Commit Graph

74074 Commits

Author SHA1 Message Date
Bernd Kuhls
cc40eeb370 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 10}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d3a12bc6f1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-19 20:30:00 +02:00
Bernd Kuhls
87803da53c package/python3: security bump version to 3.12.6
Release notes: https://www.python.org/downloads/release/python-3126/

Fixes CVE-2023-27043, CVE-2024-6232, CVE-2024-7592 & CVE-2024-8088.

The fixes for bundled libexpat are irrelevant for us because python3
depends on the buildroot package.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d4cbc887a3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:16:57 +02:00
Bernd Kuhls
b90349589c package/expat: security bump version to 2.6.3
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes

Fixes CVE-2024-45490, CVE-2024-45491 & CVE-2024-45492.

Follow upstream switch of project repository to github:
https://sourceforge.net/p/expat/news/2022/01/project-moved-to-github/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0509885d8d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:15:46 +02:00
Michael Fischer
615ab9a6c1 package/pure-ftpd: bump version to 1.0.52
This version fixes an out-of-bound reads in the MLSD command, so upgrading is recommended.
It also improves compatibility with various systems.

Update the COPYING hash because of a change in copyright year

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5271e90a6a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:14:28 +02:00
Bernd Kuhls
b42f1ddcc7 package/php: security bump version to 8.3.12
Removed patch which is included in this release.

Fixes CVE-2024-8926, CVE-2024-8927, CVE-2024-9026, and CVE-2024-8925.

Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/438

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a2da88519f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:01:05 +02:00
Peter Korsgaard
ee3155d779 package/systemd: fix typos in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 09964bc5c0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:16 +02:00
Peter Korsgaard
f3dae29d03 package/sysklogd: fix typos in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Arnout: fix additional 'recommended' typo]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 74bef5945f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:15 +02:00
Peter Korsgaard
e0f78310ec package/supertux: fix 'according' typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit b55759c516)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:15 +02:00
Peter Korsgaard
04ca8a7e73 package/stress-ng: fix 'correctly' typo in comment
Also fix conjugations of verbs.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Arnout: fix additional typoes]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 3c4dd46791)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:14 +02:00
Peter Korsgaard
972e56bdaf package/sqlite: fix 'access' typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 930663032b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:13 +02:00
Peter Korsgaard
70f8b08042 package/softether: fix typos in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 5af5c0ac0b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:12 +02:00
Peter Korsgaard
b5df684e07 package/socat: fix 'incompatible' typo in comment
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4c5d82ea05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:12 +02:00
Peter Korsgaard
8a66521a6c package/smcroute: fix 'assume' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit d6f90873eb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:11 +02:00
Peter Korsgaard
606d756629 package/slirp: fix typos in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 6183d8f494)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:10 +02:00
Peter Korsgaard
eaac12e842 package/skeleton-init-systemd: fix "won't" typo in comment
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit eb83f8e09a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:09 +02:00
Peter Korsgaard
d797a2f2b3 package/selinux-python: fix 'family' typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 70ded7c212)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:09 +02:00
Peter Korsgaard
9f7e74ca53 package/rpi-firmware: fix 'partition' typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 0dffd8ab1c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:08 +02:00
Peter Korsgaard
427efc1cd1 package/rlwrap: fix 'whether' typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 1441be898a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:07 +02:00
Peter Korsgaard
d034b179ea package/redis: fix 'defaults' typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 1e37c852a5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:06 +02:00
Peter Korsgaard
78ea2e4ccd package/rapidxml: fix 'usability' typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit d21e6f815d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:05 +02:00
Peter Korsgaard
8e241ea84f package/rapidxml: fix 'compilation' typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit f301c007c7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:05 +02:00
Peter Korsgaard
c13d79854d package/qt5virtualkeyboard: fix 'Portuguese' typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit e23e49e5d5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:04 +02:00
Peter Korsgaard
5ab1fb461e package/qt5connectivity: fix 'peripherals' typo in help text
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 6367eb4965)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:03 +02:00
Peter Korsgaard
842eb8b54f package/qt5enginio: fix 'versioning' typo in comment
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 7426aaddee)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:02 +02:00
Peter Korsgaard
d1b3a69a87 package/qt5base: fix 'from' typo in patch description
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 53e265522f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:02 +02:00
Peter Korsgaard
e0467347ed package/qt5: fix 'paths' typo in comment
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 296b549365)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:01 +02:00
Peter Korsgaard
8588985bb2 package/qlibc: fix 'consistent' typo in help text
Also add a missing article one line above.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Arnout: fix additional typo]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4390361bb5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 17:00:00 +02:00
Baruch Siach
2113a945cd package/libcurl: drop link-with-openssl workaround
Upstream curl commit f057de5a1a950 ("libcurl.pc: add `Requires.private`,
`Requires` for static linking") deals with proper pkg-config
configuration since version 8.9.0.

