Commit Graph

74139 Commits

Author SHA1 Message Date
Thomas Petazzoni
938aa7413f utils/genrandconfig: handle BR2_LINUX_KERNEL_IMAGE_TARGET_CUSTOM=y
When BR2_LINUX_KERNEL_IMAGE_TARGET_CUSTOM=y,
BR2_LINUX_KERNEL_IMAGE_TARGET_NAME is supposed to be non-empty. But in
the context of genraconfig, we don't know to what value
BR2_LINUX_KERNEL_IMAGE_TARGET_NAME can be set, so let's avoid cases
where BR2_LINUX_KERNEL_IMAGE_TARGET_CUSTOM=y. By dropping this option,
kconfig will revert back to the default image format for the selected
architecture.

Fixes:

  http://autobuild.buildroot.net/results/1d104a051c83bb31e98565369a2ec7badfa21eca/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b07d21ab98)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 22:44:39 +01:00
Bernd Kuhls
97b722418c package/heimdal: Fix build with autoconf-2.72
Fixes:
http://autobuild.buildroot.net/results/175/175fb65f0151866cd2d83c91c23b453d8c4489f7/
https://bugs.busybox.net/show_bug.cgi?id=15991

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a79d0b467f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 22:37:06 +01:00
Bernd Kuhls
817b3b7562 package/php: bump version to 8.3.13
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/442

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b0760d4485)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 22:22:42 +01:00
Bernd Kuhls
bd5916988a package/tor: bump version to 0.4.8.13
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3622321b17)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 22:14:41 +01:00
Bernd Kuhls
1af9d61495 package/ghostscript: security bump version to 10.04.0
Release notes:
https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/tag/gs10040

Fixes CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954,
CVE-2024-46955 & CVE-2024-46956.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7e04066369)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 22:06:58 +01:00
Bernd Kuhls
6b141aac09 package/jsoncpp: bump version to 1.9.6
Release notes:
https://github.com/open-source-parsers/jsoncpp/releases/tag/1.9.6

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d7dbcfb982)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 22:06:06 +01:00
Bernd Kuhls
2f6c9f8632 package/libpng: bump version to 1.6.44
Release notes:
https://sourceforge.net/p/png-mng/mailman/message/58815959/
https://raw.githubusercontent.com/pnggroup/libpng/v1.6.44/ANNOUNCE

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 583bb434ff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 21:57:38 +01:00
Bernd Kuhls
2d7514186b package/libopenh264: bump version to 2.4.1
Release notes:
https://github.com/cisco/openh264/releases/tag/v2.4.1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fe8a141a84)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 21:55:32 +01:00
Bernd Kuhls
875a47470e package/libldns: bump to version 1.8.4
Switched _SITE to https.

Changelog: https://github.com/NLnetLabs/ldns/blob/1.8.4/Changelog

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d9db8cfd78)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 21:52:49 +01:00
Waldemar Brodkorb
e81be1b267 package/file: fix musl compile issue
It is not totally clear which update is responsible for the
breakage. The breakage has been occurring for as long as Jan 2022.
Therefore it should be backported to older supported buildroot releases.

Add a patch from Gentoo people, also reported Upstream to fix the
issue.

Fixes:

 http://autobuild.buildroot.org/results/abf/abfe66cec3680d396c5774ba492f34599e513edc/

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 71f36ef938)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 21:43:57 +01:00
Adrian Perez de Castro
bd1d787637 package/wpebackend-fdo: bump version to 1.14.3
This is a bugfix release which plugs a couple of small leaks, and
includes patch "0001-Cast-to-EGLNativeWindowType-explicitly.patch",
which can now be removed. Release notes:

  https://wpewebkit.org/release/wpebackend-fdo-1.14.3.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ab3fb12c79)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 21:10:25 +01:00
Thomas Petazzoni
18a325d3a4 package/ltrace: mark as unavailable on musl
Commit bf9583a502 enabled elfutils on
musl, as well as all its reverse dependencies, including ltrace. Turns
out that even with elfutils fixed, ltrace doesn't build on musl.

