mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-10 00:04:06 -09:00
Code Issues Packages Projects Releases Wiki Activity
70,502 Commits 6 Branches 483 Tags
7b93aade5d48ead736a9ccc01e9ff0d59e32151a
Commit Graph

70502 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Yann E. MORIN
7b93aade5d Config.in.legacy: recent removals are for the future release 
A few package or config removals have been introduced after the 2023.11
release, but there entries were still added to the list of options
removed in 2023.11.

The affected commits are:
    64a5831679 package/libmpd: remove package
    f93380ab1a package/gmpc: remove package
    6d8c7aecbb package/flickcurl: remove package
    f6acde11ab package/onevpl: rename package to libvpl
    fffb245f66 package/linux-headers: drop 6.5.x option

Introduce the 2024.02 section and move the 2023.11 one to where it
belongs.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-27 22:22:52 +01:00
Thomas Petazzoni
e5729d3008 package/gdb: build and link libbfd and libopcodes as static libraries 
Since GDB 13.x and upstream commit
b686ecb5b10be9a33ab8f1bfdcff22eef920d1a5 ("gdb: link executables with
libtool"), gdb will be linked against the shared variants of libbfd
and libopcodes if they exist. However, this causes host gdb and target
gdb to not work, because our gdb package does not install libbfd and
libopcodes (to not clash with the ones potentially installed by
binutils).

In order to get around this, this commit proposes to get back to the
situation we had before GDB 13.x: libbfd and libopcodes are only
compiled as static libraries, so that they are linked directly inside
the gdb binary, avoiding the problem entirely.

This resolves:

 # gdb --version
 gdb: error while loading shared libraries: libopcodes-2.39.50.so: cannot open shared object file: No such file or directory

for target gdb, and:

 $ ./host/bin/arm-linux-gdb --version
 ./host/bin/arm-linux-gdb: error while loading shared libraries: libopcodes-2.39.50.so: cannot open shared object file: No such file or directory

for host gdb.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-27 22:11:53 +01:00
Fabrice Fontaine
a760645bfb package/gstreamer1/gst1-plugins-good: switch to libsoup3 
libsoup3 is supported since
c3455def2e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-12-27 20:20:36 +01:00
Fabrice Fontaine
53779570e5 package/zlog: bump to version 1.2.17 
License changed to Apache-2.0:
1a7b1a6fb9

https://github.com/HardySimpson/zlog/compare/1.2.16...1.2.17

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-12-27 20:17:41 +01:00
Fabrice Fontaine
d0c4bd703a package/wolfssl: security bump to version 5.6.6 
- Use official tarball and so drop autoreconf
- Fix CVE-2023-6935, CVE-2023-6936 and CVE-2023-6937

https://github.com/wolfSSL/wolfssl/releases/tag/v5.6.6-stable

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-12-27 20:16:32 +01:00
Fabrice Fontaine
19f0837174 package/mp4v2: security bump to version 2.1.3 
Fix CVE-2023-1450, CVE-2023-1451 and CVE-2023-29584

https://github.com/enzo1982/mp4v2/releases/tag/v2.1.3
https://github.com/enzo1982/mp4v2/releases/tag/v2.1.2

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-12-27 20:15:55 +01:00
Fabrice Fontaine
95a5ed7545 package/gstreamer1/gstd: drop readline dependency 
readline is not a dependency since bump to version 0.15.0 in commit
cbd06adac5 and
978b503840

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-12-27 20:15:00 +01:00
Thomas Petazzoni
078b8558b9 package/x11r7/xwayland: security bump to 23.2.3 
According to
https://lists.x.org/archives/xorg-announce/2023-December/003437.html:

  This release contains the fixes for CVE-2023-6377 and CVE-2023-6478
  in today's security advisory:
  https://lists.x.org/archives/xorg-announce/2023-December/003435.html

The release has only 10 commits compared to 23.2.2, all of which being
fixes, two of them being the security fixes. So it seems like bumping
the version is a reasonable trade-off vs. backporting the security
fixes.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-12-27 17:20:57 +01:00
Thomas Petazzoni
64a5831679 package/libmpd: remove package 
Following the removal of gmpc, we can drop libmpd as well, which was
apparently developed/maintained by the same group of people. The URL
in Config.in, http://gmpcwiki.sarine.nl/index.php?title=Libmpd, no
longer works, and no new alternative upstream was found.

The reference MPD client library is libmpdclient, which is still
maintained.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 22:37:26 +01:00
Thomas Petazzoni
f93380ab1a package/gmpc: remove package 
This package is unmaintained upstream:

- The URL in our Config.in,
  http://gmpcwiki.sarine.nl/index.php?title=GMPC, no longer works

- https://github.com/DaveDavenport/gmpc says it's unmaintained

- The official lists of MPD clients at
  https://www.musicpd.org/clients/ says it's maintained, and points at
  http://gmpclient.org/, which is no longer owned by the developers of
  GMPC.

