mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-10 00:04:06 -09:00
Code Issues Packages Projects Releases Wiki Activity
74,197 Commits 6 Branches 483 Tags
8c3836ac8fd8e7b2f320dadf24f2c6190e775bfb
Commit Graph

74197 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Korsgaard
8c3836ac8f package/quagga: fetch from sources.buildroot.net 
Fixes https://autobuild.buildroot.org/results/54a/54a165827f536be47cd45c98da3937a1e94a7c65/

Upstream is no longer accessible, so use s.b.n instead.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39a5490072)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-12-06 10:20:52 +01:00
Romain Naour
6195a3db77 package/python-sip: disable parallel install 
{host-}python-sip may fail to install on fast machine, so disable
parallel install.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8350440972 (TestPythonPyQt5)
http://autobuild.buildroot.org/results/8f2/8f24656f3a66d21f2d3c6d6b1adc6bb5f1c0c801 (2024-10-15)
http://autobuild.buildroot.org/results/6e6/6e6bbee714b10e0f04c9d17b7e0ecce057d21d2a (2022-07-15)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4b271906a7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-12-06 10:19:08 +01:00
Fiona Klute (WIWA)
8943a028d0 package/bmap-tools: select host-python3 if building host package 
Host bmap-tools runs using host-python3, but did not select it,
leading to the confusing situation that BR2_PACKAGE_HOST_PYTHON3=n
even though it was built and working.

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit dbb019db73)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-12-06 10:18:27 +01:00
Bernd Kuhls
845a663f99 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d9bea4bb89)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-12-06 09:35:09 +01:00
Bernd Kuhls
130f0ce286 package/php: security bump version to 8.3.14 
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/444

Fixes CVE-2024-8929, CVE-2024-8932, CVE-2024-11233, CVE-2024-11234 &
CVE-2024-11236.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 96d73b3091)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-12-05 21:55:58 +01:00
Bernd Kuhls
fa3c41f3c9 package/postgresql: security bump version to 16.5 
Release notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/

Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 257c1de7e9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-12-05 21:43:13 +01:00
Yu Chien Peter Lin
c61c662693 DEVELOPERS: update maintainer of Andes platform 
I will lose access to my email next week, so hand
it over to Leo Yu-Chi Liang.

Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
Reviewed-by: Leo Yu-Chi Liang <ycliang@andestech.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a359514630)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:25:59 +01:00
Thomas Petazzoni
44ebe8ee2b DEVELOPERS: drop Asaf Kahlon 
Asaf has privately requested to be removed from the DEVELOPERS file as
he will no longer be contributing to Buildroot in the forseeable
future.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 353a37b04d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:25:20 +01:00
Bernd Kuhls
cd42b188bf package/libpng: fix arm build with NEON 
Fixes:
http://autobuild.buildroot.net/results/52c/52c974e70f922e9d7efea4c538e4438a22faa846/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-authored-by: Peter Korsgaard <peter@korsgaard.com>
[https://lists.buildroot.org/pipermail/buildroot/2024-November/767661.html]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 54cfff355c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:24:50 +01:00
Julien Olivain
8952252da7 package/libkrb5: security bump to version 1.21.3 
For the change log, see [1].

The license hash file changed, due to the year update.  See [2].  This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371

[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] fec2c44ee9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0416ae0ed5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:24:00 +01:00
Bernd Kuhls
0b26c8012e package/intel-microcode: security bump version to 20241112 
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html

CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 649b31fc6d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:23:04 +01:00
Julien Olivain
48e79150ba package/tiff: security bump to version 4.7.0 
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html

This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.

This commit also adds a comment in the hash file about pgp signature
veritication.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d571951c67)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:22:35 +01:00
Bernd Kuhls
f35c5ad48c package/libcurl: security bump version to 8.11.0 
Changelog: https://curl.se/ch/8.11.0.html

Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ed4348d1c5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:21:48 +01:00
Nicolas Cavallari
ed2f4b2add package/libgit2: bump version to 1.8.4 
upstream mistakenly based 1.8.3 on 1.8.1 so it didn't include the
1.8.2 fixes.  1.8.4 includes fixes from 1.8.2 and 1.8.3.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 268d5145c8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:21:02 +01:00
Francois Perrad
5001c63d7f package/expat: security bump to version 2.6.4 
fix CVE-2024-50602

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 856a7e96d5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:19:28 +01:00
Bernd Kuhls
625d8b8706 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 323567552b)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:12:59 +01:00
Julien Olivain
1b73bbbf71 package/usbredir: fix package homepage URL 
The current homepage URL [1] redirects to its https and ends up to
a HTTP 404 not found error. This commit fixes the issue by replacing
it with the new URL [2].

