mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity
72,237 Commits 6 Branches 483 Tags
588c331e423e7206d54abdd0efbcdeca87386736
Commit Graph

72237 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Korsgaard
588c331e42 package/c-icap-modules: fix Additional typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e277ef8aff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:43 +02:00
Peter Korsgaard
29a1e26635 package/boost: fix typos in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit add4729108)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:42 +02:00
Peter Korsgaard
9fe9208ac0 package/bcusdk: fix definition typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2619c02189)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:41 +02:00
Peter Korsgaard
1cfaea9c7a package/bcache-tools: fix compatibility typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4c046460d2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:40 +02:00
Peter Korsgaard
ae67a5adbd package/bc: fix typos in patch descriptions 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e2a0ab180c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:39 +02:00
Peter Korsgaard
878b994cd6 package/audit: fix deactivate typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 413479ffce)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:27 +02:00
Peter Korsgaard
460a6c3d26 package/alure: fix grammar and dependencies typo in comment 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[yann.morin.1998@free.fr: fix grammar]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 43357baf4b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:26 +02:00
Peter Korsgaard
3afbac1c86 docs/website/news.html: fix information typo 
Plural of information is also information.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit cd6584715e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:25 +02:00
Peter Korsgaard
405d689868 docs/website/copyright.txt: fix aboard typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6cb031802d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:25 +02:00
Peter Korsgaard
e69136e13d docs/manual/using-buildroot-toolchain.adoc: fix overridden typo 
Overridden is with double-r-double-d.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d729696451)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:24 +02:00
Peter Korsgaard
7c405634e7 docs/manual/migrating.adoc: fix occurrence typo 
Occurrence is with double-c-double-r.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6ee7480893)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:08 +02:00
Peter Korsgaard
f863152aaa docs/manual/customize-outside-br.adoc: fix 'or' typo 
It is OR, not OT.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 777c081abe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:07 +02:00
Peter Korsgaard
32e493c90c docs/manual/adding-packages-meson.adoc: fix occurrences typo 
Occurrences is with double-c-double-r.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6762761957)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:06 +02:00
Peter Korsgaard
3be671e6ed docs/manual/adding-packages-linux-kernel-spec-infra.adoc: fix information typo 
Plural of information is also information.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c88a617599)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:05 +02:00
Peter Korsgaard
2113de5393 docs/manual/adding-packages-asciidoc.adoc: fix resources typo in example 
As FOO_RESOURCES hints, the correct spelling is resources so use that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5fca562ee8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 11:04:04 +02:00
Peter Korsgaard
460200bbe2 support/misc/Vagrantfile: support libvirt provider 
And configure memory/CPU like for the other providers.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 75b543880c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 10:33:20 +02:00
Peter Korsgaard
f24ec49d66 support/misc/Vagrantfile: move to Debian bullseye (12) 
Ubuntu Bionic (18.04) was EOL'ed in June 2023:

https://ubuntu.com//blog/18-04-end-of-standard-support

And the VM image is only available in virtualbox format:

https://app.vagrantup.com/ubuntu/boxes/bionic64

So move to Debian bullseye (12), matching what we do for the docker image.
This is available in virtualbox and libvirt (qemu) format:

https://app.vagrantup.com/debian/boxes/bullseye64

Bullseye does not come with rsync out of the box, so install it.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6cedd92744)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 10:32:54 +02:00
Yann E. MORIN
0199796dc9 Makefile: run PPD and RPATH fixup in host-fialize 
Currently, the gdbinit is generated and installed during post install
hooks, either from the gdb package, or from the external-toolchain
package. When using per-package directories (PPD), the staging directory
of the either package is stored in the generated gdbinit, which is not
going to be valid when all the PPD staging dirs get merged into the
final staging: it would lack any library installed afterwards, i.e.
mostly everything would be missing (but the libraries from the C
toolchain in the case of an external toolchain).