Fabrice proposed a patch to fix it, at:

  https://patchwork.ozlabs.org/project/buildroot/patch/20231104155857.110364-1-fontaine.fabrice@gmail.com/

but ltrace has no active upstream, and some aspects of the patch don't
look correct. So err on the safe side and make ltrace unavailable for
musl configurations.

Fixes:

  http://autobuild.buildroot.org/results/a3a5c46e8562d3f091a9b4b205322168fbf9d16b

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 859bd54582)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 21:05:51 +01:00
Julien Olivain
0b32232cde support/testing: add unbound runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 04c91340ff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-12 13:34:01 +01:00
Julien Olivain
312984bdbd support/testing: package: bitcoin: fix test by increasing timeouts
Generating Bitcoins to an address can take longer than the current
timeout, on slow runners. This commit fixes this issue by increasing
the timeout on specific commands. This issue was also observed more
frequently on newer bitcoin-core version 28.0.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/7782083081

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 859c4ea5f7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 16:55:57 +01:00
Maxim Kochetkov
2e056c4776 package/postgresql: fix build without BR2_TOOLCHAIN_HAS_THREADS_NPTL
Since commit: https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=52afe563206e753f4c45c014fee2459ad0855826
postgrsql fails to build with toolchains without threads support:

misc.c: In function 'ecpg_gettext':
misc.c:541:51: error: 'PTHREAD_MUTEX_INITIALIZER' undeclared (first use in this function)
  541 |         static pthread_mutex_t binddomain_mutex = PTHREAD_MUTEX_INITIALIZER;
      |                                                   ^~~~~~~~~~~~~~~~~~~~~~~~~
misc.c:541:51: note: each undeclared identifier is reported only once for each function it appears in
misc.c:552:24: warning: implicit declaration of function 'pthread_mutex_lock' [-Wimplicit-function-declaration]
  552 |                 (void) pthread_mutex_lock(&binddomain_mutex);
      |                        ^~~~~~~~~~~~~~~~~~
misc.c:569:24: warning: implicit declaration of function 'pthread_mutex_unlock' [-Wimplicit-function-declaration]
  569 |                 (void) pthread_mutex_unlock(&binddomain_mutex);
      |                        ^~~~~~~~~~~~~~~~~~~~

Option "--disable-thread-safety" will be dropped in PG 17, so
this patch is needed only for 16.x branch.

Fixes: 73dd1d6b96 ("package/postgresql: security bump version to 16.3")
Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 747a41c19c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 16:46:20 +01:00
Bernd Kuhls
7b062accfb package/libxml2: bump version to 2.13.4
Release notes:
https://download.gnome.org/sources/libxml2/2.13/libxml2-2.13.4.news

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fb4d73973b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 15:34:26 +01:00
Marcus Hoffmann
a480672ef0 package/nethogs: add patch to fix version generation
This fixes nethogs being built with the (mangled) buildroot version
name from the outer buildroot git repo.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3d28ee3318)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 15:32:10 +01:00
He Haorui
1b02ba29ab package/openjdk: fix typo in help text of openjdk zero
Signed-off-by: He Haorui <hehaorui1999@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9f3e805428)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 15:31:38 +01:00
Julien Olivain
5ab7b6f267 package/liblinear: change homepage url to use https
The package homepage http url redirects to https. This commit updates
this url to directly use https.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5440d6c446)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 15:21:17 +01:00
Julien Olivain
53b14b7cee package/liblinear: fix _SITE url
The package _SITE url only contains the latest version at a given point
in time. When a new version is published, it is replacing the old one.

This issue was not detected because the archive was downloaded from the
sources.buildroot.org backup mirror, when the primary source became
unavailable.

Since commit 559bb33ae "support/testing: do not use s.b.o" [1], the
runtime test infrastructure is disabling this backup mirror. This
makes the nmap runtime test failing [2], which is using liblinear as
a dependency.

The liblinear package author confirmed in a private email that all the
releases, including the latest version, are all kept in the "oldfiles"
directory.

