Fabrice Fontaine
85a9a3f0e6
package/gesftpserver: fix build with gcc 4.8
...
Fix the following build failure with gcc 4.8 raised since bump to
version 2 in commit 026265bf7e and
dbbf0d4542 :
In file included from alloc.c:25:0:
utils.h:204:48: error: expected ';', ',' or ')' before 'dest'
static inline void *sftp_memcpy(void *restrict dest, const void *restrict src,
^
Fixes:
- http://autobuild.buildroot.org/results/2795213c07c4a961cee0ae7a4e7cccb8bcd6f68e
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-18 21:47:03 +02:00
Neal Frager
2b564a8ccf
configs/zynqmp_kria_kv260_defconfig: fix pmufw sw reset
...
This patch will solve the problem of the pmufw built by the
zynqmp-pmufw-builder where soft resets crash for the kv260.
Details of the issue can be found here:
https://lore.kernel.org/buildroot/87ilqccu3k.fsf@dell.be.48ers.dk/
Please note that this is a temporary solution as the kv260
pmufw is not yet available on the Xilinx github. This is expected
in the coming months. The nealfrager github uses the same
licensing terms as the Xilinx github regarding the distribution of
zynqmp pmufw binary files.
https://github.com/Xilinx/ubuntu-firmware/blob/v2022.1_22.04_1/LICENSE
https://github.com/nealfrager/buildroot-firmware/blob/v2022.1/LICENSE
Signed-off-by: Neal Frager <neal.frager@amd.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-18 21:43:05 +02:00
Neal Frager
894753ee47
configs/zynqmp_zcu106_defconfig: fix pmufw sw reset
...
This patch will solve the problem of the pmufw built by the
zynqmp-pmufw-builder where soft resets crash for the zcu106.
Details of the issue can be found here:
https://lore.kernel.org/buildroot/87ilqccu3k.fsf@dell.be.48ers.dk/
Signed-off-by: Neal Frager <neal.frager@amd.com >
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-18 21:40:21 +02:00
Neal Frager
27481c9113
configs/zynqmp_zcu102_defconfig: fix pmufw sw reset
...
This patch will solve the problem of the pmufw built by the
zynqmp-pmufw-builder where soft resets crash for the zcu102.
Details of the issue can be found here:
https://lore.kernel.org/buildroot/87ilqccu3k.fsf@dell.be.48ers.dk/
Signed-off-by: Neal Frager <neal.frager@amd.com >
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-18 21:39:06 +02:00
Peter Korsgaard
5b5d3befef
package/python-django: security bump to version 4.0.8
...
Fixes the following security issues:
- CVE-2022-36359: Potential reflected file download vulnerability in
FileResponse (4.0.7)
https://www.djangoproject.com/weblog/2022/aug/03/security-releases/
- CVE-2022-41323: Potential denial-of-service vulnerability in
internationalized URLs (4.0.8)
https://www.djangoproject.com/weblog/2022/oct/04/security-releases/
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2022-10-17 22:37:25 +02:00
Thomas Petazzoni
291c6c27ad
package/openssh: fix hash of LICENSE file
...
The bump from 9.0p1 to 9.1p1 in commit
bb571dc3e8 forgot to update the hash of
the license file. The license file change (detailed below) does not
change the license terms of OpenSSH:
--- output/build/openssh-9.0p1/LICENCE 2022-04-06 02:47:48.000000000 +0200
+++ output/build/openssh-9.1p1/LICENCE 2022-10-03 16:51:42.000000000 +0200
@@ -231,6 +231,7 @@
Eric P. Allman
The Regents of the University of California
Constantin S. Svintsoff
+ Kungliga Tekniska Högskolan
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
Fixes:
http://autobuild.buildroot.net/results/697cdcea128c3716c9ae81be6c97937ebd80a5da/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2022-10-17 21:01:42 +02:00
Sébastien Szymanski
e02e0f6a3b
package/python-flask-login: bump to version 0.6.2
...
Signed-off-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:07:45 +02:00
James Hilliard
c5428d8b7b
package/pipewire: bump to version 0.3.59
...
