Commit Graph

74224 Commits

Author SHA1 Message Date
Peter Korsgaard
2bf7b3d1dc package/mosquitto: revert an upstream change in 2.0.20 breaking nonthread builds
Fixes:
http://autobuild.buildroot.net/results/1998881e9ab9ff396e6fd47b0d7c1298ccb25266/
http://autobuild.buildroot.net/results/0cb8e2dcee51007ee09506fa143e52cefbde5335/

And many more.

A change in mosquitto 2.0.20 to fix builds on NetBSD broke WITH_THREADING=no
builds as it unconditionally calls pthread functions.  The issue has been
reported upstream for ~1 month, but so far no fix so revert the NetBSD
change for now instead to fix the build.

https://www.eclipse.org/lists/mosquitto-dev/msg03003.html
https://github.com/eclipse-mosquitto/mosquitto/issues/3183

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0f886158b9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-08 15:43:57 +01:00
TIAN Yuanhao
3e34505ce0 package/gnutls: fix configure options
Two configure option names have been changed since version 3.7.5 [1]:

> Old: --without-libbrotli --without-libzstd (also --with-*)
> New: --without-brotli --without-zstd (also --with-*)

Fixes:

  configure: WARNING: unrecognized options: [...] --without-libbrotli, --without-libzstd

[1]: 6b794e49d1

Signed-off-by: TIAN Yuanhao <tianyuanhao3@163.com>
Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit c4a56d3f6d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-08 15:43:46 +01:00
TIAN Yuanhao
6c8de012ae package/gnutls: bump to version 3.8.8
Signed-off-by: TIAN Yuanhao <tianyuanhao3@163.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 10f892b19d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-08 15:43:43 +01:00
Nicolas Cavallari
49568ff31a package/bluez-alsa: Fix compilation with GCC 14 on musl
bluez-alsa 4.1.1 uses the glibc basename() function, which is not
available on musl.  On GCC < 14, it would probably compile with a
warning, but GCC 14 now rejects this.

Backport an upstream fix to switch to the posix basename() on musl.

Fixes: https://autobuild.buildroot.org/results/8ada292393185328677b58a69c9e370c3118880f
Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 14:51:43 +01:00
Scott Fan
6c47fca27e package/procps-ng: fix pidfd_open checking
Fixes:
http://autobuild.buildroot.net/results/02a2b1d9ece040c529308800403f0230ead4ed3e/

The previous build setup would check for pidfd_open using
AC_CHECK_FUNC and would be incorrectly reported as true.

Backport patch from upstream:
[1] 2507bc4757
[2] 587efb47df
[3] 5acbb5dc15

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit fee18cca53)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 10:46:48 +01:00
Thomas Petazzoni
02f38f4bab package/lmbench: fix build by adjusting LDLIBS logic
The lmbench package (largely unmaintained upstream, last release in
2006) uses a home-grown build system. The scripts/build script sets
LDLIBS to -lm and Buildroot's makefile changes that to:

LDLIBS+=-lm

Except that when Buildroot passes LDLIBS="`$(PKG_CONFIG_HOST_BINARY)
--libs libtirpc`", the LDLIBS variable ends up being equal to:

       -ltirpc-lm

Yes, without any space between -ltirpc and -lm.

Due to this, the checks in scripts/build that use ${LDLIBS} all fail,
and in particular the test that checks when socklen_t is a known type
fails, causing lmbench to provide its own definition, which clashes
with the C library headers definition, and therefore causing build
failures such as:

bench.h:81:13: error: conflicting types for 'socklen_t'; have 'int'

This commit fixes that by adjusting scripts/build using a patch to
properly allow passing additional ${LDLIBS} value, with the needed
space to separate the value from -lm.

