
+
+            <entry>4.6.0</entry>
+
+            <entry>The GNU Find Utilities are the basic directory searching
+            utilities of the GNU operating system. These programs are
+            typically used in conjunction with other programs to provide
+            modular and powerful directory search and file locating
+            capabilities to other commands.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>flac</entry>
+
+            <entry>1.3.2</entry>
+
+            <entry>FLAC stands for Free Lossless Audio Codec a lossless audio
+            compression format.</entry>
+
+            <entry>GFDL-1.2, GPL-2.0, LGPL-2.1, BSD</entry>
+          </row>
+
+          <row>
+            <entry>flex</entry>
+
+            <entry>2.6.0</entry>
+
+            <entry>Flex is a fast lexical analyser generator. Flex is a tool
+            for generating programs that recognize lexical patterns in
+            text.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>fontconfig</entry>
+
+            <entry>2.12.6</entry>
+
+            <entry>Fontconfig is a font configuration and customization
+            library which does not depend on the X Window System. It is
+            designed to locate fonts within the system and select them
+            according to requirements specified by applications. Fontconfig is
+            not a rasterization library nor does it impose a particular
+            rasterization library on the application. The X-specific library
+            'Xft' uses fontconfig along with freetype to specify and rasterize
+            fonts.</entry>
+
+            <entry>MIT, PD</entry>
+          </row>
+
+          <row>
+            <entry>freetype</entry>
+
+            <entry>2.9</entry>
+
+            <entry>FreeType is a software font engine that is designed to be
+            small efficient highly customizable and portable while capable of
+            producing high-quality output (glyph images). It can be used in
+            graphics libraries display servers font conversion tools text
+            image generation tools and many other products as well.</entry>
+
+            <entry>FreeType, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>fuse</entry>
+
+            <entry>2.9.7</entry>
+
+            <entry>FUSE (Filesystem in Userspace) is a simple interface for
+            userspace programs to export a virtual filesystem to the Linux
+            kernel. FUSE also aims to provide a secure method for non
+            privileged users to create and mount their own filesystem
+            implementations.</entry>
+
+            <entry>GPL-2.0, LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>gawk</entry>
+
+            <entry>4.2.1</entry>
+
+            <entry>The GNU version of awk a text processing utility. Awk
+            interprets a special-purpose programming language to do quick and
+            easy text pattern matching and reformatting jobs.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gcc-cross-initial-x86_64</entry>
+
+            <entry>7.3.0</entry>
+
+            <entry>GNU cc and gcc C compilers.</entry>
+
+            <entry>GPL-3.0-with-GCC-exception, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gcc-cross-x86_64</entry>
+
+            <entry>7.3.0</entry>
+
+            <entry>GNU cc and gcc C compilers.</entry>
+
+            <entry>GPL-3.0-with-GCC-exception, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gcc-sanitizers</entry>
+
+            <entry>7.3.0</entry>
+
+            <entry>GNU cc and gcc C compilers.</entry>
+
+            <entry>NCSA, MIT</entry>
+          </row>
+
+          <row>
+            <entry>gcc-source-7.3.0</entry>
+
+            <entry>7.3.0</entry>
+
+            <entry>GNU cc and gcc C compilers.</entry>
+
+            <entry>GPL-3.0-with-GCC-exception, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gcc</entry>
+
+            <entry>7.3.0</entry>
+
+            <entry>GNU cc and gcc C compilers.</entry>
+
+            <entry>GPL-3.0-with-GCC-exception, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gconf</entry>
+
+            <entry>3.2.6</entry>
+
+            <entry>GNOME configuration system.</entry>
+
+            <entry>LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>gdb</entry>
+
+            <entry>8.0.1</entry>
+
+            <entry>GNU debugger.</entry>
+
+            <entry>GPL-2.0, GPL-3.0, LGPL-2.0, LGPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gdbm</entry>
+
+            <entry>1.14.1</entry>
+
+            <entry>Key/value database library with extensible hashing.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gdk-pixbuf</entry>
+
+            <entry>2.36.11</entry>
+
+            <entry>Image loading library for GTK+.</entry>
+
+            <entry>LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>gettext-minimal</entry>
+
+            <entry>0.19.8.1</entry>
+
+            <entry>Contains the m4 macros sufficient to support building
+            autoconf/automake. This provides a significant build time speedup
+            by the removal of gettext-native from most dependency chains (now
+            only needed for gettext for the target).</entry>
+
+            <entry>FSF-Unlimited</entry>
+          </row>
+
+          <row>
+            <entry>gettext</entry>
+
+            <entry>0.19.8.1</entry>
+
+            <entry>GNU gettext is a set of tools that provides a framework to
+            help other programs produce multi-lingual messages. These tools
+            include a set of conventions about how programs should be written
+            to support message catalogs a directory and file naming
+            organization for the message catalogs themselves a runtime library
+            supporting the retrieval of translated messages and a few
+            stand-alone programs to massage in various ways the sets of
+            translatable and already translated strings.</entry>
+
+            <entry>GPL-3.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>glib-2.0</entry>
+
+            <entry>2.54.3</entry>
+
+            <entry>GLib is a general-purpose utility library which provides
+            many useful data types macros type conversions string utilities
+            file utilities a main loop abstraction and so on.</entry>
+
+            <entry>LGPL-2.1, BSD, PD</entry>
+          </row>
+
+          <row>
+            <entry>glibc-locale</entry>
+
+            <entry>2.27</entry>
+
+            <entry>Locale data from glibc.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>glibc-mtrace</entry>
+
+            <entry>2.27</entry>
+
+            <entry>mtrace utility provided by glibc</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>glibc</entry>
+
+            <entry>2.27</entry>
+
+            <entry>The GNU C Library is used as the system C library in most
+            systems with the Linux kernel.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>gmp</entry>
+
+            <entry>6.1.2</entry>
+
+            <entry>GMP is a free library for arbitrary precision arithmetic
+            operating on signed integers rational numbers and floating point
+            numbers</entry>
+
+            <entry>GPL-2.0, LGPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gnome-desktop-testing</entry>
+
+            <entry>2014.1</entry>
+
+            <entry>Test runner for GNOME-style installed tests.</entry>
+
+            <entry>LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>gnu-config</entry>
+
+            <entry>20150728</entry>
+
+            <entry>Tool that installs the GNU config.guess / config.sub into a
+            directory tree</entry>
+
+            <entry>GPL-3.0-with-autoconf-exception</entry>
+          </row>
+
+          <row>
+            <entry>gnu-efi</entry>
+
+            <entry>3.0.6</entry>
+
+            <entry>Libraries for producing EFI binaries.</entry>
+
+            <entry>GPL-2.0, BSD-2-Clause</entry>
+          </row>
+
+          <row>
+            <entry>gnutls</entry>
+
+            <entry>3.6.1</entry>
+
+            <entry>GNU Transport Layer Security Library.</entry>
+
+            <entry>GPL-3.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>gobject-introspection</entry>
+
+            <entry>1.54.1</entry>
+
+            <entry>Middleware layer between GObject-using C libraries and
+            language bindings.</entry>
+
+            <entry>LGPL-2.0, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>gperf</entry>
+
+            <entry>3.1</entry>
+
+            <entry>GNU gperf is a perfect hash function generator</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>grep</entry>
+
+            <entry>3.1</entry>
+
+            <entry>GNU grep utility.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>groff</entry>
+
+            <entry>1.22.3</entry>
+
+            <entry>The groff (GNU troff) software is a typesetting package
+            which reads plain text mixed with formatting commands and produces
+            formatted output.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>gstreamer1.0-plugins-bad</entry>
+
+            <entry>1.12.4</entry>
+
+            <entry>Plugins for the GStreamer multimedia framework 1.x.</entry>
+
+            <entry>GPL-2.0, LGPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>gstreamer1.0-plugins-base</entry>
+
+            <entry>1.12.4</entry>
+
+            <entry>Plugins for the GStreamer multimedia framework 1.x.</entry>
+
+            <entry>GPL-2.0, LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>gstreamer1.0-vaapi</entry>
+
+            <entry>1.12.4</entry>
+
+            <entry>gstreamer-vaapi consists of a collection of VA-API based
+            plugins for GStreamer and helper libraries: `vaapidecode'
+            `vaapiconvert' and `vaapisink'.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>gstreamer1.0</entry>
+
+            <entry>1.12.4</entry>
+
+            <entry>GStreamer is a multimedia framework for encoding and
+            decoding video and sound. It supports a wide range of formats
+            including mp3 ogg avi mpeg and quicktime.</entry>
+
+            <entry>LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>gtk-doc</entry>
+
+            <entry>1.27</entry>
+
+            <entry>Gtk-doc is a set of scripts that extract specially
+            formatted comments from glib-based software and produce a set of
+            html documentation files from them</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>harfbuzz</entry>
+
+            <entry>1.7.5</entry>
+
+            <entry>HarfBuzz is an OpenType text shaping engine.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>hdparm</entry>
+
+            <entry>9.53</entry>
+
+            <entry>hdparm is a Linux shell utility for viewing and
+            manipulating various IDE drive and driver parameters.</entry>
+
+            <entry>BSD, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>icu</entry>
+
+            <entry>60.2</entry>
+
+            <entry>The International Component for Unicode (ICU) is a mature
+            portable set of C/C++ and Java libraries for Unicode support
+            software internationalization (I18N) and globalization (G11N)
+            giving applications the same results on all platforms.</entry>
+
+            <entry>ICU</entry>
+          </row>
+
+          <row>
+            <entry>inputproto</entry>
+
+            <entry>2.3.2</entry>
+
+            <entry>This package provides the wire protocol for the X Input
+            extension. The extension supports input devices other then the
+            core X keyboard and pointer.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>intel-vaapi-driver</entry>
+
+            <entry>2.1.0</entry>
+
+            <entry>intel-vaapi-driver is the VA-API implementation for Intel
+            G45 chipsets and Intel HD Graphics for Intel Core processor
+            family.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>intltool</entry>
+
+            <entry>0.51.0</entry>
+
+            <entry>Utility scripts for internationalizing XML.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>iso-codes</entry>
+
+            <entry>3.77</entry>
+
+            <entry>ISO language territory currency script codes and their
+            translations.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>iw</entry>
+
+            <entry>4.14</entry>
+
+            <entry>iw is a new nl80211 based CLI configuration utility for
+            wireless devices. It supports almost all new drivers that have
+            been added to the kernel recently.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>json-c</entry>
+
+            <entry>0.13</entry>
+
+            <entry>JSON-C implements a reference counting object model that
+            allows you to easily construct JSON objects in C.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>kbd</entry>
+
+            <entry>2.0.4</entry>
+
+            <entry>Keytable files and keyboard utilities.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>kbproto</entry>
+
+            <entry>1.0.7</entry>
+
+            <entry>This package provides the wire protocol for the X Keyboard
+            extension. This extension is used to control options related to
+            keyboard handling and layout.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>kern-tools</entry>
+
+            <entry>0.2</entry>
+
+            <entry>Tools for managing Yocto Project style branched
+            kernels.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>keymaps</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Keymaps and initscript to set the keymap on bootup.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>kmod</entry>
+
+            <entry>25</entry>
+
+            <entry>kmod is a set of tools to handle common tasks with Linux
+            kernel modules like insert remove list check properties resolve
+            dependencies and aliases.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>ldconfig</entry>
+
+            <entry>2.12.1</entry>
+
+            <entry>A standalone native ldconfig build.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>less</entry>
+
+            <entry>529</entry>
+
+            <entry>Less is a program similar to more i.e. a terminal based
+            program for viewing text files and the output from other programs.
+            Less offers many features beyond those that more does.</entry>
+
+            <entry>GPL-3.0, BSD-2-Clause</entry>
+          </row>
+
+          <row>
+            <entry>libaio</entry>
+
+            <entry>0.3.110</entry>
+
+            <entry>Asynchronous input/output library that uses the kernels
+            native interface</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libarchive</entry>
+
+            <entry>3.3.2</entry>
+
+            <entry>C library and command-line tools for reading and writing
+            tar cpio zip ISO and other archive formats</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libatomic-ops</entry>
+
+            <entry>7.6.2</entry>
+
+            <entry>A library for atomic integer operations.</entry>
+
+            <entry>GPL-2.0, MIT</entry>
+          </row>
+
+          <row>
+            <entry>libcap</entry>
+
+            <entry>2.25</entry>
+
+            <entry>Library for getting/setting POSIX.1e capabilities.</entry>
+
+            <entry>BSD, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>libcgroup</entry>
+
+            <entry>0.41</entry>
+
+            <entry>libcgroup is a library that abstracts the control group
+            file system in Linux. Control groups allow you to limit account
+            and isolate resource usage (CPU memory disk I/O etc.) of groups of
+            processes.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libcheck</entry>
+
+            <entry>0.12.0</entry>
+
+            <entry>Check - unit testing framework for C code.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libcroco</entry>
+
+            <entry>0.6.12</entry>
+
+            <entry>Cascading Style Sheet (CSS) parsing and manipulation
+            toolkit.</entry>
+
+            <entry>LGPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libdaemon</entry>
+
+            <entry>0.14</entry>
+
+            <entry>Lightweight C library which eases the writing of UNIX
+            daemons.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libdrm</entry>
+
+            <entry>2.4.91</entry>
+
+            <entry>"The runtime library for accessing the kernel DRM services.
+            DRM stands for \""Direct Rendering Manager\"" which is the kernel
+            portion of the \""Direct Rendering Infrastructure\"" (DRI). DRI is
+            required for many hardware accelerated OpenGL drivers."</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>liberation-fonts</entry>
+
+            <entry>2.00.1</entry>
+
+            <entry>The Liberation(tm) Fonts is a font family originally
+            created by Ascender(c) which aims at metric compatibility with
+            Arial Times New Roman Courier New.</entry>
+
+            <entry>OFL-1.1</entry>
+          </row>
+
+          <row>
+            <entry>libevdev</entry>
+
+            <entry>1.5.8</entry>
+
+            <entry>Wrapper library for evdev devices.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libevent</entry>
+
+            <entry>2.1.8</entry>
+
+            <entry>An asynchronous event notification library.</entry>
+
+            <entry>BSD, MIT</entry>
+          </row>
+
+          <row>
+            <entry>libffi</entry>
+
+            <entry>3.2.1</entry>
+
+            <entry>The `libffi' library provides a portable high level
+            programming interface to various calling conventions. This allows
+            a programmer to call any function specified by a call interface
+            description at run time. FFI stands for Foreign Function
+            Interface. A foreign function interface is the popular name for
+            the interface that allows code written in one language to call
+            code written in another language. The `libffi' library really only
+            provides the lowest machine dependent layer of a fully featured
+            foreign function interface. A layer must exist above `libffi' that
+            handles type conversions for values passed between the two
+            languages.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libgcc</entry>
+
+            <entry>7.3.0</entry>
+
+            <entry>GNU cc and gcc C compilers.</entry>
+
+            <entry>GPL-3.0-with-GCC-exception, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>libgcrypt</entry>
+
+            <entry>1.8.2</entry>
+
+            <entry>General purpose cryptographic library based on the code
+            from GnuPG.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>libgpg-error</entry>
+
+            <entry>1.27</entry>
+
+            <entry>Small library that defines common error values for all
+            GnuPG components.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libgudev</entry>
+
+            <entry>232</entry>
+
+            <entry>GObject wrapper for libudev.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libical</entry>
+
+            <entry>2.0.0</entry>
+
+            <entry>iCal and scheduling (RFC 2445 2446 2447) library.</entry>
+
+            <entry>LGPL-2.1, MPL-1.0</entry>
+          </row>
+
+          <row>
+            <entry>libidn</entry>
+
+            <entry>1.33</entry>
+
+            <entry>Implementation of the Stringprep Punycode and IDNA
+            specifications defined by the IETF Internationalized Domain Names
+            (IDN) working group.</entry>
+
+            <entry>LGPL-2.1, LGPL-3.0, GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>libinput</entry>
+
+            <entry>1.9.4</entry>
+
+            <entry>Library to handle input devices in Wayland
+            compositors.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libjpeg-turbo</entry>
+
+            <entry>1.5.3</entry>
+
+            <entry>libjpeg-turbo is a derivative of libjpeg that uses SIMD
+            instructions (MMX SSE2 NEON) to accelerate baseline JPEG
+            compression and decompression</entry>
+
+            <entry>BSD-3-Clause</entry>
+          </row>
+
+          <row>
+            <entry>libmpc</entry>
+
+            <entry>1.1.0</entry>
+
+            <entry>Mpc is a C library for the arithmetic of complex numbers
+            with arbitrarily high precision and correct rounding of the
+            result. It is built upon and follows the same principles as
+            Mpfr</entry>
+
+            <entry>LGPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>libnewt</entry>
+
+            <entry>0.52.20</entry>
+
+            <entry>Newt is a programming library for color text mode widget
+            based user interfaces. Newt can be used to add stacked windows
+            entry widgets checkboxes radio buttons labels plain text fields
+            scrollbars etc. to text mode user interfaces. This package also
+            contains the shared library needed by programs built with newt as
+            well as a /usr/bin/dialog replacement called whiptail. Newt is
+            based on the slang library.</entry>
+
+            <entry>LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>libnfsidmap</entry>
+
+            <entry>0.25</entry>
+
+            <entry>NFS id mapping library.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libnl</entry>
+
+            <entry>3.4.0</entry>
+
+            <entry>A library for applications dealing with netlink
+            sockets.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libnss-mdns</entry>
+
+            <entry>0.10</entry>
+
+            <entry>Name Service Switch module for Multicast DNS (zeroconf)
+            name resolution.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libogg</entry>
+
+            <entry>1.3.3</entry>
+
+            <entry>libogg is the bitstream and framing library for the Ogg
+            project. It provides functions which are necessary to codec
+            libraries like libvorbis.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libpciaccess</entry>
+
+            <entry>0.14</entry>
+
+            <entry>libpciaccess provides functionality for X to access the PCI
+            bus and devices in a platform-independent way.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libpcre</entry>
+
+            <entry>8.42</entry>
+
+            <entry>The PCRE library is a set of functions that implement
+            regular expression pattern matching using the same syntax and
+            semantics as Perl 5. PCRE has its own native API as well as a set
+            of wrapper functions that correspond to the POSIX regular
+            expression API.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libpipeline</entry>
+
+            <entry>1.5.0</entry>
+
+            <entry>This is a C library for setting up and running pipelines of
+            processes without needing to involve shell command-line parsing
+            which is often error-prone and insecure.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>libpng</entry>
+
+            <entry>1.6.34</entry>
+
+            <entry>PNG image format decoding library.</entry>
+
+            <entry>Libpng</entry>
+          </row>
+
+          <row>
+            <entry>libpthread-stubs</entry>
+
+            <entry>0.4</entry>
+
+            <entry>This library provides weak aliases for pthread functions
+            not provided in libc or otherwise available by default.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>librsvg</entry>
+
+            <entry>2.40.20</entry>
+
+            <entry>Library for rendering SVG files.</entry>
+
+            <entry>LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>libsamplerate0</entry>
+
+            <entry>0.1.9</entry>
+
+            <entry>Audio Sample Rate Conversion library.</entry>
+
+            <entry>BSD-2-Clause</entry>
+          </row>
+
+          <row>
+            <entry>libsdl</entry>
+
+            <entry>1.2.15</entry>
+
+            <entry>Simple DirectMedia Layer is a cross-platform multimedia
+            library designed to provide low level access to audio keyboard
+            mouse joystick 3D hardware via OpenGL and 2D video
+            framebuffer.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libsndfile1</entry>
+
+            <entry>1.0.28</entry>
+
+            <entry>Audio format Conversion library.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libtheora</entry>
+
+            <entry>1.1.1</entry>
+
+            <entry>The libtheora reference implementation provides the
+            standard encoder and decoder under a BSD license.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libtirpc</entry>
+
+            <entry>1.0.2</entry>
+
+            <entry>Libtirpc is a port of Suns Transport-Independent RPC
+            library to Linux</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libtool</entry>
+
+            <entry>2.4.6</entry>
+
+            <entry>This is GNU libtool a generic library support script.
+            Libtool hides the complexity of generating special library types
+            (such as shared libraries) behind a consistent interface.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libunistring</entry>
+
+            <entry>0.9.9</entry>
+
+            <entry>Text files are nowadays usually encoded in Unicode and may
+            consist of very different scripts from Latin letters to Chinese
+            Hanzi with many kinds of special characters accents right-to-left
+            writing marks hyphens Roman numbers and much more. But the POSIX
+            platform APIs for text do not contain adequate functions for
+            dealing with particular properties of many Unicode characters. In
+            fact the POSIX APIs for text have several assumptions at their
+            base which don't hold for Unicode text. This library provides
+            functions for manipulating Unicode strings and for manipulating C
+            strings according to the Unicode standard. This package contains
+            documentation.</entry>
+
+            <entry>LGPL-3.0, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>libunwind</entry>
+
+            <entry>1.2.1</entry>
+
+            <entry>a portable and efficient C programming interface (API) to
+            determine the call-chain of a program</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>liburcu</entry>
+
+            <entry>0.10.1</entry>
+
+            <entry>Userspace RCU (read-copy-update) library.</entry>
+
+            <entry>LGPL-2.1, MIT</entry>
+          </row>
+
+          <row>
+            <entry>libusb-compat</entry>
+
+            <entry>0.1.5</entry>
+
+            <entry>libusb-0.1 compatible layer for libusb1 a drop-in
+            replacement that aims to look feel and behave exactly like
+            libusb-0.1</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libusb1</entry>
+
+            <entry>1.0.21</entry>
+
+            <entry>Userspace library to access USB (version 1.0).</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>libva</entry>
+
+            <entry>2.1.0</entry>
+
+            <entry>Video Acceleration API (VA API) is a library (libVA) and
+            API specification which enables and provides access to graphics
+            hardware (GPU) acceleration for video processing on Linux and UNIX
+            based operating systems. Accelerated processing includes video
+            decoding video encoding subpicture blending and rendering. The
+            specification was originally designed by Intel for its GMA
+            (Graphics Media Accelerator) series of GPU hardware the API is
+            however not limited to GPUs or Intel specific hardware as other
+            hardware and manufacturers can also freely use this API for
+            hardware accelerated video decoding.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libvorbis</entry>
+
+            <entry>1.3.5</entry>
+
+            <entry>Ogg Vorbis is a high-quality lossy audio codec that is free
+            of intellectual property restrictions. libvorbis is the main
+            vorbis codec library.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libwebp</entry>
+
+            <entry>0.6.1</entry>
+
+            <entry>WebP is a method of lossy and lossless compression that can
+            be used on a large variety of photographic translucent and
+            graphical images found on the web. The degree of lossy compression
+            is adjustable so a user can choose the trade-off between file size
+            and image quality. WebP typically achieves an average of 30% more
+            compression than JPEG and JPEG 2000 without loss of image
+            quality.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>libx11</entry>
+
+            <entry>1.6.5</entry>
+
+            <entry>This package provides a client interface to the X Window
+            System otherwise known as 'Xlib'. It provides a complete API for
+            the basic functions of the window system.</entry>
+
+            <entry>MIT, BSD</entry>
+          </row>
+
+          <row>
+            <entry>libxau</entry>
+
+            <entry>1.0.8</entry>
+
+            <entry>libxau provides the main interfaces to the X11
+            authorisation handling which controls authorisation for X
+            connections both client-side and server-side.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxcb</entry>
+
+            <entry>1.12</entry>
+
+            <entry>The X protocol C-language Binding (XCB) is a replacement
+            for Xlib featuring a small footprint latency hiding direct access
+            to the protocol improved threading support and
+            extensibility.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxdmcp</entry>
+
+            <entry>1.1.2</entry>
+
+            <entry>The purpose of the X Display Manager Control Protocol
+            (XDMCP) is to provide a uniform mechanism for an autonomous
+            display to request login service from a remote host. An X terminal
+            (screen keyboard mouse processor network interface) is a prime
+            example of an autonomous display.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxext</entry>
+
+            <entry>1.3.3</entry>
+
+            <entry>libXext provides an X Window System client interface to
+            several extensions to the X protocol. The supported protocol
+            extensions are DOUBLE-BUFFER DPMS Extended-Visual-Information LBX
+            MIT_SHM MIT_SUNDRY-NONSTANDARD Multi-Buffering SECURITY SHAPE SYNC
+            TOG-CUP XC-APPGROUP XC-MISC XTEST. libXext also provides a small
+            set of utility functions to aid authors of client APIs for X
+            protocol extensions.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxkbcommon</entry>
+
+            <entry>0.8.0</entry>
+
+            <entry>libxkbcommon is a keymap compiler and support library which
+            processes a reduced subset of keymaps as defined by the XKB
+            specification.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxml-parser-perl</entry>
+
+            <entry>2.44</entry>
+
+            <entry>XML::Parser - A perl module for parsing XML
+            documents.</entry>
+
+            <entry>Artistic-1.0, GPL-1.0</entry>
+          </row>
+
+          <row>
+            <entry>libxml2</entry>
+
+            <entry>2.9.7</entry>
+
+            <entry>The XML Parser Library allows for manipulation of XML
+            files. Libxml2 exports Push and Pull type parser interfaces for
+            both XML and HTML. It can do DTD validation at parse time on a
+            parsed document instance or with an arbitrary DTD. Libxml2
+            includes complete XPath XPointer and Xinclude implementations. It
+            also has a SAX like interface which is designed to be compatible
+            with Expat.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxrandr</entry>
+
+            <entry>1.5.1</entry>
+
+            <entry>The X Resize Rotate and Reflect Extension called RandR for
+            short brings the ability to resize rotate and reflect the root
+            window of a screen. It is based on the X Resize and Rotate
+            Extension as specified in the Proceedings of the 2001 Usenix
+            Technical Conference [RANDR].</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxrender</entry>
+
+            <entry>0.9.10</entry>
+
+            <entry>The X Rendering Extension (Render) introduces digital image
+            composition as the foundation of a new rendering model within the
+            X Window System. Rendering geometric figures is accomplished by
+            client-side tessellation into either triangles or trapezoids. Text
+            is drawn by loading glyphs into the server and rendering sets of
+            them.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>libxslt</entry>
+
+            <entry>1.1.32</entry>
+
+            <entry>GNOME XSLT library.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>linux-firmware</entry>
+
+            <entry>1.0.0</entry>
+
+            <entry>Firmware files for use with Linux kernel.</entry>
+
+            <entry>Redistributable binaries</entry>
+          </row>
+
+          <row>
+            <entry>linux-intel</entry>
+
+            <entry>4.14.66</entry>
+
+            <entry>Linux kernel.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>linux-libc-headers</entry>
+
+            <entry>4.15.7</entry>
+
+            <entry>Sanitized set of kernel headers for the C library's
+            use.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>lms8</entry>
+
+            <entry>8.0.0-7</entry>
+
+            <entry>Intel Local Manageability Service allows applications to
+            access the Intel Active Management Technology (AMT) firmware via
+            the Intel Management Engine Interface (MEI).</entry>
+
+            <entry>BSD_LMS</entry>
+          </row>
+
+          <row>
+            <entry>lrzsz</entry>
+
+            <entry>0.12.20</entry>
+
+            <entry>Lrzsz is a cosmetically modified zmodem/ymodem/xmodem
+            package built from the public-domain version of Chuck Forsberg's
+            rzsz package. These programs use error correcting protocols
+            ({zxy}modem) to send (sz sx sb) and receive (rz rx rb) files over
+            a dial-in serial port from a variety of programs running under
+            various operating systems.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>lsb</entry>
+
+            <entry>5.0</entry>
+
+            <entry>LSB support for OpenEmbedded.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>lsbinitscripts</entry>
+
+            <entry>9.79</entry>
+
+            <entry>SysV init scripts which are only used in an LSB
+            image.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>lttng-modules</entry>
+
+            <entry>2.10.6</entry>
+
+            <entry>The lttng-modules 2.0 package contains the kernel tracer
+            modules</entry>
+
+            <entry>LGPL-2.1, GPL-2.0, MIT</entry>
+          </row>
+
+          <row>
+            <entry>lttng-tools</entry>
+
+            <entry>2.9.5</entry>
+
+            <entry>The Linux trace toolkit is a suite of tools designed to
+            extract program execution details from the Linux operating system
+            and interpret them.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>lttng-ust</entry>
+
+            <entry>2.10.1</entry>
+
+            <entry>The LTTng UST 2.x package contains the userspace tracer
+            library to trace userspace codes.</entry>
+
+            <entry>LGPL-2.1, MIT, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>lzip</entry>
+
+            <entry>1.19</entry>
+
+            <entry>Lossless data compressor based on the LZMA
+            algorithm.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>lzo</entry>
+
+            <entry>2.10</entry>
+
+            <entry>Lossless data compression library.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>lzop</entry>
+
+            <entry>1.03</entry>
+
+            <entry>lzop is a compression utility which is designed to be a
+            companion to gzip. \nIt is based on the LZO data compression
+            library and its main advantages over \ngzip are much higher
+            compression and decompression speed at the cost of some
+            \ncompression ratio. The lzop compression utility was designed
+            with the goals \nof reliability speed portability and with
+            reasonable drop-in compatibility \nto gzip.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>m4</entry>
+
+            <entry>1.4.18</entry>
+
+            <entry>GNU m4 is an implementation of the traditional Unix macro
+            processor. It is mostly SVR4 compatible although it has some
+            extensions (for example handling more than 9 positional parameters
+            to macros). GNU M4 also has built-in functions for including files
+            running shell commands doing arithmetic etc.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>make-mod-scripts</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Build tools needed by external modules.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>make</entry>
+
+            <entry>4.2.1</entry>
+
+            <entry>Make is a tool which controls the generation of executables
+            and other non-source files of a program from the program's source
+            files. Make gets its knowledge of how to build your program from a
+            file called the makefile which lists each of the non-source files
+            and how to compute it from other files.</entry>
+
+            <entry>GPL-3.0, LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>makedepend</entry>
+
+            <entry>1.0.5</entry>
+
+            <entry>The makedepend program reads each sourcefile in sequence
+            and parses it like a C-preprocessor processing all #include
+            #define #undef #ifdef #ifndef #endif #if #elif and #else
+            directives so that it can correctly tell which #include directives
+            would be used in a compilation. Any #include directives can
+            reference files having other #include directives and parsing will
+            occur in these files as well.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>makedevs</entry>
+
+            <entry>1.0.1</entry>
+
+            <entry>Tool for creating device nodes.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>man-db</entry>
+
+            <entry>2.8.1</entry>
+
+            <entry>An implementation of the standard Unix documentation system
+            accessed using the man command.</entry>
+
+            <entry>LGPL-2.1, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>mesa</entry>
+
+            <entry>17.3.8</entry>
+
+            <entry>Mesa is an open-source implementation of the OpenGL
+            specification - a system for rendering interactive 3D graphics. A
+            variety of device drivers allows Mesa to be used in many different
+            environments ranging from software emulation to complete hardware
+            acceleration for modern GPUs. Mesa is used as part of the overall
+            Direct Rendering Infrastructure and X.org environment.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>meson</entry>
+
+            <entry>0.44.1</entry>
+
+            <entry>A high performance build system.</entry>
+
+            <entry>Apache-2.0</entry>
+          </row>
+
+          <row>
+            <entry>mingetty</entry>
+
+            <entry>1.08</entry>
+
+            <entry>Compact getty terminal handler for virtual consoles
+            only.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>mklibs</entry>
+
+            <entry>0.1.43</entry>
+
+            <entry>mklibs produces cut-down shared libraries that contain only
+            the routines required by a particular set of executables.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>mobile-broadband-provider-info</entry>
+
+            <entry>20170310</entry>
+
+            <entry>Mobile Broadband Service Provider Database.</entry>
+
+            <entry>PD</entry>
+          </row>
+
+          <row>
+            <entry>mpfr</entry>
+
+            <entry>3.1.5</entry>
+
+            <entry>C library for multiple-precision floating-point
+            computations with exact rounding.</entry>
+
+            <entry>LGPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>mtdev</entry>
+
+            <entry>1.1.5</entry>
+
+            <entry>mtdev is a library which transforms all variants of kernel
+            multitouch events to the slotted type B protocol. The events put
+            into mtdev may be from any MT device specifically type A without
+            contact tracking type A with contact tracking or type B with
+            contact tracking</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>nasm</entry>
+
+            <entry>2.13.03</entry>
+
+            <entry>General-purpose x86 assembler.</entry>
+
+            <entry>BSD-2-Clause</entry>
+          </row>
+
+          <row>
+            <entry>ncurses</entry>
+
+            <entry>6.0</entry>
+
+            <entry>SVr4 and XSI-Curses compatible curses library and terminfo
+            tools including tic infocmp captoinfo. Supports color multiple
+            highlights forms-drawing characters and automatic recognition of
+            keypad and function-key sequences. Extensions include resizable
+            windows and mouse support on both xterm and Linux console using
+            the gpm library.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>neard</entry>
+
+            <entry>0.16</entry>
+
+            <entry>A daemon for the Linux Near Field Communication
+            stack</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>netbase</entry>
+
+            <entry>5.4</entry>
+
+            <entry>This package provides the necessary infrastructure for
+            basic TCP/IP based networking</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>nettle</entry>
+
+            <entry>3.4</entry>
+
+            <entry>A low level cryptographic library.</entry>
+
+            <entry>LGPL-3.0, GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>nfs-utils</entry>
+
+            <entry>2.1.1</entry>
+
+            <entry>The nfs-utils package provides a daemon for the kernel NFS
+            server and related tools.</entry>
+
+            <entry>MIT, GPL-2.0, BSD</entry>
+          </row>
+
+          <row>
+            <entry>ninja</entry>
+
+            <entry>1.8.2</entry>
+
+            <entry>Ninja is a small build system with a focus on
+            speed..</entry>
+
+            <entry>Apache-2.0</entry>
+          </row>
+
+          <row>
+            <entry>nodejs</entry>
+
+            <entry>8.9.4</entry>
+
+            <entry>nodeJS Evented I/O for V8 JavaScript</entry>
+
+            <entry>MIT, BSD, Artistic-2.0</entry>
+          </row>
+
+          <row>
+            <entry>nspr</entry>
+
+            <entry>4.19</entry>
+
+            <entry>Netscape Portable Runtime Library.</entry>
+
+            <entry>GPL-2.0, MPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>nss</entry>
+
+            <entry>3.35</entry>
+
+            <entry>Network Security Services (NSS) is a set of libraries
+            designed to support cross-platform development of security-enabled
+            client and server applications. Applications built with NSS can
+            support SSL v2 and v3 TLS PKCS 5 PKCS 7 PKCS 11 PKCS 12 S/MIME
+            X.509 v3 certificates and other security standards.</entry>
+
+            <entry>MPL-2.0, GPL-2.0, MPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>ofono</entry>
+
+            <entry>1.22</entry>
+
+            <entry>oFono is a stack for mobile telephony devices on Linux.
+            oFono supports speaking to telephony devices through specific
+            drivers or with generic AT commands.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>openssh</entry>
+
+            <entry>7.6p1</entry>
+
+            <entry>Secure rlogin/rsh/rcp/telnet replacement (OpenSSH) Ssh
+            (Secure Shell) is a program for logging into a remote machine and
+            for executing commands on a remote machine.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>openssl</entry>
+
+            <entry>1.0.2p</entry>
+
+            <entry>Secure Socket Layer (SSL) binary and related cryptographic
+            tools.</entry>
+
+            <entry>OpenSSL</entry>
+          </row>
+
+          <row>
+            <entry>opkg-utils</entry>
+
+            <entry>0.3.6</entry>
+
+            <entry>Additional utilities for the opkg package manager.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>orc</entry>
+
+            <entry>0.4.28</entry>
+
+            <entry>Optimised Inner Loop Runtime Compiler.</entry>
+
+            <entry>BSD-2-Clause, BSD-3-Clause</entry>
+          </row>
+
+          <row>
+            <entry>os-release</entry>
+
+            <entry>1.0</entry>
+
+            <entry>The /etc/os-release file contains operating system
+            identification data.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>ossp-uuid</entry>
+
+            <entry>1.6.2</entry>
+
+            <entry>OSSP uuid is a ISO-C:1999 application programming interface
+            (API) and corresponding command line interface (CLI) for the
+            generation of DCE 1.1 ISO/IEC 11578:1996 and RFC 4122 compliant
+            Universally Unique Identifier (UUID). It supports DCE 1.1 variant
+            UUIDs of version 1 (time and node based) version 3 (name based
+            MD5) version 4 (random number based) and version 5 (name based
+            SHA-1).</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>ovmf</entry>
+
+            <entry>git</entry>
+
+            <entry>OVMF is an EDK II based project to enable UEFI support for
+            Virtual Machines. OVMF contains sample UEFI firmware for QEMU and
+            KVM</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-base</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Merge machine and distro options to create a basic machine
+            task/package.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-boot</entry>
+
+            <entry>1.0</entry>
+
+            <entry>The minimal set of packages required to boot the
+            system</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-buildessential</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Essential build dependencies.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-eclipse-debug</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Remote debugging tools for Eclipse integration.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-nfs</entry>
+
+            <entry>1.0</entry>
+
+            <entry>NFS package groups.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-sdk</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Software development tools.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-ssh-openssh</entry>
+
+            <entry>1.0</entry>
+
+            <entry>OpenSSH SSH client/server.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-standalone-sdk-target</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Target packages for the standalone SDK.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-tools-debug</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Debugging tools.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>packagegroup-core-tools-profile</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Profiling tools.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>pango</entry>
+
+            <entry>1.40.14</entry>
+
+            <entry>Pango is a library for laying out and rendering of text
+            with an emphasis on internationalization. Pango can be used
+            anywhere that text layout is needed though most of the work on
+            Pango so far has been done in the context of the GTK+ widget
+            toolkit. Pango forms the core of text and font handling for
+            GTK+-2.x.</entry>
+
+            <entry>LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>patch</entry>
+
+            <entry>2.7.6</entry>
+
+            <entry>patch takes a patch file containing a difference listing
+            produced by the diff program and applies those differences to one
+            or more original files producing patched versions.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>pciutils</entry>
+
+            <entry>3.5.6</entry>
+
+            <entry>The PCI Utilities package contains a library for portable
+            access to PCI bus configuration space and several utilities based
+            on this library.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>perf</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Performance counters for Linux are a new kernel-based
+            subsystem that provide a framework for all things performance
+            analysis. It covers hardware level (CPU/PMU Performance Monitoring
+            Unit) features and software features (software counters
+            tracepoints) as well.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>perl</entry>
+
+            <entry>5.24.1</entry>
+
+            <entry>Perl scripting language.</entry>
+
+            <entry>Artistic-1.0, GPL-1.0</entry>
+          </row>
+
+          <row>
+            <entry>pigz</entry>
+
+            <entry>2.4</entry>
+
+            <entry>pigz which stands for parallel implementation of gzip is a
+            fully functional replacement for gzip that exploits multiple
+            processors and multiple cores to the hilt when compressing data.
+            pigz was written by Mark Adler and uses the zlib and pthread
+            libraries.</entry>
+
+            <entry>Zlib, Apache-2.0</entry>
+          </row>
+
+          <row>
+            <entry>pixman</entry>
+
+            <entry>0.34.0</entry>
+
+            <entry>Pixman provides a library for manipulating pixel regions --
+            a set of Y-X banded rectangles image compositing using the
+            Porter/Duff model and implicit mask generation for geometric
+            primitives including trapezoids triangles and rectangles.</entry>
+
+            <entry>MIT, PD</entry>
+          </row>
+
+          <row>
+            <entry>pkgconfig</entry>
+
+            <entry>0.29.2</entry>
+
+            <entry>pkg-config is a helper tool used when compiling
+            applications and libraries. It helps determined the correct
+            compiler/link options. It is also language-agnostic.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>popt</entry>
+
+            <entry>1.16</entry>
+
+            <entry>Library for parsing command line options.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>powertop</entry>
+
+            <entry>2.9</entry>
+
+            <entry>Linux tool to diagnose issues with power consumption and
+            power management.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>prelink</entry>
+
+            <entry>1.0</entry>
+
+            <entry>The prelink package contains a utility which modifies ELF
+            shared libraries and executables so that far fewer relocations
+            need to be resolved at runtime and thus programs come up
+            faster.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>procps</entry>
+
+            <entry>3.3.12</entry>
+
+            <entry>Procps contains a set of system utilities that provide
+            system information about processes using the /proc filesystem. The
+            package includes the programs ps top vmstat w kill and
+            skill.</entry>
+
+            <entry>GPL-2.0, LGPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>pseudo</entry>
+
+            <entry>1.9.0</entry>
+
+            <entry>Pseudo gives fake root capabilities to a normal
+            user.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>ptest-runner</entry>
+
+            <entry>2.1.1</entry>
+
+            <entry>The ptest-runner2 package installs a ptest-runner program
+            which loops through all installed ptest test suites and runs them
+            in sequence.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>pulseaudio</entry>
+
+            <entry>11.1</entry>
+
+            <entry>Sound server for Linux and Unix-like operating
+            systems.</entry>
+
+            <entry>LGPL-2.1, MIT, BSD-3-Clause</entry>
+          </row>
+
+          <row>
+            <entry>python</entry>
+
+            <entry>2.7.14</entry>
+
+            <entry>The Python Programming Language.</entry>
+
+            <entry>Python-2.0</entry>
+          </row>
+
+          <row>
+            <entry>python3-dbus</entry>
+
+            <entry>1.2.6</entry>
+
+            <entry>Python bindings for the DBus inter-process communication
+            system.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>python3-mako</entry>
+
+            <entry>1.0.7</entry>
+
+            <entry>Templating library for Python.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>python3-pycairo</entry>
+
+            <entry>1.15.6</entry>
+
+            <entry>Python bindings for the Cairo canvas library.</entry>
+
+            <entry>LGPL-2.1, MPL-1.1</entry>
+          </row>
+
+          <row>
+            <entry>python3-pygobject</entry>
+
+            <entry>3.28.1</entry>
+
+            <entry>Python GObject bindings.</entry>
+
+            <entry>LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>python3-setuptools</entry>
+
+            <entry>39.0.0</entry>
+
+            <entry>Download build install upgrade and uninstall Python
+            packages.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>python3</entry>
+
+            <entry>3.5.5</entry>
+
+            <entry>The Python Programming Language.</entry>
+
+            <entry>Python-2.0</entry>
+          </row>
+
+          <row>
+            <entry>qemu-helper</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Helper utilities needed by the runqemu script.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>qemu</entry>
+
+            <entry>2.11.1</entry>
+
+            <entry>Fast open source processor emulator.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>qemuwrapper</entry>
+
+            <entry>1.0</entry>
+
+            <entry>QEMU wrapper script.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>qtbase</entry>
+
+            <entry>5.10.1</entry>
+
+            <entry>Qt 5 Qtbase Component.</entry>
+
+            <entry>GFDL-1.3 &amp; BSD &amp; ( GPL-3.0 &amp; The-Qt-Company-GPL-Exception-1.0 | The-Qt-Company-Commercial ) &amp; ( GPL-2.0+ | LGPL-3.0 | The-Qt-Company-Commercial )</entry>
+          </row>
+
+          <row>
+            <entry>qtdeclarative</entry>
+
+            <entry>5.10.1</entry>
+
+            <entry>qtdeclarative-native version
+            5.10.1+gitAUTOINC+3e91062877-r0.</entry>
+
+            <entry>GFDL-1.3 &amp; BSD &amp; (GPL-3.0 &amp; The-Qt-Company-GPL-Exception-1.0 | The-Qt-Company-Commercial ) &amp; ( GPL-2.0+ | LGPL-3.0 | The-Qt-Company-Commercial )</entry>
+          </row>
+
+          <row>
+            <entry>qtgraphicaleffects</entry>
+
+            <entry>5.10.1</entry>
+
+            <entry>Qt 5 Graphical Effects.</entry>
+
+            <entry>GFDL-1.3 &amp; BSD &amp; (GPL-3.0 &amp; The-Qt-Company-GPL-Exception-1.0 | The-Qt-Company-Commercial ) &amp; ( GPL-2.0+ | LGPL-3.0 | The-Qt-Company-Commercial )</entry>
+          </row>
+
+          <row>
+            <entry>qtmultimedia</entry>
+
+            <entry>5.10.1</entry>
+
+            <entry>Multimedia (audio, video, radio, camera) library for the
+            Qt5 framework.</entry>
+
+            <entry>GFDL-1.3 &amp; BSD &amp; ( GPL-3.0 &amp; The-Qt-Company-GPL-Exception-1.0 | The-Qt-Company-Commercial ) &amp; ( GPL-2.0+ | LGPL-3.0 | The-Qt-Company-Commercial)</entry>
+          </row>
+
+          <row>
+            <entry>qtwayland</entry>
+
+            <entry>5.10.1</entry>
+
+            <entry>qtwayland-native version
+            5.10.1+gitAUTOINC+db36bc0d9c-r0.</entry>
+
+            <entry>GFDL-1.3 &amp; BSD &amp; ( GPL-3.0 &amp; The-Qt-Company-GPL-Exception-1.0 | The-Qt-Company-Commercial ) &amp; ( GPL-2.0+ | LGPL-3.0 | The-Qt-Company-Commercial)</entry>
+          </row>
+
+          <row>
+            <entry>qtxmlpatterns</entry>
+
+            <entry>5.10.1</entry>
+
+            <entry>qtxmlpatterns-native version
+            5.10.1+gitAUTOINC+7c4113d6e6-r0.</entry>
+
+            <entry>GFDL-1.3 &amp; BSD &amp; ( GPL-3.0 &amp; The-Qt-Company-GPL-Exception-1.0 | The-Qt-Company-Commercial ) &amp; ( GPL-2.0+ | LGPL-3.0 | The-Qt-Company-Commercial )</entry>
+          </row>
+
+          <row>
+            <entry>quilt</entry>
+
+            <entry>0.65</entry>
+
+            <entry>Tool for working with series of patches.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>quota</entry>
+
+            <entry>4.04</entry>
+
+            <entry>Tools for monitoring &amp; limiting user disk usage per
+            filesystem.</entry>
+
+            <entry>BSD, GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>randrproto</entry>
+
+            <entry>1.5.0</entry>
+
+            <entry>This package provides the wire protocol for the X Resize
+            Rotate and Reflect extension. This extension provides the ability
+            to resize rotate and reflect the root window of a screen.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>re2c</entry>
+
+            <entry>0.16</entry>
+
+            <entry>Tool for writing very fast and very flexible
+            scanners.</entry>
+
+            <entry>PD</entry>
+          </row>
+
+          <row>
+            <entry>readline</entry>
+
+            <entry>7.0</entry>
+
+            <entry>The GNU Readline library provides a set of functions for
+            use by applications that allow users to edit command lines as they
+            are typed in. Both Emacs and vi editing modes are available. The
+            Readline library includes additional functions to maintain a list
+            of previously-entered command lines to recall and perhaps reedit
+            those lines and perform csh-like history expansion on previous
+            commands.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>renderproto</entry>
+
+            <entry>0.11.1</entry>
+
+            <entry>This package provides the wire protocol for the X Rendering
+            extension. This is the basis the image composition within the X
+            window system.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>rpcbind</entry>
+
+            <entry>0.2.4</entry>
+
+            <entry>The rpcbind utility is a server that converts RPC program
+            numbers into universal addresses.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>rpm</entry>
+
+            <entry>4.14.1</entry>
+
+            <entry>The RPM Package Manager (RPM) is a powerful command line
+            driven package management system capable of installing
+            uninstalling verifying querying and updating software packages.
+            Each software package consists of an archive of files along with
+            information about the package like its version a description
+            etc.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>rt-tests</entry>
+
+            <entry>1.1</entry>
+
+            <entry>Real-Time preemption testcases.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>run-postinsts</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Runs postinstall scripts on first boot of the target
+            device.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>sbc</entry>
+
+            <entry>1.3</entry>
+
+            <entry>Bluetooth low-complexity subband codec (SBC)
+            library.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>sed</entry>
+
+            <entry>4.2.2</entry>
+
+            <entry>Stream EDitor (text filtering utility).</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>setserial</entry>
+
+            <entry>2.17</entry>
+
+            <entry>setserial is a program designed to set and/or report the
+            configuration information associated with a serial port</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>shadow-securetty</entry>
+
+            <entry>4.2.1</entry>
+
+            <entry>Provider of the machine specific securetty file.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>shadow-sysroot</entry>
+
+            <entry>4.2.1</entry>
+
+            <entry>Shadow utils requirements for useradd.bbclass.</entry>
+
+            <entry>BSD, Artistic-1.0</entry>
+          </row>
+
+          <row>
+            <entry>shadow</entry>
+
+            <entry>4.2.1</entry>
+
+            <entry>Tools to change and administer password and group
+            data.</entry>
+
+            <entry>BSD, Artistic-1.0</entry>
+          </row>
+
+          <row>
+            <entry>shared-mime-info</entry>
+
+            <entry>1.9</entry>
+
+            <entry>Shared MIME type database and specification.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>slang</entry>
+
+            <entry>2.3.2</entry>
+
+            <entry>S-Lang is an interpreted language and a programming
+            library. The S-Lang language was designed so that it can be easily
+            embedded into a program to provide the program with a powerful
+            extension language. The S-Lang library provided in this package
+            provides the S-Lang extension language. S-Lang's syntax resembles
+            C which makes it easy to recode S-Lang procedures in C if you need
+            to.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>speexdsp</entry>
+
+            <entry>1.2rc3</entry>
+
+            <entry>SpeexDSP is a patent-free Open Source/Free Software DSP
+            library.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>sqlite3</entry>
+
+            <entry>3.22.0</entry>
+
+            <entry>Embeddable SQL database engine.</entry>
+
+            <entry>PD</entry>
+          </row>
+
+          <row>
+            <entry>strace</entry>
+
+            <entry>4.20</entry>
+
+            <entry>System call tracing tool.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>stress</entry>
+
+            <entry>1.0.4</entry>
+
+            <entry>Deliberately simple workload generator for POSIX systems.
+            It imposes a configurable amount of CPU memory I/O and disk stress
+            on the system.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>systemd-boot</entry>
+
+            <entry>237</entry>
+
+            <entry>systemd is a system and service manager for Linux
+            compatible with SysV and LSB init scripts. systemd provides
+            aggressive parallelization capabilities uses socket and D-Bus
+            activation for starting services offers on-demand starting of
+            daemons keeps track of processes using Linux cgroups supports
+            snapshotting and restoring of the system state maintains mount and
+            automount points and implements an elaborate transactional
+            dependency-based service control logic. It can work as a drop-in
+            replacement for sysvinit.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>systemd-bootconf</entry>
+
+            <entry>1.00</entry>
+
+            <entry>Basic systemd-boot configuration files.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>systemd-compat-units</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Enhances systemd compatilibity with existing SysVinit
+            scripts.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>systemd-serialgetty</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Serial terminal support for systemd.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>systemd-systemctl</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Wrapper for enabling systemd services.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>systemd</entry>
+
+            <entry>237</entry>
+
+            <entry>systemd is a system and service manager for Linux
+            compatible with SysV and LSB init scripts. systemd provides
+            aggressive parallelization capabilities uses socket and D-Bus
+            activation for starting services offers on-demand starting of
+            daemons keeps track of processes using Linux cgroups supports
+            snapshotting and restoring of the system state maintains mount and
+            automount points and implements an elaborate transactional
+            dependency-based service control logic. It can work as a drop-in
+            replacement for sysvinit.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>systemtap</entry>
+
+            <entry>3.2</entry>
+
+            <entry>Script-directed dynamic tracing and performance analysis
+            tool for Linux.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>tcf-agent</entry>
+
+            <entry>1.4.0</entry>
+
+            <entry>Target Communication Framework for the Eclipse IDE.</entry>
+
+            <entry>EPL-1.0, EDL-1.0</entry>
+          </row>
+
+          <row>
+            <entry>tcl</entry>
+
+            <entry>8.6.8</entry>
+
+            <entry>Tool Command Language.</entry>
+
+            <entry>tcl, BSD-3-Clause</entry>
+          </row>
+
+          <row>
+            <entry>tcp-wrappers</entry>
+
+            <entry>7.6</entry>
+
+            <entry>Tools for monitoring and filtering incoming requests for
+            tcp services.</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>texinfo-dummy</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Fake version of the texinfo utility suite.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>thermald</entry>
+
+            <entry>1.7.1</entry>
+
+            <entry>Thermal Daemon is a Linux daemon used to prevent the
+            overheating of platforms. This daemon monitors temperature and
+            applies compensation using available cooling methods.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>trace-cmd</entry>
+
+            <entry>2.7</entry>
+
+            <entry>User interface to Ftrace.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1</entry>
+          </row>
+
+          <row>
+            <entry>tzcode</entry>
+
+            <entry>2018d</entry>
+
+            <entry>tzcode timezone zoneinfo utils -- zic zdump
+            tzselect.</entry>
+
+            <entry>PD, BSD, BSD-3-Clause</entry>
+          </row>
+
+          <row>
+            <entry>tzdata</entry>
+
+            <entry>2018d</entry>
+
+            <entry>Timezone data.</entry>
+
+            <entry>PD, BSD, BSD-3-Clause</entry>
+          </row>
+
+          <row>
+            <entry>unifdef</entry>
+
+            <entry>2.11</entry>
+
+            <entry>Selectively remove #ifdef statements from sources.</entry>
+
+            <entry>BSD-2-Clause</entry>
+          </row>
+
+          <row>
+            <entry>unzip</entry>
+
+            <entry>6.0</entry>
+
+            <entry>Utilities for extracting and viewing files in .zip
+            archives.</entry>
+
+            <entry>BSD-3-Clause</entry>
+          </row>
+
+          <row>
+            <entry>update-rc.d</entry>
+
+            <entry>0.7</entry>
+
+            <entry>update-rc.d is a utility that allows the management of
+            symlinks to the initscripts in the /etc/rcN.d directory
+            structure.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>usbutils</entry>
+
+            <entry>009</entry>
+
+            <entry>Contains the lsusb utility for inspecting the devices
+            connected to the USB bus.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>util-linux</entry>
+
+            <entry>2.32</entry>
+
+            <entry>Util-linux includes a suite of basic system administration
+            utilities commonly found on most Linux systems. Some of the more
+            important utilities include disk partitioning kernel message
+            management filesystem creation and system login.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1, BSD</entry>
+          </row>
+
+          <row>
+            <entry>util-macros</entry>
+
+            <entry>1.19.1</entry>
+
+            <entry>M4 autotools macros used by various X.org programs.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>va-intel</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Video Acceleration Add-ons for Intel BSPs</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>valgrind</entry>
+
+            <entry>3.13.0</entry>
+
+            <entry>Valgrind memory debugger and instrumentation
+            framework.</entry>
+
+            <entry>GPL-2.0, BSD</entry>
+          </row>
+
+          <row>
+            <entry>volatile-binds</entry>
+
+            <entry>1.0</entry>
+
+            <entry>Volatile bind mount setup and configuration for
+            read-only-rootfs</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>vulkan</entry>
+
+            <entry>1.0.65.2</entry>
+
+            <entry>Vulkan is a new generation graphics and compute API that
+            provides efficient access to modern GPUs. These packages provide
+            only the common vendor-agnostic library loader headers and the
+            vulkaninfo utility.</entry>
+
+            <entry>Apache-2.0</entry>
+          </row>
+
+          <row>
+            <entry>wayland-protocols</entry>
+
+            <entry>1.13</entry>
+
+            <entry>Wayland protocols that add functionality not available in
+            the Wayland core protocol. Such protocols either add completely
+            new functionality or extend the functionality of some other
+            protocol either in Wayland core or some other protocol in
+            wayland-protocols.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>wayland</entry>
+
+            <entry>1.14.0</entry>
+
+            <entry>Wayland is a protocol for a compositor to talk to its
+            clients as well as a C library implementation of that protocol.
+            The compositor can be a standalone display server running on Linux
+            kernel modesetting and evdev input devices an X application or a
+            wayland client itself. The clients can be traditional applications
+            X servers (rootless or fullscreen) or other display
+            servers.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>weston</entry>
+
+            <entry>3.0.0</entry>
+
+            <entry>Weston is the reference implementation of a Wayland
+            compositor</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>which</entry>
+
+            <entry>2.21</entry>
+
+            <entry>Which is a utility that prints out the full path of the
+            executables that bash(1) would execute when the passed program
+            names would have been entered on the shell prompt. It does this by
+            using the exact same algorithm as bash.</entry>
+
+            <entry>GPL-3.0</entry>
+          </row>
+
+          <row>
+            <entry>wireless-tools</entry>
+
+            <entry>30.pre9</entry>
+
+            <entry>Tools for the Linux Standard Wireless Extension
+            Subsystem.</entry>
+
+            <entry>GPL-2.0, LGPL-2.1, MPL-1.1, BSD</entry>
+          </row>
+
+          <row>
+            <entry>wpa-supplicant</entry>
+
+            <entry>2.6</entry>
+
+            <entry>Client for Wi-Fi Protected Access (WPA).</entry>
+
+            <entry>BSD</entry>
+          </row>
+
+          <row>
+            <entry>xcb-proto</entry>
+
+            <entry>1.12</entry>
+
+            <entry>Function prototypes for the X protocol C-language Binding
+            (XCB). XCB is a replacement for Xlib featuring a small footprint
+            latency hiding direct access to the protocol improved threading
+            support and extensibility.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>xextproto</entry>
+
+            <entry>7.3.0</entry>
+
+            <entry>This package provides the wire protocol for several X
+            extensions. These protocol extensions include DOUBLE-BUFFER DPMS
+            Extended-Visual-Information LBX MIT_SHM MIT_SUNDRY-NONSTANDARD
+            Multi-Buffering SECURITY SHAPE SYNC TOG-CUP XC-APPGROUP XC-MISC
+            XTEST. In addition a small set of utility functions are also
+            available.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>xkeyboard-config</entry>
+
+            <entry>2.22</entry>
+
+            <entry>The non-arch keyboard configuration database for X Window.
+            The goal is to provide the consistent well-structured frequently
+            released open source of X keyboard configuration data for X Window
+            System implementations. The project is targeted to XKB-based
+            systems.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>xmlto</entry>
+
+            <entry>0.0.28</entry>
+
+            <entry>A shell-script tool for converting XML files to various
+            formats.</entry>
+
+            <entry>GPL-2.0</entry>
+          </row>
+
+          <row>
+            <entry>xproto</entry>
+
+            <entry>7.0.31</entry>
+
+            <entry>This package provides the basic headers for the X Window
+            System.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>xtrans</entry>
+
+            <entry>1.3.5</entry>
+
+            <entry>The X Transport Interface is intended to combine all system
+            and transport specific code into a single place. This API should
+            be used by all libraries clients and servers of the X Window
+            System. Use of this API should allow the addition of new types of
+            transports and support for new platforms without making any
+            changes to the source except in the X Transport Interface
+            code.</entry>
+
+            <entry>MIT</entry>
+          </row>
+
+          <row>
+            <entry>xz</entry>
+
+            <entry>5.2.3</entry>
+
+            <entry>Utilities for managing LZMA compressed files.</entry>
+
+            <entry>GPL-2.0, GPL-3.0-with-autoconf-exception, LGPL-2.1,
+            PD</entry>
+          </row>
+
+          <row>
+            <entry>Yocto Plugins</entry>
+
+            <entry>1.4.1.2017-
+            12061321</entry>
+
+            <entry>Yocto Project SDK Plug-in.</entry>
+
+            <entry>Eclipse Distribution License - v1.0</entry>
+          </row>
+
+          <row>
+            <entry>zlib</entry>
+
+            <entry>1.2.11</entry>
+
+            <entry>Zlib is a general-purpose patent-free lossless data
+            compression library which is used by many different
+            programs.</entry>
+
+            <entry>Zlib</entry>
+          </row>
+        </tbody>
+      </tgroup>
+    </informaltable>
+  </section>
+
+  <section id="open_source_license">
+    <title>Open Source Licenses</title>
+
+    <section id="lic_0">
+      <title>AFL-2.0</title>
+
+      <para><programlisting>
 
