Commit Graph

76936 Commits

Author SHA1 Message Date
Thomas Petazzoni
98aa540ffb package/libcap: backport upstream patch to fix build on Xtensa
Following the bump of libcap to version 2.76 in commit
e2eb2ee58b, the build started failing on
Xtensa. The bug was reported upstream at
https://bugzilla.kernel.org/show_bug.cgi?id=219915 and was
subsequently fixed by upstream commit:

  https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=6cdd8cd72ebcedd6b1b6c989a7e5722d5d87f35c

Which we backport in this commit.

Fixes:

  https://autobuild.buildroot.org/results/b9ff9258f407898eeee80dd8cc4dd1d777f44c06

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b473d99416)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:58:11 +02:00
Thomas Perale
7fc6421be3 package/python-flask: security bump to version 3.1.1
Fixes the following security issues:

- CVE-2025-47278: In Flask 3.1.0, the way fallback key configuration was
    handled resulted in the last fallback key being used for signing,
    rather than the current signing key.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-47278
  - 73d6504063

For more details on the version bump, see the release notes:
  - https://github.com/pallets/flask/releases/tag/3.1.1

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 45439ae262)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:56:33 +02:00
Peter Korsgaard
c41e4b3dd9 package/screen: security bump to version 5.0.1
Fixes the following security issues:

CVE-2025-46805: do NOT send signals with root privileges
CVE-2025-46804: avoid file existence test information leaks
CVE-2025-46803: apply safe PTY default mode of 0620
CVE-2025-46802: prevent temporary 0666 mode on PTYs in attacher
CVE-2025-23395: reintroduce lf_secreopen() for logfile

https://lists.gnu.org/archive/html/info-gnu/2025-05/msg00002.html

For more details, see:
https://security.opensuse.org/2025/05/12/screen-security-issues.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a1aaec3f3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:55:04 +02:00
Titouan Christophe
b197cf7312 package/openssh: apply security patch for CVE-2025-32728 (sshd)
Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-32728

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add link to CVE in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 211e822d43)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:53:30 +02:00
Bernd Kuhls
620fb5e30f package/intel-microcode: security bump version to 20250512
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250512

CVE-2025-24495:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html

CVE-2024-28956:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html

CVE-2024-43420:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html

CVE-2025-20103:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html

"Note: INTEL-SA-01244 and INTEL-SA-01247 will be published on May 13th 2025"

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b3388c2556)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:51:40 +02:00
Kadambini Nema
3bab4d6d77 package/dropbear: security bump to version 2025.88
Fixes CVE-2025-47203.
https://security-tracker.debian.org/tracker/CVE-2025-47203

Release notes:
https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2025.88

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 915a351e2f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:49:47 +02:00
Bernd Kuhls
fe75d7905d package/dropbear: bump version to 2025.87
Changelog: https://matt.ucc.asn.au/dropbear/CHANGES

Upstream disabled sha1 by default:
f3465a34eb

Add the options to DROPBEAR_ENABLE_LEGACY_CRYPTO hook.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 05fb4526f9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:49:39 +02:00
Florian Larysch
0e932eb6b5 package/f2fs-tools: fix GCC 15 build
f2fs-tools had its own "bool" typedef which now conflicts with the C23
keyword, causing build failures on GCC 15.

Import a patch from upstream that fixes this.

Fixes: https://autobuild.buildroot.org/results/d17641582d1beaec9dcca4dc48a68d713cecfdc8 (and others)
Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 598dfb7c1a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-18 14:43:11 +02:00
Thomas Perale
2bed8a0c21 package/libraw: security bump to version 0.21.4
Fixes the following security issues:

- CVE-2025-43961: metadata/tiff.cpp has an out-of-bounds read in the
    Fujifilm 0xf00c tag parser.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43961
  - 66fe663e02

- CVE-2025-43962: phase_one_correct in decoders/load_mfbacks.cpp has
    out-of-bounds reads for tag 0x412 processing