This commit fixes this download issue by updating the _SITE url to that
location. While at it, this commit also change the url to use https
(since the http equivalent redirects to https).

Fixes:
- [2]

[1] 559bb33ae7
[2] https://gitlab.com/buildroot.org/buildroot/-/jobs/7948008007

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8b18c67f26)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 15:21:14 +01:00
Julien Olivain
4ed30dd7cb support/testing: add python-pyqt5 test
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d8c2c2cb57)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 14:33:59 +01:00
Ralf Dragon
4c4c1f54b3 package/python-pyqt5: add missing SIP module
This fixes the following runtime error when importing PyQt5 in python:

from PyQt5.QtCore import *
ModuleNotFoundError: No module named 'PyQt5.sip'

The problem was likely triggered by the atomic upgrade from 5.7 to
5.15 in b36ce7e. This commit is part of the 2022-2024 LTS.

Signed-off-by: Ralf Dragon <hypnotoad@lindra.de>
Tested-by: Andreas Naumann <anaumann@ultratronik.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ba09a448f1)
[Peter: reword commit summary]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:45:50 +01:00
Ralf Dragon
1e94d7913a package/python-pyqt5-sip: new package
This packages adds the PyQt5.sip module.

The official documentation [1] mentions that this module is needed
during PyQt5 runtime. It is currently compiled without any
dependencies to Qt or PyQt5, but it seems quite useless without it.
The module was introduced together with PyQt 5.11 [2].

[1] https://www.riverbankcomputing.com/static/Docs/PyQt5/installation.html#building-and-installing-from-source
[2] https://www.riverbankcomputing.com/static/Docs/PyQt5/incompatibilities.html#pyqt-v5-11

Signed-off-by: Ralf Dragon <hypnotoad@lindra.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0281a71fe9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:45:15 +01:00
Cody Green
1992d651b8 package/sysvinit: add version number to SYSVINIT_MAKE_OPTS
Version environment variable VERSION=$(VERSION) is set in the top level
Makefile of the sysvinit:
$(MAKE) VERSION=$(VERSION) -C src $@

Build command SYSVINIT_BUILD_CMDS doesn't use the top level Makefile, but
src/Makefile instead without setting the VERSION variable, which leads to
undefined VERSION macro in src/init.c.

Add VERSION=$(SYSVINIT_VERSION) to SYSVINIT_MAKE_OPTS to make the VERSION
environment variable available in the src/Makefile.

Signed-off-by: Cody Green <cody@londelec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 954098b142)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:34:44 +01:00
Brandon Maier
dbe772104c utils/check-package: add inline script requirements
The check-package tool requires some PyPi package to be installed before
it can run. This is typically done by manually installing them into the
user's global Python environment or setting up a virtual environment,
then manually installing each dependency.

Python recently defined a format for managing script dependencies as
inline metadata[1]. This can be used with the `uv` tool to run a Python
script and automatically install the minimum required version of Python
and PyPi dependencies.

With this change, it's now possible to run check-package with

  uv run -s ./utils/check-package

Note that, because check-package does not have the '.py' file extension
we must specify the `-s` or `--script` argument. That argument was added
very recently in release 0.4.19[2].

I set the minimum python to 3.9 as that is the oldest version still
supported[3]. I verified 3.9 works by running

  uv run -p 3.9 -s ./utils/check-package `git ls-tree -r --name-only HEAD` --ignore-list=.checkpackageignore

[1] https://packaging.python.org/en/latest/specifications/inline-script-metadata/#script-type
[2] https://github.com/astral-sh/uv/releases/tag/0.4.19
[3] https://devguide.python.org/versions/

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6ffcdb52e8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:15:05 +01:00
Brandon Maier
c5faf339e2 docs/manual/adding-packages-tips: mention check-package requirements
Call out the requirements to run check-package and mention that Docker
can be used to run check-package without installing dependencies.

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 68de69c4d7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:13:28 +01:00
Raimundo Sagarzazu
5383540383 package/jailhouse: fix python helper scripts installation
When compiling jailhouse with BR2_PACKAGE_JAILHOUSE_HELPER_SCRIPTS=y,
installation is failing with error:

    /bin/sh: -c: line 1: syntax error near unexpected token ')'

This error is due to an extra ')' character in the macro
JAILHOUSE_INSTALL_HELPER_SCRIPTS.

