Commit Graph

84068 Commits

Author SHA1 Message Date
Sebastien Guillaume
7fa4b3c8b4 package/m4: add CPE
The resulting CPE ID is:

cpe:2.3:a:gnu:m4:1.4.21:-:*:*:*:*:*:*

The vendor and product are valid, see e.g.
https://nvd.nist.gov/vuln/detail/CVE-2008-1687

Signed-off-by: Sebastien Guillaume <sebastien.guillaume@vendeeconcept.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 17:17:30 +02:00
Sebastien Guillaume
93df82900d package/kbd: add CPE
The resulting CPE ID is:

cpe:2.3:a:kbd-project:kbd:2.10.0:-:*:*:*:*:*:*

The vendor and product are valid, see e.g.
https://nvd.nist.gov/vuln/detail/CVE-2011-0460

Signed-off-by: Sebastien Guillaume <sebastien.guillaume@vendeeconcept.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 17:17:30 +02:00
Arnout Vandecappelle
35dc65563d package/kbd: reorder .mk variables
We usually put the metadata variables at the beginning of the file and
the variables related to how to build it (like _CONF_OPTS) later.  Apply
this principle.

Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 17:17:29 +02:00
Sebastien Guillaume
444d769c0a package/htop: add CPE
The resulting CPE ID is:

cpe:2.3:a:htop:htop:3.5.1:-:*:*:*:*:*:*

The vendor and product are valid, see e.g.
https://nvd.nist.gov/vuln/detail/CVE-2008-5076

Signed-off-by: Sebastien Guillaume <sebastien.guillaume@vendeeconcept.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 17:17:28 +02:00
Sebastien Guillaume
32d08d1945 package/gcc/gcc-initial: add CPE
gcc-final already had a CPE.

The resulting CPE ID is:

cpe:2.3:a:gnu:gcc:15.3.0:-:*:*:*:*:*:*

The vendor and product are valid, see e.g.
https://nvd.nist.gov/vuln/detail/CVE-2019-15847

Signed-off-by: Sebastien Guillaume <sebastien.guillaume@vendeeconcept.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 17:17:27 +02:00
Sebastien Guillaume
2ee591714d package/gawk: add CPE
The resulting CPE ID is:

cpe:2.3:a:gnu:gawk:5.4.1:-:*:*:*:*:*:*

The vendor and product are valid, see e.g.
https://nvd.nist.gov/vuln/detail/CVE-2023-4156

Signed-off-by: Sebastien Guillaume <sebastien.guillaume@vendeeconcept.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 17:17:27 +02:00
Yegor Yefremov
5dbba2616f package/pkg-autotools.mk: also handle libtool 2.6.x
Fixes:
https://autobuild.buildroot.org/results/e6159cee14f84569c85a61f77824b2b58d68a4bc/

Libtool 2.6.x is starting to be used by upstreams when generating
release tarballs (e.g. cryptsetup-2.8.8). As LIBTOOL_PATCH_HOOK does
not know about it, ltmain.sh is left unpatched, so libtool relinks
libraries at install time and adds -L/usr/lib, which is rejected by
the toolchain wrapper:

i686-buildroot-linux-gnu-gcc: ERROR: unsafe header/library path used in cross-compilation: '-L/usr/lib'

The v2.4.4 patch no longer applies cleanly, so add a v2.6 variant,
rebased on libtool 2.6.2, and use it for 2.6.x versions.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Assisted-by: Claude:claude-opus-5
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 17:16:52 +02:00
Julien Olivain via buildroot
6fe0f0054b package/fwts: bump to version 26.09.00
See release announce:
https://lists.ubuntu.com/archives/fwts-devel/2026-September/014232.html

Release notes:
https://github.com/fwts/fwts/releases/tag/V26.09.00

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026-10-10 16:51:14 +02:00
Michael Nosthoff
290cafef07 package/sqlitecpp: bump to version 3.4.0
- licenses hash changed due to updated year

changelog:
https://github.com/SRombauts/SQLiteCpp/releases/tag/3.4.0

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 16:28:53 +02:00
Thomas Petazzoni
6c12e9327c package/sqlitecpp: fixup Config.in comment
Commit 8b651fd817 added a dependency on
gcc >= 4.9 and as part of that updated the Config.in comment to
mention C++11 instead of C++. This is not consistent with Buildroot
convention, where we only mention C++, and separately the GCC version
requirement. This commit aligns the Config.in comment with the
Buildroot convention.

