mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 16:01:54 -09:00
Code Issues Packages Projects Releases Wiki Activity
63,716 Commits 6 Branches 483 Tags
8b641331d0b1fea1c70f910df70d7f045f9de162
Commit Graph

63716 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Fabrice Fontaine
8b641331d0 package/s390-tools: needs OpenSSL-enabled libcurl 
Fix the following build failure raised bump to version 2.17.0 in commit
eab9110afb and
56fecf1832:

Error: libcurl is not built with the OpenSSL backend

Fixes:
 - http://autobuild.buildroot.org/results/32aa8f0bece5da2a16d761f175d46c7d3e0a8965
 - http://autobuild.buildroot.org/results/535253f483c927da456c0be292df6a58c1f39737

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 889fd54f80)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-19 20:32:49 +01:00
Bagas Sanjaya
08ef726a3a DEVELOPERS: Add entry for Bagas Sanjaya as Buildroot developer for git 
Bagas is keen to maintain git package for Buildroot. However, due to
limited resources available, he can only do testing as far as
build testing. Other developers are needed to help him maintain the
package.

Signed-off-by: Bagas Sanjaya <bagasdotme@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 562cf1fbdb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-19 17:47:49 +01:00
Julien Olivain
cb1e96e551 package/kexec: add KEXEC_CPE_ID_{PRODUCT, VENDOR} 
cpe:2.3:a:kexec-tools_project:kexec-tools is a valid CPE identifier
for this package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Akexec-tools_project%3Akexec-tools

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0d8b27841f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-19 17:41:27 +01:00
Peter Korsgaard
71a2706320 Update for 2022.02.11 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022.02.11 		2023-03-19 11:20:22 +01:00
Fabrice Fontaine
499947acac package/libmodsecurity: security bump to version 3.0.8 
https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.8
https://coreruleset.org/20220919/crs-version-3-3-3-and-3-2-2-covering-several-cves/

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1b20c52a5b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-18 10:31:16 +01:00
Fabrice Fontaine
7225efefa5 package/libmodsecurity: select pcre2 
Commit ea746f3128 forgot to select pcre2
resulting in the following build failure:

Makefile:575: *** pcre2 is in the dependency chain of libmodsecurity that has added it to its _DEPENDENCIES variable without selecting it or depending on it from Config.in.  Stop.

Fixes:
 - http://autobuild.buildroot.org/results/6528d2611bd1a45c1e94bc6b866de9c33dd90a7b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f5e1cec700)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-18 10:31:04 +01:00
Fabrice Fontaine
24f0af804e package/libmodsecurity: bump to version 3.0.7 
Switch to pcre2 as pcre is deprecated

https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ea746f3128)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-18 10:29:04 +01:00
Peter Seiderer
0399011fa8 package/uqmi: update patch for fix compile error (gcc false error reporting) 
Update the patch to to avoid gcc false error reporting (apply pragma ignored
only for gcc >= 12.x (as the warning '-Wdangling-pointer' was introduced
with gcc-12.x).

Fixes:

  - http://autobuild.buildroot.net/results/df380f921b74527b77290a658de0c57680083afa

  .../build/uqmi-0a19b5b77140465c29e2afa7d611fe93abc9672f/dev.c:213:32: error: unknown option after '#pragma GCC diagnostic' kind [-Werror=pragmas]
    213 | #pragma GCC diagnostic ignored "-Wdangling-pointer"
        |                                ^~~~~~~~~~~~~~~~~~~~

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6219046db6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-17 09:35:23 +01:00
Peter Seiderer
91059234f4 package/uqmi: fix compile error (gcc false error reporting) 
Add upstream suggested patch ([1]) to avoid gcc false error reporting.

Fixes:

  - http://autobuild.buildroot.net/results/ce9e2074bb8486d1ee25232b985d47475faefd63

  dev.c:217:23: error: storing the address of local variable 'complete' in '*req.complete' [-Werror=dangling-pointer=]
    217 |         req->complete = &complete;
        |         ~~~~~~~~~~~~~~^~~~~~~~~~~

[1] http://lists.openwrt.org/pipermail/openwrt-devel/2023-March/040633.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b3cf07d8db)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-17 09:35:14 +01:00
Bernd Kuhls
bef793ae12 package/rsync: link with -latomic if needed 
Fixes:
http://autobuild.buildroot.net/results/9eb9a92871622472b8f9eb3797aadd3651fc78a4/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b9a062b354)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-17 09:33:50 +01:00
Fabrice Fontaine
d9a6f6a6e8 support/dependencies/dependencies.sh: require FileHandle perl package for ace 
ace needs FileHandle module:

Can't locate FileHandle.pm in @INC (you may need to install the FileHandle module) (@INC contains: /home/buildroot/autobuild/instance-0/output-1/host/lib/perl /usr/local/lib64/perl5/5.36 /usr/local/share/perl5/5.36 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /home/buildroot/autobuild/instance-0/output-1/build/ace-7.0.6/MPC/prj_install.pl line 17.
BEGIN failed--compilation aborted at /home/buildroot/autobuild/instance-0/output-1/build/ace-7.0.6/MPC/prj_install.pl line 17.

