Commit Graph

83018 Commits

Author SHA1 Message Date
Thomas Petazzoni
5ebaab7ecc package/mpdecimal: bump version to 4.0.1
Changelog (https://www.bytereef.org/mpdecimal/changelog.html) 4.0.0 to
4.0.1:

    features
        Add Cygwin support.
        Update config.guess and config.sub to the latest versions.

    build fixes
        Fix pkg-config files for custom paths.
        Set LD/LDXX unconditionally to CC/CXX, since LDFLAGS/LDXXFLAGS from ./configure rely on it.
        macOS: use libdir instead of RPATH for the install_name.

This commit also updates the COPYRIGHT.txt license file hash, after a
year update.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
[Julien: fix COPYRIGHT.txt license file hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 00:45:58 +02:00
Franciszek Stachura
8af01adda1 package/memcached: security bump version to 1.6.43
https://github.com/memcached/memcached/wiki/ReleaseNotes1643
> More likely critical security fixes and less critical bugfixes.

Signed-off-by: Franciszek Stachura <fbstachura@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-08-08 20:27:07 +02:00
Bernd Kuhls
cf95721d00 package/libva-intel-driver: bump version to 2.4.5
https://github.com/irql-notlessorequal/intel-vaapi-driver/blob/2.4.5/NEWS

This bump follows
39d2ff612f

"Intel archived intel/intel-vaapi-driver at 2.4.1 and advises forking.
 irql-notlessorequal/intel-vaapi-driver is the active continuation (119
 commits ahead, tagged releases, Chromium fixes), so track it at 2.4.5.
 [...]
 The fork renamed the wayland meson option, so switch with_wayland to
 with_wayland_drm in all DISPLAYSERVER branches. Also drop the dead
 01.org PKG_SITE."

Updated license file and hash due to upstream commit:
7343767d87

Also switch build system to meson.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-08-08 19:52:58 +02:00
Waldemar Brodkorb
7241fb2db0 package/stunnel: fix STUNNEL_CONF_ENV
In commit 45d056e7bf stunnel got an
update to 5.78, but missed a change in configure.ac/configure.

Update STUNNEL_CONF_ENV accordingely.

Fixes:
 - https://autobuild.buildroot.net/results/69b/69b87d600ef9fa1d4eb8f65a7282c53808faf362/
 - https://autobuild.buildroot.net/results/b87/b87040d5264befa18da213d460f28a214410386b/

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-08-08 19:51:00 +02:00
Baruch Siach
7343017dcd package/sexpect: bump to version 2.4.0
Changes:
https://github.com/clarkwang/sexpect/compare/v2.3.15...v2.4.0

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 18:05:31 +02:00
Bernd Kuhls
55fb101003 package/libudev-zero: bump version to 1.0.5
https://github.com/illiliti/libudev-zero/releases/tag/1.0.5

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 18:01:10 +02:00
Bernd Kuhls
015c7fe9ac package/intel-gmmlib: bump version to 22.10.1
https://github.com/intel/gmmlib/releases/tag/intel-gmmlib-22.10.1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 17:56:45 +02:00
Shubham Chakraborty
402c94c2d7 package/botan: security bump to version 3.11.1
- Update BOTAN_VERSION to 3.11.1
- Remove 0001-Add-more-value-barriers-to-avoid-compiler-induced-side-channels.patch
  as it is already integrated upstream in this version.

Fixed in 3.11.1:
- CVE-2026-34580: Resolve certificate verification bypass bug introduced
  in 3.11.0 (GH #5500)
- CVE-2026-34582: Resolve TLS 1.3 client authentication bypass (GH #5599)

Fixed in 3.11.0:
- CVE-2026-32877: Fix a heap over-read during SM2 decryption (GH #5450)
- CVE-2026-32883: Fix an OCSP response forgery vulnerability (GH #5449)
- CVE-2026-32884: Fix a name constraints bypass for DNS names (GH #5448)

