Commit Graph

76942 Commits

Author SHA1 Message Date
Scott Fan
1d2f135ef1 package/timescaledb: bump version to 2.19.2
Release notes: https://github.com/timescale/timescaledb/blob/2.19.2/CHANGELOG.md

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-14 20:15:46 +02:00
Christian Stewart
68468e5e7f package/linux-firmware: add support for amd-ucode
This "amd-ucode" directory has been present in linux-firmware since
version 20190312.

Signed-off-by: Christian Stewart <christian@aperture.us>
[Julien: add comment about version in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-14 20:15:46 +02:00
Giulio Benetti
3cfc8e7c6f package/libnvme: bump to version 1.13
For release note, see:
https://github.com/linux-nvme/libnvme/releases/tag/v1.13

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-14 20:15:46 +02:00
Thomas Petazzoni
203e9def71 support/scripts/pkg-stats: add -v/--verbose option
Running pkg-stats is currently quite verbose, as it shows one line per
package when checking for the upstream URL, and another one line per
package when checking for the latest version on
release-monitoring.org.

This noisy output is a bit annoying when pkg-stats is run in a
cronjob, like we do to update https://autobuild.buildroot.net/stats/
every day. This commit adds a -v/--verbose option, off by default, to
have a less noisy output.

Suggested-by: Peter Korsgaard <peter@korsgaard.com>
Cc: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-04-14 16:50:10 +02:00
Scott Fan
72657c6f57 package/openvpn: security bump version to 2.6.14
Fixes CVE-2025-2704.

Release notes:
https://sourceforge.net/p/openvpn/mailman/message/59169015/

Changelog:
https://github.com/OpenVPN/openvpn/blob/release/2.6/ChangeLog
https://github.com/OpenVPN/openvpn/blob/release/2.6/Changes.rst

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-04-14 15:42:44 +02:00
Vladimir Oltean
a9fe5ac03c package/qoriq-ddr-phy-binary: new package
The DDR PHY on the NXP LX2160A SoC needs firmware. This is distributed
as prebuilt binaries by NXP through GitHub.

There have been discussions and other opinions on previous revisions of
the patch on how it should be integrated:
https://lore.kernel.org/buildroot/20250318163228.9989-1-vjardin@free.fr/

But I haven't integrated any of that feedback. It is a simple package
which copies the pre-built FIP image containing DDR PHY firmware files
to the images/ folder, to be used by post-image scripts.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 15:11:53 +02:00
Bryan Brattlof
637eead755 configs/ti_am62px_sk_defconfig: switch to am62x op-tee platform flavor
Since optee_os bump to 4.5.0 in commit [1], the ti_am62px_sk_defconfig
fails to build with error:

    core/arch/arm/plat-k3/drivers/sa2ul.c:36:42: error: 'SA2UL_BASE' undeclared here (not in a function); did you mean 'SCU_BASE'?
       36 | register_phys_mem_pgdir(MEM_AREA_IO_SEC, SA2UL_BASE, SA2UL_REG_SIZE);
          |                                          ^~~~~~~~~~

This is due to a logic change in platform flavor selection in upstream.
See [2].

There is unfortunately no SA2UL_BASE defined for the am62px in op-tee
which is causing the op-tee builds to fail however the platform is
identical to the am62x platform. So for now let's switch to using the
am62x which has the proper configuration for this SoC even if it's
mislabeled.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/9690373039

[1] 14ef1ed7d2
[2] 35c75f355c

Signed-off-by: Bryan Brattlof <bb@ti.com>
[Julien: add extra info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 13:34:13 +02:00
Bryan Brattlof
b1fac04a6e configs/ti_am62ax_sk_defconfig: switch to am62x op-tee platform flavor
Since optee_os bump to 4.5.0 in commit [1], the ti_am62ax_sk_defconfig
fails to build with error:

    core/arch/arm/plat-k3/drivers/sa2ul.c:36:42: error: 'SA2UL_BASE' undeclared here (not in a function); did you mean 'SCU_BASE'?
       36 | register_phys_mem_pgdir(MEM_AREA_IO_SEC, SA2UL_BASE, SA2UL_REG_SIZE);
          |                                          ^~~~~~~~~~

This is due to a logic change in platform flavor selection in upstream.
See [2].