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43962
  - 66fe663e02

- CVE-2025-43963: phase_one_correct in decoders/load_mfbacks.cpp allows
    out-of-buffer access

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43963
  - be26e7639e

- CVE-2025-43964: tag 0x412 processing in phase_one_correct in
    decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43964
  - a50dc3f112

For more details on the version bump, see the release notes:
  - https://github.com/LibRaw/LibRaw/releases/tag/0.21.4
  - https://github.com/LibRaw/LibRaw/releases/tag/0.21.3
  - https://github.com/LibRaw/LibRaw/compare/0.21.2...0.21.4

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a4249a2024)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:38 +02:00
Marcus Hoffmann
dae673fb63 package/python-django: security bump to 5.1.9
Fixes CVE-2025-32873 [1].
Django also updates setuptools[2], so we can remove the --skip-dependency-check
flag and need to update the package archive capitalization accordingly.

[1] https://www.djangoproject.com/weblog/2025/may/07/security-releases/
[2] bbf376bbc8

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 09299c5b0c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:34 +02:00
Julien Olivain
06c6c49fe8 package/xz: add security patches fixing CVE-2025-31115
This commit adds four upstream patches fixing the CVE-2025-31115
vulnerability. The reason there is four patches instead of one is to
exactly follow the advisory recommendation [1], which proposes the
patch [2]. This patch is in fact a concatenation of four commits. In
Buildroot, we track package patches as formatted by git, with extra
"Upstream:" headers. The patch [2] was split here in four for a
clearer traceability.

With the addition of those patches, the XZ_IGNORE_CVES is set
accordingly.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-31115

[1] https://github.com/tukaani-project/xz/security/advisories/GHSA-6cc8-p5mm-29w2
[2] https://tukaani.org/xz/xz-cve-2025-31115.patch

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 38494a0a61)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:29 +02:00
Bernd Kuhls
5e8adee60c package/berkeleydb: fix build with gcc-15.x
Inspired by
c250c61cc3

"GCC 15 defaults to C23.  The last release of this package was over a
 decade ago, and it is no longer maintained, therefore it should not be
 expected to compile to the latest standards."

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c1d422edde)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:24 +02:00
Thomas Petazzoni
4776614f2f package/libtirpc: backport upstream fixes for GCC 15.x issues
This commit backports two upstream commits that address GCC 15.x build
issues.

Fixes:

  https://autobuild.buildroot.org/results/abca98bc69ac51af3652ab2d0d187d1461f83515/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4745bad303)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:20 +02:00
Thomas Petazzoni
2f6eaa0389 package/gdb: add patch to fix GCC 15.x build issue with ARC-specific gdb
This commit adds the same patch that was already added to GDB 14.x,
15.x and 16.x to fix a GCC 15.x build issue.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit dc0691f038)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:08:17 +02:00
Thomas Petazzoni
b628d4a9d7 package/gdb: add patches for GCC 15.x compatibility
This commit backports an upstream patch fixing the bundled readline
library so that it builds with GCC 15.x.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 56c834400e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:49 +02:00
Florian Larysch
1c7120d159 package/bash: fix build with host GCC 15
bash uses K&R function declarations which have been removed in C23.

Since part of the build process (like the mkbuiltins helper) is written
in C, building bash now fails on hosts with GCC 15 (which defaults to
C23).

Since properly fixing this on the source code level is a larger
endeavor, just set the C standard to an old enough version for now.