- Remove the --disable-altivec configuration option as it has been removed
  from the Botan build system in version 3.x
- Optimize the --disable-neon logic using the yx pattern.
  In Botan 3.x, the --disable-neon flag is specifically targeted at the
  arm32 architecture. Furthermore, Buildroot's BR2_ARM_CPU_HAS_NEON
  variable is only defined for 32-bit ARM, which previously caused a
  false-positive --disable-neon flag to be passed on AArch64 builds
- Update license.txt hash in botan.hash due to the copyright year update
  to 2026

https://botan.randombit.net/news.html#version-3-11-1-2026-03-31

Signed-off-by: Shubham Chakraborty <chakrabortyshubham66@gmail.com>
[Julien: fix CVE numbers in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 17:26:45 +02:00
Michael Nosthoff
8ff577bb35 package/botan: cleanup boost dependencies
- botan dropped the usage of Boost.Filesystem in 2.10.0 [0]
- botan never actively searched for Boost.System, as it is header-only
  the dependecy can be dropped too

The only part of boost botan currently uses is asio. So use --with-boost option
when boost is selected.

[0] aff8cc8a7a

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 17:16:57 +02:00
Waldemar Brodkorb
b94d3eb728 package/uclibc: bump to 1.0.59
Changes made in this release:

Ben Wolsieffer (1):
      nptl: fix getting main stack size on no-MMU

Max Filippov (4):
      stdio: fix %a formatting of inf and nan
      stdio: fix radix point output for %a
      stdio: output sign with NaNs
      stdio: restrict first digit of %a output to 0 or 1

Ramin Moussavi (19):
      libintl.h: route stubs through format_arg inlines; fix gettext_noop
      build: scope .NOTPARALLEL to locale targets only, restore parallel build
      limits.h: define PAGE_SIZE/PAGESIZE like musl, fixing the gdb build
      wait4: fall back to waitid(2) at runtime when wait4 returns ENOSYS
      pagesize: restore PAGE_SHIFT fallback for binfmt_flat (no auxv)
      buildsys: build locale headers in-tree, not via a recursive sub-make
      extra/locale: skip locales the build host cannot provide
      csky: fix struct semid_ds layout for TIME64
      csky: make __kernel_uid_t/__kernel_gid_t 32-bit
      hppa: fix inotify/signalfd/timerfd flag values
      hppa: do not set IPC_64 for the SysV IPC *ctl commands
      x86: fix struct semid_ds layout for TIME64
      i386: add CFI to __libc_i386_syscall6 for cancellation unwinding
      i386: do not set IPC_64 for the SysV IPC *ctl commands on 5.1+ kernels
      buildsys: terminate .eh_frame in shared objects
      m68k: make the __jmp_buf layout match what setjmp.S actually saves
      inet: use the direct accept4 syscall when __NR_accept is missing
      m68k: implement atomic operations with the CAS instruction
      libc: fix struct shmid_ds layout for TIME64

Waldemar Brodkorb (10):
      netinet/in.h: sync with glibc
      bits/fcntl-linux.h: sync with glibc
      add copy_file_range syscall wrapper
      sys/fanotify.h: drop include to fix c-sky compilation
      adjtimex: fix for architectures lacking __NR_clock_adjtime, f.e. frv
      sys/user.h: restore required macros
      netinet/tcp.h: sync with glibc
      loongarch: add basic static only support
      riscv: setcontext: fix linking error
      bump version for 1.0.59 release

ramin (16):
      ldso: harden _dl_tls_get_addr_soft against an unusable DTV
      microblaze: implement atomic operations with lwx/swx
      ldso: microblaze: add missing addend to R_MICROBLAZE_TLSDTPREL32
      ldso: make the _dl_tls_get_addr_soft DTV check microblaze-specific
      microblaze: fix struct semid_ds layout for TIME64
      m68k: fix struct semid_ds layout for TIME64
      mips: fix fallocate() 64-bit argument passing on n32
      mips: fix mmap64() for large offsets on n32
      mips: fix setjmp() on n32/n64 (.cpreturn, not .cprestore)
      mips: always set IPC_64 for the SysV IPC *ctl commands
      libc: fix struct msqid_ds layout for TIME64 on all common-header arches
      linuxthreads: fix SIGSEGV in MIPS cancellable wrappers (waitpid, nanosleep)
      ldso: serialize dl_iterate_phdr to fix concurrent unwind hang on SMP
      nptl: cancel the current thread directly instead of via SIGCANCEL
      mips: only n32/n64 always need IPC_64, not o32
      m68k: use the kernel cmpxchg helper for atomics on ColdFire

Patch 0001 is applied upstream and is removed here.