Disable new unsupported bluez5-codec-lc3 feature.
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:07:00 +02:00
Bernd Kuhls
7ec976e9de
package/intel-mediasdk: bump version to 22.5.4
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:05:23 +02:00
Bernd Kuhls
31c0e8b86e
package/intel-mediadriver: bump version to 22.5.4
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:05:15 +02:00
Bernd Kuhls
d6e72d04d5
package/intel-gmmlib: bump version to 22.2.1
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:05:07 +02:00
Bernd Kuhls
d8bad2880d
package/libva-utils: bump version to 2.16.0
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:04:58 +02:00
Bernd Kuhls
998bf92064
package/libva: bump version to 2.16.0
...
Release notes: https://github.com/intel/libva/blob/v2.16-branch/NEWS
Removed ac_cv_path_WAYLAND_SCANNER hack due to upstream commit
a60756887e
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:04:45 +02:00
Bernd Kuhls
2ebdd163c0
package/kodi-pvr-zattoo: bump version to 19.7.16-Matrix
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 17:04:30 +02:00
Christian Stewart
a5af2679dd
package/docker-compose: bump to version v2.11.2
...
https://github.com/docker/compose/releases/tag/v2.11.2
Signed-off-by: Christian Stewart <christian@paral.in >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 16:07:26 +02:00
Christian Stewart
0a1195186f
package/docker-engine: bump to version 20.10.19
...
This release of Docker Engine comes with some bug-fixes, and an updated version
of Docker Compose.
Builder
Fix an issue that could result in a panic during docker builder prune or
docker system prune moby/moby#44122 .
Daemon
Fix a bug where using docker volume prune would remove volumes that were
still in use if the daemon was running with "live restore" and was restarted
moby/moby#44238 .
Packaging
Update Docker Compose to v2.11.2.
https://github.com/moby/moby/releases/tag/v20.10.19
Signed-off-by: Christian Stewart <christian@paral.in >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 16:07:15 +02:00
Christian Stewart
231e492217
package/docker-cli: bump to version 20.10.19
...
This release of Docker Engine comes with some bug-fixes, and an updated version
of Docker Compose.
Builder
Fix an issue that could result in a panic during docker builder prune or
docker system prune moby/moby#44122 .
Daemon
Fix a bug where using docker volume prune would remove volumes that were
still in use if the daemon was running with "live restore" and was restarted
moby/moby#44238 .
Packaging
Update Docker Compose to v2.11.2.
https://github.com/moby/moby/releases/tag/v20.10.19
Signed-off-by: Christian Stewart <christian@paral.in >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 16:06:58 +02:00
Fabrice Fontaine
4e6cede090
package/libosip2: security bump to version 5.3.1
...
Fix CVE-2022-41550: GNU oSIP v5.3.0 was discovered to contain an integer
overflow via the component osip_body_parse_header.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:38:11 +02:00
Fabrice Fontaine
99a570ee2b
package/dhcp: security bump to version 4.4.3-P1
...
- Corrected a reference count leak that occurs when the server builds
responses to leasequery packets. Thanks to VictorV of Cyber Kunlun
Lab for reporting the issue.
[Gitlab #253 ]
CVE: CVE-2022-2928
- Corrected a memory leak that occurs when unpacking a packet that has an
FQDN option (81) that contains a label with length greater than 63 bytes.
Thanks to VictorV of Cyber Kunlun Lab for reporting the issue.
[Gitlab #254 ]
CVE: CVE-2022-2929
https://kb.isc.org/docs/cve-2022-2928
https://kb.isc.org/docs/cve-2022-2929
https://ftp.isc.org/isc/dhcp/4.4.3-P1/dhcp-4.4.3-P1-RELNOTES
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:37:50 +02:00
Bernd Kuhls
1684cd72b0
package/php: security bump version to 8.1.11
...
Fixes
- CVE-2022-31628: http://bugs.php.net/81726
- CVE-2022-31629: http://bugs.php.net/81727
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:36:58 +02:00
Bernd Kuhls
1b8230ab64
package/freeswitch: bump version to 1.10.8
...