Fixes:
 - http://autobuild.buildroot.org/results/9dee7c09fd7b41d276df0285a0f3dcae1a71f041

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1c89f36821)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-17 09:30:12 +01:00
Bernd Kuhls
aa9f2eae45 package/znc: Fix build with LibreSSL 
Fixes:
http://autobuild.buildroot.net/results/3fe/3fec5c3a21af47b5f4e8adcaf4ce1fff5070e00a/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit dfc3b05c05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-17 09:26:26 +01:00
Bernd Kuhls
875ea2df17 package/x11r7/xdriver_xf86-video-qxl: Update broken URL in Config.in helptext 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 562045056b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-17 09:21:20 +01:00
Fabrice Fontaine
afb90502da package/libgcrypt: fix Thumb mode workaround 
Fix the following build failure:

/tmp/ccRqWxnA.s:98: Error: instruction not supported in Thumb16 mode -- `adds ip,fp,r0'

Fixes:
 - http://autobuild.buildroot.org/results/4b96f4e41724e5c9c806a6c7df397a58d1ae1b1e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit cda8dabfeb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-17 09:18:19 +01:00
Fabrice Fontaine
160828f443 package/libev: force arm mode instead of Thumb mode 
Fix the following build failure:

/tmp/ccHc3Awn.s:825: Error: selected processor does not support `mcr p15,0,r3,c7,c10,5' in Thumb mode

Fixes:
 - http://autobuild.buildroot.org/results/1c597c9da724d6cac06b09b1ecd456a28440a3a3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 964254bfd9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-16 22:32:48 +01:00
Fabrice Fontaine
d407399dd7 package/audit: force arm mode instead of Thumb mode 
Fix the following build failure:

/tmp/ccY5gl3z.s:2145: Error: selected processor does not support `mcr p15,0,r2,c7,c10,5' in Thumb mode

Fixes:
 - http://autobuild.buildroot.org/results/9d18a0d360b2e2f9e87c55daedda62d6ce198bb9

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 53d70dbe40)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-16 22:32:37 +01:00
Fabrice Fontaine
b54aa2be67 package/libmad: force arm mode instead of Thumb mode 
Fix the following build failure:

/tmp/ccv8mDeW.s:93: Error: selected processor does not support `smull r6,r7,r3,r1' in Thumb mode

Fixes:
 - http://autobuild.buildroot.org/results/92a3f19b4fa12a7724f9e3d99284da4ad2beecb2

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 0aaadd525f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-16 22:32:33 +01:00
Julien Olivain
3c3e3e64c7 package/bridge-utils: update project URL in Config.in help text 
The old URL no longer works and shows "No repositories found".
Replace it with:
https://wiki.linuxfoundation.org/networking/bridge

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit e8ad4f2d07)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 18:17:22 +01:00
Heiko Thiery
57c17cdf99 DEVELOPERS: add Heiko Thiery for package/rauc 
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 6bec878102)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 18:17:14 +01:00
Bernd Kuhls
4e4539b2ae package/apache: security bump version to 2.4.56 
Release notes:
https://lists.apache.org/thread/89vkczkfkdyz65d5q59pcyzrn5ts60s6

Changelog: https://dlcdn.apache.org/httpd/CHANGES_2.4.56

Fixes CVE-2023-25690 & CVE-2023-27522:
https://httpd.apache.org/security/vulnerabilities_24.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 5256ec9ca8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 16:05:43 +01:00
Fabrice Fontaine
a6c6ad9dbd package/mender: force libopenssl 
mender raises the following build failure with libressl since at least
version 3.1.0 (and probably since the addition of the package):

vendor/github.com/mendersoftware/openssl/conn.go:103:61: could not determine kind of name for C.X509_V_ERR_DANE_NO_MATCH