Fixes:

  http://autobuild.buildroot.net/results/f1715de95b46a1d08143e529bd4574bc7dbcfb3e/

We have been unable to determine exactly when this issue was
introduced. The first build failure we could find is the one
referenced above, which dates back from Aug 19, 2024. Since this date,
lmbench has been consistently failing on a very regular
basis. However, prior to Aug 19, 2024, the previous failure was from
December 2022, and was unrelated. It is unclear what changed in Aug
2024 to cause this issue to surface. The one thing that changed right
before commit ce3dedc2 (first failing commit) are changes to
genrandconfig, which ensures all autobuilders now generated fully
random configurations instead of configurations based on a
well-defined list of arch/toolchain configurations. But even with
this, this lmbench issue should have appeared earlier, and we have
been unable to find a scientific explanation.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 80f25d4706)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 10:44:46 +01:00
Thomas Petazzoni
b831b53878 package/android-tools: fix b64_pton() issue with GCC >= 14.x
The android-tools code base uses the __b64_pton() function, which
isn't provided by all C libraries. So the Debian patch
debian/patches/add_adbd.patch adds an implementation of b64_pton(),
but doesn't actually use it, nor defines a prototype for it. Our
existing patch 0003-Fix-build-issue-with-uclibc.patch switches the
code to use the b64_pton() function... but still without providing a
prototype, causing the following build failures with GCC >= 14.x:

adb_auth_client.c:75:15: error: implicit declaration of function 'b64_pton'

To fix this, we rework 0003-Fix-build-issue-with-uclibc.patch into a
patch that:

 (1) Renames b64_pton() to adb_b64_pton() to make sure it won't clash
     with implementations provided by some C libraries, and adjusts
     the call sites accordingly.

 (2) Adds a prototype definition of adb_b64_pton() in places where
     this function is used.

Fixes:

  http://autobuild.buildroot.net/results/b25b25337c7ad89c33f8bd20b646850bd993ec53ae9/

Even though GCC 14.x support was merged in Buildroot in May 2024, this
particular b64_pton() only started appearing on July 15 2024, with the
first occurence being:

  http://autobuild.buildroot.net/results/1cbe87bbe3c56f28444b3aaba1ba1d05f947d36e/

Indeed, it's not before July 15 2024 that we merged commit
d201f2f5cd ("package/android-tools: add
patches to fix build with GCC 14.x"), which fixed other GCC 14.x
issues, which were hiding this b64_pton() problem.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 1eec67d164)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:35:34 +01:00
Thomas Petazzoni
9ad5e23c76 package/android-tools: fix build issue on mips64 and powerpc64
The kernel headers on mips64 and powerpc64 were historically "broken",
defining u64 as an "unsigned long" instead of "unsigned long
long". This has been fixed in the upstream Linux kernel by introducing
the __SANE_USERSPACE_TYPES__ definition.

Our commit a2e178d6b4 ("android-tools:
disable on some architecture with old kernel headers") already
disabled building fastboot on powerpc64 and mips64 systems that have
too old kernel headers. However, it turns out that even with the new
kernel headers, there are build issues because
__SANE_USERSPACE_TYPES__ isn't defined everywhere it should be in the
android-tools code base. The Debian patche
debian/patches/ppc64el-ftbfs.patch adds some definitions, but it's
missing one file, and in another the definition comes too late.

This commit adds an extra patch that fixes this up, and makes fastboot
build properly on mips64 and powerpc64.

Fixes:

  http://autobuild.buildroot.net/results/8528ff876e695f79bdfe64f5330d9d51eeef66cb/ (powerpc64)
  http://autobuild.buildroot.net/results/36ac6af73b618c28d1636093da333f7ebd9d6cfe/ (mips64)

This issue has been occurring as far as Feb 2021, with the first
occurence apparently being:

  http://autobuild.buildroot.net/results/d9521b4bfeafb1140c21745dbfe28d476a9b71ec/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit ee65a2119a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:35:33 +01:00
Thomas Petazzoni
ddd2738e01 package/android-tools: convert all patches to Git-formatted patches
This will make it easier to modify the patch series moving forward. No
functional changes.