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6d09b25d08)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:45 +02:00
Romain Naour
8c31fb8d11 configs/qemu_ppc*: backport a patch for GCC 15.x compatibility
powerpc kernel maintainer merged a patch [1] for GCC 15.x compatibility
that will likely be merged upstream soon.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?id=5a821e2d69e26b51b7f3740b6b0c3462b8cacaff

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 30cf5a0754)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:42 +02:00
Romain Naour
c120eb5df0 configs/qemu_mips*: backport a patch for GCC 15.x compatibility
Mips kernel maintainer merged a patch [1] for GCC 15.x compatibility
that will likely be merged upstream soon.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/mips/linux.git/commit/?id=0f4ae7c6ecb89bfda026d210dcf8216fb67d2333

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 97c7311c64)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:37 +02:00
Florian Larysch
869469e953 package/cpio: fix build with GCC 15
On systems running GCC 15, host-cpio will fail to build with errors like

  copyout.c:646:12: error: too many arguments to function 'xstat'; expected 0, have 2

and

  main.c:407:13: error: assignment to 'int (*)(void)' from incompatible pointer type 'int (*)(const char * restrict,  struct stat * restrict)' [-Wincompatible-pointer-types]

This was reported[1] and fixed upstream, but there is no new release
yet. Import the upstream patch for now.

Fixes:
https://autobuild.buildroot.org/results/a10c5f2b0f9cb05b2550fe97f1133deaaac97277/
(and many more)

[1] https://lists.gnu.org/archive/html/bug-cpio/2025-05/msg00000.html

Signed-off-by: Florian Larysch <fl@n621.de>
[Julien:
 - add missing "Signed-off-by:" in patch to fix check-package error
 - change "Upstream:" link to use the commitdiff in patch
 - add "Fixes:" in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e3cae9e1ca)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:34 +02:00
Julien Olivain
7e2b4f4d41 package/gmp: add patch to fix build with gcc-15
When using host gcc 15, host-gmp fails at configure time with
error message:

    configure: error: could not find a working compiler, see config.log for details

The error is due to the macro GMP_PROG_CC_WORKS in the file
acinclude.m4 containing C-code declaring functions without declaring
its parameters. This construct is now an error in C23, which is the
new default in gcc 15. See:
https://gcc.gnu.org/gcc-15/porting_to.html#c23

This commit fixes the issue by adding a package patch from
upstream changesets, not yet published in a release.

Even if gcc 15 is not yet included in Buildroot, this commit also
sets _AUTORECONF = YES for the target package in order to have this
package already fixed.

Fixes:
https://autobuild.buildroot.org/results/623634fa7bbeceeb6d90b15ce0abb1b9b4b24045/

Tested-by: Brigham Campbell <me@brighamcampbell.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 31569bcc1b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:31 +02:00
Joseph Zikusooka (ZIK)
4cf750826f package/m4: fix build failure with host-gcc 15
When compiling host-m4 1.4.19 with a host gcc 15 (which is the version
included in Fedora 42, released on 2025-04-15), compilation fails with
error:

    In file included from gl_avltree_oset.h:21,
                     from gl_avltree_oset.c:21:
    gl_oset.h:275:1: warning: 'nodiscard' attribute ignored [-Wattributes]
      275 | GL_OSET_INLINE _GL_ATTRIBUTE_NODISCARD int
          | ^~~~~~~~~~~~~~
    gl_oset.h:275:40: error: expected identifier or '(' before 'int'
      275 | GL_OSET_INLINE _GL_ATTRIBUTE_NODISCARD int
          |                                        ^~~

This error is due to the gnulib copy included in m4 1.4.19, which does
not detect properly the default C language standard of gcc 15 which
has been changed from "gnu17" to "gnu23". See [1]. Note that m4 1.4.19
is the latest version available at the time of this commit, and was
released in May 2021. The issue is tracked upstream in [2].

Upcoming m4 release is expected to fix this issue, by updating its
gnulib copy. See [3], which states: "Update to comply with newer C
standards, and inherit portability improvements from gnulib".

Until this new m4 version is released, this commit fixes the issue by
forcing the C langage standard to "-std=gnu17" (the previous gcc
default) when host-gcc 15 is detected.

Note that the "-std=gnu17" option was introduced in gcc 8. See [4].
This is the reason why this patch adds this option only when the
problematic gcc 15 version is detected.

