Commit Graph

81239 Commits

Author SHA1 Message Date
Bernd Kuhls
2e6c4f0888 package/libnfs: fix build without libkrb5
Buildroot commit a035a0f99f bumped the
package to 6.0.2 which includes upstream commit
e806051f40
that adds optional support for libkrb5, enabled by default.

When building without libkrb5 we need to disable its support to avoid
a configure error:

  configure: Build with gssapi_krb5 support
  checking for gssapi/gssapi.h... no
  configure: error: You need gssapi development files to compile libsmb2.

Fixes:
https://autobuild.buildroot.net/results/166/166fb283ef8830930ce191b4418d01e6c82176f5/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:33:44 +01:00
Bernd Kuhls
d7e8b0d237 package/libid3tag: needs host-gperf
Buildroot commit 0ed1707ba5 bumped the
package to 0.16.4 which re-added the dependency to host-gperf:
2d7e73eb9f

Fixes:
https://autobuild.buildroot.net/results/133/133adafe89bc2b7df28dcb10eb30c19272100670/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:13:39 +01:00
James Hilliard
9faac374c7 package/python-cryptography: security bump to version 46.0.5
For change log since version 46.0.3, see:
https://cryptography.io/en/46.0.5/changelog/

Fixes:
https://www.cve.org/CVERecord?id=CVE-2026-26007

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien:
 - mark commit as a security bump
 - add link to changelog and cve
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:00:44 +01:00
James Hilliard
b7b8c9e277 package/python-trio: bump to version 0.33.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:00:35 +01:00
James Hilliard
10037a3cd5 package/python-tortoise-orm: bump to version 1.1.5
Drop no longer required python-pytz runtime dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:00:35 +01:00
James Hilliard
170445994a package/python-sentry-sdk: bump to version 2.54.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:00:35 +01:00
James Hilliard
51365ff063 package/python-setuptools: bump to version 82.0.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:00:35 +01:00
James Hilliard
b9c60c5675 package/python-aiodns: bump to version 4.0.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-07 11:00:35 +01:00
Bernd Kuhls
d62b605c1a package/postgresql: bump version to 18.3
https://www.postgresql.org/about/news/postgresql-183-179-1613-1517-and-1422-released-3246/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 20:08:30 +01:00
Bernd Kuhls
b9a88acd9b package/libplacebo: bump version to 7.360.0
https://code.videolan.org/videolan/libplacebo/-/tags/v7.360.0

Removed patch 0003 which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 20:00:13 +01:00
Bernd Kuhls
0ed1707ba5 package/libid3tag: bump version to 0.16.4
https://codeberg.org/tenacityteam/libid3tag/releases/tag/0.16.4
"We now provide our own source packages instead of using Codeberg's
 pre-generated sources, guaranteeing that the hash won't change."

Removed patches which are included in this bump.

Used tarball and its hashes provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:48:19 +01:00
Bernd Kuhls
156e2be96c DEVELOPERS: remove Bernd Kuhls from libldns
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
86a506c258 package/freeswitch: disable mod_enum to fix build with glibc 2.43
Build is broken with glibc 2.43:

mod_enum.c: In function 'add_result':
mod_enum.c:246:23: error: passing argument 1 of '__assert_single_arg'
 makes integer from pointer without a cast [-Wint-conversion]
  246 |         switch_assert(new_result);
      |                       ^~~~~~~~~~
      |                       |
      |                       enum_record_t * {aka struct enum_record *}

Since both services (e164.org, freenum.org) used in the default
configutation of mod_enum
https://github.com/signalwire/freeswitch/blob/master/src/mod/applications/mod_enum/conf/autoload_configs/enum.conf.xml

seem to be dead for years now:
https://community.asterisk.org/t/asterisk-network-interconnect/88659

we do not care to try to fix the build error.
Instead the optional support for mod_enum is removed from the package.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
2d41d0d980 package/libvips: fix build with glibc 2.43
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
1f6adca8e0 package/ltp-testsuite: fix build with glibc 2.43
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
5d1cc4f05e package/links: Fix build with glibc 2.43
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
94916981ce package/waffle: fix build with glibc 2.43
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
eb5086ae7a package/ntp: fix build with glibc 2.43
sntp/crypto.c includes sntp/config.h, then sntp/crypto.h which includes
ntp_stdlib.h which in turn includes l_stdlib.h that contains

