Commit Graph

83070 Commits

Author SHA1 Message Date
Thomas Petazzoni
97f027ce41 package/gcc: fortran support now requires MMU
Since upstream commit
c66d1ba685b0d03b28967d2f7a48f6c64687efa2 ("Fortran: Add a shared
memory multi process coarray implementation [PR88076]"), libgfortran
now unconditionally uses fork(), which makes it impossible to build
Fortran support on noMMU architectures.

In follow-up commit efb497c23a6f4109bf8794342617cbc161c08301, it was
made even more clear: if you don't have fork() and you're not on
WIN32:

+#else
+#error "no way known to start child processes."
+#endif

There are apparently no autobuilder failures for this issue, but the
simple defconfig below allows to trigger the build failure:

BR2_arm=y
BR2_cortex_m7=y
BR2_GCC_VERSION_16_X=y
BR2_TOOLCHAIN_BUILDROOT_FORTRAN=y

Even though this issue is only starting from GCC 16.x, we make Fortran
unavailable on noMMU configurations regardless of the GCC version,
with the reasoning that:

1. Fortran on noMMU is unlikely to be in use

2. Moving forward, all future versions of GCC will have this
   restriction

Cc: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 12:05:16 +02:00
Thomas Petazzoni
dc500671df package/assimp: bump to version 6.0.5
6.0.3 Changelog:
https://github.com/assimp/assimp/releases#release-v6.0.3

6.0.4 Changelog:
https://github.com/assimp/assimp/releases#release-v6.0.4

6.0.5 Changelog:
https://github.com/assimp/assimp/releases#release-v6.0.5

Sadly, it doesn't fix any of the four CVEs currently affecting assimp
according to https://security.buildroot.org/master/component/assimp.

License file hash updated due to:

-Copyright (c) 2006-2021, assimp team
+Copyright (c) 2006-2026, assimp team

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:38:27 +02:00
Fiona Klute
949063f92b package/rygel: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project website instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
9a7cd39c5d package/cantarell: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project website instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
47464cfbe1 package/libsoup3: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
16c5253138 package/libsoup: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
19d11b5235 package/libsecret: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
55cb1e8eea package/libpeas: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
d7f835a4cb package/libgudev: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
3eda260ff4 package/libgee: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
15c4abfa52 package/gvfs: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Fiona Klute
8f0f84a400 package/at-spi2-core: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
project repository instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:16:20 +02:00
Franciszek Stachura
b00c3b58b9 package/memcached: security bump version to 1.6.45
https://github.com/memcached/memcached/wiki/ReleaseNotes1644
> Hot on the heels of the last security release is...
> another security release

https://github.com/memcached/memcached/wiki/ReleaseNotes1645
> So this is a lot of crash and security bugs.

Signed-off-by: Franciszek Stachura <fbstachura@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 11:00:29 +02:00
Bernd Kuhls
2722eb1216 package/rsync: security bump to version 3.5.0
https://download.samba.org/pub/rsync/NEWS#3.5.0

Fixes CVE-2026-53802, CVE-2026-53803, CVE-2026-53785, CVE-2026-53784,
CVE-2026-53793, CVE-2026-53795, CVE-2026-53796, CVE-2026-53797,
CVE-2026-53799, CVE-2026-53800, CVE-2026-53801, CVE-2026-53783,
CVE-2026-53786, CVE-2026-53798, CVE-2026-53788, CVE-2026-53789,
CVE-2026-53791, CVE-2026-53790, CVE-2026-53792, CVE-2026-53794,
CVE-2026-70461, CVE-2026-70458, CVE-2026-70456, CVE-2026-70457,
CVE-2026-70459, CVE-2026-70464, CVE-2026-70455, CVE-2026-70453,
CVE-2026-70452, CVE-2026-70463, CVE-2026-70460, CVE-2026-70462 &
CVE-2026-70454.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-15 10:27:31 +02:00
Bernd Kuhls
4146368857 package/libmicrohttpd: bump to version 1.0.10
Changelog since 1.0.9:

    Fix race in thread-per-connection mode on wake-up signal
    between daemon and thread that could result in lost wake-ups
    and thus connections that did not finish processing.

    Fix rare assertion failure in relation to suspend-and-resume
    processing (harmless if assertions were turned off).