See also the discussions around this patch at [5].

Fixes:
https://autobuild.buildroot.org/results/1c33ef0a710cfae13e496485787b351c8f951217/
(and many, many others)

[1] https://gcc.gnu.org/gcc-15/changes.html#c
[2] https://savannah.gnu.org/support/?111150
[3] https://git.savannah.gnu.org/cgit/m4.git/commit/?h=branch-1.4&id=a22c9802dd7e724eaefb21dc21d84ac2d3a49c89
[4] https://gcc.gnu.org/gcc-8/changes.html#c
[5] https://lore.kernel.org/buildroot/CAPWx8vsoJUt8YMJG1aUqFRK1=yizNbgjVjGL1Q1+9ygjJGnZLA@mail.gmail.com/

Signed-off-by: Joseph Zikusooka (ZIK) <zik@jambula.net>
Tested-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
[Julien:
 - change mail url to lore.kernel.org for stable link
 - reword, reflow and add extra info in the commit log
 - force -std=gnu17 only when host gcc-15 is detected
 - add a comment in .mk to remove the workaround at next bump
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7a07a9d155)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:27 +02:00
Julien Olivain
196043d0e8 Config.in: introduce BR2_HOST_GCC_AT_LEAST_{12..15}
Fedora 42 is planned to be released on 2025-04-22 [1].
It is also planned to include the upcoming gcc 15 release.
Gcc 15 is changing the default C language from -std=gnu17
to -std=gnu23 [2].

This change is expected to possibly introduce build failures [3].
In order to be prepared to fix those, this commit introduces the
BR2_HOST_GCC_AT_LEAST_{12..15} symbols.

[1] https://fedorapeople.org/groups/schedule/f-42/f-42-key-tasks.html
[2] https://gcc.gnu.org/gcc-15/changes.html#c
[3] https://savannah.gnu.org/support/?111150

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit cca8d68461)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:23 +02:00
Bernd Kuhls
1f565bda6e package/ghostscript: security bump to version 10.05.1
Release notes: https://ghostscript.readthedocs.io/en/gs10.05.1/News.html

"This release addresses CVEs: CVE-2025-27835, CVE-2025-27832,
 CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833,
 CVE-2025-27837, CVE-2025-27834, CVE-2025-46646"

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a1c7168760)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:19 +02:00
Patrik Olsson
4c033376a3 configs: rock4se: bump Linux versions
This patch bumps:
- Linux kernel to version 6.12.28 (LTS)

Signed-off-by: Patrik Olsson <johan.patrik.olsson@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 595dd3ae88)
[tperale: Only bump linux]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:15 +02:00
Bernd Kuhls
9c435793aa {linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 176c61266e)
[tperale: Dropped linux 6.13]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:11 +02:00
Doug Kehn
d1804e401f package/nss-pam-ldapd: bump version to 0.9.13
See the release announce:
https://arthurdejong.org/nss-pam-ldapd/release-0-9-13

Signed-off-by: Doug Kehn <rdkehn@gmail.com>
[Julien: add link to release announce]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit badda6da8e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:07 +02:00
Thomas Petazzoni
0161ac7af3 package/tpm2-pkcs11: bump to version 1.9.1
1.9.0..1.9.1 changes described at:

  https://github.com/tpm2-software/tpm2-pkcs11/releases/tag/1.9.1

Update suggested by https://gitlab.com/magerkraut at
https://gitlab.com/buildroot.org/buildroot/-/issues/109 as "There is a
issue with the database LOCK file".

Fixes:

  https://gitlab.com/buildroot.org/buildroot/-/issues/109

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 07eb63935a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:06:02 +02:00
Thomas Petazzoni
212e493ea0 package/netsnmp: backport patch fixing runtime with Linux >= 6.7
This issue has been reported in
https://gitlab.com/buildroot.org/buildroot/-/issues/110, where netsnmp
would not work on Linux >= 6.7 systems due to an issue in parsing
/proc/net/snmp. We simply backport a fix that's upstream, but not yet
in any stable release.