On one patch, we added the SoB from Giulio, which was missing. Giulio
was the original contributor of the patch, and nobody touched it since
it was introduced.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 3ee745782a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:35:32 +01:00
Julien Olivain
284efa0c16 package/rt-tests: fix _SITE download url
Upstream moved old versions in an "older" directory. The current version
in Buildroot was moved to this directory and fail to download.

This commit simply updates the _SITE url to reflect this change.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8514189435

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 8e5a5a9bcc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:33:18 +01:00
Maxim Kochetkov
cd0e1ef28d package/alsa-lib: ucm: add BR2_USE_MMU dependency
Build fails with:
ucm_exec.c: In function 'uc_mgr_exec':
ucm_exec.c:229:13: error: implicit declaration of function 'fork' [-Wimplicit-function-declaration]
  229 |         p = fork();
      |             ^~~~

ucm uses fork() so add BR2_USE_MMU dependency for it.

Fixes: https://autobuild.buildroot.org/results/a287d3eef7ea5ea9a85b5b35d14e3698df4ecd01/build-end.log
Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 928494b785)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:29:35 +01:00
Baruch Siach
63e6f819b9 package/sexpect: fix build with GCC 14 and uClibc
GCC 14 makes implicit declaration an error by default, which breaks
build with uClibc when _GNU_SOURCE is not defined. Add a patch adding
_GNU_SOURCE for uClibc build.

Fixes:
https://autobuild.buildroot.org/results/2c284d800e59e41669a5da85ca23e2923eea7997/

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit f39d38d77a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:28:16 +01:00
Cherniaev Andrei
552ba600ee boot/grub2/readme.txt: don't specify /dev/loop0
losetup -f returns the next free loop device, which may not be
/dev/loop0.  If you blindly follow the readmy you may end up destroying
an existing device.

Make it more robust with a variable to store the loop device.

Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
[Arnout: keep the actual losetup atomic]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 7dd56b6cd9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:26:58 +01:00
Bernd Kuhls
a41d3d1807 package/libvpl: not supported on mips64
Although adding " || defined(__mips__)" here:
https://github.com/intel/libvpl/blob/main/api/vpl/mfxdefs.h#L71

would fix the problem, libvpl alone makes no sense and the only
dependee, intel-vpl-gpu-rt, is unsupported on mips anyway.

Fixes:
http://autobuild.buildroot.net/results/50d/50d64ab2d547c70b39e2421ee2763d8309873125/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 014a8201c8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:26:12 +01:00
Anssi Hannula
a5bf4d7b80 package/nfs-utils: fix unit dependencies without systemd on build host
nfs-utils configure script uses "systemd-escape" to determine the
rpc_pipefs mount point unit name in the non-default case.

If the host build system has no systemd this will silently result in an
empty name, causing rpc_pipefs.target to incorrectly depend on ".mount".

Fix that by depending on host-systemd for build.

Signed-off-by: Anssi Hannula <anssi.hannula@bitwise.fi>
Acked-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4c9b13b8dd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:24:10 +01:00
Scott Fan
b015ce70f5 package/python-psycopg2: add config dependencies from postgresql
Also update site url to https://github.com/psycopg/psycopg2/

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit a0964a9157)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:20:10 +01:00
J. Neuschäfer
2afda6a821 package/musl: Fix -ztext build failures on microblaze
The particular combination of LVM2 (which enables -PIE), musl-libc with
dynamic linking (and thus -ztext, banning TEXTRELs), and microblaze
leads to an error because a TEXTREL is produced in musl-libc's Scrt1.o.

The upstream patch added in this commit fixes (or works around) the
problem.

