Commit Graph

79685 Commits

Author SHA1 Message Date
Yann E. MORIN
3d23d0a30a package/skopeo: needs NPTL
So far, skopeo inherited the thread dependency from its runtime
dependencies. However, skopeo uses pthread_getattr_np(3), which
is only available with NPTL on uClibc. glibc and musl have had
it for ages (and only implement NPTL anyway).

Fixes: https://autobuild.buildroot.org/results/b9d123986c2a65427bfca32ee3ea792a988e6890/

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit dab0feeae8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:54:13 +01:00
Marcus Hoffmann
836753465c package/python-can: remove msgpack dependency
Dependency was made optional in 4.6.0 release here:
6058ab9dfe

python-can has a lot of optional dependencies, most of which are not
represented in buildroot. As msgpack is used for the virtual multicast
udp can interface[1], which does seem like a bit of a niche usecase,
just drop the mandatory dependency without introducing a user-visible
config option to enable it.

[1] https://python-can.readthedocs.io/en/4.0.0/interfaces/udp_multicast.html

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a4cdb412f1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:35 +01:00
Marcus Hoffmann
820df57a93 support/testing: add libiio python bindings runtime test
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 61966c2133)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:31 +01:00
Marcus Hoffmann
8140148332 package/libiio: fix python bindings without glibc utils
Libiio python bindings use ctypes and specifically the find_library()
function from there to load the libiio.so shared library. This is not
working unless glibc utils (specifically ldconfig) is installed to the
target (alternatively the target would need gcc or binutils, for objdump
or ld).

The easy fix here is to just bypass the find_library() machinery
altogether as it's not needed on a buildroot system.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Tested-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 193df1cbec)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:22 +01:00
Bernd Kuhls
1b9addfc6c package/open-lldp: fix musl build with >= gcc-14.x
GCC >= 14.x is stricter amount having access to the prototypes of
functions being used, causing a build failure in open-lldp due to a
missing <string.h> include. This is only visible with musl probably
because with other C libraries <string.h> end up being included by
some other header.

Fixes:
https://autobuild.buildroot.net/results/0f8/0f88cbe9152ab816b4ae17e1d84e8257f458eb4a/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fe917c3671)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:06 +01:00
Thomas Petazzoni
c55f7eb582 toolchain/Config.in: drop BR2_TOOLCHAIN_HAS_GCC_BUG_121567
GCC bug 121567 is actually a duplicate of GCC bug 81426, which already
existed upstream, and for which we already had
BR2_TOOLCHAIN_HAS_GCC_BUG_81246.

In addition, BR2_TOOLCHAIN_HAS_GCC_BUG_81246 is correctly defined as
affecting SuperH regardless of the optimization level. Indeed, when
BR2_TOOLCHAIN_HAS_GCC_BUG_121567 was introduced, it was thought that
only -O2 and -O3 levels are affected, but -Og, -O1 and -Ofast are also
affected, causing the python3 build to fail.

Fixes:

  https://autobuild.buildroot.net/results/aca1812415ee84eef223b0fdff88f31a39775294/ (-O1 build)

  https://autobuild.buildroot.net/results/3fd91ce3ff8727d2f9c12f6721df922c60282d70/ (-Ofast build)

  https://autobuild.buildroot.net/results/e5536dcf598a51f5006343513a76f4e223e80a55/ (-Og build)

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2667cab664)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:56 +01:00
Thomas Petazzoni
f3a7d86a7c package/python3: make SuperH tweak actually effective
In commit a68899d49e ("package/python3:
work around GCC bug 121567"), we introduced a work around for a gcc
bug, by reducing to -O1 the optimization level on SuperH.

However, it turns out that this is not sufficient, as the build will
only succeeded at -O0.

Fixes:

  https://autobuild.buildroot.net/results/31f/31f34a983036b4135c12e5797b5c2258ab33e6c2/

Which is a config with BR2_OPTIMIZE_2=y, which means
BR2_TOOLCHAIN_HAS_GCC_BUG_121567=y, and therefore -O1 is passed, but
still the build fails. At -O0 the build doesn't fail.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0f938aed25)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:50 +01:00
Sébastien Szymanski
42f81fae5b package/pixman: really enable NEON support on AArch64
The test to enable NEON on AArch64 is as following:

ifeq ($(BR2_aarch64)$(BR2_ARM_CPU_HAS_NEON),yy)

It cannot be to true as $(BR2_aarch64) and $(BR2_ARM_CPU_HAS_NEON) are
mutually exclusive. NEON is compulsory on AArch64 so remove
$(BR2_ARM_CPU_HAS_NEON) from the test.