Fixes:
  - https://autobuild.buildroot.net/results/2bd/2bd73b0060cad4f44649ffe4ea60c4775160d86e

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 16:40:43 +02:00
Thomas Petazzoni
e427f85e29 boot/grub2: fix build issue since 2.14 version bump
Since the bump of grub2 to version 2.14, the build fails on some
configurations with:

/home/autobuild/autobuild/instance-8/output-1/host/bin/grub-mkimage: error: `/home/autobuild/autobuild/instance-8/output-1/build/grub2-2.14/build-i386-pc/grub-core//kernel.img' is miscompiled: its start address is 0x9074 instead of 0x9000: ld.gold bug?.

We are not the only ones affected: OpenEmbedded has the issue as well,
addressed in commit
66aefeca48,
and this commit points that libreboot and Gentoo have also adopted the
same temporary fix: revert two upstream commits.

So to fix the issue in Buildroot, we take the same approach. It is
temporary, and there is an upstream patch series under discussion to
really fix the problem. But as this series has 9 patches still under
discussion, we take the simpler approach of reverting two simpler
patches for the time being.

host-pkgconf is needed as an additional dependency because
configure.ac using m4 macros provided by host-pkgconf.

Fixes:

  https://autobuild.buildroot.net/results/89b/89b907278cada3d7ca1fee2d08d66921ffb4d7cc/build-end.log

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 16:22:01 +02:00
Thomas Petazzoni
9fa59eb7db support/testing: add pyudev test
In order to verify that pyudev works fine, including with just
libudev-zero, add a basic test for this package.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 16:08:53 +02:00
Thomas Petazzoni
6ceb2a8b06 package/python-pyudev: depend on libudev instead of udev
Commit 3f24135c56 ("package/libinput:
only needs libudev, not udev daemon") changed libinput to depend on
libudev instead of udev.

However, BR2_PACKAGE_LIBINPUT_PYTHON_TOOLS selects
BR2_PACKAGE_PYTHON_PYUDEV, which depends on udev, causing a broken
dependency chain:

WARNING: unmet direct dependencies detected for BR2_PACKAGE_PYTHON_PYUDEV
  Depends on [n]: BR2_PACKAGE_PYTHON3 [=y] && BR2_PACKAGE_HAS_UDEV [=n]
  Selected by [y]:
  - BR2_PACKAGE_LIBINPUT_PYTHON_TOOLS [=y] && BR2_PACKAGE_LIBINPUT [=y] && BR2_PACKAGE_PYTHON3 [=y]

Turns out that after experimenting, the majority of the pyudev
functionality works fine with just libudev. Only pyudev.udev_version()
has been detected as not working as it calls into udevadm. But the
actual features to enumerate devices and get their characteristics
just fine.

So, to fix the issue, we change the dependency of python-pyudev to
just libudev instead of udev.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 16:08:53 +02:00
Thomas Petazzoni
a96a0a758f package/tpm2-tss: do not show comment when dependencies are not met
Commit 5394df6400 ("package/tpm2-tss:
add Mbed-TLS crypto backend support") added a dependency to
BR2_PACKAGE_TPM2_TSS_FAPI, and a comment about this
dependency. However, the comment is shown even if other
architecture-related dependencies are not met.

