mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity
72,403 Commits 6 Branches 483 Tags
729b66dcbbf0d1cc9366734bb70934818bbee748
Commit Graph

72403 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Francois Perrad
729b66dcbb package/libarchive: security bump to version 3.7.6 
3.7.5 fixed a number of security issues:

    fix multiple vulnerabilities identified by SAST (#2251, #2256)
    cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing (#2258)
    lzop: prevent integer overflow (#2174)
    rar4: protect copy_from_lzss_window_to_unp() (#2172, CVE-2024-20696)
    rar4: fix CVE-2024-26256 (#2269, CVS-2024-26256)
    rar4: fix OOB in delta and audio filter (#2148, #2149)
    rar4: fix out of boundary access with large files (#2179)
    rar4: add boundary checks to rgb filter (#2210)
    rar4: fix OOB access with unicode filenames (#2203)
    rar5: clear 'data ready' cache on window buffer reallocs (#2265)
    rpm: calculate huge header sizes correctly (#2158)
    unzip: unify EOF handling (#2175)
    util: fix out of boundary access in mktemp functions (#2160)
    uu: stop processing if lines are too long (#2168)

And 3.7.6 fixed a tar regression introduced in 3.7.5

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ab3c84e5e2)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-19 21:15:09 +02:00
Francois Perrad
3ade4d0bb1 package/gnutls: bump to version 3.8.7 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1bf483665d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-19 21:10:07 +02:00
Yann E. MORIN
a9c7f1f50e docs/manual: do not instruct doctoring the saved defconfig 
Doctoring a defconfig is tedious, and it is not easy to update a
defconfig, as it requires manual copy-pasting, adding comments and so
on...

Instead, just require defconfigs to be generated with 'savedefconfig'.
Any details can/must be provided in the commit log.

Reported-by: Edgar Bonet <bonet@grenoble.cnrs.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 17bdd10cb3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-19 20:42:16 +02:00
James Hilliard
de57986c08 package/cups: security bump to version 2.4.11 
Fixes the following security issue:

CVE-2024-35235: Cupsd Listen arbitrary chmod 0140777

https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
https://www.openwall.com/lists/oss-security/2024/06/11/1

Drop cups hash patches which are now upstream.

Rebase remaining patches.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8d835ffc52)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-19 20:39:16 +02:00
Bernd Kuhls
92e6d858b5 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 10}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d3a12bc6f1)
[Peter: drop 6.10.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-19 20:35:03 +02:00
Peter Korsgaard
2cd205743b package/python3: security bump to version 3.11.10 
Release notes: https://www.python.org/downloads/release/python-31110/

Fixes CVE-2024-4032, CVE-2024-6232, CVE-2024-6923, CVE-2024-7592,
CVE-2024-8088 and CVE-2023-27043.

The fixes for bundled libexpat are irrelevant for us because external expat
is used.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 18:07:52 +02:00
Bernd Kuhls
846af98bd1 package/expat: security bump version to 2.6.3 
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes

Fixes CVE-2024-45490, CVE-2024-45491 & CVE-2024-45492.

Follow upstream switch of project repository to github:
https://sourceforge.net/p/expat/news/2022/01/project-moved-to-github/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0509885d8d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:16:12 +02:00
Michael Fischer
5b2e036af9 package/pure-ftpd: bump version to 1.0.52 
This version fixes an out-of-bound reads in the MLSD command, so upgrading is recommended.
It also improves compatibility with various systems.

Update the COPYING hash because of a change in copyright year

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5271e90a6a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:14:54 +02:00
Peter Korsgaard
ee6220a36d package/php: security bump version to 8.2.24 
Fixes CVE-2024-8926, CVE-2024-8927, CVE-2024-9026, and CVE-2024-8925.

