mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-19 16:40:46 -09:00
Code Issues Packages Projects Releases Wiki Activity
68,580 Commits 6 Branches 485 Tags
3d4b54bb62d210327c7b5dfe5040590fb2657ae6
Commit Graph

68580 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Julien Olivain
3c0d12221e support/testing/tests/package/test_lzip.py: new runtime test 
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 12:28:48 +02:00
Bernd Kuhls
260d7331bc package/qt5/qt5{webview, x11extras}: fix hashes 
Buildroot commit 6b23dff9e7 forgot to
update the hashes.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 12:28:26 +02:00
Tianrui Wei
4d70454754 arch/riscv: enable RISC-V Toolchain with Vector Extension 
This commits adds support for building a RISC-V toolchain with the
vector extension, available since gcc 12.

Signed-off-by: Tianrui Wei <tianrui@tianruiwei.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 12:08:54 +02:00
Thomas Devoogdt
7252098696 package/fluent-bit: drop cxx handling 
Fluent-bit is written in pure c, so drop any cxx handling. Only the wasm
part needs c++, but that one doesn't need the fixes which are now dropped.

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 11:59:18 +02:00
Thomas Devoogdt
249efb46fc package/fluent-bit: use the system provided LuaJIT 
Luajit was not used at all when it was selected, instead fluent-bit
recompiled it without taking care of the complexities that were
handled in the luajit package. Fix this by linking dynamically to the
buildroot provided version.

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 11:59:07 +02:00
Thomas Devoogdt
0721f4e71a package/fluent-bit: bump to version 2.1.7 
Fluent Bit v2.1 is the start of the new stable series of the project.

Release Notes:

  https://fluentbit.io/announcements/v2.1.0/
  https://fluentbit.io/announcements/v2.1.1/
  https://fluentbit.io/announcements/v2.1.2/
  https://fluentbit.io/announcements/v2.1.3/
  https://fluentbit.io/announcements/v2.1.4/
  https://fluentbit.io/announcements/v2.1.5/
  https://fluentbit.io/announcements/v2.1.6/
  https://fluentbit.io/announcements/v2.1.7/

Fluent Bit v2.1.7 contains this list of upstreamed patches:

  https://github.com/fluent/fluent-bit/pull/7266
  https://github.com/fluent/fluent-bit/pull/7254
  https://github.com/fluent/fluent-bit/pull/7253

So the old patches can be dropped.

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 11:50:19 +02:00
Vincent Fazio
c7f641cbaa toolchain/toolchain-external: always call checks with dependencies 
Call these unconditionally to make sure proper support is flagged so
proper dependencies are included in the resultant filesystem.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 09:44:06 +02:00
Vincent Fazio
bdccc57816 toolchain/helpers.mk: perform reverse support checks 
Previously, it was possible for external toolchains to be used that had
support for languages or libraries that Buildroot was not aware of.

If Buildroot is not made aware of this support, it will not know to copy
the requisite libraries into the filesystem.

This is problematic as packages may perform their own checks [0] to find
out what the toolchain supports and builds will link against libraries
from the toolchain but will be missing dependencies in the filesystem.

Now, the support helpers alert the user when a toolchain supports a
language or library that has not been set in the Buildroot configuration.

Also, while we're here, add `-ffree-form` to the Fortran check to
suppress a meaningless warning.

[0]: https://bugs.busybox.net/show_bug.cgi?id=15634

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 09:43:47 +02:00
Vincent Fazio
746ac56850 toolchain/toolchain-external/toolchain-external-bootlin: flag OpenMP support 
The fragments provided by toolchains.bootlin.com were incorrectly
flagging toolchains as not having OpenMP support while they had it
[0]. This has been fixed in toolchains.bootlin.com, so a run of
gen-bootlin-toolchains has allowed to adjust the toolchain definitions
in Buildroot, leading to this commit.

OpenMP support needs to be flagged so the proper libraries get copied
into the resultant filesystem to avoid missing dependencies [1].