Fixes: ba2fb599cd ("package/pixman: bump to version 0.44.2")
Signed-off-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d297569eb4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:45 +01:00
Bernd Kuhls
3a2608c47a package/libselinux: allow pip to use system-provided packages
Since the bump of pip to version 25.3 in commit
285097051d, the build of the Python
bindings of libselinux is broken for both the host and target
variants.

For the host variant, because "pip install" no longer finds the
system-provided setuptools and tries to download setuptools by itself,
causing build issues because our host-python doesn't have SSL support:

  Could not fetch URL https://pypi.org/simple/setuptools/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/setuptools/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping

For the target variant, because "pip install" no longer finds the
sysconfigdata package:

  ModuleNotFoundError: No module named '_sysconfigdata__linux_sparc64-linux-gnu'
  [end of output]

We fix this by taking a patch from Debian, which is slightly tweaked
to also cover our host package (the original Debian patch was passing
--no-build-isolation only when DESTDIR was not empty, but in Buildroot
host packages are built with DESTDIR empty, and we do need
--no-build-isolation).

Fixes:

  https://autobuild.buildroot.net/results/0e9de0c0d8b6ec57eea9f8834f02076b296ba4f1/ (host-libselinux)
  https://autobuild.buildroot.org/results/1b87c659f1901b0bf33fa4a2ff0ed40b13114bba/ (libselinux)

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-Authored-By: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0e5eef911c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:29 +01:00
Thomas Perale
79b670f497 package/linenoise: add CPE
The CPE 'cpe:2.3:a:antirez:linenoise:1.0:*:*:*:*:*:*:*' is valid for the
package linenoise [1].

Since the latest version is '1.0' since 2015 the CPE_ID_VERSION is set
to that version.

The CVE that applies on version 1.0 were checked with the 'cve-check'
script:

```
echo '{"components": [{"bom-ref": "linenoise", "name": "linenoise", "version": "1.0", "cpe": "cpe:2.3:a:antirez:linenoise:1.0:-:*:*:*:*:*:*"}]}' | support/scripts/cve-check | jq -r '.vulnerabilities[].id'
```

Only the CVE-2025-9810 exists and that was fixed in [2].

[1] https://nvd.nist.gov/products/cpe/detail/10423C23-6AAA-439E-B723-1FCDEB3A769F
[2] 3c7cbf97d7 package/linenoise: security bump to version e26268de5e

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2668d121e5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:50:58 +01:00
Thomas Petazzoni
d943f82156 package/opencv3: drop support for ffmpeg
opencv3's code is not compatible with newer versions of ffmpeg, and
opencv3 is no longer maintained, so we have no choice but to disable
its ffmpeg support.

Fixes:

  https://autobuild.buildroot.net/results/9ae3911583cccb6362f33cd82e5eaafb059fdc76/

It's not clear which ffmpeg version bump broken the build exactly, but
this issue is definitely present in 2025.02.x as the following
defconfig fails to build in a similar way on 2025.02.x:

 BR2_aarch64=y
 BR2_TOOLCHAIN_EXTERNAL=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_AARCH64_GLIBC_STABLE=y
 BR2_PACKAGE_FFMPEG_NONFREE=y
 # BR2_PACKAGE_FFMPEG_FFMPEG is not set
 # BR2_PACKAGE_FFMPEG_INDEVS is not set
 # BR2_PACKAGE_FFMPEG_OUTDEVS is not set
 BR2_PACKAGE_OPENCV3=y
 BR2_PACKAGE_OPENCV3_LIB_VIDEOIO=y
 BR2_PACKAGE_OPENCV3_BUILD_PERF_TESTS=y
 BR2_PACKAGE_OPENCV3_WITH_FFMPEG=y
 BR2_PACKAGE_OPENCV3_INSTALL_DATA=y

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ef538cf4d9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:50:44 +01:00
Thomas Petazzoni
5d83145af3 package/opencv3: drop support for protobuf
The protobuf support breaks the build, as protobuf includes
libabseil-cpp headers, which now require C++14. opencv3 doesn't have
any ENABLE_CXX14 option, so for the time being, disable protobuf
support until someone bothers enough to fix this up.