Fixes: http://autobuild.buildroot.net/results/5bb283eff4b4a2b17d1028bbe0b3e1bea8fbeba8/
Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4033902ad0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 22:58:53 +01:00
Florian Fainelli
e0232509ec package/linux-tools: perf: Disable shellcheck
The use of shellcheck within perf is not a functional requirement and it can
lead to build failures where the perf makefile attempts to link in empty
.shellcheck_log files:

https://lore.kernel.org/r/fb078045-dc05-426e-b21e-72ffae3e8e1b@gmail.com

Disable shellcheck since we do not need it at all.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0c44722b0c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:51:51 +01:00
Yann E. MORIN
79723c8058 DEVELOPERS: drop Yann's entries
As it happens, I am unable to keep maintaining those entries, and it is
misleading to others about whether they should Cc me on their changes.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 773a89d414)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:50:21 +01:00
LP C
6db6c6edfd DEVELOPERS: remove myself as maintainer of package/{intel-gmmlib, intel-mediadriver, intel-mediasdk}
Signed-off-by: Louis-Paul CORDIER <lpdev@cordier.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0fd5860280)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:50:11 +01:00
Neal Frager
8472776a87 board/zynqmp/kria/readme.txt: add usb start
When halting the boot process in u-boot, the 'usb start' command does not
automatically run.  Since the SD card is connected over a USB to SD card
bridge on the kd240 and kr260 boards, the readme.txt instructions should
document that the 'usb start' command needs to be manually enterred when
following the reflashing instructions.  Otherwise, the command to read the
boot.bin and u-boot.itb files from the SD card will fail.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e02e59d124)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:48:59 +01:00
02e27152e6 package/bats-core: bump to version 1.11.1
Changelog: https://github.com/bats-core/bats-core/releases/tag/v1.11.1

Signed-off-by: Brandon Maier <brandon.maier@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e67568ceda)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:48:21 +01:00
Peter Korsgaard
73f2172fd6 package/frr: security bump to version 8.5.6
8.5.5 fixes the following security issues:

- CVE-2024-31948: bgpd: Fix error handling when receiving BGP Prefix SID
  attribute
  ba6a8f1a31

- CVE-2024-31950: ospfd: Solved crash in RI parsing with OSPF TE
  f69d1313b1

- CVE-2024-31951: ospfd: Correct Opaque LSA Extended parser
  5557a289ac

8.5.6 fixes the following security issues:

- CVE-2024-44070: bgpd: Check the actual remaining stream length before taking TLV value
  0998b38e4d

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 12:48:58 +01:00
Julien Olivain
bec0de73ac support/testing: improve mosquitto test reliability
The mosquitto runtime test can randomly fail on slow
runners, see [1].

This commit improves this test in the following ways:

- the mosquitto_sub subscriber process is now started in a subshell
to suppress the job control messages (to prevent any spurious
messages when the job stops),

- the standard error is redirected to /dev/null, to prevent the
printing of any messages,

- the mosquitto_pub publisher process is started later, by increasing
the sleep time,

- finally, a new sleep time is introduced between the mosquitto_pub
publisher process and the check of the mosquitto_sub subscriber, to
make sure it will have time to write its output and exit.

Fixes: [1]

[1] https://gitlab.com/buildroot.org/buildroot/-/jobs/8453386454

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 07a444d088)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:26:03 +01:00
Maxim Kochetkov
4f2555ecc5 package/postgresql: bump version to 16.6
Release notes: https://www.postgresql.org/docs/release/16.6/

Note: this minor version bump fixes a bug introduced in postgresql
security bump to 16.5 fixing CVE-2024-10978.

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
[Julien: add note in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 20c2b2f76c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:23:40 +01:00
Bernd Kuhls
5f79065db5 {linux, linux-headers}: bump 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5d49bc51e0)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:23:22 +01:00
Julien Olivain
4d1a858552 Config.in: fix _FORTIFY_SOURCE help string typos
The Config.in help string for BR2_FORTIFY_SOURCE_{2,3} mention
"_FORTIFY_SOURCES" (plural, with an extra "S"). The correct macro name
is "_FORTIFY_SOURCE" (without the "S"). See [1].

This commit fixes those typos.

