Commit Graph

72312 Commits

Author SHA1 Message Date
Peter Korsgaard
c58e9331b0 package/make: fix accidentally typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b185bfccbf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:34:01 +02:00
Peter Korsgaard
f33249f49c package/madplay: fix typos in comments
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2465cdb48a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:34:01 +02:00
Peter Korsgaard
1237764fad package/luabitop: fix typo in hash comment
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit f5ad59e948)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:34:00 +02:00
Peter Korsgaard
b3651bcde1 package/lua-augeaus: fix assignment typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Acked-by: Herve Codina <herve.codina@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit edb2d45e05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:33:59 +02:00
Peter Korsgaard
00378b5ae3 package/lmbench: fix 'timing out' typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 39b784bd57)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:33:58 +02:00
Peter Korsgaard
a37afd5c2e package/lldpd: fix typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 28cdb718ea)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:33:58 +02:00
Peter Korsgaard
f86b0d6d2a package/linux-zigbee: fix these typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 1789b5feb6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:33:57 +02:00
Peter Korsgaard
278be2f2a8 package/linux-fusion: fix version typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 42385486e7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:33:56 +02:00
Peter Korsgaard
6733f2954c package/linux-firmware: fix typo in Config.in prompt
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit abfefc0a14)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 12:33:55 +02:00
Thomas Petazzoni
041393b237 DEVELOPERS: drop Samuel Martin
Samuel Martin has not been around in the Buildroot community for many,
many years. His last posting on the mailing list was on July 2018. So
let's not pretend those packages are actually maintained, and let's
stop spamming Samuel with lots of patches and autobuilder failures.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d8b83b861c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 09:42:37 +02:00
Yann E. MORIN
6d9ecca957 package/genpart: change homepage and download location
The old homepage is no more, and the download location has changed.
Update both to the new download location.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 629c6254ce)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-20 09:36:04 +02:00
Dario Binacchi
82fbd44f3f package/xenomai: fix build with gcc 11
The commit adds an upstream patch to fix the following build failure:

latency.c: In function 'dump_histo_gnuplot':
latency.c:415:9: error: 'fclose' called on pointer returned from a mismatched allocation function [-Werror=mismatched-dealloc]
  415 |         fclose(ifp);
      |         ^~~~~~~~~~~
latency.c:404:15: note: returned from 'popen'
  404 |         ifp = popen(xconf, "r");
      |               ^~~~~~~~~~~~~~~~~

Fixes:
- http://autobuild.buildroot.org/results/e15ccef2f2bd58482204b5061f77e76a8a540ebd

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 17642f5032)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 22:27:33 +02:00
Waldemar Brodkorb
e5b4c7980d package/asterisk: security update to 20.9.3
See here for the Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.9.3.md

Fixes CVE-2024-42491.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4009736572)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 21:57:24 +02:00
Christian Stewart
b2c193295b package/go: security bump to version 1.22.7
Fixes the following CVEs:

CVE-2024-34155: go/parser: stack exhaustion in all Parse* functions
CVE-2024-34156: encoding/gob: stack exhaustion in Decoder.Decode
CVE-2024-34158: go/build/constraint: stack exhaustion in Parse

https://go.dev/doc/devel/release#go1.22.7

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8d371dbe55)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 66425c8e14)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:07:58 +02:00
Christian Stewart
2a1114efd6 package/go: security bump version to go1.22.5
Fixes CVE:

CVE-2024-24791: net/http: denial of service due to improper 100-continue handling

https://go.dev/doc/devel/release#go1.22.5

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5d02277884)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:05:49 +02:00
Christian Stewart
be0b643727 package/go: security bump to go1.22.4
Fixes the following CVEs:

CVE-2024-24789: archive/zip: mishandling of corrupt central directory record
CVE-2024-24790: net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

View the release notes for more information:
https://go.dev/doc/devel/release#go1.22.4

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d6e0f1b622)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:04:41 +02:00
Christian Stewart
6c563e1d07 package/go: security bump version to go1.22.3
Fixes CVEs:

CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin
CVE-2024-24788: net: malformed DNS message can cause infinite loop

https://go.dev/doc/devel/release#go1.22.3

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b74cb51c0f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:04:21 +02:00
Christian Stewart
76af91e3c0 package/go: security bump to go1.22.2
CVE-2023-45288: http2: close connections when receiving too many headers

https://go.dev/doc/devel/release#go1.22.2

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit aef5490fab)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:04:12 +02:00
Christian Stewart
6fef00bf43 package/go: bump to version go1.22.1
Upgrade Go to the latest v1.22.x point release, go1.22.1.