There is unfortunately no SA2UL_BASE defined for the am62ax in op-tee
which is causing the op-tee builds to fail however the platform is
identical to the am62x platform. So for now let's switch to using the
am62x which has the proper configuration for this SoC even if it's
mislabeled.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/9690372425

[1] 14ef1ed7d2
[2] 35c75f355c

Signed-off-by: Bryan Brattlof <bb@ti.com>
[Julien: add extra info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 13:29:48 +02:00
Vladimir Oltean
f81bb4a2ca configs/ls1043a-rdb: bump BSP tag to lf-6.12.3-1.0.0
The latest Linux Factory tag is lf-6.12.3-1.0.0 (Q1 2025), update to
that.

The LS1043A-RDB board is currently supported by NXP through a BSP
called LDLSDK. That isn't what we use, so update the documentation to
reflect that for awareness, and provide a link.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
2f6f1035a1 configs/ls1046a-rdb: bump BSP tag to lf-6.12.3-1.0.0
The latest Linux Factory tag is lf-6.12.3-1.0.0 (Q1 2025), update to
that.

The LS1046A-RDB board is currently supported by NXP through a BSP
called LDLSDK. That isn't what we use, so update the documentation to
reflect that for awareness, and provide a link.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
e3c8525089 configs/ls1046a-frwy: bump BSP tag to lf-6.12.3-1.0.0
The latest Linux Factory tag is lf-6.12.3-1.0.0 (Q1 2025), update to
that.

The LS1046A-FRWY board is currently supported by NXP through a BSP
called LDLSDK. That isn't what we use, so update the documentation to
reflect that for awareness, and provide a link.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
c7c59e18ef configs/ls1028ardb: bump BSP tag to lf-6.12.3-1.0.0
Update the kernel, U-Boot, ATF tags, as well as documentation, used by
the LS1028A-RDB to the latest Linux Factory release.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: reword commit one liner title for consistency]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
c3b9add8a5 package/qoriq-fm-ucode: bump version to lf-6.12.3-1.0.0
Concretely, no change. But saves people the hassle of checking whether
any updates have been missed.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: reword commit one liner title for consistency]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
de366fc096 package/fmc: bump version to lf-6.12.3-1.0.0
Concretely, no change. But prevents people from going to Github and
checking whether the package is up to date.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: reword commit one liner title]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
3358c3e8a8 package/fmlib: bump version to lf-6.12.3-1.0.0-3-g7a58eca
This is technically the master branch, a few commits post release tag.
Change log:

7a58ecaf0d90 fm_lib: explicit conversion to ioc_fm_pcd_exceptions in FM_PCD_SetException()
22a0d3f1867e fm_lib: make REPORT_ERROR() definition more function-like
08ac8b3112a8 fm_lib: fix conversion warnings between e_FmPcdEngine and enum ioc_fm_pcd_engine
168eae74fd8a fm_lib: fix integer-to-pointer conversion build warning in GetDeviceId()

The build fix patch from Buildroot is no longer necessary, remove it.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: switch _VERSION to use git describe syntax]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
06f3d593f6 package/qoriq-rcw: bump version to lf-6.12.3-1.0.0-2-g45e6925
Technically, this is lf-6.12.3-1.0.0 plus a few patches on top (the
current master branch). Change log:

45e692536904 rcw: ls1028a: Add configuration for audio codec usage
3c51083d0cdf lx2160asi: e100g1_split.rcw: fix parse error

The second patch is necessary to fix a build error which was signalled
previously here on the lists:
https://lore.kernel.org/buildroot/20250318213839.17470-1-vjardin@free.fr/

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: switch _VERSION to use git describe syntax]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:33:49 +02:00
Vladimir Oltean
88e4af822e package/qoriq-cadence-dp-firmware: bump version aligned to 6.12.3-1.0.0 BSP
This commit updates the qoriq-cadence-dp-firmware to the version
included in the 6.12.3-1.0.0 QorIQ BSP.

The firmware archive was refactored and its location has changed.
Those qoriq firmware files are now reused from the firmware-imx
archive, which is also included in Buildroot in the directory
"package/freescale-imx/firmware-imx". This commit keeps the Buildroot
package name qoriq-cadence-dp-firmware, first to keep compatibility
or Buildroot configs, and also because QorIQ BSP uses a different
version of the firmware-imx package, compared to the i.MX BSP (at a
same BSP version).

This commit updates the archive name, the archive version and the
download URL following the NXP Yocto BSP at [1]. More precisely,
the information was taken from the recipe at [2].