 The Academic Free License
  v. 2.0
@@ -1702,11 +3921,13 @@ Permission is hereby granted to copy and distribute this license without modific
 This license may not be modified without the express written permission of its
 copyright owner.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_1">
+      <title>Apache-2.0</title>
 
-<section id="lic_1">
-<title>Apache-2.0</title>
-<para><programlisting>
+      <para><programlisting>
 
 
                                  Apache License
@@ -1911,11 +4132,13 @@ copyright owner.
    See the License for the specific language governing permissions and
    limitations under the License.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_2">
-<title>Artistic-1.0</title>
-<para><programlisting>
+    <section id="lic_2">
+      <title>Artistic-1.0</title>
+
+      <para><programlisting>
 
 The Artistic License
 Preamble
@@ -2008,11 +4231,220 @@ FOR A PARTICULAR PURPOSE.
 
 The End
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="Artistic-2">
+      <title> Artistic-2.0</title>
+      <para><programlisting>
+        The Artistic License 2.0
+
+     Copyright (c) 2000-2006, The Perl Foundation.
+
+     Everyone is permitted to copy and distribute verbatim copies
+      of this license document, but changing it is not allowed.
+
+Preamble
+
+This license establishes the terms under which a given free software
+Package may be copied, modified, distributed, and/or redistributed.
+The intent is that the Copyright Holder maintains some artistic
+control over the development of that Package while still keeping the
+Package available as open source and free software.
+
+You are always permitted to make arrangements wholly outside of this
+license directly with the Copyright Holder of a given Package.  If the
+terms of this license do not permit the full use that you propose to
+make of the Package, you should contact the Copyright Holder and seek
+a different licensing arrangement.
+
+Definitions
+
+    "Copyright Holder" means the individual(s) or organization(s)
+    named in the copyright notice for the entire Package.
+
+    "Contributor" means any party that has contributed code or other
+    material to the Package, in accordance with the Copyright Holder`s
+    procedures.
+
+    "You" and "your" means any person who would like to copy,
+    distribute, or modify the Package.
+
+    "Package" means the collection of files distributed by the
+    Copyright Holder, and derivatives of that collection and/or of
+    those files. A given Package may consist of either the Standard
+    Version, or a Modified Version.
+
+    "Distribute" means providing a copy of the Package or making it
+    accessible to anyone else, or in the case of a company or
+    organization, to others outside of your company or organization.
+
+    "Distributor Fee" means any fee that you charge for Distributing
+    this Package or providing support for this Package to another
+    party.  It does not mean licensing fees.
+
+    "Standard Version" refers to the Package if it has not been
+    modified, or has been modified only in ways explicitly requested
+    by the Copyright Holder.
+
+    "Modified Version" means the Package, if it has been changed, and
+    such changes were not explicitly requested by the Copyright
+    Holder.
+
+    "Original License" means this Artistic License as Distributed with
+    the Standard Version of the Package, in its current version or as
+    it may be modified by The Perl Foundation in the future.
+
+    "Source" form means the source code, documentation source, and
+    configuration files for the Package.
+
+    "Compiled" form means the compiled bytecode, object code, binary,
+   or any other form resulting from mechanical transformation or
+    translation of the Source form.
+
+
+Permission for Use and Modification Without Distribution
+
+(1)  You are permitted to use the Standard Version and create and use
+Modified Versions for any purpose without restriction, provided that
+you do not Distribute the Modified Version.
+
+
+Permissions for Redistribution of the Standard Version
+
+(2)  You may Distribute verbatim copies of the Source form of the
+Standard Version of this Package in any medium without restriction,
+either gratis or for a Distributor Fee, provided that you duplicate
+all of the original copyright notices and associated disclaimers.  At
+your discretion, such verbatim copies may or may not include a
+Compiled form of the Package.
+
+(3)  You may apply any bug fixes, portability changes, and other
+modifications made available from the Copyright Holder.  The resulting
+Package will still be considered the Standard Version, and as such
+will be subject to the Original License.
+
+
+Distribution of Modified Versions of the Package as Source
+
+(4)  You may Distribute your Modified Version as Source (either gratis
+or for a Distributor Fee, and with or without a Compiled form of the
+Modified Version) provided that you clearly document how it differs
+from the Standard Version, including, but not limited to, documenting
+any non-standard features, executables, or modules, and provided that
+you do at least ONE of the following:
+
+    (a)  make the Modified Version available to the Copyright Holder
+    of the Standard Version, under the Original License, so that the
+    Copyright Holder may include your modifications in the Standard
+    Version.
+
+    (b)  ensure that installation of your Modified Version does not
+    prevent the user installing or running the Standard Version. In
+    addition, the Modified Version must bear a name that is different
+    from the name of the Standard Version.
+
+    (c)  allow anyone who receives a copy of the Modified Version to
+    make the Source form of the Modified Version available to others
+    under
+
+ (i)  the Original License or
+
+ (ii)  a license that permits the licensee to freely copy,
+ modify and redistribute the Modified Version using the same
+ licensing terms that apply to the copy that the licensee
+ received, and requires that the Source form of the Modified
+ Version, and of any works derived from it, be made freely
+ available in that license fees are prohibited but Distributor
+ Fees are allowed.
+
+
+Distribution of Compiled Forms of the Standard Version
+or Modified Versions without the Source
+
+(5)  You may Distribute Compiled forms of the Standard Version without
+the Source, provided that you include complete instructions on how to
+get the Source of the Standard Version.  Such instructions must be
+valid at the time of your distribution.  If these instructions, at any
+time while you are carrying out such distribution, become invalid, you
+must provide new instructions on demand or cease further distribution.
+If you provide valid instructions or cease distribution within thirty
+days after you become aware that the instructions are invalid, then
+you do not forfeit any of your rights under this license.
+
+(6)  You may Distribute a Modified Version in Compiled form without
+the Source, provided that you comply with Section 4 with respect to
+the Source of the Modified Version.
+
+
+Aggregating or Linking the Package
+
+(7)  You may aggregate the Package (either the Standard Version or
+Modified Version) with other packages and Distribute the resulting
+aggregation provided that you do not charge a licensing fee for the
+Package.  Distributor Fees are permitted, and licensing fees for other
+components in the aggregation are permitted. The terms of this license
+apply to the use and Distribution of the Standard or Modified Versions
+as included in the aggregation.
+
+(8) You are permitted to link Modified and Standard Versions with
+other works, to embed the Package in a larger work of your own, or to
+build stand-alone binary or bytecode versions of applications that
+include the Package, and Distribute the result without restriction,
+provided the result does not expose a direct interface to the Package.
 
-<section id="lic_3">
-<title>BSD</title>
-<para><programlisting>
+
+Items That are Not Considered Part of a Modified Version
+
+(9) Works (including, but not limited to, modules and scripts) that
+merely extend or make use of the Package, do not, by themselves, cause
+the Package to be a Modified Version.  In addition, such works are not
+considered parts of the Package itself, and are not subject to the
+terms of this license.
+
+
+General Provisions
+
+(10)  Any use, modification, and distribution of the Standard or
+Modified Versions is governed by this Artistic License. By using,
+modifying or distributing the Package, you accept this license. Do not
+use, modify, or distribute the Package, if you do not accept this
+license.
+
+(11)  If your Modified Version has been derived from a Modified
+Version made by someone other than you, you are nevertheless required
+to ensure that your Modified Version complies with the requirements of
+this license.
+
+(12)  This license does not grant you the right to use any trademark,
+service mark, tradename, or logo of the Copyright Holder.
+(13)  This license includes the non-exclusive, worldwide,
+free-of-charge patent license to make, have made, use, offer to sell,
+sell, import and otherwise transfer the Package with respect to any
+patent claims licensable by the Copyright Holder that are necessarily
+infringed by the Package. If you institute patent litigation
+(including a cross-claim or counterclaim) against any party alleging
+that the Package constitutes direct or contributory patent
+infringement, then this Artistic License to you shall terminate on the
+date that such litigation is filed.
+
+(14)  Disclaimer of Warranty:
+THE PACKAGE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS "AS
+IS` AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES. THE IMPLIED
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
+NON-INFRINGEMENT ARE DISCLAIMED TO THE EXTENT PERMITTED BY YOUR LOCAL
+LAW. UNLESS REQUIRED BY LAW, NO COPYRIGHT HOLDER OR CONTRIBUTOR WILL
+BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES ARISING IN ANY WAY OUT OF THE USE OF THE PACKAGE, EVEN IF
+ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+      </programlisting></para>
+    </section>
+
+    <section id="lic_3">
+      <title>BSD</title>
+
+      <para><programlisting>
 Copyright (c) The Regents of the University of California.
 All rights reserved.
 
@@ -2039,11 +4471,13 @@ HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 SUCH DAMAGE.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_4">
+      <title>BSD-2-Clause</title>
 
-<section id="lic_4">
-<title>BSD-2-Clause</title>
-<para><programlisting>
+      <para><programlisting>
 
 The FreeBSD Copyright
 
@@ -2071,11 +4505,13 @@ The views and conclusions contained in the software and documentation are those
 authors and should not be interpreted as representing official policies, either
 expressed or implied, of the FreeBSD Project.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_5">
-<title>BSD-3-Clause</title>
-<para><programlisting>
+    <section id="lic_5">
+      <title>BSD-3-Clause</title>
+
+      <para><programlisting>
 
 Copyright (c) &lt;YEAR&gt;, &lt;OWNER&gt;
 All rights reserved.
@@ -2102,11 +4538,13 @@ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
 WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
 DAMAGE.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_6">
+      <title>BSD-4-Clause</title>
 
-<section id="lic_6">
-<title>BSD-4-Clause</title>
-<para><programlisting>
+      <para><programlisting>
 
 Copyright (c) &lt;year&gt;, &lt;copyright holder&gt;
 All rights reserved.
@@ -2136,11 +4574,356 @@ ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_7">
+      <title>BSD_LMS</title>
+
+      <para><programlisting>
+Copyright (C) 2004-2012 Intel Corporation. All rights reserved.
+
+        This license covers the sources of the Local Manageability Service (LMS).
+For licensing information for the LMS build scripts, please refer to the file
+build_script_license.txt.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  - Redistributions of source code must retain the above copyright notice,
+    this list of conditions and the following disclaimer.
+
+  - Redistributions in binary form must reproduce the above copyright notice,
+    this list of conditions and the following disclaimer in the documentation
+    and/or other materials provided with the distribution.
+
+  - Neither the name of Intel Corporation. nor the names of its
+    contributors may be used to endorse or promote products derived from this
+    software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS''
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL Intel Corporation. OR THE CONTRIBUTORS
+BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+</programlisting></para>
+    </section>
+
+    <section id="lic_8">
+      <title>BSL-1.0</title>
 