This commit fixes that by only displaying the comment when relevant,
i.e when BR2_TOOLCHAIN_HAS_SYNC_4.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 15:58:30 +02:00
Thomas Petazzoni
d5f0ca434e package/tpm2-tools: propagate BR2_PACKAGE_TPM2_TSS_FAPI dependencies
In commit 5394df6400 ("package/tpm2-tss:
add Mbed-TLS crypto backend support"), a depends on
!BR2_PACKAGE_MBEDTLS was added to BR2_PACKAGE_TPM2_TSS_FAPI, but this
new dependency was not properly propagated to the reverse
dependencies, causing kconfig warnings such as:

WARNING: unmet direct dependencies detected for BR2_PACKAGE_TPM2_TSS_FAPI
  Depends on [n]: BR2_PACKAGE_TPM2_TSS [=y] && BR2_TOOLCHAIN_HAS_SYNC_4 [=y] && !BR2_PACKAGE_MBEDTLS [=y]
  Selected by [y]:
  - BR2_PACKAGE_TPM2_TOOLS_FAPI [=y] && BR2_PACKAGE_TPM2_TOOLS [=y] && BR2_TOOLCHAIN_HAS_SYNC_4 [=y]

This commit properly propagates this new dependency to
BR2_PACKAGE_TPM2_TOOLS_FAPI, fixing the kconfig warning.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 15:58:30 +02:00
Bernd Kuhls
6fe61bd965 package/clamav: security bump version to 1.5.4
https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html

Fixes CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339,
CVE-2026-20345, CVE-2026-20346, CVE-2026-20347 & CVE-2026-20348.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 15:48:28 +02:00
Fiona Klute
ef655b53dd docs/manual/contribute.adoc: mention license file changes in commit message
It has been good practice for a while to describe the kind of change
in the commit message of any patch that changes license file
hashes. This is important so any substantial changes don't go
unnoticed. However it wasn't explicitly stated in the manual, fix
that.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 15:46:38 +02:00
Fiona Klute (Othermo GmbH)
187d329d1d package/localedef: copy license information from package/glibc
Localedef is built from the glibc source code, so license information
is the same.

Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 14:43:15 +02:00
Fiona Klute (Othermo GmbH)
45b24c43a0 package/glibc: fix license information
The COPYINGv3 license file was added with upstream commit
e067e53080386e93dcf8b07e25fb6656f2c8941e, it applies to scripts used
during build.

LGPL-3.0+ applies to sysdeps/htl/raise.c, which is used for the Hurd
platform. Buildroot builds only Linux, so the file should not be
compiled, but it is part of the downloaded (and possibly shared, if
"make legal-info" is used) archive. The same applies to the manual.

Checked against the copyright file of the Debian "libc6" package (as
of 2.42-17 and 2.43-2), note that Debian excludes the manual.

Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 14:43:15 +02:00
Bernd Kuhls
a4d4c7527a package/{glibc, localedef}: security bump version to 2.44-23-g11ac3d78f
https://sourceware.org/pipermail/libc-announce/2026/000058.html

Fixes CVE-2026-4046, CVE-2026-4437, & CVE-2026-4438.

host-localedef:
- added build fix
- added Upstream: tag to patch 0002
- rebased patches

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 12:57:18 +02:00
Bernd Kuhls
1e9de8815f package/{glibc, localedef}: move to Gitlab mirror repo
Downloading from sourceware.org/git/glibc.git causes many 429 errors
these days so we switch to the upstream Gitlab mirror:
https://sourceware.org/glibc/wiki/GlibcGit#Fetching_The_Repository

Fixes:
https://autobuild.buildroot.net/results/09e/09e760063607b1cbf4ef687bf9bbe17b12d648b2/
https://autobuild.buildroot.net/results/22a/22afc952e0c05648d538d13ea593e5ad8c4c03c7/
https://autobuild.buildroot.net/results/281/28159f29e38b0475ae33fe73a9cab04ea3a8835f/
https://autobuild.buildroot.net/results/961/9616d46c46bd2a10a6e719d76ed6e1d8e3b3d0d2/
https://autobuild.buildroot.net/results/fd4/fd48fb96639871889fb2238dba360d1740d7962c/
https://autobuild.buildroot.net/results/91a/91a0b7ccad116911f84281b4cbcb080309ad952e/
https://autobuild.buildroot.net/results/17f/17ff61f0eac946b3c027a540147b2573e224dcdb/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 12:57:18 +02:00
Bernd Kuhls
e09f2e76b4 package/gcc: bump 16.x series to 16.2.0
https://gcc.gnu.org/pipermail/gcc-announce/2026/000193.html

GCC 16.2 is a bug-fix release from the GCC 16 branch
containing important fixes for regressions and serious bugs in
GCC 16.1 with more than 102 bugs fixed since the previous release.