Similarly, all the RPATH will point to various PPD drectories. This
does not cause any issue when the final host is aggregated, because the
PPD directories still exist when we call programs from there (e.g. from
the fs infra, or from post-image scripts).

However, we knew that would not always be possible to keep the PPD
directories: we have the prepare-sdk rule that runs a cleanup pass on
the RPATH, and also applies the generic PPD fixups.

When we introduced prepare-sdk in c32ad51cbf (core/sdk: generate the
SDK tarball ourselves), we did not yet have support for PPD for the host
directory, and especially, we did not have the host-finalize rule, which
was only introduced in d0f4f95e39 (Makefile: rework main directory
creation logic) which kick-started the introduction of PPD.

At that point, we did not realise that the rpath fixups from
prepare-sdk, would be better moved to the new host-finalize rule,
because that had no impact unless one would need an SDK.

Later, in 25e60fbe1c (Makefile: fix SDK relocation for
per-package-dirs), we eventually introduced the PPD generic fixups in
the prepare-sdk rule. Again, we did not realise that those fixups would
be better placed in the host-finalize rule rather than the prepare-sdk.

While fixing the RPATH in host-finalize is not critical, fixing up the
PPD paths actually is, as the gdbinit case demonstrate.

As such, move the PPD fixups to the host-finalize step, and while at it,
also move the RPATH fixups.

This now does not leave much to do in the prepare-sdk step, and that
could very well be moved to the host-finalize rule as well. However,
some people may have started to rely on prepare-sdk in its 6 years of
existence, and the little script it installs is not needed unless one
really needs an SDK. So leave it as it is for now.

Reported-by: Casey Reeves <casey@xogium.me>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Tested-by: Casey Reeves <casey@xogium.me>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: Brandon Maier <Brandon.Maier@collins.com>
Tested-by: Brandon Maier <brandon.maier@collins.com>
Acked-by: TIAN Yuanhao <tianyuanhao3@163.com>
(cherry picked from commit a87abcf6da)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 09:13:23 +02:00
Yann E. MORIN
02bc5cffcf package: fix a few Config.in indentation 
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a7552293bb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 09:11:18 +02:00
Yann E. MORIN
cbe2b1913b arch/Config.in.arc: fix indentation 
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2ba879cc38)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-19 09:10:58 +02:00
Bernd Kuhls
dc82cd66dc {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 10}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f18790aedc)
[Peter: drop 6.10.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 23:00:48 +02:00
Bernd Kuhls
34ba071040 package/clamav: security bump version to 1.0.7 
Fixes CVE-2024-20505 & CVE-2024-20506:
https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6a506262e4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:59:31 +02:00
Peter Korsgaard
00cc46208b package/libopenssl: security bump to version 3.2.3 
- CVE-2024-6119: Possible denial of service in X.509 name checks [Moderate
  severity]
  https://openssl-library.org/news/secadv/20240903.txt

- CVE-2024-5535: SSL_select_next_proto buffer overread [Low severity]
  https://openssl-library.org/news/secadv/20240528.txt

Updated _SITE and project URL according to
https://openssl-library.org/post/2024-04-30-releases-distribution-changes/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:56:51 +02:00
Waldemar Brodkorb
7f0d3201b8 package/p910nd: update download URL 
Project moved to Github. Update download URL and hash.
License file got renamed, but it is still GPLv2.

Fixes:

 http://autobuild.buildroot.org/results/6e0/6e0e34c342fe712d5314de80488a2d034a2f5983/

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ac51d21465)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:31:34 +02:00
Dario Binacchi
e497d9fdc3 package/cache-calibrator: fix build failure for implicit declaration 
Fixes:
 - http://autobuild.buildroot.org/results/db996c894c810ff5c7f4263975d1def0edef6d55

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4cf319c267)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:30:31 +02:00
Dario Binacchi
b371c827b6 DEVELOPERS: add Dario Binacchi for armadillo 
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 73a5ae259d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:28:55 +02:00
Dario Binacchi
e003060329 package/armadillo: temporarily update the site URL 
Following an email exchange with Conrad Sand, one of the maintainers of
the project, I learned that version 9.900.2 has been moved to
https://sourceforge.net/projects/arma/files/retired/.