-<section id="lic_7">
-<title>EDL-1.0</title>
-<para><programlisting>
+      <para><programlisting>
+
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+
+</programlisting></para>
+    </section>
+
+    <section id="lic_9">
+      <title>CC-BY-3.0</title>
+
+      <para><programlisting>
+
+Creative Commons
+Attribution 3.0 Unported
+
+CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE LEGAL SERVICES.
+DISTRIBUTION OF THIS LICENSE DOES NOT CREATE AN ATTORNEY-CLIENT RELATIONSHIP. CREATIVE
+COMMONS PROVIDES THIS INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO
+WARRANTIES REGARDING THE INFORMATION PROVIDED, AND DISCLAIMS LIABILITY FOR DAMAGES
+RESULTING FROM ITS USE.
+License
+
+THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CREATIVE COMMONS
+PUBLIC LICENSE ("CCPL" OR "LICENSE"). THE WORK IS PROTECTED BY COPYRIGHT AND/OR OTHER
+APPLICABLE LAW. ANY USE OF THE WORK OTHER THAN AS AUTHORIZED UNDER THIS LICENSE OR
+COPYRIGHT LAW IS PROHIBITED.
+
+BY EXERCISING ANY RIGHTS TO THE WORK PROVIDED HERE, YOU ACCEPT AND AGREE TO BE BOUND
+BY THE TERMS OF THIS LICENSE. TO THE EXTENT THIS LICENSE MAY BE CONSIDERED TO BE A
+CONTRACT, THE LICENSOR GRANTS YOU THE RIGHTS CONTAINED HERE IN CONSIDERATION OF YOUR
+ACCEPTANCE OF SUCH TERMS AND CONDITIONS.
+
+1. Definitions
+
+"Adaptation" means a work based upon the Work, or upon the Work and other pre-existing
+works, such as a translation, adaptation, derivative work, arrangement of music or
+other alterations of a literary or artistic work, or phonogram or performance and
+includes cinematographic adaptations or any other form in which the Work may be
+recast, transformed, or adapted including in any form recognizably derived from the
+original, except that a work that constitutes a Collection will not be considered an
+Adaptation for the purpose of this License. For the avoidance of doubt, where the Work
+is a musical work, performance or phonogram, the synchronization of the Work in
+timed-relation with a moving image ("synching") will be considered an Adaptation for
+the purpose of this License.
+"Collection" means a collection of literary or artistic works, such as encyclopedias
+and anthologies, or performances, phonograms or broadcasts, or other works or subject
+matter other than works listed in Section 1(f) below, which, by reason of the
+selection and arrangement of their contents, constitute intellectual creations, in
+which the Work is included in its entirety in unmodified form along with one or more
+other contributions, each constituting separate and independent works in themselves,
+which together are assembled into a collective whole. A work that constitutes a
+Collection will not be considered an Adaptation (as defined above) for the purposes of
+this License.
+"Distribute" means to make available to the public the original and copies of the Work
+or Adaptation, as appropriate, through sale or other transfer of ownership.
+"Licensor" means the individual, individuals, entity or entities that offer(s) the
+Work under the terms of this License.
+"Original Author" means, in the case of a literary or artistic work, the individual,
+individuals, entity or entities who created the Work or if no individual or entity can
+be identified, the publisher; and in addition (i) in the case of a performance the
+actors, singers, musicians, dancers, and other persons who act, sing, deliver,
+declaim, play in, interpret or otherwise perform literary or artistic works or
+expressions of folklore; (ii) in the case of a phonogram the producer being the person
+or legal entity who first fixes the sounds of a performance or other sounds; and,
+(iii) in the case of broadcasts, the organization that transmits the broadcast.
+"Work" means the literary and/or artistic work offered under the terms of this License
+including without limitation any production in the literary, scientific and artistic
+domain, whatever may be the mode or form of its expression including digital form,
+such as a book, pamphlet and other writing; a lecture, address, sermon or other work
+of the same nature; a dramatic or dramatico-musical work; a choreographic work or
+entertainment in dumb show; a musical composition with or without words; a
+cinematographic work to which are assimilated works expressed by a process analogous
+to cinematography; a work of drawing, painting, architecture, sculpture, engraving or
+lithography; a photographic work to which are assimilated works expressed by a process
+analogous to photography; a work of applied art; an illustration, map, plan, sketch or
+three-dimensional work relative to geography, topography, architecture or science; a
+performance; a broadcast; a phonogram; a compilation of data to the extent it is
+protected as a copyrightable work; or a work performed by a variety or circus
+performer to the extent it is not otherwise considered a literary or artistic work.
+"You" means an individual or entity exercising rights under this License who has not
+previously violated the terms of this License with respect to the Work, or who has
+received express permission from the Licensor to exercise rights under this License
+despite a previous violation.
+"Publicly Perform" means to perform public recitations of the Work and to communicate
+to the public those public recitations, by any means or process, including by wire or
+wireless means or public digital performances; to make available to the public Works
+in such a way that members of the public may access these Works from a place and at a
+place individually chosen by them; to perform the Work to the public by any means or
+process and the communication to the public of the performances of the Work, including
+by public digital performance; to broadcast and rebroadcast the Work by any means
+including signs, sounds or images.
+"Reproduce" means to make copies of the Work by any means including without limitation
+by sound or visual recordings and the right of fixation and reproducing fixations of
+the Work, including storage of a protected performance or phonogram in digital form or
+other electronic medium.
+2. Fair Dealing Rights. Nothing in this License is intended to reduce, limit, or
+restrict any uses free from copyright or rights arising from limitations or exceptions
+that are provided for in connection with the copyright protection under copyright law
+or other applicable laws.
+
+3. License Grant. Subject to the terms and conditions of this License, Licensor hereby
+grants You a worldwide, royalty-free, non-exclusive, perpetual (for the duration of
+the applicable copyright) license to exercise the rights in the Work as stated below:
+
+to Reproduce the Work, to incorporate the Work into one or more Collections, and to
+Reproduce the Work as incorporated in the Collections;
+to create and Reproduce Adaptations provided that any such Adaptation, including any
+translation in any medium, takes reasonable steps to clearly label, demarcate or
+otherwise identify that changes were made to the original Work. For example, a
+translation could be marked "The original work was translated from English to
+Spanish," or a modification could indicate "The original work has been modified.";
+to Distribute and Publicly Perform the Work including as incorporated in Collections;
+and,
+to Distribute and Publicly Perform Adaptations.
+For the avoidance of doubt:
+
+Non-waivable Compulsory License Schemes. In those jurisdictions in which the right to
+collect royalties through any statutory or compulsory licensing scheme cannot be
+waived, the Licensor reserves the exclusive right to collect such royalties for any
+exercise by You of the rights granted under this License;
+Waivable Compulsory License Schemes. In those jurisdictions in which the right to
+collect royalties through any statutory or compulsory licensing scheme can be waived,
+the Licensor waives the exclusive right to collect such royalties for any exercise by
+You of the rights granted under this License; and,
+Voluntary License Schemes. The Licensor waives the right to collect royalties, whether
+individually or, in the event that the Licensor is a member of a collecting society
+that administers voluntary licensing schemes, via that society, from any exercise by
+You of the rights granted under this License.
+The above rights may be exercised in all media and formats whether now known or
+hereafter devised. The above rights include the right to make such modifications as
+are technically necessary to exercise the rights in other media and formats. Subject
+to Section 8(f), all rights not expressly granted by Licensor are hereby reserved.
+
+4. Restrictions. The license granted in Section 3 above is expressly made subject to
+and limited by the following restrictions:
+
+You may Distribute or Publicly Perform the Work only under the terms of this License.
+You must include a copy of, or the Uniform Resource Identifier (URI) for, this License
+with every copy of the Work You Distribute or Publicly Perform. You may not offer or
+impose any terms on the Work that restrict the terms of this License or the ability of
+the recipient of the Work to exercise the rights granted to that recipient under the
+terms of the License. You may not sublicense the Work. You must keep intact all
+notices that refer to this License and to the disclaimer of warranties with every copy
+of the Work You Distribute or Publicly Perform. When You Distribute or Publicly
+Perform the Work, You may not impose any effective technological measures on the Work
+that restrict the ability of a recipient of the Work from You to exercise the rights
+granted to that recipient under the terms of the License. This Section 4(a) applies to
+the Work as incorporated in a Collection, but this does not require the Collection
+apart from the Work itself to be made subject to the terms of this License. If You
+create a Collection, upon notice from any Licensor You must, to the extent
+practicable, remove from the Collection any credit as required by Section 4(b), as
+requested. If You create an Adaptation, upon notice from any Licensor You must, to the
+extent practicable, remove from the Adaptation any credit as required by Section 4(b),
+as requested.
+If You Distribute, or Publicly Perform the Work or any Adaptations or Collections, You
+must, unless a request has been made pursuant to Section 4(a), keep intact all
+copyright notices for the Work and provide, reasonable to the medium or means You are
+utilizing: (i) the name of the Original Author (or pseudonym, if applicable) if
+supplied, and/or if the Original Author and/or Licensor designate another party or
+parties (e.g., a sponsor institute, publishing entity, journal) for attribution
+("Attribution Parties") in Licensor`s copyright notice, terms of service or by other
+reasonable means, the name of such party or parties; (ii) the title of the Work if
+supplied; (iii) to the extent reasonably practicable, the URI, if any, that Licensor
+specifies to be associated with the Work, unless such URI does not refer to the
+copyright notice or licensing information for the Work; and (iv) , consistent with
+Section 3(b), in the case of an Adaptation, a credit identifying the use of the Work
+in the Adaptation (e.g., "French translation of the Work by Original Author," or
+"Screenplay based on original Work by Original Author"). The credit required by this
+Section 4 (b) may be implemented in any reasonable manner; provided, however, that in
+the case of a Adaptation or Collection, at a minimum such credit will appear, if a
+credit for all contributing authors of the Adaptation or Collection appears, then as
+part of these credits and in a manner at least as prominent as the credits for the
+other contributing authors. For the avoidance of doubt, You may only use the credit
+required by this Section for the purpose of attribution in the manner set out above
+and, by exercising Your rights under this License, You may not implicitly or
+explicitly assert or imply any connection with, sponsorship or endorsement by the
+Original Author, Licensor and/or Attribution Parties, as appropriate, of You or Your
+use of the Work, without the separate, express prior written permission of the
+Original Author, Licensor and/or Attribution Parties.
+Except as otherwise agreed in writing by the Licensor or as may be otherwise permitted
+by applicable law, if You Reproduce, Distribute or Publicly Perform the Work either by
+itself or as part of any Adaptations or Collections, You must not distort, mutilate,
+modify or take other derogatory action in relation to the Work which would be
+prejudicial to the Original Author`s honor or reputation. Licensor agrees that in
+those jurisdictions (e.g. Japan), in which any exercise of the right granted in
+Section 3(b) of this License (the right to make Adaptations) would be deemed to be a
+distortion, mutilation, modification or other derogatory action prejudicial to the
+Original Author`s honor and reputation, the Licensor will waive or not assert, as
+appropriate, this Section, to the fullest extent permitted by the applicable national
+law, to enable You to reasonably exercise Your right under Section 3(b) of this
+License (right to make Adaptations) but not otherwise.
+5. Representations, Warranties and Disclaimer
+
+UNLESS OTHERWISE MUTUALLY AGREED TO BY THE PARTIES IN WRITING, LICENSOR OFFERS THE
+WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE WORK,
+EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES OF
+TITLE, MERCHANTIBILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE
+ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS,
+WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED
+WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU.
+
+6. Limitation on Liability. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW, IN NO
+EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR ANY SPECIAL, INCIDENTAL,
+CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES ARISING OUT OF THIS LICENSE OR THE USE OF
+THE WORK, EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+7. Termination
+
+This License and the rights granted hereunder will terminate automatically upon any
+breach by You of the terms of this License. Individuals or entities who have received
+Adaptations or Collections from You under this License, however, will not have their
+licenses terminated provided such individuals or entities remain in full compliance
+with those licenses. Sections 1, 2, 5, 6, 7, and 8 will survive any termination of
+this License.
+Subject to the above terms and conditions, the license granted here is perpetual (for
+the duration of the applicable copyright in the Work). Notwithstanding the above,
+Licensor reserves the right to release the Work under different license terms or to
+stop distributing the Work at any time; provided, however that any such election will
+not serve to withdraw this License (or any other license that has been, or is required
+to be, granted under the terms of this License), and this License will continue in
+full force and effect unless terminated as stated above.
+8. Miscellaneous
+
+Each time You Distribute or Publicly Perform the Work or a Collection, the Licensor
+offers to the recipient a license to the Work on the same terms and conditions as the
+license granted to You under this License.
+Each time You Distribute or Publicly Perform an Adaptation, Licensor offers to the
+recipient a license to the original Work on the same terms and conditions as the
+license granted to You under this License.
+If any provision of this License is invalid or unenforceable under applicable law, it
+shall not affect the validity or enforceability of the remainder of the terms of this
+License, and without further action by the parties to this agreement, such provision
+shall be reformed to the minimum extent necessary to make such provision valid and
+enforceable.
+No term or provision of this License shall be deemed waived and no breach consented to
+unless such waiver or consent shall be in writing and signed by the party to be
+charged with such waiver or consent.
+This License constitutes the entire agreement between the parties with respect to the
+Work licensed here. There are no understandings, agreements or representations with
+respect to the Work not specified here. Licensor shall not be bound by any additional
+provisions that may appear in any communication from You. This License may not be
+modified without the mutual written agreement of the Licensor and You.
+The rights granted under, and the subject matter referenced, in this License were
+drafted utilizing the terminology of the Berne Convention for the Protection of
+Literary and Artistic Works (as amended on September 28, 1979), the Rome Convention of
+1961, the WIPO Copyright Treaty of 1996, the WIPO Performances and Phonograms Treaty
+of 1996 and the Universal Copyright Convention (as revised on July 24, 1971). These
+rights and subject matter take effect in the relevant jurisdiction in which the
+License terms are sought to be enforced according to the corresponding provisions of
+the implementation of those treaty provisions in the applicable national law. If the
+standard suite of rights granted under applicable copyright law includes additional
+rights not granted under this License, such additional rights are deemed to be
+included in the License; this License is not intended to restrict the license of any
+rights under applicable law.
+Creative Commons Notice
+
+Creative Commons is not a party to this License, and makes no warranty whatsoever in
+connection with the Work. Creative Commons will not be liable to You or any party on
+any legal theory for any damages whatsoever, including without limitation any general,
+special, incidental or consequential damages arising in connection to this license.
+Notwithstanding the foregoing two (2) sentences, if Creative Commons has expressly
+identified itself as the Licensor hereunder, it shall have all rights and obligations
+of Licensor.
+
+Except for the limited purpose of indicating to the public that the Work is licensed
+under the CCPL, Creative Commons does not authorize the use by either party of the
+trademark "Creative Commons" or any related trademark or logo of Creative Commons
+without the prior written consent of Creative Commons. Any permitted use will be in
+compliance with Creative Commons` then-current trademark usage guidelines, as may be
+published on its website or otherwise made available upon request from time to time.
+For the avoidance of doubt, this trademark restriction does not form part of this
+License.
+
+Creative Commons may be contacted at http://creativecommons.org/.
+
+« Back to Commons Deed
+
+</programlisting></para>
+    </section>
+
+    <section id="lic_10">
+      <title>EDL-1.0</title>
+
+      <para><programlisting>
 Eclipse Distribution License - v 1.0
 
 Copyright (c) 2007, Eclipse Foundation, Inc. and its licensors.
@@ -2169,11 +4952,13 @@ BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
 WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
 DAMAGE.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_11">
+      <title>EPL-1.0</title>
 
-<section id="lic_8">
-<title>EPL-1.0</title>
-<para><programlisting>
+      <para><programlisting>
 
 Eclipse Public License - v 1.0
 
@@ -2361,11 +5146,13 @@ property laws of the United States of America. No party to this Agreement will b
 legal action under this Agreement more than one year after the cause of action arose.
 Each party waives its rights to a jury trial in any resulting litigation.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_9">
-<title>Elfutils-Exception</title>
-<para><programlisting>
+    <section id="lic_12">
+      <title>Elfutils-Exception</title>
+
+      <para><programlisting>
    This file describes the limits of the Exception under which you are allowed
    to distribute Non-GPL Code in linked combination with Red Hat elfutils.
    For the full text of the license, please see one of the header files
@@ -2378,20 +5165,24 @@ Each party waives its rights to a jury trial in any resulting litigation.
    libdw.h
    libdwfl.h
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_13">
+      <title>FSF-Unlimited</title>
 
-<section id="lic_10">
-<title>FSF-Unlimited</title>
-<para><programlisting>
+      <para><programlisting>
 Copyright (C) 1997-2010 Free Software Foundation, Inc.
 This file is free software; the Free Software Foundation
 gives unlimited permission to copy and/or distribute it,
 with or without modifications, as long as this notice is preserved.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_11">
-<title>FreeType</title>
-<para><programlisting>
+    <section id="lic_14">
+      <title>FreeType</title>
+
+      <para><programlisting>
                     The FreeType Project LICENSE
                     ----------------------------
 
@@ -2442,7 +5233,7 @@ Introduction
   encourage you to use the following text:
 
    """
-    Portions of this software are copyright � &lt;year&gt; The FreeType
+    Portions of this software are copyright  &lt;year&gt; The FreeType
     Project (www.freetype.org).  All rights reserved.
    """
 
@@ -2562,11 +5353,879 @@ Legal Terms
 
 --- end of FTL.TXT ---
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_15">
+      <title>GFDL-1.2</title>
+
+      <para><programlisting>
+
+                GNU Free Documentation License
+                  Version 1.2, November 2002
+
+
+ Copyright (C) 2000,2001,2002  Free Software Foundation, Inc.
+     51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+0. PREAMBLE
+
+The purpose of this License is to make a manual, textbook, or other
+functional and useful document "free" in the sense of freedom: to
+assure everyone the effective freedom to copy and redistribute it,
+with or without modifying it, either commercially or noncommercially.
+Secondarily, this License preserves for the author and publisher a way
+to get credit for their work, while not being considered responsible
+for modifications made by others.
+
+This License is a kind of "copyleft", which means that derivative
+works of the document must themselves be free in the same sense.  It
+complements the GNU General Public License, which is a copyleft
+license designed for free software.
+
+We have designed this License in order to use it for manuals for free
+software, because free software needs free documentation: a free
+program should come with manuals providing the same freedoms that the
+software does.  But this License is not limited to software manuals;
+it can be used for any textual work, regardless of subject matter or
+whether it is published as a printed book.  We recommend this License
+principally for works whose purpose is instruction or reference.
+
+
+1. APPLICABILITY AND DEFINITIONS
+
+This License applies to any manual or other work, in any medium, that
+contains a notice placed by the copyright holder saying it can be
+distributed under the terms of this License.  Such a notice grants a
+world-wide, royalty-free license, unlimited in duration, to use that
+work under the conditions stated herein.  The "Document", below,
+refers to any such manual or work.  Any member of the public is a
+licensee, and is addressed as "you".  You accept the license if you
+copy, modify or distribute the work in a way requiring permission
+under copyright law.
+
+A "Modified Version" of the Document means any work containing the
+Document or a portion of it, either copied verbatim, or with
+modifications and/or translated into another language.
+
+A "Secondary Section" is a named appendix or a front-matter section of
+the Document that deals exclusively with the relationship of the
+publishers or authors of the Document to the Document`s overall subject
+(or to related matters) and contains nothing that could fall directly
+within that overall subject.  (Thus, if the Document is in part a
+textbook of mathematics, a Secondary Section may not explain any
+mathematics.)  The relationship could be a matter of historical
+connection with the subject or with related matters, or of legal,
+commercial, philosophical, ethical or political position regarding
+them.
+
+The "Invariant Sections" are certain Secondary Sections whose titles
+are designated, as being those of Invariant Sections, in the notice
+that says that the Document is released under this License.  If a
+section does not fit the above definition of Secondary then it is not
+allowed to be designated as Invariant.  The Document may contain zero
+Invariant Sections.  If the Document does not identify any Invariant
+Sections then there are none.
+
+The "Cover Texts" are certain short passages of text that are listed,
+as Front-Cover Texts or Back-Cover Texts, in the notice that says that
+the Document is released under this License.  A Front-Cover Text may
+be at most 5 words, and a Back-Cover Text may be at most 25 words.
+
+A "Transparent" copy of the Document means a machine-readable copy,
+represented in a format whose specification is available to the
+general public, that is suitable for revising the document
+straightforwardly with generic text editors or (for images composed of
+pixels) generic paint programs or (for drawings) some widely available
+drawing editor, and that is suitable for input to text formatters or
+for automatic translation to a variety of formats suitable for input
+to text formatters.  A copy made in an otherwise Transparent file
+format whose markup, or absence of markup, has been arranged to thwart
+or discourage subsequent modification by readers is not Transparent.
+An image format is not Transparent if used for any substantial amount
+of text.  A copy that is not "Transparent" is called "Opaque".
+
+Examples of suitable formats for Transparent copies include plain
+ASCII without markup, Texinfo input format, LaTeX input format, SGML
+or XML using a publicly available DTD, and standard-conforming simple
+HTML, PostScript or PDF designed for human modification.  Examples of
+transparent image formats include PNG, XCF and JPG.  Opaque formats
+include proprietary formats that can be read and edited only by
+proprietary word processors, SGML or XML for which the DTD and/or
+processing tools are not generally available, and the
+machine-generated HTML, PostScript or PDF produced by some word
+processors for output purposes only.
+
+The "Title Page" means, for a printed book, the title page itself,
+plus such following pages as are needed to hold, legibly, the material
+this License requires to appear in the title page.  For works in
+formats which do not have any title page as such, "Title Page" means
+the text near the most prominent appearance of the work`s title,
+preceding the beginning of the body of the text.
+
+A section "Entitled XYZ" means a named subunit of the Document whose
+title either is precisely XYZ or contains XYZ in parentheses following
+text that translates XYZ in another language.  (Here XYZ stands for a
+specific section name mentioned below, such as "Acknowledgements",
+"Dedications", "Endorsements", or "History".)  To "Preserve the Title"
+of such a section when you modify the Document means that it remains a
+section "Entitled XYZ" according to this definition.
+
+The Document may include Warranty Disclaimers next to the notice which
+states that this License applies to the Document.  These Warranty
+Disclaimers are considered to be included by reference in this
+License, but only as regards disclaiming warranties: any other
+implication that these Warranty Disclaimers may have is void and has
+no effect on the meaning of this License.
+
+
+2. VERBATIM COPYING
+
+You may copy and distribute the Document in any medium, either
+commercially or noncommercially, provided that this License, the
+copyright notices, and the license notice saying this License applies
+to the Document are reproduced in all copies, and that you add no other
+conditions whatsoever to those of this License.  You may not use
+technical measures to obstruct or control the reading or further
+copying of the copies you make or distribute.  However, you may accept
+compensation in exchange for copies.  If you distribute a large enough
+number of copies you must also follow the conditions in section 3.
+
+You may also lend copies, under the same conditions stated above, and
+you may publicly display copies.
+
+
+3. COPYING IN QUANTITY
+
+If you publish printed copies (or copies in media that commonly have
+printed covers) of the Document, numbering more than 100, and the
+Document`s license notice requires Cover Texts, you must enclose the
+copies in covers that carry, clearly and legibly, all these Cover
+Texts: Front-Cover Texts on the front cover, and Back-Cover Texts on
+the back cover.  Both covers must also clearly and legibly identify
+you as the publisher of these copies.  The front cover must present
+the full title with all words of the title equally prominent and
+visible.  You may add other material on the covers in addition.
+Copying with changes limited to the covers, as long as they preserve
+the title of the Document and satisfy these conditions, can be treated
+as verbatim copying in other respects.
+
+If the required texts for either cover are too voluminous to fit
+legibly, you should put the first ones listed (as many as fit
+reasonably) on the actual cover, and continue the rest onto adjacent
+pages.
+
+If you publish or distribute Opaque copies of the Document numbering
+more than 100, you must either include a machine-readable Transparent
+copy along with each Opaque copy, or state in or with each Opaque copy
+a computer-network location from which the general network-using
+public has access to download using public-standard network protocols
+a complete Transparent copy of the Document, free of added material.
+If you use the latter option, you must take reasonably prudent steps,
+when you begin distribution of Opaque copies in quantity, to ensure
+that this Transparent copy will remain thus accessible at the stated
+location until at least one year after the last time you distribute an
+Opaque copy (directly or through your agents or retailers) of that
+edition to the public.
+
+It is requested, but not required, that you contact the authors of the
+Document well before redistributing any large number of copies, to give
+them a chance to provide you with an updated version of the Document.
+
+
+4. MODIFICATIONS
+
+You may copy and distribute a Modified Version of the Document under
+the conditions of sections 2 and 3 above, provided that you release
+the Modified Version under precisely this License, with the Modified
+Version filling the role of the Document, thus licensing distribution
+and modification of the Modified Version to whoever possesses a copy
+of it.  In addition, you must do these things in the Modified Version:
+
+A. Use in the Title Page (and on the covers, if any) a title distinct
+   from that of the Document, and from those of previous versions
+   (which should, if there were any, be listed in the History section
+   of the Document).  You may use the same title as a previous version
+   if the original publisher of that version gives permission.
+B. List on the Title Page, as authors, one or more persons or entities
+   responsible for authorship of the modifications in the Modified
+   Version, together with at least five of the principal authors of the
+   Document (all of its principal authors, if it has fewer than five),
+   unless they release you from this requirement.
+C. State on the Title page the name of the publisher of the
+   Modified Version, as the publisher.
+D. Preserve all the copyright notices of the Document.
+E. Add an appropriate copyright notice for your modifications
+   adjacent to the other copyright notices.
+F. Include, immediately after the copyright notices, a license notice
+   giving the public permission to use the Modified Version under the
+   terms of this License, in the form shown in the Addendum below.
+G. Preserve in that license notice the full lists of Invariant Sections
+   and required Cover Texts given in the Document`s license notice.
+H. Include an unaltered copy of this License.
+I. Preserve the section Entitled "History", Preserve its Title, and add
+   to it an item stating at least the title, year, new authors, and
+   publisher of the Modified Version as given on the Title Page.  If
+   there is no section Entitled "History" in the Document, create one
+   stating the title, year, authors, and publisher of the Document as
+   given on its Title Page, then add an item describing the Modified
+   Version as stated in the previous sentence.
+J. Preserve the network location, if any, given in the Document for
+   public access to a Transparent copy of the Document, and likewise
+   the network locations given in the Document for previous versions
+   it was based on.  These may be placed in the "History" section.
+   You may omit a network location for a work that was published at
+   least four years before the Document itself, or if the original
+   publisher of the version it refers to gives permission.
+K. For any section Entitled "Acknowledgements" or "Dedications",
+   Preserve the Title of the section, and preserve in the section all
+   the substance and tone of each of the contributor acknowledgements
+   and/or dedications given therein.
+L. Preserve all the Invariant Sections of the Document,
+   unaltered in their text and in their titles.  Section numbers
+   or the equivalent are not considered part of the section titles.
+M. Delete any section Entitled "Endorsements".  Such a section
+   may not be included in the Modified Version.
+N. Do not retitle any existing section to be Entitled "Endorsements"
+   or to conflict in title with any Invariant Section.
+O. Preserve any Warranty Disclaimers.
+
+If the Modified Version includes new front-matter sections or
+appendices that qualify as Secondary Sections and contain no material
+copied from the Document, you may at your option designate some or all
+of these sections as invariant.  To do this, add their titles to the
+list of Invariant Sections in the Modified Version`s license notice.
+These titles must be distinct from any other section titles.
+
+You may add a section Entitled "Endorsements", provided it contains
+nothing but endorsements of your Modified Version by various
+parties--for example, statements of peer review or that the text has
+been approved by an organization as the authoritative definition of a
+standard.
+
+You may add a passage of up to five words as a Front-Cover Text, and a
+passage of up to 25 words as a Back-Cover Text, to the end of the list
+of Cover Texts in the Modified Version.  Only one passage of
+Front-Cover Text and one of Back-Cover Text may be added by (or
+through arrangements made by) any one entity.  If the Document already
+includes a cover text for the same cover, previously added by you or
+by arrangement made by the same entity you are acting on behalf of,
+you may not add another; but you may replace the old one, on explicit
+permission from the previous publisher that added the old one.
+
+The author(s) and publisher(s) of the Document do not by this License
+give permission to use their names for publicity for or to assert or
+imply endorsement of any Modified Version.
+
+
+5. COMBINING DOCUMENTS
+
+You may combine the Document with other documents released under this
+License, under the terms defined in section 4 above for modified
+versions, provided that you include in the combination all of the
+Invariant Sections of all of the original documents, unmodified, and
+list them all as Invariant Sections of your combined work in its
+license notice, and that you preserve all their Warranty Disclaimers.
+
+The combined work need only contain one copy of this License, and
+multiple identical Invariant Sections may be replaced with a single
+copy.  If there are multiple Invariant Sections with the same name but
+different contents, make the title of each such section unique by
+adding at the end of it, in parentheses, the name of the original
+author or publisher of that section if known, or else a unique number.
+Make the same adjustment to the section titles in the list of
+Invariant Sections in the license notice of the combined work.
+
+In the combination, you must combine any sections Entitled "History"
+in the various original documents, forming one section Entitled
+"History"; likewise combine any sections Entitled "Acknowledgements",
+and any sections Entitled "Dedications".  You must delete all sections
+Entitled "Endorsements".
+
+
+6. COLLECTIONS OF DOCUMENTS
+
+You may make a collection consisting of the Document and other documents
+released under this License, and replace the individual copies of this
+License in the various documents with a single copy that is included in
+the collection, provided that you follow the rules of this License for
+verbatim copying of each of the documents in all other respects.
+
+You may extract a single document from such a collection, and distribute
+it individually under this License, provided you insert a copy of this
+License into the extracted document, and follow this License in all
+other respects regarding verbatim copying of that document.
+
+
+7. AGGREGATION WITH INDEPENDENT WORKS
+
+A compilation of the Document or its derivatives with other separate
+and independent documents or works, in or on a volume of a storage or
+distribution medium, is called an "aggregate" if the copyright
+resulting from the compilation is not used to limit the legal rights
+of the compilation`s users beyond what the individual works permit.
+When the Document is included in an aggregate, this License does not
+apply to the other works in the aggregate which are not themselves
+derivative works of the Document.
+
+If the Cover Text requirement of section 3 is applicable to these
+copies of the Document, then if the Document is less than one half of
+the entire aggregate, the Document`s Cover Texts may be placed on
+covers that bracket the Document within the aggregate, or the
+electronic equivalent of covers if the Document is in electronic form.
+Otherwise they must appear on printed covers that bracket the whole
+aggregate.
+
+
+8. TRANSLATION
+
+Translation is considered a kind of modification, so you may
+distribute translations of the Document under the terms of section 4.
+Replacing Invariant Sections with translations requires special
+permission from their copyright holders, but you may include
+translations of some or all Invariant Sections in addition to the
+original versions of these Invariant Sections.  You may include a
+translation of this License, and all the license notices in the
+Document, and any Warranty Disclaimers, provided that you also include
+the original English version of this License and the original versions
+of those notices and disclaimers.  In case of a disagreement between
+the translation and the original version of this License or a notice
+or disclaimer, the original version will prevail.
+
+If a section in the Document is Entitled "Acknowledgements",
+"Dedications", or "History", the requirement (section 4) to Preserve
+its Title (section 1) will typically require changing the actual
+title.
+
+
+9. TERMINATION
+
+You may not copy, modify, sublicense, or distribute the Document except
+as expressly provided for under this License.  Any other attempt to
+copy, modify, sublicense or distribute the Document is void, and will
+automatically terminate your rights under this License.  However,
+parties who have received copies, or rights, from you under this
+License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+
+10. FUTURE REVISIONS OF THIS LICENSE
+
+The Free Software Foundation may publish new, revised versions
+of the GNU Free Documentation License from time to time.  Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.  See
+http://www.gnu.org/copyleft/.
+
+Each version of the License is given a distinguishing version number.
+If the Document specifies that a particular numbered version of this
+License "or any later version" applies to it, you have the option of
+following the terms and conditions either of that specified version or
+of any later version that has been published (not as a draft) by the
+Free Software Foundation.  If the Document does not specify a version
+number of this License, you may choose any version ever published (not
+as a draft) by the Free Software Foundation.
+
+
+ADDENDUM: How to use this License for your documents
+
+To use this License in a document you have written, include a copy of
+the License in the document and put the following copyright and
+license notices just after the title page:
+
+    Copyright (c)  YEAR  YOUR NAME.
+    Permission is granted to copy, distribute and/or modify this document
+    under the terms of the GNU Free Documentation License, Version 1.2
+    or any later version published by the Free Software Foundation;
+    with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts.
+    A copy of the license is included in the section entitled "GNU
+    Free Documentation License".
+
+If you have Invariant Sections, Front-Cover Texts and Back-Cover Texts,
+replace the "with...Texts." line with this:
+
+    with the Invariant Sections being LIST THEIR TITLES, with the
+    Front-Cover Texts being LIST, and with the Back-Cover Texts being LIST.
+
+If you have Invariant Sections without Cover Texts, or some other
+combination of the three, merge those two alternatives to suit the
+situation.
+
+If your document contains nontrivial examples of program code, we
+recommend releasing these examples in parallel under your choice of
+free software license, such as the GNU General Public License,
+to permit their use in free software.
+
+</programlisting></para>
+    </section>
+
+    <section id="lic_16">
+      <title>GFDL-1.3</title>
+
+      <para><programlisting>
+
 