Fixes:
 - http://autobuild.buildroot.org/results/2b032d2a4e7cfbb20444c13821003120a4d00abd
 - http://autobuild.buildroot.org/results/621c057c0b8b627c8140456a2b0af4f95d239dcc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 46abbffc97)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 16:04:38 +01:00
Fabrice Fontaine
d0564f0282 package/mpv: needs NPTL 
mpv unconditionally uses pthread_getcpuclockid since version 0.33.0 and
fd3caa264e
resulting in the following build failure without NPTL since commit
e3cf26dda3:

../common/stats.c: In function 'get_thread_cpu_time_ns':
../common/stats.c:75:9: error: implicit declaration of function 'pthread_getcpuclockid'; did you mean 'pthread_getspecific'? [-Werror=implicit-function-declaration]
   75 |     if (pthread_getcpuclockid(thread, &id) == 0 &&
      |         ^~~~~~~~~~~~~~~~~~~~~
      |         pthread_getspecific

Fixes:
 - http://autobuild.buildroot.org/results/98cde5cbb0844c6ef483a75cf9a6f3fd3a46c693

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 720a68e33b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 16:03:48 +01:00
Nicola Di Lieto
395e3414a2 package/uacme: security bump to version 1.7.4 
Includes fe91f46b62
Fixes https://github.com/ndilieto/uacme/issues/64

Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d97fe11e59)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 15:41:19 +01:00
Fabrice Fontaine
0a23e43132 package/opus: force arm mode instead of Thumb mode 
Fix the following build failure:

/tmp/cckXvlOO.s:352: Error: selected processor does not support `smull r6,ip,r5,r0' in Thumb mode

Fixes:
 - http://autobuild.buildroot.org/results/fdedcc8f68651ec34417d609b40effbac456c80d

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Peter: tweak comment]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 90e1a64cb0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 15:08:11 +01:00
Sebastian Weyer
f953a186d1 package/bash: fix naming of target-finalize-hook 
When the target-finalize-hook for bash was added in commit
311c9eebc4 in order to write bash into
/etc/shells, it was done at the same time as for package/mksh and it was
incorrectly copied and MKSH still appeared in the name of the hook.

The hook is now correctly named BASH_ADD_BASH_TO_SHELLS

Signed-off-by: Sebastian Weyer <sebastian.weyer@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7f96255f4a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 14:06:25 +01:00
Fabrice Fontaine
c59348420f package/f2fs-tools: add F2FS_TOOLS_CPE_ID_VENDOR 
cpe:2.3:a:f2fs-tools_project:f2fs-tools is a valid CPE identifier for
this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Af2fs-tools_project%3Af2fs-tools

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7af75b36aa)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 14:05:54 +01:00
Fabrice Fontaine
cb2d0c50e6 package/exfat-utils: security bump to version 1.4.0 
Fix CVE-2022-29973: relan exFAT 1.3.0 allows local users to obtain
sensitive information (data from deleted files in the filesystem) in
certain situations involving offsets beyond ValidDataLength.

https://github.com/relan/exfat/releases/tag/v1.4.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d7085ab3ea)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 14:03:28 +01:00
Fabrice Fontaine
f0e9d63690 package/exfat: security bump to version 1.4.0 
- Fix CVE-2022-29973: relan exFAT 1.3.0 allows local users to obtain
  sensitive information (data from deleted files in the filesystem) in
  certain situations involving offsets beyond ValidDataLength.
- libfuse3 is supported since
  7cbc1544a4

https://github.com/relan/exfat/releases/tag/v1.4.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0c29b4281d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 14:03:03 +01:00
Fabrice Fontaine
8b8137852a package/libolm: add CPE variables 
cpe:2.3:a:matrix:olm is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Amatrix%3Aolm

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d5c6ff24dc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 08:11:53 +01:00
Fabrice Fontaine
61425d7a6c package/quazip: add QUAZIP_CPE_ID_VENDOR 
cpe:2.3:a:quazip_project:quazip is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aquazip_project%3Aquazip

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 25c6741716)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 08:11:19 +01:00
Fabrice Fontaine
b88eb874cf package/quickjs: add QUICKJS_CPE_ID_VENDOR 
cpe:2.3:a:quickjs_project:quickjs is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aquickjs_project%3Aquickjs

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f820a978f8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 08:11:13 +01:00
Peter Seiderer
ee9fa0876d package/apr: security bump version to 1.7.2 
- remove 0001-cross-compile.patch
  (superseded by upstream commit [1])

- rename 0002-sys-param-h.patch to 0001-sys-param-h.patch

- remove 0003-Merge-r1887279-from-trunk.patch
  (from upstream [2])

- remove 0004-apr-1.7.0-CVE-2021-35940.patch
  (superseded by upstream commit [3], remove APR_IGNORE_CVES accordingly)

- set new configure option '--disable-sctp' (no libsctp provided by buildroot)

- set new 'ac_cv_strerror_r_rc_int' explicitly to no (default for
  cross compile)

- set new 'ac_cv_mmap__dev_zero' explicitly to yes

- revert two upstream commits ([4], [5]) to fix apr-util build, fails
  otherwise because of some path mismatch where to find apr_rules.mk copied
  to apr-util-1.6.3/build/rules.mk, fixes:

    Makefile:50: .../build/apr-util-1.6.3/build/rules.mk: No such file or directory

For details see [6].

