Commit Graph

62311 Commits

Author SHA1 Message Date
Fabrice Fontaine
4b191c4e8b package/cppcms: zlib is optional, not mandatory
zlib is not mandatory since at least version 1.0.5 and
fc1c25f9c7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit f413bf2c64)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 21:16:45 +02:00
Fabrice Fontaine
2e088c7aca package/htop: use official tarball
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c49b46e9cc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 19:50:59 +02:00
Fabrice Fontaine
4bba8d0b64 package/htop: fix hwloc static build
Fix the following static build failure with hwloc raised since commit
c83bf97206:

checking for hwloc_get_proc_cpubind in -lhwloc... no
configure: error: can not find required library libhwloc

Fixes:
 - http://autobuild.buildroot.org/results/5d815ec08c580005a863df6ac9ac29deff7d4128

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit dd6c4a9929)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 19:48:44 +02:00
Fabrice Fontaine
e67eaafd6f package/htop: fix sensors option
Commit 811846df48 wrongly used
--{with,without}-sensors instead of --{dis,en}able-sensors

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a8289875b6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 19:47:09 +02:00
Romain Naour
8153c3620a package/python-{treq, twisted}: add a comment to use the same version
As reported by [1], python-twisted and python-treq must use the same
version because its the same project:

https://github.com/twisted/twisted
https://github.com/twisted/treq

We have to update python-treq to version 22.2.0 [2] otherwise we have
a runtime issue:

Traceback (most recent call last):
  File "/root/sample_python_treq.py", line 2, in <module>
    import treq
  File "/usr/lib/python3.10/site-packages/treq/__init__.py", line 5, in <module>
  File "/usr/lib/python3.10/site-packages/treq/api.py", line 5, in <module>
  File "/usr/lib/python3.10/site-packages/treq/client.py", line 11, in <module>
ImportError: cannot import name '_PY3' from 'twisted.python.compat' (unknown
location)

The comment should avoid forgeting one of them while upgrading or
backporting version bump.

[1] http://lists.busybox.net/pipermail/buildroot/2022-February/637505.html
[2] https://github.com/twisted/treq/releases/tag/release-22.2.0
[3] https://gitlab.com/buildroot.org/buildroot/-/jobs/2179206653

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5140d10bf6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:48:03 +02:00
Peter Seiderer
cea4406680 package/apr-util: change URL from http to https
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 15f76e16b3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:45:29 +02:00
Peter Seiderer
1d8411cf91 package/apr: change URL from http to https
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 05f1a88f49)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:45:20 +02:00
Markus Mayer
15d4f341ae package: replace git:// URLs with https:// URLs where possible
Replace the remaining git:// URLs with their https:// equivalents as
this is more secure and also more palatable to corporate firewalls.

Signed-off-by: Markus Mayer <mmayer@broadcom.com>
[yann.morin.1998@free.fr: convert dahdi-linux too]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6626bf7c5f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:41:58 +02:00
Thomas Petazzoni
eae86599ca support/scripts/pkg-stats: reimplement CPE parsing in pkg-stats
pkg-stats currently uses the services from support/scripts/cpedb.py to
match the CPE identifiers of packages with the official CPE database.

Unfortunately, the cpedb.py code uses regular ElementTree parsing,
which involves loading the full XML tree into memory. This causes the
pkg-stats process to consume a huge amount of memory:

thomas   1310458 85.2 21.4 3708952 3450164 pts/5 R+   16:04   0:33  |   |   \_ python3 ./support/scripts/pkg-stats

So, 3.7 GB of VSZ and 3.4 GB of RSS are used by the pkg-stats
process. This is causing the OOM killer to kick-in on machines with
relatively low memory.

This commit reimplements the XML parsing needed to do the CPE matching
directly in pkg-stats, using the XmlParser functionality of
ElementTree, also called "streaming parsing". Thanks to this, we never
load the entire XML tree in RAM, but only stream it through the
parser, and construct a very simple list of all CPE identifiers. The
max memory consumption of pkg-stats is now:

thomas   1317511 74.2  0.9 381104 152224 pts/5   R+   16:08   0:17  |   |   \_ python3 ./support/scripts/pkg-stats

So, 381 MB of VSZ and 152 MB of RSS, which is obviously much better.