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 22:33:54 +02:00
Bernd Kuhls
bb6edc3ea1 package/freeswitch: security bump version to 1.11.2
https://github.com/signalwire/freeswitch/releases/tag/v1.11.2

"This is an important release containing extensive security hardening
 across the core, mod_rtmp, mod_xml_rpc and mod_sofia, alongside the new
 interface allowlist, stricter DTLS/STUN validation for media sessions,
 and a modernized build system. We strongly encourage all users to
 upgrade to v1.11.2 as soon as possible."

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 22:22:51 +02:00
Bernd Kuhls
e9af6e0623 package/spandsp: bump version to 3.1.1
Removed patch which is included in this release.

Added patches to fix build of host utils and added dependency to
host-tiff. Otherwise build errors will occur when the host does not
provide tiffio.h.
These changes are necessary due to changes introduced by this version
bump which includes upstream commit
a60119408c
added in 2023. No LTS backport needed in buildroot.

Switched to github helper to download the current git tree instead of
using outdated tarball snapshots.

The currently used tarball contains the git tree as of 2020-08-14:
6ec23e5a7e

The newest tarball provided by upstream
https://files.freeswitch.org/downloads/libs/spandsp-3.0.0-0d2e6ac65e.tar.gz
contains the git tree as of 2023-06-16:
0d2e6ac65e

and lacks the fix for gcc-14.x added to buildroot in patch 0002.

Build-tested using this defconfig:

BR2_x86_64=y
BR2_x86_corei7=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_X86_64_CORE_I7_GLIBC_BLEEDING_EDGE=y
BR2_PER_PACKAGE_DIRECTORIES=y
BR2_INIT_NONE=y
BR2_PACKAGE_BLUEZ_ALSA=y
BR2_PACKAGE_FREESWITCH=y
BR2_PACKAGE_WIRESHARK=y

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 22:22:51 +02:00
Bernd Kuhls
bb254e2304 package/sofia-sip: bump version to 1.13.18
https://github.com/freeswitch/sofia-sip/compare/v1.13.17...v1.13.18

Removed patches which are included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 22:22:51 +02:00
Alexander Egorenkov
a0d58864d0 package/s390-tools: bump version to 2.44.0
For change log since v2.33.1, see:
https://github.com/ibm-s390-linux/s390-tools/blob/v2.44.0/CHANGELOG.md

Signed-off-by: Alexander Egorenkov <egorenar@linux.ibm.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 22:17:18 +02:00
Fiona Klute (Othermo GmbH)
ec8c6e4487 package/dracut: update URLs
The Github repository has been renamed from dracut-ng to dracut. The
wiki still exists, but the actual documentation has been moved to
dracut-ng.github.io.

Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 21:47:55 +02:00
Fiona Klute (Othermo GmbH)
7b2e657826 package/dracut: security bump to version 112
Upstream changelog:
https://github.com/dracut-ng/dracut/releases/tag/112

The changelog lists multiple "security related commits", though only
one mentions a CVE: CVE-2026-6893 [1], which allows a malicious DHCP
server to inject code into shell scripts.

[1] https://nvd.nist.gov/vuln/detail/CVE-2026-6893

Signed-off-by: Fiona Klute (Othermo GmbH) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 21:47:55 +02:00
Titouan Christophe
1213189e81 package/redis: bump to v8.10.0
Redis 8.10 is a new feature release, see the changes:
https://github.com/redis/redis/blob/8.10.0/00-RELEASENOTES

Since upstream commit 4dd58caa7cc23225b01f31e7bd9a1ed0af7e49ad [1],
Redis must now be built with `make build redis` to avoid building extra
modules, which are distributed within the source code archive since 8.10.0

Moreover, because the default upstream configuration now includes those
modules, attempting to launch redis-server with this would fail, because
it cannot load the missing modules. Therefore, we use the provided
`make sync-redis-conf` to regenerate a full redis configuration that
take the absence of modules into account, and we install that config
file instead of the default one.

[1] 4dd58caa7c

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 21:37:14 +02:00
Mattia Narducci
9809b30290 package/ser2net: backport security patch for GHSA-cgh5-39mg-vhfr
- GHSA-cgh5-39mg-vhfr: Path traversal in authentication via unsanitized
  username allows auth bypass
  https://github.com/cminyard/ser2net/security/advisories/GHSA-cgh5-39mg-vhfr
  No CVE ID yet.