[0]: https://github.com/bootlin/toolchains-builder/issues/60
[1]: https://bugs.busybox.net/show_bug.cgi?id=15634

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-23 09:42:40 +02:00
Thomas Petazzoni
0cfb890a04 package/resiprocate: fix Upstream: tags in patches 
Fixes:

package/resiprocate/0002-rutil-OpenSSLInit-disable-use-of-legacy-OpenSSL-memo.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)
package/resiprocate/0003-rutil-fix-typo-in-preprocessor-condition.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)
package/resiprocate/0004-resip-stack-ssl-Security-cxx-remove-deprecated-OpenS.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)
make: *** [Makefile:1253: check-package] Error 1

In:

https://gitlab.com/buildroot.org/buildroot/-/jobs/4718833134

and while at it, we also address the same issue in patch 0001, which
was currently ignored through .checkpackageignore.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:53:54 +02:00
Thomas Petazzoni
2b22627f75 package/ejabberd: remove useless _SOURCE variable 
In commit fd29a61f01 ("package/ejabberd:
bump version to 23.04"), the EJJABERD_SOURCE variable was changed to
"ejabberd-$(EJABBERD_VERSION).tar.gz", which is the default value for
the _SOURCE variable, causing check-package to complain. Fix that by
dropping the useless variable definition.

Fixes:

  package/ejabberd/ejabberd.mk:8: remove default value of _SOURCE variable (http://nightly.buildroot.org/#generic-package-reference)

In:

  https://gitlab.com/buildroot.org/buildroot/-/jobs/4718833134

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:50:00 +02:00
Thomas Petazzoni
dc7d74bc26 package/Config.in: put llvm packages at the right place 
check-package is verifying the alphabetic ordering of package names,
not directory, so package/llvm-project/clang/Config.in should be
sorted as "clang" and not "llvm-project".

Fixes:

package/Config.in:2130: Packages in: menu "Other",
                        are not alphabetically ordered;
                        correct order: '-', '_', digits, capitals, lowercase;
                        first incorrect package: clang

In:

  https://gitlab.com/buildroot.org/buildroot/-/jobs/4718833134

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:48:45 +02:00
Bernd Kuhls
d12dd3a3fc package/kodi-inputstream-adaptive: bump version to 20.3.11-Nexus 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:31:19 +02:00
Bernd Kuhls
d1e79b4c95 package/supertuxkart: fix build with bluetooth enabled 
The wiiuse code force an out-of-tree build:
https://github.com/supertuxkart/stk-code/blob/master/lib/wiiuse/cmake/cmake-4.0.0-modules/RequireOutOfSourceBuild.cmake#L41

Fixes a build error not yet caught by the autobuilders:

-- Configuring WiiUse version 0.15.5
CMake Error at lib/wiiuse/cmake/cmake-4.0.0-modules/RequireOutOfSourceBuild.cmake:41 (message):
  You must set a binary directory that is different from your source
  directory.  You might consider

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:27:32 +02:00
Florian Fainelli
b4ab45a5c1 package/linux-tools: disable libtracevent detection 
Since upstream Linux commit 6898e60f709b0047206110d3ec9f4612210e3ff7
("perf build: If libtraceevent isn't present error the build") present
in Linux 6.4 and newer, Linux will fail to build if libtraceevent is not
present. Since we do not currently have support for libtracevent in
buildroot, pass NO_LIBTRACEVENT=1 to get perf to build again.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:26:39 +02:00
Romain Naour
38f00e4935 package/util-linux: bump version to 2.39.1 
Release notes:
https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes

"The main objective of this maintenance release is to address bugs in libmount and
resolve the regression that occurred due to the v2.39 rewrite for the new kernel
mount interface."

It also fix a build issue with waitpid program when built with a toolchain
with headers < 5.3 detected in our gitlab-ci TestDockerCompose.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4664846019

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:25:38 +02:00
Bernd Kuhls
ea3e60229b package/libopenssl: enable threads on static builds 
Revert upstream commit as proposed on the upstream bugtracker.

Fixes:
http://autobuild.buildroot.net/results/b8e/b8efae5bf6ac3b51e8443951ef1dd88824af3f2b/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:24:25 +02:00
Bernd Kuhls
598bfea96d package/tpm2-tss: security bump version to 3.2.2 
Fixes CVE-2023-22745.

