Commit Graph

72076 Commits

Author SHA1 Message Date
Fabrice Fontaine
b31bf82124 package/libressl: fix powerpc64 build
Fix the following build failure with powerpc64 raised since bump to
version 3.8.2 in commit 21eca49ed5:

In file included from /home/autobuild/autobuild/instance-23/output-1/build/libressl-3.8.4/crypto/rc4/rc4_enc.c:61:
/home/autobuild/autobuild/instance-23/output-1/build/libressl-3.8.4/crypto/../include/openssl/rc4.h:75:9: error: unknown type name 'RC4_INT'
   75 |         RC4_INT x, y;
      |         ^~~~~~~

Fixes: 21eca49ed5
 - http://autobuild.buildroot.org/results/2533f8f642f435b40ce687b6df482c51a3fa0250

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ee00cfd09e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 19:15:31 +02:00
Fabrice Fontaine
ae878fea3d package/btrfs-progs: don't install host udev files
Pass an empty value for udevdir to avoid the following host build
failure on one of the autobuilders:

/usr/bin/install -c -m755 -d /usr/lib/udev/rules.d
/usr/bin/install -c -m644 64-btrfs-dm.rules 64-btrfs-zoned.rules /usr/lib/udev/rules.d
/usr/bin/install: cannot create regular file '/usr/lib/udev/rules.d/64-btrfs-dm.rules': Permission denied
/usr/bin/install: cannot create regular file '/usr/lib/udev/rules.d/64-btrfs-zoned.rules': Permission denied

This build failure can be raised since the addition of the host variant
in commit ed69859a72. udev rules were
added by upstream in 2016 by
62c0666378

Fixes: ed69859a72
 - http://autobuild.buildroot.org/results/c46238afe8d23cf4bff4e7290a5eaebd0640eb6e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8ce17e304b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 19:12:43 +02:00
Fabrice Fontaine
7fb8297df4 package/procps-ng: security bump to version 4.0.4
- Fixes CVE-2023-4016

- Drop all patches (already in version) and so also drop autoreconf

- This bump will also fix the following build failure with gcc >= 14:

  pgrep.c: In function 'main':
  pgrep.c:1066:37: error: implicit declaration of function 'pidfd_open'; did you mean 'fdopen'? [-Wimplicit-function-declaration]
   1066 |                         int pidfd = pidfd_open(procs[i].num, 0);
        |                                     ^~~~~~~~~~
        |                                     fdopen

https://gitlab.com/procps-ng/procps/-/blob/v4.0.4/NEWS

Fixes:
 - http://autobuild.buildroot.org/results/bd7b49123905c580842a3dd3b7a338d5aedf55d7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d79f40dbbe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 19:08:27 +02:00
Fabrice Fontaine
f0a7810423 package/speex: ARM5E needs ARM mode
Add a dependency on ARM mode for ARM5E to fix the following build
failure on Cortex-M3 which only supports Thumb2 mode:

/tmp/ccJHSu7y.s:158: Error: selected processor does not support `smulbb r1,r6,lr' in Thumb mode

Fixes:
 - http://autobuild.buildroot.org/results/1575da3a8ea2bcde7fa9885df317a12d5c36918f

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 28be64c1e0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 19:00:00 +02:00
Etienne Carriere
e62c13c91e board/qemu/arm-vexpress-tz: fix typos in readme file
Fix typos in QEMU arm-vexpress-tz readme file where 'i.e.' occurrences
should be replaced with 'e.g.'.

Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit bfa3c1932f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 18:56:07 +02:00
Baruch Siach
1ba78a69fd package/uuu: update upstream link
NXP repositories moved to a new location. The old URL redirects to the
new one.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3f31c4ef33)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 18:54:44 +02:00
Marcus Hoffmann
c07502e827 package/python-can/Config.in: sort selects
Sort python builtin modules before external python libs.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0d582054e1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 18:44:31 +02:00
Flávio Tapajós
7e9676c22a DEVELOPERS: add Flávio Tapajós for python-paho-mqtt
Signed-off-by: Flávio Tapajós <flavio.tapajos@newtesc.com.br>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a10979754f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 18:22:35 +02:00
Yann E. MORIN
4aff9fae45 package/am335x-pru-package: fix download issue
am335x-pru-package is downloaded with the github helper, so the tarball
is generated "on-the-fly" by github.

