Commit Graph

77576 Commits

Author SHA1 Message Date
Bernd Kuhls
9a34df3678 package/mpv: remove stale patch
Buildroot commit 8f69974c20 switched the
buildsystem of mpv from waf to meson but forgot to remove a patch which
fixed a waf-related build error.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 942b88e693)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:50:21 +02:00
Francois Perrad
b53d612a80 package/lua: bump to version 5.4.8
For differences with 5.4.7, see:
https://www.lua.org/work/diffs-lua-5.4.7-lua-5.4.8.html

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[Julien: add link to diff with previous version]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 393d7e4d21)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-02 18:38:21 +02:00
Bernd Kuhls
17a252545a package/python3: security bump to 3.13.5
3.13.4 fixes CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, CVE 2025-4435
and CVE 2025-4517 but introduced some regressions fixed in 3.13.5.

Release notes:
https://www.python.org/downloads/release/python-3135/
https://www.python.org/downloads/release/python-3134/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1bb4a955fa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:44:22 +02:00
Joseph Kogut
883c977c9a package/python-glslang: bump to version 15.3.0
See changelog:
https://github.com/KhronosGroup/glslang/blob/15.3.0/CHANGES.md

Fixes build issue: error: ‘uint32_t’ has not been declared, encountered
on GCC v15, caused by cstdint not being implicitly included.

https://bugs.gentoo.org/937261

This commit also adds host-spriv-tools in _DEPENDENCIES to use the
version packaged in Buildroot. It also adds
ALLOW_EXTERNAL_SPIRV_TOOLS=ON in _CONF_OPTS, which was added in upstream
commit [1], introduced in version 13.0.0.

Also, when trying to build this python-glslang version 15.3.0 on a host
providing cmake < 3.26, the configuration fails with the error message:

    CMake Error at CMakeLists.txt:345 (add_test):
      Error evaluating generator expression:

        $<TARGET_RUNTIME_DLL_DIRS:spirv-remap>

      Expression did not evaluate to a known generator expression

This happens in the Buildroot docker reference image, which provides a
cmake version 3.25. To workaround this issue which happen in glslang
testing code, this commit disable those tests by adding
GLSLANG_TESTS=OFF in _CONF_OPTS.

[1] 3805888a57

Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
[Julien:
 - resolve merge conflict
 - update changelog link to use version tag
 - disable glslang tests
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 53076f0eba)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:44:16 +02:00
Bernd Kuhls
ebe6cba2b1 {linux, linux-headers}: bump 6.{6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7a1d7189a0)
[thomas: dropped version 6.15]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:43:45 +02:00
Giulio Benetti
4b572de8e5 package/libblockdev: security bump to version 3.3.1
This version fixes CVE-2025-6019, see:
https://github.com/storaged-project/libblockdev/blob/3.3.1/NEWS.rst

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-6019

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add link to CVE]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0233c854b1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:42:04 +02:00
Romain Naour
3661052ce7 package/squashfs: update URL to source archive after Github changes
The squashfs 4.6.1 archive hash has been changed suddenly two weeks
ago by Github without any intended changes from the squashfs maintainer
[1].

The orginal squashfs 4.6.1 archive has been manually uploaded again.

Update the URL to download the archive that match the expected hash.

Since we don't use the github download helper anymore, the squashfs
archive name is changed from squashfs-4.6.1.tar.gz to
squashfs-tools-4.6.1.tar.gz.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/10355448207
(and many more...)

See:
[1] https://github.com/plougher/squashfs-tools/issues/313

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e374ae03b5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:42:00 +02:00
Bernd Kuhls
59425e9b4a package/clamav: security bump version to 1.0.9
Fixes CVE-2025-20260:
"The code flaw was present prior to version 1.0.0, but a change in
 version 1.0.0 that enables larger allocations based on untrusted data
 made it possible to trigger this bug."
https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 09f6aa642d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:54 +02:00
Bernd Kuhls
e851f1341b package/mjpg-streamer: bump version to v1.0.0-1-g310b29f4
Add fix to build with cmake 4.x.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --tags --abbrev=40" format in _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f1adb7952d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:43 +02:00
Bernd Kuhls
c54ca15c65 package/libplatform: bump version
Removed patch which is included in this release:
e48db06c64

Use upstream-provided license file:
92220248b1

This bump includes compatibility with cmake 4.x:
d7faed1c69

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: remove patch entry in .checkpackageignore]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4da169b03e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:14 +02:00
Bernd Kuhls
4fe2c33f19 package/rapidjson: bump version
This bump includes compatibility with cmake 4.x:
ebd87cb468

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6e2b109e96)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:09 +02:00
Bernd Kuhls
8d9eecf60a package/lpac: needs libqmi for optional support of libqrtr-glib
Buildroot commit dad998a807 added this
package but forgot to select libqmi for optional support of libqrtr-glib.