While we suspect a libabseil-cpp version bump to be responsible for
the issue, we are not 100% sure. However, the issue is definitely
present in Buildroot 2025.02.x, as it can be reproduced using the
following defconfig:

BR2_aarch64=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PACKAGE_OPENCV3=y
BR2_PACKAGE_OPENCV3_LIB_SHAPE=y
BR2_PACKAGE_OPENCV3_LIB_STITCHING=y
BR2_PACKAGE_OPENCV3_LIB_SUPERRES=y
BR2_PACKAGE_OPENCV3_LIB_TS=y
BR2_PACKAGE_OPENCV3_LIB_VIDEOSTAB=y
BR2_PACKAGE_OPENCV3_WITH_PROTOBUF=y

Fixes:

  https://autobuild.buildroot.net/results/39432e7746e6bc5224592a7d2f744ca992bd529a/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0865927da4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:46:40 +01:00
Thomas Petazzoni
ef6c4dddf3 package/cppcms: change upstream to Github, bump to 2.0.1
cppcms.com now points to a Github page at
https://github.com/artyom-beilis/cppcms which has a 2.0.1 version, so
let's use that. The number of differences to 2.0.0.beta2 is very
small:

$ git log --online v2.0.0.beta2..v2.0.1
b872972 (tag: v2.0.1, origin/master, origin/HEAD, master) Version to 2.0.1
a1914f7 (tag: v2.0.0) Replaced system category with one from predating C++11 (v1.2) because std::system_category does not translate WSAGetLastError results
c4febcc Merge pull request #104 from dreaming-augustin/upstream
922cd49 Python 3.12 compatibility: wrap regex in r''.
a11e9d4 Merge branch 'cpp11'
3000bc6 (origin/1.2_updates) Merge pull request #99 from dreaming-augustin/master
44e24c7 [#89] cppcms_error fix typo + consistent  messages
a6d5575 (origin/cpp11) Added backtrace to system error
b3aef3b Fixed missing include for stripped down build
463a9a6 Removed IPV6 due to travis limitations
f8163c6 Merges from cpp11
31d4fe7 Added verbose log on failure
90bc996 Added Linux to build matrix - so I have fallback if normal build environment fails
f78ee39 Added Readme for github
a737d5d Merged python3 compatibility from master
0c67544 Support of python 2.7 and python 3
0d121a7 Python3 compatibility
2fc7e38 Python3 compatibility
d745869 python3 fix for tmp_cc

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 29641d1675)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:42:48 +01:00
Thomas Petazzoni
a7eafdcb0e package/cppcms: fix build with recent versions of ICU
Since Buildroot commit dcee99507c that
bumped package/icu to version 77-1, the build of cppcms with ICU
support enabled fails.

Indeed, ICU now requires C++17, and while cppcms.mk has some logic to
get C++ flags using icu-config, the -std=c++17 gets ultimately
overridden by the built-in -std=c++11 flag encoded in cppcms
CMakeLists.txt.

To fix this, we have submitted a patch upstream that ensures the
CMAKE_CXX_FLAGS passed on the command line take precedence over the
built-in flags defined in cppcms CMakeLists.txt.

Fixes:

  https://autobuild.buildroot.net/results/9c34a08ea02499b28093ad3fa184cee10b2883ac/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5a8811cade)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:42:32 +01:00
Thomas Petazzoni
f4edd12ac1 package/cppcms: add patch to fix build with CMake 4
Fixes:

  https://autobuild.buildroot.net/results/5f0a3a525866519ee12acb9997d217b4a8b870fe/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fa6a81b4d9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:42:26 +01:00
Bernd Kuhls
c3846436d5 package/trinity: bump version
Switched _SITE to github, old project site is down.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: change _VERSION to use 'git describe --abbrev=40' format]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 652dbe71c3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:41:16 +01:00
Giulio Benetti
8ec8167d80 DEVELOPERS: add Giulio Benetti to package dash
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 92f2cb5045)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:40:04 +01:00
Giulio Benetti
71fa1a61c5 DEVELOPERS: add Giulio Benetti for package zlib-ng
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39bcd45891)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:50 +01:00
Giulio Benetti
980ee4e02f DEVELOPERS: add Giulio Benetti to vim
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit edf4a89aaf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:41 +01:00
Giulio Benetti
d362a9c2f6 DEVELOPERS: add Giulio Benetti to package util-linux
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 85a8faec19)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:34 +01:00
Giulio Benetti
262a051134 DEVELOPERS: add Giulio Benetti to tmux
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit dca8423fbc)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:26 +01:00
Peter Seiderer
3b276e91c9 package/rpi-firmware: bump version to 063bcab
Version 063bcab matches with kernel 6.12.61