It looks like the process to generate those tarballs has changed,
again.  The hash for the archive has recently changed. The delta is in
the way directories are stored in the tarball: it looks like the
"basename" of the directory path has been split off from the
"dirname", into a separate field:

@@ -270078,8 +270078,8 @@
 0041efd0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
 0041efe0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
 0041eff0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
-0041f000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
-0041f010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
+0041f000  50 52 55 5f 50 52 55 74  6f 50 52 55 5f 49 6e 74 |PRU_PRUtoPRU_Int|
+0041f010  65 72 72 75 70 74 2f 00  00 00 00 00 00 00 00 00 |errupt/.........|
 0041f020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
 0041f030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
 0041f040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
@@ -270104,8 +270104,8 @@
 0041f170  34 61 64 35 37 63 63 31  39 35 66 32 38 62 66 35 |4ad57cc195f28bf5|
 0041f180  65 35 38 35 63 33 64 34  34 36 61 62 61 36 65 65 |e585c3d446aba6ee|
 0041f190  37 30 39 36 2f 70 72 75  5f 73 77 2f 65 78 61 6d |7096/pru_sw/exam|
-0041f1a0  70 6c 65 5f 61 70 70 73  2f 50 52 55 5f 50 52 55 |ple_apps/PRU_PRU|
-0041f1b0  74 6f 50 52 55 5f 49 6e  74 65 72 72 75 70 74 00 |toPRU_Interrupt.|
+0041f1a0  70 6c 65 5f 61 70 70 73  00 00 00 00 00 00 00 00 |ple_apps........|
+0041f1b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
 0041f1c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
 0041f1d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|
 0041f1e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 |................|

Switch to using a git download, which uses our reproducible way of
generating archives.

Once extracted, the files have been verified to be identical to the ones
in the archive on s.b.o.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Frank Hunleth <fhunleth@troodon-software.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5206e1dba2)
[Peter adjust filename/hash for 2024.02.x]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 18:20:36 +02:00
Joachim Wiberg
fe60ac7a77 package/hostapd: drop duplicate host-pkgconf dependency
host-pkgconf already defined as dependency in package ingress.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2dc37e5c5b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 16:20:54 +02:00
Julien Olivain
d2a0b6bfbd support/testing: add 4th runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b09ae4f045)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 16:05:53 +02:00
José Luis Salvador Rufo
379fbed1a6 package/zfs: fix uClibc support
This update addresses the issue of uClibc support by skipping ZFS tests
that require SEEK_DATA support.

This is a work-in-progress patch while we wait for an upstream fix.
Current upstream efforts can be followed here:
https://github.com/openzfs/zfs/pull/16169

Context:
- OpenZFS includes a test for a bug that occurs when copying a large
  number of PUNCHED files.
- OpenZFS has backported this test to v2.2.x.
- uClibc does not support SEEK_DATA and SEEK_HOLE.
- The ZFS test `cp_stress` can not be compiled using uClibc.

This commit fix:
- https://gitlab.com/buildroot.org/buildroot/-/jobs/7391793226

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f17fa2c905)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 15:17:04 +02:00
Julien Olivain
6d0bfa6b8f support/testing: add iproute2 runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 91738f5093)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-31 12:09:02 +02:00
Fabrice Fontaine
1b5301c1d7 package/apr: fix musl build
strerror_r on musl always returns an int since its addition back in 2011
with
https://git.musl-libc.org/cgit/musl/commit/src/string/strerror_r.c?id=0b44a0315b47dd8eced9f3b7f31580cf14bbfc01

