Commit Graph

81107 Commits

Author SHA1 Message Date
Bernd Kuhls
359a92df29 package/lxc: bump version to 6.0.5
https://discuss.linuxcontainers.org/t/lxc-6-0-lts-has-been-released/19567
https://discuss.linuxcontainers.org/t/lxc-6-0-1-lts-has-been-released/20283
https://discuss.linuxcontainers.org/t/lxc-6-0-2-lts-has-been-released/21632
https://discuss.linuxcontainers.org/t/lxc-6-0-3-lts-has-been-released/22402
https://discuss.linuxcontainers.org/t/lxc-6-0-4-lts-has-been-released/23390
https://discuss.linuxcontainers.org/t/lxc-6-0-5-lts-has-been-released/24438

Removed patch which is included in this release.

Systemd support was replaced by dbus:
820d2a2b3a

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 16:22:10 +01:00
Bernd Kuhls
a035a0f99f package/libnfs: bump version to 6.0.2
Removed all patches because they are included in this release.
Added two upstream patches which fix build with glibc 2.43.

Added optional dependency to gnutls introduced by upstream commit
c9215365ef

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 16:00:30 +01:00
Bernd Kuhls
5cdd2f3a50 package/libkrb5: bump version to 1.22.2
https://web.mit.edu/Kerberos/www/krb5-1.22/README-1.22.2.txt

Updated license hash due to copyright year bump:
21a2231e9e

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 15:52:15 +01:00
Bernd Kuhls
a26c13c8e1 package/piglit: bump version to git 3051e13ae1
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 15:24:51 +01:00
Bernd Kuhls
a7db1db081 package/libmodbus: bump version to 3.1.12
https://github.com/stephane/libmodbus/blob/v3.1.12/NEWS.md

Added tarball hash provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 15:14:06 +01:00
Bernd Kuhls
d332d9627c package/libeastl: bump version to 3.27.01
For release notes since version 3.12.07-3-g4546973, see:
https://github.com/electronicarts/EASTL/releases

Updated license hash due to upstream commit
c18a037660

Added patch to raise make_minimum_required in subproject EABase that was
added by upstream commit
c530255b69
using FetchContent_Declare which downloads the source during configure
so we do not have a chance to use _POST_EXTRACT_HOOKS to patch the
source code directly.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add comment in commit log about the previous version number]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 14:44:01 +01:00
Bernd Kuhls
a64d520ccc package/oath-toolkit: bump version to 2.6.14
https://codeberg.org/oath-toolkit/oath-toolkit/src/tag/v2.6.14/NEWS

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: remove sha1 from hash file which is no longer
  published in release announce
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 13:16:58 +01:00
Bernd Kuhls
658662b246 package/nano: bump to version 8.7.1
Changelog:
https://www.nano-editor.org/dist/v8/ChangeLog

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 13:05:46 +01:00
Mattias Walström
ef4f0eca1b package/linux-firmware: add option to select Airoha EN8811H
Which is a 2.5G Ethernet PHY.

Signed-off-by: Mattias Walström <lazzer@gmail.com>
[Julien: add LICENSE.airoha entry in linux-firmware.hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-28 11:15:00 +01:00
Joseph Kogut
1cc6279d11 package/mesa3d: add amd vulkan driver config
Signed-off-by: Joseph Kogut <joseph@anodize.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-27 18:54:54 +01:00
Joseph Kogut
250a4cd4cf package/mesa3d: add panfrost vulkan driver config
Signed-off-by: Joseph Kogut <joseph@anodize.com>
[Julien: add libxshmfence comment in Config.in]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-27 18:54:54 +01:00
Neal Frager
06c6451366 DEVELOPERS: add configs/versal_vpk120_defconfig for Neal Frager
Add configs/versal_vpk120_defconfig to the list of files I maintain.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-27 17:38:04 +01:00
José Luis Salvador Rufo
f721d9d935 package/zfs: bump version to 2.4.1
For release note, see:
https://github.com/openzfs/zfs/releases/tag/zfs-2.4.1

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-26 22:05:15 +01:00
Neal Frager
a4980af0df configs/versal_vpk120_defconfig: new defconfig
Add versal_vpk120_defconfig for vpk120 evaluation board.  This board has a
Versal Premium VP1202 soc, and this defconfig further extends the portfolio
of example defconfigs for Xilinx Versal SoC products.

