Commit Graph

84011 Commits

Author SHA1 Message Date
James Hilliard
197dedbd0a package/python-socketio: bump to version 5.17.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 09:56:55 +02:00
James Hilliard
6f1faa2095 package/python-engineio: bump to version 4.14.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 09:56:55 +02:00
Bernd Kuhls
213ee34f03 package/boinc: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 09:36:00 +02:00
Bernd Kuhls
4fab16d9c2 package/snort3: fix build error with numa support
Buildroot commit 5e78c6cf33 bumped the
package from 3.1.40.0 to 3.11.1.0. Upstream commit
83e9a2dda2
added numa support, first included in release 3.1.65.0.

This causes a build error due to the numactl package being pulled-in as
optional dependency by hwloc, the latter being a hard dependency of
snort3.

Fixes:
https://autobuild.buildroot.net/results/e8a/e8a9d787973fd109c07c185103de1f9f7339d506/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 09:33:12 +02:00
Bernd Kuhls
e8194b1f22 package/snort3: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 09:33:01 +02:00
James Hilliard
1b3321fa8f package/python-grpcio-reflection: bump to version 1.84.0
Update license hash due to clarified third-party license paths:
fb53717dfa

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 09:24:19 +02:00
James Hilliard
978efc055d package/python-grpcio: bump to version 1.84.0
Skip dependency checks as the source archive includes generated C++
sources and does not require Cython.

Update license hash due to clarified third-party license paths:
fb53717dfa

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 09:24:19 +02:00
Peter Seiderer
a9c6725d16 package/linux-firmware: add rtl8761cu firmware
- add rtl8761cu firmware deploy to BR2_PACKAGE_LINUX_FIRMWARE_RTL_87XX_BT
  option (e.g. for Asus USB-BT540)

- while at it add missing rtl8761b and rtl8761bu entries at the option
  help text

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 09:19:34 +02:00
Bernd Kuhls
823ca6bb0d package/libtorrent-rasterbar: bump version to 2.1.1
https://github.com/arvidn/libtorrent/blob/v2.1.1/ChangeLog

Switched to sha256 tarball hash provided by upstream.

Updated license hash due to copyright year bumps:
d3f7a363c2
fb2ab9946a

Added patch 0001 to fix a build error with gcc-9.3.0 detected by the
Gitlab pipelines which would be introduced by this bump.

Raised minimum gcc version to 8 to fix a build error detected by the
Gitlab pipelines which would be introduced by this bump:
/builds/bkuhls/buildroot/br-test-pkg/bootlin-aarch64-glibc-old/build/libtorrent-rasterbar-2.1.1/include/libtorrent/string_view.hpp:13:23:
 fatal error: string_view: No such file or directory

Added dependency to BR2_USE_MMU to fix a build error detected by the
Gitlab pipelines which would be introduced by this bump:
/builds/bkuhls/buildroot/br-test-pkg/bootlin-armv7m-uclibc/build/libtorrent-rasterbar-2.1.1/src/mmap.cpp:283:19:
 error: ‘::madvise’ has not been declared; did you mean ‘advise’?

Switched build system to cmake due to upstream removal of autotools:
d7db28663d

Added new configure option webtorrent
4ef8be818f
to disable the dependency to OpenSSL for libdatachannel:
a02b751917/CMakeLists.txt (L452)
which was added to libtorrent-rasterbar in version 2.1.0:
8d7d82b033

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Philipp Richter <richterphilipp.pops@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 09:12:59 +02:00
Zoltan Gyarmati
1e401eddad support/testing: quazip: refactor to have a base class for the Qt{5, 6} test classes
Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 09:06:22 +02:00
Zoltan Gyarmati
8198b6b3c9 package/quazip: bump to 1.7.2
Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 09:06:09 +02:00
Bernd Kuhls
b1b5bfef44 package/poco: bump version to 1.15.3
https://github.com/pocoproject/poco/blob/poco-1.15.3-release/CHANGELOG

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 08:57:34 +02:00
Waldemar Brodkorb
b2a7c4db4b package/quickjs: enable uClibc support
The internal Buildroot toolchain does support FENV
in uClibc since commit 4c5039b80e.
Tested in Qemu system emulation for aarch64.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 08:54:20 +02:00
Bernd Kuhls
743365acd5 package/openvmtools: bump version to 13.1.0
Rebased patch set in two steps:
1.: downloaded patch set from home-assistant
    https://github.com/home-assistant/buildroot/tree/2025.02.x-haos/package/openvmtools
    which is based on 13.0.0
2.: rebased again on 13.1.0 (no changes needed)

Added patches 0011 to fix build errors with glibc 2.43.
Renumbered patches.

