Drop patch which is now upstream.
Replace python-click with python-asyncclick runtime dependency.
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
The proj package includes command line applications. Those have always
been disabled in Buildroot. Those applications can be useful for
scripting, and also for runtime testing the libraries.
This commit adds a package Kconfig option to enable those apps.
Tested-by: Zoltan Gyarmati <zgyarmati@zgyarmati.de>
Acked-by: Zoltan Gyarmati <zgyarmati@zgyarmati.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Switch to:
* Linux LTS 6.12.6
* U-Boot 2024.10
Provide hashes for all above components and enable
BR2_DOWNLOAD_FORCE_CHECK_HASHES.
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Switch to:
* Linux LTS 6.12.6
* U-Boot 2024.10
Provide hashes for all above components and enable
BR2_DOWNLOAD_FORCE_CHECK_HASHES.
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Switch to:
* Linux LTS 6.12.6
* U-Boot 2024.10
* ATF 2.11
Provide hashes for all above components and enable
BR2_DOWNLOAD_FORCE_CHECK_HASHES.
Increase ext4 rootfs size to fit larger components.
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
- Bump Linux kernel to 6.1.120
- Bump U-Boot to 2024.10 and add the dependency on GnuTLS and
util-linux (for uuid)
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Fixes the following security issue:
CVE-2024-11614: An out-of-bounds read vulnerability was found in DPDK's
Vhost library checksum offload feature. This issue enables an untrusted or
compromised guest to crash the hypervisor's vSwitch by forging Virtio
descriptors to cause out-of-bounds reads. This flaw allows an attacker with
a malicious VM using a virtio driver to cause the vhost-user side to crash
by sending a packet with a Tx checksum offload request and an invalid
csum_start offset.
https://www.openwall.com/lists/oss-security/2024/12/17/3
Release notes: http://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
The mongodb package has not been updated in close to 3 years (since commit
49bbf644d4 "package/mongodb: security bump to version 4.2.18") and the
4.2.x series is EOL since April 2023:
https://www.mongodb.com/legal/support-policy/lifecycles
There are no reverse dependencies, so drop the package. If a maintainer
steps up to support it, then (a newer version of) the package can be
re-added later.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: remove .checkpackageignore entries to fix check-package errors]
Signed-off-by: Julien Olivain <ju.o@free.fr>
If the u-boot DP driver attempts to configure the Kria SOM DP before it is
released from reset, it will cause a boot hang. Since the KV260 uses the DP
by default, this patch needs to be included with buildroot until it is part
of a u-boot-xlnx release tag.
While only the KV260 is directly affected, there is no issue with applying
this patch to all 3 zynqmp_kria defconfigs.
This patch has also been committed to u-boot upstream.
Upstream: 8b81010a2f
Signed-off-by: Neal Frager <neal.frager@amd.com>
[Julien: fix check-package error by adding Upstream tag in patch]
Signed-off-by: Julien Olivain <ju.o@free.fr>
Bump Linux kernel version to 6.12.5 and update the hash accordingly.
Signed-off-by: Scott Fan <fancp2007@gmail.com>
[Julien: add missing BR2_TARGET_UBOOT_NEEDS_GNUTLS=y]
Signed-off-by: Julien Olivain <ju.o@free.fr>
Bump Linux kernel version to 6.12.5 and update the hash accordingly.
Signed-off-by: Scott Fan <fancp2007@gmail.com>
[Julien: add missing BR2_TARGET_UBOOT_NEEDS_GNUTLS=y]
Signed-off-by: Julien Olivain <ju.o@free.fr>
We have no more hash file for TF-A v2.11 in the package directory since
commit 24615d1502 ("boot/arm-trusted-firmware: bump to v2.12"); add
one in our global patches directory.
This fixes the following warning:
WARNING: no hash file for arm-trusted-firmware-v2.11-git4.tar.gz
Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Fixes the following security vulnerabilities:
CVE-2022-33065: Multiple signed integers overflow in function au_read_header
in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in
Libsndfile, allows an attacker to cause Denial of Service or other
unspecified impacts.
CVE-2024-50612: libsndfile through 1.2.2 has an ogg_vorbis.c
vorbis_analysis_wrote out-of-bounds read.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Fixes CVE-2023-49582: Lax permissions set by the Apache Portable Runtime
library on Unix platforms would allow local users read access to named
shared memory segments, potentially revealing sensitive application data.
This issue does not affect non-Unix platforms, or builds with
APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR
version 1.7.5, which fixes this issue.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
The python-m2crypto package was removed as it is in maintained
only mode and is not recommended for new projects.
See:
3721ec298f
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[Julien: add reference url]
Signed-off-by: Julien Olivain <ju.o@free.fr>