This commit fixes this typo.

Signed-off-by: Raimundo Sagarzazu <rai.sagarzazu@outlook.com>
[Julien: reworded the commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 10d25d98ed)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:09:22 +01:00
Dario Binacchi
05bf32e2aa package/iproute2: fix building error using designated initializers
This patch fixes the following error:

arpd.c:442:17: error: initialization of 'int' from 'void *' makes integer from pointer without a cast [-Wint-conversion]
  442 |                 NULL,   0,

The analysis of socket.h [1] containing the msghdr structure shows that
it has been modified with the addition of padding fields, which cause
the compilation error:

struct msghdr {
	void *msg_name;
	socklen_t msg_namelen;
	struct iovec *msg_iov;
#if __LONG_MAX > 0x7fffffff && __BYTE_ORDER == __BIG_ENDIAN
	int __pad1;
#endif
	int msg_iovlen;
#if __LONG_MAX > 0x7fffffff && __BYTE_ORDER == __LITTLE_ENDIAN
	int __pad1;
#endif
	void *msg_control;
#if __LONG_MAX > 0x7fffffff && __BYTE_ORDER == __BIG_ENDIAN
	int __pad2;
#endif
	socklen_t msg_controllen;
#if __LONG_MAX > 0x7fffffff && __BYTE_ORDER == __LITTLE_ENDIAN
	int __pad2;
#endif
	int msg_flags;
};

The use of designated initializers allows the issue to be fixed.

[1] iproute2/host/mips64-buildroot-linux-musl/sysroot/usr/include/sys/socket.h

Fixes:
- http://autobuild.buildroot.org/results/e4cdfa38ae9578992f1c0ff5c4edae3cc0836e3c

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 57d94b293b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:04:25 +01:00
Bernd Kuhls
b39aef82bc {linux, linux-headers}: bump 5.{10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 70359eaa0d)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-11 11:01:51 +01:00
Bernd Kuhls
24df18a148 package/python3: bump version to 3.12.7
Release notes:
https://blog.python.org/2024/10/python-3127-released.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b6bc091272)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 18:10:03 +01:00
Erico Nunes
29eb209010 DEVELOPERS: drop my packages
I still follow Buildroot development and use it for some personal
projects, but no longer have the time to be an active contributor.
Some of these are important defconfigs and packages to have up-to-date
in Buildroot, and mostly other developers have been doing that work, so
I am dropping them so that someone from the active contributors can be
the maintainer contact for them.

Signed-off-by: Erico Nunes <nunes.erico@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1dc370cc90)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 18:03:49 +01:00
Bernd Kuhls
b9d4a86552 package/sqlite: bump version to 3.46.1
Release notes: https://sqlite.org/releaselog/3_46_1.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0ce51e24e5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:59:35 +01:00
Waldemar Brodkorb
ab14d47d9a package/bind: update to 9.18.31
See here for a changelog:
https://downloads.isc.org/isc/bind9/9.18.31/doc/arm/html/notes.html#notes-for-bind-9-18-31

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit abb6d4bddc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:57:24 +01:00
Waldemar Brodkorb
761eb4ad9e package/asterisk: update to 20.10.0
See here for a changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.10.0.md

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5ed6aa0fe3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:55:00 +01:00
Waldemar Brodkorb
06046f9e96 package/ruby: update to 3.3.5
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9208ee8467)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:51:51 +01:00
Giulio Benetti
3e6603ec12 package/libtraceevent: bump to version 1.8.4
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 54c88416e8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:49:37 +01:00
Giulio Benetti
5ab51299c1 package/trace-cmd: bump to version 3.3.1
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 43fb08c7b1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:49:31 +01:00
Bernd Kuhls
a29fdc342a package/intel-microcode: security bump version to 20240910
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240813
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240910

20240813 fixes
CVE-2024-24853: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html
CVE-2024-25939: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html
CVE-2024-24980: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html
CVE-2023-42667: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html
CVE-2023-49141: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html

20240910 fixes
CVE-2024-23984: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html
CVE-2024-24968: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6beab5b739)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:47:49 +01:00
Anisse Astier
f92e435be3 DEVELOPERS: drop Anisse Astier
I am no longer actively involved in Buildroot.