Changelog:
https://github.com/tpm2-software/tpm2-tss/blob/3.2.x/CHANGELOG.md

Changed the ac_cv_prog variables due to an upstream commit which changed
the detection of groupadd/useradd:
7fde604383

Buildroot commit a85f5f2a41 bumped
tpm2-pkcs11 to 1.8.0 which includes a commit bumping the required
version of tpm2-tss to >= 3.2
940b661e33

Fixes:
http://autobuild.buildroot.net/results/6fd/6fddfee6f852ce835c5d1178e6913b6ab1b3fe50/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:23:49 +02:00
Ramon Fried
37894a5ca8 package/bitwise: update for 0.50 
Signed-off-by: Ramon Fried <rfried.dev@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:23:21 +02:00
Bernd Kuhls
d06e610d58 package/meson: bump to version 1.2.0 
Release notes: https://mesonbuild.com/Release-notes-for-1-2-0.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:23:07 +02:00
Bernd Kuhls
89260833ed package/libpthread-stubs: bump version to 0.5 
Use xz tarball.

Release notes:
https://lists.x.org/archives/xorg-announce/2023-July/003410.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:22:41 +02:00
Julien Olivain
ca3c4d0007 support/testing/tests/package/test_gnuradio.py: new runtime test 
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:14:25 +02:00
Gwenhael Goavec-Merou
e22b450692 package/gnuradio: fix gnuradio python libraries for cross-compile 
By default, module libraries have a suffix based on cpython version + host
architecture: this is fine for a native compile when these libraries are used on
the same computer (or similar computers). But when target architecture is not
the same python is unable to find libraries due to the wrong suffix and produces
unclear errors messages:

# python3
Python 3.11.3 (main, Jun 19 2023, 14:15:44) [GCC 11.4.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> from gnuradio import blocks
Traceback (most recent call last):
  File "/home/xxx/buildroot/output/build/gnuradio-3.10.4.0/gr-blocks/python/blocks/__init__.py", line 18, in <module>
ModuleNotFoundError: No module named 'gnuradio.blocks.blocks_python'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/home/xxx/buildroot/output/build/gnuradio-3.10.4.0/gr-blocks/python/blocks/__init__.py", line 22, in <module>
ModuleNotFoundError: No module named 'gnuradio.blocks.blocks_python'
>>>

By adding _PYTHON_SYSCONFIGDATA_NAME="$(PKG_PYTHON_SYSCONFIGDATA_NAME)" at configure time, sysconfig will
return correct informations (target architecture) instead of host architecture.

Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:14:22 +02:00
Christian Stewart
78d80aa395 package/go: bump to version 1.20.6 
The latest Go release, version 1.20, arrives six months after Go 1.19. Most of
its changes are in the implementation of the toolchain, runtime, and libraries.

https://go.dev/doc/go1.20
https://go.dev/doc/devel/release#go1.20.6
https://github.com/golang/go/issues?q=milestone%3AGo1.20.6+label%3ACherryPickApproved

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:01:24 +02:00
Christian Stewart
651835dbd7 package/go: adjust comments 
Adjust comments in the Go package to improve clarity:

Config.in.host:

 - Add comment mentioning list of supported architectures.

go.mk:

 - Reword comment re: copying src/ to host/
   - the previously linked issue is not relevant.
   - instead: mention that src/ is needed for stdlib.
 - Adjust comment re: adjusting file timestamps.
   - mention this is needed to avoid rebuilding stdlib

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 23:00:06 +02:00
Christian Stewart
6bedfdf691 package/go-bootstrap: split into two stages: go1.4 and go1.19.10 
Go 1.20 requires a minimum version of go 1.17.13 to bootstrap.

https://go.dev/doc/go1.20#bootstrap

As Go 1.4 was the previous version that could be compiled with C, there is now
no way to bootstrap go with a C compiler, unless we use a two-stage bootstrap:

 - build host-go-bootstrap-1.4-20170531
 - build host-go-bootstrap-1.19.10 with host-go-bootstrap-1.4-20170531
 - build host-go-1.20 with host-go-bootstrap-1.19.9

This is implemented in this commit first, before upgrading host-go to 1.20.