-<section id="lic_12">
-<title>GPL-1.0</title>
-<para><programlisting>
+                GNU Free Documentation License
+                 Version 1.3, 3 November 2008
+
+
+ Copyright (C) 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc.
+     &lt;http://fsf.org/&gt;
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+0. PREAMBLE
+
+The purpose of this License is to make a manual, textbook, or other
+functional and useful document "free" in the sense of freedom: to
+assure everyone the effective freedom to copy and redistribute it,
+with or without modifying it, either commercially or noncommercially.
+Secondarily, this License preserves for the author and publisher a way
+to get credit for their work, while not being considered responsible
+for modifications made by others.
+
+This License is a kind of "copyleft", which means that derivative
+works of the document must themselves be free in the same sense.  It
+complements the GNU General Public License, which is a copyleft
+license designed for free software.
+
+We have designed this License in order to use it for manuals for free
+software, because free software needs free documentation: a free
+program should come with manuals providing the same freedoms that the
+software does.  But this License is not limited to software manuals;
+it can be used for any textual work, regardless of subject matter or
+whether it is published as a printed book.  We recommend this License
+principally for works whose purpose is instruction or reference.
+
+
+1. APPLICABILITY AND DEFINITIONS
+
+This License applies to any manual or other work, in any medium, that
+contains a notice placed by the copyright holder saying it can be
+distributed under the terms of this License.  Such a notice grants a
+world-wide, royalty-free license, unlimited in duration, to use that
+work under the conditions stated herein.  The "Document", below,
+refers to any such manual or work.  Any member of the public is a
+licensee, and is addressed as "you".  You accept the license if you
+copy, modify or distribute the work in a way requiring permission
+under copyright law.
+
+A "Modified Version" of the Document means any work containing the
+Document or a portion of it, either copied verbatim, or with
+modifications and/or translated into another language.
+
+A "Secondary Section" is a named appendix or a front-matter section of
+the Document that deals exclusively with the relationship of the
+publishers or authors of the Document to the Document`s overall
+subject (or to related matters) and contains nothing that could fall
+directly within that overall subject.  (Thus, if the Document is in
+part a textbook of mathematics, a Secondary Section may not explain
+any mathematics.)  The relationship could be a matter of historical
+connection with the subject or with related matters, or of legal,
+commercial, philosophical, ethical or political position regarding
+them.
+
+The "Invariant Sections" are certain Secondary Sections whose titles
+are designated, as being those of Invariant Sections, in the notice
+that says that the Document is released under this License.  If a
+section does not fit the above definition of Secondary then it is not
+allowed to be designated as Invariant.  The Document may contain zero
+Invariant Sections.  If the Document does not identify any Invariant
+Sections then there are none.
+
+The "Cover Texts" are certain short passages of text that are listed,
+as Front-Cover Texts or Back-Cover Texts, in the notice that says that
+the Document is released under this License.  A Front-Cover Text may
+be at most 5 words, and a Back-Cover Text may be at most 25 words.
+
+A "Transparent" copy of the Document means a machine-readable copy,
+represented in a format whose specification is available to the
+general public, that is suitable for revising the document
+straightforwardly with generic text editors or (for images composed of
+pixels) generic paint programs or (for drawings) some widely available
+drawing editor, and that is suitable for input to text formatters or
+for automatic translation to a variety of formats suitable for input
+to text formatters.  A copy made in an otherwise Transparent file
+format whose markup, or absence of markup, has been arranged to thwart
+or discourage subsequent modification by readers is not Transparent.
+An image format is not Transparent if used for any substantial amount
+of text.  A copy that is not "Transparent" is called "Opaque".
+
+Examples of suitable formats for Transparent copies include plain
+ASCII without markup, Texinfo input format, LaTeX input format, SGML
+or XML using a publicly available DTD, and standard-conforming simple
+HTML, PostScript or PDF designed for human modification.  Examples of
+transparent image formats include PNG, XCF and JPG.  Opaque formats
+include proprietary formats that can be read and edited only by
+proprietary word processors, SGML or XML for which the DTD and/or
+processing tools are not generally available, and the
+machine-generated HTML, PostScript or PDF produced by some word
+processors for output purposes only.
+
+The "Title Page" means, for a printed book, the title page itself,
+plus such following pages as are needed to hold, legibly, the material
+this License requires to appear in the title page.  For works in
+formats which do not have any title page as such, "Title Page" means
+the text near the most prominent appearance of the work`s title,
+preceding the beginning of the body of the text.
+
+The "publisher" means any person or entity that distributes copies of
+the Document to the public.
+
+A section "Entitled XYZ" means a named subunit of the Document whose
+title either is precisely XYZ or contains XYZ in parentheses following
+text that translates XYZ in another language.  (Here XYZ stands for a
+specific section name mentioned below, such as "Acknowledgements",
+"Dedications", "Endorsements", or "History".)  To "Preserve the Title"
+of such a section when you modify the Document means that it remains a
+section "Entitled XYZ" according to this definition.
+
+The Document may include Warranty Disclaimers next to the notice which
+states that this License applies to the Document.  These Warranty
+Disclaimers are considered to be included by reference in this
+License, but only as regards disclaiming warranties: any other
+implication that these Warranty Disclaimers may have is void and has
+no effect on the meaning of this License.
+
+2. VERBATIM COPYING
+
+You may copy and distribute the Document in any medium, either
+commercially or noncommercially, provided that this License, the
+copyright notices, and the license notice saying this License applies
+to the Document are reproduced in all copies, and that you add no
+other conditions whatsoever to those of this License.  You may not use
+technical measures to obstruct or control the reading or further
+copying of the copies you make or distribute.  However, you may accept
+compensation in exchange for copies.  If you distribute a large enough
+number of copies you must also follow the conditions in section 3.
+
+You may also lend copies, under the same conditions stated above, and
+you may publicly display copies.
+
+
+3. COPYING IN QUANTITY
+
+If you publish printed copies (or copies in media that commonly have
+printed covers) of the Document, numbering more than 100, and the
+Document`s license notice requires Cover Texts, you must enclose the
+copies in covers that carry, clearly and legibly, all these Cover
+Texts: Front-Cover Texts on the front cover, and Back-Cover Texts on
+the back cover.  Both covers must also clearly and legibly identify
+you as the publisher of these copies.  The front cover must present
+the full title with all words of the title equally prominent and
+visible.  You may add other material on the covers in addition.
+Copying with changes limited to the covers, as long as they preserve
+the title of the Document and satisfy these conditions, can be treated
+as verbatim copying in other respects.
+
+If the required texts for either cover are too voluminous to fit
+legibly, you should put the first ones listed (as many as fit
+reasonably) on the actual cover, and continue the rest onto adjacent
+pages.
+
+If you publish or distribute Opaque copies of the Document numbering
+more than 100, you must either include a machine-readable Transparent
+copy along with each Opaque copy, or state in or with each Opaque copy
+a computer-network location from which the general network-using
+public has access to download using public-standard network protocols
+a complete Transparent copy of the Document, free of added material.
+If you use the latter option, you must take reasonably prudent steps,
+when you begin distribution of Opaque copies in quantity, to ensure
+that this Transparent copy will remain thus accessible at the stated
+location until at least one year after the last time you distribute an
+Opaque copy (directly or through your agents or retailers) of that
+edition to the public.
+
+It is requested, but not required, that you contact the authors of the
+Document well before redistributing any large number of copies, to
+give them a chance to provide you with an updated version of the
+Document.
+
+
+4. MODIFICATIONS
+
+You may copy and distribute a Modified Version of the Document under
+the conditions of sections 2 and 3 above, provided that you release
+the Modified Version under precisely this License, with the Modified
+Version filling the role of the Document, thus licensing distribution
+and modification of the Modified Version to whoever possesses a copy
+of it.  In addition, you must do these things in the Modified Version:
+
+A. Use in the Title Page (and on the covers, if any) a title distinct
+   from that of the Document, and from those of previous versions
+   (which should, if there were any, be listed in the History section
+   of the Document).  You may use the same title as a previous version
+   if the original publisher of that version gives permission.
+B. List on the Title Page, as authors, one or more persons or entities
+   responsible for authorship of the modifications in the Modified
+   Version, together with at least five of the principal authors of the
+   Document (all of its principal authors, if it has fewer than five),
+   unless they release you from this requirement.
+C. State on the Title page the name of the publisher of the
+   Modified Version, as the publisher.
+D. Preserve all the copyright notices of the Document.
+E. Add an appropriate copyright notice for your modifications
+   adjacent to the other copyright notices.
+F. Include, immediately after the copyright notices, a license notice
+   giving the public permission to use the Modified Version under the
+   terms of this License, in the form shown in the Addendum below.
+G. Preserve in that license notice the full lists of Invariant Sections
+   and required Cover Texts given in the Document`s license notice.
+H. Include an unaltered copy of this License.
+I. Preserve the section Entitled "History", Preserve its Title, and add
+   to it an item stating at least the title, year, new authors, and
+   publisher of the Modified Version as given on the Title Page.  If
+   there is no section Entitled "History" in the Document, create one
+   stating the title, year, authors, and publisher of the Document as
+   given on its Title Page, then add an item describing the Modified
+   Version as stated in the previous sentence.
+J. Preserve the network location, if any, given in the Document for
+   public access to a Transparent copy of the Document, and likewise
+   the network locations given in the Document for previous versions
+   it was based on.  These may be placed in the "History" section.
+   You may omit a network location for a work that was published at
+   least four years before the Document itself, or if the original
+   publisher of the version it refers to gives permission.
+K. For any section Entitled "Acknowledgements" or "Dedications",
+   Preserve the Title of the section, and preserve in the section all
+   the substance and tone of each of the contributor acknowledgements
+   and/or dedications given therein.
+L. Preserve all the Invariant Sections of the Document,
+   unaltered in their text and in their titles.  Section numbers
+   or the equivalent are not considered part of the section titles.
+M. Delete any section Entitled "Endorsements".  Such a section
+   may not be included in the Modified Version.
+N. Do not retitle any existing section to be Entitled "Endorsements"
+   or to conflict in title with any Invariant Section.
+O. Preserve any Warranty Disclaimers.
+
+If the Modified Version includes new front-matter sections or
+appendices that qualify as Secondary Sections and contain no material
+copied from the Document, you may at your option designate some or all
+of these sections as invariant.  To do this, add their titles to the
+list of Invariant Sections in the Modified Version`s license notice.
+These titles must be distinct from any other section titles.
+
+You may add a section Entitled "Endorsements", provided it contains
+nothing but endorsements of your Modified Version by various
+parties--for example, statements of peer review or that the text has
+been approved by an organization as the authoritative definition of a
+standard.
+
+You may add a passage of up to five words as a Front-Cover Text, and a
+passage of up to 25 words as a Back-Cover Text, to the end of the list
+of Cover Texts in the Modified Version.  Only one passage of
+Front-Cover Text and one of Back-Cover Text may be added by (or
+through arrangements made by) any one entity.  If the Document already
+includes a cover text for the same cover, previously added by you or
+by arrangement made by the same entity you are acting on behalf of,
+you may not add another; but you may replace the old one, on explicit
+permission from the previous publisher that added the old one.
+
+The author(s) and publisher(s) of the Document do not by this License
+give permission to use their names for publicity for or to assert or
+imply endorsement of any Modified Version.
+
+
+5. COMBINING DOCUMENTS
+
+You may combine the Document with other documents released under this
+License, under the terms defined in section 4 above for modified
+versions, provided that you include in the combination all of the
+Invariant Sections of all of the original documents, unmodified, and
+list them all as Invariant Sections of your combined work in its
+license notice, and that you preserve all their Warranty Disclaimers.
+
+The combined work need only contain one copy of this License, and
+multiple identical Invariant Sections may be replaced with a single
+copy.  If there are multiple Invariant Sections with the same name but
+different contents, make the title of each such section unique by
+adding at the end of it, in parentheses, the name of the original
+author or publisher of that section if known, or else a unique number.
+Make the same adjustment to the section titles in the list of
+Invariant Sections in the license notice of the combined work.
+
+In the combination, you must combine any sections Entitled "History"
+in the various original documents, forming one section Entitled
+"History"; likewise combine any sections Entitled "Acknowledgements",
+and any sections Entitled "Dedications".  You must delete all sections
+Entitled "Endorsements".
+
+
+6. COLLECTIONS OF DOCUMENTS
+
+You may make a collection consisting of the Document and other
+documents released under this License, and replace the individual
+copies of this License in the various documents with a single copy
+that is included in the collection, provided that you follow the rules
+of this License for verbatim copying of each of the documents in all
+other respects.
+
+You may extract a single document from such a collection, and
+distribute it individually under this License, provided you insert a
+copy of this License into the extracted document, and follow this
+License in all other respects regarding verbatim copying of that
+document.
+
+
+7. AGGREGATION WITH INDEPENDENT WORKS
+
+A compilation of the Document or its derivatives with other separate
+and independent documents or works, in or on a volume of a storage or
+distribution medium, is called an "aggregate" if the copyright
+resulting from the compilation is not used to limit the legal rights
+of the compilation`s users beyond what the individual works permit.
+When the Document is included in an aggregate, this License does not
+apply to the other works in the aggregate which are not themselves
+derivative works of the Document.
+
+If the Cover Text requirement of section 3 is applicable to these
+copies of the Document, then if the Document is less than one half of
+the entire aggregate, the Document`s Cover Texts may be placed on
+covers that bracket the Document within the aggregate, or the
+electronic equivalent of covers if the Document is in electronic form.
+Otherwise they must appear on printed covers that bracket the whole
+aggregate.
+
+
+8. TRANSLATION
+
+Translation is considered a kind of modification, so you may
+distribute translations of the Document under the terms of section 4.
+Replacing Invariant Sections with translations requires special
+permission from their copyright holders, but you may include
+translations of some or all Invariant Sections in addition to the
+original versions of these Invariant Sections.  You may include a
+translation of this License, and all the license notices in the
+Document, and any Warranty Disclaimers, provided that you also include
+the original English version of this License and the original versions
+of those notices and disclaimers.  In case of a disagreement between
+the translation and the original version of this License or a notice
+or disclaimer, the original version will prevail.
+
+If a section in the Document is Entitled "Acknowledgements",
+"Dedications", or "History", the requirement (section 4) to Preserve
+its Title (section 1) will typically require changing the actual
+title.
+
+
+9. TERMINATION
+
+You may not copy, modify, sublicense, or distribute the Document
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense, or distribute it is void, and
+will automatically terminate your rights under this License.
+
+However, if you cease all violation of this License, then your license
+from a particular copyright holder is reinstated (a) provisionally,
+unless and until the copyright holder explicitly and finally
+terminates your license, and (b) permanently, if the copyright holder
+fails to notify you of the violation by some reasonable means prior to
+60 days after the cessation.
+
+Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, receipt of a copy of some or all of the same material does
+not give you any rights to use it.
+
+
+10. FUTURE REVISIONS OF THIS LICENSE
+
+The Free Software Foundation may publish new, revised versions of the
+GNU Free Documentation License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in
+detail to address new problems or concerns.  See
+http://www.gnu.org/copyleft/.
+
+Each version of the License is given a distinguishing version number.
+If the Document specifies that a particular numbered version of this
+License "or any later version" applies to it, you have the option of
+following the terms and conditions either of that specified version or
+of any later version that has been published (not as a draft) by the
+Free Software Foundation.  If the Document does not specify a version
+number of this License, you may choose any version ever published (not
+as a draft) by the Free Software Foundation.  If the Document
+specifies that a proxy can decide which future versions of this
+License can be used, that proxy`s public statement of acceptance of a
+version permanently authorizes you to choose that version for the
+Document.
+
+11. RELICENSING
+
+"Massive Multiauthor Collaboration Site" (or "MMC Site") means any
+World Wide Web server that publishes copyrightable works and also
+provides prominent facilities for anybody to edit those works.  A
+public wiki that anybody can edit is an example of such a server.  A
+"Massive Multiauthor Collaboration" (or "MMC") contained in the site
+means any set of copyrightable works thus published on the MMC site.
+
+"CC-BY-SA" means the Creative Commons Attribution-Share Alike 3.0
+license published by Creative Commons Corporation, a not-for-profit
+corporation with a principal place of business in San Francisco,
+California, as well as future copyleft versions of that license
+published by that same organization.
+
+"Incorporate" means to publish or republish a Document, in whole or in
+part, as part of another Document.
+
+An MMC is "eligible for relicensing" if it is licensed under this
+License, and if all works that were first published under this License
+somewhere other than this MMC, and subsequently incorporated in whole or
+in part into the MMC, (1) had no cover texts or invariant sections, and
+(2) were thus incorporated prior to November 1, 2008.
+
+The operator of an MMC Site may republish an MMC contained in the site
+under CC-BY-SA on the same site at any time before August 1, 2009,
+provided the MMC is eligible for relicensing.
+
+
+ADDENDUM: How to use this License for your documents
+
+To use this License in a document you have written, include a copy of
+the License in the document and put the following copyright and
+license notices just after the title page:
+
+    Copyright (c)  YEAR  YOUR NAME.
+    Permission is granted to copy, distribute and/or modify this document
+    under the terms of the GNU Free Documentation License, Version 1.3
+    or any later version published by the Free Software Foundation;
+    with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts.
+    A copy of the license is included in the section entitled "GNU
+    Free Documentation License".
+
+If you have Invariant Sections, Front-Cover Texts and Back-Cover Texts,
+replace the "with...Texts." line with this:
+
+    with the Invariant Sections being LIST THEIR TITLES, with the
+    Front-Cover Texts being LIST, and with the Back-Cover Texts being LIST.
+
+If you have Invariant Sections without Cover Texts, or some other
+combination of the three, merge those two alternatives to suit the
+situation.
+
+If your document contains nontrivial examples of program code, we
+recommend releasing these examples in parallel under your choice of
+free software license, such as the GNU General Public License,
+to permit their use in free software.
+
+</programlisting></para>
+    </section>
+
+    <section id="lic_17">
+      <title>GPL-1.0</title>
+
+      <para><programlisting>
 
 GNU General Public License, version 1
 
@@ -2819,11 +6478,13 @@ necessary.  Here a sample; alter the names:
 
 That`s all there is to it!
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_18">
+      <title>GPL-2.0</title>
 
-<section id="lic_13">
-<title>GPL-2.0</title>
-<para><programlisting>
+      <para><programlisting>
 
 GNU GENERAL PUBLIC LICENSE
 
@@ -3122,11 +6783,13 @@ more useful to permit linking proprietary applications with the library. If this
 what you want to do, use the GNU Lesser General Public License instead of this
 License.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_14">
-<title>GPL-3.0</title>
-<para><programlisting>
+    <section id="lic_19">
+      <title>GPL-3.0</title>
+
+      <para><programlisting>
 GNU GENERAL PUBLIC LICENSE
 
 Version 3, 29 June 2007
@@ -3192,34 +6855,34 @@ The precise terms and conditions for copying, distribution and modification foll
 TERMS AND CONDITIONS
 0. Definitions.
 
-&rdquor;This License&rdquo; refers to version 3 of the GNU General Public License.
+“This License” refers to version 3 of the GNU General Public License.
 
-&rdquor;Copyright&rdquo; also means copyright-like laws that apply to other kinds of
+“Copyright” also means copyright-like laws that apply to other kinds of
 works, such as semiconductor masks.
 
-&rdquor;The Program&rdquo; refers to any copyrightable work licensed under this
-License. Each licensee is addressed as &rdquor;you&rdquo;. &rdquor;Licensees&rdquo;
-and &rdquor;recipients&rdquo; may be individuals or organizations.
+“The Program” refers to any copyrightable work licensed under this
+License. Each licensee is addressed as “you”. “Licensees”
+and “recipients” may be individuals or organizations.
 
-To &rdquor;modify&rdquo; a work means to copy from or adapt all or part of the work in
+To “modify” a work means to copy from or adapt all or part of the work in
 a fashion requiring copyright permission, other than the making of an exact copy. The
-resulting work is called a &rdquor;modified version&rdquo; of the earlier work or a
-work &rdquor;based on&rdquo; the earlier work.
+resulting work is called a “modified version” of the earlier work or a
+work “based on” the earlier work.
 
-A &rdquor;covered work&rdquo; means either the unmodified Program or a work based on
+A “covered work” means either the unmodified Program or a work based on
 the Program.
 
-To &rdquor;propagate&rdquo; a work means to do anything with it that, without
+To “propagate” a work means to do anything with it that, without
 permission, would make you directly or secondarily liable for infringement under
 applicable copyright law, except executing it on a computer or modifying a private
 copy. Propagation includes copying, distribution (with or without modification),
 making available to the public, and in some countries other activities as well.
 
-To &rdquor;convey&rdquo; a work means any kind of propagation that enables other
+To “convey” a work means any kind of propagation that enables other
 parties to make or receive copies. Mere interaction with a user through a computer
 network, with no transfer of a copy, is not conveying.
 
-An interactive user interface displays &rdquor;Appropriate Legal Notices&rdquo; to the
+An interactive user interface displays “Appropriate Legal Notices” to the
 extent that it includes a convenient and prominently visible feature that (1) displays
 an appropriate copyright notice, and (2) tells the user that there is no warranty for
 the work (except to the extent that warranties are provided), that licensees may
@@ -3228,26 +6891,26 @@ interface presents a list of user commands or options, such as a menu, a promine
 item in the list meets this criterion.
 1. Source Code.
 
-The &rdquor;source code&rdquo; for a work means the preferred form of the work for
-making modifications to it. &rdquor;Object code&rdquo; means any non-source form of a
+The “source code” for a work means the preferred form of the work for
+making modifications to it. “Object code” means any non-source form of a
 work.
 
-A &rdquor;Standard Interface&rdquo; means an interface that either is an official
+A “Standard Interface” means an interface that either is an official
 standard defined by a recognized standards body, or, in the case of interfaces
 specified for a particular programming language, one that is widely used among
 developers working in that language.
 
-The &rdquor;System Libraries&rdquo; of an executable work include anything, other than
+The “System Libraries” of an executable work include anything, other than
 the work as a whole, that (a) is included in the normal form of packaging a Major
 Component, but which is not part of that Major Component, and (b) serves only to
 enable use of the work with that Major Component, or to implement a Standard Interface
 for which an implementation is available to the public in source code form. A
-&rdquor;Major Component&rdquo;, in this context, means a major essential component
+“Major Component”, in this context, means a major essential component
 (kernel, window system, and so on) of the specific operating system (if any) on which
 the executable work runs, or a compiler used to produce the work, or an object code
 interpreter used to run it.
 
-The &rdquor;Corresponding Source&rdquo; for a work in object code form means all the
+The “Corresponding Source” for a work in object code form means all the
 source code needed to generate, install, and (for an executable work) run the object
 code and to modify the work, including scripts to control those activities. However,
 it does not include the work's System Libraries, or general-purpose tools or generally
@@ -3317,7 +6980,7 @@ you also meet all of these conditions:
 giving a relevant date.
     * b) The work must carry prominent notices stating that it is released under this
 License and any conditions added under section 7. This requirement modifies the
-requirement in section 4 to &rdquor;keep intact all notices&rdquo;.
+requirement in section 4 to “keep intact all notices”.
     * c) You must license the entire work, as a whole, under this License to anyone
 who comes into possession of a copy. This License will therefore apply, along with any
 applicable section 7 additional terms, to the whole of the work, and all its parts,
@@ -3331,7 +6994,7 @@ Appropriate Legal Notices, your work need not make them do so.
 A compilation of a covered work with other separate and independent works, which are
 not by their nature extensions of the covered work, and which are not combined with it
 such as to form a larger program, in or on a volume of a storage or distribution
-medium, is called an &rdquor;aggregate&rdquo; if the compilation and its resulting
+medium, is called an “aggregate” if the compilation and its resulting
 copyright are not used to limit the access or legal rights of the compilation's users
 beyond what the individual works permit. Inclusion of a covered work in an aggregate
 does not cause this License to apply to the other parts of the aggregate.
@@ -3375,19 +7038,19 @@ A separable portion of the object code, whose source code is excluded from the
 Corresponding Source as a System Library, need not be included in conveying the object
 code work.
 
-A &rdquor;User Product&rdquo; is either (1) a &rdquor;consumer product&rdquo;, which
+A “User Product” is either (1) a “consumer product”, which
 means any tangible personal property which is normally used for personal, family, or
 household purposes, or (2) anything designed or sold for incorporation into a
 dwelling. In determining whether a product is a consumer product, doubtful cases shall
 be resolved in favor of coverage. For a particular product received by a particular
-user, &rdquor;normally used&rdquo; refers to a typical or common use of that class of
+user, “normally used” refers to a typical or common use of that class of
 product, regardless of the status of the particular user or of the way in which the
 particular user actually uses, or expects or is expected to use, the product. A
 product is a consumer product regardless of whether the product has substantial
 commercial, industrial or non-consumer uses, unless such uses represent the only
 significant mode of use of the product.
 
-&rdquor;Installation Information&rdquo; for a User Product means any methods,
+“Installation Information” for a User Product means any methods,
 procedures, authorization keys, or other information required to install and execute
 modified versions of a covered work in that User Product from a modified version of
 its Corresponding Source. The information must suffice to ensure that the continued
@@ -3416,7 +7079,7 @@ implementation available to the public in source code form), and must require no
 special password or key for unpacking, reading or copying.
 7. Additional Terms.
 
-&rdquor;Additional permissions&rdquo; are terms that supplement the terms of this
+“Additional permissions” are terms that supplement the terms of this
 License by making exceptions from one or more of its conditions. Additional
 permissions that are applicable to the entire Program shall be treated as though they
 were included in this License, to the extent that they are valid under applicable law.
@@ -3451,8 +7114,8 @@ who conveys the material (or modified versions of it) with contractual assumptio
 liability to the recipient, for any liability that these contractual assumptions
 directly impose on those licensors and authors.
 
-All other non-permissive additional terms are considered &rdquor;further
-restrictions&rdquo; within the meaning of section 10. If the Program as you received
+All other non-permissive additional terms are considered “further
+restrictions” within the meaning of section 10. If the Program as you received
 it, or any part of it, contains a notice stating that it is governed by this License
 along with a term that is a further restriction, you may remove that term. If a
 license document contains a further restriction but permits relicensing or conveying
@@ -3506,7 +7169,7 @@ from the original licensors, to run, modify and propagate that work, subject to
 License. You are not responsible for enforcing compliance by third parties with this
 License.
 
-An &rdquor;entity transaction&rdquo; is a transaction transferring control of an
+An “entity transaction” is a transaction transferring control of an
 organization, or substantially all assets of one, or subdividing an organization, or
 merging organizations. If propagation of a covered work results from an entity
 transaction, each party to that transaction who receives a copy of the work also
@@ -3523,16 +7186,16 @@ that any patent claim is infringed by making, using, selling, offering for sale,
 importing the Program or any portion of it.
 11. Patents.
 
-A &rdquor;contributor&rdquo; is a copyright holder who authorizes use under this
+A “contributor” is a copyright holder who authorizes use under this
 License of the Program or a work on which the Program is based. The work thus licensed
-is called the contributor's &rdquor;contributor version&rdquo;.
+is called the contributor's “contributor version”.
 
-A contributor's &rdquor;essential patent claims&rdquo; are all patent claims owned or
+A contributor's “essential patent claims” are all patent claims owned or
 controlled by the contributor, whether already acquired or hereafter acquired, that
 would be infringed by some manner, permitted by this License, of making, using, or
 selling its contributor version, but do not include claims that would be infringed
 only as a consequence of further modification of the contributor version. For purposes
-of this definition, &rdquor;control&rdquo; includes the right to grant patent
+of this definition, “control” includes the right to grant patent
 sublicenses in a manner consistent with the requirements of this License.
 
 Each contributor grants you a non-exclusive, worldwide, royalty-free patent license
@@ -3540,10 +7203,10 @@ under the contributor's essential patent claims, to make, use, sell, offer for s
 import and otherwise run, modify and propagate the contents of its contributor
 version.
 
-In the following three paragraphs, a &rdquor;patent license&rdquo; is any express
+In the following three paragraphs, a “patent license” is any express
 agreement or commitment, however denominated, not to enforce a patent (such as an
 express permission to practice a patent or covenant not to sue for patent
-infringement). To &rdquor;grant&rdquo; such a patent license to a party means to make
+infringement). To “grant” such a patent license to a party means to make
 such an agreement or commitment not to enforce a patent against the party.
 
 If you convey a covered work, knowingly relying on a patent license, and the
@@ -3553,7 +7216,7 @@ other readily accessible means, then you must either (1) cause the Corresponding
 Source to be so available, or (2) arrange to deprive yourself of the benefit of the
 patent license for this particular work, or (3) arrange, in a manner consistent with
 the requirements of this License, to extend the patent license to downstream
-recipients. &rdquor;Knowingly relying&rdquo; means you have actual knowledge that, but
+recipients. “Knowingly relying” means you have actual knowledge that, but
 for the patent license, your conveying the covered work in a country, or your
 recipient's use of the covered work in a country, would infringe one or more
 identifiable patents in that country that you have reason to believe are valid.
@@ -3565,7 +7228,7 @@ modify or convey a specific copy of the covered work, then the patent license yo
 grant is automatically extended to all recipients of the covered work and works based
 on it.
 
-A patent license is &rdquor;discriminatory&rdquo; if it does not include within the
+A patent license is “discriminatory” if it does not include within the
 scope of its coverage, prohibits the exercise of, or is conditioned on the
 non-exercise of one or more of the rights that are specifically granted under this
 License. You may not convey a covered work if you are a party to an arrangement with a
@@ -3606,8 +7269,8 @@ General Public License from time to time. Such new versions will be similar in s
 to the present version, but may differ in detail to address new problems or concerns.
 
 Each version is given a distinguishing version number. If the Program specifies that a
-certain numbered version of the GNU General Public License &rdquor;or any later
-version&rdquo; applies to it, you have the option of following the terms and
+certain numbered version of the GNU General Public License “or any later
+version” applies to it, you have the option of following the terms and
 conditions either of that numbered version or of any later version published by the
 Free Software Foundation. If the Program does not specify a version number of the GNU
 General Public License, you may choose any version ever published by the Free Software
@@ -3624,7 +7287,7 @@ your choosing to follow a later version.
 
 THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.
 EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
-PROVIDE THE PROGRAM &rdquor;AS IS&rdquo; WITHOUT WARRANTY OF ANY KIND, EITHER
+PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER
 EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
 MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE
 QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE
@@ -3656,7 +7319,7 @@ can redistribute and change under these terms.
 
 To do so, attach the following notices to the program. It is safest to attach them to
 the start of each source file to most effectively state the exclusion of warranty; and
-each file should have at least the &rdquor;copyright&rdquo; line and a pointer to
+each file should have at least the “copyright” line and a pointer to
 where the full notice is found.
 
     &lt;one line to give the program's name and a brief idea of what it does.&gt;
@@ -3687,10 +7350,10 @@ it starts in an interactive mode:
 
 The hypothetical commands `show w' and `show c' should show the appropriate parts of
 the General Public License. Of course, your program's commands might be different; for
-a GUI interface, you would use an &rdquor;about box&rdquo;.
+a GUI interface, you would use an “about box”.
 
 You should also get your employer (if you work as a programmer) or school, if any, to
-sign a &rdquor;copyright disclaimer&rdquo; for the program, if necessary. For more
+sign a “copyright disclaimer” for the program, if necessary. For more
 information on this, and how to apply and follow the GNU GPL, see
 &lt;http://www.gnu.org/licenses/&gt;.
 
@@ -3700,11 +7363,13 @@ more useful to permit linking proprietary applications with the library. If this
 what you want to do, use the GNU Lesser General Public License instead of this
 License. But first, please read
 &lt;http://www.gnu.org/philosophy/why-not-lgpl.html&gt;.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_20">
+      <title>GPL-3.0-with-GCC-exception</title>
 
-<section id="lic_15">
-<title>GPL-3.0-with-GCC-exception</title>
-<para><programlisting>
+      <para><programlisting>
 
 insert GPL v3 text here
 
@@ -3760,11 +7425,63 @@ consistent with the licensing of the Independent Modules.
 The availability of this Exception does not imply any general presumption that
 third-party software is unaffected by the copyleft requirements of the license of GCC.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_21">
+      <title>GPL-3.0-with-autoconf-exception</title>
+
+      <para><programlisting>
+
+insert GPL v3 text here
+
+AUTOCONF CONFIGURE SCRIPT EXCEPTION
+
+Version 3.0, 18 August 2009
+
+Copyright © 2009 Free Software Foundation, Inc. &lt;http://fsf.org/&gt;
+
+Everyone is permitted to copy and distribute verbatim copies of this license document,
+but changing it is not allowed.
+
+This Exception is an additional permission under section 7 of the GNU General Public
+License, version 3 ("GPLv3"). It applies to a given file that bears a notice placed by
+the copyright holder of the file stating that the file is governed by GPLv3 along with
+this Exception.
+
+The purpose of this Exception is to allow distribution of Autoconf`s typical output
+under terms of the recipient`s choice (including proprietary).
+
+0. Definitions.
+"Covered Code" is the source or object code of a version of Autoconf that is a covered
+work under this License.
+
+"Normally Copied Code" for a version of Autoconf means all parts of its Covered Code
+which that version can copy from its code (i.e., not from its input file) into its
+minimally verbose, non-debugging and non-tracing output.
+
+"Ineligible Code" is Covered Code that is not Normally Copied Code.
 
-<section id="lic_16">
-<title>ICU</title>
-<para><programlisting>
+1. Grant of Additional Permission.
+You have permission to propagate output of Autoconf, even if such propagation would
+otherwise violate the terms of GPLv3. However, if by modifying Autoconf you cause any
+Ineligible Code of the version you received to become Normally Copied Code of your
+modified version, then you void this Exception for the resulting covered work. If you
+convey that resulting covered work, you must remove this Exception in accordance with
+the second paragraph of Section 7 of GPLv3.
+
+2. No Weakening of Autoconf Copyleft.
+The availability of this Exception does not imply any general presumption that
+third-party software is unaffected by the copyleft requirements of the license of
+Autoconf.
+
+</programlisting></para>
+    </section>
+
+    <section id="lic_22">
+      <title>ICU</title>
+
+      <para><programlisting>
 COPYRIGHT AND PERMISSION NOTICE
 
 Copyright (c) 1995-2012 International Business Machines Corporation and others
@@ -3795,16 +7512,18 @@ Software without prior written authorization of the copyright holder.
 
 All trademarks and registered trademarks mentioned herein are the property of their
 respective owners.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_23">
+      <title>ISC</title>
 
-<section id="lic_17">
-<title>ISC</title>
-<para><programlisting>
+      <para><programlisting>
 
 ISC License:
 
-Copyright &#169; 2004-2010 by Internet Systems Consortium, Inc. ("ISC")
-Copyright &#169; 1995-2003 by Internet Software Consortium
+Copyright © 2004-2010 by Internet Systems Consortium, Inc. ("ISC")
+Copyright © 1995-2003 by Internet Software Consortium
 
 Permission to use, copy, modify, and/or distribute this software for any purpose with
 or without fee is hereby granted, provided that the above copyright notice and this
@@ -3817,11 +7536,13 @@ DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN AC
 OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH
 THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_24">
+      <title>LGPL-2.0</title>
 
-<section id="lic_18">
-<title>LGPL-2.0</title>
-<para><programlisting>
+      <para><programlisting>
 GNU LIBRARY GENERAL PUBLIC LICENSE
 
 
@@ -4405,11 +8126,13 @@ Ty Coon, President of Vice
 
 That's all there is to it!
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_19">
-<title>LGPL-2.1</title>
-<para><programlisting>
+    <section id="lic_25">
+      <title>LGPL-2.1</title>
+
+      <para><programlisting>
 
 GNU LESSER GENERAL PUBLIC LICENSE
 
@@ -4837,11 +8560,13 @@ signature of Ty Coon, 1 April 1990
 Ty Coon, President of Vice
 That`s all there is to it!
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_26">
+      <title>LGPL-3.0</title>
 
-<section id="lic_20">
-<title>LGPL-3.0</title>
-<para><programlisting>
+      <para><programlisting>
 GNU LESSER GENERAL PUBLIC LICENSE
 
 Version 3, 29 June 2007
@@ -4856,28 +8581,28 @@ conditions of version 3 of the GNU General Public License, supplemented by the
 additional permissions listed below.
 0. Additional Definitions.
 
-As used herein, &rdquor;this License&rdquo; refers to version 3 of the GNU Lesser
-General Public License, and the &rdquor;GNU GPL&rdquo; refers to version 3 of the GNU
+As used herein, “this License” refers to version 3 of the GNU Lesser
+General Public License, and the “GNU GPL” refers to version 3 of the GNU
 General Public License.
 
-&rdquor;The Library&rdquo; refers to a covered work governed by this License, other
+“The Library” refers to a covered work governed by this License, other
 than an Application or a Combined Work as defined below.
 
-An &rdquor;Application&rdquo; is any work that makes use of an interface provided by
+An “Application” is any work that makes use of an interface provided by
 the Library, but which is not otherwise based on the Library. Defining a subclass of a
 class defined by the Library is deemed a mode of using an interface provided by the
 Library.
 
-A &rdquor;Combined Work&rdquo; is a work produced by combining or linking an
+A “Combined Work” is a work produced by combining or linking an
 Application with the Library. The particular version of the Library with which the
-Combined Work was made is also called the &rdquor;Linked Version&rdquo;.
+Combined Work was made is also called the “Linked Version”.
 
-The &rdquor;Minimal Corresponding Source&rdquo; for a Combined Work means the
+The “Minimal Corresponding Source” for a Combined Work means the
 Corresponding Source for the Combined Work, excluding any source code for portions of
 the Combined Work that, considered in isolation, are based on the Application, and not
 on the Linked Version.
 
-The &rdquor;Corresponding Application Code&rdquo; for a Combined Work means the object
+The “Corresponding Application Code” for a Combined Work means the object
 code and/or source code for the Application, including any data and utility programs
 needed for reproducing the Combined Work from the Application, but excluding the
 System Libraries of the Combined Work.
@@ -4966,7 +8691,7 @@ to the present version, but may differ in detail to address new problems or conc
 
 Each version is given a distinguishing version number. If the Library as you received
 it specifies that a certain numbered version of the GNU Lesser General Public License
-&rdquor;or any later version&rdquo; applies to it, you have the option of following
+“or any later version” applies to it, you have the option of following
 the terms and conditions either of that published version or of any later version
 published by the Free Software Foundation. If the Library as you received it does not
 specify a version number of the GNU Lesser General Public License, you may choose any
@@ -4977,11 +8702,13 @@ If the Library as you received it specifies that a proxy can decide whether futu
 versions of the GNU Lesser General Public License shall apply, that proxy's public
 statement of acceptance of any version is permanent authorization for you to choose
 that version for the Library.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_21">
-<title>Libpng</title>
-<para><programlisting>
+    <section id="lic_27">
+      <title>Libpng</title>
+
+      <para><programlisting>
 
 This copy of the libpng notices is provided for your convenience.  In case of
 any discrepancy between this copy and the notices in the file png.h that is
@@ -5094,11 +8821,13 @@ Glenn Randers-Pehrson
 glennrp at users.sourceforge.net
 December 9, 2010
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_28">
+      <title>MIT</title>
 
-<section id="lic_22">
-<title>MIT</title>
-<para><programlisting>
+      <para><programlisting>
 
 MIT License
 
@@ -5122,11 +8851,13 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_23">
-<title>MPL-1.0</title>
-<para><programlisting>
+    <section id="lic_29">
+      <title>MPL-1.0</title>
+
+      <para><programlisting>
 
 MOZILLA PUBLIC LICENSE
 Version 1.0
@@ -5419,11 +9150,421 @@ All Rights Reserved.
 
