Commit Graph

75498 Commits

Author SHA1 Message Date
Peter Korsgaard
0830ce112b package/python-django: security bump to version 5.1.4
Fixes the following security issues:

CVE-2024-53907: Potential denial-of-service in
django.utils.html.strip_tags()

The strip_tags() method and striptags template filter are subject to a
potential denial-of-service attack via certain inputs containing large
sequences of nested incomplete HTML entities.

CVE-2024-53908: Potential SQL injection in HasKey(lhs, rhs) on Oracle

Direct usage of the django.db.models.fields.json.HasKey lookup on Oracle is
subject to SQL injection if untrusted data is used as a lhs value.
Applications that use the jsonfield.has_key lookup through the __ syntax are
unaffected.

https://www.djangoproject.com/weblog/2024/dec/04/security-releases/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c2c1c27d11)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-19 09:29:09 +01:00
Peter Korsgaard
06b178d1f7 package/wireshark: security bump to version 4.2.9
For release notes, see:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html

Fixes the following vulnerabilities:

4.2.9:

CVE-2024-11595: wnpa-sec-2024-14 · FiveCo RAP dissector infinite loop
https://www.wireshark.org/security/wnpa-sec-2024-14

CVE-2024-11596: wnpa-sec-2024-15 · ECMP dissector crash
https://www.wireshark.org/security/wnpa-sec-2024-15

4.2.8:

CVE-2024-9781: wnpa-sec-2024-13 · AppleTalk and RELOAD Framing dissector
crashes
https://www.wireshark.org/security/wnpa-sec-2024-13

4.2.7:

CVE-2024-8250: wnpa-sec-2024-11 · NTLMSSP dissector crash
https://www.wireshark.org/security/wnpa-sec-2024-11

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b0d68b7322)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-19 09:25:07 +01:00
Peter Korsgaard
ba0dafc7e3 package/libcurl: security bump to version 8.11.1
Fixes the following security vulnerability:

CVE-2024-11053: netrc and redirect credential leak
https://curl.se/docs/CVE-2024-11053.html

Changelog: https://curl.se/ch/8.11.1.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4338deaae5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-19 09:24:51 +01:00
Peter Korsgaard
bb393213cc package/subversion: security bump to version 1.14.5
Fixes the following security vulnerabilities:

CVE-2024-46901: mod_dav_svn denial-of-service via control characters in
paths

It has been discovered that the patch for CVE-2013-1968 was incomplete
and unintentionally left mod_dav_svn vulnerable to control characters
in filenames.

https://subversion.apache.org/security/CVE-2024-46901-advisory.txt

Subversion 1.14.4 also fixed a Windows-only vulnerability:
https://subversion.apache.org/security/CVE-2024-45720-advisory.txt

For change log, see:
https://svn.apache.org/repos/asf/subversion/tags/1.14.5/CHANGES

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9975d28aa3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-19 09:24:24 +01:00
Peter Korsgaard
b65972e437 package/python3: bump to version 3.12.8
Brings a number of bugfixes:
https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8

Refresh patches to apply without fuzz.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit bb27353014)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 12:09:57 +01:00
Bernd Kuhls
0e4a693125 package/libxml2: bump version to 2.13.5
Release notes:
https://download.gnome.org/sources/libxml2/2.13/libxml2-2.13.5.news

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e6695ad3f8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 12:04:34 +01:00
José Luis Salvador Rufo
51abb34846 package/zfs: bump version to 2.2.7
Removed backported patch:
- bd949b10be.patch

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 14a7a93472)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 12:03:17 +01:00
Bernd Kuhls
28778fc2c8 package/wget: security bump version to 1.25.0
Release notes:
https://lists.gnu.org/archive/html/bug-wget/2024-11/msg00002.html

Fixes the following vulnerabilities:

- CVE-2024-38428: url.c in GNU Wget through 1.24.5 mishandles semicolons in
  the userinfo subcomponent of a URI, and thus there may be insecure
  behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.

  https://nvd.nist.gov/vuln/detail/CVE-2024-38428

- CVE-2024-10524: Applications that use Wget to access a remote resource
  using shorthand URLs and pass arbitrary user credentials in the URL are
  vulnerable.  In these cases attackers can enter crafted credentials which
  will cause Wget to access an arbitrary host.

  https://www.openwall.com/lists/oss-security/2024/11/18/6

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 295b2c4f8e)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 12:01:02 +01:00
Bernd Kuhls
cce222910d package/samba4: bump version to 4.20.6
Release notes: https://www.samba.org/samba/history/samba-4.20.6.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f2355c6702)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 11:52:35 +01:00
Julien Olivain
9c212c74a2 support/testing/infra/emulator.py: add qemu version in run log
In some specific situations, there is subtle bugs which depends on a
specific Qemu emulator version and the code it runs.