[1] https://www.gnu.org/software/libc/manual/html_node/Source-Fortification.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1ec30e6f11)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:21:26 +01:00
Peter Korsgaard
8c3836ac8f package/quagga: fetch from sources.buildroot.net
Fixes https://autobuild.buildroot.org/results/54a/54a165827f536be47cd45c98da3937a1e94a7c65/

Upstream is no longer accessible, so use s.b.n instead.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39a5490072)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:20:52 +01:00
Romain Naour
6195a3db77 package/python-sip: disable parallel install
{host-}python-sip may fail to install on fast machine, so disable
parallel install.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8350440972 (TestPythonPyQt5)
http://autobuild.buildroot.org/results/8f2/8f24656f3a66d21f2d3c6d6b1adc6bb5f1c0c801 (2024-10-15)
http://autobuild.buildroot.org/results/6e6/6e6bbee714b10e0f04c9d17b7e0ecce057d21d2a (2022-07-15)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4b271906a7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:19:08 +01:00
Fiona Klute (WIWA)
8943a028d0 package/bmap-tools: select host-python3 if building host package
Host bmap-tools runs using host-python3, but did not select it,
leading to the confusing situation that BR2_PACKAGE_HOST_PYTHON3=n
even though it was built and working.

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit dbb019db73)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:18:27 +01:00
Bernd Kuhls
845a663f99 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d9bea4bb89)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 09:35:09 +01:00
Bernd Kuhls
130f0ce286 package/php: security bump version to 8.3.14
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/444

Fixes CVE-2024-8929, CVE-2024-8932, CVE-2024-11233, CVE-2024-11234 &
CVE-2024-11236.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 96d73b3091)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-05 21:55:58 +01:00
Bernd Kuhls
fa3c41f3c9 package/postgresql: security bump version to 16.5
Release notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/

Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 257c1de7e9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-05 21:43:13 +01:00
Yu Chien Peter Lin
c61c662693 DEVELOPERS: update maintainer of Andes platform
I will lose access to my email next week, so hand
it over to Leo Yu-Chi Liang.

Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
Reviewed-by: Leo Yu-Chi Liang <ycliang@andestech.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a359514630)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:25:59 +01:00
Thomas Petazzoni
44ebe8ee2b DEVELOPERS: drop Asaf Kahlon
Asaf has privately requested to be removed from the DEVELOPERS file as
he will no longer be contributing to Buildroot in the forseeable
future.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 353a37b04d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:25:20 +01:00
Bernd Kuhls
cd42b188bf package/libpng: fix arm build with NEON
Fixes:
http://autobuild.buildroot.net/results/52c/52c974e70f922e9d7efea4c538e4438a22faa846/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-authored-by: Peter Korsgaard <peter@korsgaard.com>
[https://lists.buildroot.org/pipermail/buildroot/2024-November/767661.html]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 54cfff355c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:24:50 +01:00
Julien Olivain
8952252da7 package/libkrb5: security bump to version 1.21.3
For the change log, see [1].

The license hash file changed, due to the year update.  See [2].  This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371

[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] fec2c44ee9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0416ae0ed5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:24:00 +01:00
Bernd Kuhls
0b26c8012e package/intel-microcode: security bump version to 20241112
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html

CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 649b31fc6d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:23:04 +01:00
Julien Olivain
48e79150ba package/tiff: security bump to version 4.7.0
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html

This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.

This commit also adds a comment in the hash file about pgp signature
veritication.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d571951c67)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:22:35 +01:00
Bernd Kuhls
f35c5ad48c package/libcurl: security bump version to 8.11.0
Changelog: https://curl.se/ch/8.11.0.html

Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ed4348d1c5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:21:48 +01:00
Nicolas Cavallari
ed2f4b2add package/libgit2: bump version to 1.8.4
upstream mistakenly based 1.8.3 on 1.8.1 so it didn't include the
1.8.2 fixes.  1.8.4 includes fixes from 1.8.2 and 1.8.3.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 268d5145c8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:21:02 +01:00
Francois Perrad
5001c63d7f package/expat: security bump to version 2.6.4
fix CVE-2024-50602

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 856a7e96d5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:19:28 +01:00
Bernd Kuhls
625d8b8706 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 323567552b)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:12:59 +01:00
Julien Olivain
1b73bbbf71 package/usbredir: fix package homepage URL
The current homepage URL [1] redirects to its https and ends up to
a HTTP 404 not found error. This commit fixes the issue by replacing
it with the new URL [2].