For the list of bugs fixed in this version, see:
https://gcc.gnu.org/gcc-16/changes.html#16.2

Removed patch 0003 which was backported from the gcc-16 branch and is
included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 10:52:15 +02:00
Bernd Kuhls
3f8db818df {linux, linux-headers}: bump 6.6.x, 6.1.x, 5.15.x, 5.10.x series
Update the latest kernel releases to:
 - 6.6.149 -> 6.6.150
 - 6.1.181 -> 6.1.182
 - 5.15.214 -> 5.15.215
 - 5.10.263 -> 5.10.264

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 09:02:33 +02:00
Bernd Kuhls
3fc6765289 {linux, linux-headers}: bump 7.1.x, 6.18.x, 6.12.x, 6.6.x, 6.1.x, 5.15.x, 5.10.x series
Update the latest kernel releases to:
 - 7.1.6 -> 7.1.7
 - 6.18.42 -> 6.18.43
 - 6.12.101 -> 6.12.102
 - 6.6.148 -> 6.6.149
 - 6.1.180 -> 6.1.181
 - 5.15.213 -> 5.15.214
 - 5.10.262 -> 5.10.263

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-07 12:37:34 +02:00
Dario Binacchi
2f5eb8f8f3 Revert "configs/stm32f429_disco_xip: fix boot failure after uClibc bump"
This reverts commit 72f7aa47e7.

The MALLOC_SIMPLE workaround is no longer needed: the root cause, a
zero _dl_pagesize on noMMU/FLAT targets, is fixed by commit
35d3927e85 ("package/uclibc: fix for noMMU targets using FLAT
binaries").

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:44:24 +02:00
Dario Binacchi
8f103c70de Revert "configs/stm32f469_disco_{sd, xip}: fix boot failure after uClibc bump"
This reverts commit 832ff692ab.

The MALLOC_SIMPLE workaround is no longer needed: the root cause, a
zero _dl_pagesize on noMMU/FLAT targets, is fixed by commit
35d3927e85 ("package/uclibc: fix for noMMU targets using FLAT
binaries").

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:44:24 +02:00
Dario Binacchi
c784c1fadb Revert "configs/stm32f769_disco_sd: fix boot failure after uClibc bump"
This reverts commit dd67de1bd3.

The MALLOC_SIMPLE workaround is no longer needed: the root cause, a
zero _dl_pagesize on noMMU/FLAT targets, is fixed by commit
35d3927e85 ("package/uclibc: fix for noMMU targets using FLAT
binaries").

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:44:24 +02:00
Bernd Kuhls
dab2b76234 package/openvpn: security bump version to 2.7.6
https://github.com/OpenVPN/openvpn/blob/v2.7.6/Changes.rst

Fixes CVE-2026-63649 & CVE-2026-63650.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:21:33 +02:00
Bernd Kuhls
209117f1dd package/apr-util: security bump to version 1.6.4
https://archive.apache.org/dist/apr/Announcement-aprutil-1.x.html
https://archive.apache.org/dist/apr/CHANGES-APR-UTIL-1.6

Fixes CVE-2025-49506, CVE-2026-32327, CVE-2026-34191, CVE-2026-34501 &
CVE-2026-34502.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:20:15 +02:00
Bernd Kuhls
8583d8b2b4 package/python3: security bump version to 3.14.7
https://www.python.org/downloads/release/python-3147/
https://docs.python.org/release/3.14.7/whatsnew/changelog.html

Rebased patch 0010 due to upstream commit:
04735deeb2 (diff-b9d5f29e160364d4616b4bcc3b04538fca8d1d1cca809af4196bcaf16c7c5d40)

Removed patches 0011-0015 which are included in this release.