[1] http://www.spice-space.org/page/UsbRedir
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 122a5e2529)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:07:44 +01:00
Michael Nosthoff
e21e65d49e package/boost: update download url 
boost moved its package hosting from jfrog to their own url
provided by the C++ Alliance. According to [0] the old urls
might cease to exist after December 2024.

[0] https://lists.boost.org/Archives/boost/2024/05/256914.php

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8d4a9afdd5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-26 14:04:57 +01:00
Julien Olivain
d5b713c266 package/irssi: bump version to 1.4.5 
For change log, see:
https://irssi.org/NEWS/#news-v1-4-5

This commit also adds the pgp key id used for the signature
verification.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 525c1369bc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-25 17:40:56 +01:00
Cherniaev Andrei
59256d02f8 package/picotool: fix Config.in comment dependencies 
Due to a bug in the Config.in comment dependencies, the comment "***
picotool needs a toolchain w/ C++, threads, gcc >= 4.9 ***" is always
shown even if all features are enabled.

Fixes: d30c1e3c58 ("package/picotool: fix libusb dependencies")
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d2f5678f42)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-25 17:37:02 +01:00
Thomas Devoogdt
1e0b9fb7cb package/x11vnc: add and rework compile patches 
Add the "Upstream" field to the patch message for:
 - 0001-Fix-build-on-32bit-arches-with-64bit-time_t.patch
 - 0002-scan-limit-access-to-shared-memory-segments-to-current-user.patch

Add a compile patch for GCC >= 10 which enables -fno-common by default.

Fixes:
 - https://autobuild.buildroot.org/results/b2231fe06fe56036a5ddbe61cb8556b046e3a7b7
 - https://autobuild.buildroot.org/results/8afbcc63818d3e1586731e178f16635e773d5600
 - ...

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
[Julien: simplified autobuild URLs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e5bb457d5d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-25 17:25:06 +01:00
Bernd Kuhls
7babcd8937 package/ffmpeg: fix build on riscv32 
Ported patch from OpenEmbedded:
010b068bcc

"ffmpeg 6.0 has added assembly routines which uses rv64i ISA
unconditionally, ideally it should check for ISA before using those
instructions."

Fixes:
https://autobuild.buildroot.org/results/8a7082a0f24ebcf264aeac5e0fea704dc6a6bb1c/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9e84f38be8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-25 17:21:46 +01:00
Peter Korsgaard
985d126cd7 package/fbv: fetch from sources.buildroot.net 
Fixes https://gitlab.com/buildroot.org/buildroot/-/issues/73

Upstream is no longer accessible, and wget takes a long time (~7 minutes)
before it times out and falls back to s.b.n, so use that instead right away:

wget --passive-ftp -nd -t 3 -O '/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.GBHVap/output' 'http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz'
--2024-11-21 17:06:55--  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Resolving s-tech.elsat.net.pl (s-tech.elsat.net.pl)... 85.11.67.252
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Retrying.

--2024-11-21 17:09:07--  (try: 2)  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Retrying.

--2024-11-21 17:11:19--  (try: 3)  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Giving up.

wget --passive-ftp -nd -t 3 -O '/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.MxQ1k0/output' 'https://sources.buildroot.net/fbv/fbv-1.0b.tar.gz'
--2024-11-21 17:13:30--  https://sources.buildroot.net/fbv/fbv-1.0b.tar.gz
Resolving sources.buildroot.net (sources.buildroot.net)... 104.26.0.37, 104.26.1.37, 172.67.72.56, ...
Connecting to sources.buildroot.net (sources.buildroot.net)|104.26.0.37|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 18989 (19K) [application/x-gtar-compressed]
Saving to: ‘/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.MxQ1k0/output’

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-23 10:39:18 +01:00
Bernd Kuhls
687de602f5 {linux, linux-headers}: bump 5.15.x / 6.{1, 6, 11}.x series 
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c9d16e41e9)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-22 16:53:08 +01:00
Francois Perrad
f956d40c81 package/mbedtls: security bump to 2.28.9 
Fixes CVE-2024-45157: CTR_DRBG prioritized over HMAC_DRBG as the PSA DRBG

https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-08-1/

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[Peter: add CVE / advisory details]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6488443007)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-22 15:31:16 +01:00
Julien Olivain
d81cd0b488 support/testing: add audit runtime test 
This test was suggested by Thomas, in:
https://lists.buildroot.org/pipermail/buildroot/2024-October/766091.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 60e0817ebe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-21 10:54:40 +01:00
Romain Naour
9a3670d7d8 board/mender/x86_64/post-image-efi.sh: use bash for genimage.sh 
mender_x86_64_efi_defconfig started failing to build since 2024.08 in
our Gitlab-ci since the board/mender/x86_64/post-image-efi.sh is
calling support/scripts/genimage.sh with the host default shell.