More details about the evaluation board can be found here:
https://www.amd.com/en/products/adaptive-socs-and-fpgas/evaluation-boards/vpk120.html

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-26 21:40:17 +01:00
Bernd Kuhls
664daf6459 package/libtalloc: bump version to 2.4.4
Switched license file to upstream provided one:
https://gitlab.com/samba-team/samba/-/blob/talloc-2.4.4/lib/talloc/LICENSE

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-23 22:31:06 +01:00
Francois Perrad
347fd878d3 package/gawk: bump to version 5.4.0
release notes:
https://cgit.git.savannah.gnu.org/cgit/gawk.git/tree/NEWS?h=gawk-5.4.0

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-23 21:03:08 +01:00
Pedro Aguilar
603b0350b6 package/bdwgc: bump version to 8.2.12
Changelog: https://github.com/bdwgc/bdwgc/releases/tag/v8.2.12

This commit updates the README.QUICK license hash after year
update in upstream commit [1].

Also, the github URL [2] redirects to [3]. This commit updates
the _SITE url accordingly.

[1] c40b182fa5
[2] https://github.com/ivmai/bdwgc
[3] https://github.com/bdwgc/bdwgc

Signed-off-by: Pedro Aguilar <paguilar@paguilar.org>
[Julien:
 - update _SITE
 - add extra info in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-23 20:55:57 +01:00
Dario Binacchi
461eac6f23 package/connman: bump to version 2.0
Release notes:
https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog?h=2.0
https://git.kernel.org/pub/scm/network/connman/connman.git/log/?h=2.0

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-22 20:20:52 +01:00
Manuel Diener
6c83a0b8e5 package/python-pymodbus: bump to version 3.12.0
See the release notes here: https://github.com/pymodbus-dev/pymodbus/releases/tag/v3.12.0

Signed-off-by: Manuel Diener <manuel.diener@oss.othermo.de>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
2026-02-19 12:52:36 +01:00
Manuel Diener
314b6f6368 package/nghttp2: bump to version 1.68.0
Includes the releases with the release notes:
v1.65.0: https://github.com/nghttp2/nghttp2/releases/tag/v1.65.0
v1.66.0: https://github.com/nghttp2/nghttp2/releases/tag/v1.66.0
v1.67.0: https://github.com/nghttp2/nghttp2/releases/tag/v1.67.0
v1.68.0: https://github.com/nghttp2/nghttp2/releases/tag/v1.68.0

Signed-off-by: Manuel Diener <manuel.diener@oss.othermo.de>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
2026-02-19 10:37:48 +01:00
Bernd Kuhls
e0c14c083a package/binutils: remove support for binutils 2.43
Now that binutils 2.46.0 has been introduced and binutils 2.45.1 made
the default version, drop the oldest supported version, binutils 2.43,
keeping only the 3 last versions supported: 2.44, 2.45.1 and 2.46.0.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
2026-02-17 22:44:12 +01:00
Bernd Kuhls
3b592bd620 package/binutils: make binutils 2.45.1 be the default
Now that support for binutils 2.46.0 has been introduced, we follow our
policy of making binutils 2.45.1 the default version.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-17 22:40:46 +01:00
Bernd Kuhls
101997e334 package/binutils: add support for binutils 2.46.0
https://sourceware.org/pipermail/binutils/2026-February/148149.html

" This release contains numerous bug fixes, and also the following new
  features:

    * Support for new instructions added to AMD, ARM and RISC-V
      architectures.

    * Support for version 3 of the SFrame standard.

    * The readelf program can now display the contents of Global Offset
      Tables.

    * Improved linker tagging support."

We bring and rebased patches 0001 and 0002 that we carry for binutils
2.45.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-17 22:40:43 +01:00
Peter Korsgaard
c97a7ad4aa Update for 2026.02-rc1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026.02-rc1
2026-02-17 10:29:26 +01:00
Marcus Hoffmann
c38d7326e0 package/systemd: bump to 258.3
Removed patch that fixed building with libseccomp and old kernel headers
as systemd has fixed that upstream now.

Notable changes:
  - Add -Dlibmount=enabled to host and target build. Disabling this
    option disables building most of systemd's tools apart from
    libsystemd.