For example, EDK2 on Aarch64 could work with specific versions of Qemu,
EDK2 and ATF. See commit cc0823c2d "boot/edk2: bump to version
edk2-stable202405" [1].

Also, some Qemu bugs made the guest OS crash. See for example commit
9534b9c00 "package/qemu: fix qemu 9.x issue for AArch32 Secure
PL1&0" [2].

Commit 0d4177598 "support/testing/infra/emulator.py: add build host
dir to qemu search path" added the ability for a runtime test to
select host-qemu in order to use it. It is also possible for a user
to use the "utils/run-tests" script on its host system providing its
own version of Qemu. The Buildroot CI can also use its Qemu version
included in the reference Docker image.

This means the Qemu emulator for running a runtime test can be from
several sources:
- Buildroot Docker reference image,
- Buildroot host-qemu package version,
- Developer host OS qemu version.

Those versions can also change in time.

In order to help debugging of those subtle emulator bugs, this commit
adds a recording of the actual Qemu version used to run a test.

[1] cc0823c2d1
[2] 9534b9c00c
[3] 0d4177598c

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit ed9da08944)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 11:47:45 +01:00
Julien Olivain
ff911f23b1 package/nettle: update _SITE to use BR2_GNU_MIRROR
The nettle package is distributed on the GNU project servers. See [1]
and [2]. Buildroot has the BR2_GNU_MIRROR configuration which can
be used for that purpose. See [3].

For consistency with all other GNU packages, this commit updates
the _SITE to use BR2_GNU_MIRROR.

Note: the nettle _SITE was updated to ftp.gnu.org in commit [4].

[1] https://www.lysator.liu.se/~nisse/nettle/
[2] https://www.gnu.org/prep/ftp.html
[3] https://gitlab.com/buildroot.org/buildroot/-/blob/2024.08.2/Config.in#L286
[4] 92f0ef5eaa

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 9ccc0f5642)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 09:51:22 +01:00
Julien Olivain
f882742c35 package/freeipmi: update _SITE to use BR2_GNU_MIRROR
The freeipmi package is distributed on the GNU project servers.
See [1] and [2]. Buildroot has the BR2_GNU_MIRROR configuration
which can be used for that purpose. See [3].

For consistency with all other GNU packages, this commit updates
the _SITE to use BR2_GNU_MIRROR.

[1] https://www.gnu.org/software/freeipmi/download.html
[2] https://www.gnu.org/prep/ftp.html
[3] https://gitlab.com/buildroot.org/buildroot/-/blob/2024.08.2/Config.in#L286

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit bfa2dbc2d6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 09:51:21 +01:00
Julien Olivain
ef33988621 package/octave: update _SITE to use BR2_GNU_MIRROR
The octave package is distributed on the GNU project servers. See [1]
and [2]. Buildroot has the BR2_GNU_MIRROR configuration which can
be used for that purpose. See [3].

For consistency with all other GNU packages, this commit updates
the _SITE to use BR2_GNU_MIRROR.

[1] https://www.octave.org/download
[2] https://www.gnu.org/prep/ftp.html
[3] https://gitlab.com/buildroot.org/buildroot/-/blob/2024.08.2/Config.in#L286

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit b0a1b0bab1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 09:51:20 +01:00
Julien Olivain
93a2581bfd Config.in: switch GNU mirrors URL to https
As explained on [1], the primary GNU mirrors URL is https.
This commit updates BR2_GNU_MIRROR to switch to it.

[1] https://www.gnu.org/prep/ftp.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 0f9da3934b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-14 09:51:20 +01:00
Julien Olivain
0f5fc9b065 support/testing/tests/package/test_fwts.py: switch to neoverse-n1 cpu
The SBSA Reference Platform was updated to use the neoverse-n1 cpu
(armv8.2a) in Qemu v8.1 [1].