Fixes:
https://autobuild.buildroot.net/results/95e/95e30d1031912efa200edb9c7b926a31f0abe32f/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 03be706382)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:05 +02:00
Fiona Klute (WIWA)
b057dce157 package/libndp: fix build with GCC 14 and musl
Patch has been pending upstream for a while [1], Alpine has merged an
older version that includes some whitespace damage but is functionally
equivalent.

[1] https://github.com/jpirko/libndp/pull/29

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0c2aa35fbe)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:57 +02:00
Gwenhael Goavec-Merou
f22768cd7a package/python-remi: bump to master commit and fixes build failure
REMI hasn't received new release since July 2022 and is currently broken
with error:

Traceback (most recent call last):
  File "<string>", line 26, in <module>
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 116, in setup
    _install_setup_requires(attrs)
    ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 89, in _install_setup_requires
    _fetch_build_eggs(dist)
    ~~~~~~~~~~~~~~~~~^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 94, in _fetch_build_eggs
    dist.fetch_build_eggs(dist.setup_requires)
    ~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 80, in fetch_build_eggs
    raise SetupRequirementsError(specifier_list)
setuptools.build_meta.SetupRequirementsError: ['setuptools_scm']

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 389, in <module>
    main()
    ~~~~^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 373, in main
    json_out["return_val"] = hook(**hook_input["kwargs"])
                             ~~~~^^^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 143, in get_requires_for_build_wheel
    return hook(config_settings)
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 331, in get_requires_for_build_wheel
    return self._get_build_requires(config_settings, requirements=[])
           ~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 301, in _get_build_requires
    self.run_setup()
    ~~~~~~~~~~~~~~^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 512, in run_setup
    super().run_setup(setup_script=setup_script)
    ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 317, in run_setup
    exec(code, locals())
    ~~~~^^^^^^^^^^^^^^^^
  File "<string>", line 31, in <module>
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 117, in setup
    return distutils.core.setup(**attrs)
           ~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/_distutils/core.py", line 148, in setup
    _setup_distribution = dist = klass(attrs)
                                 ~~~~~^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/dist.py", line 323, in __init__
    _Distribution.__init__(self, dist_attrs)
    ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/_distutils/dist.py", line 309, in __init__
    self.finalize_options()
    ~~~~~~~~~~~~~~~~~~~~~^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/dist.py", line 786, in finalize_options
    ep(self)
    ~~^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/dist.py", line 806, in _finalize_setup_keywords
    ep.load()(self, ep.name, value)
    ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools_scm/_integration/setuptools.py", line 82, in version_keyword
    assert isinstance(value, dict), "version_keyword expects a dict or True"
           ~~~~~~~~~~^^^^^^^^^^^^^
AssertionError: version_keyword expects a dict or True

ERROR Backend subprocess exited when trying to invoke get_requires_for_build_wheel
make: *** [package/pkg-generic.mk:273: /workdir/instance-0/output-1/build/python-remi-2022.7.27/.stamp_built] Error 1
make: Leaving directory '/workdir/instance-0/buildroot'

Since last release code has been corrected and now build end
successfully.

Another issue with remi is related to python CGI library no more available with
python 3.13. This patch also updates Config.in to add a select BR2_PACKAGE_PYTHON_LEGACY_CGI

This commit also updates the LICENSE file hash, because line ending
changed from "CR-LF" (Windows) in old release archive to "LF" (Unix)
in the github download. Apart from that, the content is the same.