[1] http://www.spice-space.org/page/UsbRedir
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 122a5e2529)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:07:44 +01:00
Michael Nosthoff
e21e65d49e package/boost: update download url
boost moved its package hosting from jfrog to their own url
provided by the C++ Alliance. According to [0] the old urls
might cease to exist after December 2024.

[0] https://lists.boost.org/Archives/boost/2024/05/256914.php

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8d4a9afdd5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:04:57 +01:00
Julien Olivain
d5b713c266 package/irssi: bump version to 1.4.5
For change log, see:
https://irssi.org/NEWS/#news-v1-4-5

This commit also adds the pgp key id used for the signature
verification.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 525c1369bc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-25 17:40:56 +01:00
Cherniaev Andrei
59256d02f8 package/picotool: fix Config.in comment dependencies
Due to a bug in the Config.in comment dependencies, the comment "***
picotool needs a toolchain w/ C++, threads, gcc >= 4.9 ***" is always
shown even if all features are enabled.

Fixes: d30c1e3c58 ("package/picotool: fix libusb dependencies")
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d2f5678f42)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-25 17:37:02 +01:00
Thomas Devoogdt
1e0b9fb7cb package/x11vnc: add and rework compile patches
Add the "Upstream" field to the patch message for:
 - 0001-Fix-build-on-32bit-arches-with-64bit-time_t.patch
 - 0002-scan-limit-access-to-shared-memory-segments-to-current-user.patch

Add a compile patch for GCC >= 10 which enables -fno-common by default.

Fixes:
 - https://autobuild.buildroot.org/results/b2231fe06fe56036a5ddbe61cb8556b046e3a7b7
 - https://autobuild.buildroot.org/results/8afbcc63818d3e1586731e178f16635e773d5600
 - ...

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
[Julien: simplified autobuild URLs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e5bb457d5d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-25 17:25:06 +01:00
Bernd Kuhls
7babcd8937 package/ffmpeg: fix build on riscv32
Ported patch from OpenEmbedded:
010b068bcc

"ffmpeg 6.0 has added assembly routines which uses rv64i ISA
unconditionally, ideally it should check for ISA before using those
instructions."

Fixes:
https://autobuild.buildroot.org/results/8a7082a0f24ebcf264aeac5e0fea704dc6a6bb1c/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9e84f38be8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-25 17:21:46 +01:00
Peter Korsgaard
985d126cd7 package/fbv: fetch from sources.buildroot.net
Fixes https://gitlab.com/buildroot.org/buildroot/-/issues/73

Upstream is no longer accessible, and wget takes a long time (~7 minutes)
before it times out and falls back to s.b.n, so use that instead right away:

wget --passive-ftp -nd -t 3 -O '/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.GBHVap/output' 'http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz'
--2024-11-21 17:06:55--  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Resolving s-tech.elsat.net.pl (s-tech.elsat.net.pl)... 85.11.67.252
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Retrying.

--2024-11-21 17:09:07--  (try: 2)  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Retrying.

--2024-11-21 17:11:19--  (try: 3)  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Giving up.

wget --passive-ftp -nd -t 3 -O '/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.MxQ1k0/output' 'https://sources.buildroot.net/fbv/fbv-1.0b.tar.gz'
--2024-11-21 17:13:30--  https://sources.buildroot.net/fbv/fbv-1.0b.tar.gz
Resolving sources.buildroot.net (sources.buildroot.net)... 104.26.0.37, 104.26.1.37, 172.67.72.56, ...
Connecting to sources.buildroot.net (sources.buildroot.net)|104.26.0.37|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 18989 (19K) [application/x-gtar-compressed]
Saving to: ‘/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.MxQ1k0/output’

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 10:39:18 +01:00