Signed-off-by: Anisse Astier <anisse@astier.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 91696fbcf1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:43:41 +01:00
Baruch Siach
c33d41c401 package/libcurl: ignore CVE-2024-32928
This vulnerability only affects libcurl deployments in Nest products
because of incorrect use.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7e739d49b2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:41:29 +01:00
Nicolas Cavallari
20f5ac1c7d package/libgit2: bump version to 1.8.2
Fixes a minor API issue.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0c66981002)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:39:30 +01:00
Julien Olivain
d4202afc1a support/testing: add iputils runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit eda78597eb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:32:28 +01:00
Sen Hastings
78e5db397e support/scripts/pkg-stats: add unsure_cves to cve_total calculation
When I initially made the CVE cells collapsible, I neglected to
count the unsure CVEs. This patch adds unsure CVEs to the cell collapsing
calcualation to ensure that cells with lots of unsure CVEs actually get collapsed.

This patch also removes the "+ 1" from the cve_total calculation,
which fixes the cve_total being off-by-one.
I'm not sure *why* I did that in the first place.

demo:
https://sen-h.codeberg.page/pkg-stats-demos/@pages/add-unsure_cves-to-cve_total-calc.html

Signed-off-by: Sen Hastings <sen@hastings.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 87b8428c40)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:27:45 +01:00
Waldemar Brodkorb
56ca98a3b1 package/bind: update to 9.18.30
See here for a Changelog:
https://downloads.isc.org/isc/bind9/9.18.30/doc/arm/html/notes.html#notes-for-bind-9-18-30

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit af27e44bb2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:23:45 +01:00
Waldemar Brodkorb
53c2f9ec2f package/bind: update to 9.18.29
See here for a Changelog:
https://downloads.isc.org/isc/bind9/9.18.29/doc/arm/html/notes.html#notes-for-bind-9-18-29

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e5dbcbf804)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:22:45 +01:00
Waldemar Brodkorb
807f5ab115 package/bind: force shared build
We got following error with --enable-static:

checking whether to build static libraries... yes
configure: error: Static linking is not supported as it disables dlopen() and certain security features (e.g. RELRO, ASLR)

Fixes:

 http://autobuild.buildroot.org/results/b55/b553898381ff0fdf5dd705fbb11b469b7564c6e6

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7b43e24818)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-09 17:22:26 +01:00
Francois Perrad
00a9042f4d package/libarchive: security bump to version 3.7.7
Security fixes:
- gzip: prevent a hang when processing a malformed gzip inside a gzip
  (#2366, OSS-Fuzz)
- tar: don't crash on truncated tar archives (#2364, OSS-Fuzz)
- tar: fix two leaks in tar header parsing (#2377)

Important bugfixes:
- 7-zip: read/write symlink paths as UTF-8 (#2252)
- cpio: exit with an error code if an entry could not be extracted (#2371)
- rar5: report encrypted entries (#2096)
- tar: fix truncation of entry pathnames in specific archives (#2360)

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 55d0c9a9a6)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-06 22:03:26 +01:00
Bernd Kuhls
61e995dc57 {linux, linux-headers}: bump 6.{1, 6, 10}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9a20320820)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-06 21:51:42 +01:00
Bryan Brattlof
db84c38c06 boot/uboot: update link to the U-Boot docs
The denx.de/wiki/U-Boot link now redirects to docs.u-boot.org/en/latest
Replace the link to the new location for the U-Boot documentation

Signed-off-by: Bryan Brattlof <bb@ti.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 164d9f0546)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-06 21:49:42 +01:00
Peter Korsgaard
c7618236c1 Update for 2024.08.1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024.08.1
2024-10-20 15:41:51 +02:00