Added tarball hash provided by upstream.

Removed CVE entries in openvmtools.mk due to patches 0013 and 0014
being added to upstream release.

Ported various configure options from home-assistant commit
3206b3fa58

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Karoly Kasza <kaszak@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 08:44:06 +02:00
Bernd Kuhls
9e5609cf61 package/kmsxx: python bindings need python-pybind
Fixes configure error

Run-time dependency python3 found: YES 3.14
pybind11-config found: NO
Found CMake: /usr/bin/cmake (4.3.4)
Run-time dependency pybind11 found: NO  (tried pkg-config, config-tool and cmake)
Looking for a fallback subproject for the dependency pybind11
ERROR: Subproject pybind11 is buildable: NO

using this defconfig

BR2_x86_64=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_PER_PACKAGE_DIRECTORIES=y
BR2_INIT_NONE=y
BR2_PACKAGE_PYTHON3=y
BR2_PACKAGE_KMSXX=y
BR2_PACKAGE_KMSXX_PYKMS=y

Fixes: 0710da403d

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Paul Elder <paul.elder@ideasonboard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 08:38:48 +02:00
James Hilliard
e48f425409 package/python-websockets: bump to version 17.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-10 08:05:14 +02:00
Zoltan Gyarmati
458fe81345 support/testing/tests/package/test_libusb_compat: new runtime test
Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 07:38:22 +02:00
Zoltan Gyarmati
7396b459ad package/libusb-compat: add option to build/install examples
The examples are not installed by upstream, and their names conflict
with other packages (lsusb from busybox/usbutils, testlibusb from the
libusb examples), so install them in /usr/libexec/libusb-compat/examples.

Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 07:38:21 +02:00
Zoltan Gyarmati
a19c9e6c44 package/libusb-compat: bump to version 0.1.9
Release notes:
https://github.com/libusb/libusb-compat-0.1/releases/tag/v0.1.9

Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 07:38:19 +02:00
Bernd Kuhls
e7a95699a7 package/igt-gpu-tools: bump version to 2.6
https://lists.x.org/archives/xorg-announce/2026-September/003745.html

Removed patches which are included in this release.

Added patch 0001 to fix musl build error which would be introduced by
this bump:
d4fa11371a

Musl build error was reported upstream:
https://gitlab.freedesktop.org/drm/igt-gpu-tools/-/work_items/211

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 07:33:50 +02:00
Joachim Wiberg
1613918710 DEVELOPERS: add Joachim Wiberg for firewalld
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 22:25:03 +02:00
Joachim Wiberg
e34594a752 package/firewalld: minor cleanup
The iptables-less configure option was spelled -without-iptables, with
a single dash.  Autoconf accepts it, but it stands out from the other
options as a typo.  The Config.in comment also listed BR2_STATIC_LIBS
twice.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 22:21:48 +02:00
Joachim Wiberg
67905e8282 package/firewalld: bump to v2.5.2
Bug fix release, following the v2.5.0 feature release and v2.5.1.
Configure options and license file are unchanged.