Fixes:
- https://autobuild.buildroot.org/results/f0409533ebdc31e522f2ee2ea8a5acc11dbc7430/
- https://autobuild.buildroot.org/results/a16cf5105d4b726b5d4136a2d8f82abcfdc0faba/
- https://autobuild.buildroot.org/results/e7ac28e20ad92863d337e96c225463346ee6c690/

Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
[Julien:
 - use "git describe --abbrev=40" format in _VERSION
 - fix LICENSE hash
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 14ce0d2e6e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:15 +02:00
Fiona Klute (WIWA)
1e068c139d package/libglib2: security bump version to 2.84.3
Fixes CVE-2025-6052, see [1] (backport of "gstring: Fix overflow check
when expanding the string" [2] to the stable 2.84 series).

Release note:
https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.3

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-6052

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4656
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4655

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
[Julien: add link to CVE and release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0b5ad8157a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:08 +02:00
Marcus Hoffmann
7b0bec2580 package/ca-certificates: bump to 20250419
Changelog: https://metadata.ftp-master.debian.org/changelogs//main/c/ca-certificates/ca-certificates_20250419_changelog

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4a085462e4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:03 +02:00
Bernd Kuhls
025ad0dcf9 package/samba4: security bump version to 4.21.6
Release notes:
https://www.samba.org/samba/history/samba-4.21.5.html
https://www.samba.org/samba/history/samba-4.21.6.html

Version 4.21.6 fixes CVE-2025-0620:
https://www.samba.org/samba/security/CVE-2025-0620.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cae9a45e55)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:58 +02:00
Marcus Hoffmann
dc4d5453f3 package/python-requests: update project homepage
http://www.python-requests.org/ is dead, the project lives on
https://requests.readthedocs.io/ now.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 15996bc4ff)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:54 +02:00
Marcus Hoffmann
9679e85fab package/python-requests: security bump to 2.32.4
Fixes: CVE-2024-47081
  Fixed an issue where a maliciously crafted URL and
  trusted environment will retrieve credentials for
  the wrong hostname/machine from a netrc file.

Release notes: https://github.com/psf/requests/releases/tag/v2.32.4

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit aefdca1e5c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:46 +02:00
Marcus Hoffmann
50c2a16694 package/python-django: security bump to 5.2.3
Followup release to 5.2.2 that completes the mitigations for
CVE-2025-48432[1].

Full changelog: https://docs.djangoproject.com/en/5.2/releases/5.2.3/

[1] https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 301587f5ef)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:42 +02:00
Bernd Kuhls
8e1aea0433 package/php: bump version to 8.3.22
Changelog: https://www.php.net/ChangeLog-8.php#8.3.22

Release notes:
https://news-web.php.net/php.announce/460

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1b4b429e89)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:37 +02:00
Bernd Kuhls
c5e93c53d2 package/dht: fix cmake4 compatibility
The only dependee of dht, transmission, forked dht due to upstream
rejection of cmake support:
https://github.com/jech/dht/pull/50
https://github.com/jech/dht/pull/19

A fix was added to this fork for building with cmake 4.x:
https://github.com/transmission/dht/commits/post-0.27-transmission/

Instead of adding yet another patch to buildroot we switch to the repo
maintained by transmission.

Fixes:
https://autobuild.buildroot.org/results/30339a4fdb9c0b608ca3c5ae0692596b21b2fc3f/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --abbrev=40" format in _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1b5f8d04c8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:33 +02:00
Bernd Kuhls
d173b8d722 package/python-glslang: fix host-python3 dependency
python-glslang is a host-only package and the host-python3 dependency
was wrongly added as target dependency with buildroot commit
f9fe0cf8f6.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 27a38cbcad)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:29 +02:00
Bernd Kuhls
3a264b42e2 package/libebur128: remove package
libebur128 was added to buildroot in July 2016 with commit
a32d29cd84 to provide an external
dependency for ffmpeg.

ffmpeg removed this external dependency and switched to an internal
version in November 2016 with upstream commit
http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=005d058f4230f3207ebcf1131df7426d4f57392f
which was first included in ffmpeg version 3.3.

Buildroot bumped ffmpeg to version 3.3 in April 2017 with commit
21d93a1351 and forgot to remove the
dependency to libebur128.

This went unnoticed until libebur128 fails to build with cmake 4.x.
Upstream saw its last commit four years ago. Instead of fixing an
unused package we removed it from buildroot.