Release notes:
https://github.com/signalwire/freeswitch/releases/tag/v1.10.8
Removed two patches which are included in upstream release,
renumbered remaining patch.
Removed libs/apr-util/LICENSE due to upstream removal of bundled
apr-util package.
Added fix to disable pcap detection, otherwise /usr/bin/pcap-config
can be picked-up which breaks building freeswitch.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:35:44 +02:00
Bernd Kuhls
6c33056fff
package/sofia-sip: bump version to 1.13.9
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:35:37 +02:00
Bernd Kuhls
5292036351
package/ffmpeg: bump version to 4.4.3
...
Changelog:
http://git.videolan.org/?p=ffmpeg.git;a=blob;f=Changelog;hb=refs/heads/release/4.4
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:35:11 +02:00
Baruch Siach
42d66f8fc6
boot/mv-ddr-marvell: disable SSP
...
Add a patch to disable SSP. The toolchain enables SSP by default when
one of BR2_SSP_ options is enabled. But ATF code for the Marvell
platform does not provide the required low level routines. This leads to
link time failure.
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/3101770000
https://gitlab.com/buildroot.org/buildroot/-/jobs/3134230006
Signed-off-by: Baruch Siach <baruch@tkos.co.il >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:32:18 +02:00
Baruch Siach
9883ff708e
configs/solidrun_{macchiatobin, clearfog_gt_8k}: disable SSP
...
The Armada target does not provide platform level support for SSP.
Fixes link failure:
(.text.asm.update_stack_protector_canary+0x4): undefined reference to `plat_get_stack_protector_canary'
This error does not show up on CI jobs because SSP was effectively always
disabled until the previous commit.
Signed-off-by: Baruch Siach <baruch@tkos.co.il >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:31:55 +02:00
Baruch Siach
09acc7cbc9
boot/arm-trusted-firmware: fix SSP support
...
Commit ccac9a5bbb ("boot/arm-trusted-firmware: don't force
ENABLE_STACK_PROTECTOR") fixed a build failure but also effectively
disabled SSP entirely for ATF. This is because ENABLE_STACK_PROTECTOR is
set to 0 unconditionally in make_helpers/defaults.mk, overwriting any
environment set value. So we must pass ENABLE_STACK_PROTECTOR in
MAKE_OPTS for it to be effective. But to avoid said build failure we
can't pass ENABLE_STACK_PROTECTOR=0.
Only pass ENABLE_STACK_PROTECTOR when
BR2_TARGET_ARM_TRUSTED_FIRMWARE_SSP is enabled. Drop SSP_LEVEL value for
the !BR2_TARGET_ARM_TRUSTED_FIRMWARE_SSP case which is now unused.
Cc: Dick Olsson <hi@senzilla.io >
Cc: Sergey Matyukevich <geomatsi@gmail.com >
Signed-off-by: Baruch Siach <baruch@tkos.co.il >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-17 10:30:08 +02:00
Fabrice Fontaine
e451f1a578
package/agent-proxy: fix AGENT_PROXY_VERSION
...
Make AGENT_PROXY_VERSION compliant with release-monitoring.org
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 17:05:21 +02:00
Fabrice Fontaine
e7c5529e9c
package/libdnet: needs host-pkgconf
...
host-pkgconf is needed since bump to version 1.16.1 in commit
c8ed72c15d and
3a651c615e :
checking for Check... ./configure: line 14123: syntax error near unexpected token `CHECK,'
./configure: line 14123: ` PKG_CHECK_MODULES(CHECK, check)'
Fixes:
- http://autobuild.buildroot.org/results/e1ff5ca46e83db2c722f782387dbb7402b8d459e
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 17:02:36 +02:00
Fabrice Fontaine
edbdad9397
package/lrzip: security bump to version 0.651
...
- Fix CVE-2022-26291: lrzip v0.641 was discovered to contain a multiple
concurrency use-after-free between the functions zpaq_decompress_buf()
and clear_rulist(). This vulnerability allows attackers to cause a
Denial of Service (DoS) via a crafted Irz file.
