Commit Graph

76929 Commits

Author SHA1 Message Date
Florian Larysch
0e932eb6b5 package/f2fs-tools: fix GCC 15 build
f2fs-tools had its own "bool" typedef which now conflicts with the C23
keyword, causing build failures on GCC 15.

Import a patch from upstream that fixes this.

Fixes: https://autobuild.buildroot.org/results/d17641582d1beaec9dcca4dc48a68d713cecfdc8 (and others)
Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 598dfb7c1a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:43:11 +02:00
Thomas Perale
2bed8a0c21 package/libraw: security bump to version 0.21.4
Fixes the following security issues:

- CVE-2025-43961: metadata/tiff.cpp has an out-of-bounds read in the
    Fujifilm 0xf00c tag parser.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43961
  - 66fe663e02

- CVE-2025-43962: phase_one_correct in decoders/load_mfbacks.cpp has
    out-of-bounds reads for tag 0x412 processing

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43962
  - 66fe663e02

- CVE-2025-43963: phase_one_correct in decoders/load_mfbacks.cpp allows
    out-of-buffer access

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43963
  - be26e7639e

- CVE-2025-43964: tag 0x412 processing in phase_one_correct in
    decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43964
  - a50dc3f112

For more details on the version bump, see the release notes:
  - https://github.com/LibRaw/LibRaw/releases/tag/0.21.4
  - https://github.com/LibRaw/LibRaw/releases/tag/0.21.3
  - https://github.com/LibRaw/LibRaw/compare/0.21.2...0.21.4

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a4249a2024)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:38 +02:00
Marcus Hoffmann
dae673fb63 package/python-django: security bump to 5.1.9
Fixes CVE-2025-32873 [1].
Django also updates setuptools[2], so we can remove the --skip-dependency-check
flag and need to update the package archive capitalization accordingly.

[1] https://www.djangoproject.com/weblog/2025/may/07/security-releases/
[2] bbf376bbc8

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 09299c5b0c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:34 +02:00
Julien Olivain
06c6c49fe8 package/xz: add security patches fixing CVE-2025-31115
This commit adds four upstream patches fixing the CVE-2025-31115
vulnerability. The reason there is four patches instead of one is to
exactly follow the advisory recommendation [1], which proposes the
patch [2]. This patch is in fact a concatenation of four commits. In
Buildroot, we track package patches as formatted by git, with extra
"Upstream:" headers. The patch [2] was split here in four for a
clearer traceability.

With the addition of those patches, the XZ_IGNORE_CVES is set
accordingly.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-31115

[1] https://github.com/tukaani-project/xz/security/advisories/GHSA-6cc8-p5mm-29w2
[2] https://tukaani.org/xz/xz-cve-2025-31115.patch

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 38494a0a61)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:29 +02:00
Bernd Kuhls
5e8adee60c package/berkeleydb: fix build with gcc-15.x
Inspired by
c250c61cc3

"GCC 15 defaults to C23.  The last release of this package was over a
 decade ago, and it is no longer maintained, therefore it should not be
 expected to compile to the latest standards."

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c1d422edde)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:24 +02:00
Thomas Petazzoni
4776614f2f package/libtirpc: backport upstream fixes for GCC 15.x issues
This commit backports two upstream commits that address GCC 15.x build
issues.

Fixes:

  https://autobuild.buildroot.org/results/abca98bc69ac51af3652ab2d0d187d1461f83515/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4745bad303)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:20 +02:00
Thomas Petazzoni
2f6eaa0389 package/gdb: add patch to fix GCC 15.x build issue with ARC-specific gdb
This commit adds the same patch that was already added to GDB 14.x,
15.x and 16.x to fix a GCC 15.x build issue.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit dc0691f038)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:17 +02:00
Thomas Petazzoni
b628d4a9d7 package/gdb: add patches for GCC 15.x compatibility
This commit backports an upstream patch fixing the bundled readline
library so that it builds with GCC 15.x.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 56c834400e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:49 +02:00
Florian Larysch
1c7120d159 package/bash: fix build with host GCC 15
bash uses K&R function declarations which have been removed in C23.