Fixes:
https://autobuild.buildroot.org/results/e629bd151cc539f01b909e44d07e17451a29ba27/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6586a2b165)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:17 +02:00
Bernd Kuhls
2529507c7f package/bcg729: bump version to 1.1.1-3-g8bec1e5fc
This bump includes three patches which were added since version 1.1.1
to the cmake files:
https://github.com/BelledonneCommunications/bcg729/commits/master/

One of them fixes build errors with cmake 4.x:
e29952e7ce (diff-1e7de1ae2d059d21e1dd75d5812d5a34b0222cef273b7c3a2af62eb747f9d20aL23-L81)

Fixes:
https://autobuild.buildroot.net/results/118/118349d20eae2dccdadab949065f6bc6471c825e/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --abbrev=40" format in _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7139ffaf06)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:42 +02:00
Yann E. MORIN
7b7c8f3346 package/docker-credential-gcr: add LICENSE hash
The hash has for the license file been missing since the package was
introduced in commit 992d43b373 (package/docker-credential-gcr: new
package).

Add it now.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9cfaccee78)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:28 +02:00
Yann E. MORIN
baa4ed68ea package/docker-credential-acr-env: add LICENSE hash
The hash has for the license file been missing since the package was
introduced in commit e679cd4974 (package/docker-credential-acr-env:
new package)

Add it now.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d1dff142a1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:23 +02:00
Yann E. MORIN
b61cc3f432 package/amazon-ecr-credential-helper: add LICENSE hash
The hash has for the license file been missing since the package was
introduced in commit 9a95806225 (package/amazon-ecr-credential-helper:
new package).

Add it now.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 36b0bf1f29)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:18 +02:00
Bernd Kuhls
3a528c9f5e {linux, linux-headers}: bump 6.{12, 14}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3a00ac13d8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:05 +02:00
Florian Larysch
51fc7d63b9 package/libssh2: bump to version 1.11.1
Release notes: https://libssh2.org/changes.html#1.11.1

Among other things, this release includes the patches previously carried
by Buildroot and also has fixes for build issues with mbedTLS 3.6.x. It
also includes a purely cosmetic copyright bump[1].

Builds with test-pkg against all three crypto providers.

Fixes: https://autobuild.buildroot.org/results/306/30699f986c6bcd1ab247d92c4ba0999f09aa226f

[1] 187d89bb07

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 980b8c7e54)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-12 12:36:07 +02:00
Peter Korsgaard
fcde5363aa pdate for 2025.05
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025.05
2025-06-09 22:21:47 +02:00
Petr Vorel
34611327b8 package/iputils: bump version 20250605
Bugfix release:
https://github.com/iputils/iputils/releases/tag/20250605

Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-06-09 16:53:21 +02:00
Julien Olivain
e8cfd40ce7 package/spirv-llvm-translator: propagate llvm depends on wchar
The target package spirv-llvm-translator was introduced in Buildroot
commit [1] without propagating the llvm dependency on toolchains with
wchar support.

This commit fixes this issue.

Fixes:

    WARNING: unmet direct dependencies detected for BR2_PACKAGE_LLVM
      Depends on [n]: BR2_PACKAGE_LLVM_ARCH_SUPPORTS [=y] && BR2_TOOLCHAIN_GCC_AT_LEAST_7 [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y] && BR2_INSTALL_LIBSTDCPP [=y] && !BR2_TOOLCHAIN_HAS_GCC_BUG_64735 [=n] && !BR2_STATIC_LIBS [=n] && BR2_USE_WCHAR [=n] && BR2_HOST_GCC_AT_LEAST_7 [=y]
      Selected by [y]:
      - BR2_PACKAGE_SPIRV_LLVM_TRANSLATOR [=y] && BR2_PACKAGE_LLVM_ARCH_SUPPORTS [=y] && BR2_TOOLCHAIN_GCC_AT_LEAST_7 [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y] && BR2_INSTALL_LIBSTDCPP [=y] && !BR2_STATIC_LIBS [=n] && BR2_HOST_GCC_AT_LEAST_7 [=y]

[1] 58f9c7b83c

Cc: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-09 16:24:08 +02:00
Julien Olivain
0720d398f1 package/mender-update-modules: ipk support depends on MMU, wchar
Since its inclusion in commit [1], the
BR2_PACKAGE_MENDER_UPDATE_MODULES_IPK config selects
BR2_PACKAGE_OPKG without propagating its dependencies on MMU and
wchar.

This commit fixes this issue.