 Contributor(s): ______________________________________.``
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_30">
+      <title>MPL-1.1</title>
+
+      <para><programlisting>
 
-<section id="lic_24">
-<title>MPL-2.0</title>
-<para><programlisting>
+Mozilla Public License Version 1.1
+
+1. Definitions.
+
+1.0.1. "Commercial Use"
+means distribution or otherwise making the Covered Code available to a third party.
+1.1. "Contributor"
+means each entity that creates or contributes to the creation of Modifications.
+1.2. "Contributor Version"
+means the combination of the Original Code, prior Modifications used by a Contributor,
+and the Modifications made by that particular Contributor.
+1.3. "Covered Code"
+means the Original Code or Modifications or the combination of the Original Code and
+Modifications, in each case including portions thereof.
+1.4. "Electronic Distribution Mechanism"
+means a mechanism generally accepted in the software development community for the
+electronic transfer of data.
+1.5. "Executable"
+means Covered Code in any form other than Source Code.
+1.6. "Initial Developer"
+means the individual or entity identified as the Initial Developer in the Source Code
+notice required by Exhibit A.
+1.7. "Larger Work"
+means a work which combines Covered Code or portions thereof with code not governed by
+the terms of this License.
+1.8. "License"
+means this document.
+1.8.1. "Licensable"
+means having the right to grant, to the maximum extent possible, whether at the time
+of the initial grant or subsequently acquired, any and all of the rights conveyed
+herein.
+1.9. "Modifications"
+means any addition to or deletion from the substance or structure of either the
+Original Code or any previous Modifications. When Covered Code is released as a series
+of files, a Modification is:
+Any addition to or deletion from the contents of a file containing Original Code or
+previous Modifications.
+Any new file that contains any part of the Original Code or previous Modifications.
+1.10. "Original Code"
+means Source Code of computer software code which is described in the Source Code
+notice required by Exhibit A as Original Code, and which, at the time of its release
+under this License is not already Covered Code governed by this License.
+1.10.1. "Patent Claims"
+means any patent claim(s), now owned or hereafter acquired, including without
+limitation, method, process, and apparatus claims, in any patent Licensable by
+grantor.
+1.11. "Source Code"
+means the preferred form of the Covered Code for making modifications to it, including
+all modules it contains, plus any associated interface definition files, scripts used
+to control compilation and installation of an Executable, or source code differential
+comparisons against either the Original Code or another well known, available Covered
+Code of the Contributor`s choice. The Source Code can be in a compressed or archival
+form, provided the appropriate decompression or de-archiving software is widely
+available for no charge.
+1.12. "You" (or "Your")
+means an individual or a legal entity exercising rights under, and complying with all
+of the terms of, this License or a future version of this License issued under Section
+6.1. For legal entities, "You" includes any entity which controls, is controlled by,
+or is under common control with You. For purposes of this definition, "control" means
+(a) the power, direct or indirect, to cause the direction or management of such
+entity, whether by contract or otherwise, or (b) ownership of more than fifty percent
+(50%) of the outstanding shares or beneficial ownership of such entity.
+2. Source Code License.
+
+2.1. The Initial Developer Grant.
+
+The Initial Developer hereby grants You a world-wide, royalty-free, non-exclusive
+license, subject to third party intellectual property claims:
+
+under intellectual property rights (other than patent or trademark) Licensable by
+Initial Developer to use, reproduce, modify, display, perform, sublicense and
+distribute the Original Code (or portions thereof) with or without Modifications,
+and/or as part of a Larger Work; and
+under Patents Claims infringed by the making, using or selling of Original Code, to
+make, have made, use, practice, sell, and offer for sale, and/or otherwise dispose of
+the Original Code (or portions thereof).
+the licenses granted in this Section 2.1 (a) and (b) are effective on the date Initial
+Developer first distributes Original Code under the terms of this License.
+Notwithstanding Section 2.1 (b) above, no patent license is granted: 1) for code that
+You delete from the Original Code; 2) separate from the Original Code; or 3) for
+infringements caused by: i) the modification of the Original Code or ii) the
+combination of the Original Code with other software or devices.
+2.2. Contributor Grant.
+
+Subject to third party intellectual property claims, each Contributor hereby grants
+You a world-wide, royalty-free, non-exclusive license
+
+under intellectual property rights (other than patent or trademark) Licensable by
+Contributor, to use, reproduce, modify, display, perform, sublicense and distribute
+the Modifications created by such Contributor (or portions thereof) either on an
+unmodified basis, with other Modifications, as Covered Code and/or as part of a Larger
+Work; and
+under Patent Claims infringed by the making, using, or selling of Modifications made
+by that Contributor either alone and/or in combination with its Contributor Version
+(or portions of such combination), to make, use, sell, offer for sale, have made,
+and/or otherwise dispose of: 1) Modifications made by that Contributor (or portions
+thereof); and 2) the combination of Modifications made by that Contributor with its
+Contributor Version (or portions of such combination).
+the licenses granted in Sections 2.2 (a) and 2.2 (b) are effective on the date
+Contributor first makes Commercial Use of the Covered Code.
+Notwithstanding Section 2.2 (b) above, no patent license is granted: 1) for any code
+that Contributor has deleted from the Contributor Version; 2) separate from the
+Contributor Version; 3) for infringements caused by: i) third party modifications of
+Contributor Version or ii) the combination of Modifications made by that Contributor
+with other software (except as part of the Contributor Version) or other devices; or
+4) under Patent Claims infringed by Covered Code in the absence of Modifications made
+by that Contributor.
+3. Distribution Obligations.
+
+3.1. Application of License.
+
+The Modifications which You create or to which You contribute are governed by the
+terms of this License, including without limitation Section 2.2. The Source Code
+version of Covered Code may be distributed only under the terms of this License or a
+future version of this License released under Section 6.1, and You must include a copy
+of this License with every copy of the Source Code You distribute. You may not offer
+or impose any terms on any Source Code version that alters or restricts the applicable
+version of this License or the recipients` rights hereunder. However, You may include
+an additional document offering the additional rights described in Section 3.5.
+
+3.2. Availability of Source Code.
+
+Any Modification which You create or to which You contribute must be made available in
+Source Code form under the terms of this License either on the same media as an
+Executable version or via an accepted Electronic Distribution Mechanism to anyone to
+whom you made an Executable version available; and if made available via Electronic
+Distribution Mechanism, must remain available for at least twelve (12) months after
+the date it initially became available, or at least six (6) months after a subsequent
+version of that particular Modification has been made available to such recipients.
+You are responsible for ensuring that the Source Code version remains available even
+if the Electronic Distribution Mechanism is maintained by a third party.
+
+3.3. Description of Modifications.
+
+You must cause all Covered Code to which You contribute to contain a file documenting
+the changes You made to create that Covered Code and the date of any change. You must
+include a prominent statement that the Modification is derived, directly or
+indirectly, from Original Code provided by the Initial Developer and including the
+name of the Initial Developer in (a) the Source Code, and (b) in any notice in an
+Executable version or related documentation in which You describe the origin or
+ownership of the Covered Code.
+
+3.4. Intellectual Property Matters
+
+(a) Third Party Claims
+
+If Contributor has knowledge that a license under a third party`s intellectual
+property rights is required to exercise the rights granted by such Contributor under
+Sections 2.1 or 2.2, Contributor must include a text file with the Source Code
+distribution titled "LEGAL" which describes the claim and the party making the claim
+in sufficient detail that a recipient will know whom to contact. If Contributor
+obtains such knowledge after the Modification is made available as described in
+Section 3.2, Contributor shall promptly modify the LEGAL file in all copies
+Contributor makes available thereafter and shall take other steps (such as notifying
+appropriate mailing lists or newsgroups) reasonably calculated to inform those who
+received the Covered Code that new knowledge has been obtained.
+
+(b) Contributor APIs
+
+If Contributor`s Modifications include an application programming interface and
+Contributor has knowledge of patent licenses which are reasonably necessary to
+implement that API, Contributor must also include this information in the LEGAL file.
+
+(c) Representations.
+
+Contributor represents that, except as disclosed pursuant to Section 3.4 (a) above,
+Contributor believes that Contributor`s Modifications are Contributor`s original
+creation(s) and/or Contributor has sufficient rights to grant the rights conveyed by
+this License.
+
+3.5. Required Notices.
+
+You must duplicate the notice in Exhibit A in each file of the Source Code. If it is
+not possible to put such notice in a particular Source Code file due to its structure,
+then You must include such notice in a location (such as a relevant directory) where a
+user would be likely to look for such a notice. If You created one or more
+Modification(s) You may add your name as a Contributor to the notice described in
+Exhibit A. You must also duplicate this License in any documentation for the Source
+Code where You describe recipients` rights or ownership rights relating to Covered
+Code. You may choose to offer, and to charge a fee for, warranty, support, indemnity
+or liability obligations to one or more recipients of Covered Code. However, You may
+do so only on Your own behalf, and not on behalf of the Initial Developer or any
+Contributor. You must make it absolutely clear than any such warranty, support,
+indemnity or liability obligation is offered by You alone, and You hereby agree to
+indemnify the Initial Developer and every Contributor for any liability incurred by
+the Initial Developer or such Contributor as a result of warranty, support, indemnity
+or liability terms You offer.
+
+3.6. Distribution of Executable Versions.
+
+You may distribute Covered Code in Executable form only if the requirements of
+Sections 3.1, 3.2, 3.3, 3.4 and 3.5 have been met for that Covered Code, and if You
+include a notice stating that the Source Code version of the Covered Code is available
+under the terms of this License, including a description of how and where You have
+fulfilled the obligations of Section 3.2. The notice must be conspicuously included in
+any notice in an Executable version, related documentation or collateral in which You
+describe recipients` rights relating to the Covered Code. You may distribute the
+Executable version of Covered Code or ownership rights under a license of Your choice,
+which may contain terms different from this License, provided that You are in
+compliance with the terms of this License and that the license for the Executable
+version does not attempt to limit or alter the recipient`s rights in the Source Code
+version from the rights set forth in this License. If You distribute the Executable
+version under a different license You must make it absolutely clear that any terms
+which differ from this License are offered by You alone, not by the Initial Developer
+or any Contributor. You hereby agree to indemnify the Initial Developer and every
+Contributor for any liability incurred by the Initial Developer or such Contributor as
+a result of any such terms You offer.
+
+3.7. Larger Works.
+
+You may create a Larger Work by combining Covered Code with other code not governed by
+the terms of this License and distribute the Larger Work as a single product. In such
+a case, You must make sure the requirements of this License are fulfilled for the
+Covered Code.
+
+4. Inability to Comply Due to Statute or Regulation.
+
+If it is impossible for You to comply with any of the terms of this License with
+respect to some or all of the Covered Code due to statute, judicial order, or
+regulation then You must: (a) comply with the terms of this License to the maximum
+extent possible; and (b) describe the limitations and the code they affect. Such
+description must be included in the LEGAL file described in Section 3.4 and must be
+included with all distributions of the Source Code. Except to the extent prohibited by
+statute or regulation, such description must be sufficiently detailed for a recipient
+of ordinary skill to be able to understand it.
+
+5. Application of this License.
+
+This License applies to code to which the Initial Developer has attached the notice in
+Exhibit A and to related Covered Code.
+
+6. Versions of the License.
+
+6.1. New Versions
+
+Netscape Communications Corporation ("Netscape") may publish revised and/or new
+versions of the License from time to time. Each version will be given a distinguishing
+version number.
+
+6.2. Effect of New Versions
+
+Once Covered Code has been published under a particular version of the License, You
+may always continue to use it under the terms of that version. You may also choose to
+use such Covered Code under the terms of any subsequent version of the License
+published by Netscape. No one other than Netscape has the right to modify the terms
+applicable to Covered Code created under this License.
+
+6.3. Derivative Works
+
+If You create or use a modified version of this License (which you may only do in
+order to apply it to code which is not already Covered Code governed by this License),
+You must (a) rename Your license so that the phrases "Mozilla", "MOZILLAPL", "MOZPL",
+"Netscape", "MPL", "NPL" or any confusingly similar phrase do not appear in your
+license (except to note that your license differs from this License) and (b) otherwise
+make it clear that Your version of the license contains terms which differ from the
+Mozilla Public License and Netscape Public License. (Filling in the name of the
+Initial Developer, Original Code or Contributor in the notice described in Exhibit A
+shall not of themselves be deemed to be modifications of this License.)
+
+7. DISCLAIMER OF WARRANTY
+
+COVERED CODE IS PROVIDED UNDER THIS LICENSE ON AN "AS IS" BASIS, WITHOUT WARRANTY OF
+ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, WARRANTIES THAT
+THE COVERED CODE IS FREE OF DEFECTS, MERCHANTABLE, FIT FOR A PARTICULAR PURPOSE OR
+NON-INFRINGING. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE COVERED CODE
+IS WITH YOU. SHOULD ANY COVERED CODE PROVE DEFECTIVE IN ANY RESPECT, YOU (NOT THE
+INITIAL DEVELOPER OR ANY OTHER CONTRIBUTOR) ASSUME THE COST OF ANY NECESSARY
+SERVICING, REPAIR OR CORRECTION. THIS DISCLAIMER OF WARRANTY CONSTITUTES AN ESSENTIAL
+PART OF THIS LICENSE. NO USE OF ANY COVERED CODE IS AUTHORIZED HEREUNDER EXCEPT UNDER
+THIS DISCLAIMER.
+
+8. Termination
+
+8.1. This License and the rights granted hereunder will terminate automatically if You
+fail to comply with terms herein and fail to cure such breach within 30 days of
+becoming aware of the breach. All sublicenses to the Covered Code which are properly
+granted shall survive any termination of this License. Provisions which, by their
+nature, must remain in effect beyond the termination of this License shall survive.
+
+8.2. If You initiate litigation by asserting a patent infringement claim (excluding
+declatory judgment actions) against Initial Developer or a Contributor (the Initial
+Developer or Contributor against whom You file such action is referred to as
+"Participant") alleging that:
+
+such Participant`s Contributor Version directly or indirectly infringes any patent,
+then any and all rights granted by such Participant to You under Sections 2.1 and/or
+2.2 of this License shall, upon 60 days notice from Participant terminate
+prospectively, unless if within 60 days after receipt of notice You either: (i) agree
+in writing to pay Participant a mutually agreeable reasonable royalty for Your past
+and future use of Modifications made by such Participant, or (ii) withdraw Your
+litigation claim with respect to the Contributor Version against such Participant. If
+within 60 days of notice, a reasonable royalty and payment arrangement are not
+mutually agreed upon in writing by the parties or the litigation claim is not
+withdrawn, the rights granted by Participant to You under Sections 2.1 and/or 2.2
+automatically terminate at the expiration of the 60 day notice period specified above.
+any software, hardware, or device, other than such Participant`s Contributor Version,
+directly or indirectly infringes any patent, then any rights granted to You by such
+Participant under Sections 2.1(b) and 2.2(b) are revoked effective as of the date You
+first made, used, sold, distributed, or had made, Modifications made by that
+Participant.
+8.3. If You assert a patent infringement claim against Participant alleging that such
+Participant`s Contributor Version directly or indirectly infringes any patent where
+such claim is resolved (such as by license or settlement) prior to the initiation of
+patent infringement litigation, then the reasonable value of the licenses granted by
+such Participant under Sections 2.1 or 2.2 shall be taken into account in determining
+the amount or value of any payment or license.
+
+8.4. In the event of termination under Sections 8.1 or 8.2 above, all end user license
+agreements (excluding distributors and resellers) which have been validly granted by
+You or any distributor hereunder prior to termination shall survive termination.
+
+9. LIMITATION OF LIABILITY
+
+UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY, WHETHER TORT (INCLUDING NEGLIGENCE),
+CONTRACT, OR OTHERWISE, SHALL YOU, THE INITIAL DEVELOPER, ANY OTHER CONTRIBUTOR, OR
+ANY DISTRIBUTOR OF COVERED CODE, OR ANY SUPPLIER OF ANY OF SUCH PARTIES, BE LIABLE TO
+ANY PERSON FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY
+CHARACTER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF GOODWILL, WORK STOPPAGE,
+COMPUTER FAILURE OR MALFUNCTION, OR ANY AND ALL OTHER COMMERCIAL DAMAGES OR LOSSES,
+EVEN IF SUCH PARTY SHALL HAVE BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. THIS
+LIMITATION OF LIABILITY SHALL NOT APPLY TO LIABILITY FOR DEATH OR PERSONAL INJURY
+RESULTING FROM SUCH PARTY`S NEGLIGENCE TO THE EXTENT APPLICABLE LAW PROHIBITS SUCH
+LIMITATION. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL
+OR CONSEQUENTIAL DAMAGES, SO THIS EXCLUSION AND LIMITATION MAY NOT APPLY TO YOU.
+
+10. U.S. government end users
+
+The Covered Code is a "commercial item," as that term is defined in 48 C.F.R. 2.101
+(Oct. 1995), consisting of "commercial computer software" and "commercial computer
+software documentation," as such terms are used in 48 C.F.R. 12.212 (Sept. 1995).
+Consistent with 48 C.F.R. 12.212 and 48 C.F.R. 227.7202-1 through 227.7202-4 (June
+1995), all U.S. Government End Users acquire Covered Code with only those rights set
+forth herein.
+
+11. Miscellaneous
+
+This License represents the complete agreement concerning subject matter hereof. If
+any provision of this License is held to be unenforceable, such provision shall be
+reformed only to the extent necessary to make it enforceable. This License shall be
+governed by California law provisions (except to the extent applicable law, if any,
+provides otherwise), excluding its conflict-of-law provisions. With respect to
+disputes in which at least one party is a citizen of, or an entity chartered or
+registered to do business in the United States of America, any litigation relating to
+this License shall be subject to the jurisdiction of the Federal Courts of the
+Northern District of California, with venue lying in Santa Clara County, California,
+with the losing party responsible for costs, including without limitation, court costs
+and reasonable attorneys` fees and expenses. The application of the United Nations
+Convention on Contracts for the International Sale of Goods is expressly excluded. Any
+law or regulation which provides that the language of a contract shall be construed
+against the drafter shall not apply to this License.
+
+12. Responsibility for claims
+
+As between Initial Developer and the Contributors, each party is responsible for
+claims and damages arising, directly or indirectly, out of its utilization of rights
+under this License and You agree to work with Initial Developer and Contributors to
+distribute such responsibility on an equitable basis. Nothing herein is intended or
+shall be deemed to constitute any admission of liability.
+
+13. Multiple-licensed code
+
+Initial Developer may designate portions of the Covered Code as "Multiple-Licensed".
+"Multiple-Licensed" means that the Initial Developer permits you to utilize portions
+of the Covered Code under Your choice of the MPL or the alternative licenses, if any,
+specified by the Initial Developer in the file described in Exhibit A.
+
+Exhibit A - Mozilla Public License.
+
+"The contents of this file are subject to the Mozilla Public License
+Version 1.1 (the "License"); you may not use this file except in
+compliance with the License. You may obtain a copy of the License at
+http://www.mozilla.org/MPL/
+
+Software distributed under the License is distributed on an "AS IS"
+basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
+License for the specific language governing rights and limitations
+under the License.
+
+The Original Code is ______________________________________.
+
+The Initial Developer of the Original Code is ________________________.
+Portions created by ______________________ are Copyright (C) ______
+_______________________. All Rights Reserved.
+
+Contributor(s): ______________________________________.
+
+Alternatively, the contents of this file may be used under the terms
+of the _____ license (the  "[___] License"), in which case the
+provisions of [______] License are applicable instead of those
+above. If you wish to allow use of your version of this file only
+under the terms of the [____] License and not to allow others to use
+your version of this file under the MPL, indicate your decision by
+deleting the provisions above and replace them with the notice and
+other provisions required by the [___] License. If you do not delete
+the provisions above, a recipient may use your version of this file
+under either the MPL or the [___] License."
+NOTE: The text of this Exhibit A may differ slightly from the text of the notices in
+the Source Code files of the Original Code. You should use the text of this Exhibit A
+rather than the text found in the Original Code Source Code for Your Modifications.
+
+</programlisting></para>
+    </section>
+
+    <section id="lic_31">
+      <title>MPL-2.0</title>
+
+      <para><programlisting>
 Mozilla Public License Version 2.0
 ==================================
 
@@ -5797,11 +9938,51 @@ Exhibit B - "Incompatible With Secondary Licenses" Notice
 
   This Source Code Form is "Incompatible With Secondary Licenses", as
   defined by the Mozilla Public License, v. 2.0.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="NCSA">
+      <title>NCSA</title>
 
-<section id="lic_25">
-<title>OASIS</title>
-<para><programlisting>
+      <para><programlisting>University of Illinois/NCSA Open Source License
+Copyright (c) &lt;Year&gt; &lt;Owner Organization Name&gt;
+All rights reserved.
+
+Developed by:   &lt;Name of Development Group&gt;
+                       &lt;Name of Institution&gt;
+                        &lt;URL for Development Group/Institution&gt;
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and associated documentation files (the
+"Software"), to deal with the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimers.
+Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimers
+in the documentation and/or other materials provided with the
+distribution.
+Neither the names of &lt;Name of Development Group, Name of
+Institution&gt;, nor the names of its contributors may be used to endorse
+or promote products derived from this Software without specific prior
+written permission.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE CONTRIBUTORS OR COPYRIGHT HOLDERS BE LIABLE FOR
+ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS WITH THE SOFTWARE.
+</programlisting></para>
+    </section>
+
+    <section id="lic_32">
+      <title>OASIS</title>
+
+      <para><programlisting>
   Permission to use, copy, modify and distribute the DocBook DTD and
   its accompanying documentation for any purpose and without fee is
   hereby granted in perpetuity, provided that the above copyright
@@ -5815,11 +9996,108 @@ Exhibit B - "Incompatible With Secondary Licenses" Notice
   additional notations, label your DTD as a variant of DocBook.  See
   the maintenance documentation for more information.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_33">
+      <title>OFL-1.1</title>
+
+      <para><programlisting>
+
+SIL OPEN FONT LICENSE
+
+Version 1.1 - 26 February 2007
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION and CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
 
-<section id="lic_26">
-<title>OpenSSL</title>
-<para><programlisting>
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
+
+</programlisting></para>
+    </section>
+
+    <section id="lic_34">
+      <title>OpenSSL</title>
+
+      <para><programlisting>
 
 OpenSSL License
 
@@ -5936,17 +10214,21 @@ put under another distribution licence
 
 
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
 
-<section id="lic_27">
-<title>PD</title>
-<para><programlisting>
+    <section id="lic_35">
+      <title>PD</title>
+
+      <para><programlisting>
 This is a placeholder for the Public Domain License
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_36">
+      <title>Python-2.0</title>
 
-<section id="lic_28">
-<title>Python-2.0</title>
-<para><programlisting>
+      <para><programlisting>
 
 PYTHON SOFTWARE FOUNDATION LICENSE VERSION 2
 --------------------------------------------
@@ -6139,11 +10421,12 @@ WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
 OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+    <section id="lic_37">
+      <title>Sleepycat</title>
 
-<section id="lic_29">
-<title>Sleepycat</title>
-<para><programlisting>
+      <para><programlisting>
 
 The Sleepycat License
 Copyright (c) 1990-1999
@@ -6234,11 +10517,238 @@ LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 SUCH DAMAGE.
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="SMAIL_GPL">
+      <title>SMAIL_GPL </title>
+      <para><programlisting>
+This is the Debian GNU/Linux package debianutils.
+
+It is an original Debian package.  Programs in it were maintained by
+Guy Maor &lt;maor@debian.org&gt;, and are now maintained by Clint Adams
+&lt;schizo@debian.org&gt;.
+
+All its programs except readlink, savelog, and which may be
+redistributed under the terms of the GNU GPL, Version 2 or later,
+found on Debian systems in the file /usr/share/common-licenses/GPL.
+
+which is in the public domain.
+
+readlink is Copyright (c) 1997 Kenneth Stailey, and may also be
+distributed under the terms of the BSD copyright.
+
+savelog may be redistributed under the following terms: (The rest of
+this file consists of savelog's distribution terms.)
+
+#ident  "@(#)smail:RELEASE-3_2:COPYING,v 1.2 1996/06/14 18:59:10 woods Exp"
+
+                     SMAIL GENERAL PUBLIC LICENSE
+                       (Clarified 11 Feb 1988)
 
-<section id="lic_30">
-<title>Zlib</title>
-<para><programlisting>
+ Copyright (C)  1988 Landon Curt Noll &amp; Ronald S. Karr
+ Copyright (C)  1992 Ronald S. Karr
+ Copyleft (GNU) 1988 Landon Curt Noll &amp; Ronald S. Karr
+
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license, but changing it is not allowed.  You can also
+ use this wording to make the terms for other programs.
+
+  The license agreements of most software companies keep you at the
+mercy of those companies.  By contrast, our general public license is
+intended to give everyone the right to share SMAIL.  To make sure that
+you get the rights we want you to have, we need to make restrictions
+that forbid anyone to deny you these rights or to ask you to surrender
+the rights.  Hence this license agreement.
+
+  Specifically, we want to make sure that you have the right to give
+away copies of SMAIL, that you receive source code or else can get it
+if you want it, that you can change SMAIL or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  To make sure that everyone has such rights, we have to forbid you to
+deprive anyone else of these rights.  For example, if you distribute
+copies of SMAIL, you must give the recipients all the rights that you
+have.  You must make sure that they, too, receive or can get the
+source code.  And you must tell them their rights.
+
+  Also, for our own protection, we must make certain that everyone
+finds out that there is no warranty for SMAIL.  If SMAIL is modified by
+someone else and passed on, we want its recipients to know that what
+they have is not what we distributed, so that any problems introduced
+by others will not reflect on our reputation.
+
+  Therefore we (Landon Curt Noll and Ronald S. Karr) make the following
+terms which say what you must do to be allowed to distribute or change
+SMAIL.
+
+                        COPYING POLICIES
+
+  1. You may copy and distribute verbatim copies of SMAIL source code
+as you receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy a valid copyright notice "Copyright
+(C) 1988 Landon Curt Noll &amp; Ronald S. Karr" (or with whatever year is
+appropriate); keep intact the notices on all files that refer to this
+License Agreement and to the absence of any warranty; and give any
+other recipients of the SMAIL program a copy of this License
+Agreement along with the program.  You may charge a distribution fee
+for the physical act of transferring a copy.
+
+  2. You may modify your copy or copies of SMAIL or any portion of it,
+and copy and distribute such modifications under the terms of
+Paragraph 1 above, provided that you also do the following:
+
+    a) cause the modified files to carry prominent notices stating
+    that you changed the files and the date of any change; and
+
+    b) cause the whole of any work that you distribute or publish,
+    that in whole or in part contains or is a derivative of SMAIL or
+    any part thereof, to be licensed at no charge to all third
+    parties on terms identical to those contained in this License
+    Agreement (except that you may choose to grant more extensive
+    warranty protection to some or all third parties, at your option).
+
+    c) You may charge a distribution fee for the physical act of
+    transferring a copy, and you may at your option offer warranty
+    protection in exchange for a fee.
+
+Mere aggregation of another unrelated program with this program (or its
+derivative) on a volume of a storage or distribution medium does not bring
+the other program under the scope of these terms.
+
+  3. You may copy and distribute SMAIL (or a portion or derivative of it,
+under Paragraph 2) in object code or executable form under the terms of
+Paragraphs 1 and 2 above provided that you also do one of the following:
+
+    a) accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of
+    Paragraphs 1 and 2 above; or,
+
+    b) accompany it with a written offer, valid for at least three
+    years, to give any third party free (except for a nominal
+    shipping charge) a complete machine-readable copy of the
+    corresponding source code, to be distributed under the terms of
+    Paragraphs 1 and 2 above; or,
+
+    c) accompany it with the information you received as to where the
+    corresponding source code may be obtained.  (This alternative is
+    allowed only for non-commercial distribution and only if you
+    received the program in object code or executable form alone.)
+
+For an executable file, complete source code means all the source code for
+all modules it contains; but, as a special exception, it need not include
+source code for modules which are standard libraries that accompany the
+operating system on which the executable file runs.
+
+  4. You may not copy, sublicense, distribute or transfer SMAIL
+except as expressly provided under this License Agreement.  Any attempt
+otherwise to copy, sublicense, distribute or transfer SMAIL is void and
+your rights to use the program under this License agreement shall be
+automatically terminated.  However, parties who have received computer
+software programs from you with this License Agreement will not have
+their licenses terminated so long as such parties remain in full compliance.
+
+  5. If you wish to incorporate parts of SMAIL into other free
+programs whose distribution conditions are different, write to Landon
+Curt Noll &amp; Ronald S. Karr via the Free Software Foundation at 51
+Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.  We have not yet
+worked out a simple rule that can be stated here, but we will often
+permit this.  We will be guided by the two goals of preserving the
+free status of all derivatives of our free software and of promoting
+the sharing and reuse of software.
+
+Your comments and suggestions about our licensing policies and our
+software are welcome!  This contract was based on the contract made by
+the Free Software Foundation.  Please contact the Free Software
+Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301,
+USA, or call (617) 542-5942 for details on copylefted material in
+general.
+
+                       NO WARRANTY
+
+  BECAUSE SMAIL IS LICENSED FREE OF CHARGE, WE PROVIDE ABSOLUTELY NO
+WARRANTY, TO THE EXTENT PERMITTED BY APPLICABLE STATE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING, LANDON CURT NOLL &amp; RONALD S. KARR AND/OR
+OTHER PARTIES PROVIDE SMAIL "AS IS" WITHOUT WARRANTY OF ANY KIND,
+EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
+THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF SMAIL IS WITH
+YOU.  SHOULD SMAIL PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL
+NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW WILL LANDON CURT NOLL &amp;
+RONALD S. KARR AND/OR ANY OTHER PARTY WHO MAY MODIFY AND REDISTRIBUTE
+SMAIL AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+LOST PROFITS, LOST MONIES, OR OTHER SPECIAL, INCIDENTAL OR
+CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE
+(INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED
+INACCURATE OR LOSSES SUSTAINED BY THIRD PARTIES OR A FAILURE OF THE
+PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS) SMAIL, EVEN IF YOU HAVE
+BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, OR FOR ANY CLAIM BY
+ANY OTHER PARTY.
+
+      </programlisting></para>
+    </section>
+
+    <section id="lic_38">
+      <title>XSL</title>
+
+      <para><programlisting>
+Copyright
+---------
+Copyright (C) 1999-2007 Norman Walsh
+Copyright (C) 2003 Jiri­ Kosek
+Copyright (C) 2004-2007 Steve Ball
+Copyright (C) 2005-2008 The DocBook Project
+Copyright (C) 2011-2012 O'Reilly Media
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the ``Software''), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+Except as contained in this notice, the names of individuals
+credited with contribution to this software shall not be used in
+advertising or otherwise to promote the sale, use or other
+dealings in this Software without prior written authorization
+from the individuals in question.
+
+Any stylesheet derived from this Software that is publically
+distributed will be identified with a different name and the
+version strings in any derived Software will be changed so that
+no possibility of confusion between the derived package and this
+Software will exist.
+
+Warranty
+--------
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT.  IN NO EVENT SHALL NORMAN WALSH OR ANY OTHER
+CONTRIBUTOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+Contacting the Author
+---------------------
+The DocBook XSL stylesheets are maintained by Norman Walsh,
+&lt;ndw@nwalsh.com&gt;, and members of the DocBook Project,
+&lt;docbook-developers@sf.net&gt;
+</programlisting></para>
+    </section>
+
+    <section id="lic_39">
+      <title>Zlib</title>
+
+      <para><programlisting>
 
 zlib License
 
@@ -6260,11 +10770,13 @@ zlib License
   3. This notice may not be removed or altered from any source distribution.
 
 
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+
+    <section id="lic_40">
+      <title>tcl</title>
 
-<section id="lic_31">
-<title>tcl</title>
-<para><programlisting>
+      <para><programlisting>
 This software is copyrighted by the Regents of the University of
 California, Sun Microsystems, Inc., Scriptics Corporation, ActiveState
 Corporation and other parties.  The following terms apply to all files
@@ -6305,49 +10817,745 @@ Government shall have only "Restricted Rights" as defined in Clause
 authors grant the U.S. Government and others acting in its behalf
 permission to use and distribute the software in accordance with the
 terms specified in this license.
-</programlisting></para></section>
+</programlisting></para>
+    </section>
+  </section>
 
-  </section> 
- <section id="proprietary_license">
- <title>Proprietary Licenses</title>
+  <section id="proprietary_license">
+    <title>Proprietary Licenses</title>
 
 
-<section id="lic_32">
-<title>LICENCE.broadcom</title>
-<para><programlisting>
+    <section id="lic_41">
+      <title>The-Qt-Company-GPL-Exception-1.0</title>
 
-Copyright (c) 2006, Broadcom Corporation.
-Copyright (c) 2015, Raspberry Pi (Trading) Ltd
-All rights reserved.
+      <para><programlisting>
+This is the GNU General Public License version 3, annotated with The
+Qt Company GPL Exception 1.0:
 
-Redistribution.  Redistribution and use in binary form, without
-modification, are permitted provided that the following conditions are
-met:
-
-* This software may only be used for the purposes of developing for,
-  running or using a Raspberry Pi device.
-* Redistributions must reproduce the above copyright notice and the
-  following disclaimer in the documentation and/or other materials
-  provided with the distribution.
-* Neither the name of Broadcom Corporation nor the names of its suppliers
-  may be used to endorse or promote products derived from this software
-  without specific prior written permission.
-
-DISCLAIMER.  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
-CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
-BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
-FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
-COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
-INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
-BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
-OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
-ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
-TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
-USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
-DAMAGE.
-</programlisting></para></section>
+-------------------------------------------------------------------------
+
+The Qt Company GPL Exception 1.0
+
+Exception 1:
+
+As a special exception you may create a larger work which contains the
+output of this application and distribute that work under terms of your
+choice, so long as the work is not otherwise derived from or based on
+this application and so long as the work does not in itself generate
+output that contains the output from this application in its original
+or modified form.
+
+Exception 2:
+
+As a special exception, you have permission to combine this application
+with Plugins licensed under the terms of your choice, to produce an
+executable, and to copy and distribute the resulting executable under
+the terms of your choice. However, the executable must be accompanied
+by a prominent notice offering all users of the executable the entire
+source code to this application, excluding the source code of the
+independent modules, but including any changes you have made to this
+application, under the terms of this license.
+
+
+-------------------------------------------------------------------------
+
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. &lt;http://fsf.org/&gt;
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
 
+  The GNU General Public License is a free, copyleft license for
+software and other kinds of works.
 
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+the GNU General Public License is intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.  We, the Free Software Foundation, use the
+GNU General Public License for most of our software; it applies also to
+any other work released this way by its authors.  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  To protect your rights, we need to prevent others from denying you
+these rights or asking you to surrender the rights.  Therefore, you have
+certain responsibilities if you distribute copies of the software, or if
+you modify it: responsibilities to respect the freedom of others.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must pass on to the recipients the same
+freedoms that you received.  You must make sure that they, too, receive
+or can get the source code.  And you must show them these terms so they
+know their rights.
+
+  Developers that use the GNU GPL protect your rights with two steps:
+(1) assert copyright on the software, and (2) offer you this License
+giving you legal permission to copy, distribute and/or modify it.
+
+  For the developers' and authors' protection, the GPL clearly explains
+that there is no warranty for this free software.  For both users' and
+authors' sake, the GPL requires that modified versions be marked as
+changed, so that their problems will not be attributed erroneously to
+authors of previous versions.
+
+  Some devices are designed to deny users access to install or run
+modified versions of the software inside them, although the manufacturer
+can do so.  This is fundamentally incompatible with the aim of
+protecting users' freedom to change the software.  The systematic
+pattern of such abuse occurs in the area of products for individuals to
+use, which is precisely where it is most unacceptable.  Therefore, we
+have designed this version of the GPL to prohibit the practice for those
+products.  If such problems arise substantially in other domains, we
+stand ready to extend this provision to those domains in future versions
+of the GPL, as needed to protect the freedom of users.
+
+  Finally, every program is threatened constantly by software patents.
+States should not allow patents to restrict development and use of
+software on general-purpose computers, but in those that do, we wish to
+avoid the special danger that patents applied to a free program could
+make it effectively proprietary.  To prevent this, the GPL assures that
+patents cannot be used to render the program non-free.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+  13. Use with the GNU Affero General Public License.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU Affero General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the special requirements of the GNU Affero General Public License,
+section 13, concerning interaction through a network will apply to the
+combination as such.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    &lt;one line to give the program's name and a brief idea of what it does.&gt;
+    Copyright (C) &lt;year&gt;  &lt;name of author&gt;
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see &lt;http://www.gnu.org/licenses/&gt;.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If the program does terminal interaction, make it output a short
+notice like this when it starts in an interactive mode:
+
+    &lt;program>  Copyright (C) &lt;year&gt;   &lt;name of author&gt; 
+    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, your program's commands
+might be different; for a GUI interface, you would use an "about box".
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU GPL, see
+&lt;http://www.gnu.org/licenses/&gt;.
+
+  The GNU General Public License does not permit incorporating your program
+into proprietary programs.  If your program is a subroutine library, you
+may consider it more useful to permit linking proprietary applications with
+the library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.  But first, please read
+&lt;http://www.gnu.org/philosophy/why-not-lgpl.html&gt;.
 