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c1ab01cdc8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:16 +01:00
Peter Seiderer
61261f2cad configs/raspberrypi*: bump kernel version to 21b4101 (6.12.61)
Now based on 6.12.61 (from 6.12.41)

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1f5a9ab083)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:08 +01:00
Thomas Petazzoni
d6bba36979 package/vim: inline the VIM_REMOVE_DOCS variable
The VIM_REMOVE_DOCS variable is currently a post install target hook,
but it can just as well be done inside VIM_INSTALL_TARGET_CMDS
directly.

The hook was registered conditionally based on BR2_PACKAGE_VIM_RUNTIME
because prior to commit f7a07f42f7, the
hook's logic was:

    find $(TARGET_DIR)/usr/share/vim -type f -name "*.txt" -delete

which was failing if BR2_PACKAGE_VIM_RUNTIME was not enabled, as
$(TARGET_DIR)/usr/share/vim would not exist.

But since this commit, the hook logic is:

    $(RM) -rf $(TARGET_DIR)/usr/share/vim/vim*/doc/

which obviously won't fail if $(TARGET_DIR)/usr/share/vim doesn't
exist.

So let's simplify the whole logic.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7bcc99b57b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:36:37 +01:00
Thomas Petazzoni
6578fa8677 package/vim: refactor install target logic
Instead of calling $(MAKE) multiple times, let's call it once, with
all installation targets needed. We introduce a VIM_INSTALL_TARGETS
variable to collect the list of make install targets that need to be
invoked.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 525a234303)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:36:12 +01:00
Thomas Petazzoni
3bfab7709d package/vim: use more conventional $(MAKE) construct
In Buildroot, we more commonly do:

   $(MAKE) -C $(@D)/src

than:

   cd $(@D)/src; $(MAKE)

so let's adopt this more conventional style.

This coding style in vim.mk dates from when the package was introduced
by Peter Korsgaard back in 2010.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 21e613753e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:36:04 +01:00
Thomas Petazzoni
c33f9a2871 package/vim: fix reinstallation
While not very common, it is nice when package re-installation
works. Unfortunately the "installlinks" target of vim installs links
with "ln -s", causing a package reinstallation to fail with:

cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim ex
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim view
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim rvim
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim rview
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim vimdiff
ln: failed to create symbolic link 'ex': File exists
ln: failed to create symbolic link 'view': File exists
make[2]: *** [Makefile:2749: /home/thomas/buildroot/br/output-all/target/usr/bin/ex] Error 1
make[2]: *** Waiting for unfinished jobs....
make[2]: *** [Makefile:2752: /home/thomas/buildroot/br/output-all/target/usr/bin/view] Error 1
ln: failed to create symbolic link 'rvim': File exists
ln: failed to create symbolic link 'rview': File exists

To fix this, we remove the target links before proceeding with the
installation.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 67e84345c1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:35:54 +01:00
Viacheslav Bocharov
8718e8be5e package/rtl8822cs bump driver version to latest with support kernel 6.18
Update rtl8822cs driver for Kernel 6.17/6.18
Fixes: https://autobuild.buildroot.org/results/bafd5af112e49359201580ece3a12bc8724914fe/

Signed-off-by: Viacheslav Bocharov <adeep@lexina.in>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 57395ccf91)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:35:28 +01:00
Giulio Benetti
2853c71b31 DEVELOPERS: add Giulio Benetti to libtirpc and rpcbind
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e9786cbb7b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:35:18 +01:00
Marcus Hoffmann
60d6b2a58c package/python-django: security bump to 5.2.9
Fixes:
* CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL
* CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer

Full release notes: https://docs.djangoproject.com/en/6.0/releases/5.2.9/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2622f9ca25)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:33:31 +01:00
Thomas Perale
70072dc0e2 package/python-filelock: fix CVE-2025-68146
Fixes the following vulnerability:

- CVE-2025-68146

A Time-of-Check-Time-of-Use (TOCTOU) race condition allows local
attackers to corrupt or truncate arbitrary user files through symlink
attacks.