As a result, setting ac_cv_strerror_r_rc_int to no results in the
following build failure since bump to version 1.7.2 in commit
783cd8d90d:

misc/unix/errorcodes.c: In function 'native_strerror':
misc/unix/errorcodes.c:385:9: error: assignment to 'const char *' from 'int' makes pointer from integer without a cast [-Wint-conversion]
  385 |     msg = strerror_r(statcode, buf, bufsize);
      |         ^

Fixes: 783cd8d90d
 - http://autobuild.buildroot.org/results/9a42a4427ff64d47da61c731abb99d7585781cdd

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6f34e68217)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-30 15:58:15 +02:00
Waldemar Brodkorb
a9d61f7587 package/ruby: update to 3.3.4
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 89c9c131fe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-30 14:24:14 +02:00
Julien Olivain
842401fca0 support/testing: add nmap runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 5510d2890f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-30 14:09:21 +02:00
Fabrice Fontaine
d6079d7a4b package/apr-util: requires DES in openssl
Enable DES in openssl to avoid the following build failure raised since
commit a83d41867c:

crypto/apr_crypto_openssl.c: In function 'crypto_cipher_mechanism':
crypto/apr_crypto_openssl.c:385:27: error: implicit declaration of function 'EVP_des_ede3_cbc'; did you mean 'NID_des_ede3_cbc'? [-Wimplicit-function-declaration]
  385 |             key->cipher = EVP_des_ede3_cbc();
      |                           ^~~~~~~~~~~~~~~~
      |                           NID_des_ede3_cbc

Fixes: a83d41867c
 - http://autobuild.buildroot.org/results/4b1088a705f8564f85e629316f5cfc92953f0047

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 8bb67c230b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 18:13:07 +02:00
Bernd Kuhls
4186350b9d package/apr-util: needs engine support when built with libopenssl
Buildroot commit 623d3bbe43 disables
engine support when BR2_PACKAGE_LIBOPENSSL_ENGINES is not set.

Fixes:
http://autobuild.buildroot.net/results/e472618ca9ff4a3cf460f607a8dfa317832ca622/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 3d46d9760b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 18:13:01 +02:00
Fabrice Fontaine
af77cafb8c package/unbound: security bump to version 1.20.0
This release has a fix for the DNSBomb issue CVE-2024-33655. This has a
low severity for Unbound, since it makes Unbound complicit in targeting
others, but does not affect Unbound so much.
This security release also fixes CVE-2024-1931.

https://nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released
https://nlnetlabs.nl/news/2024/Mar/14/unbound-1.19.3-released
https://nlnetlabs.nl/news/2024/Mar/07/unbound-1.19.2-released

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7ce07b7b29)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 18:09:18 +02:00
Fabrice Fontaine
a66190e5ec package/unbound: select BR2_PACKAGE_LIBOPENSSL_ENGINES
unbound unconditionally calls the (deprecated) ENGINE_* logic in
libopenssl resulting in a build failure when
!BR2_PACKAGE_LIBOPENSSL_ENGINES since commit
623d3bbe43:

sldns/keyraw.c:167:35: error: 'ENGINE_METHOD_ALL' undeclared (first use in this function)
  167 |         if(!ENGINE_set_default(e, ENGINE_METHOD_ALL)) {
      |                                   ^~~~~~~~~~~~~~~~~

Fixes: 623d3bbe43
 - http://autobuild.buildroot.org/results/b7782f5ba54543df53a835552632f58d4ad6c082

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ec7ae882e0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 18:09:15 +02:00
J. Neuschäfer
8faac43daa package/micropython: adjust name in description
Change the name from "Micro Python" (two words) to "MicroPython"
(camelcase), to match the official website and documentation.

Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 161c25aee1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 15:40:45 +02:00
J. Neuschäfer
29db3dd6e5 package/micropython: change URL to HTTPS
Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ade6e41831)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 15:40:42 +02:00
Julien Olivain
37d82d410e support/testing: package: gpsd: fix gpsfake command line
The gpsfake command line has a typo (a missing space), which makes the
next gpsctl command to always fail.

