mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity
75,399 Commits 6 Branches 483 Tags
0416ae0ed5853cd7da4b34e9f8cd17baabf503f0
Commit Graph

75399 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Julien Olivain
0416ae0ed5 package/libkrb5: security bump to version 1.21.3 
For the change log, see [1].

The license hash file changed, due to the year update.  See [2].  This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371

[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] fec2c44ee9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-16 10:47:41 +01:00
Bernd Kuhls
649b31fc6d package/intel-microcode: security bump version to 20241112 
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html

CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2024-11-15 23:25:53 +01:00
Julien Olivain
d571951c67 package/tiff: security bump to version 4.7.0 
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html

This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.

This commit also adds a comment in the hash file about pgp signature
veritication.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-14 19:52:43 +01:00
Bernd Kuhls
ed4348d1c5 package/libcurl: security bump version to 8.11.0 
Changelog: https://curl.se/ch/8.11.0.html

Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-14 19:52:31 +01:00
Peter Korsgaard
b4ae65e36e docs/website: Update for 2024.02.8 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-14 17:39:32 +01:00
Peter Korsgaard
945f3f6c45 Update for 2024.02.8 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e843fa764b)
[Peter: drop Makefile/Vagrantfile changes]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-14 17:37:41 +01:00
Peter Korsgaard
a7ed78badc docs/website: Update for 2024.08.2 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-14 14:50:12 +01:00
Peter Korsgaard
5eeab05e48 Update for 2024.08.2 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a91b9c7400)
[Peter: drop Makefile change]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-14 14:47:41 +01:00
Peter Korsgaard
46fa2fcb7a Update for 2024.11-rc1 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024.11-rc1 		2024-11-13 18:59:29 +01:00
Michel Alex
e53014bcc8 package/libzenoh-pico: bump to version 1.0.2 
https://github.com/eclipse-zenoh/zenoh-pico/releases/tag/1.0.2

Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 18:55:44 +01:00
Michel Alex
ee157845d3 package/libzenoh-c: bump to version 1.0.2 
https://github.com/eclipse-zenoh/zenoh-c/releases/tag/1.0.2

Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 18:55:44 +01:00
Scott Fan
00f370c0ff package/timescaledb: bump version to 2.17.2 
Release notes: https://github.com/timescale/timescaledb/blob/2.17.2/CHANGELOG.md

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 18:55:43 +01:00
Nicolas Cavallari
268d5145c8 package/libgit2: bump version to 1.8.4 
upstream mistakenly based 1.8.3 on 1.8.1 so it didn't include the
1.8.2 fixes.  1.8.4 includes fixes from 1.8.2 and 1.8.3.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 18:55:42 +01:00
Francois Perrad
856a7e96d5 package/expat: security bump to version 2.6.4 
fix CVE-2024-50602

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 18:55:41 +01:00
Romain Naour
1a9f5eac98 package/xenomai: fix latest version 
The last xenomai version bump [1] forgot to update the
BR2_PACKAGE_XENOMAI_LATEST_VERSION option string.

[1] 44fafcc41a

Reported-by: Pierre Ficheux <pierre.ficheux@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
 2024-11-13 17:26:46 +01:00
James Hilliard
66f66bbdb5 package/python-pillow: set new build options 
Explicitly set new imagequant, raqm and zlib build options.

Fixes: baa3db0c34

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
 2024-11-12 20:53:16 +01:00
James Hilliard
a97a592a73 package/python-pillow: fix webp DependencyException 
As of baa3db0c34 webp mux/demux are no
longer optional for webp support in python-pillow. The
-Cwebpmux=enable/disable option no longer exists.

Fixes:
DependencyException:
The headers or library files could not be found for webp,
which was requested by the option flag --enable-webp

Fixes: baa3db0c34

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
 2024-11-12 20:52:48 +01:00
Fiona Klute (WIWA)
012bbb70c2 package/raspberrypi-usbboot: bump version to 20240926-102326 
This version adds the -i flag to select the device to boot by serial
number [1], which is important when working with multiple RPi
devices. Otherwise mostly firmware updates, see [2] for all changes.