  - remove gcrypt and gnutls from dependencies and build options.
    openssl is the only supported crypto library now.

  - Disable nspawn build for host variant and add a Config.in option
    for the target variant.

  - systemd now requires kernel >= 5.4 while the recommended kernel
    version moved to >=5.7. This make systemd depend on
    BR2_TOOLCHAIN_HEADERS_AT_LEAST_5_4, removing various dependencies
    on older kernel header versions from sub options.

  - The sha256sum of LICENSES/README.md changed due to various
    license clarification, removal of some vendored files as well as
    changing some file paths. Licensing did not actually change.

For changelog, see:
https://github.com/systemd/systemd/blob/v258.3/NEWS

Tested with `./support/testing/run-tests tests.init.test_systemd`
All tests passed

One of the tests now needs a bigger rootfs size.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
[Peter: fix check-package warnings]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-17 09:45:33 +01:00
Michael Nosthoff
41eb6620f4 package/catch2: bump to version 3.13.0
changelog:
https://github.com/catchorg/Catch2/releases/tag/v3.13.0

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 22:45:41 +01:00
Giulio Benetti
50d1dec604 package/libnss: bump version to 3.120.1
For release note, see:
471dd263e1/doc/rst/releases/nss_3_120_1.rst

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: fix release notes url in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 22:41:55 +01:00
Neal Frager
13034387c4 package/binutils-bare-metal: bump to binutils 2.46.0
Bump the binutils-bare-metal package to version 2.46.0.

Release notes can be found here:
https://sourceware.org/pipermail/binutils/2026-February/148149.html

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 21:56:24 +01:00
Yann E. MORIN
388b9b5965 package/skopeo: bump to 1.22.0
Release notes:
https://github.com/containers/skopeo/releases/tag/v1.22.0

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 21:37:53 +01:00
Alexis Lothoré
3b52fe6f2e package/dtc: fix host build with glibc 2.43
When trying to build host-dtc on a host with glibc 2.43, the build fails
on the following error:

  libfdt/fdt_overlay.c: In function ‘overlay_fixup_phandle’:
  libfdt/fdt_overlay.c:424:21: error: assignment discards ‘const’
  qualifier from pointer target type [-Werror=discarded-qualifiers]
    424 |                 sep = memchr(fixup_str, ':', fixup_len);
        |                     ^
  libfdt/fdt_overlay.c:434:21: error: assignment discards ‘const’
  qualifier from pointer target type [-Werror=discarded-qualifiers]
    434 |                 sep = memchr(name, ':', fixup_len);
        |                     ^
  fdtput.c: In function ‘create_node’:
  fdtput.c:235:11: error: assignment discards ‘const’ qualifier from
  pointer target type [-Werror=discarded-qualifiers]
    235 |         p = strrchr(node_name, '/');
        |           ^
  cc1: all warnings being treated as errors
  make[2]: *** [Makefile:359: fdtput.o] Error 1
  make[2]: *** Waiting for unfinished jobs....
  cc1: all warnings being treated as errors
  make[2]: *** [Makefile:359: libfdt/fdt_overlay.o] Error 1
  make[1]: *** [package/pkg-generic.mk:273:
  /home/alexis/src/buildroot/dtc/build/host-dtc-1.7.2/.stamp_built] Error 2
  make: *** [Makefile:83: _all] Error 2

The issue can be reproduced on master with this minimal defconfig on a
host having glibc 2.43:

  BR2_x86_64=y
  BR2_TOOLCHAIN_EXTERNAL=y
  BR2_PACKAGE_QORIQ_MC_UTILS=y

(QORIQ_MC_UTILS will pull HOST_DTC)

This error is due to some functions prototype update in glibc 2.43 for
ISO C23 (see [1], point 3 in the NEWS list). The corresponding fix has
already been integrated upstream, but it has not been released since
then.

Bring the corresponding upstream patch to allow host-dtc to build on
affected hosts.