Commit c58a2a968 "configs/qemu_aarch64_sbsa_defconfig: switch to
neoverse-n1 (armv8.2a)" [2] reflected this change in
qemu_aarch64_sbsa_defconfig.

This commit updates the test_fwts runtime test the same way.

This update is possible with the help of commits [3] and [4].

[1] 1877272bad
[2] c58a2a9687
[3] 0d4177598c
[4] 027ddcbff6

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit c2f91e9046)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-13 23:44:45 +01:00
Julien Olivain
de3a8734f1 support/testing/tests/boot/test_edk2.py: switch to neoverse-n1 cpu
The SBSA Reference Platform was updated to use the neoverse-n1 cpu
(armv8.2a) in Qemu v8.1 [1].

Commit c58a2a968 "configs/qemu_aarch64_sbsa_defconfig: switch to
neoverse-n1 (armv8.2a)" [2] reflected this change in
qemu_aarch64_sbsa_defconfig.

This commit updates the test_edk2 runtime test the same way.

This update is possible with the help of commits [3] and [4].

[1] 1877272bad
[2] c58a2a9687
[3] 0d4177598c
[4] fba62f2ab1

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 36c7a5366a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-13 23:44:05 +01:00
Julien Olivain
d47b41bbf6 boot/grub2: update _SITE to use BR2_GNU_MIRROR
The grub2 package is distributed on the GNU project servers. See [1]
and [2]. Buildroot has the BR2_GNU_MIRROR configuration which can
be used for that purpose. See [3].

For consistency with all other GNU packages, this commit updates
the _SITE to use BR2_GNU_MIRROR.

Note: Commit [4] introduced the grub2 package using BR2_GNU_MIRROR.
Commit [5] changed it to use "http://ftp.gnu.org/gnu/grub" without
providing a justification for that change.

[1] https://www.gnu.org/software/grub/grub-download.html
[2] https://www.gnu.org/prep/ftp.html
[3] https://gitlab.com/buildroot.org/buildroot/-/blob/2024.08.2/Config.in#L286
[4] c24fdb3680
[5] 5ffafd2353

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 51858c4a34)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-13 23:39:19 +01:00
Julien Olivain
b14d727c06 package/bc: update _SITE to use BR2_GNU_MIRROR
The bc package is distributed on the GNU project servers. See [1]
and [2]. Buildroot has the BR2_GNU_MIRROR configuration which can
be used for that purpose. See [3]

For consistency with all other GNU packages, this commit updates
the _SITE to use BR2_GNU_MIRROR.

As a side note, the bc package was introduced long time ago using
BR2_GNU_MIRROR. See [4]. It was then updated to an alpha version
in [5]. When the alpha version was no longer needed, it was switched
to the main GNU download server in [6].

[1] https://www.gnu.org/software/bc/
[2] https://www.gnu.org/prep/ftp.html
[3] https://gitlab.com/buildroot.org/buildroot/-/blob/2024.08.2/Config.in#L286
[4] c95dcd4645
[5] 1faa7c344e
[6] ed7572cc7f