Fixes CVE-2026-12003 and others.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:15:31 +02:00
Fiona Klute
e313a2d259 package/libglib2: security bump to version 2.88.3
There have been a number of security fixes of mixed severity in
libglib2 since 2.86.0, sorted by release:

2.87.1
* CVE-2025-13601: Incorrect calculation of buffer size in
  g_escape_uri_string()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3827
* CVE-2025-14087: Buffer underflow on Glib through glib/gvariant via
  bytestring_parse() or string_parse() leads to OOB Write
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3834
* CVE-2025-14512: GIO: Integer overflow in file attribute escaping
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3845

2.87.3
* CVE-2026-1484: Integer Overflow -> Buffer Underflow on Glib through
  glib/gbase64.c via g_base64_encode_close() leads to OOB Write
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3870
* CVE-2026-1485: Buffer underflow on Glib through
  gio/gcontenttype-fdo.c via parse_header() lead to OOB Read/Write
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3871
* CVE-2026-1489: Integer Overflow on Glib through glib/guniprop.c via
  output_marks() lead to OOB Write in glib/gutf8.c:g_unichar_to_utf8()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3872

2.88.1
* CVE-2026-58010: Buffer Over-read on GLib through
  glib/gvariant-serialiser.c:1253 via gvs_tuple_is_normal()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3915
* CVE-2026-58011: OOB Read on GLib through
  glib/gdatetime.c:g_date_time_get_ymd via invalid `GDateTime`
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3917
* CVE-2026-58012: Buffer Over-read on GLib's g_regex_replace() through
  glib/gregex.c:string_append() via g_utf8_next_char()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3918
* CVE-2026-58013: Buffer Over-read on GLib through glib/giochannel.c
  via "g_io_channel_read_line_backend"
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3925
* CVE-2026-58014: Off-by-one Error on GLib through glib/gkeyfile.c via
  "g_key_file_get_locale_string_list"
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3930
* CVE-2026-58015: Path Traversal on GLib DBus through
  glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry,
  mechanism_client_data_receive (COOKIE_SHA1 Client Authentication)
  leads to Arbitrary File Read (sort of)
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3931

2.88.3
* CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded
  SASL line buffering
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3985

Full upstream changelog:
https://gitlab.gnome.org/GNOME/glib/-/blob/2.88.3/NEWS?ref_type=tags

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-05 21:35:55 +02:00
Deividas Puplauskas
3c323d714a package/perl-switch: new package
See here for a description:
https://metacpan.org/pod/Switch

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:46:47 +02:00
Deividas Puplauskas
639353897d package/perl-log-message-simple: new package
See here for a description:
https://metacpan.org/pod/Log::Message::Simple

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:45:32 +02:00
Deividas Puplauskas
42bc2e2ac1 package/perl-log-message: new package
See here for a description:
https://metacpan.org/pod/Log::Message

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:45:08 +02:00
Deividas Puplauskas
7b822ef500 package/perl-cgi-session: new package
See here for a description:
https://metacpan.org/pod/CGI::Session

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:44:39 +02:00
Waldemar Brodkorb
35d3927e85 package/uclibc: fix for noMMU targets using FLAT binaries
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:16:09 +02:00
Romain Naour
c8bf258e5b configs/acmesystems_arietta_g25_{128mb, 256mb}_defconfig: remove defconfig
This configuration for the acmesystems arietta g25 were added back in
February 2016 (commit e173aeece5), and has
not been updated in any significant way since 2019 (the last major
kernel update [1]).

This defconfig still use a 4.19 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913803 (acmesystems_arietta_g25_256mb_defconfig)
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913802 (acmesystems_arietta_g25_128mb_defconfig)

[1] 42ea31c114

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
41806d5ed5 configs/acmesystems_aria_g25_{128mb, 256mb}_defconfig: remove defconfig
This configuration for the acmesystems aria g25 were added back in July
2015 (commit 2e52be7982), and has not
been updated in any significant way since 2019 (the last major kernel
update [1]).