Fixes:

    WARNING: unmet direct dependencies detected for BR2_PACKAGE_OPKG
      Depends on [n]: BR2_USE_MMU [=y] && BR2_USE_WCHAR [=n]
      Selected by [y]:
      - BR2_PACKAGE_MENDER_UPDATE_MODULES_IPK [=y] && BR2_PACKAGE_MENDER_UPDATE_MODULES [=y]

[1] a474642fdc

Cc: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-09 16:23:39 +02:00
Julien Olivain
6967ed93b6 package/dovecot: add missing mariadb dependencies for mysql support
Buildroot commit [1] removed mysql and replaced it by mariadb in all
packages, but did not propagated all dependencies.

This commit fixes the issue.

Fixes:

    WARNING: unmet direct dependencies detected for BR2_PACKAGE_MARIADB
      Depends on [n]: BR2_INSTALL_LIBSTDCPP [=y] && !BR2_STATIC_LIBS [=n] && BR2_USE_MMU [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y] && (BR2_TOOLCHAIN_HAS_ATOMIC [=n] || BR2_TOOLCHAIN_HAS_SYNC_8 [=n]) && BR2_USE_WCHAR [=y]
      Selected by [y]:
      - BR2_PACKAGE_DOVECOT_MYSQL [=y] && BR2_PACKAGE_DOVECOT [=y] && BR2_INSTALL_LIBSTDCPP [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y]

[1] 8708f3a23a

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-09 16:23:18 +02:00
Julien Olivain
e34a113b32 package/gstreamer1/gst1-plugins-bad: webrtc needs sync_4
Commit [1] "package/gstreamer1/gst1-plugins-bad: bump version
to 1.24.11" added new requirements for webrtc which selects the
sctp plugin, but forgot to propagate its dependencies. The sctp
plugin depends on BR2_TOOLCHAIN_HAS_SYNC_4.

This commit fixes this issue.

Fixes:

    WARNING: unmet direct dependencies detected for BR2_PACKAGE_GST1_PLUGINS_BAD_PLUGIN_SCTP
      Depends on [n]: BR2_PACKAGE_GSTREAMER1 [=y] && BR2_PACKAGE_GST1_PLUGINS_BAD [=y] && BR2_TOOLCHAIN_HAS_SYNC_4 [=n]
      Selected by [y]:
      - BR2_PACKAGE_GST1_PLUGINS_BAD_PLUGIN_WEBRTC [=y] && BR2_PACKAGE_GSTREAMER1 [=y] && BR2_PACKAGE_GST1_PLUGINS_BAD [=y] && !BR2_STATIC_LIBS [=n]

[1] 90b3cfedf4

Cc: Thomas Bonnefille <thomas.bonnefille@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-09 16:09:59 +02:00
Julien Olivain
f933a165e2 package/podman: raise kernel header requirement to v4.14
Since its introduction in commit [1], the podman package has a
dependency on a toolchain with headers >= 3.17, which was propagated
from libseccomp and slirp4netns. The podman package also selects
BR2_PACKAGE_SHADOW which has a requirement on toolchain with
headers >= 4.14. See [2]. This requirement should have been
propagated.

This commit fixes this issue.

Fixes:

    WARNING: unmet direct dependencies detected for BR2_PACKAGE_SHADOW
      Depends on [n]: !BR2_STATIC_LIBS [=n] && BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_14 [=n]
      Selected by [y]:
      - BR2_PACKAGE_PODMAN [=y] && BR2_USE_MMU [=y] && BR2_PACKAGE_HOST_GO_TARGET_ARCH_SUPPORTS [=y] && BR2_PACKAGE_HOST_RUSTC_TARGET_ARCH_SUPPORTS [=y] && BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS [=y] && BR2_PACKAGE_LIBSECCOMP_ARCH_SUPPORTS [=y] && BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_17 [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y] && BR2_USE_WCHAR [=y]

[1] ebbaac08e3
[2] f78c5cb5ca

Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Acked-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-09 16:09:04 +02:00
Julien Olivain
733fe053e1 system/Config.in: add missing MMU dependency for catatonit
BR2_INIT_CATATONIT config, introduced in Buildroot commit [1] selects
BR2_PACKAGE_CATATONIT but forgot to propagate the MMU dependency.

This commit fixes that.