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 2956a39215)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-13 23:36:37 +01:00
Peter Korsgaard
6fdd6d16f7 package/xen: fix 'available' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 21e5a9a96b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:35 +01:00
Peter Korsgaard
87f5d3da4a package/xdriver_xf86-video-qxl: fix 'appropriate' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2e8cd8199c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:35 +01:00
Peter Korsgaard
c63ec66b74 package/wilc-firmware: fix 'acceptable' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0c6b8c989f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:34 +01:00
Peter Korsgaard
97f589743b package/vim: fix 'highlighting' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 900bf91d10)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:33 +01:00
Peter Korsgaard
a7d1f85d19 package/vdr-plugin-vnsiserver: fix 'several' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 34c6716887)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:32 +01:00
Peter Korsgaard
21904321f5 package/transmission: fix 'environment' and 'RECOMMENDED' typos
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a46343df3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:31 +01:00
Peter Korsgaard
7420216a0a package/tpm2-tss: fix 'and' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit aca49ab538)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:30 +01:00
Peter Korsgaard
373c5a9754 package/ti-sgx-demos: fix 'available' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ee93f20f96)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:30 +01:00
Peter Korsgaard
a5e50d8fdb package/tcf-agent: fix 'will not' and 'unmodified' typos
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 10c218ea78)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:29 +01:00
Peter Korsgaard
1dbb5fc616 package/python-pyqt5: fix 'paths' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a4b0ba45a2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:28 +01:00
Peter Korsgaard
e4f86498d2 package/python-asyncore: fix 'library' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Acked-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 84e61e7d70)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:27 +01:00
Peter Korsgaard
186de3b0a4 package/python-pyasynchat: fix 'library' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Acked-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit abad994acd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:26 +01:00
Peter Korsgaard
3cb033f7fd package/pkg-utils: fix 'necessary' and 'dictionary' typos
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ba08a37af5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:26 +01:00
Peter Korsgaard
27a1f1efc9 package/pkg-golang: fix 'unknown' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit bd1f401ecd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:25 +01:00
Peter Korsgaard
34e8241f05 package/pkg-generic: fix 'globally' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2b51fbdc6a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:24 +01:00
Peter Korsgaard
ed34ff164b package/pkg-carco.mk: fix 'unknown' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 86a5b45755)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:23 +01:00
Peter Korsgaard
a28bf703a2 package/php: fix 'deactivate' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e2f44b5060)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:22 +01:00
Peter Korsgaard
1b75258570 package/pcm-tools: fix 'generating' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d6586d37ba)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:22 +01:00
Peter Korsgaard
393c0a1cbe package/openvpn: fix 'accommodate' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b253ae3054)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:21 +01:00
Peter Korsgaard
3418020093 package/open62541: fix 'resources' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b2d2ea4300)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:20 +01:00
Peter Korsgaard
8a2787bffd package/open2300: fix 'locally' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f76956eac4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:19 +01:00
Peter Korsgaard
a7da975080 package/dmraid: fix 'maintenance' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a268afeb65)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:18 +01:00
Peter Korsgaard
c61810db82 package/autoconf: fix 'uncommitted' typo
Found by codespell.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fa1a6177dd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 22:29:18 +01:00
Christian Stewart
fbdd2acaec package/go: bump to version 1.23.4
go1.23.4 (released 2024-12-03) includes fixes to the compiler, the runtime, the trace command, and the syscall package.

https://go.dev/doc/devel/release#go1.23.4
https://github.com/golang/go/issues?q=milestone%3AGo1.23.4+label%3ACherryPickApproved

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ef27358963)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 20:37:04 +01:00
Christian Stewart
15aca7d33d package/go: bump version to go1.23.3
go1.23.3 (released 2024-11-06) includes fixes to the linker, the runtime,
and the net/http, os, and syscall packages.

https://go.dev/doc/devel/release#go1.23.minor

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 47881d30db)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-12 20:36:52 +01:00
Peter Korsgaard
8f9ce0c913 Update for 2024.11
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024.11
2024-12-08 11:18:01 +01:00
Julien Olivain
6561a5d773 support/testing: improve weston test reliability
The weston runtime test is unreliable, depending on the execution speed
of its runner. Example of failure is [1], and success is [2]. This
commit improves the test in several ways, to make it more robust to
execution speed variations:

- The command started in background (weston, weston-simple-egl) are
  now started in a subshell. This suppresses the job control messages
  when they are stopped. Those messages could interfere with the parsing
  of the output;

- Wait time are moved outside the emulator;

- The kernel argument vt.global_cursor_default=0 is added, to make sure
  cursors are globally disabled, since the test use vkms display CRCs;

- The memory of the emulator is increased to 512M. This test uses cpio
  initramfs, and the filesystem size increased;

- The vkms driver emulates a "vsync" event, but can generate a warning
  when the system is too slow. This warning is printed on the console by
  the klogd daemon in its default configuration. This commit adds the
  overlay file /etc/default/klogd to limit only kernel emergency
  messages to be printed on the console. This change fixes the failure
  seen in [1] ;

- Some sleep time values were adjusted to run on a "performant" idle
  host. Those values are not suitable in all situations. In the
  meantime a generic retry mechanism is added in the test infra, this
  commit adds a retry logic inspired from the test_flutter runtime
  test.