Our local libcurl.pc modification we added back in commit 61d322c3d2
(package/cURL: fix static link whith openSSL) is no longer needed.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
[yann.morin.1998@free.fr: this is not a "revert", reword commit log]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a5cef5339b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 16:57:42 +02:00
Akhilesh Nema
8f83cdaaff package/libpcap: security bump version to 1.10.5
Fixes the following security issues:

CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
  double frees in some cases.
CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
  file:// URL with a path to a directory that cannot be opened.

Changelog: bbcbc9174d/CHANGES

Signed-off-by: Akhilesh Nema <nemaakhilesh@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0982498c67)
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 16:56:09 +02:00
Bernd Kuhls
4f96c2851d package/busybox: patch to fix tc build on 6.8+ kernels
Fixes a build error introduced by bumping the linux kernel headers to
6.8 with buildroot commit 807a449256.

No autobuilder failures were recorded with this problem.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d28d24dbc5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 16:53:07 +02:00
Akhilesh Nema
e5874289eb package/libcurl: bump version to 8.10.1
Changelog - https://curl.se/ch/8.10.1.html

Signed-off-by: Akhilesh Nema <nemaakhilesh@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5370103e64)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 16:51:13 +02:00
Bernd Kuhls
c196cbcb21 package/libcurl: security bump version to 8.10.0
Changelog: https://curl.se/changes.html#8_10_0

Fixes CVE-2024-8096.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d68b999787)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 16:51:09 +02:00
Edgar Bonet
8c3b1b77cf docs/manual/configure.adoc: fix location of Busybox inittab
Commit 89d39fc7a3 "initscripts: new package" moved the inittab
packaged for Busybox init from system/skeleton/etc to package/busybox.
The manual, however, still points to the old location, so let's fix it.

Signed-off-by: Edgar Bonet <bonet@grenoble.cnrs.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 99b1685fd8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 16:12:51 +02:00
Peter Korsgaard
d9e4a18b9c boot/uboot: fix typos
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit ab34bdcb38)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:30 +02:00
Peter Korsgaard
720c61fff9 boot/shim/shim.mk: fix 'deactivate' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6dc6a747fd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:29 +02:00
Peter Korsgaard
0243bc0795 boot/optee-os/optee-os.mk: fix 'PLATFORM' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7bd00d5506)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:28 +02:00
Peter Korsgaard
206c6f0acd boot/grub2/Config.in: fix 'targeting' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0fa6bd5a96)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:28 +02:00
Peter Korsgaard
e877a047b3 boot/edk2/edk2.mk: fix 'release' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a52fd38060)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:27 +02:00
Peter Korsgaard
efd28be743 boot/barebox/barebox.mk: fix 'allows' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9e3fdb87f0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:26 +02:00
Peter Korsgaard
5ad23bdad0 boot/arm-trusted-firmware/Config.in: fix 'platform' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2e3c0ab1b7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:25 +02:00
Peter Korsgaard
e83ec66f83 linux/linux.mk: fix 'parser' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9c604ef86f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:25 +02:00
Peter Korsgaard
c0a0849e72 support/testing/tests/package/test_weston/overlay/etc/weston.ini: fix 'independent' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0ab62e5d25)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:24 +02:00
Peter Korsgaard
c6c872f494 support/testing/tests/package/test_mtools.py: fix 'unformatted' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 064f879d96)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:23 +02:00
Peter Korsgaard
b347b51250 support/testing/tests/package/test_micropython.py: fix 'returned' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4a8aafecf0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:22 +02:00
Peter Korsgaard
aaabe7720f support/testing/tests/package/test_iptables.py: fix 'OUTPUT' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 1772ad2f5f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:21 +02:00
Peter Korsgaard
f0a248e16c support/testing/tests/package/test_ddrescue.py: fix 'normally' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 98f7a32d05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:21 +02:00
Peter Korsgaard
07222174fd support/testing/tests/package/test_cryptsetup.py: fix 'encrypted' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 28c56bc26f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:20 +02:00
Peter Korsgaard
557d2e0e56 support/testing/tests/package/test_compressor_base.py: fix 'extension' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 68316831e4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:19 +02:00
Peter Korsgaard
de55528c6e support/testing/tests/package/test_bash.py: fix 'running' typo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c62de54852)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:18 +02:00
Peter Korsgaard
ade2368fae support/testing/tests/package/test_acpica.py: fix typos in comments
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 670f6a4bf5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-10-12 15:59:18 +02:00