Also switch to the git download method for reproducible archives.

[1] 481c5e8a77
[2] https://github.com/raspberrypi/usbboot/compare/20221215-105525...20240926-102326

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 22:31:35 +01:00
Scott Fan
36f1195493 configs/cubieboard1: bump Linux to 6.11.6 and U-Boot to 2024.10 
Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 22:27:15 +01:00
Bernd Kuhls
323567552b {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:52:28 +01:00
Julien Olivain
9b40127534 package/usbredir: bump version to 0.14.0 
For change log, see [1].

This commit also updates the _SITE to the URL published on the
homepage [2]. The main motivation is to use HTTPS.

This commit also adds a comment in the hash file about the pgp
signature verification.

[1] https://gitlab.freedesktop.org/spice/usbredir/-/blob/usbredir-0.14.0/ChangeLog.md
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:41:29 +01:00
Julien Olivain
122a5e2529 package/usbredir: fix package homepage URL 
The current homepage URL [1] redirects to its https and ends up to
a HTTP 404 not found error. This commit fixes the issue by replacing
it with the new URL [2].

[1] http://www.spice-space.org/page/UsbRedir
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:41:21 +01:00
Julien Olivain
77fcce23c6 package/findutils: bump version to 4.10.0 
For release announce, see:
https://lists.gnu.org/archive/html/info-gnu/2024-07/msg00002.html

This commit also updates the hash file comment, to use the sha256 hash
published in the release announce, to provide the signature URL and the
pgp key id used for the signature verification.

See the gnulib documentation for details [1]. Contrary to what the
option name might suggest, it doesn't really disable Y2038 support,
but only the check that the system is Y2038 compliant. So even with
--disable-year2038, if the system is Y2038 compliant (uses a 64-bit
arch, uses the musl C library, or uses the glibc C library with
BR2_TIME_BITS_64=y), findutils will be Y2038 compliant.

[1] https://www.gnu.org/software/gnulib/manual/html_node/Avoiding-the-year-2038-problem.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:25:26 +01:00
Julien Olivain
5456830db9 package/iperf: bump to version 2.2.1 
For release note, see after the file list at:
https://sourceforge.net/projects/iperf2/files/

This commit also adds a package patch to fix the build with musl
libc toolchains.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:25:07 +01:00
Michael Nosthoff
7d358fe180 package/spdlog: bump to version 1.15.0 
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:22:55 +01:00
Julien Olivain
799d43ae05 package/blake3: bump version to 1.5.4 
For change log since 1.5.1, see: [1] [2] [3].

Also, v1.5.2 added the new license "Apache-2.0 with (LLVM)
exceptions". The initial LICENSE file was split in three
different files (one file per license). See [4] [5].
This commit updates _LICENSE, _LICENSE_FILES and the hash
file accordingly.

[1] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.2
[2] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.3
[3] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.4
[4] bb8761256a
[5] 0b2c630cc5

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:22:49 +01:00
Julien Olivain
6febbd6f1e package/motion: bump version to 4.7.0 
For the change log, see:
https://github.com/Motion-Project/motion/releases/tag/release-4.7.0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:22:29 +01:00
Michael Nosthoff
8d4a9afdd5 package/boost: update download url 
boost moved its package hosting from jfrog to their own url
provided by the C++ Alliance. According to [0] the old urls
might cease to exist after December 2024.

[0] https://lists.boost.org/Archives/boost/2024/05/256914.php

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:20:17 +01:00
Julien Olivain
fca1933e19 support/testing/tests/boot/test_grub.py: new test for RISCV64 EFI 
Commit f439b47ed "boot/grub2: add RISC-V 64bit EFI support" [1]
introduced the grub2 RISC-V UEFI support.

At that time, it was not possible to have a runtime test for this.
qemu-system-riscv64 is not in the Buildroot Docker reference image,
and the base distribution (Debian 11) does not provide a
sufficiently recent version. A qemu-system-riscv64 >= 8.0.0 is needed.