Fixes:

    WARNING: unmet direct dependencies detected for BR2_PACKAGE_CATATONIT
      Depends on [n]: BR2_USE_MMU [=n]
      Selected by [y]:
      - BR2_INIT_CATATONIT [=y] && <choice>

[1] 6dc177bee8

Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Acked-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-09 16:07:43 +02:00
Peter Seiderer
8b736d1bde Revert "package/lm-sensors: update LM_SENSORS_VERSION"
Revert back to the hyphen version schema (as actual returned by
https://release-monitoring.org, see [1], [2]).

Fixes pkg-stats output.

This reverts commit 521afeab9b.

[1] https://release-monitoring.org/projects/search/?pattern=lm-sensors
[2] https://release-monitoring.org/project/1831/

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-09 16:06:28 +02:00
Thomas Perale
fa45c47fcb package/ghostscript: fix build with host GCC 15
Fix the following autobuild error on configs with host GCC15.

```
/workdir/instance-0/output-1/host/bin/ccache /usr/bin/gcc   -O2 -DNDEBUG -Wall -Wstrict-prototypes -Wundef -Wmissing-declarations -Wmissing-prototypes -Wwrite-strings -fno-strict-aliasing -Werror=declaration-after-statement -fno-builtin -fno-common -Werror=return-type -Wno-unused-local-typedefs -DHAVE_STDINT_H=1 -DHAVE_DIRENT_H=1 -DHAVE_SYS_DIR_H=1 -DHAVE_SYS_TIME_H=1 -DHAVE_SYS_TIMES_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_LIBDL=1 -DGX_COLOR_INDEX_TYPE="unsigned long long" -D__USE_UNIX98=1 -DHAVE_SNPRINTF  -O2 -I/workdir/instance-0/output-1/host/include -L/workdir/instance-0/output-1/host/lib -Wl,-rpath,/workdir/instance-0/output-1/host/lib -DNOCONTRIB -DHAVE_RESTRICT=1 -DHAVE_LIMITS_H=1 -DHAVE_STRING_H=1 -fno-strict-aliasing -O2 -I/workdir/instance-0/output-1/host/include -L/workdir/instance-0/output-1/host/lib -Wl,-rpath,/workdir/instance-0/output-1/host/lib -DHAVE_POPEN_PROTO=1  -I./base -o ./obj/aux/genconf ./base/genconf.c   -lz
In file included from ./base/genconf.c:18:
./base/stdpre.h:348:13: error: 'bool' cannot be defined via 'typedef'
  348 | typedef int bool;
      |             ^~~~
./base/stdpre.h:348:13: note: 'bool' is a keyword with '-std=c23' onwards
./base/stdpre.h:348:1: warning: useless type name in empty declaration
  348 | typedef int bool;
      | ^~~~~~~
```

This is due to the change in the default C language version in GCC15.

The patch included is not exactly the same as the upstream one, it only
picks the part that fix the `bool` definition and dropped the declaration
type changes.

Fixes: https://autobuild.buildroot.org/results/9c6/9c6cbff256635c6ab4be4c5b7bf18f9d3c4b46681

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-06-08 15:14:49 +02:00
Peter Korsgaard
0fce7a9623 package/libcurl: fix build w/ threads + c-ares
Fixes:
https://autobuild.buildroot.net/results/680b825b93989e6aef247593c198094a6ed916f7/

Since curl 8.14.0 with commit d364f1347f05 ("configure: catch asking for
double resolver without https-rr"), configure errors out when
--enabled-threaded-resolver is used together with --enable-ares (unless the
experimental HTTPS-RR support is enabled), so disable the threaded resolver
when c-ares is enabled.

d364f1347f

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Reviewed-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-06-08 13:10:43 +02:00
Peter Korsgaard
00f0fca15a package/go: security bump to version 1.23.10
go1.23.9 (released 2025-05-06) includes fixes to the runtime and the linker.

go1.23.10 (released 2025-06-05) includes security fixes to the net/http and
os packages, as well as bug fixes to the linker.

Fixes the following security vulnerabilities:

- CVE-2025-4673: net/http: sensitive headers not cleared on cross-origin
  redirect

  Proxy-Authorization and Proxy-Authenticate headers persisted on
  cross-origin redirects potentially leaking sensitive information

- CVE-2025-0913: os: inconsistent handling of O_CREATE|O_EXCL on Unix and
  Windows

  os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and
  Windows systems when the target path was a dangling symlink.  On Unix
  systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks.
  On Windows, when the target path was a symlink to a nonexistent location,
  OpenFile would create a file in that location.