The JSON output of pkg-stats for the full package set, before and after
this commit, is exactly identical.

Now, one will probably wonder why this isn't directly changed in
cpedb.py. The reason is simple: cpedb.py is also used by
support/scripts/missing-cpe, which (for now) heavily relies on having
in memory the ElementTree objects, to re-generate a snippet of XML
that allows us to submit to NIST new CPE entries.

So, future work could include one of those two options:

 (1) Re-integrate cpedb.py into missing-cpe directly, and live with
     two different ways of processing the CPE database.

 (2) Rewrite the missing-cpe logic to also be compatible with a
     streaming parsing, which would allow this logic to be again
     shared between pkg-stats and missing-cpe.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
[yann.morin.1998@free.fr:
  - add missing import of requests
  - import CPEDB_URL from cpedb, instead of duplicating it
  - fix flake8 errors
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit bd1798ad95)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:39:01 +02:00
Thomas Petazzoni
745e021545 support/scripts/pkg-stats: add a timeout on HTTP requests for upstream URLs
Some upstream sites are very slow to respond, and the default timeout
of 300 seconds of the aiohttp.ClientSession() is too long. Let's
reduce it to 15 seconds.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 387c496b98)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:38:50 +02:00
Thomas Petazzoni
1fe0e5d21d support/scripts/pkg-stats: allow disabling package warnings retrieval
This is useful when debugging/developing the pkg-stats script.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 1adcf56598)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:38:44 +02:00
Thomas Petazzoni
8f53218b70 support/scripts/pkg-stats: allow disabling CPE matching
This is useful when debugging/developing the pkg-stats script.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit cd8a576c6d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:38:39 +02:00
Fabrice Fontaine
6a826c6d23 package/python-paramiko: security bump to version 2.10.3
Fix CVE-2022-24302: Creation of new private key files using PKey
subclasses was subject to a race condition between file creation & mode
modification, which could be exploited by an attacker with knowledge of
where the Paramiko-using code would write out such files.

https://github.com/paramiko/paramiko/blob/2.10.3/sites/www/changelog.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ae699d7f9a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:32:29 +02:00
Bernd Kuhls
0612a2231f package/libzlib: security bump version to 1.2.12
Fixes CVE-2018-25032.

Release notes:
http://madler.net/pipermail/zlib-announce_madler.net/2022/000012.html

Changelog: https://github.com/madler/zlib/blob/master/ChangeLog

Added upstream patch to fix build error.

Updated license hash due to version bump, reformatted hashes:
21767c654d

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a7fa40a9c1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:31:06 +02:00
Quentin Schulz
143097f780 package/qt5wayland: fix compilation when libxkbcommon is disabled
When libxkbcommon is disabled, QT_CONFIG(xkbcommon) is not defined which
means the variable and function pointer in this patch are compiled out
from the header, but the cpp code actually still made use of it. This
patch fixes the build issue when libxkbcommon package is not to be
built.

This patch was taken from (merged):
https://codereview.qt-project.org/c/qt/qtwayland/+/344916

Cc: Quentin Schulz <foss+buildroot@0leil.net>
Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 1da911cbde)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:27:13 +02:00
Quentin Schulz
b27f378ff7 package/qt5base: fix race with libxkbcommon
qt5wayland package currently has a bug if the xkbcommon Qt config is not
enabled which highlighted a race issues between qt5base, libxkbcommon
and qt5wayland.

qt5wayland has a dependency on libxkbcommon package if it's enabled.
qt5base only has a dependency on libxkbcommon if xcb support is to be
enabled.

If libxkbcommon package is built before qt5base, qt5base will detect it
during its configure step and enable the Qt config accordingly. This
will make it available to qt5wayland afterwards, even if xcb support is
not enabled in Buildroot Kconfig.

However, if qt5base is built before libxkbcommon is, qt5base will not
advertise support of xbcommon feature to qt5wayland (which will fail its
build because of a bug in the source code).

Since the package build order should not impact the outcome of the
build, let's explicit the dependency if and only if libxkbcommon package
is to be compiled at some point in time so that at least this feature is
not susceptible to races.