This patch fixes the package download error, waiting for a subsequent
patch that will restore the previous URL to bump to a more recent
version.

Adding the .RETIRED suffix to the downloaded tarball generated the
following error:

armadillo-9.900.2.tar.xz.RETIRED: OK (sha256: d78658c9442addf7f718eb05881150ee3ec25604d06dd3af4942422b3ce26d05)
>>> armadillo 9.900.2 Extracting
buildroot/dl/armadillo/armadillo-9.900.2.tar.xz.RETIRED | buildroot/output/host/bin/tar --strip-components=1 -C buildroot/output/build/armadillo-9.900.2   -xf -
/bin/bash: line 1: buildroot/dl/armadillo/armadillo-9.900.2.tar.xz.RETIRED: Permission denied
buildroot/output/host/bin/tar: This does not look like a tar archive
buildroot/output/host/bin/tar: Exiting with failure status due to previous errors
make[1]: *** [package/pkg-generic.mk:213: buildroot/output/build/armadillo-9.900.2/.stamp_extracted] Error 2

which required the addition of ARMADILLO_EXTRACT_CMDS to be fixed.

Finally, it was also necessary to modify the tarball's hash.

Fixes:
- http://autobuild.buildroot.org/results/d4e9e7b453960a4f62a199344b30b729a4f235bc

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f69fe48404)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:27:54 +02:00
Dario Binacchi
9705d4baab DEVELOPERS: add Dario Binacchi for babeld 
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 09324c843b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:24:55 +02:00
Dario Binacchi
328a3b815d package/babeld: update URL site 
As reported in [1], version 1.9.2 has been moved to another archive, and
it is recommended to use https://github.com/jech/babeld as the official
repository.

The use of the github macro:

$(call github,jech,babeld,babeld-$(BABELD_VERSION))

would have downloaded a file with the same name (e.g. babeld-1.9.2.tar.gz)
but with a different hash from the one downloaded from the previous URL,
creating unacceptable backward compatibility issues.
Therefore, it was decided to download the package via the git method. In
this way, the downloaded file is babeld-babeld-1.9.2-br1.tar.gz, thus
with a different name, to which its SHA can be associated without side
effects, except for breaking the release monitoring process.
Unfortunately, for now, we will have to live with this limitation.

Particularly interesting are the explanations provided by Yann E. Morin,
which you can find in [2], that guided the creation of this patch.

Fixes:
- http://autobuild.buildroot.org/results/2447060c86acf1bd8d6ee0bcf8f9b6adcdfc50c9

[1] https://alioth-lists.debian.net/pipermail/babel-users/2024-August/004187.html
[2] https://patchwork.ozlabs.org/project/buildroot/patch/20240901063634.3504315-1-dario.binacchi@amarulasolutions.com/

Co-Developed-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9172ffc3b4)
[Peter: adjust filename and hash for 2024.02.x]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:23:11 +02:00
Waldemar Brodkorb
19c22c36d9 package/tllist: update download URL 
Fix download URL. Tarball is renamed, too.

Fixes:

 http://autobuild.buildroot.org/results/950/950688493021c12c4dea98ac4b220355d917ff69

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8194a727a2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:19:42 +02:00
J. Neuschäfer
2c96b9b395 package/aer-inject: switch upstream 
According to a commit in Linux[1], the upstream of aer-inject changed to
https://github.com/intel/aer-inject.