[1] https://lists.gnu.org/archive/html/info-gnu/2026-01/msg00005.html

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 21:19:46 +01:00
Titouan Christophe
31d58806d8 package/kf5/*: bump to v5.116
This is the last (known) release of KDE Frameworks 5, read the announcement
https://kde.org/announcements/frameworks/5/5.116.0/

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 20:50:01 +01:00
Peter Korsgaard
e78a710e8f configs/openblocks_a6: specify Linux license file
The used Linux kernel (4.14.336) does not contain the default license files
as those were only added in 4.16 with commit e00a844aca ("LICENSES: Add
Linux syscall note exception"), so specify the correct license file to fix:

make legal-info
..
cp: cannot stat '/path/to/output/build/linux-headers-4.14.336/LICENSES/preferred/GPL-2.0': No such file or directory

And add the sha256sum to the .hash file.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien:
 - reword commit title
 - actually add BR2_LINUX_KERNEL_LICENSE_FILES in defconfig
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 20:47:04 +01:00
Peter Korsgaard
7bbe1e0979 configs/sheevaplug: specify Linux license file
The used Linux kernel (4.14.336) does not contain the default license files
as those were only added in 4.16 with commit e00a844aca ("LICENSES: Add
Linux syscall note exception"), so specify the correct license file to fix:

make legal-info
..
cp: cannot stat '/path/to/output/build/linux-headers-4.14.336/LICENSES/preferred/GPL-2.0': No such file or directory

And add the sha256sum to the .hash file.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: reword commit title]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 20:47:04 +01:00
Peter Korsgaard
9900ba6208 linux: make license option visible for _CUSTOM_VERSION as well
Commit 50958bcdac ("linux: Add support for custom license files") added a
default value for the license files and made the option visible (E.G.
editable) when a custom VCS or tarball version is used, but it is also
needed for users of an older _CUSTOM_VERSION (E.G.  mainline release), as
the referenced files were only added in Linux 4.16 with commit e00a844aca
("LICENSES: Add Linux syscall note exception"), so change that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-16 20:47:04 +01:00
Peter Korsgaard
541986065a docs/website/news.html: add maintainer announcement
It was recently announced on the list that Marcus joined the maintainer
team, so add a news entry about it as well.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-16 20:32:54 +01:00
Bernd Kuhls
a5a1171ca3 package/postgresql: security bump version to 18.2
https://www.postgresql.org/about/news/postgresql-182-178-1612-1516-and-1421-released-3235/

Fixes CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006 &
CVE-2026-2007.

Updated license hash due to copyright year bump:
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=aa4b5ebc7640f60905cd4c71db45674e5941b611

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-16 20:06:37 +01:00
Martin Bachmann via buildroot
53445ca641 package/util-linux: correct missing comma in license info
A comma was missing after the rfkill license, correct that.

Signed-off-by: Martin Bachmann <martin.bachmann@designwerk.com>
[Peter: reword]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-16 20:03:23 +01:00
Fiona Klute
beabd8baee package/python-pyasyncore: bump version to 1.0.5
Changes:
https://github.com/simonrob/pyasyncore/releases/tag/v1.0.5

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
2026-02-16 12:44:07 +01:00
Fiona Klute
46baf529c5 package/python-pyasynchat: bump to version 1.0.5
Changes: https://github.com/simonrob/pyasynchat/releases/tag/v1.0.5

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
2026-02-16 12:43:58 +01:00
Fiona Klute
8340535bb3 package/python-textual: bump to version 7.5.0
Changes:
https://github.com/Textualize/textual/releases/tag/v7.0.1
https://github.com/Textualize/textual/releases/tag/v7.0.2
https://github.com/Textualize/textual/releases/tag/v7.0.3
https://github.com/Textualize/textual/releases/tag/v7.1.0
https://github.com/Textualize/textual/releases/tag/v7.2.0
https://github.com/Textualize/textual/releases/tag/v7.3.0
https://github.com/Textualize/textual/releases/tag/v7.4.0
https://github.com/Textualize/textual/releases/tag/v7.5.0

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
2026-02-16 11:54:58 +01:00
Fiona Klute
4142783e10 package/python-rich: bump to version 14.3.2
Changes:
https://github.com/Textualize/rich/releases/tag/v14.2.0
https://github.com/Textualize/rich/releases/tag/v14.3.0
https://github.com/Textualize/rich/releases/tag/v14.3.1
https://github.com/Textualize/rich/releases/tag/v14.3.2