Release notes:

  https://github.com/firewalld/firewalld/releases/tag/v2.5.0
  https://github.com/firewalld/firewalld/releases/tag/v2.5.1
  https://github.com/firewalld/firewalld/releases/tag/v2.5.2

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 22:21:48 +02:00
Giulio Benetti
a152da33b1 package/libnss: bump version to 3.131
For release notes since 3.129, see:
https://hg-edge.mozilla.org/projects/nss/file/NSS_3_130_RTM/doc/src/releases/nss_3_130.md
https://hg-edge.mozilla.org/projects/nss/file/NSS_3_131_RTM/doc/src/releases/nss_3_131.md

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 22:04:27 +02:00
Giulio Benetti
fa18f43882 package/harfbuzz: bump version to 14.6.0
https://github.com/harfbuzz/harfbuzz/blob/14.6.0/NEWS

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 21:55:12 +02:00
Zoltan Gyarmati
7b19a12922 package/shapelib: bump to 1.6.3
Also removing the gcc-15 bool keyword patch as it's already in this
release

Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 21:48:31 +02:00
Zoltan Gyarmati
48d5653679 package/proj: bump to 9.9.0
https://proj.org/en/stable/news.html

Also the cmake minimum version is increased to 3.22.1

Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
[Julien: add link to release notes in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 21:46:20 +02:00
Chen Pei
4bc6ffdfda package/iniparser: bump version to 4.3.2
https://gitlab.com/iniparser/iniparser/-/releases/v4.3.2

Bugfix releases. 4.3.1 fixes iniparser_dump_ini() repeating the
previous value for NULL values, fixes dictionary_new() not detecting a
failed calloc() of the key array, and documents values without a
section. 4.3.2 lessens the strictness of the version macro test. The
SONAME major version is unchanged.

Signed-off-by: Chen Pei <cp0613@linux.alibaba.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 21:33:45 +02:00
Yegor Yefremov
0522d9af89 package/shadowsocks-libev: update the site URL to shadowsocks-c
The upstream repository was renamed from shadowsocks-libev to
shadowsocks-c. GitHub still redirects the old URL, but the README names
shadowsocks/shadowsocks-c as the canonical repository.

The v3.3.6 tag points to the same commit in the renamed repository, so
the tarball and its hash are unchanged.

See upstream commits:
bdc77408cb
bff687bd34

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Assisted-by: Claude:claude-opus-5
[Julien: add references to upstream commits renaming the project]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-09 21:29:14 +02:00
Bernd Kuhls
1869ded4bb package/llvm-project: bump version to 23.1.3
https://discourse.llvm.org/t/llvm-23-1-3-released/92432

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-09 00:10:10 +02:00
Bernd Kuhls
6a9ea2a8bf package/go: security bump version to 1.27.2
https://go.dev/doc/devel/release#go1.27.2
https://groups.google.com/g/golang-announce/c/U2fTuyDJznI/m/bAPU-QKAAQAJ

Fixes CVE-2026-56857, CVE-2026-56866, CVE-2026-78659, CVE-2026-78660,
CVE-2026-78663, CVE-2026-78667, CVE-2026-78669, CVE-2026-94439,
CVE-2026-94440, CVE-2026-94444, CVE-2026-94447, CVE-2026-94448,
CVE-2026-97030, CVE-2026-97031 & CVE-2026-97032.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-09 00:09:57 +02:00
Bernd Kuhls
dbf47e3028 package/tor: security bump version to 0.4.9.14
https://gitlab.torproject.org/tpo/core/tor/-/blob/tor-0.4.9.14/ReleaseNotes?ref_type=tags

Fixes TROVE-2026-062, TROVE-2026-064 & TROVE-2026-067.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-09 00:09:38 +02:00
Bernd Kuhls
b6525e9cf8 package/expat: security bump version to 2.9.0
https://github.com/libexpat/libexpat/blob/R_2_9_0/expat/Changes
https://blog.hartwork.org/posts/expat-2-9-0-released/

Fixes CVE-2026-77214 & CVE-2026-102633.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-08 00:10:26 +02:00
Bernd Kuhls
43d55a6d9c package/openvpn: security bump version to 2.7.8
https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst

Fixes CVE-2026-84790 & CVE-2026-88964.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-08 00:10:04 +02:00
James Hilliard
1ab8f8ef5a package/python-boto3: bump to version 1.43.108
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-07 17:35:23 +02:00
James Hilliard
95455bb9cc package/python-botocore: bump to version 1.43.108
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-07 17:34:17 +02:00
Yegor Yefremov
721e51f58a utils/genrandconfig: reject qemu user mode on hosts with large pages
Qemu in user mode cannot load target binaries laid out for 4k pages
when the host uses larger pages, as the 16k pages of the Asahi Linux
kernel on Apple Silicon. The dynamic loader then fails with e.g.:

  GLib-2.0: error while loading shared libraries: libz.so.1: failed
  to map segment from shared object

or, depending on the target:

  qemu-aarch64: .../GLib-2.0: Error mapping file: Invalid argument
  torque: error while loading shared libraries: libz.so.1: ELF load
  command address/offset not page-aligned

This hits every package running target code through qemu at build
time, i.e. gobject-introspection and nodejs, on mips, sparc64 and
aarch64 alike, and is not something Buildroot can fix in the
packages themselves.

As this only depends on the build host, reject such configurations
in genrandconfig when the host page size is larger than 4k.

Fixes:
https://autobuild.buildroot.org/results/4848e735fe83dfeef4f24d32655c567951fd113a (mips)
https://autobuild.buildroot.org/results/089ddac5bdaaf5650cbc5c26d48952b5bede0ca6 (sparc64)
https://autobuild.buildroot.org/results/c30c6719a0350370ebe3cfe262123727f4057734 (aarch64)

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Assisted-by: Claude:claude-opus-5-5
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-07 09:57:53 +02:00
Maxime Chevallier
716a715539 package/linux-tools: selftests: use KHDR_INCLUDES to locate the headers
Since v6.7 [1], the KHDR_DIR variable isn't used anymore by the kernel
selftest Makefiles to locate the kernel headers. Instead, KHDR_INCLUDES
is used to specify their location. It was only available between v6.5
and v6.7.

Keep KHDR_DIR for compatibility with v6.5 to v6.7 kernels, while
KHDR_INCLUDES is used by both pre 6.5 and post 6.7 kernels.

Let's pass it with the "-isystem" flag, as is done in the default values
used in the selftest makefiles.

[1]: 43e8832fed08 ("Revert "selftests: error out if kernel header files are not yet built"")

Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-07 09:56:56 +02:00
Paul Elder
0594de6b1c package/kmsxx: add kmsprint and kmstest to extra utils
Add kmsprint and kmstest to the extra utils that are built with the
extra utils option, as they are useful for testing and development.

Signed-off-by: Paul Elder <paul.elder@ideasonboard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-07 09:55:05 +02:00
Paul Elder
0710da403d package/kmsxx: add option for pykms
Add option to kmsxx to enable building pykms.

Signed-off-by: Paul Elder <paul.elder@ideasonboard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-07 09:54:35 +02:00
Yegor Yefremov
23d71bfd96 package/inadyn: fix mbedtls support
Since commit 6bab22ca41 ("package/inadyn: bump to v2.10.0"), the
mbedtls condition is written as "$BR2_PACKAGE_MBEDTLS", which make
expands as the variable $B followed by "R2_PACKAGE_MBEDTLS", so the
condition is never true. Without OpenSSL and GnuTLS, inadyn was built
with --disable-ssl even when mbedtls was enabled.

In addition, inadyn uses GnuTLS by default and needs --enable-mbedtls
to use mbedtls, which was never passed.

Fix the condition and pass --enable-mbedtls.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Assisted-by: Claude:claude-opus-5
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-07 07:49:01 +02:00
Jesse Talavera
042b25792b package/samba4: enable systemd support
`--systemd-install-services` just installs samba's unit files,
whereas `--with-systemd` enables samba's own systemd integration,
used to send status updates to systemd.
I needed this because an app I'm writing needs to know
when samba is ready to start serving files.

Signed-off-by: Jesse Talavera <jesse@jesse.tg>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-07 07:46:24 +02:00
Titouan Christophe
846bdb2222 docs/website: add opengraph image and meta tags
When linking Buildroot website pages on social media, some platforms will
attempt to display an image. If such an image is not explicitly specified,
then the social media platform will usually take the first "large" image
from that page.

Recently, there was a post on LinkedIn announcing the new sponsorship from
Texas Instruments, linking to https://buildroot.org/sponsors.html [1].
However, because the first "large image" on that page is the logo from
another sponsor (EVS), this is the one that got displayed and it looks
awkward.