Move the xkbcommon entries out of the BR2_PACKAGE_QT5BASE_XCB condition,
instead make them depend on BR2_PACKAGE_LIBXKBCOMMON. Since
BR2_PACKAGE_QT5BASE_XCB selects BR2_PACKAGE_LIBXKBCOMMON they are still
included if xcb is selected.

Cc: Quentin Schulz <foss+buildroot@0leil.net>
Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
[Arnout: remove the already existing xkbcommon entries]
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit ba8f35eda6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-04 14:26:59 +02:00
Fabrice Fontaine
99cf9381a0 package/python-treq: bump to version 22.2.0
- hyperlink is a dependency since version 20.4.0 and
  5475def96f
- six is not a dependency since version 21.5.0 and
  22bdb399a0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 933447c27c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-04-03 09:02:33 +02:00
Quentin Schulz
6ab6120d69 package/qt5/qt5base: update comment pointing to patches fixing CVE-2021-38593
The patches aren't in Buildroot anymore but in the qt5base sources
directly, so let's give the commit hash of the fixes instead.

Cc: Quentin Schulz <foss+buildroot@0leil.net>
Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit be3f9cde29)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 17:46:45 +02:00
Quentin Schulz
3b6347fca9 package/qt5/qt5base: security bump
This fixes CVE-2022-25255 and CVE-2022-25634.

Cc: Quentin Schulz <foss+buildroot@0leil.net>
Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 1cae2aa844)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 17:46:34 +02:00
James Hilliard
a43cd47910 package/qt5/qt5base: bump to version d16bf02a11953dcac01dca73e6f3778f293adefe
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 8d88189202)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 17:45:52 +02:00
Fabrice Fontaine
fc1f285210 package/netatalk: security bump to version 3.1.13
- Fixes CVE-2021-31439, CVE-2022-23121, CVE-2022-23123, CVE-2022-23122,
  CVE-2022-23125, CVE-2022-23124 and CVE-2022-0194
- Drop second patch (already in version)
- Add tarball sha256
- Update indentation in hash file (two spaces)

https://sourceforge.net/projects/netatalk/files/netatalk/3.1.13

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 5ed1baa7e2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 14:17:19 +02:00
Fabrice Fontaine
f93f4dc615 package/matio: security bump to version 1.5.22
- Fixed heap-based buffer overflows when reading (crafted) MAT file
  (CVE-2020-36428, CVE-2021-36977)
- Update hash of COPYING (year updated and contributors added:
  a3730c0979)

https://github.com/tbeu/matio/releases/tag/v1.5.22

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit f33260685b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 14:14:37 +02:00
James Hilliard
5045b4de6d package/systemd: bump to version 250.4
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit ea04ee34f0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 14:07:02 +02:00
Fabrice Fontaine
a51644aa58 package/opus: enable custom modes
Enable custom modes to avoid the following build failure with jack2
raised since commit 618a23100f:

Checking for header opus/opus_custom.h   : not found
The above check failed, but the checkee is required for --opus.

It should be noted that before this commit, opus was silently disabled

Fixes:
 - http://autobuild.buildroot.org/results/b1c050ccd6152c43a6da5f5d2174c3cc0dc2ff3e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 92e436b73d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:56:10 +02:00
Francois Perrad
898593378c package/luasec: bump to version 1.0.2
diff LICENSE:
-LuaSec 1.0 license
+LuaSec 1.0.2 license

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 6b609e77bf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:52:35 +02:00
Fabrice Fontaine
2a80eca365 package/vim: security bump to version 8.2.4632
Fix CVE-2022-0943: Heap-based Buffer Overflow occurs in vim in GitHub
repository vim/vim prior to 8.2.4563.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 7b66fdc55f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:48:42 +02:00
James Hilliard
e9d3f2e881 package/meson: bump to version 0.61.4
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 148e2115c0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:47:26 +02:00
Peter Seiderer
f2e9430366 package/wireshark: fix compile with ccache enabled
- use HOSTCC_NOCCACHE (instead of HOSTCC) for LEMON_C_COMPILER

Fixes:
  [...] /usr/bin/cmake [...] -DLEMON_C_COMPILER=.../host/bin/ccache /usr/bin/gcc [...]
  [...]
  [  0%] Building C object tools/lemon/CMakeFiles/lemon.dir/lemon.c.o
  .../host/bin/ccache: invalid option -- 'D'