[1]: https://git.kernel.org/linus/a29e5290e3566ae4db4e6fe5f31caf23118c82b6

Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e40c6f2156)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:19:08 +02:00
Bernd Kuhls
dfcce6c6b3 {linux, linux-headers}: bump 6.{1, 6, 10}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0b5feb52af)
[Peter: drop 6.10.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:15:52 +02:00
Roy Kollen Svendsen
3789f1b9ab docs/manual: fix description of how to reply to <message-id> 
Patch v1 not set to 'superseded' when replying to <message-id> with v2.

I'm using git version 2.46.0. The manual says the following is the
correct way to use the '--in-reply-to' option:

git send-email --in-reply-to=<message-id>

Signed-off-by: Roy Kollen Svendsen <roykollensvendsen@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6677d9c4e1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:14:54 +02:00
Waldemar Brodkorb
0643531972 package/szip: update SZIP_SITE 
Fix broken link.

While at it, use $(SZIP_VERSION) inside SZIP_SITE instead of
duplicating the version.

Fixes:

 http://autobuild.buildroot.org/results/35d/35d08103bbd0da22a5e111f1f86f28aba7062ee6

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 180216631a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:14:21 +02:00
Waldemar Brodkorb
f12d22ceae package/comix-cursors: update COMIX_CURSORS_SITE 
The project moved to Gitlab and renamed it's archive.
Fix the download URL and update the hash.

Fixes:

 http://autobuild.buildroot.org/results/734/734917ff9f613f07e6995c1f333eab1ee8bc5760

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 62ccb5b25d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 22:13:28 +02:00
Waldemar Brodkorb
ff44a8f626 package/zabbix: fixup download URL 
Fixes:
 http://autobuild.buildroot.org/results/9ff/9ffb4a9e3b2291498d0ccf3c9124bebc466860bc

Zabbix 6.2.x is EOL and the tarballs have now been moved under oldstable/.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Peter: extend commit message]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 345c94ad4e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:51:20 +02:00
Thomas Petazzoni
23a6237391 package/libuecc: switch to a functional Github repo 
The https://projects.universe-factory.net/attachments/download/85 URL
no longer works, so let's switch to what appears to be the official
Github repo:

  https://github.com/neocturne/libuecc

The v7 in this Github is 100% identical to the v7 that was available
from https://projects.universe-factory.net/attachments/download/85.

Also at
https://metadata.ftp-master.debian.org/changelogs//main/libu/libuecc/libuecc_7-5_copyright
Debian lists https://github.com/NeoRaider/libuecc as the source, and
this URL redirects to https://github.com/neocturne/libuecc.

Thanks to the original tarball being a .tar.xz, and our Github macro
generating a .tar.gz, the filename is different, and therefore the
different hash will not be an issue.

Fixes:

  http://autobuild.buildroot.org/results/c4c24bd06bc7889c46d78e14d5bef528340d4463/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f14e03ba21)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:49:46 +02:00
Waldemar Brodkorb
8d376b3972 package/fbset: update download URL 
Fixes:

 http://autobuild.buildroot.org/results/13e/13e28650fc58fc62c801a664d79616c6dd39a8ac

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c1a6987da9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:08:53 +02:00
Mattia Narducci
1f6026dfa0 package/proftpd: fix group name preventing server from starting 
Replace the group name 'nogroup' with 'nobody' in the default ProFTPD
configuration file. This fixes the following error when starting the
server:

  proftpd[110]: fatal: Group: Unknown group 'nogroup' on line 30 of '/etc/proftpd.conf'

Fixes: 0d887cc2b4 ("system: replace nogroup with nobody")
Signed-off-by: Mattia Narducci <mattianarducci1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2383768cdf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:08:08 +02:00
Scott Fan
6eea6b524d package/postgresql: fix typo in init script info printout 
Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 74f327e286)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:07:12 +02:00
Scott Fan
94b7bb247c package/postgresql: security bump version to 16.4 
Release notes:
 - https://www.postgresql.org/docs/release/16.4/
 - https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/

Fixes CVE-2024-7348:
 - https://www.postgresql.org/support/security/CVE-2024-7348/

