mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity
78,737 Commits 6 Branches 483 Tags
ccf9182abbcd9c957a28f6931949aa0e79df54a5
Commit Graph

78737 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
James Hilliard
ccf9182abb package/python-pydantic: bump to version 2.11.9 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 21:31:13 +02:00
Titouan Christophe
9c365fee97 package/opencv4 (-contrib): security bump to v4.12.0 
This fixes the following vulnerability:
- CVE-2025-53644:
    OpenCV is an Open Source Computer Vision Library. Versions prior to
    4.12.0 have an uninitialized pointer variable on stack that may lead
    to arbitrary heap buffer write when reading crafted JPEG images.
    Version 4.12.0 fixes the vulnerability.
    https://www.cve.org/CVERecord?id=CVE-2025-53644

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 21:08:04 +02:00
Thomas Perale
c9d185e182 package/zziplib: fix deprecated CPE 
The CPE 'zziplib_project:zziplib' is deprecated in favour of
'gdraheim:zziplib'.

See https://nvd.nist.gov/products/cpe/detail/FB4124F9-087E-454D-B5D4-642FF08B23A8

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
85c71fee3f package/x11r7/xserver_xorg-server: fix deprecated CPE 
The CPE 'x.org:xorg-server' is deprecated in favour of
'x.org:x_server'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/F6729083-29EE-4772-9DFF-80B43980D6BE
  - https://nvd.nist.gov/vuln/detail/CVE-2025-26601

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: fix "xorg-server:x_server" to "x.org:x_server" in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
fdb540a00e package/python-aiohttp-session: fix deprecated CPE 
The CPE 'aiohttp-session_project:aiohttp-session' has been deprecated in
favour of 'aiohttp-session:aiohttp-session'.

See https://nvd.nist.gov/products/cpe/detail/667389BF-3561-49F9-A61A-6C86C7B82922

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add https:// prefix to url in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
843707ba1e package/modsecurity2: fix deprecated CPE 
The CPE 'trustwave:modsecurity' has been deprecated in favour of
'owasp:modsecurity'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/B305D665-44EC-44A6-8C46-C68BFDAD7C38
  - https://nvd.nist.gov/vuln/detail/CVE-2025-48866

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
4ac3c1de56 package/iputils: fix deprecated CPE 
The CPE 'iputils_project:iputils' has been deprecated in favour of
'iputils:iputils'.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
ff492a2c87 package/upx: fix deprecated CPE 
The CPE 'upx_project:upx' has been deprecated in favour of 'upx:upx'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/36CA8E94-4A35-4373-8D69-22313060322B
  - https://nvd.nist.gov/vuln/detail/CVE-2020-24119

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
2f993d55e8 package/python-cryptography: fix deprecated CPE 
The CPE 'cryptography_project:cryptography' has been deprecated in
favour of 'cryptography.io:cryptography'.

See the following:
 - https://nvd.nist.gov/products/cpe/detail/2EBA50FC-F3F9-40D5-82BD-EFB67F761153
 - https://nvd.nist.gov/vuln/detail/cve-2023-49083

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
6c5f1b6414 package/pango: fix deprecated CPE 
The CPE 'pango:pango' has been deprecated in favour of 'gnome:pango'.

See https://nvd.nist.gov/products/cpe/detail/19B77822-6C34-41C8-8160-367D56AD1569

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
0bbefd60f7 package/gnuplot: fix deprecated CPE 
The CPE 'gnuplot_project:gnuplot' has been deprecated in favour of
'gnuplot:gnuplot'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/DB68C9F5-3330-4749-A6F5-61FF041037CC
  - https://nvd.nist.gov/vuln/detail/cve-2025-31178

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
cf480bda61 package/cpp-httplib: fix deprecated CPE 
The CPE 'cpp_httplib_project:cpp-httplib' has been deprecated in favour
of 'yhirose:cpp-httplib'.

See https://nvd.nist.gov/products/cpe/detail/5D557BEA-8246-464C-AB90-EA9495A0732A

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
143bb15d6e package/boinc: fix deprecated CPE 
The CPE 'rom_walton:boinc' has been deprecated in favour of
'universityofcalifornia:boinc_client'.