For more informations, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-68146
  - 18a9988008

(cherry picked from commit d9c1379d1f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:30 +01:00
Bernd Kuhls
9a315994a6 package/libmbus: bump version to 0.9.0
Release notes:
https://github.com/rscada/libmbus/blob/0.9.0/release_notes.txt

Downloading the source tarball is broken since at least Oct 30th, 2024
as reported by the buildroot autobuilders:
https://autobuild.buildroot.net/?reason=libmbus-0.8.0&step=50&start=50

Switching to the github helper provides the correct source code but the
tarball downloaded has a different hash. A quick search did not provide
alternative download locations for the original tarball
libmbus-0.8.0.tar.gz.

To solve the broken build we do not only switch _SITE to github but also
bump the package to 0.9.0 and add autoreconf which needs two directories
being created in _POST_PATCH_HOOKS. One missing directory was already
reported upstream: https://github.com/rscada/libmbus/issues/179

Updated license hash due to upstream commit:
ab8919136d

Fixes:
https://autobuild.buildroot.net/results/91a/91a82dc73bf87cf1969cd6a2ddea1809ab9a1613/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: change release notes url to use tag]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e42b3de3b1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:27 +01:00
Bernd Kuhls
ca0f992fe9 package/v4l2loopback: bump version to 0.15.3
Changelog:
https://github.com/v4l2loopback/v4l2loopback/blob/v0.15.3/ChangeLog

This new version fixes compilation errors with gcc >= 14.

Fixes:
https://autobuild.buildroot.net/results/910/910e27b189c62f977bc42f7c53471334eb765168/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add comment about the fixed issue]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5ab46339aa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:25 +01:00
Giulio Benetti
7be6c54266 package/rtl8723bu: bump to 2025-12-14 version
This version allows to build with Linux 6.18

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e6499d14f5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:23 +01:00
Giulio Benetti
aed6e63fb8 package/rtl8821cu: bump to version 2025-12-14
With this commit it builds with Linux 6.18

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7b22fcfeff)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:21 +01:00
Fiona Klute
7b000714da support/testing: add tests for FIT hash support in package/uboot-tools
The tests check if all supported hash algorithms are usable in
mkimage, for both host and target packages. Additionally, as a
necessary tool, it verifies the previous fix for FIT output from
dumpimage.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
[Julien: use builtin kernel for faster testing]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2dbe71dba6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:21 +01:00
Fiona Klute
cdadcf814a support/testing: infra: add host bin dir to PATH when running host command
Some host commands need to call other host commands: For example,
"mkimage" from host-uboot-tools needs to run "dtc". This would fail or
call system commands without adding the host bin dir to PATH.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
[Julien: use python functions/constants to build path]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit befb6ae81d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:18 +01:00
Fiona Klute
6406861a56 package/uboot-tools: include FIT print support if FIT support is enabled
Otherwise "dumpimage -l" produces only a newline when processing a FIT
image.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39b925a0a6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:16 +01:00
Yegor Yefremov
cd84d000ce package/libconfig: bump to version 1.8.2
For change log, see:

https://github.com/hyperrealm/libconfig/releases/tag/v1.8.2

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Reviewed-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d40462ac54)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:14 +01:00
Thomas Petazzoni
45e06e7e57 package/mesa3d: add missing dependencies for imagination driver
The build of the following basic configuration enabling the
imagination Vulkan driver

BR2_aarch64=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_AARCH64_GLIBC_STABLE=y
BR2_PACKAGE_MESA3D=y
BR2_PACKAGE_MESA3D_VULKAN_DRIVER_IMAGINATION=y

fails with:

meson.build:847:3: ERROR: Feature llvm cannot be disabled: CLC requires LLVM

Adding just LLVM as a dependency is not enough, as then libclc is
needed, then LLVMSPIRVLib, then clangBasic, then the pco_clc tool.

In fact, like the Panfrost driver, building the Imagination driver
requires building host tools using host-mesa3d. To fix this we:

- Make the BR2_PACKAGE_MESA3D_OPENCL option selectable

- Make sure that BR2_PACKAGE_MESA3D_VULKAN_DRIVER_IMAGINATION depends
  on BR2_PACKAGE_MESA3D_LLVM and select
  BR2_PACKAGE_MESA3D_NEEDS_PRECOMP_COMPILER (the latter being needed to
  build host-mesa3d)

- Make sure the host-mesa3d builds imagination
  tools (-Dtools=imagination) and install
  pco_clc (HOST_MESA3D_INSTALL_PCO_CLC). This requires introducing
  HOST_MESA3D_TOOLS as a list of tools to build, which then gets used
  to construct the -Dtools argument, as we can now have both
  "panfrost" and "imagination" in this list.