[1] 866e1df66b
[2] 0a763c5e50
[3] e0be630b68
[4] f82374627b
[5] b6dbbc77da
[6] https://downloads.apache.org/apr/CHANGES-APR-1.7

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 783cd8d90d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 08:10:19 +01:00
Fabrice Fontaine
e1fb4a6e8e package/libpjsip: fix CVE-2022-235{3, 4}7 
https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w
https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 26344644ee)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-15 07:17:58 +01:00
Lang Daniel
ff075f8dd5 package/paho-mqtt-c: security bump to version 1.3.12 
Contains a fix for a possible race condition that can lead to use after
free:
911488a9f0

https://github.com/eclipse/paho.mqtt.c/milestone/19?closed=1

https://github.com/eclipse/paho.mqtt.c/releases/tag/v1.3.12

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit cc9acffa8a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 22:56:05 +01:00
Peter Korsgaard
a1b396770e package/libcurl: bump version to 7.88.1 
Bugfix release fixing a number of issues introduced in 7.88.0:

https://curl.se/changes.html#7_88_1
https://daniel.haxx.se/blog/2023/02/20/7-88-1-the-second-final-one/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit eb566be8dc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 22:55:10 +01:00
Fabrice Fontaine
17eec67924 boot/mxs-bootlets: fix build without any bootstream 
Fix the following build failure raised since the addition of the package
in commit 2a636d1521:

sed -i 's,[^ *]power_prep.*;,\tpower_prep="/home/autobuild/autobuild/instance-9/output-1/build/mxs-bootlets-10.12.01/power_prep/power_prep";,' /home/autobuild/autobuild/instance-9/output-1/build/mxs-bootlets-10.12.01/
sed: couldn't edit /home/autobuild/autobuild/instance-9/output-1/build/mxs-bootlets-10.12.01/: not a regular file

Fixes:
 - http://autobuild.buildroot.org/results/b4b26f6b02fd1991f46eba5db240e5050b96d333

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8c44351907)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 22:53:54 +01:00
Fabrice Fontaine
dbf4bfff67 package/pcm-tools: needs NPTL 
pcm-tools needs NPTL since its addition in commit
60eb2cec80:

cpucounters.cpp: In constructor 'pcm::TemporalThreadAffinity::TemporalThreadAffinity(pcm::uint32, bool)':
cpucounters.cpp:252:9: error: 'pthread_getaffinity_np' was not declared in this scope; did you mean 'sched_getaffinity'?
  252 |         pthread_getaffinity_np(pthread_self(), set_size, old_affinity);
      |         ^~~~~~~~~~~~~~~~~~~~~~
      |         sched_getaffinity

Fixes:
 - http://autobuild.buildroot.org/results/8bbf9c36af332bbf5e7c1abcbb594a0b231ef97e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 9d74f85c97)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 15:01:46 +01:00
Lang Daniel
bd6c387ddb {linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.1.x series 
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 159df6a531)
[Peter: drop 6.1.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 15:00:57 +01:00
Fabrice Fontaine
43562c0f2e package/proxychains-ng: set -fPIC 
Set -fPIC to avoid the following build failure with some architectures
such as mips or aarch64 raised since bump to version 4.14 in commit
35953d1e61 and
35a674bdbc:

checking what's the option to use in linker to set library name ...
cannot find an option to set library name

Fixes:
 - http://autobuild.buildroot.org/results/8ed1481e29321ed3da40251f700cb3bd66f62c94
 - http://autobuild.buildroot.org/results/fd01df6eb9a37257894740d44a33eece9123355a