This requires go-bootstrap-stage3 at version go1.21.8:

See: https://go.dev/doc/go1.22#bootstrap

https://go.dev/doc/devel/release#go1.22.1

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 84caea5d58)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:03:52 +02:00
Romain Naour
5ef38affb9 package/go-bootstrap-stage3: fix go-bootstrap when parent dir contains invalid .git
Since go-bootstrap-stage3 package has been added to Buildroot [1], all
tests using go are failing only on Gitlab-ci jobs. The build succeed
if we use docker-run script.

Since the issue is only trigged by Gitlab-ci environment, the issue
is related to the ownership of the (buildroot) git tree, see [2].
go seems to ignore the .gitconfig set by before_script.

Anyway, go should not try to use git to retrieve some info since we
are not building it from the go repository.

go package was already patched for a similar issue when building
host-go within docker [3]. Apply the same patch to go-bootstrap-stage3
to disable VCS support.

See
http://lists.busybox.net/pipermail/buildroot/2024-May/691273.html

[1] f00eb37de9
[2] a016b693f7
[3] bc8e70a08b

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6833307649 (tests.fs.test_oci.TestOci)
https://gitlab.com/buildroot.org/buildroot/-/jobs/6833307823 (tests.package.test_docker_compose.TestDockerCompose)
https://gitlab.com/buildroot.org/buildroot/-/jobs/6833308175 (tests.package.test_mender.TestMender)

Runtime tested:
https://gitlab.com/kubu93/buildroot/-/jobs/6860670292

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Cc: Christian Stewart <christian@aperture.us>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 25991c843c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:02:23 +02:00
Christian Stewart
1d2df1c2ae package/go-bootstrap-stage3: add stage3 for go1.22 support
Add a third bootstrap stage with Go1.21.x necessary for go1.22 bootstrap.

go-bootstrap-stage1 is Go1.4.x, the final version to support bootstrap using a C
compiler (later versions require the Go compiler for bootstrapping).

See: https://go.dev/doc/install/source#bootstrapFromSource

go-bootstrap-stage2 is Go 1.19.13, the last version to support bootstrap using
the Go1.4.x compiler.

go-bootstrap-stage3 is Go 1.21.8, the last version to support bootstrap using
the Go1.19.13 compiler. Go 1.20 requires a minimum of go 1.17.13 to bootstrap.

See: https://go.dev/doc/go1.20#bootstrap

This patch is in preparation for bumping the host-go package to >go1.22.x, which
requires a minimum of Go1.20.x for bootstrap.

See: https://go.dev/doc/go1.22#bootstrap

Signed-off-by: Christian Stewart <christian@aperture.us>
[Arnout: add GOCACHE definition]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit f00eb37de9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 14:01:42 +02:00
Peter Korsgaard
78c72422b5 package/libxcrypt: fix insecure typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 893602e69d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:37 +02:00
Peter Korsgaard
e5648e03b1 package/libvirt: fix typo in init script comment
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6599d68a66)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:36 +02:00
Peter Korsgaard
aee689218b package/libpeas: fix typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b4eb041af1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:36 +02:00
Peter Korsgaard
2847fbdcce package/libpam-nfc: fix typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 415542a235)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:35 +02:00
Peter Korsgaard
2c740ee046 package/libnss: fix overridden typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 339c50ecdc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:34 +02:00
Peter Korsgaard
cbec8ef6cd package/libnetconf2: fix library typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c805d1e7c7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:34 +02:00
Peter Korsgaard
03a4c696cf package/libmodsecurity: fix locally typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f6e32b6910)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:33 +02:00
Peter Korsgaard
8bff22f1c0 package/libmad: fix deactivate typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 01cc093a98)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:32 +02:00
Peter Korsgaard
2222d10d49 package/libkrb5: fix deactivate typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 45bb5fbdae)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:31 +02:00
Peter Korsgaard
a9bff68971 package/libglib2: fix deferring typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1a61cfda1e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:22 +02:00
Peter Korsgaard
1f21227fee package/libftdi: fix automatically typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2b6c3cc6d0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:21 +02:00
Peter Korsgaard
e7f207edc7 package/libfreeglut: fix typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ce7a0875cd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:20 +02:00
Peter Korsgaard
53b34b2e11 package/libev: fix deactivate typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 568a90b7af)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:19 +02:00
Peter Korsgaard
a061d916e5 package/libee: fix typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 686caaa5d4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:19 +02:00
Peter Korsgaard
ce07704976 package/libcoap: fix typo in help text
Rewrap the whole help text as with the typo fix the line is a bit
longer and no longer fits within the limits defined by our
check-package coding style checking.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 08926081d8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:18 +02:00
Peter Korsgaard
3f13fa8ef9 package/libcddb: fix typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c581396b91)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:17 +02:00
Peter Korsgaard
e56c7ee460 package/lbreakout2: fix typos in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2e86897712)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:16 +02:00
Peter Korsgaard
98b69b926e package/kexec-lite: fix utility typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 98e1dae3a3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:16 +02:00
Peter Korsgaard
81c5d9e6ba package/keepalived: fix summarize typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c21f235838)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:15 +02:00
Peter Korsgaard
bc473b7991 package/json-for-modern-cpp: fix design typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9178a339cf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:14 +02:00
Peter Korsgaard
4708f1e32b package/irda-utils: fix typos in patch descriptions
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1961a86751)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:14 +02:00
Peter Korsgaard
cd0361c0fe package/icu: fix typos in help text and patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c186db4741)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:56:13 +02:00
Dario Binacchi
c412bac109 package/xenomai: fixup download URL
As reported in [1], https://xenomai.org/downloads/xenomai/stable has
been moved to https://ftp.denx.de/pub/xenomai/xenomai/stable.