- Use official tarball and so drop autoreconf
https://github.com/ckolivas/lrzip/blob/v0.651/WHATS-NEW
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 17:01:53 +02:00
Francois Perrad
51812c3390
package/lualogging: bump to version 1.7.0
...
diff COPYRIGHT:
-Copyright (c) 2004-2021 Kepler Project.
+Copyright (c) 2004-2022 Kepler Project.
Signed-off-by: Francois Perrad <francois.perrad@gadz.org >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 17:01:11 +02:00
Chris Packham
db63f65945
package/syslog-ng: Bump version to 3.38.1
...
Add new version. Remove patch that has been applied upstream. Update
hash for COPYING as it's text has changed to clarify some details but
the license remains LGP-2.0+L/GPL-2.0+.
Signed-off-by: Chris Packham <judge.packham@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 17:00:29 +02:00
James Hilliard
b7bd4cabed
package/gst1-python: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 17:00:23 +02:00
James Hilliard
8513099bc2
package/gst-omx: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 17:00:09 +02:00
James Hilliard
86a6d5ad11
package/gstreamer1-editing-services: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:59:57 +02:00
James Hilliard
076bf46d33
package/gst1-rtsp-server: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:59:30 +02:00
James Hilliard
004129e259
package/gst1-vaapi: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:59:24 +02:00
James Hilliard
ad104d1c63
package/gst1-libav: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:59:03 +02:00
James Hilliard
bc5ab96f7c
package/gst1-devtools: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:58:40 +02:00
James Hilliard
c29f2bff52
package/gst1-plugins-ugly: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:57:55 +02:00
James Hilliard
8f6158c37f
package/gst1-plugins-bad: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:57:48 +02:00
James Hilliard
b0696cb678
package/gst1-plugins-good: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:57:41 +02:00
James Hilliard
c81289645f
package/gst1-plugins-base: bump version to 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:57:21 +02:00
James Hilliard
08a6aab0f0
package/gstreamer1: bump to version 1.20.4
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:57:05 +02:00
Fabrice Fontaine
df77618b12
package/libxml2: security bump to version 2.10.3
...
- [CVE-2022-40304] Fix dict corruption caused by entity reference cycles
- [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
- Fix overflow check in SAX2.c
https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-16 16:56:58 +02:00
Peter Korsgaard
716b8c4e7b
{linux, linux-headers}: bump 4.{9, 14, 19}.x / 5.{4, 10, 15}.x / 6.0.x series
...
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-15 18:49:27 +02:00
Neal Frager
d07e6b7071
boot/uboot/uboot.mk: add pmufw.elf support
...
This patch adds support for zynqmp pmufw.elf files.
It will allow buildroot to use pmufw.elf binaries directly
from the Xilinx git repository built by petalinux in
addition to still supporting pmufw.bin binaries built
by the zynqmp-pmufw-builder.
https://github.com/Xilinx/ubuntu-firmware/tree/v2022.1_22.04_1/xlnx-firmware
Signed-off-by: Neal Frager <neal.frager@amd.com >
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-15 18:39:24 +02:00
Fabrice Fontaine
c8ed72c15d
package/libdnet: bump to version 1.16.1
...
Refresh patch
https://github.com/ofalk/libdnet/releases/tag/libdnet-1.16
https://github.com/ofalk/libdnet/releases/tag/libdnet-1.16.1
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-15 17:46:53 +02:00
Bernd Kuhls
7131dee4b6
package/hdparm: bump version to 9.65
...
Release notes: https://sourceforge.net/p/hdparm/news/
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-15 17:46:05 +02:00
Bernd Kuhls
25f45d54aa
package/hdparm: Fix sha256 tarball hash
...
Forgotten in commit b50ab233e6
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-15 17:45:46 +02:00
Waldemar Brodkorb
616347a163
package/uclibc-ng-test: update to latest git
...
Fixes a musl autobuild compile error, see
http://autobuild.buildroot.net/results/3cbd6f8007d1b5276b91e9f1688402f86b1f2049/
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2022-10-15 17:44:53 +02:00