-  </section> 
+      </programlisting></para>
+    </section>
+
+    <section id="lic_42">
+      <title>The-Qt-Company-Commercial</title>
+
+      <para><programlisting>
+/******************************************************************************
+**
+** Copyright (C) 2015 The Qt Company Ltd.
+** Contact: http://www.qt.io/licensing/
+**
+** This file is part of the &lt;Fill&gt; module.
+**
+** $QT_BEGIN_LICENSE:COMM$
+**
+** Commercial License Usage
+** Licensees holding valid commercial Qt licenses may use this file in
+** accordance with the commercial license agreement provided with the
+** Software or, alternatively, in accordance with the terms contained in
+** a written agreement between you and The Qt Company. For licensing terms
+** and conditions see http://www.qt.io/terms-conditions. For further
+** information use the contact form at http://www.qt.io/contact-us.
+**
+** $QT_END_LICENSE$
+**
+******************************************************************************/
+     </programlisting></para>
+    </section>
+  </section>
 </chapter>
diff --git a/doc/book-enea-linux-release-info/doc/about_release.xml b/doc/book-enea-linux-release-info/doc/about_release.xml
index 5004f66..cbdb52a 100644
--- a/doc/book-enea-linux-release-info/doc/about_release.xml
+++ b/doc/book-enea-linux-release-info/doc/about_release.xml
@@ -15,59 +15,57 @@
   xpointer="element(Yocto_NAME/1)" />.<remark>INFO <emphasis
   role="bold">eltf_params_updated.xml</emphasis> contains many parameters in
   the book, also in the open source books, and MUST be created FROM <emphasis
-  role="bold">eltf_params_template.xml</emphasis>. The parameters are
-  automatically used in the books, via xi:include statements, similar to how
-  parameters from pardoc-distro.xml are included in the book. Read the file
-  <emphasis role="bold">eltf_params_updated_template_how_to_use.txt</emphasis>
-  for important details about formats and how to do! The idea is that ELTF
-  will auto-create/update it.</remark></para>
+  role="bold">eltf_params_template.xml</emphasis>. </remark></para>
+
+  <para><remark>The parameters are automatically used in the books, via
+  xi:include statements, similar to how parameters from pardoc-distro.xml are
+  included in the book. Read the file <emphasis
+  role="bold">eltf_params_updated_template_how_to_use.txt</emphasis> for
+  important details about formats and how to do! The idea is that ELTF will
+  auto-create/update it.</remark></para>
 
   <section id="relinfo-provided-contents">
     <title>Provided Contents</title>
 
-    <para>The current release contains along with other items, documentation,
-    pre-built kernels and images, a bootloader and an SDK. The directories
-    structure is detailed below:</para>
+    <para>The current release contains documentation, prebuilt kernels and
+    images, a bootloader and an SDK. The directories structure is detailed
+    below:</para>
 
     <programlisting>-- Documentation/
-   /* Enea Linux 7 documentation */
-   -- raspberrypi3-64/
+   /* Enea Linux 8 documentation */
+   -- intel-corei7-64/
         /* artifacts for the reference machine */
              -- deb/
                 /* deb packages */
              -- images/
                 -- enea-image-standard
                    /* precompiled artifacts for the platform release image */
-                    -- various artifacts (rootfs, kernel, config, dtb etc.)
+                    -- various artifacts (rootfs, kernel, config etc.)
                 -- enea-image-standard-sdk
                    /* precompiled artifacts for the development process. The image
                       contains userspace tools and kernel configurations necessary
                       for developing, debugging and profiling applications and \
                       kernel modules */
                     -- various artifacts
-             -- sdk
-                /* SDK related artifacts including SDK installer and manifests  */
-                   -- enea-glibc-x86_64-enea-image-standard-sdk-aarch64-\
-                       toolchain-ext-7.0.sh
-                      /* self-extracting archive installing cross-compilation
+             -- esdk
+                /* Extensible SDK related artifacts including SDK installer and  */
+                      /* manifest, self-extracting archive installing cross-compilation
                       toolchain for the platform */
-                   -- x86_64-buildtools-nativesdk-standalone-7.0.sh
+                   -- x86_64-buildtools-nativesdk-standalone-8.0.sh
                       /* self-extracting archive installing additional tools
                          for the host machine */</programlisting>
 
     <para>The following set of artifacts is available:</para>
 
-    <programlisting>-- Image
+    <programlisting>-- bzImage
    /* kernel image */
--- Image-target.bin
+-- bzImage-&lt;target&gt;.bin
    /* kernel image, same as above */
--- Image-target.dtb
-   /* the device tree blob */
--- config-target.config
+-- config-&lt;target&gt;.config
    /* kernel configuration file */
--- image-name-target.ext3
-   /* compressed EXT3 image of the rootfs */
--- image-name-target.tar.bz2
+-- enea-image-standard-&lt;target&gt;.ext4
+   /* compressed EXT4 image of the rootfs */
+-- enea-image-standard-&lt;target&gt;.tar.gz
    /* tar archive of the image */
 -- modules-&lt;target&gt;.tgz
    /* external kernel modules */</programlisting>
@@ -76,14 +74,16 @@
   <section id="relinfo-supported-host-environment">
     <title>Supported Host Environment</title>
 
-    <para>Ubuntu 16.04 LTS, 64-bit<remark>Hardcoded now in this XML file.
-    Might be moved to the parameter file later.</remark><remark>INFO Below is
-    a complete section with ID "eltf-target-tables-section" included from
-    elft_params_updated.xml. It contains a variable number of target tables
-    and the section title should be "Supported Targets with Parameters". It
-    has have a short sentence about what it is in the beginning. The subtitles
-    shall have the directory name of the target in the
-    manifest.</remark></para>
+    <para>The following environments have been validated as host environments
+    for this release of Enea Linux: <emphasis role="bold">Ubuntu 16.04 LTS,
+    64-bit</emphasis>.</para>
+
+    <para><remark>INFO Below is a complete section with ID
+    "eltf-target-tables-section" included from elft_params_updated.xml. It
+    contains a variable number of target tables and the section title should
+    be "Supported Targets with Parameters". It has have a short sentence about
+    what it is in the beginning. The subtitles shall have the directory name
+    of the target in the manifest.</remark></para>
   </section>
 
   <xi:include href="eltf_params_updated.xml"
@@ -126,9 +126,13 @@
     <title>Provided Toolchains (SDK)</title>
 
     <para>The SDK contains toolchains supporting cross-compilation of
-    applications for the targets on an aarch64 host. See the <trademark
-    class="registered">Enea</trademark> Linux User's Guide for information on
-    how to build and install a toolchain.</para>
+    applications for the targets on an aarch64 host. For information on how to
+    build and install a toolchain, see the chapter <olink
+    targetdoc="book_enea_linux_user_guide_standard"
+    targetptr="using_enealinux">Using Enea Linux, in the <xi:include
+    href="../../s_docbuild/olinkdb/pardoc-names.xml"
+    xmlns:xi="http://www.w3.org/2001/XInclude"
+    xpointer="element(book_enea_linux_user_guide_standard/1)" /></olink>.</para>
   </section>
 
   <section id="relinfo-documentation">
@@ -143,13 +147,13 @@
       </listitem>
 
       <listitem>
-        <para><trademark class="registered">Enea</trademark> Linux User's
-        Guide</para>
+        <para><olink targetdoc="book_enea_linux_user_guide_standard"
+        targetptr="book_enea_linux_user_guide_standard"><trademark
+        class="registered">Enea</trademark> Linux User's Guide</olink></para>
       </listitem>
 
       <listitem>
-        <para><olink security=""
-        targetdoc="book_enea_linux_open_source_standard"
+        <para><olink targetdoc="book_enea_linux_open_source_standard"
         targetptr="book_enea_linux_open_source_standard"><trademark
         class="registered">Enea</trademark> Linux Open Source
         Report</olink></para>
@@ -166,9 +170,8 @@
       </listitem>
 
       <listitem>
-        <para><trademark class="registered">Enea</trademark> Linux Real-Time
-        Guide can be read at <ulink
-        url="http://linuxrealtime.org">http://linuxrealtime.org</ulink>.</para>
+        <para><trademark class="registered">Enea</trademark><ulink
+        url="http://linuxrealtime.org"> Linux Real-Time Guide</ulink></para>
       </listitem>
     </itemizedlist>
   </section>
@@ -227,4 +230,4 @@
         </listitem>
       </itemizedlist></para>
   </section>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/book-enea-linux-release-info/doc/eltf_params_updated.xml b/doc/book-enea-linux-release-info/doc/eltf_params_updated.xml
index 35db2a3..89f2270 100644
--- a/doc/book-enea-linux-release-info/doc/eltf_params_updated.xml
+++ b/doc/book-enea-linux-release-info/doc/eltf_params_updated.xml
@@ -42,17 +42,17 @@ export PATH=~/bin:$PATH</programlisting></para>
     correct also compared to the "previous" REL VER in pardoc-distro.xml
     "prev_baseline".</bridgehead>
 
-    <para id="EneaLinux_REL_VER"><phrase>7</phrase></para>
+    <para id="EneaLinux_REL_VER"><phrase>8</phrase></para>
 
-    <para id="Yocto_VER"><phrase>2.3</phrase></para>
+    <para id="Yocto_VER"><phrase>2.5</phrase></para>
 
-    <para id="Yocto_NAME"><phrase>pyro</phrase></para>
+    <para id="Yocto_NAME"><phrase>sumo</phrase></para>
 
     <para id="ULINK_YOCTO_PROJECT_DOWNLOAD"><ulink
-    url="http://www.yoctoproject.org/downloads/core/pyro23">http://www.yoctoproject.org/downloads/core/pyro23</ulink></para>
+    url="http://www.yoctoproject.org/downloads">http://www.yoctoproject.org/downloads</ulink></para>
 
     <para id="ULINK_ENEA_LINUX_URL"><ulink
-    url="http://linux.enea.com/EneaLinux7.0">http://linux.enea.com/EneaLinux7.0</ulink></para>
+    url="http://linux.enea.com/EneaLinux7.0">http://linux.enea.com/EneaLinux8.0</ulink></para>
 
     <bridgehead>A programlisting, ID "eltf-repo-cloning-enea-linux". Use
     $MACHINE/default.xml as parameter, where MACHINE is one of the target
@@ -61,7 +61,7 @@ export PATH=~/bin:$PATH</programlisting></para>
     <para id="eltf-repo-cloning-enea-linux"><programlisting>mkdir enea-linux
 cd enea-linux
 repo init -u git@git.enea.com:linux/manifests/el_manifests-standard.git \
-    -b refs/tags/Enea_Linux_7.0_RC4 -m $MACHINE/default.xml
+    -b refs/tags/Enea_Linux_8.0 -m $MACHINE/default.xml
 repo sync</programlisting></para>
 
     <bridgehead>A table with ONE row, only the row with ID
@@ -88,77 +88,256 @@ repo sync</programlisting></para>
   </section>
 
   <section id="eltf-target-tables-section">
-    <title>Supported Targets with Parameters</title>
+    <title>Supported Reference Boards with Parameters</title>
 
-    <para>The section(s) below describe the target(s) supported in this Enea
+    <para>The table(s) below describes the target(s) supported in this Enea
     Linux release.</para>
 
-    <section id="eltf-target-table-rpi">
-      <title>MACHINE raspberry pi 3 - Information</title>
+    <table>
+      <title>MACHINE Information Intel Xeon D</title>
 
-      <para><informaltable>
-          <tgroup cols="2">
-            <colspec colwidth="6*" />
+      <tgroup cols="2">
+        <colspec align="center" />
 
-            <colspec colwidth="9*" />
+        <thead>
+          <row>
+            <entry align="center">Component</entry>
 
-            <tbody>
-              <row>
-                <entry>Target official name</entry>
+            <entry align="center">Description</entry>
+          </row>
+        </thead>
 
-                <entry>Raspberry Pi 3</entry>
-              </row>
+        <tbody>
+          <row>
+            <entry align="left">Target official name</entry>
 
-              <row>
-                <entry>Architecture and Description</entry>
+            <entry>Intel Xeon D</entry>
+          </row>
 
-                <entry>ARM Cortex-A53 (ARMv8)</entry>
-              </row>
+          <row>
+            <entry align="left">Architecture and Description</entry>
 
-              <row>
-                <entry>Link to target datasheet</entry>
+            <entry>x86-64</entry>
+          </row>
 
-                <entry>See <ulink
-                url="https://www.raspberrypi.org/documentation/hardware/computemodule/RPI-CM-DATASHEET-V1_0.pdf">link
-                to Raspberry Pi's datasheet</ulink></entry>
-              </row>
+          <row>
+            <entry align="left">Link to target datasheet</entry>
 
-              <row condition="hidden">
-                <entry>Poky version</entry>
+            <entry><ulink
+            url="https://www.intel.com/content/www/us/en/processors/xeon/xeon-d-1500-datasheet-vol-1.html">Intel
+            Xeon D datasheet</ulink></entry>
+          </row>
 
-                <entry>Git-commit-id:
-                2021e95bcd986e5bcfe457da5c3e16d60241d050</entry>
-              </row>
+          <row>
+            <entry align="left">Poky version</entry>
 
-              <row>
-                <entry>GCC version</entry>
+            <entry>Git-commit-id: 51872d3f99e38f9d883ab0a8782ceecb41822fd0</entry>
+          </row>
 
-                <entry>6.3</entry>
-              </row>
+          <row>
+            <entry align="left">GCC version</entry>
 
-              <row>
-                <entry>Linux Kernel Version</entry>
+            <entry>7.3</entry>
+          </row>
 
-                <entry>4.9</entry>
-              </row>
+          <row>
+            <entry align="left">Linux Kernel Version</entry>
 
-              <row>
-                <entry>Supported Drivers</entry>
+            <entry>4.14</entry>
+          </row>
+
+          <row condition="hidden">
+            <entry align="left">Supported Drivers</entry>
+
+            <entry>Ethernet, RTC, UART</entry>
+          </row>
+        </tbody>
+      </tgroup>
+    </table>
+
+    <table>
+      <title>MACHINE Information Intel Atom C3000</title>
+
+      <tgroup cols="2">
+        <colspec align="center" />
+
+        <thead>
+          <row>
+            <entry align="center">Component</entry>
+
+            <entry align="center">Description</entry>
+          </row>
+        </thead>
+
+        <tbody>
+          <row>
+            <entry align="left">Target official name</entry>
+
+            <entry>Intel Atom C3000</entry>
+          </row>
+
+          <row>
+            <entry align="left">Architecture and Description</entry>
+
+            <entry>x86-64</entry>
+          </row>
 
-                <entry>Ethernet, I2C, SPI, PCM/I2S, UART, USB,
-                SD/SDHC/SDXC</entry>
-              </row>
+          <row>
+            <entry align="left">Link to target datasheet</entry>
 
-              <row>
-                <entry>Enea deb folder for downloading DEB packages for this
-                target</entry>
+            <entry><ulink
+            url="https://www.intel.com/content/www/us/en/products/docs/processors/atom/c-series/c3000-family-datasheet.html">Intel
+            Atom datasheet</ulink></entry>
+          </row>
+
+          <row>
+            <entry align="left">Poky version</entry>
+
+            <entry>Git-commit-id: 51872d3f99e38f9d883ab0a8782ceecb41822fd0</entry>
+          </row>
+
+          <row>
+            <entry align="left">GCC version</entry>
+
+            <entry>7.3</entry>
+          </row>
+
+          <row>
+            <entry align="left">Linux Kernel Version</entry>
+
+            <entry>4.14</entry>
+          </row>
+
+          <row condition="hidden">
+            <entry align="left">Supported Drivers</entry>
+
+            <entry>Ethernet, RTC, UART</entry>
+          </row>
+        </tbody>
+      </tgroup>
+    </table>
+
+    <table>
+      <title>MACHINE Information Intel NUC Kaby Lake</title>
+
+      <tgroup cols="2">
+        <colspec align="center" />
+
+        <thead>
+          <row>
+            <entry align="center">Component</entry>
+
+            <entry align="center">Description</entry>
+          </row>
+        </thead>
+
+        <tbody>
+          <row>
+            <entry align="left">Target official name</entry>
+
+            <entry>Intel NUC Kaby Lake</entry>
+          </row>
 
-                <entry><ulink
-                url="http://linux.enea.com/EneaLinux7.0/deb">http://linux.enea.com/EneaLinux7.0/deb</ulink></entry>
-              </row>
-            </tbody>
-          </tgroup>
-        </informaltable></para>
-    </section>
+          <row>
+            <entry align="left">Architecture and Description</entry>
+
+            <entry>x86-64</entry>
+          </row>
+
+          <row>
+            <entry align="left">Link to target datasheet</entry>
+
+            <entry><ulink
+            url="https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/nuc-kit-nuc7i7bnh-brief.pdf">Intel
+            NUC Kaby Lake datasheet</ulink></entry>
+          </row>
+
+          <row>
+            <entry align="left">Poky version</entry>
+
+            <entry>Git-commit-id: 51872d3f99e38f9d883ab0a8782ceecb41822fd0</entry>
+          </row>
+
+          <row>
+            <entry align="left">GCC version</entry>
+
+            <entry>7.3</entry>
+          </row>
+
+          <row>
+            <entry align="left">Linux Kernel Version</entry>
+
+            <entry>4.14</entry>
+          </row>
+
+          <row condition="hidden">
+            <entry align="left">Supported Drivers</entry>
+
+            <entry>Ethernet, RTC, UART</entry>
+          </row>
+        </tbody>
+      </tgroup>
+    </table>
+
+    <table>
+      <title>MACHINE Information QEMU x86</title>
+
+      <tgroup cols="2">
+        <colspec align="center" />
+
+        <thead>
+          <row>
+            <entry align="center">Component</entry>
+
+            <entry align="center">Description</entry>
+          </row>
+        </thead>
+
+        <tbody>
+          <row>
+            <entry align="left">Target official name</entry>
+
+            <entry>QEMU</entry>
+          </row>
+
+          <row>
+            <entry align="left">Architecture and Description</entry>
+
+            <entry>x86</entry>
+          </row>
+
+          <row>
+            <entry align="left">Link to target datasheet</entry>
+
+            <entry><ulink
+            url="http://wiki.qemu.org">http://wiki.qemu.org</ulink></entry>
+          </row>
+
+          <row>
+            <entry align="left">Poky version</entry>
+
+            <entry>Git-commit-id: 51872d3f99e38f9d883ab0a8782ceecb41822fd0</entry>
+          </row>
+
+          <row>
+            <entry align="left">GCC version</entry>
+
+            <entry>7.3</entry>
+          </row>
+
+          <row>
+            <entry align="left">Linux Kernel Version</entry>
+
+            <entry>4.14</entry>
+          </row>
+
+          <row condition="hidden">
+            <entry align="left">Supported Drivers</entry>
+
+            <entry>Ethernet, RTC, UART</entry>
+          </row>
+        </tbody>
+      </tgroup>
+    </table>
   </section>
-</section>
\ No newline at end of file
+</section>
diff --git a/doc/book-enea-linux-release-info/doc/known_bugs_and_limitations.xml b/doc/book-enea-linux-release-info/doc/known_bugs_and_limitations.xml
index 5c0c594..6fafb8d 100644
--- a/doc/book-enea-linux-release-info/doc/known_bugs_and_limitations.xml
+++ b/doc/book-enea-linux-release-info/doc/known_bugs_and_limitations.xml
@@ -5,17 +5,17 @@
   <title>Known Problems in this Release</title>
 
   <para>Open source projects are continuously working on correcting reported
-  problems. Corrections to bugs detected by Enea are submitted upstream, and
-  the corrections are included in Enea Linux regardless of when they will be
-  included by the open source project. Remaining issues are listed
-  below.<remark>INFO: The <emphasis role="bold">Release-Specific
-  Problems</emphasis> section further down is generated from JIRA with
-  gen_known_issues.py, but that script is HARDCODED with affectedversion "Enea
-  Linux 6" and needs to be adapted when a release info for another EL version
-  changes.</remark></para>
+  problems. Fixes and workarounds to bugs detected by Enea are submitted
+  upstream, and included in Enea Linux regardless of when they will be
+  included by the open source project. Issues that still affect the current
+  release are listed below.<remark>INFO: The <emphasis
+  role="bold">Release-Specific Problems</emphasis> section further down is
+  generated from JIRA with gen_known_issues.py, but that script is HARDCODED
+  with affectedversion "Enea Linux 6" and needs to be adapted when a release
+  info for another EL version changes.</remark></para>
 
   <section id="bugs-limitations-yocto">
-    <title>Yocto Project </title>
+    <title>Yocto Project</title>
 
     <para>The Yocto Project community uses a <ulink
     url="https://bugzilla.yoctoproject.org">Bugzilla database</ulink> to track
diff --git a/doc/book-enea-linux-release-info/doc/main_changes.xml b/doc/book-enea-linux-release-info/doc/main_changes.xml
index c0e3006..2b4e268 100644
--- a/doc/book-enea-linux-release-info/doc/main_changes.xml
+++ b/doc/book-enea-linux-release-info/doc/main_changes.xml
@@ -5,23 +5,21 @@
   <title>Main Changes</title>
 
   <para>This chapter describes the major changes and additions made to this
-  release of Enea Linux, as compared to the previous Enea Linux 6.<remark>INFO
-  Just now Hardcoded previous release string in this
-  paragraph.</remark><remark>The list of changed packages further down is
-  created from the open source book licenses.xml by the script gen_pkgdiff.py
-  by comparing with an older open source licenses.xml, depending on the
-  parameter "prev_baseline" in pardoc-distro.xml, e.g. a tag like "EL5". This
-  parameter needs to be changed to a new TAG when a release info for another
-  EL version is created. It must correspond to the release string
-  above.</remark></para>
+  release of Enea Linux.<remark>INFO Just now Hardcoded previous release
+  string in this paragraph.</remark><remark>The list of changed packages
+  further down is created from the open source book licenses.xml by the script
+  gen_pkgdiff.py by comparing with an older open source licenses.xml,
+  depending on the parameter "prev_baseline" in pardoc-distro.xml, e.g. a tag
+  like "EL5". This parameter needs to be changed to a new TAG when a release
+  info for another EL version is created. It must correspond to the release
+  string above.</remark></para>
 
   <section id="relinfo-changes-other">
     <title>New Functionality/Enhancements</title>
 
     <itemizedlist spacing="compact">
       <listitem>
-        <para><ulink
-        url="http://www.yoctoproject.org/downloads/core/pyro23">New Yocto
+        <para><ulink url="http://www.yoctoproject.org/downloads">New Yocto
         Project version</ulink> (<xi:include href="eltf_params_updated.xml"
         xmlns:xi="http://www.w3.org/2001/XInclude"
         xpointer="element(Yocto_VER/1)" />)<remark>INFO Yocto_VER and
@@ -30,7 +28,8 @@
       </listitem>
 
       <listitem>
-        <para>New targets: Raspberry Pi 3</para>
+        <para>New targets: Intel Xeon D, Intel Atom C3000, Intel NUC Kaby Lake
+        and QEMU x86.</para>
       </listitem>
     </itemizedlist>
   </section>
@@ -51,4 +50,4 @@
 
   <xi:include href="pkgdiff_generated.xml"
               xmlns:xi="http://www.w3.org/2001/XInclude" />
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/book-enea-linux-user-guide/doc/application_development.xml b/doc/book-enea-linux-user-guide/doc/application_development.xml
index 3458d39..0e2edf4 100644
--- a/doc/book-enea-linux-user-guide/doc/application_development.xml
+++ b/doc/book-enea-linux-user-guide/doc/application_development.xml
@@ -146,7 +146,7 @@ MODULE_LICENSE("GPL");</programlisting>
     environment. For this, see <xref linkend="install_el_sdk" />.</para>
 
     <para>The following section, <ulink
-    url="http://www.yoctoproject.org/docs/2.3/sdk-manual/sdk-manual.html#sdk-use-devtool-to-add-an-application">Use
+    url="http://www.yoctoproject.org/docs/2.5/sdk-manual/sdk-manual.html#sdk-use-devtool-to-add-an-application">Use
     devtool add to Add an Application</ulink>, in Yocto Project Software
     Development Kit (SDK) Developer's Guide, explains how to use devtool to
     generate recipes from existing application code, edit and build recipes,
@@ -279,4 +279,4 @@ NOTE: Your packages are in &lt;SDK_dir&gt;/tmp/deploy/deb</programlisting>
       </listitem>
     </orderedlist>
   </section>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/book-enea-linux-user-guide/doc/eltf_params_updated.xml b/doc/book-enea-linux-user-guide/doc/eltf_params_updated.xml
index 0543f86..0efa6af 100644
--- a/doc/book-enea-linux-user-guide/doc/eltf_params_updated.xml
+++ b/doc/book-enea-linux-user-guide/doc/eltf_params_updated.xml
@@ -42,17 +42,17 @@ export PATH=~/bin:$PATH</programlisting></para>
     correct also compared to the "previous" REL VER in pardoc-distro.xml
     "prev_baseline".</bridgehead>
 
-    <para id="EneaLinux_REL_VER"><phrase>7</phrase></para>
+    <para id="EneaLinux_REL_VER"><phrase>8</phrase></para>
 
-    <para id="Yocto_VER"><phrase>2.3</phrase></para>
+    <para id="Yocto_VER"><phrase>2.5</phrase></para>
 
-    <para id="Yocto_NAME"><phrase>pyro</phrase></para>
+    <para id="Yocto_NAME"><phrase>sumo</phrase></para>
 
     <para id="ULINK_YOCTO_PROJECT_DOWNLOAD"><ulink
-    url="http://www.yoctoproject.org/downloads/core/pyro23">http://www.yoctoproject.org/downloads/core/pyro23</ulink></para>
+    url="http://www.yoctoproject.org/downloads/core/pyro23">http://www.yoctoproject.org/downloads</ulink></para>
 
     <para id="ULINK_ENEA_LINUX_URL"><ulink
-    url="http://linux.enea.com/EneaLinux7.0">http://linux.enea.com/EneaLinux7.0</ulink></para>
+    url="http://linux.enea.com/EneaLinux8.0">http://linux.enea.com/EneaLinux8.0</ulink></para>
 
     <bridgehead>A programlisting, ID "eltf-repo-cloning-enea-linux". Use
     $MACHINE/default.xml as parameter, where MACHINE is one of the target
@@ -61,7 +61,7 @@ export PATH=~/bin:$PATH</programlisting></para>
     <para id="eltf-repo-cloning-enea-linux"><programlisting>mkdir enea-linux
 cd enea-linux
 repo init -u git@git.enea.com:linux/manifests/el_manifests-standard.git \
-    -b refs/tags/Enea_Linux_7.0_RC4 -m $MACHINE/default.xml
+    -b refs/tags/Enea_Linux_8.0 -m intel-corei7-64/default.xml
 repo sync</programlisting></para>
 
     <bridgehead>A table with ONE row, only the row with ID
@@ -87,78 +87,227 @@ repo sync</programlisting></para>
     target parameters in each target subsection table.</bridgehead>
   </section>
 
-  <section id="eltf-target-tables-section">
+  <section id="eltf-machine-tables-section">
     <title>Supported Targets with Parameters</title>
 
     <para>The section(s) below describe the target(s) supported in this Enea
     Linux release.</para>
 
-    <section id="eltf-target-table-rpi">
-      <title>MACHINE raspberry pi 3 - Information</title>
+    <section id="eltf-target-tables-section">
+      <title>MACHINE Information</title>
 
-      <para><informaltable>
-          <tgroup cols="2">
-            <colspec colwidth="6*" />
+      <para>The table(s) below describes the target(s) supported in this Enea
+      Linux release.</para>
 
-            <colspec colwidth="9*" />
+      <table>
+        <title>MACHINE Information Intel Xeon D</title>
 
-            <tbody>
-              <row>
-                <entry>Target official name</entry>
+        <tgroup cols="2">
+          <colspec align="center" />
 
-                <entry>Raspberry Pi 3</entry>
-              </row>
+          <thead>
+            <row>
+              <entry align="center">Component</entry>
 
-              <row>
-                <entry>Architecture and Description</entry>
+              <entry align="center">Description</entry>
+            </row>
+          </thead>
 
-                <entry>ARM Cortex-A53 (ARMv8)</entry>
-              </row>
+          <tbody>
+            <row>
+              <entry align="left">Target official name</entry>
 
-              <row>
-                <entry>Link to target datasheet</entry>
+              <entry>Intel Xeon D</entry>
+            </row>
 
-                <entry>See <ulink
-                url="https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2837/README.md">link
-                to Raspberry Pi's datasheet</ulink></entry>
-              </row>
+            <row>
+              <entry align="left">Architecture and Description</entry>
 
-              <row>
-                <entry>Poky version</entry>
+              <entry>x86-64</entry>
+            </row>
 
-                <entry>Git-commit-id:
-                2021e95bcd986e5bcfe457da5c3e16d60241d050</entry>
-              </row>
+            <row>
+              <entry align="left">Link to target datasheet</entry>
 
-              <row>
-                <entry>GCC version</entry>
+              <entry><ulink
+              url="https://www.intel.com/content/www/us/en/processors/xeon/xeon-d-1500-datasheet-vol-1.html">Intel
+              Xeon D datasheet</ulink></entry>
+            </row>
 
-                <entry>6.3</entry>
-              </row>
+            <row>
+              <entry align="left">Poky version</entry>
 
-              <row>
-                <entry>Linux Kernel Version</entry>
+              <entry>Git-commit-id: TBD</entry>
+            </row>
 
-                <entry>4.9</entry>
-              </row>
+            <row>
+              <entry align="left">GCC version</entry>
 
-              <row>
-                <entry>Supported Drivers</entry>
+              <entry>7.3</entry>
+            </row>
 
-                <entry>Ethernet, I2C, SPI, PCM/I2S, UART, USB,
-                SD/SDHC/SDXC</entry>
-              </row>
+            <row>
+              <entry align="left">Linux Kernel Version</entry>
 
-              <row>
-                <entry>Enea deb folder for downloading DEB packages for this
-                target</entry>
+              <entry>4.14</entry>
+            </row>
 
-                <entry><ulink
-                url="http://linux.enea.com/EneaLinux7.0/deb">http://linux.enea.com/EneaLinux7.0/deb</ulink></entry>
-              </row>
-            </tbody>
-          </tgroup>
-        </informaltable></para>
+            <row condition="hidden">
+              <entry align="left">Supported Drivers</entry>
+
+              <entry>Ethernet, RTC, UART</entry>
+            </row>
+
+            <row>
+              <entry>Enea deb folder for downloading DEB packages for this
+              target</entry>
+
+              <entry><ulink
+              url="http://linux.enea.com/EneaLinux8.0/deb">http://linux.enea.com/EneaLinux8.0/deb</ulink></entry>
+            </row>
+          </tbody>
+        </tgroup>
+      </table>
+
+      <table>
+        <title>MACHINE Information Intel Atom C3000</title>
+
+        <tgroup cols="2">
+          <colspec align="center" />
+
+          <thead>
+            <row>
+              <entry align="center">Component</entry>
+
+              <entry align="center">Description</entry>
+            </row>
+          </thead>
+
+          <tbody>
+            <row>
+              <entry align="left">Target official name</entry>
+
+              <entry>Intel Atom C3000</entry>
+            </row>
+
+            <row>
+              <entry align="left">Architecture and Description</entry>
+
+              <entry>x86-64</entry>
+            </row>
+
+            <row>
+              <entry align="left">Link to target datasheet</entry>
+
+              <entry><ulink
+              url="https://www.intel.com/content/www/us/en/products/docs/processors/atom/c-series/c3000-family-datasheet.html">Intel
+              Atom datasheet</ulink></entry>
+            </row>
+
+            <row>
+              <entry align="left">Poky version</entry>
+
+              <entry>Git-commit-id: TBD</entry>
+            </row>
+
+            <row>
+              <entry align="left">GCC version</entry>
+
+              <entry>7.3</entry>
+            </row>
+
+            <row>
+              <entry align="left">Linux Kernel Version</entry>
+
+              <entry>4.14</entry>
+            </row>
+
+            <row condition="hidden">
+              <entry align="left">Supported Drivers</entry>
+
+              <entry>Ethernet, RTC, UART</entry>
+            </row>
+
+            <row>
+              <entry>Enea deb folder for downloading DEB packages for this
+              target</entry>
+
+              <entry><ulink
+              url="http://linux.enea.com/EneaLinux8.0/deb">http://linux.enea.com/EneaLinux8.0/deb</ulink></entry>
+            </row>
+          </tbody>
+        </tgroup>
+      </table>
+
+      <table>
+        <title>MACHINE Information Intel NUC Kaby Lake</title>
+
+        <tgroup cols="2">
+          <colspec align="center" />
+
+          <thead>
+            <row>
+              <entry align="center">Component</entry>
+
+              <entry align="center">Description</entry>
+            </row>
+          </thead>
+
+          <tbody>
+            <row>
+              <entry align="left">Target official name</entry>
+
+              <entry>Intel NUC Kaby Lake</entry>
+            </row>
+
+            <row>
+              <entry align="left">Architecture and Description</entry>
+
+              <entry>x86-64</entry>
+            </row>
+
+            <row>
+              <entry align="left">Link to target datasheet</entry>
+
+              <entry><ulink
+              url="https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/nuc-kit-nuc7i5bnh-nuc7i5bnk-brief.pdf">Intel
+              NUC Kaby Lake datasheet</ulink></entry>
+            </row>
+
+            <row>
+              <entry align="left">Poky version</entry>
+
+              <entry>Git-commit-id: TBD</entry>
+            </row>
+
+            <row>
+              <entry align="left">GCC version</entry>
+
+              <entry>7.3</entry>
+            </row>
+
+            <row>
+              <entry align="left">Linux Kernel Version</entry>
+
+              <entry>4.14</entry>
+            </row>
+
+            <row condition="hidden">
+              <entry align="left">Supported Drivers</entry>
+
+              <entry>Ethernet, RTC, UART</entry>
+            </row>
+
+            <row>
+              <entry>Enea deb folder for downloading DEB packages for this
+              target</entry>
+
+              <entry><ulink
+              url="http://linux.enea.com/EneaLinux8.0/deb">http://linux.enea.com/EneaLinux8.0/deb</ulink></entry>
+            </row>
+          </tbody>
+        </tgroup>
+      </table>
     </section>
   </section>
-</section>
\ No newline at end of file
+</section>
diff --git a/doc/book-enea-linux-user-guide/doc/getting_enea_linux.xml b/doc/book-enea-linux-user-guide/doc/getting_enea_linux.xml
index 350c966..21d0cb9 100644
--- a/doc/book-enea-linux-user-guide/doc/getting_enea_linux.xml
+++ b/doc/book-enea-linux-user-guide/doc/getting_enea_linux.xml
@@ -12,7 +12,7 @@
     <title>Getting Pre-Built Binaries</title>
 
     <para>Enea Linux pre-built binaries are available for download on <ulink
-    url="https://portal.enea.com/login/?redirect_to=https%3A%2F%2Fportal.enea.com%2F">Enea
+    url="https://portal.enea.com/login">Enea
     Download Portal</ulink>. Log in using the credentials provided. Using the
     menu, browse to the <emphasis role="bold">Linux</emphasis> section. You
     will now have access to the <emphasis role="bold">Files</emphasis> section
@@ -34,8 +34,8 @@
       </listitem>
 
       <listitem>
-        <para><emphasis>sdk</emphasis> directory - this directory includes the
-        installer for the SDK.</para>
+        <para><emphasis>esdk</emphasis> directory - this directory includes the
+        installer for the Extensible SDK.</para>
       </listitem>
 
       <listitem>
@@ -118,17 +118,6 @@ id_rsa.pub</programlisting>
         </listitem>
 
         <listitem>
-          <para>Define the <filename>MACHINE</filename> from one of the
-          targets listed here:<remark>Below is the "machine_list"
-          programlisting in machine_list_generated.xml created by the make
-          system by extracting from the manifest</remark><itemizedlist>
-              <listitem>
-                <para>raspberrypi3-64</para>
-              </listitem>
-            </itemizedlist></para>
-        </listitem>
-
-        <listitem>
           <para>Then use the repo command below:</para>
 
           <xi:include href="../../book-enea-linux-release-info/doc/eltf_params_updated.xml"
@@ -153,4 +142,4 @@ id_rsa.pub</programlisting>
       etc. When this is done a reference from here should be added.</remark>
     </section>
   </section>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/book-enea-linux-user-guide/doc/preface.xml b/doc/book-enea-linux-user-guide/doc/preface.xml
index b1de43c..ff06753 100644
--- a/doc/book-enea-linux-user-guide/doc/preface.xml
+++ b/doc/book-enea-linux-user-guide/doc/preface.xml
@@ -3,7 +3,7 @@
   <title>Preface</title>
 
   <section id="guide_purpose">
-    <title>The Purpose of This Guide</title>
+    <title>The Purpose of this Guide</title>
 
     <para>This guide is intended for all Enea Linux developers who want to
     configure and build customized Linux kernel images for embedded system
@@ -103,6 +103,17 @@
             <entry>The release specific document listing the CVEs affecting
             this distribuition.</entry>
           </row>
+
+          <row>
+            <entry><ulink type=""
+            url="https://linux.enea.com/4.0/documentation/html/book-enea-linux-realtime-guide/">Enea
+            Linux Real Time documentation</ulink> and <ulink
+            url="https://rt.wiki.kernel.org/index.php/Main_Page">Real-Time
+            Linux Wiki</ulink></entry>
+
+            <entry>Enea Linux Real-Time Guide and Real-Time Linux Wiki
+            page.</entry>
+          </row>
         </tbody>
       </tgroup>
     </table>
@@ -154,4 +165,4 @@
       </listitem>
     </itemizedlist>
   </section>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/book-enea-linux-user-guide/doc/prerequisites_and_requirements.xml b/doc/book-enea-linux-user-guide/doc/prerequisites_and_requirements.xml
index 9642722..2215ba8 100644
--- a/doc/book-enea-linux-user-guide/doc/prerequisites_and_requirements.xml
+++ b/doc/book-enea-linux-user-guide/doc/prerequisites_and_requirements.xml
@@ -63,7 +63,7 @@ $ git config --global user.email johndoe@example.com</programlisting>
       <para>Building Enea Linux requires a set of packages to be installed on
       your Linux development host. The list of required packages is described
       in the <ulink
-      url="https://www.yoctoproject.org/docs/2.3/ref-manual/ref-manual.html#required-packages-for-the-host-development-system">Yocto
+      url="https://www.yoctoproject.org/docs/2.5/ref-manual/ref-manual.html#required-packages-for-the-host-development-system">Yocto
       Project reference manual</ulink>.</para>
     </section>
   </section>
@@ -98,4 +98,4 @@ Use dash as the default system shell (/bin/sh)? No</programlisting>
       </listitem>
     </itemizedlist>
   </section>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/book-enea-linux-user-guide/doc/using_eclipse.xml b/doc/book-enea-linux-user-guide/doc/using_eclipse.xml
index 9918ca2..8e560f5 100644
--- a/doc/book-enea-linux-user-guide/doc/using_eclipse.xml
+++ b/doc/book-enea-linux-user-guide/doc/using_eclipse.xml
@@ -7,7 +7,7 @@
 
     <para>For instructions on how to install Eclipse Oxygen, please refer to
     the <ulink
-    url="http://www.yoctoproject.org/docs/2.3.2/sdk-manual/sdk-manual.html#adt-eclipse">Yocto
+    url="http://www.yoctoproject.org/docs/2.5/sdk-manual/sdk-manual.html#adt-eclipse">Yocto
     Project Software Development Kit (SDK) Developer's Guide</ulink>, chapter
     4.3.2.1. Although the instructions listed there currently, refer to the
     Neon release of Eclipse, the same steps still apply to the Oxygen release,
@@ -47,7 +47,7 @@
 
     <para>To install the Yocto Plugins in Eclipse, follow the instructions in
     <ulink
-    url="http://www.yoctoproject.org/docs/2.3.2/sdk-manual/sdk-manual.html#adt-eclipse">chapter
+    url="http://www.yoctoproject.org/docs/2.5/sdk-manual/sdk-manual.html#adt-eclipse">chapter
     4.3.2.1.3.2</ulink>. of the Yocto Manual, starting with <emphasis
     role="bold">step 8</emphasis>. In <emphasis role="bold">step 12</emphasis>
     use the local archive that you downloaded previously.</para>
@@ -60,10 +60,14 @@
     Installed?</emphasis> link, as seen below.</para>
 
     <mediaobject>
-      <imageobject>
-        <imagedata align="center" contentwidth="650"
+      <imageobject role="fo">
+        <imagedata align="center" contentwidth="600"
                    fileref="images/install_new_sw.svg" />
       </imageobject>
+
+      <imageobject role="html">
+        <imagedata align="center" fileref="images/install_new_sw.png" />
+      </imageobject>
     </mediaobject>
   </section>
 
@@ -193,7 +197,7 @@ root 329 0.0 0.2 1864824 2600 ? Ssl 12:47 0:08 /usr/sbin/tcf-agent -d -L- -l0</p
           <para>For the <emphasis role="bold">Sysroot Location</emphasis>
           option, specify the path to the target sysroot directory inside the
           toolchain root location e.g.
-          <literal>&lt;extsdkdir&gt;/tmp/sysroots/aarch64-enea-linux/raspberrypi3-64</literal></para>
+          <literal>&lt;extsdkdir&gt;/tmp/sysroots/corei7-64-enea-linux/</literal></para>
         </listitem>
 
         <listitem>
@@ -217,9 +221,9 @@ root 329 0.0 0.2 1864824 2600 ? Ssl 12:47 0:08 /usr/sbin/tcf-agent -d -L- -l0</p
       <tip>
         <para>More details on how to configure the cross-compiler can be found
         in the <ulink
-        url="http://www.yoctoproject.org/docs/2.3/sdk-manual/sdk-manual.html"><emphasis>Yocto
+        url="http://www.yoctoproject.org/docs/2.5/sdk-manual/sdk-manual.html"><emphasis>Yocto
         Project Software Development Kit (SDK) Developer's Guide
-        2.3</emphasis></ulink>. Change the Yocto version in the link if
+        2.5</emphasis></ulink>. Change the Yocto version in the link if
         needed.</para>
 
         <para>There is also a good cheat sheet available in Eclipse, under
@@ -873,7 +877,7 @@ root 329 0.0 0.2 1864824 2600 ? Ssl 12:47 0:08 /usr/sbin/tcf-agent -d -L- -l0</p
                 <para>Under the <emphasis role="bold">Debugger</emphasis> tab,
                 fill in the <literal>GDB Debugger</literal> field with the
                 path to the GDB binary from the SDK. Example path:
-                <filename>&lt;extsdkdir&gt;/tmp/sysroots/x86_64-linux/usr/bin/&lt;arch&gt;-enea-linux/&lt;arch&gt;-enea-linux-gdb</filename></para>
+                <filename>&lt;extsdkdir&gt;/tmp/sysroots/x86_64/usr/bin/&lt;arch&gt;-enea-linux/&lt;arch&gt;-enea-linux-gdb</filename></para>
               </listitem>
 