This defconfig still use a 4.19 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913801 (acmesystems_aria_g25_256mb_defconfig)
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913800 (acmesystems_aria_g25_128mb_defconfig)

[1] ab10b5b3ee

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
b1ce687923 configs/ts5500_defconfig: remove defconfig
This configuration for the TS-5400 was added back in September
2014 (commit 483e3bef47), got some update
in 2018 (commit 6461d76992) and has not
been updated in any significant way since then.

This defconfig still use a 4.14 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728914087 (ts5500_defconfig)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Cc: Vivien Didelot <vivien.didelot@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
47b558b111 package/ts4900-fpga: remove package
The ts4900 defconfig was removed, this package is no longer used.

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
fac93ecea8 configs/ts4900_defconfig: remove defconfig
This configuration for the TS-4900 was added back in September
2016 (commit 3138ab3fee), and has not
been updated in any significant way since then.

This defconfig still use a 4.12 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728914086 (ts4900_defconfig)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
81490b9592 configs/s6lx9_microboard_defconfig: remove defconfig
This configuration for the s6lx9 microboard was added back in March 2012
(commit 49084a1982), and has not been
updated in any significant way since then.

This defconfig still use a 4.4.7 (no longer maintained) and out of tree
devicetree (lx9_mmu.dts).

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728914045 (s6lx9_microboard_defconfig)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Bernd Kuhls
6737c90bc6 package/gdb: remove version 14.x
Now that gdb 17.x has been added[1], and gdb 16.x made the default[2],
let's remove support for gdb 14.x.

Aside from the usual removal, we also simplify things a bit as GDB
14.x was the last version not depending on gcc >= 9.x. As it is now a
mandatory dependency we move it outside the choice.

[1] 4868e0dd62
[2] 23e70547ca

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 21:24:04 +02:00
Yann E. MORIN
ed980191eb docs/manual: fix indentation in pkg-hare example
Fixes: 44d3843234 (package/pkg-hare.mk: new infrastructure)

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 21:14:26 +02:00
Alsey Coleman Miller
d80d38a551 package/pipewire: add support for the LC3 bluetooth codec
The bluez5 plugin can encode and decode LC3 (Bluetooth LE Audio) when
built against liblc3, but the meson option was unconditionally disabled.
Enable it when BR2_PACKAGE_LIBLC3 is set, using the same conditional
idiom as the neighbouring opus and aac codecs.

Signed-off-by: Alsey Coleman Miller <alseycmiller@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:31:00 +02:00
Alsey Coleman Miller
d046fd0883 package/liblc3: new package
liblc3 is the Google implementation of LC3, the mandatory codec of the
Bluetooth LE Audio profiles. The PipeWire bluez5 plugin can use it to
encode and decode LE Audio streams.

https://github.com/google/liblc3

Signed-off-by: Alsey Coleman Miller <alseycmiller@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:31:00 +02:00
Fiona Klute
c01426fe96 package/librsvg: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
librsvg project on gitlab.gnome.org instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:26:01 +02:00
Joachim Wiberg
8aca1f26c1 package/mini-snmpd: enable optional .conf and ethtool support
Both libConfuse and ethtool support is relatively new features.  Enable
optional support for them, including an example /etc/mini-snmpd.conf

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:22:49 +02:00
Joachim Wiberg
54485e075d package/mini-snmpd: add sysv init script
A start script has been missing since the package was added, so the
daemon was not started automatically on sysv/busybox systems.

This also fixes a regression in systemd builds introduced in fccdc6bd,
when the package switched from local unit file to upstream.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:22:49 +02:00
Joachim Wiberg
7af1e0a157 package/mini-snmpd: bump to version 2.0
This bumps from v1.6 directly to v2.0, for details, please see:

 - https://github.com/troglobit/mini-snmpd/releases/tag/v1.7
 - https://github.com/troglobit/mini-snmpd/releases/tag/v2.0

The release tarball is the canonical supported source for the project
and also ships a pre-generated configure script, hence the switch.

This commit removes the package patch, which is now included in the new
version. The .checkpackageignore file is also updated accordingly.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
[Julien: update .checkpackageignore to fix check-package error]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:22:49 +02:00