Fixes:

  https://gitlab.com/buildroot.org/buildroot/-/issues/110

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit af674f3ecf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:58 +02:00
Kadambini Nema
476163fc7e package/hwdata: bump version to 0.395
Release notes:
https://github.com/vcrhonek/hwdata/releases/tag/v0.395

Changelog:
https://github.com/vcrhonek/hwdata/compare/v0.394...v0.395

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1df9852cc4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:54 +02:00
Thomas Petazzoni
b8a4a82cb6 support/dependencies/dependencies.sh: awk is needed by Buildroot
A basic Fedora 42 container does not have 'awk' installed, but it is
needed by Buildroot. First by check-host-python3.sh:

support/dependencies/check-host-python3.sh: line 6: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found

but then even building host-expat assumes awk is available:

config.status: creating Makefile
./config.status: line 1404: awk: command not found
config.status: creating expat.pc
./config.status: line 1404: awk: command not found

Since it's a pretty basic tool, make it part of the tools checked by
dependencies.sh. One minor annoyance is that check-host-python3.sh is
executed *before* dependencies.sh does its thing, so when 'awk' is not
available, we end up seeing:

support/dependencies/check-host-python3.sh: line 6: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found
support/dependencies/check-host-python3.sh: line 19: awk: command not found
which: no awk in (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin)
You must install 'awk' on your build machine
make: *** [support/dependencies/dependencies.mk:27: dependencies] Error 1

It would be nice to have the awk check *before* it gets used in
check-host-python3.sh, but that's a topic for another patch.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 448ceefa78)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:49 +02:00
Thomas Petazzoni
0bcad41800 package/gdb: bump 15.x series to 15.2
Changes:

 Set GDB version number to 15.2.
 [gdb/python] Make sure python sys.exit makes gdb exit
 [gdb/symtab] Revert "Change handling of DW_TAG_enumeration_type in DWARF scanner"
 [gdb/testsuite] Add regression test for PR32158
 [gdb/testsuite] Add gdb.dwarf2/enum-type-c++.exp, regression test for PR31900.
 gdb-15-branch: Clear the X86_XSTATE_MPX bit in XCRO for x32
 Recognize -2 as a tombstone value in .debug_line
 [gdb] Handle ^C during disassembly
 Mark unavailable bytes of limited-length arrays when allocating contents
 gdb/solib-frv: move lm_info object to solib
 Fix loading a saved recording
 Bump GDB's version number to 15.1.90.DATE-git.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e40bf89e40)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:45 +02:00
Thomas Petazzoni
d8d201c95b package/gdb: bump 16.x series to 16.3
Changes:

 Set GDB version number to 16.3.
 gstack: [downstream regression] Output file names and line numbers
 Fix build failure for gdbserver's raw_compare self test
 Fix gdbserver crashes on SVE/SME-enabled systems
 gdb: allow selecting default fg/bg colors in tui mode
 gdb: Fix assertion failure when inline frame #0 is duplicated
 [gdb/tdep] Rewrite i386_canonicalize_syscall
 [gdb/record] Fix out-of-bounds write in aarch64_record_asimd_load_store
 gdb/dwarf: save DWARF version in dwarf2_loclist_baton, remove it from dwarf2_per_cu
 Fix segfault if target_fileio_read_alloc fails
 gdb/tui: use wrefresh if output is not surpressed
 [gdb/corefiles] Fix segfault in core_target_open
 Bump GDB's version number to 16.2.90.DATE-git.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b793160964)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:41 +02:00
Romain Naour
664d66bee5 configs/qemu: update defconfigs to Linux 6.12.27
Update all qemu defconfigs to the latest Kernel LTS version
where first patches fixing gcc 15 builds were backported [1][2].