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 10088427cf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:06:46 +02:00
Waldemar Brodkorb
e612ba63c5 package/xserver_xorg-server: security update to 21.1.13 
Fixes the following security issues:

- CVE-2024-31080: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
- CVE-2024-31081: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
- CVE-2024-31082: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap
- CVE-2024-31083: User-after-free in ProcRenderAddGlyphs

For more details, see thee security page of Xorg:
https://www.x.org/wiki/Development/Security/

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Peter: add actual list of CVEs]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e33db30aab)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:05:47 +02:00
J. Neuschäfer
68e71cde30 package/x264: disable assembly code on x86 + musl + PIC/PIE 
The x264 package uses large amounts of non-PIC assembly code
(e.g. common/x86/dct-a.asm), which results in textrels, which aren't
supported by musl-libc's dynamic linker.

Disable x264's assembly code when compiling for x86 with PIC/PIE and
musl-libc to avoid this particular incompatibility.

Reported-by: Yann Morin <yann.morin@orange.com>
Fixes: https://lore.kernel.org/buildroot/ZrsirnrvgsEIpAJI@tl-lnx-nyma7486-2/
Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0196ec4198)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 19:04:12 +02:00
Bernd Kuhls
090dea2faa package/sofia-sip: fix static build with openssl >= 3.2.0 
Fixes:
http://autobuild.buildroot.org/results/de08bd5c68f5fcdaa5c0374a4f5051c4751ebb88/
and many others.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 71f54e0780)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 18:48:48 +02:00
Bernd Kuhls
a733300f8f package/sofia-sip: fix build with gcc 14.x 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit d3f47c2486)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 18:48:41 +02:00
Bernd Kuhls
4fd3639ea3 package/dovecot-pigeonhole: bump version to 0.5.21.1 
Release note of this bugfix release:
https://dovecot.org/mailman3/hyperkitty/list/dovecot-news@dovecot.org/thread/4KDY5GDGPVG5ZMXKTBEKPKK764LT56WU/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5dae8cddee)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 18:47:19 +02:00
Bernd Kuhls
6699f2dd5d package/dovecot: security bump version to 2.3.21.1 
Fixes CVE-2024-23184 & CVE-2024-23185:
https://dovecot.org/mailman3/hyperkitty/list/dovecot-news@dovecot.org/thread/2CSVL56LFPAXVLWMGXEIWZL736PSYHP5/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 786484e631)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 18:46:58 +02:00
Julien Olivain
40030e1c6f package/unbound: security bump to version 1.21.0 
Fixes the following security issue:

- CVE-2024-43167: A NULL pointer dereference flaw was found in the
  ub_ctx_set_fwd function in Unbound.  This issue could allow an attacker
  who can invoke specific sequences of API calls to cause a segmentation
  fault

See announcement:
https://nlnetlabs.nl/news/2024/Aug/15/unbound-1.21.0-released/

See also change log:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-21-0

This commit also updates the _SITE url from [1] to [2], to follow the
HTTP redirect, and the url published on the download page [3].

Finally, this commit adds a comment in the hash file that the PGP
signature was checked.

[1] https://www.unbound.net/downloads
[2] https://nlnetlabs.nl/downloads/unbound
[3] https://nlnetlabs.nl/projects/unbound/download

Signed-off-by: Julien Olivain <ju.o@free.fr>
[Peter: Mark as security bump, add CVE info]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ed34c4c77b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 18:44:54 +02:00
Dario Binacchi
22208c646b package/libcuefile: fix build failure due to implicit declaration 
Fixes:
- http://autobuild.buildroot.org/results/28f1e34166e836bf3b984f228bb09842840de82a

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d0d23b4739)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 18:43:19 +02:00
Waldemar Brodkorb
0717afbd5f package/libglob: update download URL 
Fixes:

 http://autobuild.buildroot.org/results/92c/92c697697c07f63f0e03ceb655b5d558e85c392e

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b331217a50)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-09-18 18:42:09 +02:00