Note that regarding this qoriq-cadence-dp-firmware version:
- the QorIQ BSP version is: 6.12.3-1.0.0
- the Yocto dp-firmware-cadence package version is: 22.04
- the firmware-imx archive version is: 8.16

The important version we want to align with the rest of other QorIQ
components is indeed the BSP version "6.12.3-1.0.0".

This commit also updates license hashes. The license was updated from:
LA_OPT_NXP_Software_License v17 October 2020
to:
LA_OPT_NXP_Software_License v35 May 2022
Also, the license file EULA.txt was removed, so _LICENSE_FILES is
updated accordingly.

[1] https://github.com/nxp-qoriq/yocto-sdk
[2] 6fb8816cb3/recipes-bsp/dp-firmware-cadence/dp-firmware-cadence_22.04.bb

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien:
 - reword commit log to add info on different version schemes
 - fix license hashes
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-13 11:31:04 +02:00
Vladimir Oltean
11b93ef208 configs/ls1043a-rdb: enable the fmc package
Since LS1043A-RDB uses the Linux Factory-supplied lsdk.config, it
disables the upstream DPAA1 kernel networking drivers and enables their
SDK counterparts. These SDK kernel drivers are configured using the fmc
tool to do basic things such as apply a default PCD, so it seems a
reasonable idea to enable this package by default.

Since fmc uses C++, we need to add the standard library for that, which
also seems to increase the rootfs size.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: regenerate with "make savedefconfig"]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:14:05 +02:00
Vladimir Oltean
a35529c0af configs/ls1046a-rdb: enable the fmc package
Since LS1046A-RDB uses the Linux Factory-supplied lsdk.config, it
disables the upstream DPAA1 kernel networking drivers and enables their
SDK counterparts. These SDK kernel drivers are configured using the fmc
tool to do basic things such as apply a default PCD, so it seems a
reasonable idea to enable this package by default.

Since fmc uses C++, we need to add the standard library for that, which
also seems to increase the rootfs size.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: regenerate with "make savedefconfig"]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:14:05 +02:00
Vladimir Oltean
ac87a43576 configs/ls1046a-frwy: enable the fmc package
Since LS1046A-FRWY uses the Linux Factory-supplied lsdk.config, it
disables the upstream DPAA1 kernel networking drivers and enables their
SDK counterparts. These SDK kernel drivers are configured using the fmc
tool to do basic things such as apply a default PCD, so it seems a
reasonable idea to enable this package by default.

Since fmc uses C++, we need to add the standard library for that, which
also seems to increase the rootfs size.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
[Julien: regenerate with "make savedefconfig"]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:14:05 +02:00
Julien Olivain
726150b0e6 package/optee-test: fix license hash
Commit [1] updated optee-test version but forgot to update
the license hash which was changed upstream in [2] to include
copies of the GPL-2.0 and BSD-2-Clause license files. While at
it, this commit also include those two new files in the license
hash file.

[1] 8c2b2314df
[2] a748f5fcd9

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:09:47 +02:00
Julien Olivain
11315d4787 configs/ls1043a-rdb: linux needs host-openssl
Since Buildroot commit [1] which introduced this defconfig using a
Kernel 6.6.x series, the build can fail with error:

    certs/extract-cert.c:21:10: fatal error: openssl/bio.h: No such file or directory

The issue is generally masked by the build order, as
arm-trusted-firmware selects BR2_TARGET_ARM_TRUSTED_FIRMWARE_FIP=y
which requires host-openssl.

The issue can be reproduced in the Buildroot Docker reference image,
using the commands:

    utils/docker-run
    make ls1043a-rdb_defconfig
    make linux

This commit fixes the issue by explicitly adding
BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y to the defconfig.

[1] 34b047a442

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:06:24 +02:00
Julien Olivain
a83242f131 configs/ls1046a-rdb: linux needs host-openssl
Since Buildroot commit [1] which introduced this defconfig using a
Kernel 6.6.x series, the build can fail with error:

    certs/extract-cert.c:21:10: fatal error: openssl/bio.h: No such file or directory

The issue is generally masked by the build order, as
arm-trusted-firmware selects BR2_TARGET_ARM_TRUSTED_FIRMWARE_FIP=y
which requires host-openssl.

The issue can be reproduced in the Buildroot Docker reference image,
using the commands:

    utils/docker-run
    make ls1046a-rdb_defconfig
    make linux

This commit fixes the issue by explicitly adding
BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y to the defconfig.