Reported-by: Dan Ambrosio <dambrosio@outrider.ai>
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 082076ffc1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:44:08 +02:00
Fabrice Fontaine
90d633e632 package/protozero: fix build with clang-tidy
Fix the following build failure if clang-tidy is found on host (and
protobuf is built before protozero) which is raised since tests are
disabled in commit be4869f393:

CMake Error at CMakeLists.txt:77 (add_dependencies):
  The dependency target "writer_tests" of target "clang-tidy" does not exist.

Fixes:
 - http://autobuild.buildroot.org/results/c3ae3b5caf79eb30c8a1786f58abea4f2b41a26e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit e54b82306d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:35:35 +02:00
James Hilliard
a28617d676 package/pkg-meson: add cmake dependency support
Meson dependencies and variables can be provided by cmake similar to
how they can be provided by pkgconfig, for this to work we need to
ensure that cmake_prefix_path is set for both cross and native
targets along with the cmake binary path.

See:
https://mesonbuild.com/Dependencies.html#cmake
https://mesonbuild.com/Dependencies.html#arbitrary-variables-from-dependencies-that-can-be-found-multiple-ways
https://mesonbuild.com/Machine-files.html#meson-builtin-options

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit b848117699)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:23:00 +02:00
Fabrice Fontaine
f976d735e9 package/gdk-pixbuf: fix target loaders.cache
As reported by Rutger Sassen in
https://lists.buildroot.org/pipermail/buildroot/2022-March/638895.html,
target loaders.cache is broken since commit
75361a9aba so fix it by prepending /usr/
to relative host paths

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 39ceb94fdb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 13:20:43 +02:00
Fabrice Fontaine
6439b8dbe0 package/jack2: explicitly {dis, en}able opus and readline
Explicitly disable or enable opus and readline which have been added by
commits 055cf58842 and
f658b1934f

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 618a23100f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:47:28 +02:00
Fabrice Fontaine
0a5119afa0 package/jack2: fix build with libexecinfo
Fix the following build failure raised on uclibc and musl since the
addition of libexecinfo package in commit
eea8ba446c:

/home/peko/autobuild/instance-1/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/10.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: dbus/sigsegv.c.17.o: in function `signal_segv':
sigsegv.c:(.text+0x98): undefined reference to `backtrace'

Fixes:
 - http://autobuild.buildroot.org/results/dca49cb9b3e66fac921601560e9358bcce9acffc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 930db465d9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:46:24 +02:00
Jan Havran
9820d4903e package/jack2: bump to version 1.9.20
- Fix URL for 'JACK DBus packaging' GitHub Wiki page.

https://github.com/jackaudio/jack2/releases/tag/v1.9.18
https://github.com/jackaudio/jack2/releases/tag/v1.9.19
https://github.com/jackaudio/jack2/releases/tag/v1.9.20

Signed-off-by: Jan Havran <jan.havran@audified.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 26ca7fec04)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:46:16 +02:00
Peter Seiderer
33951d7933 package/wget: bump version to 1.21.3
- bump version to 1.21.3 (for details see [1])

- remove legacy --with-libidn option (see [2]), replace with
  --enable-iri option in case locale support and libidn2 are available

[1] https://lists.gnu.org/archive/html/info-gnu/2022-02/msg00017.html
[2] https://git.savannah.gnu.org/cgit/wget.git/commit/configure.ac?id=a24e67e239ef949cc77a4c4e5a0beb703026a296

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit b5f82a4a5a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:43:19 +02:00
Vincent Stehlé
0467bb87de package/busybox: fix udhcpc options in minimal config
The busybox-minimal.config, which is used by systems without an MMU, specifies
the "-b" command line option for udhcpc. However, this option is not supported
by BusyBox udhcpc anymore since version 1.27.0 when building for systems
without an MMU.

Remove the "-b" option from busybox-minimal.config to repair network
initialization on systems without an MMU.