Since part of the build process (like the mkbuiltins helper) is written
in C, building bash now fails on hosts with GCC 15 (which defaults to
C23).

Since properly fixing this on the source code level is a larger
endeavor, just set the C standard to an old enough version for now.

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6d09b25d08)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:45 +02:00
Romain Naour
8c31fb8d11 configs/qemu_ppc*: backport a patch for GCC 15.x compatibility
powerpc kernel maintainer merged a patch [1] for GCC 15.x compatibility
that will likely be merged upstream soon.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?id=5a821e2d69e26b51b7f3740b6b0c3462b8cacaff

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 30cf5a0754)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:42 +02:00
Romain Naour
c120eb5df0 configs/qemu_mips*: backport a patch for GCC 15.x compatibility
Mips kernel maintainer merged a patch [1] for GCC 15.x compatibility
that will likely be merged upstream soon.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/mips/linux.git/commit/?id=0f4ae7c6ecb89bfda026d210dcf8216fb67d2333

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 97c7311c64)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:37 +02:00
Florian Larysch
869469e953 package/cpio: fix build with GCC 15
On systems running GCC 15, host-cpio will fail to build with errors like

  copyout.c:646:12: error: too many arguments to function 'xstat'; expected 0, have 2

and

  main.c:407:13: error: assignment to 'int (*)(void)' from incompatible pointer type 'int (*)(const char * restrict,  struct stat * restrict)' [-Wincompatible-pointer-types]

This was reported[1] and fixed upstream, but there is no new release
yet. Import the upstream patch for now.

Fixes:
https://autobuild.buildroot.org/results/a10c5f2b0f9cb05b2550fe97f1133deaaac97277/
(and many more)

[1] https://lists.gnu.org/archive/html/bug-cpio/2025-05/msg00000.html

Signed-off-by: Florian Larysch <fl@n621.de>
[Julien:
 - add missing "Signed-off-by:" in patch to fix check-package error
 - change "Upstream:" link to use the commitdiff in patch
 - add "Fixes:" in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e3cae9e1ca)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:34 +02:00
Julien Olivain
7e2b4f4d41 package/gmp: add patch to fix build with gcc-15
When using host gcc 15, host-gmp fails at configure time with
error message:

    configure: error: could not find a working compiler, see config.log for details

The error is due to the macro GMP_PROG_CC_WORKS in the file
acinclude.m4 containing C-code declaring functions without declaring
its parameters. This construct is now an error in C23, which is the
new default in gcc 15. See:
https://gcc.gnu.org/gcc-15/porting_to.html#c23

This commit fixes the issue by adding a package patch from
upstream changesets, not yet published in a release.

Even if gcc 15 is not yet included in Buildroot, this commit also
sets _AUTORECONF = YES for the target package in order to have this
package already fixed.

Fixes:
https://autobuild.buildroot.org/results/623634fa7bbeceeb6d90b15ce0abb1b9b4b24045/

Tested-by: Brigham Campbell <me@brighamcampbell.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 31569bcc1b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:31 +02:00
Joseph Zikusooka (ZIK)
4cf750826f package/m4: fix build failure with host-gcc 15
When compiling host-m4 1.4.19 with a host gcc 15 (which is the version
included in Fedora 42, released on 2025-04-15), compilation fails with
error:

    In file included from gl_avltree_oset.h:21,
                     from gl_avltree_oset.c:21:
    gl_oset.h:275:1: warning: 'nodiscard' attribute ignored [-Wattributes]
      275 | GL_OSET_INLINE _GL_ATTRIBUTE_NODISCARD int
          | ^~~~~~~~~~~~~~
    gl_oset.h:275:40: error: expected identifier or '(' before 'int'
      275 | GL_OSET_INLINE _GL_ATTRIBUTE_NODISCARD int
          |                                        ^~~

This error is due to the gnulib copy included in m4 1.4.19, which does
not detect properly the default C language standard of gcc 15 which
has been changed from "gnu17" to "gnu23". See [1]. Note that m4 1.4.19
is the latest version available at the time of this commit, and was
released in May 2021. The issue is tracked upstream in [2].