Fixes: 8b651fd817 ("package/sqlitecpp: require C++11")
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 16:28:52 +02:00
Michael Nosthoff
ce4fc125fb package/sqlitecpp: needs threads
SQLiteCpp has an unconditional dependency on threads.

fixes:
br-test-pkg/br-arm-full-nothread
https://gitlab.com/heinemml/buildroot/-/jobs/16865965420

The problem exists since the package was added in Buildroot.

Fixes: e74059b39c ("package/sqlitecpp: new package")
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 16:28:51 +02:00
Michael Nosthoff
39235638d1 package/sqlitecpp: disable stack protection
SQLiteCpp has an internal setting for stack protection which defaults
to "on". Since Buildroot handles stack protection itself this is not
needed and more importantly it causes problems as the option enables
stack protection support even when the toolchain doesn't support it,
as can be reproduced using the following defconfig:

BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_X86_I686_MUSL_BLEEDING_EDGE=y
BR2_PACKAGE_SQLITECPP=y

Fixes:
br-test-pkg/bootlin-x86-i686-musl
https://gitlab.com/heinemml/buildroot/-/jobs/16865965418

Oddly enough, there are no autobuilder failures recorded for this
issue.

Fixes: e74059b39c ("package/sqlitecpp: new package")
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 16:28:51 +02:00
Michael Nosthoff
93c6c91955 support/testing: sqlitecpp: new runtime test
build and run an SQLiteCpp example to check database writes and queries.

Assisted-by: GitHub Copilot:GPT-6 Sol
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 16:28:50 +02:00
Thomas Petazzoni
d6f816facc utils/docker-run: add NO_NETWORK variable
It is sometimes useful to be able to do an offline build, to make sure
the build works properly without network access, so this commit adds a
NO_NETWORK environment variable to our docker-run script, which for
example allows to do:

$ ./utils/docker-run make source
$ NO_NETWORK=1 ./utils/docker-run make

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 16:00:18 +02:00
Fiona Klute
67cb61bea5 package/network-manager: bump version to 1.58.1
Upstream changelog:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.58.1/NEWS?ref_type=tags

Changes relevant for Buildroot build:

* Support for dhclient has been removed, drop the conditional block
  for BR2_PACKAGE_DHCP_CLIENT=y.

* NetworkManager now installs a systemd generator to manage its initrd
  units, disable it if building without systemd or for systemd without
  initrd support by setting the target system generator directory to
  "no" [1]. Note that the current upstream main branch adds a build
  option for initrd support, likely to be released with 1.60.x, which
  should supersede removing the initrd units and disabling the
  generator when building with systemd.

* Contrary to what the NEWS file states, the new "clat" build option
  is enabled by default. Disable it, (optionally) enabling would
  require libbpf and a suitable BPF compiler.

[1] https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.58.1/meson.build?ref_type=tags#L416-417

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 15:02:18 +02:00
Bernd Kuhls
f2449daf08 package/sqlite: bump version to 3.54.0
https://sqlite.org/releaselog/3_54_0.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:52:32 +02:00
529df0b580 docs/manual/writing-rules: align use of genimage partition types
Buildroot boards use a mixture of the GPT Partition Type "L" (generic
Linux filesystem) and "root-x86", "root-arm", etc (UAPI Root
Filesystem) for root filesystem partitions.

To have consistent guidance on building disk images with genimage,
update the docs to recommend using the UAPI Root Filesystem types. The
UAPI Root Filesystem types are part of the UAPI Discoverable Partitions
Specification (DPS) which helps set a wider standard for system boot.