To avoid this situation, let's implement the OpenGraph protocol [2], which
is adopted by LinkedIn. Explicitly specify the image, which is the Buildroot
logo with text, exported from the Gimp (.xcf) original image. To avoid
rendering issues due to transparent background on social media platforms,
the logo is exported with a background color.

[1] https://gitlab.com/-/project/2648174/uploads/5e518b0ec5a2f48d154466aaf117e6ab/image.png
[2] https://ogp.me/

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-06 23:00:13 +02:00
Peter Seiderer
f51bf05d24 package/openssh: security bump version to 10.6p1
- bump version to 10.6p1 (for details see [1])

[1] https://www.openssh.org/txt/release-10.6

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-06 22:20:02 +02:00
James Hilliard
cd28a8cb99 package/python-thrift: bump to version 0.25.0
Update license hash due to README changes:
09b177a3f6

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-06 22:04:30 +02:00
Thomas Perale
7de1ed7745 package/wolfssl: security bump to v5.9.4
See the release note:

- https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.4-stable

This fixes the following vulnerabilities:

- CVE-2026-15442: https://www.cve.org/CVERecord?id=CVE-2026-15442
- CVE-2026-89102: https://www.cve.org/CVERecord?id=CVE-2026-89102
- CVE-2026-89133: https://www.cve.org/CVERecord?id=CVE-2026-89133
- CVE-2026-89134: https://www.cve.org/CVERecord?id=CVE-2026-89134
- CVE-2026-89135: https://www.cve.org/CVERecord?id=CVE-2026-89135
- CVE-2026-89136: https://www.cve.org/CVERecord?id=CVE-2026-89136
- CVE-2026-93302: https://www.cve.org/CVERecord?id=CVE-2026-93302
- CVE-2026-93304: https://www.cve.org/CVERecord?id=CVE-2026-93304
- CVE-2026-94417: https://www.cve.org/CVERecord?id=CVE-2026-94417
- CVE-2026-94418: https://www.cve.org/CVERecord?id=CVE-2026-94418
- CVE-2026-94419: https://www.cve.org/CVERecord?id=CVE-2026-94419

This commit also updates the LICENSING hash, after an exception
was added in upstream commit:
94c657013d

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: fix LICENSING hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-06 21:51:13 +02:00
Titouan Christophe
5263a5f220 package/redis: security bump to v8.10.2
See the release notes:
https://github.com/redis/redis/blob/8.10.2/00-RELEASENOTES

No CVE number are mentioned in these notes, however it states:
"Update urgency: `SECURITY`: There are security fixes in the release"

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-06 21:20:37 +02:00
Peter Seiderer
6262b9c5bd package/gzip: add upstream patch to fix build for aarch64
Since Buildroot commit [1] (package/gzip: bump version to 1.15),
gzip fails at build time for Aarch64 with the error:

  In file included from gzip.c:61:
  gzip.h:120:21: error: expected ')' before '+' token
    120 | #  define head (prev+WSIZE)  /* hash head (see deflate.c) */
        |                     ^

The issue was introduced by upstream commit [2], included in
gzip 1.15.

This commit fixes the issue by adding the patch
0001-build-avoid-failure-to-build-on-linux-aarch64.patch
from upstream commit [3], not yet included in a
gzip release.

Fixes:
https://autobuild.buildroot.org/results/3795b23407021e9fbaaf44c9319085c30d7511c1/

[1] fe21a5fe30
[2] https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=ede0a8888a4d3d0750e1651e01f198e2faab5d59
[3] https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=b4ed8e73401968bcad749afb0e636dd3ec205ca7

Reported-by: Waldemar Brodkorb <wbx@openadk.org>
Link: https://lore.kernel.org/buildroot/asJEBMQpD2FYJql2@waldemar-brodkorb.de/
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
[Julien: add info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-06 21:07:51 +02:00
James Hilliard
c1b063571b package/python-pycryptodomex: bump to version 3.24.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-06 16:54:19 +02:00
James Hilliard
93636456ec package/python-asyncssh: bump to version 2.24.1
Update license hash due to whitespace cleanup:
eed9632700

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-06 16:54:10 +02:00