Fixes:
- http://autobuild.buildroot.org/results/83061154a9c21ecf981fdf5b4c02be6a793a8e56

[1] https://lore.kernel.org/xenomai/95d4f7a6-1237-4ae0-9fb6-3979fa058bcc@siemens.com

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 30bc9d9b1b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:54:33 +02:00
Dario Binacchi
8a7af69764 package/rp-pppoe: fixup download URL
As reported in [1], the download of rp-pppoe-3.15.tar.gz is no longer
guaranteed from the download section of the project.

Fortunately, Jacon Kroon is hosting the RP-PPPoE source code for versions
3.15 and 4.0 in a location that permits automated downloads.

Fixes:
- http://autobuild.buildroot.org/results/8676456feec9dd401152887101ad1a9ce96cb769

[1] https://dianne.skoll.ca/pipermail/rp-pppoe/2024q3/000652.html

Cc: Jaco Kroon <jaco@uls.co.za>
Cc: Dianne Skoll <dianne@skoll.ca>
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit de42743f1b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:26:59 +02:00
Bernd Kuhls
681c821e81 {linux, linux-headers}: bump 6.{1, 6, 10}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ee67e4baff)
[Peter: drop 6.10.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:24:55 +02:00
George Kiagiadakis
79b102c0f1 package: move wireplumber from Graphics to Audio/Video
WirePlumber is a PipeWire session manager, essential to the operation
of PipeWire in most use cases. It is not a graphical application,
nor does it support graphics in any way. It is only there to support
PipeWire and it should be kept together with PipeWire in the menus.

Signed-off-by: George Kiagiadakis <george.kiagiadakis@collabora.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 14b1b8ca8d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:19:05 +02:00
Waldemar Brodkorb
f7aa9aa708 package/nginx: fix static build error
In commit 761259c934 the SSL patch was
removed, without testing any static compilation.
Reintroduce a small version of the original patch.

Upstream does not use pkg-config, so the patch is Buildroot specific and
not suitable for upstreaming.

Fixes:
 - http://autobuild.buildroot.net/results/a85/a85b00dfe9b55607390ebacc0e4e55c7cfbace3a

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 6cda350408)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:17:30 +02:00
Waldemar Brodkorb
b020b54fa6 package/bind: security bump to 9.18.28
Fixes the following security issues:

- CVE-2024-0760: A flood of DNS messages over TCP may make the server
  unstable https://kb.isc.org/docs/cve-2024-0760

- CVE-2024-1737: BIND's database will be slow if a very large number of RRs
  exist at the same name https://kb.isc.org/docs/cve-2024-1737

- CVE-2024-1975: SIG(0) can be used to exhaust CPU resources
  https://kb.isc.org/docs/cve-2024-1975

- CVE-2024-4076: Assertion failure when serving both stale cache data and
  authoritative zone content https://kb.isc.org/docs/cve-2024-4076

Bind 9.16.x is EOL since April 2024.
See here for what version should be used in production:
https://kb.isc.org/docs/aa-01540

Remove patch 0001 as CC_FOR_BUILD is used in upstream code
to compile host utility gen.

Use BIND_AUTORECONF = YES to avoid a Debian 12 libtool bug.
Otherwise rndc linking fails. See here for a bug report to
bind9 project:
https://gitlab.isc.org/isc-projects/bind9/-/issues/4840

See here for a changelog:
https://downloads.isc.org/isc/bind9/9.18.28/doc/arm/html/notes.html

COPYRIGHT file has been updated, following Copyright holders were
added:
Copyright Joyent, Inc. and other Node contributors. All rights reserved.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit c9515c8b63)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 13:13:11 +02:00
Yann E. MORIN
5fb4d48713 gitlab: fix issue template
The two lines with the Buildroot version and the system os-release
details are rendered on a single line, "because Markdown".

Make that a two-item list, to be sure they are on properly rendered.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6a1e297a31)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-19 11:11:28 +02:00