Signed-off-by: Mattia Narducci <mattianarducci1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 21:31:49 +02:00
Thomas Perale
297f6f1921 package/vim: security bump to v9.2.0943
See the release announcement:

- https://www.vim.org/vim-9.2-released.php

It fixes the following vulnerabilities:

- CVE-2026-28417
- CVE-2026-28418
- CVE-2026-28419
- CVE-2026-28420
- CVE-2026-28421
- CVE-2026-28422
- CVE-2026-32249
- CVE-2026-33412
- CVE-2026-34714
- CVE-2026-34982
- CVE-2026-35177
- CVE-2026-39881
- CVE-2026-41411
- CVE-2026-42307
- CVE-2026-44656
- CVE-2026-45130
- CVE-2026-46483
- CVE-2026-47162
- CVE-2026-47167
- CVE-2026-52858
- CVE-2026-52859
- CVE-2026-52860
- CVE-2026-55693
- CVE-2026-55892
- CVE-2026-55895
- CVE-2026-57451
- CVE-2026-57452
- CVE-2026-57453
- CVE-2026-57455
- CVE-2026-57456
- CVE-2026-59856
- CVE-2026-59857
- CVE-2026-59858

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 21:29:02 +02:00
Bernd Kuhls
6ccc514cdc package/libarchive: security bump version to 3.8.9
https://github.com/libarchive/libarchive/releases/tag/v3.8.9
"Libarchive 3.8.9 is a security, bugfix and minor feature release."

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-13 21:15:27 +02:00
Thomas Perale
0e94f8d4de package/busybox: patch CVE-2024-58251
Based on the work of the Debian community, this patch fixes the
following vulnerability:

This CVE hasn't been addressed upstream and the bugs discussion is 404
[1]. But the same patch is applied on Busybox v1.38 in Yocto & Debian.

- CVE-2024-58251:
    In netstat in BusyBox through 1.37.0, local users can launch of
    network application with an argv[0] containing an ANSI terminal escape
    sequence, leading to a denial of service (terminal locked up) when
    netstat is used by a victim.

For more information, see:
  - https://salsa.debian.org/installer-team/busybox/-/blob/master/debian/patches/netstat-sanitize-argv0-for-p-CVE-2024-58251.patch
  - https://www.cve.org/CVERecord?id=CVE-2024-58251

This patch is still applied on Debian & Yocto as of busybox version
1.38.

[1] https://bugs.busybox.net/show_bug.cgi?id=15922

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-11 21:50:09 +02:00
Thomas Perale
092abbe035 package/busybox: re-introduce IGNORE_CVES for CVE-2023-42366
The patch `0008-awk.c-fix-CVE-2023-42366-bug-15874.patch` was introduced
in [1]. The IGNORE_CVES entry was removed while the patch is still
present in [2].

Re-introduce this IGNORE_CVES entry.

[1] 75c594d446 package/busybox: fix pending CVEs
[2] f88537c46b package/busybox: drop stale IGNORE_CVES entries

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: fix patch number in comment (s/0008/0007/)]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-11 21:49:18 +02:00
Sebastian Michel
6632b05900 package/pico{tool,-sdk}: security bump to 2.3.0
For change log, see:
https://github.com/raspberrypi/pico-sdk/releases/tag/2.3.0

Fixes CVE-2026-25833 (via mbedtls udpate in pico-sdk)
Fixes CVE-2026-25834 (via mbedtls udpate in pico-sdk)
Fixes CVE-2026-25835 (via mbedtls udpate in pico-sdk)

Signed-off-by: Sebastian Michel <sebastian.michel@oss.othermo.de>
[Julien: reword commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-11 21:20:49 +02:00
Thomas Petazzoni
19f9e2688f boot/grub2: properly handle autoreconf for target package
In commit e427f85e29 ("boot/grub2: fix
build issue since 2.14 version bump") we added some patches that
require regenerating the configure script. Consequently, we added
GRUB2_AUTORECONF = YES and HOST_GRUB2_AUTORECONF = YES.

Except that grub2 is special. While the host package is indeed using
host-autotols-package, the target package is using generic-package,
making GRUB2_AUTORECONF = YES basically a no-op.