  #ifndef HAVE_MEMCHR
  extern void *memchr(const void *s, int c, size_t n);
  #endif

and breaks the build with glibc 2.43.

sntp/config.h does not contain any information about memchr() while the
top-level config.h does but this top-level config.h is not included
because sntp/Makefile lacks -I$(top_builddir) so sntp/config.h gets
included which does not define HAVE_MEMCHR although glibc does provide
memchr() but sntp/configure lacks a check for memchr().

This was not a problem with previous glibc versions but due to recent
C23 changes in glibc the ntp build is now broken.

To fix the problem we add a configure check for memchr() to
sntp/configure so HAVE_MEMCHR gets defined in sntp/config.h.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
876e987099 package/wlroots: fix build with glibc 2.43
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
5cdf5fa424 package/libkrb5: fix build with glibc 2.43
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
2115e079ef package/foot: bump version to 1.26.0
https://codeberg.org/dnkl/foot/src/tag/1.26.0/CHANGELOG.md

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
3da8f8c054 package/lxc: bump version to 6.0.6
https://discuss.linuxcontainers.org/t/lxc-6-0-6-lts-has-been-released/26294

Added sha256 hash tarball provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Bernd Kuhls
d3b8010197 package/socat: bump version to 1.8.1.1
http://www.dest-unreach.org/socat/

2026-02-12: Socat version 1.8.1.1 has been released.
 It fixes compilation with glibc 2.43, xio-netlink.c for Musl, and a few
 minor bugs, see file CHANGES

2025-12-08: Socat version 1.8.1.0 has been released. It fixes a couple
 of minor issues and provides new address types TEXT and STALL and a few
 new address options.

Rebased patch 0001 due to upstream commit
https://repo.or.cz/socat.git/commitdiff/2cc1f11d02928e7eca9560506dfc6e97a0ac92e3

Updated hash of README, used as license file, due to version bumps:
https://repo.or.cz/socat.git/history/HEAD:/README

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:39:23 +01:00
Dowan Gullient
8313d8a2fa support/testing/infra: update artifacts URL to https and .org domain
The artifacts URL has been moved to https and domain to .org to
improve security and avoid redirection issues. This ensures that
downloads of kernels and rootfs images during runtime tests are
encrypted and verified.

The change has been tested by running a runtime test, confirming the
correct download and renaming of artifacts from the new URL:

    Downloading to .../tmpyotq8uor
    Renaming from .../tmpyotq8uor to .../kernel-versatile-5.10.202

Signed-off-by: Dowan Gullient <dowan.gullient@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:17:59 +01:00
Dowan Gullient
2093bfa0aa configs/khadas_vim3: bump linux to 6.18.15 and u-boot to 2026.01
With U-Boot 2022.04 gnutls is required for building the hostool
mkeficapsule.

mkeficapsule tool is built by default if EFI_LOADER is set since u-boot
2024.10 [1].

Thus the BR2_TARGET_UBOOT_NEEDS_GNUTLS config is needed.

This commit also updates the defconfig to the new convention:
- It adds custom hashes, enable BR2_DOWNLOAD_FORCE_CHECK_HASHES=y and
BR2_GLOBAL_PATCH_DIR="board/khadas/vim3/patches" to store the files.

[1] b7a625b1ce

Signed-off-by: Dowan Gullient <dowan.gullient@smile.fr>
[Julien:
 - squashed linux and u-boot bumps
 - change linux.hash comment reuse hashes published upstream
 - increase BR2_TARGET_ROOTFS_EXT2_SIZE to 256M
 - remove partition size constraint in genimage.cfg
 - remove .checkpackageignore entry to fix check-package error
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:15:54 +01:00
Dowan Gullient
6f0300a8fb configs/khadas_vim3: use external Bootlin toolchain
Signed-off-by: Dowan Gullient <dowan.gullient@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:15:54 +01:00
Giulio Benetti
b483b6eac4 package/mali-driver: bump to version 2026-03-04
This version extends the Linux version we can build with from 5.11.0
back to version 5.10.220.