Fixing kernel builds with gcc 15 is a prerequisite to build
and test new Bootlin bleeding-edge toolchains [3].

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=247abefeb50d56c83ce7abda5a378e395ee8af72
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=593d852f7fe21a225df4866799b6b539de6b8255
[3] https://toolchains.bootlin.com

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5dacd8e056)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:37 +02:00
Titouan Christophe
7f914a368c package/sqlite: add patch to fix CVE-2025-29087
This patch was commited upstream, and released as part of sqlite 3.49.1

However, the configuration system changed between sqlite 3.48 and 3.49
from autotools to autosetup, and this has proven challenging to support
in Buildroot (see `git log package/sqlite`), hence why we are still on
sqlite 3.48.

Therefore, until the package build infrastructure correctly supports
building sqlite 3.49, let's simply import the upstream patch to address
the CVE.

Note: the upstream patch is on the orignal sqlite sources. Buildroot is
using the sqlite "amalgamation" source archive, which basically
concatenate all the source files in a single "sqlite3.c" file. So the
patch was reformated to apply correctly on the sqlite release archive.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-29087

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien:
 - reformat patch to be applicable on amalgamated sqlite sources
 - add comment in commit log about patch format
 - add "Fixes:" in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 835b5659ea)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:05:32 +02:00
Julien Olivain
b80e9d6299 configs/friendlyarm_nanopi_r3s: fix host linux headers custom version
Since its introduction in commit [1], the
friendlyarm_nanopi_r3s_defconfig is failing to build with error:

    Incorrect selection of kernel headers: expected 6.12.x, got 6.13.x

The error happens because the defconfig has:
BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_12=y
and
BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.13.4"

This commit fixes the issue by setting instead:
BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.28"

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/9887216429

[1] 41734e00c0

Cc: Sergey Kuzminov <kuzminov.sergey81@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 74c4dd4150)
[Thomas:
  Since this has been introduced in LTS branch I set the kernel
  version to 6.12.x present in LTS instead of changing the linux header
  version.
]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-15 17:03:44 +02:00
Peter Korsgaard
7109348aaf package/jo: bump version to 1.9
Mainly bugfixes (1.8 was deleted):

https://github.com/jpmens/jo/releases/tag/1.9
https://github.com/jpmens/jo/releases/tag/1.7

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b8134a1195)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:45 +02:00
Kadambini Nema
c70f032092 package/tzdata: bump version to 2025b
Release notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/6JVHNHLB6I2WAYTQ75L6KEPEQHFXAJK3/

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4acbe7a35c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:43 +02:00
Kadambini Nema
83acde521f package/zic: bump version to 2025b
Release notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/6JVHNHLB6I2WAYTQ75L6KEPEQHFXAJK3/

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 36c969cc4c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:41 +02:00
Julien Olivain
9da761ed3d configs/imx28evk: enable BR2_DOWNLOAD_FORCE_CHECK_HASHES
This commit adds BR2_DOWNLOAD_FORCE_CHECK_HASHES=y in the defconfig
and adds custom hash files. The exception entry in .checkpackageignore
is also removed.

Cc: Fabio Estevam <festevam@gmail.com>
Reviewed-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 683681261b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:05:19 +02:00
Thomas Perale
6e18929f04 package/bird: fix build failure with bfd
The 'bird' package with only the `BR2_PACKAGE_BIRD_BFD=y` protocol
enabled fails to build with the following error

```
bison  -Dparse.lac=full -Dparse.error=verbose -dv -pcf_ -b obj/conf/cf-parse obj/conf/cf-parse.y
proto/bfd/config.Y:204.27-33: error: symbol 'ADDRESS' is used, but is not defined as a token and has no rules
  204 |  | bfd_show_sessions_args ADDRESS net_or_ipa { net_copy(&($$->address...
      |                           ^~~~~~~
```

The `ADDRESS` token is defined only when certain protocols (e.g. OSPF,
RIP, RPKI, or BGP) are enabled. As a result, builds including any of
these protocols do not encounter the issue.