Upcoming m4 release is expected to fix this issue, by updating its
gnulib copy. See [3], which states: "Update to comply with newer C
standards, and inherit portability improvements from gnulib".

Until this new m4 version is released, this commit fixes the issue by
forcing the C langage standard to "-std=gnu17" (the previous gcc
default) when host-gcc 15 is detected.

Note that the "-std=gnu17" option was introduced in gcc 8. See [4].
This is the reason why this patch adds this option only when the
problematic gcc 15 version is detected.

See also the discussions around this patch at [5].

Fixes:
https://autobuild.buildroot.org/results/1c33ef0a710cfae13e496485787b351c8f951217/
(and many, many others)

[1] https://gcc.gnu.org/gcc-15/changes.html#c
[2] https://savannah.gnu.org/support/?111150
[3] https://git.savannah.gnu.org/cgit/m4.git/commit/?h=branch-1.4&id=a22c9802dd7e724eaefb21dc21d84ac2d3a49c89
[4] https://gcc.gnu.org/gcc-8/changes.html#c
[5] https://lore.kernel.org/buildroot/CAPWx8vsoJUt8YMJG1aUqFRK1=yizNbgjVjGL1Q1+9ygjJGnZLA@mail.gmail.com/

Signed-off-by: Joseph Zikusooka (ZIK) <zik@jambula.net>
Tested-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
[Julien:
 - change mail url to lore.kernel.org for stable link
 - reword, reflow and add extra info in the commit log
 - force -std=gnu17 only when host gcc-15 is detected
 - add a comment in .mk to remove the workaround at next bump
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7a07a9d155)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:27 +02:00
Julien Olivain
196043d0e8 Config.in: introduce BR2_HOST_GCC_AT_LEAST_{12..15}
Fedora 42 is planned to be released on 2025-04-22 [1].
It is also planned to include the upcoming gcc 15 release.
Gcc 15 is changing the default C language from -std=gnu17
to -std=gnu23 [2].

This change is expected to possibly introduce build failures [3].
In order to be prepared to fix those, this commit introduces the
BR2_HOST_GCC_AT_LEAST_{12..15} symbols.

[1] https://fedorapeople.org/groups/schedule/f-42/f-42-key-tasks.html
[2] https://gcc.gnu.org/gcc-15/changes.html#c
[3] https://savannah.gnu.org/support/?111150

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit cca8d68461)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:23 +02:00
Bernd Kuhls
1f565bda6e package/ghostscript: security bump to version 10.05.1
Release notes: https://ghostscript.readthedocs.io/en/gs10.05.1/News.html

"This release addresses CVEs: CVE-2025-27835, CVE-2025-27832,
 CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833,
 CVE-2025-27837, CVE-2025-27834, CVE-2025-46646"

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a1c7168760)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:19 +02:00
Patrik Olsson
4c033376a3 configs: rock4se: bump Linux versions
This patch bumps:
- Linux kernel to version 6.12.28 (LTS)

Signed-off-by: Patrik Olsson <johan.patrik.olsson@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 595dd3ae88)
[tperale: Only bump linux]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:15 +02:00
Bernd Kuhls
9c435793aa {linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 176c61266e)
[tperale: Dropped linux 6.13]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:11 +02:00
Doug Kehn
d1804e401f package/nss-pam-ldapd: bump version to 0.9.13
See the release announce:
https://arthurdejong.org/nss-pam-ldapd/release-0-9-13

Signed-off-by: Doug Kehn <rdkehn@gmail.com>
[Julien: add link to release announce]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit badda6da8e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:07 +02:00
Thomas Petazzoni
0161ac7af3 package/tpm2-pkcs11: bump to version 1.9.1
1.9.0..1.9.1 changes described at:

  https://github.com/tpm2-software/tpm2-pkcs11/releases/tag/1.9.1

Update suggested by https://gitlab.com/magerkraut at
https://gitlab.com/buildroot.org/buildroot/-/issues/109 as "There is a
issue with the database LOCK file".