See https://uapi-group.org/specifications/specs/discoverable_partitions_specification/

Signed-off-by: Brandon Maier <brandon.maier@gmail.com>
[Arnout: some additional rewording mainly based on input from Niklas
Cassel]
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 14:36:08 +02:00
James Hilliard
0dadf9c38e package/python-google-api-core: bump to version 2.40.0
Add the python-opentelemetry-api runtime dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:40 +02:00
James Hilliard
80fc1472e6 package/python-fastapi: bump to version 0.142.2
Add new python-opentelemetry-api runtime dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:40 +02:00
James Hilliard
5e40296d38 package/python-opentelemetry-api: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:40 +02:00
James Hilliard
7b6b90b774 package/circus: bump to version 0.19.0
Switch to the flit build backend.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:40 +02:00
James Hilliard
40172529d2 package/python-chardet: bump to version 7.6.0
Switch to the hatchling build backend.

Add the host-python-hatch-vcs build dependency.

Update license to 0BSD:
64eac3b182

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:40 +02:00
James Hilliard
f32262ad13 package/python-charset-normalizer: bump to version 3.5.2
Replace the host-python-mypy dependency with host-python-cython and
enable the Cython extensions instead of mypyc.

Drop the dependency check override now that the Cython requirement is
satisfied.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:39 +02:00
James Hilliard
49e16432d7 package/python-opcua-asyncio: bump to version 2.0.1
Switch to the hatchling build backend.

Add the python-anyio runtime dependency.

Add the python-typing-extensions runtime dependency.

Drop the no longer required python-aiofiles dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:39 +02:00
James Hilliard
daca74ca28 package/python-pylibftdi: bump to version 0.24.0
Switch to the setuptools build backend.

Update license hash due to the copyright year and license URL update:
88f84ed8ad

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:39 +02:00
James Hilliard
1d8170227e package/python-pysmi: bump to version 2.0.0
Update license hash due to copyright year update:
170fccec8c

Add the python-lark runtime dependency.

Drop the no longer required python-ply dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:39 +02:00
James Hilliard
061af7e447 package/python-scapy: bump to version 2.8.0
Update license hash for CRLF line endings in the PyPI source archive:
f7e09b3240/scapy-2.8.0.tar.gz

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:39 +02:00
James Hilliard
920c2b8326 package/python-webencodings: bump to version 0.6.1
Switch to the flit build backend.

Use the standalone license file, including the updated notices:
42e8f38a90

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 14:08:39 +02:00
Bernd Kuhls
3d672865ce package/trousers: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Noé Rubinstein <noe.rubinstein@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 14:03:38 +02:00
Francesco Mancino
77faecb13a package/linux-headers: pass --no-print-directory
Since commit 5fc10e76fa2a9 in linux v6.5-rc1, the kernel does a
recursive make call to add the --no-print-directory flag if it is not
set.

Buildroot sets MAKEOVERRIDES empty, which causes none of the
command-line overrides to be propagated to sub-makes. This only goes one
level deep, so it is not a problem. However, if the user sets
MAKEOVERRIDES in their environment, the environment _does_ get
propagated down to sub-makes. Therefore, the recursive call from within
the kernel will not get any of the command-line overrides we give it.
As a result, INSTALL_HDR_PATH will not get passed down to the kernel's
sub-make, thereby breaking the installation to staging.

Note that if Buildroot itself does a sub-make call (e.g. because O= is
set, or umask is different), --no-print-directory is already added so
the issue doesn't occur.

Set --no-print-directory explicitly, which avoids the kernel's sub-make
call, which preserves INSTALL_HDR_PATH. It is only really needed for the
staging install, since the local install in _CONFIGURE_CMDS just sets it
to the default value. For consistency though, set it there as well.

Setting --no-print-directory when it is not needed doesn't hurt.