[1] 774035189f

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:06:20 +02:00
Julien Olivain
094f7a5b86 configs/ls1046a-frwy: linux needs host-openssl
Since Buildroot commit [1] updating the defconfig to use Kernel 6.6.x
series, the build can fail with error:

    certs/extract-cert.c:21:10: fatal error: openssl/bio.h: No such file or directory

The issue is generally masked by the build order, as
arm-trusted-firmware selects BR2_TARGET_ARM_TRUSTED_FIRMWARE_FIP=y
which requires host-openssl.

The issue can be reproduced in the Buildroot Docker reference image,
using the commands:

    utils/docker-run
    make ls1046a-frwy_defconfig
    make linux

This commit fixes the issue by explicitly adding
BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y to the defconfig.

[1] 0344e5dae6

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:06:17 +02:00
Julien Olivain
5d0ec3b6a4 configs/ls1028ardb: linux needs host-openssl
Since Buildroot commit [1] updating the defconfig to use Kernel 6.6.x
series, the build can fail with error:

    certs/extract-cert.c:21:10: fatal error: openssl/bio.h: No such file or directory

The issue is generally masked by the build order, as
arm-trusted-firmware selects BR2_TARGET_ARM_TRUSTED_FIRMWARE_FIP=y
which requires host-openssl.

The issue can be reproduced in the Buildroot Docker reference image,
using the commands:

    utils/docker-run
    make ls1028ardb_defconfig
    make linux

This commit fixes the issue by explicitly adding
BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y to the defconfig.

[1] 7cbc240ac2

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 14:06:12 +02:00
Julien Olivain
7d890426bc configs/hifive_unmatched: add missing uboot custom hash file
Commit [1] introduced the hifive_unmatched_defconfig with
BR2_DOWNLOAD_FORCE_CHECK_HASH enabled and with custom hash files.
But it forgot to add the custom hash for uboot. It was not detected
at that time because the U-Boot version was the same as the default
"latest" version and was providing its hash.

This defconfig fails to build since the default "latest" was bumped
in commit [2].

This commit fixes the issue by adding the missing uboot hash.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/9677167053

[1] f9cc5dbd45
[2] c14ce5346d

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 13:59:53 +02:00
Julien Olivain
cac028add6 configs/hifive_unleashed: add missing uboot custom hash file
Commit [1] enabled BR2_DOWNLOAD_FORCE_CHECK_HASHES for
hifive_unleashed_defconfig and added custom hash files. But it forgot
to add the custom hash for uboot. It was not detected at that time
because the U-Boot version was the same as the default "latest"
version and was providing its hash.

This defconfig fails to build since the default "latest" was bumped
in commit [2].

This commit fixes the issue by adding the missing uboot hash.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/9677167050

[1] 1ba1055d3d
[2] c14ce5346d

Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 13:59:49 +02:00
Dario Binacchi
b74d876a9e package/azure-iot-sdk-c: bump to version LTS_03_2025
Release notes:
https://github.com/Azure/azure-iot-sdk-c/releases/tag/LTS_03_2025

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 13:41:30 +02:00
Dario Binacchi
a6a2cbae53 DEVELOPERS: add Dario Binacchi for ti-k3-boot-firmware
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 13:35:12 +02:00
Heiko Thiery
03cd7d1a4c boot/ti-k3-boot-firmware: bump to version 11.00.10
Update to latest available version from TI.

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Reviewed-by: Bryan Brattlof <bb@ti.com>
[Dario: Tested on SK-AM62B-P1]
Tested-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 12:59:16 +02:00
Adrian Perez de Castro
3a3ab70fc2 package/libmanette: bump to version 0.2.11
Bugfix release with a number of fixes, it also adds support for the
Steam Deck gamepad. Release notes:

  https://gitlab.gnome.org/GNOME/libmanette/-/blob/0.2.11/NEWS

This version introduces a dependency on the hidapi package.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
[Julien:
 - change release note link to use version tag
 - propagate hidapi dependencies in Config.in
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-12 12:11:05 +02:00
Thomas Perale
fde0b3fe1c package/libarchive: security bump to version 3.7.9
Fixes the following security issues:

- CVE-2024-57970: libarchive through 3.7.7 has a heap-based buffer
    over-read in header_gnu_longlink in archive_read_support_format_tar.c
    via a TAR archive because it mishandles truncation in the middle of a
    GNU long linkname.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2024-57970
  - 8291210321

- CVE-2025-1632: This affects the function list of the file bsdunzip.c.
    The manipulation leads to null pointer dereference. It is possible
    to launch the attack on the local host.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-1632
  - c9bc934e7e

- CVE-2025-25724: list_item_verbose in tar/util.c in libarchive through 3.7.7
    does not check an strftime return value, which can lead to a denial of
    service or unspecified other impact via a crafted TAR archive that is read
    with a verbose value of 2.
    For example, the 100-byte buffer may not be sufficient for a custom locale.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-25724
  - c9bc934e7e

The patch added in [1] are still needed for this version bump.