This fixes the following network initialization failure:

  udhcpc: invalid option -- b
  FAIL

Signed-off-by: Vincent Stehlé <vincent.stehle@laposte.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 3de486f8b0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:25:36 +02:00
Fabrice Fontaine
f0bda6dd18 package/jack1: libsndfile is optional, not mandatory
libsndfile is only needed to build jackrec example client

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 9a78a75613)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:22:29 +02:00
Fabrice Fontaine
a9479d3663 package/jack1: libsamplerate is optional, not mandatory
libsamplerate is only needed to build the NetJack backend and internal
client

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 05bbdfa382)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:22:23 +02:00
Fabrice Fontaine
9112ccd069 package/bluez5_utils: hid and hog needs headers >= 3.18
Fix the following build failure with hid and hog raised since their
addition in commit fb9fc969d9 and
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=9b58288693680b021e5dcbc6f8bea80b5be89311
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=646db71713b05d50b2b0c421da34e80ed4c54fbd
because UHID_GET_REPORT is only available since kernel 3.18 and
fa71f32b5d:

profiles/input/device.c: In function 'uhid_send_get_report_reply':
profiles/input/device.c:222:24: error: 'union <anonymous>' has no member named 'get_report_reply'
  if (size > sizeof(ev.u.get_report_reply.data))
                        ^
profiles/input/device.c:223:21: error: 'union <anonymous>' has no member named 'get_report_reply'
   size = sizeof(ev.u.get_report_reply.data);
                     ^
profiles/input/device.c:231:12: error: 'UHID_GET_REPORT_REPLY' undeclared (first use in this function)
  ev.type = UHID_GET_REPORT_REPLY;
            ^

Fixes:
 - http://autobuild.buildroot.org/results/1db406eac7620e3f76d997414eb7af7d2ac6cfe6

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 328516a5ad)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-31 08:04:38 +02:00
Fabrice Fontaine
c2f706a260 package/pkcs11-helper: fix build without threads
Fix the following build failure without threads and openvpn raised since
commit 0199dc1617:

/home/giuliobenetti/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabihf/9.3.0/../../../../arm-buildroot-linux-uclibcgnueabihf/bin/ld: /home/giuliobenetti/autobuild/run/instance-0/output-1/host/arm-buildroot-linux-uclibcgnueabihf/sysroot/usr/lib/libpkcs11-helper.so: undefined reference to `_pkcs11h_slotevent_init'

Fixes:
 - http://autobuild.buildroot.org/results/fcaa70cc035d6f9d35dfa8d564e9948c7e1cfd9e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit d76b7564f1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 21:43:42 +02:00
Andreas Ziegler
43fd3fd836 package/zziplib: fix static build failure with mpd
The current released version of zziplib copies static libraries with appended
major version, but omits creating the necessary links to the base file names.
This prevents the linker to find the libraries via the search path.

The issue (https://github.com/gdraheim/zziplib/issues/117) has been
fixed upstream; this patch extracts the necessary part of commit 0e8d35f92efb680c81f6ec1fca9f11d173dce389, to enable creation of symlinks.

This resolves the following autobuild issues:

http://autobuild.buildroot.net/results/6c56b645a2b723920f07b98474452824fba5e2c1
http://autobuild.buildroot.net/results/032aaff121fb114f388c67dbca3ad2b02f670e38
http://autobuild.buildroot.net/results/ba711034c0abe980f677e26de41739223e2f66e9

Signed-off-by: Andreas Ziegler <br015@umbiko.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 0f3d6d2e6a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 21:40:41 +02:00
Andreas Ziegler
6c129d19ac package/mpd: update to version 0.23.6
Remove 0002-lib-alsa-Error-add-missing-include.patch, the upstream fix is part
of this release

Change log:
  https://raw.githubusercontent.com/MusicPlayerDaemon/MPD/v0.23.6/NEWS

Signed-off-by: Andreas Ziegler <br015@umbiko.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 8974c6fa26)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 21:26:15 +02:00
Peter Seiderer
208aee57be package/libcamera-apps: X11 support needs libdrm
- X11 support needs libdrm (optional libdrm dependency already
  present in libcamera-apps.mk)