               <listitem>
@@ -896,7 +900,7 @@ root 329 0.0 0.2 1864824 2600 ? Ssl 12:47 0:08 /usr/sbin/tcf-agent -d -L- -l0</p
     <para>In this section you learn to set up Eclipse for KGDB<indexterm>
         <primary>KGDB</primary>
       </indexterm> kernel debugging over the serial port, with examples for
-    the <literal>raspberrypi3</literal> target. This is only given as an
+    the <literal>intel-corei7-64</literal> target. This is only given as an
     example, your Enea Linux distribution may contain other targets. The
     corresponding instruction for debugging outside Eclipse is available in
     Debugging the Linux Kernel (KGDB) from Command Line.<remark>LATER: Merge
@@ -930,7 +934,7 @@ root 329 0.0 0.2 1864824 2600 ? Ssl 12:47 0:08 /usr/sbin/tcf-agent -d -L- -l0</p
         you can find it in the rootfs under the <literal>/boot</literal>
         folder. If you build your own kernel using bitbake, it should be
         available in your build folder. Located in, for example:
-        <filename><filename>tmp/work/raspberrypi3_64-enea-linux/linux-raspberrypi/1_4.9.59+gitAUTOINC+meta_machine-r0/image/boot/vmlinux-4.9.59</filename></filename></para>
+        <filename><filename>tmp/work/corei7-64-intel-common-enea-linux/linux-intel/4.14.66+gitAUTOINC+d64aec9793_dd6a8b48d4-r0/linux-corei7-64-intel-common-standard-build/vmlinux</filename></filename></para>
       </listitem>
 
       <listitem>
diff --git a/doc/book-enea-linux-user-guide/doc/using_enea_linux.xml b/doc/book-enea-linux-user-guide/doc/using_enea_linux.xml
index 3997038..a68f7da 100644
--- a/doc/book-enea-linux-user-guide/doc/using_enea_linux.xml
+++ b/doc/book-enea-linux-user-guide/doc/using_enea_linux.xml
@@ -5,9 +5,9 @@
   <section id="build_enealinux">
     <title>Building Enea Linux</title>
 
-    <para>Enea Linux is made available as sources as well. This allows
-    building various Enea Linux artifacts and this is detailed in the
-    following sections:</para>
+    <para>Enea Linux is made available as sources, this allows for of building
+    various Enea Linux artifacts and is detailed in the following
+    sections:</para>
 
     <section id="build_images">
       <title>Building the images</title>
@@ -16,15 +16,18 @@
 
       <procedure>
         <step>
+          <para>Set the $MACHINE/&lt;machine&gt; variable to the target you
+          need, e.g. <literal>intel-corei7-64</literal>.</para>
+        </step>
+
+        <step>
           <para>Clone Enea Linux sources using Repo tool. Please refer to
-          chapter 3.2 in the current documebt for more details on how to do
-          this.</para>
+          <xref linkend="getting_sources" /> for more details.</para>
 
           <programlisting>$ mkdir enea-linux
 $ cd enea-linux
-$ export MACHINE=&lt;machine&gt;
 $ repo init -u git@git.enea.com:linux/manifests/el_manifests-standard.git \
-    -b refs/tags/Enea_Linux_7.0 -m $MACHINE/default.xml
+    -b refs/tags/Enea_Linux_8.0 -m $MACHINE/default.xml
 $ repo sync</programlisting>
         </step>
 
@@ -35,13 +38,10 @@ $ repo sync</programlisting>
 $ TEMPLATECONF=meta-el-standard/conf/template.&lt;machine&gt; \
 . ./oe-init-build-env &lt;build_dir&gt;</programlisting>
 
-          <note>
-            <para>Sourcing the build environment is needed everytime a new
-            shell is used. However, sourcing using the
-            <literal>TEMPLATECONF</literal> is only needed the first time
-            around. Afterwards it is enough to source the build directory
-            created before.</para>
-          </note>
+          <para>Sourcing the build environment is needed everytime a new shell
+          is used. However, sourcing using the <literal>TEMPLATECONF</literal>
+          is only needed the first time around. After the first time, it is
+          enough to source the build directory created before.</para>
 
           <note>
             <para>The build directory may reside on an NFS mount, but the
@@ -105,9 +105,8 @@ $ cd &lt;build_dir&gt;/tmp/deploy/images/&lt;target&gt;/  # Here are the build b
 
           <programlisting>$ mkdir enea-linux
 $ cd enea-linux
-$ export MACHINE=&lt;machine&gt;
 $ repo init -u git@git.enea.com:linux/manifests/el_manifests-standard.git \
-    -b refs/tags/Enea_Linux_7.0 -m $MACHINE/default.xml
+    -b refs/tags/Enea_Linux_8.0 -m $MACHINE/default.xml
 $ repo sync</programlisting>
         </step>
 
@@ -118,13 +117,10 @@ $ repo sync</programlisting>
 $ TEMPLATECONF=meta-el-standard/conf/template.&lt;machine&gt; \
 . ./oe-init-build-env &lt;build_dir&gt;</programlisting>
 
-          <note>
-            <para>Sourcing the build environment is needed everytime a new
-            shell is used. However, sourcing using the
-            <literal>TEMPLATECONF</literal> is only needed the first time
-            around. Afterwards it is enough to source the build directory
-            created before.</para>
-          </note>
+          <para>Sourcing the build environment is needed everytime a new shell
+          is used. However, sourcing using the <literal>TEMPLATECONF</literal>
+          is only needed the first time around. Afterwards it is enough to
+          source the build directory created before.</para>
 
           <note>
             <para>The build directory may reside on an NFS mount, but the
@@ -177,109 +173,140 @@ $ cd &lt;build_dir&gt;/tmp/deploy/sdk/  # Here is the SDK installer script</prog
     <para>Enea Linux supports multiple booting methods so those will be
     described in the following sections.</para>
 
-    <section id="boot_from_arm">
-      <title>Boot from RAM</title>
-
-      <para>This example requires that a TFTP server is set up at IP address
-      <literal>&lt;tftp_server_ip&gt;</literal>, and that the server stores
-      the Enea Linux image files, kernel image, device tree blob and root
-      filesystem, in <literal>/tftpboot/&lt;download_directory&gt;.</literal>
-      Please refer to <xref linkend="prebuiltprereq" /> for more details on
-      how to install and configure the TFTP server.</para>
+    <section id="enea-linux-x86-pxe">
+      <title>Booting via PXE</title>
 
-      <para>Once you have that in place, run the following commands on the
-      target:</para>
+      <para>Below you find an example of how to boot Enea Linux in a target
+      supporting PXE. The PXE boot is handled by the target BIOS.</para>
 
-      <programlisting>## set tftp server IP
-U-Boot&gt; setenv serverip &lt;tftp_server_ip&gt;
+      <para>This requires the setup of DHCP, TFTP and NFS servers on the host.
+      The DHCP server contains a configuration for the target, found via the
+      target MAC address, and refers to the TFTP server for the boot image and
+      to the NFS server for the root file system.</para>
 
-## tftp the image files on the target machine
-U-Boot&gt; tftpboot 0x01000000 Image  
-U-Boot&gt; tftpboot 0x02000000 Image-bcm2837-rpi-3-b.dtb 
-U-Boot&gt; tftpboot 0x03000000 enea-image-standard-raspberrypi3-64.ext2.gz.u-boot
+      <para>For the DHCP server, in addition to the general configuration, the
+      DHCPD configuration should contain an entry for the target with the
+      following information:</para>
 
-## add any other bootargs values if necessary 
-U-Boot&gt; setenv bootargs "8250.nr_uarts=1 root=/dev/ram rw ramdisk_size=500000 ip=dhcp \
-console=ttyS0,115200"
+      <itemizedlist spacing="compact">
+        <listitem>
+          <para>Host name</para>
+        </listitem>
 
-## Start boot sequence
-U-Boot&gt; booti 0x01000000 0x03000000 0x02000000</programlisting>
-    </section>
+        <listitem>
+          <para>MAC hardware ethernet address (also available in the TFTP
+          configuration)</para>
+        </listitem>
 
-    <section id="boot_from_sd">
-      <title>Boot from SD card</title>
+        <listitem>
+          <para>IP address, (assuming a fixed IP address is used)</para>
+        </listitem>
 
-      <para>Copy the
-      <filename>enea-image-standard-raspberrypi3-64.rpi-sdimg</filename> image
-      to the SD card using the Linux dd tool or Win32DiskImager in Windows,
-      and insert it into the RPi. The Raspberry Pi will not start without a
-      properly formatted SD Card, containing the bootloader, kernel image and
-      rootfs.</para>
+        <listitem>
+          <para>The TFTP server shall be defined as
+          <literal>next-server</literal></para>
+        </listitem>
 
-      <para>Below you can find two methods of how to format an SD Card:</para>
+        <listitem>
+          <para>The relative path in the TFTP server to the PXE file
+          <filename><literal>pxelinux.0</literal></filename></para>
+        </listitem>
 
-      <itemizedlist>
         <listitem>
-          <para><emphasis role="bold">Format and copy images to the SD card
-          using the Linux dd command line</emphasis></para>
+          <para>The NFS server IP address and the path to the rootfs on the
+          NFS server, defined as <literal>option root-path</literal></para>
+        </listitem>
+      </itemizedlist>
 
-          <para>The <command>dd</command> command copies a file, converting
-          the format of the data in the process, according to the operands
-          specified:</para>
+      <para>Example of a DHCP server configuration:</para>
 
-          <programlisting>sudo dd bs=4M if=enea-image-standard-sdk-raspberrypi3-64.rpi-sdimg of=/dev/sdg</programlisting>
+      <programlisting>host intel-corei7-64_host {
+    hardware ethernet 01:00:25:90:c8:c5:98;
+    fixed-address     192.168.1.38;
+    next-server       192.168.2.10;
+    filename          "intel-corei7-64_tftp/pxelinux.0";
+    option root-path  "192.168.2.20:/export/intel-corei7-64_rootfs";
+}</programlisting>
 
-          <note>
-            <para>Use <command>dd</command> cautiously - improper usage or
-            entering the wrong values could inadvertently wipe, destroy, or
-            overwrite the data on your hard drive.</para>
-          </note>
-        </listitem>
+      <para>For the TFTP server, the TFTP path to the target's pxelinux.0 file
+      is given in the DHCP Configuration. Examples of files included in the
+      TFTP subdirectory indicated by the DHCP configuration are:</para>
 
-        <listitem>
-          <para><emphasis role="bold">Format the SD card using the
-          Win32DiskImager program</emphasis></para>
+      <programlisting>pxelinux.0
+vesamenu.c32
+boot/device01/bzImage                          (bootable image file)
+pxelinux.cfg/01-00-25-90-c8-c5-98              (Configuration file)</programlisting>
 
-          <orderedlist>
-            <listitem>
-              <para>Download and unzip <ulink
-              url="https://sourceforge.net/projects/win32diskimager/">Win32DiskImager</ulink></para>
-            </listitem>
+      <para>One configuration file has the same name as the target's MAC
+      address (but with hyphens instead of a colon). This configuration file
+      contains a pointer to the bootable image and also a list of command line
+      arguments to append when the image is started. The same NFS path to the
+      root file system is both in the DHCP and the TFTP configuration.</para>
 
-            <listitem>
-              <para>Run <filename>Win32DiskImager.exe</filename></para>
-            </listitem>
+      <para>Example of a configuration file:</para>
 
-            <listitem>
-              <para>Select the drive of your SD card</para>
-            </listitem>
+      <programlisting>default vesamenu.c32
+prompt 0
+timeout 100
 
-            <listitem>
-              <para>Select the image
-              <filename><filename>enea-image-standard-raspberrypi3-64.rpi-sdimg</filename></filename></para>
-            </listitem>
+label device01
+  menu label ^EneaLinuxNFS
+  menu default
+  kernel boot/device01/bzImage
+  <emphasis role="bold">append</emphasis> root=/dev/nfs nfsmount=192.168.2.20:/export/intel-corei7-64_rootfs ip=dhcp
+                                                            console=ttyS0,115200</programlisting>
 
-            <listitem>
-              <para>Click "Write" and wait for the write to complete</para>
-            </listitem>
+      <para><emphasis role="bold">NFS server</emphasis>: The NFS server shall
+      contain an unpacked root file system in the path indicated both in the
+      DHCP and in the TFTP configuration.</para>
 
-            <listitem>
-              <para>Exit the imager and eject the SD Card</para>
-            </listitem>
+      <para>After configuring the servers, copy files from the build directory
+      into the correctly configured paths:</para>
 
-            <listitem>
-              <para>Plug the card into your Raspberry Pi</para>
-            </listitem>
-          </orderedlist>
+      <orderedlist spacing="compact">
+        <listitem>
+          <para>Ensure the target is not already running an OS, otherwise the
+          target might attempt to change files on the root file system while
+          it is populated with new files.</para>
+        </listitem>
 
-          <note>
-            <para>Be careful to select the correct drive. If you choose the
-            wrong one you may destroy your HDD data. If you are using an SD
-            Card slot and can't see the drive in the Win32DiskImager window,
-            try using an affordable external adapter in a USB slot.</para>
-          </note>
+        <listitem>
+          <para>Copy <filename>pxelinux.0</filename> and
+          <filename>vesamenu.c32</filename> from the build directory, e.g.
+          from
+          <filename>&lt;build_dir&gt;tmp/work/corei7-64-enea-linux/syslinux/6.03-r0/image/usr/share/syslinux/</filename>.</para>
         </listitem>
-      </itemizedlist>
+
+        <listitem>
+          <para>Copy <filename>bzImage</filename> from
+          <filename>&lt;build_dir&gt;/tmp/deploy/images/&lt;target&gt;/</filename>.</para>
+        </listitem>
+
+        <listitem>
+          <para>Populate the root file system in the NFS directory by
+          unpacking
+          <filename>enea-image-standard-intel-corei7-64.tar.gz</filename>
+          found at
+          <filename>&lt;build_dir&gt;/tmp/deploy/images/&lt;target&gt;/</filename>.</para>
+        </listitem>
+      </orderedlist>
+
+      <para>Boot the target by:</para>
+
+      <orderedlist>
+        <listitem>
+          <para>Use the BIOS or boot setup to select PXE boot, if not already
+          selected.</para>
+        </listitem>
+
+        <listitem>
+          <para>Reboot the target.</para>
+        </listitem>
+      </orderedlist>
+
+      <para>The boot setup menu is usually launched by pressing F12 or ESC
+      during BIOS power up tests. Look up the manufacturer's documentation for
+      your board model to find the appropriate key.</para>
     </section>
   </section>
 
@@ -342,8 +369,7 @@ BBLAYERS ?= " \
   /path/to/poky/meta-el-common \
   /path/to/poky/meta-el-standard \
   /path/to/poky/meta-enea-bsp-common \
-  /path/to/poky/meta-enea-bsp-&lt;arch&gt; \
-  /path/to/poky/meta-fsl-&lt;arch&gt; \
+  /path/to/poky/meta-enea-bsp-x86 \
   /path/to/poky/meta-openembedded/meta-oe \
   /path/to/poky/meta-openembedded/meta-networking \
   /path/to/poky/meta-openembedded/meta-filesystems \
@@ -386,8 +412,8 @@ BBLAYERS ?= " \
       <para>As a result, <filename>BBLAYERS</filename> shall be extended with
       the bsp-layer/s layer for your target and any other additional layer/s.
       For details on how to do this, see the <ulink
-      url="http://www.yoctoproject.org/docs/2.3/dev-manual/dev-manual.html#understanding-and-creating-layers">Yocto
-      2.3 Dev Manual, section "Understanding and Creating Layers"</ulink> . If
+      url="http://www.yoctoproject.org/docs/2.5/dev-manual/dev-manual.html#understanding-and-creating-layers">Yocto
+      2.5 Dev Manual, section "Understanding and Creating Layers".</ulink> If
       needed replace the Yocto version.</para>
 
       <para>Layers can be added when you initialize the build environment. The
@@ -414,11 +440,10 @@ BBLAYERS ?= " \
       <title>Adding a Recipe</title>
 
       <para>Study the <ulink
-      url="https://www.yoctoproject.org/docs/2.3/dev-manual/dev-manual.html#new-recipe-single-c-file-package-hello-world"><ulink
-      url="https://www.yoctoproject.org/docs/2.3/dev-manual/dev-manual.html#new-recipe-single-c-file-package-hello-world">Hello
-      World recipe</ulink></ulink> in the Yocto Project Development Manual. If
-      needed replace the example version (2.3) with the Yocto version in your
-      Enea Linux distribution.</para>
+      url="https://www.yoctoproject.org/docs/2.5/dev-manual/dev-manual.html#new-recipe-single-c-file-package-hello-world">Hello
+      World recipe</ulink> in the Yocto Project Development Manual. If needed
+      replace the example version (2.5) with the Yocto version in your Enea
+      Linux distribution.</para>
     </section>
 
     <section id="config_pkg_recipes">
@@ -650,7 +675,7 @@ $ ./enea-*-toolchain-&lt;version&gt;.sh</programlisting>
 
         <para>Example:</para>
 
-        <programlisting>$ . /opt/enea/environment-setup-aarch64-enea-linux</programlisting>
+        <programlisting>$ . /opt/enea/environment-setup-corei7-64-enea-linux</programlisting>
       </listitem>
     </orderedlist>
 
@@ -658,6 +683,16 @@ $ ./enea-*-toolchain-&lt;version&gt;.sh</programlisting>
     set up, you can proceed with Cross-Compiling Applications from Command
     Line (4.1) or, if Eclipse is installed, Cross-Compiling from Eclipse
     (5.4.1).</para>
+
+    <section id="boot_qemux86">
+      <title>Building and booting Enea Linux on QEMU x86</title>
+
+      <para>Build an Enea Linux image from the SDK to run on QEMU x86:</para>
+
+      <programlisting>$ cd &lt;sdkdir&gt;/workspace
+$ devtool build-image enea-image-standard 
+$ devtool runqemu kvm enea-image-standard nographic slirp  </programlisting>
+    </section>
   </section>
 
   <section id="pkg_mg">
@@ -667,8 +702,8 @@ $ ./enea-*-toolchain-&lt;version&gt;.sh</programlisting>
     image in a consistent way, e.g. to install, upgrade, or delete packages
     considering the dependencies. The package management systems supported by
     Enea Linux are described in this section. More information about PMS can
-    be found in the Yocto 2.3 document <ulink
-    url="http://www.yoctoproject.org/docs/2.3/mega-manual/mega-manual.html">Yocto
+    be found in the Yocto 2.5 document <ulink
+    url="http://www.yoctoproject.org/docs/2.5/mega-manual/mega-manual.html">Yocto
     Project Mega Manual</ulink>. If needed replace the Yocto version in the
     link.</para>
 
@@ -676,7 +711,7 @@ $ ./enea-*-toolchain-&lt;version&gt;.sh</programlisting>
       <title>APT Package Management (DEB Packages)</title>
 
       <para>Enea Linux provides DEB packages on <ulink
-      url="http://linux.enea.com/EneaLinux7.0/">linux.enea.com</ulink> site,
+      url="http://linux.enea.com/EneaLinux8.0/">linux.enea.com</ulink> site,
       in directory
       <literal><literal>&lt;release&gt;/&lt;target&gt;/deb</literal>/</literal>.</para>
 
@@ -777,4 +812,4 @@ ptest-runner-dev - A C program to run all installed ptests - Development files</
       </section>
     </section>
   </section>
-</chapter>
\ No newline at end of file
+</chapter>
diff --git a/doc/docsrc_common/pardoc-distro.xml b/doc/docsrc_common/pardoc-distro.xml
index a7ab3d3..f44cf21 100644
--- a/doc/docsrc_common/pardoc-distro.xml
+++ b/doc/docsrc_common/pardoc-distro.xml
@@ -18,7 +18,7 @@
              places in XML files and/or in make script files ****</para>
 
 <!-- Distribution and release -->
-<para id="prev_baseline"><phrase>EL6</phrase></para>
+<para id="prev_baseline"><phrase>Enea_Linux_7.0</phrase></para>
 <para id="prev_lic_file"><phrase>doc/book-enea-linux-open-source/doc/licenses.xml</phrase></para>
 <para id="new_lic_file"><phrase>doc/book-enea-linux-open-source/doc/licenses.xml</phrase></para>
 </section>
diff --git a/doc/enea-linux-security-report b/doc/enea-linux-security-report
index 72a8f34..60b4597 100644
--- a/doc/enea-linux-security-report
+++ b/doc/enea-linux-security-report
@@ -1,1055 +1,1055 @@
-CVE-i2017-1000380
-Package: kernel
-Score: 2.1 (Low)
-Description: sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1000380
-
-CVE-2017-1000253
-Package: kernel
-Score: 8.0 (High)
-Description: A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system.Upstream patch:https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2017-1000253
-
-CVE-2017-1000250
-Package: bluez5
-Score: 3.3 (Minor)
-Description: All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000250 
-
-CVE-2017-13081
-Package: linux-firmware
-Score: 2.9 (Minor)
-Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
-
-CVE-2017-13080
-Package: linux-firmware
-Score: 2.9 (Minor)
-Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
-
-CVE-2017-9955
-Package: GNU Binutils
-Score: 4.3 (Medium)
-Description: The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9955
-
-CVE-2017-9954
-Package: GNU Binutils
-Score: 4.3 (Medium)
-Description: The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9954
-
-CVE-2017-9756
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9756
-
-CVE-2017-9755
-Package: GNU Binutils (objdump)
-Score: 6.8 (Medium)
-Description: opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9755
-
-CVE-2017-9753
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9753
-
-CVE-2017-9752
-Package: GNU Binutils, libbfd
-Score: 6.8 (Medium)
-Description: bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9752
-
-CVE-2017-9751
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9751
-
-CVE-2017-9750
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9750
-
-CVE-2017-9749
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9749
-
-CVE-2017-9748
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9748
-
-CVE-2017-9747
-Package: GNU Binutils (libbfd)
-Score: 6.8 (Medium)
-Description: The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9747
-
-CVE-2017-9746
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9746
-
-CVE-2017-9745
-Package: GNU Binutils (libbfd)
-Score: 6.8 (Medium)
-Description: The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9745
-
-CVE-2017-9744
-Package: GNU Binutils (libbfd)
-Score: 6.8 (Medium)
-Description: The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9744
-
-CVE-2017-9742
-Package: GNU Binutils (objdump)
-Score: 6.8 (Medium)
-Description: The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9742
-
-CVE-2017-9445
-Package: systemd
-Score: 5.0 (Medium)
-Description: In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445
-
-CVE-2017-9050
-Package: libxml2-native
-Score: 5.0 (Medium)
-Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050
-
-CVE-2017-9049
-Package: libxml2-native
-Score: 5.0 (Medium)
-Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049
-
-CVE-2017-9048
-Package: libxml2-native
-Score: 5.0 (Medium)
-Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048
-
-CVE-2017-9047
-Package: libxml2-native
-Score: 5.0 (Medium)
-Description: A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about "size" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047
-
-CVE-2017-9044
-Package: GNU Binutils (readelf)
-Score: 4.3 (Medium)
-Description: The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9044
-
-CVE-2017-9042
-Package: GNU Binutils
-Score: 6.8 (Medium)
-Description: readelf.c in GNU Binutils 2017-04-12 has a \"cannot be represented in type long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9042
-
-CVE-2017-9040
-Package: GNU Binutils 
-Score: 4.3 (Medium)
-Description: GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9040
-
-CVE-2017-9039
-Package: GNU Binutils (readelf)
-Score: 4.3 (Medium)
-Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9039
-
-CVE-2017-9038
-Package: GNU Binutils (readelf)
-Score: 4.3 (Medium)
-Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9038
-
-CVE-2017-8872
-Package: libxml2-native
-Score: 6.4 (Medium)
-Description: The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8872
-
-CVE-2017-8831
-Package: kernel
-Score: 7.2 (High)
-Description: The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.10.14 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8831
-
-CVE-2017-8804
-Package: glibc
-Score: 7.8 (High)
-Description: The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8804
-
-CVE-2017-8779
-Package: rpcbind
-Score: 7.8 (High)
-Description: rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779
-
-CVE-2017-8421
-Package: GNU Binutils
-Score: 7.1 (High)
-Description: The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8421
-
-CVE-2017-8398
-Package: GNU Binutils
-Score: 5.0 (Medium)
-Description: dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8398
-
-CVE-2017-8397
-Package: GNU Binutils
-Score: 5.0 (Medium)
-Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8397
-
-CVE-2017-8396
-Package: GNU Binutils
-Score: 5.0 (Medium)
-Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8396
-
-CVE-2017-8395
-Package: GNU Binutils
-Score: 5.0 (Medium)
-Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8395
-
-CVE-2017-8394
-Package: GNU Binutils
-Score: 5.0 (Medium)
-Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8394
-
-CVE-2017-8393
-Package: GNU Binutils
-Score: 5.0 (Medium)
-Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8393
-
-CVE-2017-8392
-Package: binutils
-Score: 5.0 (Medium)
-Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8392
-
-CVE-2017-8283
-Package: dpkg
-Score: 7.5 (High)
-Description: dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8283
-
-CVE-2017-8105
-Package: freetype
-Score: 7.5 (High)
-Description: FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8105
-
-CVE-2017-8072
-Package: kernel
-Score: 7.2 (High)
-Description: The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8072
-
-CVE-2017-8071
-Package: kernel
-Score: 2.1 (Low)
-Description: drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service (deadlock) via unspecified vectors. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8071
-
-CVE-2017-8070
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8070
-
-CVE-2017-8069
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8069
-
-CVE-2017-8068
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8068
-
-CVE-2017-8067
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8067
-
-CVE-2017-8066
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8066
-
-CVE-2017-8065
-Package: kernel
-Score: 7.2 (High)
-Description: rypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8065
-
-CVE-2017-8064
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8064
-
-CVE-2017-8063
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8063
-
-CVE-2017-8062
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8062
-
-CVE-2017-8061
-Package: kernel
-Score: 7.2 (High)
-Description: drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8061
-
-CVE-2017-7895
-Package: kernel
-Score: 10.0 (High)
-Description: The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7895
-
-CVE-2017-7869
-Package: gnutls
-Score: 5.0 (Medium)
-Description: GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7869
-
-CVE-2017-7645
-Package: kernel
-Score: 7.8 (High)
-Description: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7645
-
-CVE-2017-7618   
-Package: kernel
-Score: 7.8 (High)
-Description: crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7618       
-
-CVE-2017-7614
-Package: GNU Binutils
-Score: 7.5 (High)
-Description: elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a \"member access within null pointer\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an \"int main() {return 0;}\" program.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7614
-
-CVE-2017-7487
-Package: kernel
-Score: 7.2 (High)
-Description: The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7487
-
-CVE-2017-7472
-Package: kernel
-Score: 4.9 (Medium)
-Description: The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7472
-
-CVE-2017-7468 
-Package: curl
-Score: 6.0 (Medium)
-Description: libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate (or no certificate).
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7468 
-
-CVE-2017-7407
-Package: curl
-Score: 2.1 (Low)
-Description: The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407
-
-CVE-2017-7304
-Package: Binutils
-Score: 5.0 (Medium)
-Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7304
-
-CVE-2017-7223
-Package: GNU Binutils 
-Score: 5.0 (Medium)
-Description: GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7223
-
-CVE-2017-7210
-Package: binutils
-Score: 7.8 (High)
-Description: objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7210
-
-CVE-2017-7209
-Package: binutils
-Score: 4.3 (Medium)
-Description: The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7209
-
-CVE-2017-6969
-Package: binutils
-Score: 6.4 (Medium)
-Description: readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6969
-
-CVE-2017-6966
-Package: binutil
-Score: 4.0 (Medium)
-Description: readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6966
-
-CVE-2017-6965 
-Package: binutils
-Score: 4.3 (Medium)
-Description: readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6965 
-
-CVE-2017-6874
-Package: Kernel
-Score: 7.0 (High)
-Description: Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction between put_ucounts and get_ucounts.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6874
-
-CVE-2017-6353
-Package: Kernel
-Score: 5.0 (Medium)
-Description: net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service (invalid unlock and double free) via a multithreaded application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6353
-
-CVE-2017-6348
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6348
-
-CVE-2017-6347
-Package: Kernel
-Score: 7.0 (High)
-Description: The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6347
-
-CVE-2017-6346
-Package: Kernel
-Score: 7.0 (High)
-Description: Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6346
-
-CVE-2017-6345
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6345
-
-CVE-2017-6214
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6214
-
-CVE-2017-6074 
-Package: Kernel
-Score: 8.0 (High)
-Description: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074 
-
-CVE-2017-6001
-Package: Kernel
-Score: 8.0 (High)
-Description: Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6001
-
-CVE-2017-5986
-Package: Kernel
-Score: 7.0 (High)
-Description: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5986
-
-CVE-2017-5970
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system crash) via (1) an application that makes crafted system calls or possibly (2) IPv4 traffic with invalid IP options.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5970
-
-CVE-2017-5969
-Package: libxml2-native
-Score: 2.6 (Low)
-Description: libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document.  NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser."
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5969
-
-CVE-2017-5848
-Package: gstreamer
-Score: 5.0 (Medium)
-Description: The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5848
-
-CVE-2017-5847
-Package: gstreamer
-Score: 5.0 (Medium)
-Description: The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847
-
-CVE-2017-5669
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5669
-
-CVE-2017-5618
-Package: GNU screen 
-Score: 7.2 (High)
-Description: GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5618
-
-CVE-2017-5601
-Package: libarchive
-Score: 5.0 (Medium)
-Description: An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5601
-
-CVE-2017-5577
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5577
-
-CVE-2017-5576
-Package: Kernel
-Score: 7.0 (High)
-Description: Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5576
-
-CVE-2017-5551
-Package: Kernel
-Score: 4.0 (Medium)
-Description: The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5551
-
-CVE-2017-5548
-Package: Kernel
-Score: 7.0 (High)
-Description: drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5548
-
-CVE-2017-5547
-Package: Kernel
-Score: 7.0 (High)
-Description: drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5547
-
-CVE-2017-5546
-Package: Kernel
-Score: 7.0 (High)
-Description: The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5546
-
-CVE-2017-5335
-Package: GnuTLS
-Score: 5.0 (Medium)
-Description: The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5335
-
-CVE-2017-5225
-Package: tiff
-Score: 7.5 (High)
-Description: LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5225
-
-CVE-2017-5029
-Package: libxslt
-Score: 6.8 (Medium)
-Description: The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5029
-
-CVE-2017-3731
-Package: OpenSSL
-Score: 5.0 (Medium)
-Description: If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731
-
-CVE-2017-3136 
-Package: bind
-Score: 5.9 (Medium)
-Description: A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate.An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3136 
-
-CVE-2017-3135
-Package: bind
-Score: 6.0 (Medium)
-Description: Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3135
-
-CVE-2017-2636
-Package: Kernel
-Score: 7.2 (High)
-Description: Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636
-
-CVE-2017-2628 
-Package: curl
-Score: 0.0 (Low)
-Description: It was found that the fix for CVE-2015-3148 in curl was incomplete. An application using libcurl with HTTP Negotiate authentication could incorrectly re-use credentials for subsequent requests to the same server.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2628 
-
-CVE-2017-18017
-Package: kernel
-Score: 5.0 (Medium)
-Description: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18017
-
-CVE-2017-14496
-Package: dnsmasq 
-Score: 7.0 (High)
-Description: Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14496
-
-CVE-2017-14106
-Package: kernel
-Score: 4.9 (Medium)
-Description: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14106
-
-CVE-2017-12132
-Package: glibc
-Score: 4.3 (Medium)
-Description: The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12132
-
-CVE-2017-11176
-Package: kernel
-Score: 10.0 (High)
-Description: The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11176
-
-CVE-2017-1000366
-Package: glibc
-Score: 7.2 (High)
-Description: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366
-
-CVE-2017-1000365
-Package: kernel
-Score: 7.2 (High)
-Description: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux Kernel versions 4.11.5 and earlier. It appears that this feature was introduced in the Linux Kernel version 2.6.23.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000365
-
-CVE-2017-1000251
-Package: kernel
-Score: 8.3 (High)
-Description: The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000251
-
-CVE-2017-1000111 
-Package: kernel
-Score: 7.2 (High)
-Description: Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000111 
-
-CVE-2017-1000101 
-Package: curl
-Score: 4.0 (Medium)
-Description: curl supports "globbing" of URLs, in which a user can pass a numerical rangeto have the tool iterate over those numbers to do a sequence of transfers.In the globbing function that parses the numerical range, there was anomission that made curl read a byte beyond the end of the URL if given acarefully crafted, or just wrongly written, URL. The URL is stored in a heapbased buffer, so it could then be made to wrongly read something else insteadof crashing.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101 
-
-CVE-2017-1000100 
-Package: curl
-Score: 4.0 (Medium)
-Description: When doing an TFTP upload and curl/libcurl is given a URL that contains a verylong file name (longer than about 515 bytes), the file name is truncated tofit within the buffer boundaries, but the buffer size is still wrongly updatedto use the untruncated length. This too large value is then used in the`send()` call, making curl attempt to send more data than what is actually putinto the buffer. The `send()` function will then read beyond the end of theheap based buffer.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100 
-
-CVE-2017-1000082
-Package: systemd
-Score: 10.0 (High)
-Description: systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000082
-
-CVE-2016-9844
-Package: unzip
-Score: 2.1 (Low)
-Description: Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9844
-
-CVE-2016-9754
-Package: Kernel
-Score: 7.0 (High)
-Description: The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculations, which allows local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9754
-
-CVE-2016-9444
-Package: bind
-Score: 7.0 (High)
-Description: named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9444
-
-CVE-2016-9401
-Package: bash
-Score: 2.0 (Low)
-Description: ref to yocto patch: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=1b2857a781b6666feaf5d3c91dc02ac263d0c4f6
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401
-
-CVE-2016-9318
-Package: libxml2-native
-Score: 6.8 (Medium)
-Description: libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9318
-
-CVE-2016-9083 
-Package: Kernel
-Score: 8.0 (High)
-Description: drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9083 
-
-CVE-2016-8864
-Package: bind
-Score: 5.0 (Medium)
-Description: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8864
-
-CVE-2016-8858
-Package: OpenSSL
-Score: 7.8 (High)
-Description: A memory exhaustion issue in OpenSSH that can be triggered before user authentication was found. An unauthenticated attacker could consume approx. 400 MB of memory per each connection. The attacker could set up multiple such connections to run out of server’s memory.   
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858
-
-CVE-2016-8655 
-Package: Kernel
-Score: 8.0 (High)
-Description: Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8655 
-
-CVE-2016-8636
-Package: Kernel
-Score: 7.0 (High)
-Description: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8636
-
-CVE-2016-8630
-Package: Kernel
-Score: 6.0 (Medium)
-Description: The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8630
-
-CVE-2016-8625
-Package: curl
-Score: 6.9 (Medium)
-Description: When curl is built with libidn to handle International Domain Names (IDNA), ittranslates them to puny code for DNS resolving using the IDNA 2003 standard,while IDNA 2008 is the modern and up-to-date IDNA standard.This misalignment causes problems with for example domains using the German ßcharacter (known as the Unicode Character 'LATIN SMALL LETTER SHARP S') whichis used at times in the .de TLD and is translated differently in the two IDNAstandards, leading to users potentially and unknowingly issuing networktransfer requests to the wrong host.For example, `straße.de` is translated into `strasse.de` using IDNA 2003 butis translated into `xn--strae-oqa.de` using IDNA 2008. Needless to say, thosehost names could very well resolve to different addresses and be twocompletely independent servers. IDNA 2008 is mandatory for .de domains.curl is not alone with this problem, as there's currently a big flux in theworld of network user-agents about which IDNA version to support and use.This name problem exists for DNS-using protocols in curl, but only when builtto use libidn.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625
-
-CVE-2016-8624
-Package: curl
-Score: 6.9 (Medium)
-Description: curl doesn't parse the authority component of the URL correctly when the hostname part ends with a '#' character, and could instead be tricked intoconnecting to a different host. This may have security implications if you forexample use an URL parser that follows the RFC to check for allowed domainsbefore using curl to request them.Passing in `http://example.com#@evil.com/x.txt` would wrongly make curl send arequest to evil.com while your browser would connect to example.com given thesame URL.The problem exists for most protocol schemes.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
-
-CVE-2016-8623
-Package: curl
-Score: 4.9 (Medium)
-Description: libcurl explicitly allows users to share cookies between multiple easy handlesthat are concurrently employed by different threads.When cookies to be sent to a server are collected, the matching functioncollects all cookies to send and the cookie lock is released immediatelyafterwards. That function however only returns a list with *references* back tothe original strings for name, value, path and so on. Therefore, if anotherthread quickly takes the lock and frees one of the original cookie structstogether with its strings, a use-after-free can occur and lead to informationdisclosure. Another thread can also replace the contents of the cookies fromseparate HTTP responses or API calls.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
-
-CVE-2016-8622
-Package: curl
-Score: 4.9 (Medium)
-Description: The URL percent-encoding decode function in libcurl is called`curl_easy_unescape`. Internally, even if this function would be made toallocate a unscape destination buffer larger than 2GB, it would return thatnew length in a signed 32 bit integer variable, thus the length would geteither just truncated or both truncated and turned negative. That could thenlead to libcurl writing outside of its heap based buffer.This can be triggered by a user on a 64bit system if the user can send in acustom (very large) URL to a libcurl using program.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
-
-CVE-2016-8621
-Package: curl
-Score: 4.9 (Medium)
-Description: The `curl_getdate` converts a given date string into a numerical timestamp andit supports a range of different formats and possibilites to express a dateand time. The underlying date parsing function is also used internally whenparsing for example HTTP cookies (possibly received from remote servers) andit can be used when doing conditional HTTP requests.The date parser function uses the libc sscanf() function at two places, withthe parsing strings "%02d:%02d" and ""%02d:%02d:%02d". The intent being thatit would parse either a string with HH:MM (two digits colon two digits) orHH:MM:SS (two digits colon two digits colon two digits). If instead the pieceof time that was sent in had the final digit cut off, thus ending with asingle-digit, the date parser code would advance its read pointer one byte toomuch and end up reading out of bounds.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
-
-CVE-2016-8620
-Package: curl
-Score: 6.9 (Medium)
-Description: The curl tool's "globbing" feature allows a user to specify a numerical rangethrough which curl will iterate. It is typically specified as [1-5],specifying the first and the last numbers in the range. Or with [a-z], usingletters.1. The curl code for parsing the second *unsigned* number did not check for aleading minus character, which allowed a user to specify `[1--1]` with nocomplaints and have the latter `-1` number get turned into the largestunsigned long value the system can handle. This would ultimately cause curl towrite outside the dedicated malloced buffer after no less than 100,000iterations, since it would have room for 5 digits but not 6.2. When the range is specified with letters, and the ending letter is left out`[L-]`, the code would still advance its read pointer 5 bytes even if thestring was just 4 bytes and end up reading outside the given buffer.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
-
-CVE-2016-8619
-Package: curl
-Score: 6.9 (Medium)
-Description: In curl's implementation of the Kerberos authentication mechanism, thefunction `read_data()` in security.c is used to fill the necessary krb5structures. When reading one of the length fields from the socket, it fails toensure that the length parameter passed to realloc() is not set to 0.This would lead to realloc() getting called with a zero size and when doing sorealloc() returns NULL *and* frees the memory - in contrary to normalrealloc() fails where it only returns NULL - causing libcurl to free thememory *again* in the error path.This flaw could be triggered by a malicious or just otherwise ill-behavingserver.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
-
-CVE-2016-8618
-Package: curl
-Score: 6.9 (Medium)
-Description: The libcurl API function called `curl_maprintf()` can be tricked into doing adouble-free due to an unsafe `size_t` multiplication, on systems using 32 bit`size_t` variables. The function is also used internallty in numeroussituations.The function doubles an allocated memory area with realloc() and allows thesize to wrap and become zero and when doing so realloc() returns NULL *and*frees the memory - in contrary to normal realloc() fails where it only returnsNULL - causing libcurl to free the memory *again* in the error path.Systems with 64 bit versions of the `size_t` type are not affected by thisissue.This behavior is triggable using the publicly exposed function.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
-
-CVE-2016-8617
-Package: curl
-Score: 6.9 (Medium)
-Description: In libcurl's base64 encode function, the output buffer is allocated as followswithout any checks on insize:     malloc( insize * 4 / 3 + 4 )On systems with 32-bit addresses in userspace (e.g. x86, ARM, x32), themultiplication in the expression wraps around if insize is at least 1GB ofdata. If this happens, an undersized output buffer will be allocated, but thefull result will be written, thus causing the memory behind the output bufferto be overwritten.If a username is set directly via `CURLOPT_USERNAME` (or curl's `-u, --user`option), this vulnerability can be triggered. The name has to be at least512MB big in a 32bit system.Systems with 64 bit versions of the `size_t` type are not affected by thisissue.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
-
-CVE-2016-8616
-Package: curl
-Score: 3.9 (Low)
-Description: When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections.This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password.We are not aware of any exploit of this flaw.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
-
-CVE-2016-8615
-Package: curl
-Score: 6.9 (Medium)
-Description: If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.The issue pertains to the function that loads cookies into memory, which reads the specified file into a fixed-size buffer in a line-by-line manner using the fgets() function. If an invocation of fgets() cannot read the whole line into the destination buffer due to it being too small, it truncates the output. This way, a very long cookie (name + value) sent by a malicious server would be stored in the file and subsequently that cookie could be read partially and crafted correctly, it could be treated as a different cookie for another server.We are not aware of any exploit of this flaw.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
-
-CVE-2016-7795
-Package: systemd
-Score: 4.9 (Medium)
-Description: The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7795
-
-CVE-2016-7097
-Package: Kernel
-Score: 3.6 (Low)
-Description: The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7097
-
-CVE-2016-6489
-Package: nettle
-Score: 5.0 (Medium)
-Description: The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6489
-
-CVE-2016-6480
-Package: Kernel
-Score: 4.7 (Medium)
-Description: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480
-
-CVE-2016-6354
-Package: flex
-Score: 7.5 (High)
-Description: Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6354
-
-CVE-2016-6323
-Package: glibc
-Score: 5.0 (Medium)
-Description: The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6323
-
-CVE-2016-6321
-Package: Tar (Gnu)
-Score: 5.0 (Medium)
-Description: Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321
-
-CVE-2016-6318
-Package: cracklib
-Score: 7.5 (High)
-Description: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6318
-
-CVE-2016-6301
-Package: busybox
-Score: 7.1 (High)
-Description: The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6301
-
-CVE-2016-6252
-Package: shadow
-Score: 5.0 (Medium)
-Description: Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. Patch: https://bugzilla.suse.com/attachment.cgi?id=684679&action=diff 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6252
-
-CVE-2016-6185
-Package: Perl
-Score: 5.0 (Medium)
-Description: The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6185
-
-CVE-2016-6170
-Package: bind
-Score: 6.0 (Medium)
-Description: DNS protocols were designed with the assumption that a certain amount of trust could be presumed between the operators of primary and secondary servers for a given zone.  However, in current practice some organizations have scenarios which require them to accept zone data from sources that are not fully trusted (for example: providers of secondary name service).  A party who is allowed to feed data into a zone (e.g. by AXFR, IXFR, or Dynamic DNS updates) can overwhelm the server which is accepting data by intentionally or accidentally exhausting that server's memory.https://kb.isc.org/article/AA-01390
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6170
-
-CVE-2016-6131
-Package: gcc
-Score: 4.9 (Medium)
-Description: A stack overflow vulnerability in the libiberty demangler was found, which causes its host application to crash on a tainted branch instruction. The problem is caused by a self-reference in a mangled type string that is "remembered" for later reference. This leads to an infinite recursion during the demangling.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6131
-
-CVE-2016-5636
-Package: CPython
-Score: 10.0 (High)
-Description: Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5636
-
-CVE-2016-5300
-Package: expat
-Score: 7.8 (High)
-Description: The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300
-
-CVE-2016-5131
-Package: libxml2
-Score: 10.0 (High)
-Description: Use-after-free vulnerability in libxml2 (used in chromium-browser) through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5131
-
-CVE-2016-4658
-Package: libxml2
-Score: 10.0 (High)
-Description: libxml2 in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4658
-
-CVE-2016-4448
-Package: libxml2
-Score: 10.0 (High)
-Description: Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4448
-
-CVE-2016-2775
-Package: bind
-Score: 4.3 (Medium)
-Description: ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2775
-
-CVE-2016-2381
-Package: Perl
-Score: 5.0 (Medium)
-Description: Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2381
-
-CVE-2016-2183
-Package: OpenSSL
-Score: 5.0 (Medium)
-Description: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183
-
-CVE-2016-2147
-Package: busybox
-Score: 5.0 (Medium)
-Description: Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2147
-
-CVE-2016-10350
-Package: libarchive
-Score: 4.3 (Medium)
-Description: The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10350
-
-CVE-2016-10349
-Package: libarchive
-Score: 4.2 (Medium)
-Description: The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10349
-
-CVE-2016-10229 
-Package: kernel
-Score: 10.0 (High)
-Description: udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10229 
-
-CVE-2016-10228
-Package: glibc
-Score: 4.2 (Medium)
-Description: The iconv program in the GNU C Library (aka glibc or libc6) 2.25 and earlier, when invoked with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10228
-
-CVE-2016-10208
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10208
-
-CVE-2016-10200
-Package: Kernel
-Score: 7.0 (High)
-Description: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10200
-
-CVE-2016-10154
-Package: Kernel
-Score: 5.0 (Medium)
-Description: The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a scatterlist.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10154
-
-CVE-2016-10153
-Package: Kernel
-Score: 7.0 (High)
-Description: The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging reliance on earlier net/ceph/crypto.c code.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10153
-
-CVE-2016-10150
-Package: KVM
-Score: 10.0 (High)
-Description: Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (host OS crash) or possibly gain privileges via crafted ioctl calls on the /dev/kvm device.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10150
-
-CVE-2016-10147
-Package: Kernel
-Score: 5.0 (Medium)
-Description: crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10147
-
-CVE-2016-10044
-Package: Kernel
-Score: 7.0 (High)
-Description: The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10044
-
-CVE-2016-0800
-Package: OpenSSL
-Score: 4.3 (Medium)
-Description: The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800
-
-CVE-2016-0718
-Package: expat
-Score: 7.5 (High)
-Description: Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718
-
-CVE-2016-0634 
-Package: bash
-Score: 5.0 (Medium)
-Description: A vulnerability was found in a way bash expands the $HOSTNAME. Injecting the hostname with malicious code would cause it to run each time bash expanded \h in the prompt string. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0634 
-
-CVE-2015-9019
-Package: libxslt-native 
-Score: 5.0 (Medium)
-Description: In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9019
-
-CVE-2015-5224
-Package: util-linux
-Score: 7.5 (High)
-Description: The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5224
-
-CVE-2014-9365 
-Package: python
-Score: 5.8 (Medium)
-Description: The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. 
-Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9365
+CVE-2017-1000380