Except that since we're patching configure.ac, the build realize at
build time that configure is older than configure.ac, regenerates it
at that time, and re-runs the configure script without the right
environment variables causing build failures.

We fix that by doing the autoreconf step "manually" for the target
grub2 package.

Fixes:

  https://autobuild.buildroot.org/results/11802ca1762e046328df324d33a1ad813fcd92e8/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-11 21:13:44 +02:00
Titouan Christophe
a3a53b05f8 package/redis: switch download site to https
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-11 20:54:08 +02:00
Alexis Lothoré
1209f3f7a1 DEVELOPERS: add Alexis Lothoré for libldns and python_scp tests
When adding the libldns and python_scp, the corresponding tests were not
added to DEVELOPERS, preventing correct notifications in case of tests
failures.

Add the missing entries to enable proper author notifications in case of
failing tests.

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-11 20:51:00 +02:00
Dario Binacchi
d38b4915e9 package/drogon: new package
Drogon is a C++17/20 based HTTP application framework. It can be used to
easily build various types of web application server programs using C++.

Project page: https://github.com/drogonframework/drogon

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-10 21:52:05 +02:00
Dario Binacchi
1c8e2c527e package/jsoncpp: add host variant
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-10 21:52:05 +02:00
Jon Henrik Bjørnstad
b4532b924a package/qbee-agent: bump version to 2026.27
Signed-off-by: Jon Henrik Bjørnstad <jonhenrik@qbee.io>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-10 21:15:56 +02:00
Neal Frager
0d372ec29a package/gcc-bare-metal: bump to gcc 16.2.0
https://gcc.gnu.org/pipermail/gcc-announce/2026/000193.html

GCC 16.2 is a bug-fix release from the GCC 16 branch
containing important fixes for regressions and serious bugs in
GCC 16.1 with more than 102 bugs fixed since the previous release.

For the list of bugs fixed in this version, see:
https://gcc.gnu.org/gcc-16/changes.html#16.2

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-10 20:41:10 +02:00
Nicolas Cavallari
3c2d207f8c package/libgit2: security bump version to 1.9.6
v1.9.5 fixes CVE-2026-53586, CVE-2026-53587, CVE-2026-53585,
CVE-2026-53584, CVE-2026-53583.  v1.9.6 fixes other non-security issues.

Release notes:
https://github.com/libgit2/libgit2/releases/tag/v1.9.5
https://github.com/libgit2/libgit2/releases/tag/v1.9.6

v1.9.5 also replaces a bundled vulnerable libpcre with libpcre2 and
updated the PCRE license in COPYING as a result.  This is mostly useful
on Windows; On POSIX systems, libgit2 can use regcomp() and Buildroot
already asks for it. See:
3a9102dae9

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
[Julien: add link to license update upstream commit]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-10 20:38:12 +02:00
Bernd Kuhls
d705d20506 {linux, linux-headers}: bump 6.12.x, 6.6.x, 7.1.x, 6.18.x series
Update the latest kernel releases to:
 - 6.12.102 -> 6.12.103
 - 6.6.150 -> 6.6.151
 - 7.1.7 -> 7.1.8
 - 6.18.43 -> 6.18.44

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-10 09:57:41 +02:00
Fiona Klute
fa32b20b10 package/uboot-tools: select p11-kit when building target mkeficapsule
Since upstream commit 0c716a157be460006a4b762625de329b5e36dbf9 (first
release: v2026.07) mkeficapsule supports PKCS#11 keys, and in turn
requires GnuTLS with PKCS#11 support.

Without it, building mkeficapsule for the target fails:

  HOSTLD  tools/mkeficapsule
/home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: tools/mkeficapsule.o: in function `main':
mkeficapsule.c:(.text.startup+0x530): undefined reference to `gnutls_pkcs11_init'
/home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: mkeficapsule.c:(.text.startup+0x544): undefined reference to `gnutls_pkcs11_add_provider'
/home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: mkeficapsule.c:(.text.startup+0x5fc): undefined reference to `gnutls_pkcs11_obj_list_import_url4'
/home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: mkeficapsule.c:(.text.startup+0x620): undefined reference to `gnutls_x509_crt_import_pkcs11'
/home/fiona/br-test-pkg/bootlin-armv5-uclibc/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/14.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: mkeficapsule.c:(.text.startup+0x1334): undefined reference to `gnutls_pkcs11_deinit'
collect2: error: ld returned 1 exit status