For more details on the version bump, see the release notes:
  - https://github.com/libarchive/libarchive/releases/tag/v3.7.8
  - https://github.com/libarchive/libarchive/releases/tag/v3.7.9

[1] 9ac63a3360 package/libarchive: fix uclibc build with libiconv (again)

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-11 19:52:19 +02:00
Thomas Perale
c497e5fcc7 package/augeas: add upstream security fix for CVE-2025-2588
Fixes the following security issue:

- CVE-2025-2588: This vulnerability affects the function
    re_case_expand of the file src/fa.c. The manipulation of the
    argument re leads to null pointer dereference

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-2588
  - af2aa88ab3

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add patch name in comment near _IGNORE_CVES]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-10 22:37:41 +02:00
Thomas Perale
f2b14baf25 package/python-django: security bump to version 5.1.8
Fixes the following security issues:

- CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-26699
  - 8dbb44d342

- CVE-2025-27556: Potential denial-of-service vulnerability in
    LoginView, LogoutView, and set_language() on Windows

This CVE isn't related to buildroot has it is only applicable on
Windows but this package version bump fix it.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-27556
  - edc2716d01

For more details on the version bump, see the release notes:
  - https://docs.djangoproject.com/en/5.1/releases/5.1.8/
  - https://docs.djangoproject.com/en/5.1/releases/5.1.7/
  - https://docs.djangoproject.com/en/5.1/releases/5.1.6/

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-10 22:24:18 +02:00
Meena Murthy
e863acaa1a configs/engicam_px30_core: bump Linux to 6.12.22 and U-Boot to 2025.04
The patch bumps the Linux kernel to version 6.12.22 and U-Boot to
version 2025.04.

Signed-off-by: Meena Murthy <meena.murthy@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-10 21:39:53 +02:00
Thomas Perale
4df4d1d312 package/libcoap: bump version to 4.3.5
The patch introduced in [1] that fixed the CVE-2024-0962 is now
available upstream in the 4.3.5 release [2].

This commit also updates the LICENSE file hash, after adding reference
to wolfSSL in [3].

For more details see the release note:
https://github.com/obgm/libcoap/blob/v4.3.5/ChangeLog

[1] 9002b818be package/libcoap: fix CVE-2024-0962
[2] 2b28d8b0e9
[3] e3a662a934

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: fix LICENSE file hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-10 21:35:31 +02:00
Thomas Perale
2d5903769f package/python-jinja2: security bump to version 3.1.6
Fixes the following security issue:

- CVE-2025-27516: Prior to 3.1.6, an oversight in how the Jinja
    sandboxed environment interacts with the |attr filter allows
    an attacker that controls the content of a template to execute
    arbitrary Python code.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-27516
  - 90457bbf33

For more details on the version bump, see the release notes:

https://github.com/pallets/jinja/releases/tag/3.1.6

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-10 21:25:31 +02:00
Vincent Fazio
5468334bb0 package/python3: bump to 3.13.3
For change log, see:
https://docs.python.org/release/3.13.3/whatsnew/changelog.html#python-3-13-3-final

Drop backported patches which have been included in the release.

Fixup the tk module patch to apply cleanly on 3.13.3

Signed-off-by: Vincent Fazio <vfazio@xes-inc.com>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-10 21:13:18 +02:00
Jan Čermák
ed408d6fde package/linux-firmware: add RTL8125D firmware
Add firmware for RTL8125D added in [1]. The r8169 driver currently supports
this card since Linux 6.13. The firmware was added in [2] included in
linux-firmware since version 20241017.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f75d1fbe7809bc5ed134204b920fd9e2fc5db1df
[2] https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=2af74771a7bab8265c6c8ad8fca1419f5fe53c6b