Fixes:
https://autobuild.buildroot.org/results/fa0c3acfcfc94b0600842ace6d8b09ba2c6c593f/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 19:05:24 +01:00
Bernd Kuhls
aa461fd353 {linux, linux-headers}: bump 6.{1, 6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 18:57:33 +01:00
Bernd Kuhls
44b2e34988 package/intel-vpl-gpu-rt: bump version to 26.1.3
https://github.com/intel/vpl-gpu-rt/releases/tag/intel-onevpl-26.1.3

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 18:53:16 +01:00
Bernd Kuhls
614978cf0e package/intel-mediadriver: bump version to 26.1.3
https://github.com/intel/media-driver/releases/tag/intel-media-26.1.3

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 18:53:16 +01:00
Bernd Kuhls
5a0f3c66c9 package/linux-firmware: bump version to 20260221
Updating the hash of the WHENCE file, due to firmware additions and
firmware changes, but no changes to the redistribution/licensing
conditions.

Updated hash of LICENSE.amd-ucode due to copyright year bump:
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/LICENSE.amd-ucode?h=20260221&id=e399bb332bdaaeacb27923e8a0a68b0d6f303d49

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 18:51:53 +01:00
Bernd Kuhls
f489b40190 package/intel-microcode: bump version to 20260227
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260227

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 18:50:12 +01:00
Bernd Kuhls
b1c4276c2d package/libtpms: security bump version to 0.10.2
https://github.com/stefanberger/libtpms/blob/v0.10.2/CHANGES

Fixes CVE-2026-21444.

Added comment to hash file about locally computed hashes.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 13:55:24 +01:00
Bernd Kuhls
f773fd6787 package/libtpms: fix build with host gcc >= 15.x, glibc >= 2.43
Fixes:
https://autobuild.buildroot.net/results/7a6/7a6ea7c513e8f1dcc32d868108bfb2a907d6fe85/

The previous change to src/tpm_library.c dates back to 2024:
https://github.com/stefanberger/libtpms/commits/master/src/tpm_library.c
so a backport to buildroot LTS branches should be considered.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: reword title to mention glibc 2.43]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 13:54:55 +01:00
Julien Olivain
5e6c424cac package/edk2-platforms: fix package patch newline characters
Commit [1] was applied without fixing the edk2-platform patch
newlines which are changed by the mailing list. As a result,
the patch fails to apply.

This commit fixes the issue.

[1] 21baec5ef5

Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-06 13:34:07 +01:00
Fiona Klute
ea5d82f1f6 package/squashfs: bump to version 4.7.5
Upstream changelog:
https://github.com/plougher/squashfs-tools/blob/4.7.5/CHANGES.md

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-03-05 12:20:15 +01:00
Peter Korsgaard
ee671bdd18 Merge branch 'next'
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-03-05 08:57:24 +01:00
Bernd Kuhls
7ddb1a9996 {linux, linux-headers}: bump 5.{10, 15}.x / 6.{1, 6, 12, 18, 19}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 22:57:59 +01:00
Julien Olivain
21baec5ef5 boot/edk2: bump to version edk2-stable202511
For release notes since edk2-stable202508, see:
https://github.com/tianocore/edk2/releases/tag/edk2-stable202511

This commit also updates the edk2-platforms packages with the last
commit merged at the edk2 release date (2025-11-19), which corresponds
to commit [1].
The edk2-non-osi package is also updated the same way, which
corresponds to commit [2].

This commit also adds an edk2-platforms package patch to fix a Marvell
build failure seen with the SolidRun MacchiatoBin platform.