Fixes:

  http://autobuild.buildroot.net/results/5df48038df5deb4f1e85287cde9a403c5681c28e

  .../build/libcamera-apps-2d1009e3badcc8047361ff81149ad6cba3b911b5/preview/egl_preview.cpp:18:10: fatal error: libdrm/drm_fourcc.h: No such file or directory
     18 | #include <libdrm/drm_fourcc.h>
        |          ^~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit e2bc5e916b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 19:24:35 +02:00
Peter Seiderer
997ac4e38b package/spidev_test: fix spidev_test.c version in Config.in help text
- fix spidev_test.c version in Config.in help text, version update to 4.10
  (missing from commit 'spidev_test: bump to version in Linux 4.10' [1])

[1] https://git.buildroot.net/buildroot/commit/?id=a497a9fd6cdb518572282b1478279f476f870fb7

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 53da16e378)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 19:20:21 +02:00
Fabrice Fontaine
b78b4fedb5 package/libgee: needs gcc >= 4.9
Fix the following build failure raised since bump to version 0.20.5
in commit 10780e8d6d and
f0ccfe94ff:

task.c:59:1: error: initializer element is not constant
 static GOnce gee_task_data_async_pool = (GOnce) G_ONCE_INIT;
 ^

Fixes:
 - http://autobuild.buildroot.org/results/8354ea4192bcf2eb9c3be74d93b640db52ced10a

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit de59a62af6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 19:19:36 +02:00
Peter Korsgaard
7dcc62e62f {linux, linux-headers}: bump 4.{9, 14, 19}.x / 5.{4, 10, 15, 16}.x series
4.4.x is now EOL, so no more updates for that series.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 607c5986a9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 09:26:13 +02:00
Peter Seiderer
988f192a65 package/qt5base: fix eglconvenience compile (missing QList include)
- add 0008-eglconvenience-add-missing-QList-include.patch to fix
  eglconvenience compile (missing QList include)

Fixes:

  qeglconvenience.cpp:418:23: error: variable ‘QList<QByteArray> extensions’ has initializer but incomplete type
    418 |     QList<QByteArray> extensions =
        |                       ^~~~~~~~~~
  qeglconvenience.cpp:420:65: error: invalid use of incomplete type ‘class QList<QByteArray>’
    420 |             (eglQueryString(display, EGL_EXTENSIONS))).split(' ');
        |                                                                 ^

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 68159373d1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 09:12:54 +02:00
Quentin Schulz
b2992d27bd package/qt5/qt5base: remove leftover patch
CVE-2021-38593 fixes originally missed a usecase that was covered by the
to-be-removed patch. However, this patch was incorrect and added some
issues on its own, which was then fixed by now-removed
0012-Refix-for-avoiding-huge-number-of-tiny-dashes.patch.

Unfortunately for us, the to-be-removed patch (fixed by
0012-Refix-for-avoiding-huge-number-of-tiny-dashes.patch) can actually
be applied (with fuzz; by `patch` only) on top of the now-removed patch.
When the move to KDE Qt fork was made, some patches were removed as they
were already part of the new git fork. However, the to-be-removed patch
was not. This means the
0012-Refix-for-avoiding-huge-number-of-tiny-dashes.patch was actually
undone when Buildroot patched qt5base.

Let's remove this patch to fix this oversight.

As a reference:
e7ea2ed27c Improve fix for avoiding huge number of tiny dashes
fixed by
65b3aa6a1c Refix for avoiding huge number of tiny dashes
in the git repo.

Fixes: 5770a645a3 "package/qt5: bump packages to latest kde submodule versions"
Cc: Quentin Schulz <foss+buildroot@0leil.net>
Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
[Arnout: renumber patches 0007 and 0008]
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 3857bccca5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-30 08:50:49 +02:00
Kyle Harding
01b2a04486 package/unbound: use system libevent
The file descriptor limit when using the builtin mini-event
cannot handle more than 1024 file descriptors.

https://unbound.docs.nlnetlabs.nl/en/latest/topics/performance.html?highlight=libevent#using-libevent

Without explicit --with-libevent, it uses the builtin mini-event.

Signed-off-by: Kyle Harding <kyle@balena.io>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 929df7c483)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-29 22:19:32 +02:00
Fabrice Fontaine
5adb8c23fd package/dav1d: use official tarball
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 0bdf40b1b0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-03-29 22:02:19 +02:00