- It still uses libsoup (2) which we want to get rid of at some
  point.

- It was added by Gustavo Zacarias, and no version bumped occurred
  since 2011.

So let's kill this package.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 22:37:22 +01:00
Thomas Petazzoni
6d8c7aecbb package/flickcurl: remove package 
This package is causing some build issues, which are probably due to
the recent libxml2 upgrade:

  http://autobuild.buildroot.net/results/34d6f6c02f884ab9a2578a38ee8646e14632d6ff/

There has been no new commit upstream for the past 8 years:
https://github.com/dajobe/flickcurl, and the last release, 1.26 is
from 2014. So let's kill the package.

Fixes:

  http://autobuild.buildroot.net/results/34d6f6c02f884ab9a2578a38ee8646e14632d6ff/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 22:29:22 +01:00
Petr Vorel
9f6146acb8 package/iputils: fix IPUTILS_SITE URL 
Upstream in release 20231222 shipped self generated iputils-20231222.tar.gz,
which is signed and thus has different checksum than "Source code (tar.gz)"
generated by github. Therefore different URL needs to be used to get
correct checksum.

Fixes:

  http://autobuild.buildroot.net/results/e9b39e142d5f56bf589253a10ed4722dbbda375c

Fixes: 32da4422f9 ("package/iputils: bump version to 20231222")
Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 22:08:41 +01:00
Fabrice Fontaine
c13199c932 package/squid: security bump to version 6.6 
- Drop patch (already in version)
- Fix CVE-2023-50269: This problem allows a remote client to perform
  Denial of Service attack by sending a large X-Forwarded-For header
  when the follow_x_forwarded_for feature is configured.

https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3
https://github.com/squid-cache/squid/blob/SQUID_6_6/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 22:06:02 +01:00
Fabrice Fontaine
66a77af985 package/ksmbd-tools: security bump to version 3.5.1 
Fix potential NULL deference errors.

https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.1
https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 21:23:45 +01:00
Fabrice Fontaine
69df189aea package/libebml: security bump to version 1.4.5 
Fix invalid memory access (reading beyond allocated memory) due to
missing integer overflow check.

https://github.com/Matroska-Org/libebml/blob/release-1.4.5/NEWS.md

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 21:23:41 +01:00
Fabrice Fontaine
37eb68c9fb package/opensc: security bump to version 0.24.0 
- Drop patches (already in version) and so drop autoreconf
- Fix the following security issues:
  - CVE-2023-40660: Fix Potential PIN bypass
  - CVE-2023-40661: Important dynamic analyzers reports
  - CVE-2023-4535: Out-of-bounds read in MyEID driver handling
    encryption using symmetric keys

https://github.com/OpenSC/OpenSC/releases/tag/0.24.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 21:23:37 +01:00
Fabrice Fontaine
9e5cbbb413 package/strongswan: security bump to version 5.9.13 
A vulnerability in charon-tkm related to processing DH public values was
discovered in strongSwan that can result in a buffer overflow and
potentially remote code execution. All versions since 5.3.0 are
affected.

https://www.strongswan.org/blog/2023/11/20/strongswan-vulnerability-(cve-2023-41913).html
https://github.com/strongswan/strongswan/blob/5.9.13/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 21:23:33 +01:00
Fabrice Fontaine
158edd5aa9 package/libde265: security bump to version 1.0.15 
A couple of bug fixes, including the following CVEs:
 - CVE-2023-49465
 - CVE-2023-49467
 - CVE-2023-49468

https://github.com/strukturag/libde265/releases/tag/v1.0.15

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 21:23:29 +01:00
Fabrice Fontaine
01689a9a65 package/libheif: security bump to version 1.17.6 
A couple of build fixes and bug fixes detected by fuzzing.

Corrects these issues:
 - CVE-2023-49462
 - CVE-2023-49463

https://github.com/strukturag/libheif/releases/tag/v1.17.6

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 21:23:25 +01:00
Fabrice Fontaine
312f4ab4c8 package/onevpl-intel-gpu: add CPE variables 
cpe:2.3:a:intel:onevpl_gpu_runtime is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/7F7056CA-A41D-4AB5-B9CC-9DE24A27B8BA

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-26 21:21:21 +01:00
Fabrice Fontaine
449538348e package/cjson: security bump to version 1.7.17 
- Fix null reference in cJSON_SetValuestring (CVE-2023-50472)
- Fix null reference in cJSON_InsertItemInArray (CVE-2023-50471)

https://github.com/DaveGamble/cJSON/releases/tag/v1.7.17

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-26 14:13:09 +01:00
Fabrice Fontaine
3cc18e4085 package/python-httpx: add CPE variables 
cpe:2.3:a:encode:httpx is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/0B9D7A81-3934-40D1-A7E4-FD8132304152