This commit has been runtime tested with tests using EDK2 package,
with commands:

    support/testing/run-tests \
        -d dl -o output_folder \
            tests.boot.test_edk2 \
            tests.boot.test_grub.TestGrubAArch64EFI \
            tests.boot.test_grub.TestGrubRiscV64EFI \
            tests.boot.test_grub.TestGrubX8664EFI \
            tests.package.test_fwts

It has also been runtime tested (by booting in qemu) with defconfigs
using EDK2 package:
qemu_aarch64_sbsa_defconfig
qemu_loongarch64_virt_efi_defconfig
qemu_riscv64_virt_efi_defconfig
qemu_x86_64_efi_defconfig

[1] 1e64c1109a
[2] 94d0489811

Cc: Dick Olsson <hi@senzilla.io>
Cc: Romain Naour <romain.naour@smile.fr>
Cc: Vincent Stehlé <vincent.stehle@arm.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-03-04 22:48:57 +01:00
Julien Olivain
bd06eace37 support/testing: boot/test_grub: remove 32bit EFI test
EDK2 removed OVMF IA32 support in commit [1], which is included in
version edk2-stable202511. This commit removes the test relying on it.

[1] 1fb88ffe28

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-03-04 22:48:56 +01:00
Julien Olivain
cf16e1abe0 support/testing: fs/test_iso9660: remove 32bit EFI tests
EDK2 removed OVMF IA32 support in commit [1], which is included in
version edk2-stable202511. This commit removes tests relying on it.

[1] 1fb88ffe28

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-03-04 22:48:54 +01:00
Thomas Perale
746519df52 package/graphicsmagick: bump to v1.3.46
For more information, see the release note:

- http://www.graphicsmagick.org/NEWS.html#october-29-2025
- https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/compare/GraphicsMagick-1_3_45...GraphicsMagick-1_3_46

This release include now upstream fixes for CVE-2025-27795,
CVE-2025-32460, CVE-2025-27796.

Copyright year updated in [1].

[1] 13454c83b4

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 22:42:44 +01:00
Bernd Kuhls
d225a6ffad package/clamav: security bump version to 1.5.2
https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html

Fixes CVE-2026-20031: https://www.cve.org/CVERecord?id=CVE-2026-20031

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 22:34:26 +01:00
Bernd Kuhls
1c3aa5f977 package/exiv2: security bump version to 0.28.8
https://exiv2.org/whatsnew.html
https://github.com/Exiv2/exiv2/blob/v0.28.8/doc/ChangeLog

This release fixes three low-severity vulnerabilities:

CVE-2026-25884: Out-of-bounds read in CrwMap::decode0x0805
CVE-2026-27596: Integer overflow in LoaderNative::getData() causes out-of-bounds read
CVE-2026-27631: Uncaught exception: cannot create std::vector larger than max_size()

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 22:27:20 +01:00
Bernd Kuhls
6c3933d14b package/freetype: security bump version to 2.14.2
Release notes:
https://sourceforge.net/projects/freetype/files/freetype2/2.14.2/

Fixes CVE-2026-23865: https://seclists.org/oss-sec/2026/q1/253

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 22:22:22 +01:00
Adrian Perez de Castro
1a9998e511 package/libsoup3: security bump to 3.6.6
While there is only one CVE number assigned (CVE-2025-14523) for one of
the patches included in this release, the bulk of the the changes are
security fixes.

Release notes may be found at:

  25eac15300

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-14523

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 22:18:29 +01:00
Chen Pei
1822a98827 DEVELOPERS: Add Chen Pei to iniparser
Signed-off-by: Chen Pei <cp0613@linux.alibaba.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 21:18:57 +01:00
Chen Pei
aee709bd45 package/iniparser: new package
The iniparser is a simple C library offering ini file parsing services.

ndctl[1] requires it.

[1] https://github.com/pmem/ndctl

Signed-off-by: Chen Pei <cp0613@linux.alibaba.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 21:18:56 +01:00
Peter Korsgaard
bd715a60ea docs/website/news.html: add 2026.02 announcement link
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-03-04 09:21:29 +01:00
Peter Korsgaard
d374a736d8 Kickoff 2026.05 cycle
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-03-04 09:20:22 +01:00