There is no problem if the default shell is bash but our docker
image uses dash as default shell. Since support/scripts/genimage.sh
is actually a bash script it's not going to work if bashisms are used:

  support/scripts/genimage.sh: 57: Syntax error: redirection unexpected

Indeed bashisms have been added recently in
support/scripts/genimage.sh by the commit introducing bmap image
support [1].

Remove "sh" before support/scripts/genimage.sh and rely on
"/usr/bin/env bash" to find the bash interpreter.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8233226891

[1] 6889056f1e

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c146555faa)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-21 10:44:48 +01:00
Adam Duskett
91dcb8210c board/mender/x86_64: clean up post build and image scripts 
- Use function_name() {} instead of function function_name {}
- Use consistent double newlines between methods.
- Un-indent the comment aboe the mender_fixup method.
- Remove "Consecutive empty lines" check-package warning

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[Arnout: Remove "Consecutive empty lines" check-package warning]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 451470b7a5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-21 10:44:40 +01:00
Edgar Bonet
ae27b61496 package/gnuplot: fix build failures on undefined FE_UNDERFLOW 
Gnuplot carries the implicit assumption that, if the header fenv.h is
available, then it must define FE_UNDERFLOW. This assumption fails on
microblaze{,el}, mips{,64}{,el}, nios2 and or1k.

Fixes:
  - https://autobuild.buildroot.org/results/aa177c4f4f7c7429f052cebbf54f7027e4b2cabd/
  - https://autobuild.buildroot.org/results/868ca441daa2485b997f307edeede31dd229bfc2/
  - https://autobuild.buildroot.org/results/0a152cbfe23703bc5012098864d7fd5608775882/
  - https://autobuild.buildroot.org/results/d43be86091c9bd9163c145264151532f0f485528/

Signed-off-by: Edgar Bonet <bonet@grenoble.cnrs.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5ab8eb3cac)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 22:39:15 +01:00
Julien Olivain
d04f68826f support/testing: add rrdtool runtime test 
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8756b76a0f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 22:11:50 +01:00
Marcus Hoffmann
22e818e66b package/systemd: bump to 256.7 
Remove patch that was applied upstream.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6ec14080cd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 22:10:16 +01:00
Cherniaev Andrei
6239e449d1 configs/pc: fix grub root device in help 
The rootfs partition is the first partition, not the second one: the
Grub configuration file already contains root=/dev/sda1 by default,
and it should be changed to root=/dev/vda1 if Qemu emulation is used.

Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9e3d572ff5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 22:00:42 +01:00
Romain Naour
8e382f9070 package/checksec: fix download 
checksec-2.7.1.tar.gz archive was replaced or regenerated by upstream
sometime between the 22 September 2024 [1] and the 29 September 2024
[2].

diffoscope report no changes in extracted files exept a different
top directory name (checksec.sh-2.7.1/checksec-2.7.1):

  --- checksec-2.7.1.tar.gz a0d7a444d4603fb3d62fa25ef678e544ef39fa7b3c9bd5d22f1a8c526152cdde
  +++ checksec-2.7.1.tar.gz eba0616f4033385d6093608a2a2aad3c2debb847d6778c87346f89c80946684f

  Files identical despite different names
  --- checksec-2.7.1/ChangeLog
  +++ checksec.sh-2.7.1/ChangeLog

Use the git hash of the 2.7.1 release to use a different archive name
than the checksec-2.7.1.tar.gz archive previously released.

[1] https://gitlab.com/buildroot.org/buildroot/-/jobs/7888799855
[2] https://gitlab.com/buildroot.org/buildroot/-/jobs/7948006849

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/7948006849

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit e82217622e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:59:39 +01:00
Scott Fan
60973b0e52 package/libmodbus: bump to version 3.1.11 
Release notes:
https://github.com/stephane/libmodbus/releases/tag/v3.1.11

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit dc9c4e0576)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:55:12 +01:00
Vladimir Oltean
026ad00c99 package/sshguard: patch /usr/local/sbin/sshguard path in systemd service 
The systemd service deployed to the target is derived from an example
hardcoded for the /usr/local/sbin/ path, but we install sshguard at
/usr/sbin/. Thus, by default we get this error message:

$ journalctl -b -u sshguard.service -f
systemd[1]: Started SSHGuard - blocks brute-force login attempts.
(sshguard)[612]: sshguard.service: Unable to locate executable '/usr/local/sbin/sshguard': No such file or directory
(sshguard)[612]: sshguard.service: Failed at step EXEC spawning /usr/local/sbin/sshguard: No such file or directory
systemd[1]: sshguard.service: Main process exited, code=exited, status=203/EXEC
systemd[1]: sshguard.service: Failed with result 'exit-code'.
systemd[1]: sshguard.service: Scheduled restart job, restart counter is at 5.
systemd[1]: sshguard.service: Start request repeated too quickly.
systemd[1]: sshguard.service: Failed with result 'exit-code'.
systemd[1]: Failed to start SSHGuard - blocks brute-force login attempts.

Fix up the path in the service after the $(INSTALL) command has run.

Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 750d0e377d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:54:06 +01:00
Thomas Petazzoni
ab3491e02e package/musl-compat-headers: fix download of queue.h 
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/sys/queue.h?rev=1.70 now
returns some HTML soup instead of the plain text version of the file,
causing the hash check to fail.

http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/sys/queue.h?rev=1.70;content-type=text%2Fplain
returns the correct data, but the ";" in the URL causes some issues
with the parsing logic in Buildroot.

So let's switch to
https://raw.githubusercontent.com/NetBSD/src/03be82a6b173b3c62116b7a186067fed3004dd44/sys/sys/queue.h
which delivers exactly the same file, but hopefully will be more
stable. The file name changed to just queue.h, but the contents is the
same.

Fixes:

  http://autobuild.buildroot.net/results/57c8078f382f74859076512425b2f1c52f44e95a/
  https://gitlab.com/buildroot.org/buildroot/-/jobs/8199992850 (and many other similar cases)

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit ebcccdfbd6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:53:00 +01:00
Baruch Siach
673e83b117 package/ebtables: remove KERNEL_64_USERSPACE_32 workaround 
This workaround breaks build with gcc 14.

Upstream developers acknowledged[1] the 32/64 compatibility issue more
than 3 years ago, but no proper fix has been applied. Specifically, for
aarch64 we don't even enable BR2_KERNEL_64_USERLAND_32, so this
workaround is not effective there.

The least we can do is make ebtables depend on
!BR2_KERNEL_64_USERLAND_32.

[1] https://lore.kernel.org/all/20210518181730.13436-1-patrickdepinguin@gmail.com/

Fixes:
http://autobuild.buildroot.net/results/680674c2b61209b505efa022a8fd9751ddc5fd47/
http://autobuild.buildroot.net/results/60f8f5f087111ec3f300dc7979363de5a9f64f08/

Cc: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c5d6cde7b6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:52:18 +01:00
TIAN Yuanhao
f15c0686ee package/ntp: add upstream-provided patch to fix regression 
This patch fixes a regression [1] introduced in ntpd 4.2.8p18 [2].

  ntpd[200]: Listen normally on 3 lo [::1]:123
  ntpd[200]: bind(20) AF_INET6 [fe80::bf3d:254d:dee0:d345%3]:123 flags 0x811 failed: Cannot assign requested address
  ntpd[200]: unable to create socket on enp0s3 (4) for [fe80::bf3d:254d:dee0:d345%3]:123
  ntpd[192]: daemon control: got EOF
  ntpd[192]: daemon child died with signal 11
  systemd[1]: ntpd.service: Control process exited, code=exited, status=70/SOFTWARE
  systemd[1]: ntpd.service: Failed with result 'exit-code'.
  systemd[1]: Failed to start Network Time Service.

If the IPv6 link-local interface was not ready for binding on the first
attempt, ntpd would segfault in update_interfaces(). The segfault would
only occur when ntpd was started as part of the boot sequence. Most
- but not all - boots were affected. Evidently it could happen that the
timing of ntpd's start up was delayed enough that the IPv6 link-local
interface was ready for the bind() call when it was first issued by
open_socket() via create_interface().

[1]: https://bugs.ntp.org/show_bug.cgi?id=3928
[2]: https://bugs.ntp.org/show_bug.cgi?id=3913

Signed-off-by: TIAN Yuanhao <tianyuanhao3@163.com>
Cc: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 489e38fd2c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:46:09 +01:00
Michael Nosthoff
d184ae6720 package/linux-pam: adjust login pam file for lastlog 
when pam_lastlog.so is not installed login issues an error
that it is not able to load it.