+Package: kernel

+Score: 2.1 (Low)

+Description: sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000380

+

+CVE-2017-1000366

+Package: glibc

+Score: 7.2 (High)

+Description: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366

+

+CVE-2017-1000365

+Package: kernel

+Score: 7.2 (High)

+Description: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux Kernel versions 4.11.5 and earlier. It appears that this feature was introduced in the Linux Kernel version 2.6.23.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000365

+

+CVE-2017-1000253

+Package: kernel

+Score: 8.0 (High)

+Description: A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system.Upstream patch:https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2017-1000253

+

+CVE-2017-1000251

+Package: kernel

+Score: 8.3 (High)

+Description: The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000251

+

+CVE-2017-1000250

+Package: bluez5

+Score: 3.3 (Minor)

+Description: All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000250 

+

+CVE-2017-1000111 

+Package: kernel

+Score: 7.2 (High)

+Description: Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000111 

+

+CVE-2017-1000101 

+Package: curl

+Score: 4.0 (Medium)

+Description: curl supports "globbing" of URLs, in which a user can pass a numerical rangeto have the tool iterate over those numbers to do a sequence of transfers.In the globbing function that parses the numerical range, there was anomission that made curl read a byte beyond the end of the URL if given acarefully crafted, or just wrongly written, URL. The URL is stored in a heapbased buffer, so it could then be made to wrongly read something else insteadof crashing.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101 

+

+CVE-2017-1000100 

+Package: curl

+Score: 4.0 (Medium)

+Description: When doing an TFTP upload and curl/libcurl is given a URL that contains a verylong file name (longer than about 515 bytes), the file name is truncated tofit within the buffer boundaries, but the buffer size is still wrongly updatedto use the untruncated length. This too large value is then used in the`send()` call, making curl attempt to send more data than what is actually putinto the buffer. The `send()` function will then read beyond the end of theheap based buffer.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100 

+

+CVE-2017-1000082

+Package: systemd

+Score: 10.0 (High)

+Description: systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000082

+

+CVE-2017-18017

+Package: kernel

+Score: 5.0 (Medium)

+Description: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18017

+

+CVE-2017-14496

+Package: dnsmasq 

+Score: 7.0 (High)

+Description: Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14496

+

+CVE-2017-14106

+Package: kernel

+Score: 4.9 (Medium)

+Description: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14106

+

+CVE-2017-13081

+Package: linux-firmware

+Score: 2.9 (Minor)

+Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081

+

+CVE-2017-13080

+Package: linux-firmware

+Score: 2.9 (Minor)

+Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080

+

+CVE-2017-12132

+Package: glibc

+Score: 4.3 (Medium)

+Description: The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12132

+

+CVE-2017-11176

+Package: kernel

+Score: 10.0 (High)

+Description: The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11176

+

+CVE-2017-9955

+Package: GNU Binutils

+Score: 4.3 (Medium)

+Description: The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9955

+

+CVE-2017-9954

+Package: GNU Binutils

+Score: 4.3 (Medium)

+Description: The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9954

+

+CVE-2017-9756

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9756

+

+CVE-2017-9755

+Package: GNU Binutils (objdump)

+Score: 6.8 (Medium)

+Description: opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9755

+

+CVE-2017-9753

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9753

+

+CVE-2017-9752

+Package: GNU Binutils, libbfd

+Score: 6.8 (Medium)

+Description: bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9752

+

+CVE-2017-9751

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9751

+

+CVE-2017-9750

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9750

+

+CVE-2017-9749

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9749

+

+CVE-2017-9748

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9748

+

+CVE-2017-9747

+Package: GNU Binutils (libbfd)

+Score: 6.8 (Medium)

+Description: The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9747

+

+CVE-2017-9746

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9746

+

+CVE-2017-9745

+Package: GNU Binutils (libbfd)

+Score: 6.8 (Medium)

+Description: The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9745

+

+CVE-2017-9744

+Package: GNU Binutils (libbfd)

+Score: 6.8 (Medium)

+Description: The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9744

+

+CVE-2017-9742

+Package: GNU Binutils (objdump)

+Score: 6.8 (Medium)

+Description: The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9742

+

+CVE-2017-9445

+Package: systemd

+Score: 5.0 (Medium)

+Description: In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445

+

+CVE-2017-9050

+Package: libxml2-native

+Score: 5.0 (Medium)

+Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050

+

+CVE-2017-9049

+Package: libxml2-native

+Score: 5.0 (Medium)

+Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049

+

+CVE-2017-9048

+Package: libxml2-native

+Score: 5.0 (Medium)

+Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048

+

+CVE-2017-9047

+Package: libxml2-native

+Score: 5.0 (Medium)

+Description: A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about "size" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047

+

+CVE-2017-9044

+Package: GNU Binutils (readelf)

+Score: 4.3 (Medium)

+Description: The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9044

+

+CVE-2017-9042

+Package: GNU Binutils

+Score: 6.8 (Medium)

+Description: readelf.c in GNU Binutils 2017-04-12 has a \"cannot be represented in type long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9042

+

+CVE-2017-9040

+Package: GNU Binutils 

+Score: 4.3 (Medium)

+Description: GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9040

+

+CVE-2017-9039

+Package: GNU Binutils (readelf)

+Score: 4.3 (Medium)

+Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9039

+

+CVE-2017-9038

+Package: GNU Binutils (readelf)

+Score: 4.3 (Medium)

+Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9038

+

+CVE-2017-8872

+Package: libxml2-native

+Score: 6.4 (Medium)

+Description: The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8872

+

+CVE-2017-8831

+Package: kernel

+Score: 7.2 (High)

+Description: The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.10.14 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8831

+

+CVE-2017-8804

+Package: glibc

+Score: 7.8 (High)

+Description: The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8804

+

+CVE-2017-8779

+Package: rpcbind

+Score: 7.8 (High)

+Description: rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779

+

+CVE-2017-8421

+Package: GNU Binutils

+Score: 7.1 (High)

+Description: The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8421

+

+CVE-2017-8398

+Package: GNU Binutils

+Score: 5.0 (Medium)

+Description: dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8398

+

+CVE-2017-8397

+Package: GNU Binutils

+Score: 5.0 (Medium)

+Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8397

+

+CVE-2017-8396

+Package: GNU Binutils

+Score: 5.0 (Medium)

+Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8396

+

+CVE-2017-8395

+Package: GNU Binutils

+Score: 5.0 (Medium)

+Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8395

+

+CVE-2017-8394

+Package: GNU Binutils

+Score: 5.0 (Medium)

+Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8394

+

+CVE-2017-8393

+Package: GNU Binutils

+Score: 5.0 (Medium)

+Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8393

+

+CVE-2017-8392

+Package: GNU Binutils

+Score: 5.0 (Medium)

+Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8392

+

+CVE-2017-8283

+Package: dpkg

+Score: 7.5 (High)

+Description: dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8283

+

+CVE-2017-8105

+Package: freetype

+Score: 7.5 (High)

+Description: FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8105

+

+CVE-2017-8072

+Package: kernel

+Score: 7.2 (High)

+Description: The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8072

+

+CVE-2017-8071

+Package: kernel

+Score: 2.1 (Low)

+Description: drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service (deadlock) via unspecified vectors. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8071

+

+CVE-2017-8070

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8070

+

+CVE-2017-8069

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8069

+

+CVE-2017-8068

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8068

+

+CVE-2017-8067

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8067

+

+CVE-2017-8066

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8066

+

+CVE-2017-8065

+Package: kernel

+Score: 7.2 (High)

+Description: rypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8065

+

+CVE-2017-8064

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8064

+

+CVE-2017-8063

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8063

+

+CVE-2017-8062

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8062

+

+CVE-2017-8061

+Package: kernel

+Score: 7.2 (High)

+Description: drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8061

+

+CVE-2017-7895

+Package: kernel

+Score: 10.0 (High)

+Description: The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7895

+

+CVE-2017-7869

+Package: gnutls

+Score: 5.0 (Medium)

+Description: GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7869

+

+CVE-2017-7645

+Package: kernel

+Score: 7.8 (High)

+Description: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7645

+

+CVE-2017-7618   

+Package: kernel

+Score: 7.8 (High)

+Description: crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7618       

+

+CVE-2017-7614

+Package: GNU Binutils

+Score: 7.5 (High)

+Description: elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a \"member access within null pointer\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an \"int main() {return 0;}\" program.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7614

+

+CVE-2017-7487

+Package: kernel

+Score: 7.2 (High)

+Description: The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7487

+

+CVE-2017-7472

+Package: kernel

+Score: 4.9 (Medium)

+Description: The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7472

+

+CVE-2017-7468 

+Package: curl

+Score: 6.0 (Medium)

+Description: libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate (or no certificate).

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7468 

+

+CVE-2017-7407

+Package: curl

+Score: 2.1 (Low)

+Description: The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407

+

+CVE-2017-7304

+Package: Binutils

+Score: 5.0 (Medium)

+Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7304

+

+CVE-2017-7223

+Package: GNU Binutils 

+Score: 5.0 (Medium)

+Description: GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7223

+

+CVE-2017-7210

+Package: binutils

+Score: 7.8 (High)

+Description: objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7210

+

+CVE-2017-7209

+Package: binutils

+Score: 4.3 (Medium)

+Description: The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7209

+

+CVE-2017-6969

+Package: binutils

+Score: 6.4 (Medium)

+Description: readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6969

+

+CVE-2017-6966

+Package: binutil

+Score: 4.0 (Medium)

+Description: readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6966

+

+CVE-2017-6965 

+Package: binutils

+Score: 4.3 (Medium)

+Description: readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6965 

+

+CVE-2017-6874

+Package: Kernel

+Score: 7.0 (High)

+Description: Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction between put_ucounts and get_ucounts.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6874

+

+CVE-2017-6353

+Package: Kernel

+Score: 5.0 (Medium)

+Description: net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service (invalid unlock and double free) via a multithreaded application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6353

+

+CVE-2017-6348

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6348

+

+CVE-2017-6347

+Package: Kernel

+Score: 7.0 (High)

+Description: The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6347

+

+CVE-2017-6346

+Package: Kernel

+Score: 7.0 (High)

+Description: Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6346

+

+CVE-2017-6345

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6345

+

+CVE-2017-6214

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6214

+

+CVE-2017-6074 

+Package: Kernel

+Score: 8.0 (High)

+Description: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074 

+

+CVE-2017-6001

+Package: Kernel

+Score: 8.0 (High)

+Description: Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6001

+

+CVE-2017-5986

+Package: Kernel

+Score: 7.0 (High)

+Description: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5986

+

+CVE-2017-5970

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system crash) via (1) an application that makes crafted system calls or possibly (2) IPv4 traffic with invalid IP options.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5970

+

+CVE-2017-5969

+Package: libxml2-native

+Score: 2.6 (Low)

+Description: libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document.  NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser."

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5969

+

+CVE-2017-5848

+Package: gstreamer

+Score: 5.0 (Medium)

+Description: The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5848

+

+CVE-2017-5847

+Package: gstreamer

+Score: 5.0 (Medium)

+Description: The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended content descriptors. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5847

+

+CVE-2017-5669

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5669

+

+CVE-2017-5618

+Package: GNU screen 

+Score: 7.2 (High)

+Description: GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5618

+

+CVE-2017-5601

+Package: libarchive

+Score: 5.0 (Medium)

+Description: An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5601

+

+CVE-2017-5577

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5577

+

+CVE-2017-5576

+Package: Kernel

+Score: 7.0 (High)

+Description: Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5576

+

+CVE-2017-5551

+Package: Kernel

+Score: 4.0 (Medium)

+Description: The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5551

+

+CVE-2017-5548

+Package: Kernel

+Score: 7.0 (High)

+Description: drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5548

+

+CVE-2017-5547

+Package: Kernel

+Score: 7.0 (High)

+Description: drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5547

+

+CVE-2017-5546

+Package: Kernel

+Score: 7.0 (High)

+Description: The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5546

+

+CVE-2017-5335

+Package: GnuTLS

+Score: 5.0 (Medium)

+Description: The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5335

+

+CVE-2017-5225

+Package: tiff

+Score: 7.5 (High)

+Description: LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5225

+

+CVE-2017-5029

+Package: libxslt

+Score: 6.8 (Medium)

+Description: The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5029

+

+CVE-2017-3731

+Package: OpenSSL

+Score: 5.0 (Medium)

+Description: If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731

+

+CVE-2017-3136 

+Package: bind

+Score: 5.9 (Medium)

+Description: A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate.An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3136 

+

+CVE-2017-3135

+Package: bind

+Score: 6.0 (Medium)

+Description: Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3135

+

+CVE-2017-2636

+Package: Kernel

+Score: 7.2 (High)

+Description: Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636

+

+CVE-2017-2628 

+Package: curl

+Score: 0.0 (Low)

+Description: It was found that the fix for CVE-2015-3148 in curl was incomplete. An application using libcurl with HTTP Negotiate authentication could incorrectly re-use credentials for subsequent requests to the same server.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2628 

+

+CVE-2016-10350

+Package: libarchive

+Score: 4.3 (Medium)

+Description: The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10350

+

+CVE-2016-10349

+Package: libarchive

+Score: 4.2 (Medium)

+Description: The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10349

+

+CVE-2016-10229 

+Package: kernel

+Score: 10.0 (High)

+Description: udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10229 

+

+CVE-2016-10228

+Package: glibc

+Score: 4.2 (Medium)

+Description: The iconv program in the GNU C Library (aka glibc or libc6) 2.25 and earlier, when invoked with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10228

+

+CVE-2016-10208

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10208

+

+CVE-2016-10200

+Package: Kernel

+Score: 7.0 (High)

+Description: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10200

+

+CVE-2016-10154

+Package: Kernel

+Score: 5.0 (Medium)

+Description: The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a scatterlist.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10154

+

+CVE-2016-10153

+Package: Kernel

+Score: 7.0 (High)

+Description: The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging reliance on earlier net/ceph/crypto.c code.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10153

+

+CVE-2016-10150

+Package: KVM

+Score: 10.0 (High)

+Description: Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (host OS crash) or possibly gain privileges via crafted ioctl calls on the /dev/kvm device.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10150

+

+CVE-2016-10147

+Package: Kernel

+Score: 5.0 (Medium)

+Description: crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10147

+

+CVE-2016-10044

+Package: Kernel

+Score: 7.0 (High)

+Description: The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10044

+

+CVE-2016-9844

+Package: unzip

+Score: 2.1 (Low)

+Description: Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9844

+

+CVE-2016-9754

+Package: Kernel

+Score: 7.0 (High)

+Description: The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculations, which allows local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9754

+

+CVE-2016-9444

+Package: bind

+Score: 7.0 (High)

+Description: named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9444

+

+CVE-2016-9401

+Package: bash

+Score: 2.0 (Low)

+Description: ref to yocto patch: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=1b2857a781b6666feaf5d3c91dc02ac263d0c4f6

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401

+

+CVE-2016-9318

+Package: libxml2-native

+Score: 6.8 (Medium)

+Description: libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9318

+

+CVE-2016-9083 

+Package: Kernel

+Score: 8.0 (High)

+Description: drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9083 

+

+CVE-2016-8864

+Package: bind

+Score: 5.0 (Medium)

+Description: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8864

+

+CVE-2016-8858

+Package: OpenSSL

+Score: 7.8 (High)

+Description: A memory exhaustion issue in OpenSSH that can be triggered before user authentication was found. An unauthenticated attacker could consume approx. 400 MB of memory per each connection. The attacker could set up multiple such connections to run out of server’s memory.   

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858

+

+CVE-2016-8655 

+Package: Kernel

+Score: 8.0 (High)

+Description: Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8655 

+

+CVE-2016-8636

+Package: Kernel

+Score: 7.0 (High)

+Description: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8636

+

+CVE-2016-8630

+Package: Kernel

+Score: 6.0 (Medium)

+Description: The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8630

+

+CVE-2016-8625

+Package: curl

+Score: 6.9 (Medium)

+Description: When curl is built with libidn to handle International Domain Names (IDNA), ittranslates them to puny code for DNS resolving using the IDNA 2003 standard,while IDNA 2008 is the modern and up-to-date IDNA standard.This misalignment causes problems with for example domains using the German ßcharacter (known as the Unicode Character 'LATIN SMALL LETTER SHARP S') whichis used at times in the .de TLD and is translated differently in the two IDNAstandards, leading to users potentially and unknowingly issuing networktransfer requests to the wrong host.For example, `straße.de` is translated into `strasse.de` using IDNA 2003 butis translated into `xn--strae-oqa.de` using IDNA 2008. Needless to say, thosehost names could very well resolve to different addresses and be twocompletely independent servers. IDNA 2008 is mandatory for .de domains.curl is not alone with this problem, as there's currently a big flux in theworld of network user-agents about which IDNA version to support and use.This name problem exists for DNS-using protocols in curl, but only when builtto use libidn.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625

+

+CVE-2016-8624

+Package: curl

+Score: 6.9 (Medium)

+Description: curl doesn't parse the authority component of the URL correctly when the hostname part ends with a '#' character, and could instead be tricked intoconnecting to a different host. This may have security implications if you forexample use an URL parser that follows the RFC to check for allowed domainsbefore using curl to request them.Passing in `http://example.com#@evil.com/x.txt` would wrongly make curl send arequest to evil.com while your browser would connect to example.com given thesame URL.The problem exists for most protocol schemes.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624

+

+CVE-2016-8623

+Package: curl

+Score: 4.9 (Medium)

+Description: libcurl explicitly allows users to share cookies between multiple easy handlesthat are concurrently employed by different threads.When cookies to be sent to a server are collected, the matching functioncollects all cookies to send and the cookie lock is released immediatelyafterwards. That function however only returns a list with *references* back tothe original strings for name, value, path and so on. Therefore, if anotherthread quickly takes the lock and frees one of the original cookie structstogether with its strings, a use-after-free can occur and lead to informationdisclosure. Another thread can also replace the contents of the cookies fromseparate HTTP responses or API calls.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623

+

+CVE-2016-8622

+Package: curl

+Score: 4.9 (Medium)

+Description: The URL percent-encoding decode function in libcurl is called`curl_easy_unescape`. Internally, even if this function would be made toallocate a unscape destination buffer larger than 2GB, it would return thatnew length in a signed 32 bit integer variable, thus the length would geteither just truncated or both truncated and turned negative. That could thenlead to libcurl writing outside of its heap based buffer.This can be triggered by a user on a 64bit system if the user can send in acustom (very large) URL to a libcurl using program.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622

+

+CVE-2016-8621

+Package: curl

+Score: 4.9 (Medium)

+Description: The `curl_getdate` converts a given date string into a numerical timestamp andit supports a range of different formats and possibilites to express a dateand time. The underlying date parsing function is also used internally whenparsing for example HTTP cookies (possibly received from remote servers) andit can be used when doing conditional HTTP requests.The date parser function uses the libc sscanf() function at two places, withthe parsing strings "%02d:%02d" and ""%02d:%02d:%02d". The intent being thatit would parse either a string with HH:MM (two digits colon two digits) orHH:MM:SS (two digits colon two digits colon two digits). If instead the pieceof time that was sent in had the final digit cut off, thus ending with asingle-digit, the date parser code would advance its read pointer one byte toomuch and end up reading out of bounds.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621

+

+CVE-2016-8620

+Package: curl

+Score: 6.9 (Medium)

+Description: The curl tool's "globbing" feature allows a user to specify a numerical rangethrough which curl will iterate. It is typically specified as [1-5],specifying the first and the last numbers in the range. Or with [a-z], usingletters.1. The curl code for parsing the second *unsigned* number did not check for aleading minus character, which allowed a user to specify `[1--1]` with nocomplaints and have the latter `-1` number get turned into the largestunsigned long value the system can handle. This would ultimately cause curl towrite outside the dedicated malloced buffer after no less than 100,000iterations, since it would have room for 5 digits but not 6.2. When the range is specified with letters, and the ending letter is left out`[L-]`, the code would still advance its read pointer 5 bytes even if thestring was just 4 bytes and end up reading outside the given buffer.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620

+

+CVE-2016-8619

+Package: curl

+Score: 6.9 (Medium)

+Description: In curl's implementation of the Kerberos authentication mechanism, thefunction `read_data()` in security.c is used to fill the necessary krb5structures. When reading one of the length fields from the socket, it fails toensure that the length parameter passed to realloc() is not set to 0.This would lead to realloc() getting called with a zero size and when doing sorealloc() returns NULL *and* frees the memory - in contrary to normalrealloc() fails where it only returns NULL - causing libcurl to free thememory *again* in the error path.This flaw could be triggered by a malicious or just otherwise ill-behavingserver.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619

+

+CVE-2016-8618

+Package: curl

+Score: 6.9 (Medium)

+Description: The libcurl API function called `curl_maprintf()` can be tricked into doing adouble-free due to an unsafe `size_t` multiplication, on systems using 32 bit`size_t` variables. The function is also used internallty in numeroussituations.The function doubles an allocated memory area with realloc() and allows thesize to wrap and become zero and when doing so realloc() returns NULL *and*frees the memory - in contrary to normal realloc() fails where it only returnsNULL - causing libcurl to free the memory *again* in the error path.Systems with 64 bit versions of the `size_t` type are not affected by thisissue.This behavior is triggable using the publicly exposed function.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618

+

+CVE-2016-8617

+Package: curl

+Score: 6.9 (Medium)

+Description: In libcurl's base64 encode function, the output buffer is allocated as followswithout any checks on insize:     malloc( insize * 4 / 3 + 4 )On systems with 32-bit addresses in userspace (e.g. x86, ARM, x32), themultiplication in the expression wraps around if insize is at least 1GB ofdata. If this happens, an undersized output buffer will be allocated, but thefull result will be written, thus causing the memory behind the output bufferto be overwritten.If a username is set directly via `CURLOPT_USERNAME` (or curl's `-u, --user`option), this vulnerability can be triggered. The name has to be at least512MB big in a 32bit system.Systems with 64 bit versions of the `size_t` type are not affected by thisissue.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617

+

+CVE-2016-8616

+Package: curl

+Score: 3.9 (Low)

+Description: When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections.This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password.We are not aware of any exploit of this flaw.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616

+

+CVE-2016-8615

+Package: curl

+Score: 6.9 (Medium)

+Description: If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.The issue pertains to the function that loads cookies into memory, which reads the specified file into a fixed-size buffer in a line-by-line manner using the fgets() function. If an invocation of fgets() cannot read the whole line into the destination buffer due to it being too small, it truncates the output. This way, a very long cookie (name + value) sent by a malicious server would be stored in the file and subsequently that cookie could be read partially and crafted correctly, it could be treated as a different cookie for another server.We are not aware of any exploit of this flaw.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615

+

+CVE-2016-7795

+Package: systemd

+Score: 4.9 (Medium)

+Description: The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7795

+

+CVE-2016-7097

+Package: Kernel

+Score: 3.6 (Low)

+Description: The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7097

+

+CVE-2016-6489

+Package: nettle

+Score: 5.0 (Medium)

+Description: The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6489

+

+CVE-2016-6480

+Package: Kernel

+Score: 4.7 (Medium)

+Description: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480

+

+CVE-2016-6354

+Package: flex

+Score: 7.5 (High)

+Description: Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6354

+

+CVE-2016-6323

+Package: glibc

+Score: 5.0 (Medium)

+Description: The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6323

+

+CVE-2016-6321

+Package: Tar (Gnu)

+Score: 5.0 (Medium)

+Description: Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321

+

+CVE-2016-6318

+Package: cracklib

+Score: 7.5 (High)

+Description: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6318

+

+CVE-2016-6301

+Package: busybox

+Score: 7.1 (High)

+Description: The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6301

+

+CVE-2016-6252

+Package: shadow

+Score: 5.0 (Medium)

+Description: Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. Patch: https://bugzilla.suse.com/attachment.cgi?id=684679&action=diff 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6252

+

+CVE-2016-6185

+Package: Perl

+Score: 5.0 (Medium)

+Description: The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6185

+

+CVE-2016-6170

+Package: bind

+Score: 6.0 (Medium)

+Description: DNS protocols were designed with the assumption that a certain amount of trust could be presumed between the operators of primary and secondary servers for a given zone.  However, in current practice some organizations have scenarios which require them to accept zone data from sources that are not fully trusted (for example: providers of secondary name service).  A party who is allowed to feed data into a zone (e.g. by AXFR, IXFR, or Dynamic DNS updates) can overwhelm the server which is accepting data by intentionally or accidentally exhausting that server's memory.https://kb.isc.org/article/AA-01390

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6170

+

+CVE-2016-6131

+Package: gcc

+Score: 4.9 (Medium)

+Description: A stack overflow vulnerability in the libiberty demangler was found, which causes its host application to crash on a tainted branch instruction. The problem is caused by a self-reference in a mangled type string that is "remembered" for later reference. This leads to an infinite recursion during the demangling.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6131

+

+CVE-2016-5636

+Package: CPython

+Score: 10.0 (High)

+Description: Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5636

+

+CVE-2016-5300

+Package: expat

+Score: 7.8 (High)

+Description: The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300

+

+CVE-2016-5131

+Package: libxml2

+Score: 10.0 (High)

+Description: Use-after-free vulnerability in libxml2 (used in chromium-browser) through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5131

+

+CVE-2016-4658

+Package: libxml2

+Score: 10.0 (High)

+Description: libxml2 in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4658

+

+CVE-2016-4448

+Package: libxml2

+Score: 10.0 (High)

+Description: Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4448

+

+CVE-2016-2775

+Package: bind

+Score: 4.3 (Medium)

+Description: ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2775

+

+CVE-2016-2381

+Package: Perl

+Score: 5.0 (Medium)

+Description: Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2381

+

+CVE-2016-2183

+Package: OpenSSL

+Score: 5.0 (Medium)

+Description: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183

+

+CVE-2016-2147

+Package: busybox

+Score: 5.0 (Medium)

+Description: Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2147

+

+CVE-2016-0800

+Package: OpenSSL

+Score: 4.3 (Medium)

+Description: The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800

+

+CVE-2016-0718

+Package: expat

+Score: 7.5 (High)

+Description: Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718

+

+CVE-2016-0634 

+Package: bash

+Score: 5.0 (Medium)

+Description: A vulnerability was found in a way bash expands the $HOSTNAME. Injecting the hostname with malicious code would cause it to run each time bash expanded \h in the prompt string. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0634 

+

+CVE-2015-9019

+Package: libxslt-native 

+Score: 5.0 (Medium)

+Description: In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9019

+

+CVE-2015-5224

+Package: util-linux

+Score: 7.5 (High)

+Description: The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5224

+

+CVE-2014-9365 

+Package: python

+Score: 5.8 (Medium)

+Description: The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. 

+Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9365

diff --git a/doc/manifest_conf.mk b/doc/manifest_conf.mk
index 77b7f5e..320e4f4 100644
--- a/doc/manifest_conf.mk
+++ b/doc/manifest_conf.mk
@@ -2,6 +2,6 @@
 # NOTE: MANIFESTHASH needs to be changed to final release tag in format refs/tags/ELnnn before a release
 #       The values are shown in the release info
 #       The manifest is used to fetch information into the release info from the distro files
-MANIFESTHASH      ?= refs/tags/Enea_Linux_7.0
+MANIFESTHASH      ?= refs/tags/Enea_Linux_8.0
 MANIFESTURL       := git@git.enea.com:linux/manifests/el_manifests-standard.git
 PROFILE_NAME      := Standard