The error can be reproduced using "utils/test-pkg -c" with the
following config:

BR2_PACKAGE_UBOOT_TOOLS=y
BR2_PACKAGE_UBOOT_TOOLS_MKEFICAPSULE=y

For host-uboot-tools this was solved in Buildroot commit
6597563da7 "package/gnutls: add host
support for pkcs11" by unconditionally enabling PKCS#11 support for
host-gnutls. For the target a more fine-grained approach is desirable,
so instead select BR2_PACKAGE_P11_KIT if
BR2_PACKAGE_UBOOT_TOOLS_MKEFICAPSULE=y and propagate dependencies.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 17:30:46 +02:00
Bernd Kuhls
732a933e34 package/syslog-ng: security bump version to 4.12.0
https://github.com/syslog-ng/syslog-ng/blob/syslog-ng-4.12.0/NEWS.md

Fixes CVE-2026-39879.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 17:10:35 +02:00
Bernd Kuhls
54f66d8829 package/syslog-ng: needs libopenssl, not libressl
Buildroot commit 51ab6d2290 bumped the
package from version 4.8.3 to 4.11.0. Upstream commit
dbe9fb3069
added the usage of OpenSSL BIO_ functions in version 4.9.0 causing
build errors with LibreSSL:

lib/transport/transport-tls.c: In function 'BIO_s_transport':
lib/transport/transport-tls.c:125:3: error: implicit declaration of
 function 'BIO_meth_set_write_ex'; did you mean 'BIO_meth_set_write'?
 [-Wimplicit-function-declaration]
  125 |   BIO_meth_set_write_ex(meth, _BIO_transport_write);

lib/transport/transport-tls.c:126:3: error: implicit declaration of
 function 'BIO_meth_set_read_ex'; did you mean 'BIO_meth_set_read'?
 [-Wimplicit-function-declaration]
  126 |   BIO_meth_set_read_ex(meth, _BIO_transport_read);

because LibreSSL does not provide these functions.

Fixes:
https://autobuild.buildroot.net/results/117/117b3b38098df075d96167863d9f6b933a97eb64/
https://autobuild.buildroot.net/results/a39/a39ecc88a9342005b75660ee0ac60a1025fa6fc2/
https://autobuild.buildroot.net/results/6b3/6b3eb910ccdb67827f0c12cea0e3a63c5e6b68af/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 17:10:35 +02:00
Waldemar Brodkorb
8b6eea299b package/stunnel: security bump to 5.80
Fixes following CVE's:

CVE-2026-70368: Fixed an out-of-bounds memory
access triggered by logging attacker-controlled protocol messages longer
than 1,024 bytes (thanks to AISLE Research and Clemens Lang).

CVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost
destination filter using alternate local-address encodings and
interface-scoped IPv6 destinations (thanks to AISLE Research and Clemens
Lang).

Complete Changelog is here:
https://www.stunnel.org/NEWS.html

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 17:02:18 +02:00
Michael Fischer
baa86d079d package/sdl3_ttf: new package
SDL3_ttf is a TrueType font rendering library for SDL3, based on
freetype, with optional harfbuzz support.

https://github.com/libsdl-org/SDL_ttf

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 16:44:06 +02:00
Michael Fischer
f62a95d1d7 package/sdl3_image: new package
SDL3_image is an image file loading library for SDL3. For now only
optional PNG support (via libpng) is wired up.

https://github.com/libsdl-org/SDL_image

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 16:44:06 +02:00
Michael Fischer
ebd9443756 package/sdl3_gfx: new package
SDL3_gfx provides basic antialiased drawing routines such as lines,
circles or polygons, an interpolating rotozoomer for SDL surfaces,
framerate control and MMX image filters, as an extension to SDL3.

https://github.com/sabdul-khabir/SDL3_gfx

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 16:44:06 +02:00
Michael Fischer
2dd13e328f package/sdl3: new package
Simple DirectMedia Layer 3 is a library that allows programs
portable low level access to a video framebuffer, audio output,
mouse, and keyboard. It is not compatible with SDL2.

