package/libbson: remove package

The upstream libbson repository has been archived since october 2020,
and there is a known vulnerabilities affecting it (CVE-2025-0755).

Since no other package depends on libbson, and it hasn't seen any recent
activity, let's simply remove it from Buildroot. In case anyone needs a
bson implementation, one could integrate the replacement from mongo-c-driver
instead, see https://github.com/mongodb/mongo-c-driver/tree/master/src/libbson

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Titouan Christophe
2025-10-04 11:57:51 +02:00
committed by Peter Korsgaard
parent 0d430ac728
commit 851c6ad279
6 changed files with 6 additions and 39 deletions

View File

@@ -146,6 +146,12 @@ endif
comment "Legacy options removed in 2025.11"
config BR2_PACKAGE_LIBBSON
bool "libbson has been removed"
select BR2_LEGACY
help
libbson is officially deprecated upstream and has been removed
config BR2_TARGET_ROOTFS_AXFS
bool "AXFS root filesystem has been removed"
select BR2_LEGACY

View File

@@ -2994,7 +2994,6 @@ F: package/wlr-randr/
N: Semyon Kolganov <semenak94@mail.ru>
F: package/fmt/
F: package/libbson/
F: package/lua-resty-http/
F: package/mpir/

View File

@@ -1924,7 +1924,6 @@ menu "JSON/XML"
source "package/json-for-modern-cpp/Config.in"
source "package/json-glib/Config.in"
source "package/jsoncpp/Config.in"
source "package/libbson/Config.in"
source "package/libfastjson/Config.in"
source "package/libjson/Config.in"
source "package/libjwt/Config.in"

View File

@@ -1,11 +0,0 @@
config BR2_PACKAGE_LIBBSON
bool "libbson"
depends on BR2_TOOLCHAIN_HAS_THREADS
help
libbson is a library providing useful routines related to
building, parsing, and iterating BSON documents.
http://mongoc.org/libbson/
comment "libbson needs a toolchain w/ threads"
depends on !BR2_TOOLCHAIN_HAS_THREADS

View File

@@ -1,4 +0,0 @@
# Locally calculated
sha256 6bb51b863a4641d6d7729e4b55df8f4389ed534c34eb3a1cda906a53df11072c libbson-1.9.5.tar.gz
sha256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30 COPYING
sha256 8dc5cb3146b026715e6c145621c7732f36c295d825b7b3a03076ad3f238db48e THIRD_PARTY_NOTICES

View File

@@ -1,22 +0,0 @@
################################################################################
#
# libbson
#
################################################################################
LIBBSON_VERSION = 1.9.5
LIBBSON_SITE = https://github.com/mongodb/libbson/releases/download/$(LIBBSON_VERSION)
LIBBSON_LICENSE = Apache-2.0, MIT (jsonl), ISC (b64), Zlib (md5)
LIBBSON_LICENSE_FILES = COPYING THIRD_PARTY_NOTICES
LIBBSON_CPE_ID_VENDOR = mongodb
LIBBSON_CONF_OPTS = \
--disable-tests \
--disable-examples \
--disable-man-pages \
--disable-html-docs
LIBBSON_INSTALL_STAGING = YES
# Also has CMake support, but that forces shared+static libs and static
# lib has a different name.
$(eval $(autotools-package))