With all this, the defconfig above builds successfully.

This has been broken since Buildroot commit
5e818c16a3, which introduced the vulkan
driver support.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e1d159c5d5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 17:32:52 +01:00
Francois Perrad
b9238d89a4 package/linenoise: security bump to version e26268de5e
Fixes:
CVE-2025-9810: TOCTOU in linenoiseHistorySave
https://www.cve.org/CVERecord?id=CVE-2025-9810

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3c7cbf97d7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 17:32:52 +01:00
Bernd Kuhls
14e37d0278 package/php: security bump version to 8.4.16
https://www.php.net/ChangeLog-8.php#8.4.16
https://news-web.php.net/php.announce/478

Fixes CVE-2025-14177, CVE-2025-14178, CVE-2025-14180 & CVE-2025-67899.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1525803179)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 17:32:52 +01:00
Thomas Petazzoni
656e2d012e package/sway: properly propagate wlroots dependencies
Commit 00fb3a57cb added a wlroots ->
libgbm dependency, but forgot to propagate it to package/sway.

Cc: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Adrian Perez de Castro <aperez@igalia.com>
Reviewed-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Tested-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6c512c8be0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 16:31:11 +01:00
Thomas Petazzoni
792d1b9011 package/cage: properly propagate wlroots dependencies
Commit 00fb3a57cb added a wlroots ->
libgbm dependency, but forgot to propagate it to package/cage.

Fixes:

  https://autobuild.buildroot.net/results/dc185c3d4886e9cfd9e6f46b50b864e5b2f28605/

Cc: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3d7261b27a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 16:31:03 +01:00
Bernd Kuhls
cff225bfb3 package/exim: security bump version to 4.99.1
Release notes:
https://lists.exim.org/lurker/message/20251217.151548.85d1a2bc.en.html

Fixes CVE-2025-67896:
https://code.exim.org/exim/exim/src/branch/exim-4.99+fixes/doc/doc-txt/exim-security-2025-12-09.1/report.txt

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a058aa701)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 16:30:40 +01:00
Thomas Devoogdt
59d867fd97 package/libfcgi: security bump to 2.4.7
This is a security bump to fix CVE-2025-23016.

See:
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.7

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 626bc1f199)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 10:32:03 +01:00
Marcus Hoffmann
ce4465f040 package/zic: bump to 2025c
Release notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2dc61b52e8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-24 15:13:19 +01:00
Marcus Hoffmann
286173ff2c package/tzdata: bump to 2025c
Release Notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5cda56f05e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-24 15:13:11 +01:00
Matt Johnston
808cb90403 package/dropbear: security bump to version 2025.89
Fixes CVE-2025-14282
https://security-tracker.debian.org/tracker/CVE-2025-14282
CVE-2019-6111 for scp
https://security-tracker.debian.org/tracker/CVE-2019-6111

Release notes:
https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2025.89

Signed-off-by: Matt Johnston <matt@codeconstruct.com.au>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 700fcc4847)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-24 15:12:06 +01:00
Thomas Devoogdt
053eb1a984 package/fluent-bit: security bump to 4.2.0
This is a major release that introduces new features,
including one highlighted in the release notes:

"The v4.2 release introduces a powerful new Direct Routing
 capability that allows inputs to specify routes directly to
 outputs, bypassing the traditional routing mechanism."

But it also brings some security fixes. Not all of them are relevant,
but some piece of lecture can be found here [1]. It fixes the
following CVEs:

CVE-2025-12977
CVE-2025-12978
CVE-2025-12972
CVE-2025-12970
CVE-2025-12969

News:
- https://fluentbit.io/announcements/v4.1.0/
- https://fluentbit.io/announcements/v4.1.1/
- https://fluentbit.io/announcements/v4.2.0/

The patch 0001-plugins-kafka-fix-cmake-cross-compile-error.patch
can be dropped as it has been merged upstream [2].

[1] https://www.theregister.com/2025/11/24/fluent_bit_cves/
[2] https://github.com/fluent/fluent-bit/pull/9600

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7a037d0913)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 17:03:40 +01:00