This commit fixes the issue by adding the missing space.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/7391792948

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 49156a0fa4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 15:35:07 +02:00
Julien Olivain
fdce4439ae support/testing: add gpsd runtime testing
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9c8f6dc5e4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 15:01:57 +02:00
Julien Olivain
f7fc0d1904 support/testing: add mawk runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f04a95f79f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 12:13:46 +02:00
Fabrice Fontaine
d6b2142773 package/ksmbd-tools: bump to version 3.5.2
https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.2

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b409766234)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 12:11:43 +02:00
Fabrice Fontaine
1eb219ffce package/libxslt: bump to version 1.1.42
https://gitlab.gnome.org/GNOME/libxslt/-/blob/v1.1.42/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f3461d083b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 12:10:56 +02:00
Fabrice Fontaine
fdbbe21c87 package/libupnp: bump to version 1.4.19
https://github.com/pupnp/pupnp/blob/release-1.14.19/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3a4bd98d11)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 12:09:11 +02:00
Fabrice Fontaine
ae32afab9b package/libcoap: enable required libopenssl options
libcoap unconditionally calls the (deprecated) ENGINE_* logic in
libopenssl resulting in a build failure when
!BR2_PACKAGE_LIBOPENSSL_ENGINES since commit
623d3bbe43

libcoap also unconditionally uses PSK

Fixes: 623d3bbe43
 - http://autobuild.buildroot.org/results/6bd3e1390cbbc59b9b3d030c2a401e45e9d173da
 - http://autobuild.buildroot.org/results/f243209454feed4f33f759786c2023c576a2cd3d

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 33d25f08f9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 08:18:52 +02:00
Fabrice Fontaine
feeb6ea369 package/mpir: fix build with host gcc >= 14
Fix the following build failure with host gcc >= 14 which enables
-Werror=implicit-function-declaration
(https://gcc.gnu.org/gcc-14/porting_to.html):

configure:9998: checking build system compiler /usr/bin/gcc
configure:10011: /usr/bin/gcc conftest.c
conftest.c: In function 'main':
conftest.c:4:3: error: implicit declaration of function 'exit' [-Wimplicit-function-declaration]
    4 |   exit(0);
      |   ^~~~
conftest.c:1:1: note: include '<stdlib.h>' or provide a declaration of 'exit'
  +++ |+#include <stdlib.h>
    1 | int
conftest.c:4:3: warning: incompatible implicit declaration of built-in function 'exit' [-Wbuiltin-declaration-mismatch]
    4 |   exit(0);
      |   ^~~~
conftest.c:4:3: note: include '<stdlib.h>' or provide a declaration of 'exit'
configure:10014: $? = 1
configure:10021: result: no
configure:10026: error: Specified CC_FOR_BUILD doesn't seem to work

Fixes:
 - http://autobuild.buildroot.org/results/3ab381f06d5dc030039b6f6f8d19feb55cf3367d

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3bb426628c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 08:04:32 +02:00
Gero Schwäricke
cc03fb2d1a docs/manual: promote using fixed version for kernel headers when contributing a board
When the default (newest) kernel headers series changes the build can
break. Example error message:

  Incorrect selection of kernel headers: expected 6.8.x, got 6.5.x

In the above case the defconfig used:

  BR2_LINUX_KERNEL_CUSTOM_VERSION=y
  BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.5.9"

The kernel headers were not specified, so the build defaulted to using
the kernel sources as header source and the default (newest) header
series. From .config:

  BR2_KERNEL_HEADERS_AS_KERNEL=y
  BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_8=y

Signed-off-by: Gero Schwäricke <gero.schwaericke@posteo.de>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit eb519ad7cc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-29 08:00:43 +02:00
Francois Perrad
cd8402978f package/libgtk3: security bump to version 3.24.43
fix CVE-2024-6655 (Library injection from CWD)