Fixes:

  https://gitlab.com/buildroot.org/buildroot/-/issues/109

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 07eb63935a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:02 +02:00
Thomas Petazzoni
212e493ea0 package/netsnmp: backport patch fixing runtime with Linux >= 6.7
This issue has been reported in
https://gitlab.com/buildroot.org/buildroot/-/issues/110, where netsnmp
would not work on Linux >= 6.7 systems due to an issue in parsing
/proc/net/snmp. We simply backport a fix that's upstream, but not yet
in any stable release.

Fixes:

  https://gitlab.com/buildroot.org/buildroot/-/issues/110

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit af674f3ecf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:58 +02:00
Kadambini Nema
476163fc7e package/hwdata: bump version to 0.395
Release notes:
https://github.com/vcrhonek/hwdata/releases/tag/v0.395

Changelog:
https://github.com/vcrhonek/hwdata/compare/v0.394...v0.395

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1df9852cc4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:54 +02:00
Thomas Petazzoni
b8a4a82cb6 support/dependencies/dependencies.sh: awk is needed by Buildroot
A basic Fedora 42 container does not have 'awk' installed, but it is
needed by Buildroot. First by check-host-python3.sh:

support/dependencies/check-host-python3.sh: line 6: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found

but then even building host-expat assumes awk is available:

config.status: creating Makefile
./config.status: line 1404: awk: command not found
config.status: creating expat.pc
./config.status: line 1404: awk: command not found

Since it's a pretty basic tool, make it part of the tools checked by
dependencies.sh. One minor annoyance is that check-host-python3.sh is
executed *before* dependencies.sh does its thing, so when 'awk' is not
available, we end up seeing:

support/dependencies/check-host-python3.sh: line 6: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found
which: no awk in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin)
You must install 'awk' on your build machine
make: *** [support/dependencies/dependencies.mk:27: dependencies] Error 1

It would be nice to have the awk check *before* it gets used in
check-host-python3.sh, but that's a topic for another patch.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 448ceefa78)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:49 +02:00
Thomas Petazzoni
0bcad41800 package/gdb: bump 15.x series to 15.2
Changes:

 Set GDB version number to 15.2.
 [gdb/python] Make sure python sys.exit makes gdb exit
 [gdb/symtab] Revert "Change handling of DW_TAG_enumeration_type in DWARF scanner"
 [gdb/testsuite] Add regression test for PR32158
 [gdb/testsuite] Add gdb.dwarf2/enum-type-c++.exp, regression test for PR31900.
 gdb-15-branch: Clear the X86_XSTATE_MPX bit in XCRO for x32
 Recognize -2 as a tombstone value in .debug_line
 [gdb] Handle ^C during disassembly
 Mark unavailable bytes of limited-length arrays when allocating contents
 gdb/solib-frv: move lm_info object to solib
 Fix loading a saved recording
 Bump GDB's version number to 15.1.90.DATE-git.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e40bf89e40)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:45 +02:00
Thomas Petazzoni
d8d201c95b package/gdb: bump 16.x series to 16.3
Changes:

 Set GDB version number to 16.3.
 gstack: [downstream regression] Output file names and line numbers
 Fix build failure for gdbserver's raw_compare self test
 Fix gdbserver crashes on SVE/SME-enabled systems
 gdb: allow selecting default fg/bg colors in tui mode
 gdb: Fix assertion failure when inline frame #0 is duplicated
 [gdb/tdep] Rewrite i386_canonicalize_syscall
 [gdb/record] Fix out-of-bounds write in aarch64_record_asimd_load_store
 gdb/dwarf: save DWARF version in dwarf2_loclist_baton, remove it from dwarf2_per_cu
 Fix segfault if target_fileio_read_alloc fails
 gdb/tui: use wrefresh if output is not surpressed
 [gdb/corefiles] Fix segfault in core_target_open
 Bump GDB's version number to 16.2.90.DATE-git.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b793160964)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:41 +02:00
Romain Naour
664d66bee5 configs/qemu: update defconfigs to Linux 6.12.27
Update all qemu defconfigs to the latest Kernel LTS version
where first patches fixing gcc 15 builds were backported [1][2].

Fixing kernel builds with gcc 15 is a prerequisite to build
and test new Bootlin bleeding-edge toolchains [3].

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=247abefeb50d56c83ce7abda5a378e395ee8af72
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=593d852f7fe21a225df4866799b6b539de6b8255
[3] https://toolchains.bootlin.com

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5dacd8e056)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:37 +02:00
Titouan Christophe
7f914a368c package/sqlite: add patch to fix CVE-2025-29087
This patch was commited upstream, and released as part of sqlite 3.49.1

However, the configuration system changed between sqlite 3.48 and 3.49
from autotools to autosetup, and this has proven challenging to support
in Buildroot (see `git log package/sqlite`), hence why we are still on
sqlite 3.48.

Therefore, until the package build infrastructure correctly supports
building sqlite 3.49, let's simply import the upstream patch to address
the CVE.

Note: the upstream patch is on the orignal sqlite sources. Buildroot is
using the sqlite "amalgamation" source archive, which basically
concatenate all the source files in a single "sqlite3.c" file. So the
patch was reformated to apply correctly on the sqlite release archive.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-29087

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien:
 - reformat patch to be applicable on amalgamated sqlite sources
 - add comment in commit log about patch format
 - add "Fixes:" in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 835b5659ea)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:32 +02:00
Julien Olivain
b80e9d6299 configs/friendlyarm_nanopi_r3s: fix host linux headers custom version
Since its introduction in commit [1], the
friendlyarm_nanopi_r3s_defconfig is failing to build with error:

    Incorrect selection of kernel headers: expected 6.12.x, got 6.13.x

The error happens because the defconfig has:
BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_12=y
and
BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.13.4"

This commit fixes the issue by setting instead:
BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.28"

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/9887216429

[1] 41734e00c0

Cc: Sergey Kuzminov <kuzminov.sergey81@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 74c4dd4150)
[Thomas:
  Since this has been introduced in LTS branch I set the kernel
  version to 6.12.x present in LTS instead of changing the linux header
  version.
]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:03:44 +02:00
Peter Korsgaard
7109348aaf package/jo: bump version to 1.9
Mainly bugfixes (1.8 was deleted):

https://github.com/jpmens/jo/releases/tag/1.9
https://github.com/jpmens/jo/releases/tag/1.7

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b8134a1195)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:45 +02:00
Kadambini Nema
c70f032092 package/tzdata: bump version to 2025b
Release notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/6JVHNHLB6I2WAYTQ75L6KEPEQHFXAJK3/

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4acbe7a35c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:43 +02:00
Kadambini Nema
83acde521f package/zic: bump version to 2025b
Release notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/6JVHNHLB6I2WAYTQ75L6KEPEQHFXAJK3/

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 36c969cc4c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:41 +02:00
Julien Olivain
9da761ed3d configs/imx28evk: enable BR2_DOWNLOAD_FORCE_CHECK_HASHES
This commit adds BR2_DOWNLOAD_FORCE_CHECK_HASHES=y in the defconfig
and adds custom hash files. The exception entry in .checkpackageignore
is also removed.