Commit 0d4177598 "support/testing/infra/emulator.py: add build host
dir to qemu search path" [2] added the capability to use the
Buildroot host-qemu package inside runtime test.

With this support, it is now possible to add a runtime test for a
grub2 UEFI boot on RISC-V 64bit.

Also, due to an upstream edk2 git submodule issue, this commit
includes a workaround to use https://sources.buildroot.net for this
test. See [3].

[1] f439b47ed6
[2] 0d4177598c
[3] 47fc9e5509

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 21:15:33 +01:00
Thomas Petazzoni
48490cf7b1 CHANGES: add issues resolved in 2024.11-rc1 
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 20:52:40 +01:00
Thomas Petazzoni
5a59c24e57 CHANGES: update in preparation for 2024.11-rc1 
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 20:38:21 +01:00
Julien Olivain
d7deecbce2 package/uhubctl: bump to version 2.6.0 
For the release note, see:
https://github.com/mvp/uhubctl/releases/tag/v2.6.0

This commit also updates the LICENSE hash, due to a year update. See:
4deae1731c

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-11 16:18:29 +01:00
Vincent Jardin
dc4a5acfde package/bfscripts: new package 
Bootstrap the installation of Mellanox/NVIDIA Bluefield scripts
that can be run either on the host CPU or on the onboard ARM64 CPU.

Signed-off-by: Vincent Jardin <vjardin@free.fr>
Reviewed-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2024-11-10 19:33:08 +01:00
Julien Olivain
a842df6348 package/fluidsynth: bump to version 2.4.0 
For change log since v2.3.7, see:
https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 18:14:00 +01:00
Julien Olivain
525c1369bc package/irssi: bump version to 1.4.5 
For change log, see:
https://irssi.org/NEWS/#news-v1-4-5

This commit also adds the pgp key id used for the signature
verification.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 18:13:54 +01:00
Bernd Kuhls
9101aad327 package/kodi-pvr-vuplus: bump version to 21.3.0-Omega 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:53:49 +01:00
Bernd Kuhls
b2786de37b package/kodi-pvr-iptvsimple: bump version to 21.10.0-Omega 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:53:45 +01:00
Bernd Kuhls
39dde9efc1 package/kodi-inputstream-adaptive: bump version to 21.5.6-Omega 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:53:41 +01:00
Cherniaev Andrei
d2f5678f42 package/picotool: fix Config.in comment dependencies 
Due to a bug in the Config.in comment dependencies, the comment "***
picotool needs a toolchain w/ C++, threads, gcc >= 4.9 ***" is always
shown even if all features are enabled.

Fixes: d30c1e3c58 ("package/picotool: fix libusb dependencies")
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:52:01 +01:00
James Hilliard
80e6f23d4d package/python-wheel: bump to version 0.45.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:35 +01:00
James Hilliard
7aad46406a package/python-werkzeug: bump to version 3.1.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:31 +01:00
James Hilliard
fe4207ee79 package/python-tqdm: bump to version 4.67.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:29 +01:00
James Hilliard
8d740a7910 package/python-scapy: bump to version 2.6.1 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:28 +01:00
James Hilliard
6974f782bb package/python-rpds-py: bump to version 0.21.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:26 +01:00
James Hilliard
b449ad4aad package/python-regex: bump to version 2024.11.6 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:24 +01:00
James Hilliard
62b2ac7a8e package/python-pysnmp: bump to version 7.1.13 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:22 +01:00
James Hilliard
650a7f0245 package/python-pysmi: bump to version 1.5.9 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:20 +01:00
James Hilliard
8f61db37b1 package/python-pylibfdt: bump to version 1.7.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:18 +01:00
James Hilliard
9793094ff2 package/python-pip: bump to version 24.3.1 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:16 +01:00
James Hilliard
21ceefad6d package/python-packaging: bump to version 24.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-11-10 17:44:14 +01:00