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 441b859a1e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 12:39:23 +01:00
Fabrice Fontaine
8efb071095 package/tiff: fix CVE-2022-48281 
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a
heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted
TIFF image.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d7ae47f0c6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 12:14:30 +01:00
Peter Korsgaard
4521f37f39 package/haproxy: security bump to version 2.4.22 
Fix CVE-2023-25725

https://www.mail-archive.com/haproxy@formilux.org/msg43229.html
https://www.mail-archive.com/haproxy@formilux.org/msg43226.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 11:43:24 +01:00
Fabrice Fontaine
8c100b4d64 package/python-m2crypto: fix CVE-2020-25657 
A flaw was found in all released versions of m2crypto, where they are
vulnerable to Bleichenbacher timing attacks in the RSA decryption API
via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest
threat from this vulnerability is to confidentiality.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a86d44a3eb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 10:51:14 +01:00
Fabrice Fontaine
40bfe7d715 package/bind: security bump to version 9.16.38 
- Fix CVE-2022-3094, CVE-2022-3736 and CVE-2022-3924
- Update hash of COPYRIGHT (year updated with
  1a5d707f52)

https://downloads.isc.org/isc/bind9/9.16.38/doc/arm/html/notes.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7abc9a0554)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 09:50:22 +01:00
Fabrice Fontaine
44f5d8aff7 package/python-werkzeug: security bump to version 2.2.3 
Fix CVE-2023-23934 and CVE-2023-25577

https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q
https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323
https://werkzeug.palletsprojects.com/en/2.2.x/changes/#version-2-2-3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit da5d2adf57)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 09:49:33 +01:00
James Hilliard
51281f21d6 package/python-werkzeug: bump to version 2.2.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d6f194c513)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 09:49:29 +01:00
James Hilliard
26f52b75e5 package/python-werkzeug: bump to version 2.1.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit bd447bb88c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-14 09:49:22 +01:00
Fabrice Fontaine
d464408908 package/lttng-babeltrace: fix popt static build with libiconv 
Fix the following popt static build failure with libiconv:

configure:18149: checking for poptGetContext in -lpopt
configure:18172: /home/buildroot/autobuild/instance-2/output-1/host/bin/m68k-buildroot-linux-uclibc-gcc -o conftest -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -Os -g0  -static  -I/home/buildroot/autobuild/instance-2/output-1/host/bin/../m68k-buildroot-linux-uclibc/sysroot/usr/include/uuid  -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -static conftest.c -lpopt  -L/home/buildroot/autobuild/instance-2/output-1/host/bin/../m68k-buildroot-linux-uclibc/sysroot/usr/lib -luuid    >&5
/home/buildroot/autobuild/instance-2/output-1/host/lib/gcc/m68k-buildroot-linux-uclibc/10.4.0/../../../../m68k-buildroot-linux-uclibc/bin/ld: /home/buildroot/autobuild/instance-2/output-1/host/bin/../m68k-buildroot-linux-uclibc/sysroot/usr/lib/libpopt.a(poptint.o): in function `POPT_fprintf':
poptint.c:(.text+0x28a): undefined reference to `libiconv_open'

[...]

checking for poptGetContext in -lpopt... no
configure: error: Cannot find popt.

Fixes:
 - http://autobuild.buildroot.org/results/4f465fe15664b1f9df3f26c331dc550852972f2f

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 34625d54c9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-13 19:51:41 +01:00
Fabrice Fontaine
85417fe3ad support/dependencies/dependencies.sh: require MD5 perl package for netsurf 
Fix the following build failure:

Can't locate object method "hexhash" via package "MD5" at utils/git-testament.pl line 47

Fixes:
 - http://autobuild.buildroot.org/results/3dddcbbe7f6ecae5a2db6fac11fb659719452f73

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b83a9675cb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-13 19:47:14 +01:00
Fabrice Fontaine
ffce626f33 package/libblockdev: needs locale 
locale_t is unconditionally used since version 1.5 and
4ed6f0b3a4
resulting in the following build failure since the addition of the
package in commit 0c52826291:

module.c:33:37: error: unknown type name 'locale_t'
   33 | static char *strerror_l(int errnum, locale_t locale UNUSED)
      |                                     ^~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/ede9eb1f13d56c77005cc448416fb2efa9d16ff0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a6b4217312)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-13 18:07:47 +01:00
Fabrice Fontaine
1292fef706 package/asterisk: fix build with libressl 
Fix the following build failure with libressl by using SSL_is_server
which is available since version 2.7.0 and
d7ec516916:

iostream.c: In function 'ast_iostream_close':
iostream.c:559:41: error: invalid use of incomplete typedef 'SSL' {aka 'struct ssl_st'}
  559 |                         if (!stream->ssl->server) {
      |                                         ^~

Fixes:
 - http://autobuild.buildroot.org/results/ce4d62d00bb77ba5b303cacf6be7e350581a62f9

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c8985cf50c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-03-12 20:04:36 +01:00