Cc: Fabio Estevam <festevam@gmail.com>
Reviewed-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 683681261b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:19 +02:00
Thomas Perale
6e18929f04 package/bird: fix build failure with bfd
The 'bird' package with only the `BR2_PACKAGE_BIRD_BFD=y` protocol
enabled fails to build with the following error

```
bison  -Dparse.lac=full -Dparse.error=verbose -dv -pcf_ -b obj/conf/cf-parse obj/conf/cf-parse.y
proto/bfd/config.Y:204.27-33: error: symbol 'ADDRESS' is used, but is not defined as a token and has no rules
  204 |  | bfd_show_sessions_args ADDRESS net_or_ipa { net_copy(&($$->address...
      |                           ^~~~~~~
```

The `ADDRESS` token is defined only when certain protocols (e.g. OSPF,
RIP, RPKI, or BGP) are enabled. As a result, builds including any of
these protocols do not encounter the issue.

The issue can be reproduced with the commands:

    cat >.config <<EOF
    BR2_aarch64=y
    BR2_TOOLCHAIN_EXTERNAL=y
    BR2_PACKAGE_BIRD=y
    BR2_PACKAGE_BIRD_BFD=y
    # BR2_PACKAGE_BIRD_BGP is not set
    EOF
    make olddefconfig
    make bird

This patch backports upstream commits that define the `ADDRESS` token
for the BFD protocol.

Fixes:
https://autobuild.buildroot.org/results/68c5dd84585a7018ad57ea3e7134748c08858ef7/

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add commands to reproduce the issue]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 80cfdcb86b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:45 +02:00
Alexander Mukhin
0716a6f838 DEVELOPERS: remove Alexander Mukhin from tinyproxy and zfs
Signed-off-by: Alexander Mukhin <alexander.i.mukhin@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9d3c4130d7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:43 +02:00
Kadambini Nema
be132ec5ba package/traceroute: bump to version 2.1.6
For change log since 2.1.3, see:
https://sourceforge.net/projects/traceroute/files/traceroute/traceroute%202.1.4/
https://sourceforge.net/projects/traceroute/files/traceroute/traceroute%202.1.5/
https://sourceforge.net/projects/traceroute/files/traceroute/traceroute%202.1.6/

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
[Julien: add links to change logs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a31dc4c21a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:41 +02:00
Kadambini Nema
561dd7fa07 package/hwdata: bump version to 0.394
Release notes:
https://github.com/vcrhonek/hwdata/releases/tag/v0.394

Changelog:
https://github.com/vcrhonek/hwdata/compare/v0.392...v0.394

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b18f95c155)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:39 +02:00
Kadambini Nema
591a7634d6 package/mtools: bump version to 4.0.48
Release notes:
https://lists.gnu.org/archive/html/info-mtools/2025-02/msg00019.html

Changelog:
https://svn.savannah.gnu.org/viewvc/mtools/tags/4.0.48/NEWS?view=markup

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ee595c95ae)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:37 +02:00
Waldemar Brodkorb
1c040b187d package/ruby: update to 3.4.3
See here for a changelog:
https://github.com/ruby/ruby/releases/tag/v3_4_3

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 93cd246dc7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:35 +02:00
Giulio Benetti
41f8b8daa3 package/sunxi-mali-utgard-driver: bump to version 2025-05-02
It builds up to Linux 6.13

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 50c7542326)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:33 +02:00
José Luis Salvador Rufo
5ca8d70907 package/zfs: add upstream patch to fix musl
This patch fixes the `S_IFMT` undeclared error in `statx.c` when musl
is used.