Compared to SDL2, SDL3 now requires <wchar.h> unconditionally. See:
https://github.com/libsdl-org/SDL/blob/release-3.4.12/include/SDL3/SDL_stdinc.h#L53

Compared to SDL2, SDL3 now always requires threads:
https://github.com/libsdl-org/SDL/blob/release-3.4.12/CMakeLists.txt#L3660

https://www.libsdl.org/
https://wiki.libsdl.org/SDL3/README-migration

Signed-off-by: Michael Fischer <mf@go-sys.de>
[Julien:
 - sort SDL3_CONF_OPTS alphabetically
 - add "depends on BR2_USE_WCHAR" in Config.in
 - add "depends on BR2_TOOLCHAIN_HAS_THREADS" in Config.in
 - disable Arm Neon with uClibc
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 16:44:06 +02:00
Thomas Petazzoni
d1473993d1 package/libxmlsec1: fix Config.in comment dependencies
Commit fef9cad1fe ("package/libxmlsec1:
bump version to 1.3.12") has introduced a gcc 7.x and atomic
dependency, but the Config.in comment dependencies are not correct:

+comment "libxmlsec1 needs a toolchain w/ gcc >= 7"
+       depends on  !BR2_TOOLCHAIN_GCC_AT_LEAST_7 || !BR2_TOOLCHAIN_HAS_ATOMIC

Indeed, we treat BR2_TOOLCHAIN_HAS_ATOMIC like an architecture
dependency in Buildroot, so it should be:

+comment "libxmlsec1 needs a toolchain w/ gcc >= 7"
+	depends on BR2_TOOLCHAIN_HAS_ATOMIC
+       depends on !BR2_TOOLCHAIN_GCC_AT_LEAST_7

so that the comment does NOT show up when BR2_TOOLCHAIN_HAS_ATOMIC is
false.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 13:02:10 +02:00
Marcin Niestroj
4456d899d0 support/testing: add runtime test for easydbus
Test an actual D-Bus round-trip using easydbus:
 - obtain a name on the system bus
 - subscribe to a signal on a chosen object/interface
 - emit signal with a string payload
 - run the easydbus mainloop
 - verify the handler received the expected payload

This covers both the default Lua interpreter (Lua 5.4) and LuaJIT
(Lua 5.1 ABI).

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
[Julien:
 - move test files into a rootfs-overlay
 - move common BR2_PACKAGE_{,EASY}DBUS configs to EasyDBusBase
 - make stricter check of script output
 - add DEVELOPERS entry for rootfs-overlay files
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 11:56:41 +02:00
Marcin Niestroj
d90bbf81f8 package/easydbus: bump to version 0.2.1
0.2.1 builds against Lua 5.4 (previously excluded), so drop the
!BR2_PACKAGE_LUA_5_4 dependency and the corresponding wording in
the comment.

Changelog:
https://github.com/mniestroj/easydbus/blob/master/CHANGELOG.md#021---2026-06-05

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 11:17:09 +02:00
Bernd Kuhls
53c29cf046 package/libvpl: update configure options
Upstream removed configure option INSTALL_EXAMPLE_CODE with commit
8434de3cbc
which was first released with version 2.11.0.

Upstream re-added a similar configure option named INSTALL_EXAMPLE_CODE
with commits
f8d989160e
7c803c8538
which were first released with version 2.15.0.

Buildroot bumped the package to 2.15.0 with
8e713dcc88 and forgot to rename the
configure option.

Remove libva/x11/wayland-related configure option due to upstream commit
8434de3cbc
which was first released with version 2.11.0. Remove the selection of
optional packages for these dependencies as well.

Removed unneeded libatomic handling.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-09 11:12:40 +02:00
Bernd Kuhls
11bf0dc202 package/gcc: 15.3.0: add GCC patch to fix mips/glibc build issue
Fixes a build error with glibc:

programs/locfile.c: In function 'align_locale_data':
programs/locfile.c:584:1: internal compiler error:
 in mips_load_store_insns, at config/mips/mips.cc:3137

by backporting an upstream fix which is already included in gcc 16.1.

The build error does not occur with gcc 14.x.

Fixes:
https://autobuild.buildroot.org/results/b925a444bb3ef03354224ac643b0b3160c4c5e8a/

The oldest recorded build error dates back to July 2025:
https://autobuild.buildroot.net/results/cb1/cb156fb938de26dd5dfe7fc48a1e061efa0284c7/

so a backport to LTS branches should be considered.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-08-09 10:35:09 +02:00