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
2026-02-16 11:49:40 +01:00
Bernd Kuhls
6f1842ad2d package/kodi-pvr-mythtv: bump version to 21.2.15-Omega
https://github.com/janbar/pvr.mythtv/blob/21.2.15-Omega/pvr.mythtv/changelog.txt

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-15 23:18:16 +01:00
Bernd Kuhls
11c8c6e81d package/intel-vpl-gpu-rt: bump version to 26.1.2
https://github.com/intel/vpl-gpu-rt/releases/tag/intel-onevpl-26.1.2

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-15 23:17:53 +01:00
Bernd Kuhls
576ce5a373 package/intel-mediadriver: bump version to 26.1.2
https://github.com/intel/media-driver/releases/tag/intel-media-26.1.2

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-15 23:17:44 +01:00
Bernd Kuhls
b034877ca4 package/php: security bump version to 8.5.3
Fixes a number of hangs and crashes found by fuzzing, a stack overflow and a
use-after-free bug.

https://www.php.net/ChangeLog-8.php#8.5.3

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-15 23:14:47 +01:00
Edgar Bonet
df61ce39c1 configs/acmesystems_acqua_a5_*: remove at91bootstrap3 license
When using a specific git repo and version for at91bootstrap3,
BR2_TARGET_AT91BOOTSTRAP3_LICENSE_FILES defaults to "LICENSES/MIT.txt".
However the git version we use (namely v3.10.3) does not provide this
file. Actually, it does not provide a license file at all. This causes
‘make legal-info’ to fail with:

>>> at91bootstrap3 v3.10.3 Collecting legal info
sha256sum: /builds/buildroot.org/buildroot/output/build/at91bootstrap3-v3.10.3/LICENSES/MIT.txt: No such file or directory
ERROR: while checking hashes from boot/at91bootstrap3/at91bootstrap3.hash
ERROR: LICENSES/MIT.txt has wrong sha256 hash:
ERROR: expected: 5a3809b1c2ba13b7242572322951311c584419f1f8516f665d6c06f0668d78de
ERROR: got     :
ERROR: Incomplete download, or man-in-the-middle (MITM) attack

Let's be explicit that there is no license file to check.

Fixes:
 - https://gitlab.com/buildroot.org/buildroot/-/jobs/12992815386
 - https://gitlab.com/buildroot.org/buildroot/-/jobs/12992815390

Signed-off-by: Edgar Bonet <bonet@grenoble.cnrs.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-02-15 23:13:20 +01:00
Dario Binacchi
429bcb111b package/less: bump to version 692
For change log, see:
https://www.greenwoodsoftware.com/less/news.692.html

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-15 19:41:25 +01:00
Bernd Kuhls
6dcf28eaa8 package/coreutils: bump version to 9.10
Upstream does not provide hashes in sha1/sha256 format anymore.

https://lists.gnu.org/archive/html/coreutils-announce/2025-11/msg00000.html

https://lists.gnu.org/archive/html/coreutils-announce/2026-02/msg00000.html
"'kill' and 'uptime' are no longer built by default.  These programs
 can be built with the --enable-install-program=kill,uptime configure
 option."

Adjust coreutils.mk to install 'kill' and 'uptime'.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-15 18:15:28 +01:00
Thomas Perale
d94d4ff0a6 package/haproxy: security bump to v2.6.23
For more information on the release, see:
  - https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=c3bf1ac6709072bf9984c829c3badda5a4e8fa7e

This fixes the following vulnerability:

- CVE-2025-11230:
    Inefficient algorithm complexity in mjson in HAProxy allows remote
    attackers to cause a denial of service via specially crafted JSON
    requests.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2025-11230
  - https://www.haproxy.com/blog/october-2025-cve-2025-11230-haproxy-mjson-library-denial-of-service-vulnerability

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-15 18:10:09 +01:00
Thomas Perale
d6e219adf0 package/haproxy: ignore CVE-2023-45539
The CVE-2023-45539 has incomplete informations (see [1]) and will be
reported as exploitable by pkg-stats for haproxy v2.6.22.

The vulnerability has been fixed upstream since version 2.6.15 [2][3].

This commit mark this vulnerability as ignored.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-45539
[2] https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=832b672eee54866c7a42a1d46078cc9ae0d544d9
[3] https://security-tracker.debian.org/tracker/CVE-2023-45539

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-02-15 18:10:09 +01:00