Hence only enable the entry when pam_lastlog.so is installed.

Fixes:
 login[649]: PAM unable to dlopen(/lib/security/pam_lastlog.so): /lib/security/pam_lastlog.so: cannot open shared object file: No such file or directory
 login[649]: PAM adding faulty module: /lib/security/pam_lastlog.so

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ee5c08aa88)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:43:12 +01:00
Hannah Kiekens
9ffb14ced9 package/qt6/qt6base: remove -DFEATURE_concurrent=OFF from unconditional options 
Since commit
a39e0b95e1 ("package/qt6/qt6base: add
support for concurrent module"), we have an explicit option that
enables/disables concurrent support, so it no longer makes sense to
explicitly disable it unconditionally first.

Signed-off-by: Hannah Kiekens <hannah.kiekens@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2de79d7065)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:38:41 +01:00
Yann E. MORIN
35069b0ab5 package/gobject-introspection: update homepage 
The homepage has moved, the previous one links to the new URL.

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
[yann.morin.1998@free.fr: split into its own patch]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3ee7c891a0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-20 21:33:43 +01:00
Peter Korsgaard
a91b9c7400 Update for 2024.08.2 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024.08.2 		2024-11-14 11:28:39 +01:00
Marcus Hoffmann
b4b4522e63 package/nghttp2: security bump to 1.64.0 
Changelog:
* https://github.com/nghttp2/nghttp2/releases/tag/v1.59.0
* https://github.com/nghttp2/nghttp2/releases/tag/v1.60.0
* https://github.com/nghttp2/nghttp2/releases/tag/v1.61.0
* https://github.com/nghttp2/nghttp2/releases/tag/v1.62.0
* https://github.com/nghttp2/nghttp2/releases/tag/v1.63.0
* https://github.com/nghttp2/nghttp2/releases/tag/v1.64.0

Fixes: CVE-2024-28182 [1] - Reading unbounded number of HTTP/2
        CONTINUATION frames to cause excessive CPU usage

[1] https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 55d48e866e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 17:46:18 +01:00
Nicolas Cavallari
046ba99e91 package/libgit2: bump version to 1.8.3 
Fixes a crash when using the libhttp-parser dependency, which is the
configuration that we use in buildroot.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 21a72fb275)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 17:24:32 +01:00
Bernd Kuhls
43f9594c87 package/libpng: fix arm soft-float build 
Bumping libpng to 1.6.44 with buildroot commit
583bb434ff
causes a build failure on arm because the NEON code is only available
for softfp and hardfp ABIs, and not soft-float.

Fixes:
http://autobuild.buildroot.net/results/021/02158525203d8c7f16a4a32637d44d6c87b7f333/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-authored-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a100286aa1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 17:17:19 +01:00
Bernd Kuhls
9a8e123411 package/apache: include ap_config_auto.h to define _GNU_SOURCE 
Fixes:
http://autobuild.buildroot.net/results/2f6/2f6b7bbb4c97e4c91b3abd6bb205e237e57045fa/
and many more.

The bug was introduced by bumping apache to 2.4.59 with buildroot commit
e0bbfaea0e which includes
008e6afcfd

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 028d047ceb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 17:16:11 +01:00
Bernd Kuhls
48c3ea6fd7 package/cmake: bump to 3.30.5 
Release notes:
https://cmake.org/cmake/help/v3.30/release/3.30.html#id3

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7ff8d5abd5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 17:14:11 +01:00
Thomas Petazzoni
3c94589006 package/cmake: bump to 3.30.2 
This is minor release. According to
https://cmake.org/cmake/help/latest/release/3.30.html#updates:

3.30.1, 3.30.2

These versions made no changes to documented features or
interfaces. Some implementation updates were made to support ecosystem
changes and/or fix regressions.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1e9261d9b6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 17:10:39 +01:00
Romain Naour
3382f699e7 package/qemu: remove leftover QEMU_IGNORE_CVES from Qemu 8.1 
Theses CVE are no longer listed by pkg-stats:

  https://nvd.nist.gov/vuln/detail/CVE-2023-4135
  https://nvd.nist.gov/vuln/detail/CVE-2023-3354
  https://nvd.nist.gov/vuln/detail/CVE-2023-3180

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 10b4c31b81)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 16:55:41 +01:00
Bernd Kuhls
f5b935ada7 package/procps-ng: fix ncurses.h include 
Fixes:
http://autobuild.buildroot.net/results/7f1/7f1e0b3d99db07ea46c9cd1f51b320b461623c8d/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3c2f3c9039)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-11-13 16:55:14 +01:00