- CVE-2025-22874: crypto/x509: usage of ExtKeyUsageAny disables policy validation

  Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny
  unintentionally disabled policy validation.  This only affected
  certificate chains which contain policy graphs, which are rather uncommon.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-07 17:32:49 +02:00
Kadambini Nema
be69e6fe2f package/jq: security bump to version 1.8.0
Release notes:
https://github.com/jqlang/jq/releases/tag/jq-1.8.0

Fixes the following security issues:
- CVE-2024-23337: Fix signed integer overflow in jvp_array_write and jvp_object_rehash.
- CVE-2024-53427: Reject NaN with payload while parsing JSON.
- CVE-2025-48060: Fix heap buffer overflow in jv_string_vfmt.
- Fix use of uninitialized value in check_literal.
- Fix segmentation fault on strftime/1, strflocaltime/1.
- Fix unhandled overflow in @base64d.

COPYING hash changed due to the following commit.
9afc450930

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-07 17:30:00 +02:00
Thomas Perale
aa9ee17701 package/yasm: fix build with host GCC 15
Fix the following autobuild error that started appearing with host GCC15
configs.

```
/usr/bin/gcc -DHAVE_CONFIG_H -I.   -I/workdir/instance-0/output-1/host/include  -O2 -I/workdir/instance-0/output-1/host/include  -c -o modules/arch/x86/x86arch.o modules/arch/x86/x86arch.c
In file included from modules/arch/x86/x86arch.h:30,
                 from modules/arch/x86/x86arch.c:31:
./libyasm/bitvect.h:86:32: error: cannot use keyword 'false' as enumeration constant
   86 |         typedef enum boolean { false = FALSE, true = TRUE } boolean;
      |                                ^~~~~
./libyasm/bitvect.h:86:32: note: 'false' is a keyword with '-std=c23' onwards
```

This is due to the change in the default C language version in GCC15.

Fixes: https://autobuild.buildroot.org/results/d1d/d1d9a6e73c2ec278941dd90c6b07cce01b372feb/

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-07 15:40:08 +02:00
Matthias Schiffer
7966ac6058 package/qoriq-mc-utils: fix target install
- The check was referencing an incorrect variable name
- In the `$(QORIQ_MC_UTILS_DPC_FILES) $(QORIQ_MC_UTILS_DPL_FILES)` case,
  the target directory needs to be created first

Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
Reviewed-by: Vladimir Oltean <olteanv@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-06-06 22:05:07 +02:00
Matthias Schiffer
d48c27f1cd package/qoriq-mc-binary: fix target install
The check was referencing an incorrect variable name.

Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
Reviewed-by: Vladimir Oltean <olteanv@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-06-06 22:05:03 +02:00
Bernd Kuhls
e893a70e12 package/mesa3d: vulkan intel needs llvm
Since mesa3d was bumped to 25.0.6 with buildroot commit 317260f336 the
Intel Vulkan driver also needs llvm.

Reported-by: Heiko Thiery <heiko.thiery@gmail.com>
https://lists.buildroot.org/pipermail/buildroot/2025-May/780130.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-06-05 21:55:19 +02:00
Bernd Kuhls
1539e932b6 package/mesa3d: fix comment for iris gallium driver
Buildroot commit 600e75b606 "remove depends on architecture for Iris/
Vulkan" forgot to remove the dependency for the comment of the iris
driver.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-06-05 21:55:19 +02:00
Andreas Ziegler
5080f0af16 package/mpd: update to version 0.24.4
Version 0.24.4 change log:

* protocol
  - fix stuck "getfingerprint" with io_uring
* decoder
  - mpg123: support Icy stream tags
  - mpg123: use libid3tag to parse stream tags
* tags
  - id3: fix assertion failure with broken AIFF/RIFF ID3 chunks
* output
  - fix resuming playback after it was paused by "single" mode
  - alsa: fix compiler warning with alsa-lib 1.2.14

Signed-off-by: Andreas Ziegler <br015@umbiko.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-05 10:55:42 +02:00
Bernd Kuhls
34b847933e {linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12, 14}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-05 10:52:34 +02:00