The issue can be reproduced with the commands:

    cat >.config <<EOF
    BR2_aarch64=y
    BR2_TOOLCHAIN_EXTERNAL=y
    BR2_PACKAGE_BIRD=y
    BR2_PACKAGE_BIRD_BFD=y
    # BR2_PACKAGE_BIRD_BGP is not set
    EOF
    make olddefconfig
    make bird

This patch backports upstream commits that define the `ADDRESS` token
for the BFD protocol.

Fixes:
https://autobuild.buildroot.org/results/68c5dd84585a7018ad57ea3e7134748c08858ef7/

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add commands to reproduce the issue]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 80cfdcb86b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:45 +02:00
Alexander Mukhin
0716a6f838 DEVELOPERS: remove Alexander Mukhin from tinyproxy and zfs
Signed-off-by: Alexander Mukhin <alexander.i.mukhin@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9d3c4130d7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:43 +02:00
Kadambini Nema
be132ec5ba package/traceroute: bump to version 2.1.6
For change log since 2.1.3, see:
https://sourceforge.net/projects/traceroute/files/traceroute/traceroute%202.1.4/
https://sourceforge.net/projects/traceroute/files/traceroute/traceroute%202.1.5/
https://sourceforge.net/projects/traceroute/files/traceroute/traceroute%202.1.6/

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
[Julien: add links to change logs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a31dc4c21a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:41 +02:00
Kadambini Nema
561dd7fa07 package/hwdata: bump version to 0.394
Release notes:
https://github.com/vcrhonek/hwdata/releases/tag/v0.394

Changelog:
https://github.com/vcrhonek/hwdata/compare/v0.392...v0.394

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b18f95c155)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:39 +02:00
Kadambini Nema
591a7634d6 package/mtools: bump version to 4.0.48
Release notes:
https://lists.gnu.org/archive/html/info-mtools/2025-02/msg00019.html

Changelog:
https://svn.savannah.gnu.org/viewvc/mtools/tags/4.0.48/NEWS?view=markup

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ee595c95ae)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:37 +02:00
Waldemar Brodkorb
1c040b187d package/ruby: update to 3.4.3
See here for a changelog:
https://github.com/ruby/ruby/releases/tag/v3_4_3

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 93cd246dc7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:35 +02:00
Giulio Benetti
41f8b8daa3 package/sunxi-mali-utgard-driver: bump to version 2025-05-02
It builds up to Linux 6.13

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 50c7542326)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:33 +02:00
José Luis Salvador Rufo
5ca8d70907 package/zfs: add upstream patch to fix musl
This patch fixes the `S_IFMT` undeclared error in `statx.c` when musl
is used.

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a672635a1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:31 +02:00
José Luis Salvador Rufo
c1e2a6e251 package/zfs: bump version to 2.3.2
For release note, see:
https://github.com/openzfs/zfs/releases/tag/zfs-2.3.2

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 18ecf1c648)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:28 +02:00
José Luis Salvador Rufo
d7892184a0 package/zfs: bump version to 2.3.1
For release note, see:
https://github.com/openzfs/zfs/releases/tag/zfs-2.3.1

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e74584288c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 21:03:11 +02:00
James Hilliard
c54ef55dfc package/hiredis: bump to version 1.3
For change log, see:
https://github.com/redis/hiredis/releases/tag/v1.3.0

Note this version raises the minimum cmake version from 3.0.0 to 3.7.0.
This change fixes build with a host-cmake 4.0.0 (which has removed
compatibility with cmake < 3.5). Such a failure happens on Arch Linux
which is now providing cmake 4.0.

Fixes:
https://autobuild.buildroot.org/results/662fc308807866f9e25655541f6a8ef9ff32e55a/

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add details in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 11c7d00a59)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-05-14 20:59:07 +02:00