Signed-off-by: Francesco Mancino <francesco.mancino@tutus.se>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-10-10 14:03:01 +02:00
Bernd Kuhls
b4648ea938 package/tpm2-openssl: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 12:25:20 +02:00
Bernd Kuhls
0f0d1a2cb4 package/systemd: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Norbert Lange <nolange79@gmail.com>
Cc: Sen Hastings <sen@hastings.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 12:24:08 +02:00
Bernd Kuhls
8ddd73f2b3 package/sudo: add support for OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 12:15:46 +02:00
Bernd Kuhls
5301a74653 package/squid: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 12:07:10 +02:00
Bernd Kuhls
74437ca52b package/softhsm2: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 12:00:14 +02:00
Bernd Kuhls
08ac0bfaaa package/sofia-sip: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Gregory Dymarek <gregd72002@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:57:42 +02:00
Bernd Kuhls
d1c4544f15 package/socat: add support for OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:43:44 +02:00
Bernd Kuhls
aac023e8ea package/rauc: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Andrey Yurovsky <yurovsky@gmail.com>
Cc: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:41:48 +02:00
Bernd Kuhls
db2f1fcc43 package/qt5/qt5base: add support for OpenSSL 4.0.0
Support for OpenSSL 4 was added to the Qt 6.x OpenSSL plugin by commit
e806630e69
contained in the 6.12 branch.

OpenSSL support in Qt 5.x is not plugin-based, the move occured in
version 6.2.0:
d385158d52

The upstream repo is not updated anymore:
https://community.kde.org/Qt5PatchCollection
https://mail.kde.org/pipermail/distributions/2026-May/001690.html

To enable support for OpenSSL 4 in qt5base we add a patch set mentioned
in the OpenSSL issue https://github.com/openssl/openssl/issues/29117

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:40:27 +02:00
Bernd Kuhls
543cba029e package/qpid-proton: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:29:52 +02:00
Bernd Kuhls
803518cba9 package/perl-net-ssleay: add support for OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:28:00 +02:00
Bernd Kuhls
c2ee0b3e3e package/mender-artifact: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Angelo Compagnucci <angelo.compagnucci@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:24:18 +02:00
Bernd Kuhls
23613c45f6 package/luvi: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:22:18 +02:00
Bernd Kuhls
cb7df79cc1 package/luvi: bump version to 102-g9fa6c141a
This bump includes a bump of the lua-openssl submodule
98fa10f282
which is a prerequisite for the upcoming bump of OpenSSL to 4.0.2.

Removed patches 0001 & 0002 which are included in this bump.

Renumbered and rebased remaining patch.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:22:17 +02:00
Bernd Kuhls
d267b59fa9 package/luvi: fix build without c++
Buildroot commit 00317f0aff bumped the
package to 2.15.0 which first included upstream commit
262d5f7dff
that added the miniz submodule.

The version of miniz used by luvi contains commit
05ab4dc05c
which removed "C" from the project variable causing a dependency to c++
which causes build errors when the toolchain does not support c++:

-- Check for working CXX compiler: /bin/false - broken

This dependency was not intended so we add an upstream commit to fix the
problem.

Fixes:
https://autobuild.buildroot.net/results/2a5/2a5cf09dc9303b11e2a2769c5b0b319284ec1bbb/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 11:22:16 +02:00
James Hilliard
4ab7d13248 package/snmpclitools: bump to version 0.7.2
Switch to the poetry-core build backend.

Use the standalone license file, including the updated notices:
d95f1008c5

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-10-10 10:54:08 +02:00
Bernd Kuhls
940b418dfc package/libkrb5: add support for OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: André Zwing <nerv@dawncrow.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 10:44:27 +02:00
Bernd Kuhls
6fc480e3bd package/libesmtp: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 10:42:14 +02:00
Bernd Kuhls
a16d792813 package/lftp: add support for OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 10:39:03 +02:00
Bernd Kuhls
daccdecf26 package/ibrdtnd: fix build with OpenSSL 4.0.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-10-10 10:38:19 +02:00