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-26 14:13:07 +01:00
Fabrice Fontaine
3f9709f803 package/python-uvicorn: add CPE variables 
cpe:2.3:a:encode:uvicorn is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/D3AA1B54-4363-4E52-90AB-01DC2080D950

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-26 14:13:05 +01:00
Fabrice Fontaine
55c3fe590f package/python-fastapi: add CPE variables 
cpe:2.3:a:fastapi_project:fastapi is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/E6E33EA5-0404-4037-9B3E-FE718E1593E5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-26 14:13:03 +01:00
Fabrice Fontaine
27182fcd35 package/python-starlette: add CPE variables 
cpe:2.3:a:encode:starlette is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/B4613D5C-E46D-443A-8738-58E4FBC0C127

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-26 14:13:02 +01:00
Fabrice Fontaine
7f7a7c34e5 package/python-asyncssh: add CPE variables 
cpe:2.3:a:asyncssh_project:asyncssh is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/55866328-B495-4FDC-B9EF-C014E6885187

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-26 14:12:59 +01:00
Francois Perrad
814e7fcacf package/xz: bump to version 5.4.5 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:44:11 +01:00
Francois Perrad
1edafc4b48 package/lsof: bump to version 4.99.3 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:44:09 +01:00
Francois Perrad
a449898d82 package/libgtk3: bump to version 3.24.39 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:44:07 +01:00
Francois Perrad
248effdd9b package/libatomic_ops: bump to version 7.8.2 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:44:05 +01:00
Francois Perrad
be24c10472 package/dbus: bump to version 1.14.10 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:44:03 +01:00
James Hilliard
ae9137661b package/python-httpx: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:25:19 +01:00
James Hilliard
3d743c1027 package/python-httpcore: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:24:37 +01:00
James Hilliard
607f0ecb7e package/python-fastapi-sessions: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:20:05 +01:00
James Hilliard
8e0ac9660c package/python-uvicorn: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:19:09 +01:00
James Hilliard
da1f15dbca package/python-fastapi: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 21:13:04 +01:00
James Hilliard
cfb0987517 package/python-starlette: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 11:33:10 +01:00
James Hilliard
111e725b08 package/python-anyio: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 11:30:16 +01:00
James Hilliard
02fddb29ab package/python-typing-extensions: bump to version 4.9.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 11:29:53 +01:00
James Hilliard
442b2af2d4 package/python-asyncssh: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 11:27:14 +01:00
Julien Olivain
ebe47e7605 package/python-ml-dtypes: new package 
ml_dtypes is a stand-alone implementation of several NumPy
dtype extensions used in machine learning libraries.

https://github.com/jax-ml/ml_dtypes

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 11:20:24 +01:00
James Hilliard
b48a195509 package/python-multipart: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 11:12:20 +01:00
James Hilliard
8dc5506c76 package/python-decouple: new package 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-12-25 11:11:51 +01:00
Adam Duskett
31c169f556 package/sway/Config.in: Add a help note about the default terminal 
The default terminal used by sway is the foot terminal. Add a note in
the Config.in explaining that if a user is using the default sway config,
it is recommended to also enable the foot package.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-24 23:22:58 +01:00
Adam Duskett
4163b67c37 package/sway: enable swaynag support 
Add a config option to build sway with swaynag support.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-24 23:09:03 +01:00
Adam Duskett
31058f5fdf package/sway: enable swaybar tray support 
Add a config option to build swaybar with tray support.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-24 23:08:58 +01:00
Adam Duskett
b08df59fc6 package/sway: enable swaybar support 
Add a config option to build sway with swaybar support.
  - The bar requires dejavu fonts.
  - If bash-completions is selected, JQ is required.
  - Select dmenu-wayland as a runtime dependency.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[yann.morin.1998@free.fr: jq is a runtime dependency too]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-24 23:01:33 +01:00
Adam Duskett
b5b18f9eba package/sway: enable default-wallpaper support 
If swaybg is selected, set default-wallpaper to true.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-24 22:59:36 +01:00
Adam Duskett
cb39803ee3 package/sway: enable bash-completion support 
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-24 22:59:30 +01:00
Adam Duskett
453b993ac1 package/ncurses: install foot terminfo if foot is selected 
From foot/INSTALL.md:
```
As of ncurses 2021-07-31, ncurses includes a version of foot’s
terminfo. **The recommendation is to use those**, and only install the
terminfo definitions from this git repo if the system’s ncurses
predates 2021-07-31.
```

So it is best to follow the instructions and install the foot terminfo
provided by ncurses.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2023-12-24 22:48:26 +01:00