Note: the .patch files from package/go version 1.19.x are not necessary for
package/go-bootstrap-stage2 and have not been included there.

Previous discussion of possible alternatives:

https://lore.kernel.org/all/CA+h8R2rtcynkCBsz=_9yANOEguyPCOcQDj8_ns+cv8RS8+8t9A@mail.gmail.com/
https://lore.kernel.org/all/20220525234312.643dfc03@windsurf/T/

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-22 22:59:27 +02:00
Julien Olivain
9e380d0581 support/testing/tests/package/test_gawk.py: new runtime test 
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:35:44 +02:00
Bernd Kuhls
771fa83920 package/kodi: disable clang support 
When present kodi tries to use the target binary of clang-format
https://github.com/xbmc/xbmc/blob/master/cmake/modules/buildtools/FindClangFormat.cmake
causing a build error.

To fix the problem disable clang-format support.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:31:22 +02:00
Bernd Kuhls
9613092610 package/yaml-cpp: fix library name 
In the current state this package install libyaml-cppd.so due to "d"
being added because the variable CMAKE_DEBUG_POSTFIX is not set:
https://github.com/jbeder/yaml-cpp/blob/master/CMakeLists.txt#L137

This breaks the build of mongodb which expects the library name
libyaml-cpp.so:
https://github.com/mongodb/mongo/blob/master/SConstruct#L5090

Fixes:
http://autobuild.buildroot.net/results/304/3044d040dec090a2f528a96f201d4e554f6779b4/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:31:01 +02:00
Bernd Kuhls
1c978d782d package/wpewebkit: security bump version to 2.40.3 
Removed md5 hash.
Switch _SITE to https and update URL.

Added dependency to host-unifdef, needed since upstream commit
f76a7e30e5

Release notes:
2.40.3
- https://lists.webkit.org/pipermail/webkit-wpe/2023-June/000603.html
2.40.2
- https://lists.webkit.org/pipermail/webkit-wpe/2023-May/000598.html
  Fixes CVE-2023-28204 & CVE-2023-32373:
  https://lists.webkit.org/pipermail/webkit-wpe/2023-May/000599.html
2.40.1
- https://lists.webkit.org/pipermail/webkit-wpe/2023-April/000591.html
2.40.0
- https://lists.webkit.org/pipermail/webkit-wpe/2023-March/000589.html
2.39.91
- https://lists.webkit.org/pipermail/webkit-wpe/2023-March/000581.html
2.39.90
- https://lists.webkit.org/pipermail/webkit-wpe/2023-February/000577.html
2.39.5
- https://lists.webkit.org/pipermail/webkit-wpe/2023-January/000571.html
  USE_AVIF was enabled by default upstream:
  3d60d9f93c
  Add -DUSE_AVIF=OFF to _CONF_OPTS due to missing libavif package

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:22:31 +02:00
Bernd Kuhls
4a03340176 package/webkitgtk: bump version to 2.40.3 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:22:30 +02:00
Bernd Kuhls
c9f59f4972 package/wpebackend-fdo: bump version to 1.14.2 
Removed md5 hash.

Release notes:
https://lists.webkit.org/pipermail/webkit-wpe/2023-March/000590.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:22:28 +02:00
Bernd Kuhls
68d0528ce0 package/libwpe: bump version to 1.15.1 
Removed md5 hash.

Release notes:
1.14.1
- https://lists.webkit.org/pipermail/webkit-wpe/2023-February/000574.html
1.15.1
- https://lists.webkit.org/pipermail/webkit-wpe/2023-May/000595.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:22:27 +02:00
Bernd Kuhls
975cba201c package/kodi-peripheral-joystick: bump version to 20.1.10-Nexus 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:21:09 +02:00
Bernd Kuhls
6c78b787fb package/kodi-pvr-zattoo: bump version to 20.3.13-Nexus 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:21:04 +02:00
Francois Perrad
bc3ab165ea package/moarvm: bump to version 2023.06 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:12:47 +02:00
Francois Perrad
c7aaeff4f1 package/luajit: bump to version 8635cbabf3094c4d8bd00578c7d812bea87bb2d3 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:12:47 +02:00
Francois Perrad
2c97f3fc0b package/janet: bump to version 1.29.1 
remove merged patch