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a672635a1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:31 +02:00
José Luis Salvador Rufo
c1e2a6e251 package/zfs: bump version to 2.3.2
For release note, see:
https://github.com/openzfs/zfs/releases/tag/zfs-2.3.2

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 18ecf1c648)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:28 +02:00
José Luis Salvador Rufo
d7892184a0 package/zfs: bump version to 2.3.1
For release note, see:
https://github.com/openzfs/zfs/releases/tag/zfs-2.3.1

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e74584288c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:11 +02:00
James Hilliard
c54ef55dfc package/hiredis: bump to version 1.3
For change log, see:
https://github.com/redis/hiredis/releases/tag/v1.3.0

Note this version raises the minimum cmake version from 3.0.0 to 3.7.0.
This change fixes build with a host-cmake 4.0.0 (which has removed
compatibility with cmake < 3.5). Such a failure happens on Arch Linux
which is now providing cmake 4.0.

Fixes:
https://autobuild.buildroot.org/results/662fc308807866f9e25655541f6a8ef9ff32e55a/

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add details in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 11c7d00a59)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:59:07 +02:00
Titouan Christophe
13dfeece13 package/yasm: add patch for CVE-2021-33454
This fixes a potential NULL pointer dereference

As a side note, this package has many opened CVEs, but upstream doesn't seem
to really consider them as security issues, see their disclaimer here:
https://github.com/yasm/yasm/blob/master/SECURITY.md

We could speculate that this disclaimer has been written as a consequence of
the many small CVEs opened in a short time, that don't have a substantial
security impact (besides the command line tool crashing). All of these small
CVEs have been opened for bug reports issued by a third party who used a
fuzzy tester to manipulate the assembler input

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 875f5670aa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:59:05 +02:00
Titouan Christophe
ee918fbfea DEVELOPERS: update email for Titouan Christophe
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b8e8cf6ea0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:59:03 +02:00
Titouan Christophe
b9c2c3caa8 package/wireshark: security bump to v4.2.11
This fixes the following CVE:

- CVE-2025-1492: The Bundle Protocol and CBOR dissectors could crash

    It may be possible to make Wireshark crash by injecting a malformed
    packet onto the wire or by convincing someone to read a malformed
    packet trace file.

See https://www.wireshark.org/security/wnpa-sec-2025-01

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 032b268890)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:59:01 +02:00
Christian Hitz
4df388d240 package/libxml2: security bump to version 2.13.8
Fixes the following security vulnerabilities:

[CVE-2025-32414] Buffer overflow when parsing text streams with Python API
https://gitlab.gnome.org/GNOME/libxml2/-/issues/889

[CVE-2025-32415] Heap-based Buffer Overflow in xmlSchemaIDCFillNodeTables
https://gitlab.gnome.org/GNOME/libxml2/-/issues/890

https://www.openwall.com/lists/oss-security/2025/04/17/3

For release notes since 2.13.6, see:
https://download.gnome.org/sources/libxml2/2.13/libxml2-2.13.7.news
https://download.gnome.org/sources/libxml2/2.13/libxml2-2.13.8.news

Signed-off-by: Christian Hitz <christian.hitz@bbv.ch>
[Julien: add links to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8e1ad23f2a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:58:59 +02:00
Raphaël Mélotte
0934ce7321 support/scripts/pkg-stats: fix typo in --disable help text
Annoyingly, using "--disable warning" does not disable the warnings
checks.

It turns out that we look for "warnings" (i.e. with an 's') to know if
we should disable the warnings check, so update the help text
accordingly.

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 92e7ab78d6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:58:57 +02:00
Kadambini Nema
7f04b42fde package/expat: bump to version 2.7.1
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_1/expat/Changes

Update hash of the COPYING file (year updated):
2b2a24691a

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit de3e07d6fd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:58:55 +02:00
Yegor Yefremov
ef267ae564 package/ncftp: bump to version 3.3.0
For change log, see:
https://www.ncftp.com/ncftp/doc/changelog.html

Fixes:
https://autobuild.buildroot.org/results/103b86c5473077cd95a245a762059a23f78c1a44/build-end.log

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 78d3861173)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:58:53 +02:00