Changelog: https://www.php.net/ChangeLog-8.php#8.2.24

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:10:22 +02:00
Peter Korsgaard
0f7d0c47fd package/systemd: fix typos in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 09964bc5c0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:41 +02:00
Peter Korsgaard
efd70c2c6f package/sysklogd: fix typos in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Arnout: fix additional 'recommended' typo]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 74bef5945f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:41 +02:00
Peter Korsgaard
f909812eb8 package/supertux: fix 'according' typo in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit b55759c516)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:40 +02:00
Peter Korsgaard
26f24e2f7a package/stress-ng: fix 'correctly' typo in comment 
Also fix conjugations of verbs.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Arnout: fix additional typoes]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 3c4dd46791)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:39 +02:00
Peter Korsgaard
cda3a2e449 package/sqlite: fix 'access' typo in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 930663032b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:38 +02:00
Peter Korsgaard
9efd6c3ca9 package/softether: fix typos in patch description 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 5af5c0ac0b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:38 +02:00
Peter Korsgaard
7aba5f6ded package/socat: fix 'incompatible' typo in comment 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4c5d82ea05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:37 +02:00
Peter Korsgaard
177b4e0a5f package/smcroute: fix 'assume' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit d6f90873eb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:36 +02:00
Peter Korsgaard
8f8d91c1ee package/slirp: fix typos in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 6183d8f494)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:35 +02:00
Peter Korsgaard
2d0238a7fb package/skeleton-init-systemd: fix "won't" typo in comment 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit eb83f8e09a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:35 +02:00
Peter Korsgaard
0cf71a6cde package/selinux-python: fix 'family' typo in patch description 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 70ded7c212)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:34 +02:00
Peter Korsgaard
eb278bfa12 package/rpi-firmware: fix 'partition' typo in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 0dffd8ab1c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:33 +02:00
Peter Korsgaard
dc0232ac47 package/rlwrap: fix 'whether' typo in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 1441be898a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:32 +02:00
Peter Korsgaard
8d09895d4a package/redis: fix 'defaults' typo in patch description 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 1e37c852a5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:32 +02:00
Peter Korsgaard
9deafbfeee package/rapidxml: fix 'usability' typo in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit d21e6f815d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:31 +02:00
Peter Korsgaard
65d6cad366 package/rapidxml: fix 'compilation' typo in patch description 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit f301c007c7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:30 +02:00
Peter Korsgaard
9061a97b94 package/qt5virtualkeyboard: fix 'Portuguese' typo in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit e23e49e5d5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:29 +02:00
Peter Korsgaard
6c1790eaa6 package/qt5connectivity: fix 'peripherals' typo in help text 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 6367eb4965)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:29 +02:00
Peter Korsgaard
3fdc01308b package/qt5enginio: fix 'versioning' typo in comment 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 7426aaddee)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:28 +02:00
Peter Korsgaard
147776573b package/qt5base: fix 'from' typo in patch description 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 53e265522f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:27 +02:00
Peter Korsgaard
b09b642dc3 package/qt5: fix 'paths' typo in comment 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 296b549365)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:26 +02:00
Peter Korsgaard
1d66d29acc package/qlibc: fix 'consistent' typo in help text 
Also add a missing article one line above.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Arnout: fix additional typo]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4390361bb5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 17:00:26 +02:00
Baruch Siach
8d21492297 package/libcurl: drop link-with-openssl workaround 
Upstream curl commit f057de5a1a950 ("libcurl.pc: add `Requires.private`,
`Requires` for static linking") deals with proper pkg-config
configuration since version 8.9.0.

Our local libcurl.pc modification we added back in commit 61d322c3d2
(package/cURL: fix static link whith openSSL) is no longer needed.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
[yann.morin.1998@free.fr: this is not a "revert", reword commit log]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a5cef5339b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 16:57:37 +02:00
Akhilesh Nema
907c08271f package/libpcap: security bump version to 1.10.5 
Fixes the following security issues:

CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
  double frees in some cases.
CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
  file:// URL with a path to a directory that cannot be opened.

Changelog: bbcbc9174d/CHANGES

Signed-off-by: Akhilesh Nema <nemaakhilesh@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0982498c67)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 16:57:03 +02:00
Akhilesh Nema
f4dfdc1350 package/libcurl: bump version to 8.10.1 
Changelog - https://curl.se/ch/8.10.1.html

Signed-off-by: Akhilesh Nema <nemaakhilesh@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5370103e64)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 16:51:34 +02:00
Bernd Kuhls
028cf9ecc0 package/libcurl: security bump version to 8.10.0 
Changelog: https://curl.se/changes.html#8_10_0

Fixes CVE-2024-8096.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d68b999787)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 16:51:31 +02:00
Edgar Bonet
2b0dd4ca7e docs/manual/configure.adoc: fix location of Busybox inittab 
Commit 89d39fc7a3 "initscripts: new package" moved the inittab
packaged for Busybox init from system/skeleton/etc to package/busybox.
The manual, however, still points to the old location, so let's fix it.

Signed-off-by: Edgar Bonet <bonet@grenoble.cnrs.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 99b1685fd8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 16:12:42 +02:00
Peter Korsgaard
920e7f06df boot/shim/shim.mk: fix 'deactivate' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6dc6a747fd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:31 +02:00
Peter Korsgaard
b6db1c24a8 boot/optee-os/optee-os.mk: fix 'PLATFORM' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7bd00d5506)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:30 +02:00
Peter Korsgaard
c891c02ef9 boot/grub2/Config.in: fix 'targeting' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0fa6bd5a96)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:29 +02:00
Peter Korsgaard
7424e08a78 boot/edk2/edk2.mk: fix 'release' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a52fd38060)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:29 +02:00
Peter Korsgaard
a698a40838 boot/barebox/barebox.mk: fix 'allows' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9e3fdb87f0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:28 +02:00
Peter Korsgaard
126fe42c9a boot/arm-trusted-firmware/Config.in: fix 'platform' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2e3c0ab1b7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:27 +02:00
Peter Korsgaard
b3b1c44a77 linux/linux.mk: fix 'parser' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9c604ef86f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:27 +02:00
Peter Korsgaard
ece45f77a6 support/testing/tests/package/test_weston/overlay/etc/weston.ini: fix 'independent' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0ab62e5d25)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:26 +02:00
Peter Korsgaard
066e72d2dd support/testing/tests/package/test_mtools.py: fix 'unformatted' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 064f879d96)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:25 +02:00
Peter Korsgaard
ea4aacba6e support/testing/tests/package/test_micropython.py: fix 'returned' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4a8aafecf0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:24 +02:00
Peter Korsgaard
11b9507240 support/testing/tests/package/test_iptables.py: fix 'OUTPUT' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 1772ad2f5f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:24 +02:00
Peter Korsgaard
d298259f93 support/testing/tests/package/test_ddrescue.py: fix 'normally' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 98f7a32d05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:23 +02:00
Peter Korsgaard
34181068f4 support/testing/tests/package/test_cryptsetup.py: fix 'encrypted' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 28c56bc26f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:22 +02:00
Peter Korsgaard
5fc5e54df9 support/testing/tests/package/test_compressor_base.py: fix 'extension' typo 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 68316831e4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-10-12 15:57:21 +02:00