Fixes: [1]

[1] https://gitlab.com/buildroot.org/buildroot/-/jobs/8562483474
[2] https://gitlab.com/buildroot.org/buildroot/-/jobs/8435236652

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 23:22:15 +01:00
Bernd Kuhls
5f18745057 {linux, linux-headers}: bump 4.19.x / 6.11.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 15:37:14 +01:00
Peter Korsgaard
eedf9750ff package/ibm-sw-tpm2: fix build with openssl 3.4.x
Fixes:
http://autobuild.buildroot.net/results/be6c679b821183b4385c74471e26d9ad7d3d8967

Similar to the patch we for openssl 3.3.x added by commit 75ec656c36
"package/ibm-sw-tpm2: fix build with openssl 3.3.x", add another patch to
bump the maximum supported openssl version to 3.4.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 15:36:55 +01:00
Peter Korsgaard
28c982b5f4 package/foot: change to git download to work around codeberg archive issue
Fixes:
http://autobuild.buildroot.net/results/1959614f6ad63878c390a23770a6778830d6c698/

The tarball downloaded from codeberg has changed.  Interesting enough, it is
only the compression that has changed, the uncompressed data is still
identical:

mkdir s.b.o codeberg
wget -P codeberg https://codeberg.org/dnkl/foot/archive/1.16.2.tar.gz
wget -P s.b.o http://sources.buildroot.org/foot/1.16.2.tar.gz

sha256sum */*
0e02af376e5f4a96eeb90470b7ad2e79a1d660db2a7d1aa772be43c7db00e475  codeberg/1.16.2.tar.gz
8060ec28cbf6e2e3d408665330da4bc48fd094d4f1265d7c58dc75c767463c29  s.b.o/1.16.2.tar.gz

gunzip */*
sha256sum */*
7b9fad0611c75d6ba8f53d12ad1366d53c8697240031a5b27334d173b76560fe  codeberg/1.16.2.tar
7b9fad0611c75d6ba8f53d12ad1366d53c8697240031a5b27334d173b76560fe  s.b.o/1.16.2.tar

Looking at the autobuilder history, this seems to have changed in
January/February, E.G. on January 20th the file hash was correct:

http://autobuild.buildroot.net/results/d4b90a505a035d9bab400ed65f94571854f74f24/

But on February 14th it wasn't:

http://autobuild.buildroot.net/results/2ff85fe3fba2d36c7f0358f2ce43e703aef5f4f0/

This was unfortunately only noticed once we started doing builds without the
s.b.o fallback. To fix it, change to a git clone instead.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 10:50:45 +01:00
Peter Korsgaard
38c368e6f0 package/eza: bump version to 0.18.24 to fix compatibility issue with rust >= 1.80
Fixes:
http://autobuild.buildroot.net/results/f41a92c22eee077183e7b7b84f8ec15f1900643b/
http://autobuild.buildroot.net/results/c660b7ac92e81d3ba203e345d37210dbdddd3994/

error[E0282]: type annotations needed for `Box<_>`
  --> /home/buildroot/instance-0/output-1/build/eza-0.18.22/VENDOR/time/src/format_description/parse/mod.rs:83:9
   |
83 |     let items = format_items
   |         ^^^^^
...
86 |     Ok(items.into())
   |              ---- type must be known at this point
   |
   = note: this is an inference error on crate `time` caused by an API change in Rust 1.80.0; update `time` to version `>=0.3.35` by calling `cargo update`

https://github.com/eza-community/eza/releases/tag/v0.18.24

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 10:50:35 +01:00
Peter Korsgaard
0f886158b9 package/mosquitto: revert an upstream change in 2.0.20 breaking nonthread builds
Fixes:
http://autobuild.buildroot.net/results/1998881e9ab9ff396e6fd47b0d7c1298ccb25266/
http://autobuild.buildroot.net/results/0cb8e2dcee51007ee09506fa143e52cefbde5335/

And many more.

A change in mosquitto 2.0.20 to fix builds on NetBSD broke WITH_THREADING=no
builds as it unconditionally calls pthread functions.  The issue has been
reported upstream for ~1 month, but so far no fix so revert the NetBSD
change for now instead to fix the build.

https://www.eclipse.org/lists/mosquitto-dev/msg03003.html
https://github.com/eclipse-mosquitto/mosquitto/issues/3183

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 10:50:19 +01:00