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:12:44 +02:00
Bernd Kuhls
3ecf0baa74 package/libopenssl: remove deprecated options 
Fixes configure warning:
***** Deprecated options: no-crypto-mdebug-backtrace, no-ssl2

no-ssl2 option was re-added in 2016:
e80381e1a3
"We warn that it's deprecated, and ignore it otherwise."
Quoting https://www.openssl.org/docs/man3.0/man3/SSLv23_method.html
"Support for SSLv2 [... was] removed in OpenSSL 1.1.0."
Therefore we do not need any legacy handling for
BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL2.

no-crypto-mdebug-backtrace was removed in OpenSSL 3.0:
https://github.com/openssl/openssl/blob/master/NEWS.md?plain=1#L161

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:02:37 +02:00
Bernd Kuhls
72a437101f package/{mesa3d, mesa3d-headers}: bump version to 23.1.4 
Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2023-July/000724.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:00:31 +02:00
Bernd Kuhls
7ccdeeb213 package/openssh: security bump version to 9.3p2 
Fixes CVE-2023-38408: https://www.openssh.com/txt/release-9.3p2

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 23:00:15 +02:00
Bernd Kuhls
e356dada43 package/libuhttpd: add upstream patch to fix openssl3 build 
Removed unneeded patches and replace them with an upstream commit.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-21 22:56:39 +02:00
Bernd Kuhls
65f79438ef package/intel-gmmlib: bump version to 22.3.9 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:31:04 +02:00
Bernd Kuhls
cd8028b220 package/linux-headers: drop 6.3.x option 
The 6.3.x series is now EOL upstream, so drop the linux-headers option
and add legacy handling for it.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:30:28 +02:00
Bernd Kuhls
5037426d2b {linux, linux-headers}: bump 6.{1, 4}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:30:23 +02:00
Bernd Kuhls
566e00adea package/libcurl: bump version to 8.2.0 
Changelog: https://curl.se/changes.html#8_2_0

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:29:27 +02:00
Bernd Kuhls
83651e1833 package/samba4: security bump version to 4.18.5 
Release notes: https://www.samba.org/samba/history/samba-4.18.5.html

Fixes the following CVEs:

o CVE-2022-2127:
When winbind is used for NTLM authentication, a maliciously
crafted request can trigger an out-of-bounds read in winbind
and possibly crash it.
https://www.samba.org/samba/security/CVE-2022-2127.html

o CVE-2023-3347:
SMB2 packet signing is not enforced if an admin configured
"server signing = required" or for SMB2 connections to Domain
Controllers where SMB2 packet signing is mandatory.
https://www.samba.org/samba/security/CVE-2023-3347.html

o CVE-2023-34966:
An infinite loop bug in Samba's mdssvc RPC service for
Spotlight can be triggered by an unauthenticated attacker by
issuing a malformed RPC request.
https://www.samba.org/samba/security/CVE-2023-34966.html

o CVE-2023-34967:
Missing type validation in Samba's mdssvc RPC service for
Spotlight can be used by an unauthenticated attacker to
trigger a process crash in a shared RPC mdssvc worker process.
https://www.samba.org/samba/security/CVE-2023-34967.html

o CVE-2023-34968:
As part of the Spotlight protocol Samba discloses the server-
side absolute path of shares and files and directories in
search results.
https://www.samba.org/samba/security/CVE-2023-34968.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:28:56 +02:00
Bernd Kuhls
fbec498006 package/libuhttpd: fix comment 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:19:11 +02:00
Bernd Kuhls
687f41227a package/libuhttpd: fix build with openssl3 
Fixes:
http://autobuild.buildroot.net/results/c09/c09c77e399e9ee410995a91a22306897eca667d1/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:18:19 +02:00
Bernd Kuhls
3cd014c716 package/pound: fix pcre2 detection 
Without this fix configure finds the host version of pcre2-config:
checking for pcre2-config... /home/autobuild/autobuild/instance-3/output-1/host/bin/pcre2-config

Fixes:
http://autobuild.buildroot.net/results/1b9/1b98078a28b478018cf60bae35974cb4033e2af0/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-20 23:15:04 +02:00