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c51f9881d6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-28 11:10:34 +02:00
Francois Perrad
6a27d4667d package/libgtk3: bump to version 3.24.42
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d40e57e945)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-28 11:10:30 +02:00
Waldemar Brodkorb
574d6b1288 package/uclibc: add patch for libucontext usage
*ucontext functions are only implemented for a subset of
uClibc supported architectures. To allow the external library
libucontext to be used this small patch is required.
Tested for riscv64.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f761a8c451)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-28 11:07:08 +02:00
Marcus Hoffmann
d2865a73fa package/nodejs: security bump to v20.15.1
Release Notes: https://nodejs.org/en/blog/release/v20.15.1

Fixes the following CVE's:

CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
CVE-2024-22018 - fs.lstat bypasses permission model (Low)
CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
CVE-2024-37372 - Permission model improperly processes UNC paths (Low)

Also these additional CVE's were fixed in the v20.12.1 and v20.12.2 releases [1][2]:

CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows

NodeJS tests are passing:
$ ./support/testing/run-tests -o ./outputs/ -k tests.package.test_nodejs -d dl
12:02:58 TestNodeJSModuleHostSrc                  Starting
12:02:58 TestNodeJSModuleHostSrc                  Building
13:17:15 TestNodeJSModuleHostSrc                  Building done
13:17:23 TestNodeJSModuleHostSrc                  Cleaning up
.13:17:23 TestNodeJSModuleHostBin                  Starting
13:17:23 TestNodeJSModuleHostBin                  Building
14:06:15 TestNodeJSModuleHostBin                  Building done
14:06:20 TestNodeJSModuleHostBin                  Cleaning up
.14:06:20 TestNodeJSBasic                          Starting
14:06:20 TestNodeJSBasic                          Building
14:55:40 TestNodeJSBasic                          Building done
14:55:45 TestNodeJSBasic                          Cleaning up

LICENSE hash changed due to changes in vendored components:

* copyright year update and adding spdx identifier [1]

[1] https://nodejs.org/en/blog/release/v20.12.1
[2] https://nodejs.org/en/blog/release/v20.12.2
[3] d5a316f5ea

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit bffb6a2339)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-28 09:19:35 +02:00
Marcus Hoffmann
d592786c37 support/testing: add python-asn1crypto runtime test
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2fe638af26)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-27 18:10:07 +02:00
Aleksandr Makarov
d0bd15493f package/libest: Add support for openssl v3
libest uses functions that are no longer available in OpenSSL 3.0. Add a
wrapper that calls the proper replacements depending on the version.

Fixes:
  http://autobuild.buildroot.net/results/89024d6c1f10959282470b120d332fb32922b3b6

Signed-off-by: Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
[Arnout: add Upstream: tag to patches]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 8dc7445056)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-22 14:43:33 +02:00
Julien Olivain
b250a2db63 support/testing: fs: new btrfs runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 009f9106d9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-22 14:17:26 +02:00
Marcus Hoffmann
e255cb1c26 support/testing: add python-msgpack runtime test
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit d429d5d399)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 21:32:15 +02:00
Julien Olivain
c657ece0cd support/testing: add attr runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 2da40a2fd7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 21:30:59 +02:00
Yegor Yefremov
950e1f47d9 package/attr: add missing libgen.h header
Resolves the following error when building against MUSL:

tools/attr.c: In function 'main':
tools/attr.c:69:20: error: implicit declaration of function 'basename'
[-Wimplicit-function-declaration]
   69 |         progname = basename(argv[0]);
      |                    ^~~~~~~~
tools/attr.c:69:18: error: assignment to 'char *' from 'int' makes
pointer from integer without a cast [-Wint-conversion]
   69 |         progname = basename(argv[0]);
      |                  ^

Upstream: https://git.savannah.nongnu.org/cgit/attr.git/commit/?id=8a80d895dfd779373363c3a4b62ecce5a549efb2

Fixes: http://autobuild.buildroot.net/results/c61206968eda9913e37e95a61dc3e10399503fcd/