Signed-off-by: Jan Čermák <sairon@sairon.cz>
[Julien: add linux-firmware commit and version comment in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-10 21:04:42 +02:00
Giulio Benetti
e40db2ac55 package/esp-hosted: bump to version 2025-04-08
This version add support for esp32c5 and local patch has been committed so
drop it.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-09 21:54:29 +02:00
Marcus Hoffmann
2c18a7d235 package/liblinear: bump to 2.48
Rebase patch for new version.
Soname changed, so updating accordingly in the mk file.
COPYRIGHT year got updated[2]

[1] 8184427280
[2] 6c0108dcf3

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-09 21:42:12 +02:00
Marcus Hoffmann
49c73215d3 package/libndp: security bump to version 1.9
Fixes: CVE-2024-5564 [1][2]

[1] https://www.cve.org/CVERecord?id=CVE-2024-5564
[2] 05e4ba7b0d

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-09 21:33:52 +02:00
Giulio Benetti
7336c5fa93 package/libnss: bump version to 3.110
For release note, see:
997c76f8a9/doc/rst/releases/nss_3_110.rst

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-08 19:36:15 +02:00
Giulio Benetti
bd6e781038 package/nfs-utils: bump version to 2.8.3
Release announce:
https://lore.kernel.org/linux-nfs/64a11de6-ca85-40ce-9235-954890b3a483@redhat.com/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add link to release announce]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-08 19:33:12 +02:00
Dario Binacchi
c14ce5346d boot/uboot: bump to version 2025.04
Release announcement:
https://lists.denx.de/pipermail/u-boot/2025-April/586033.html

Changelog:
https://github.com/u-boot/u-boot/compare/v2025.01...v2025.04

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-08 19:25:51 +02:00
Mattias Walström
ebd2a810a7 package/ethtool: bump version to 6.14
Changelog:
https://web.git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS?h=v6.14

Signed-off-by: Mattias Walström <lazzer@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-08 19:22:45 +02:00
Leo Liang
593771fafc package/kmon: bump to version 1.7.1
No functional change, but bump for consistency.

For details, see the release Notes:
https://github.com/orhun/kmon/releases/tag/v1.7.1

Signed-off-by: Leo Yu-Chi Liang <ycliang@andestech.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-08 19:21:29 +02:00
Maxime Leroy
bdffdcfdac package/frr: security bump to version 10.3
Update FRR to the latest stable version (10.3, see [1]).

A new package option `BR2_PACKAGE_FRR_BFD` to enable or disable the
compilation of the BFD daemon. This one has now a dependencies with the
kernel headers 4.10 (i.e. IPV6_SRCRT_TYPE_4 from linux/ipv6.h [2]).

The configure options have been updated accordingly:
- Versions of FRR before 9.2 used `sysconfdir` and `localstatedir` as-is,
  without appending `/frr`. The `/frr` suffix had to be passed explicitly
  to `./configure`, which did not align with standard conventions.
  This behavior has since been fixed upstream [3]. As `sysconfdir` and
  `localstatedir` are already set by `pkg-autotools.mk`, they can now
  be removed from `frr.mk`.
- The `--enable-shell-access` option has been removed as of FRR 10 [4].

[1] https://frrouting.org/release/10.3/
[2] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1ababeba4a21f
[3] https://github.com/FRRouting/frr/commit/ff62df2e4484
[4] https://github.com/FRRouting/frr/commit/afb034b0bb42
Fixes: https://www.cve.org/CVERecord?id=CVE-2024-55553
Signed-off-by: Maxime Leroy <maxime@leroys.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-08 19:16:57 +02:00
Thomas Bonnefille
af094ed137 package/gstreamer1/gst1-plugins-ugly: bump version to 1.24.11
AMR NB and WB have been moved from ugly to good.
For more details, see the release notes:

    https://gstreamer.freedesktop.org/releases/1.24/

Signed-off-by: Thomas Bonnefille <thomas.bonnefille@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-07 20:50:38 +02:00
Thomas Bonnefille
90b3cfedf4 package/gstreamer1/gst1-plugins-bad: bump version to 1.24.11
No functional change, but bump for consistency.
The patch that was applied by Buildroot has been applied to gstreamer.
The kate plugin has disappeared from gstreamer.
The webp plugin now requires webp_mux to compile.
The webrtc plugin now requires to be compile with plugins dtls, sctp and
srtp.

For more details, see the release notes:

    https://gstreamer.freedesktop.org/releases/1.24/

Signed-off-by: Thomas Bonnefille <thomas.bonnefille@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-07 20:50:38 +02:00