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[Romain: use upstream patch]
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit fa241685e7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 21:28:42 +02:00
Michael Nosthoff
cd3375a3f2 package/boost: cleanup boost-context/fiber/math
boost-context
- requires C++11 (gcc 4.8) since 1.61 see [0]
- dropped the dependency on (boost) thread in 1.77 see [1]
boost-fiber
- needed C++11 since it's creation in 1.61 [2]
boost-math
- add comment for gcc version

[0] https://www.boost.org/doc/libs/1_82_0/libs/context/doc/html/context/requirements.html
[1] 8425e830ea
[2] https://www.boost.org/doc/libs/1_62_0/libs/fiber/doc/html/fiber/overview.html

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 16abf80368)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 20:48:03 +02:00
Michael Nosthoff
0e2daaad3e package/boost: cleanup HOST_BOOST_FLAGS
- fix alphabetical ordering
- put one module per line
- add comment explaining why options are enabled

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 5c20804afa)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 20:47:59 +02:00
Yann E. MORIN
145e8e7406 support/download/check-hash: accept hash files without terminating \n
Lots of people are using broken text editors that 1. do not naturally
terminate text files with a final \n as is customary in UNIX text files,
and 2. do not respect our .editorconfig settings, which explicitly
require adding that final newline. See this nice summary of what a text
file is (with references to applicable standards):

    https://stackoverflow.com/questions/12916352/shell-script-read-missing-last-line/12916758#12916758

So, it is not surprising that read does not read the last "line" of a
file, when said "line" does not end with a newline, because it is thus
not really a line.

Even though we do mandate actual text files, let's be a little bit lax
in this respect, because people may write packages, and their hash
files, in a br2-external tree, and they may not have our .editorconfig
in the directory heierarchy (e.g. if buildroot is a submodule of their
br2-external tree, or whatever).

mapfile does not suffer from this limitation, though, and correctly
reads all lines from a file, even the final line-that-is-not-a-line.

mapfile was introduced in bash 4.0, released on 2009-01-20, more than
15 years ago. Debian squeeze, released in 2011 already had bash 4.1.
Those are really ancient. So, it means we can indeed expect bash
version 4.0 or later; which means mapfile is available.

"It should be fine!"

Fixes: #15976

Reported-by: masonwardle@gmail.com
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit ac2e6b3927)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 19:20:00 +02:00
Yann E. MORIN
11f75a2309 support/scripts/mkusers: accept user tables without terminating \n
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 5d8445138b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 19:18:10 +02:00
Thomas Petazzoni
e61425fd64 package/ncftp: use correct SPDX license code
According to https://spdx.org/licenses/, the correct license code for
the "Clarified Artistic License" is ClArtistic.

The only other package in Buildroot containing code under this license
is google-breakpad, and it is already using the ClArtistic SPDX code.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 2ca698051c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 19:13:43 +02:00
Brandon Maier
53e5169e86 .b4-config: configure b4 for Buildroot
`b4` is a commandline tool to make patch-based development easier[1]. It
is primarily used for Linux kernel development, but can be configured to
support any project that has a public-inbox endpoint. Buildroot has a
public-inbox mirror at "https://lore.kernel.org/buildroot/".

We configure some basic settings that tell `b4` where to send patches
and how to use get-developers.

[1] https://b4.docs.kernel.org/en/latest/

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 322213e131)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-20 19:11:53 +02:00
Francois Perrad
4a23e8d07b package/dropbear: bump to version 2024.85
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2fbffc610e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-18 22:52:26 +02:00
Bernd Kuhls
99e319e3e6 package/dropbear: bump version to 2024.84
Drop patch which is included in this release.

Changelog: https://matt.ucc.asn.au/dropbear/CHANGES

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 516d57dc9c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-08-18 22:52:18 +02:00
Peter Korsgaard
6c084947ab Update for 2024.02.5
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024.02.5
2024-08-14 13:32:31 +02:00