See https://nvd.nist.gov/products/cpe/detail/DAC161C5-2154-44BF-916A-EACB524E8B8F

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
Thomas Perale
505cd0d367 package/asterisk: fix deprecated CPE ID 
The CPE 'asterisk:open_source' has been deprecated in favour of
'sangoma:asterisk'.

See the following for more information:
 - https://nvd.nist.gov/products/cpe/detail/7FC01D7D-5AE9-42A8-B31E-A99E745E5BE5
 - https://github.com/asterisk/asterisk/security
 - https://nvd.nist.gov/vuln/detail/CVE-2024-42491

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 19:32:33 +02:00
James Hilliard
53eb75ef53 utils/scanpypi: remove python six module 
We dropped support for python2 a while back in [1], as such we
can remove the python six module which was only needed for
backwards comaptibility with python2.

[1] 2743ce00ca

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add commit ref removing python2 support]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
6448c3b425 package/python-distlib: bump to version 0.4.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
b08d65ac39 package/python-expandvars: bump to version 1.1.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
85fef1bb91 package/python-mypy-extensions: bump to version 1.1.0 
Migrate from setuptools to flit build backend.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
aca5611af7 package/python-mypy: bump to version 1.18.1 
Add new python-pathspec runtime/build dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
b4ad6e6f8b package/python-poetry-core: bump to version 2.2.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
234b38ffdd package/python-pypa-build: bump to version 1.3.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:51 +02:00
James Hilliard
9f2f93df4e package/python-selenium: bump to version 4.35.0 
License hash changed due to year update:
c62597e5cd

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
3d3f4768df package/python-maturin: bump to version 1.9.4 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
598b20ca0a package/python-uswid: bump to version 0.5.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
431545111a package/python-cython: bump to version 3.1.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
6ea8e60e49 package/python-typing-extensions: bump to version 4.15.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
bb825488db package/python-starlette: bump to version 0.47.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
6cde2a46ff package/python-sentry-sdk: bump to version 2.38.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
a5c151f70d package/python-qrcode: bump to version 8.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
9a54553b85 package/python-pytz: bump to version 2025.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
2e480a8825 package/python-pypika-tortoise: bump to version 0.6.2 
Migrate pep517 build backend from poetry to pdm-backend.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
b117d439bd package/python-pymodbus: bump to version 3.11.2 
License hash changed due to year update:
c1e7f3b706

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
8595b5da17 package/python-pycparser: bump to version 2.23 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
37e0d69f54 package/python-pyaml: bump to version 25.7.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
34386548d3 package/python-multidict: bump to version 6.6.4 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
d2a540a537 package/python-lxml: bump to version 6.0.1 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
117b45c2d8 package/python-httpcore: bump to version 1.0.9 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
ddaffc4aa9 package/python-grpclib: bump to version 0.4.8 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
James Hilliard
c95f07d59a package/python-gobject: bump to version 3.54.2 
License hash changed due to formatting changes:
e80a612fd7

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 18:42:50 +02:00
Fiona Klute (WIWA)
44e0ba2bd2 package/python-trove-classifiers: bump to version 2025.9.11.17 
package/python-cffi 2.0.0 (bumped in commit
07903d2b27) fails to build due to an
unknown trove-classifier:

* Getting build dependencies for wheel...
configuration error: `project.classifiers[8]` must be trove-classifier
DESCRIPTION:
    `PyPI classifier <https://pypi.org/classifiers/>`_.

GIVEN VALUE:
    "Programming Language :: Python :: Free Threading :: 2 - Beta"

OFFENDING RULE: 'format'

DEFINITION:
    {
        "type": "string",
        "format": "trove-classifier"
    }

For more details about `format` see
https://validate-pyproject.readthedocs.io/en/latest/api/validate_pyproject.formats.html

The list of trove classifiers Setuptools checks against is provided by
package/python-trove-classifiers. Upstream has added the classifier as
of version 2025.5.8.15 [1], as well as a bunch of others [2], so
update to fix the problem.

[1] 331838aaea
[2] https://github.com/pypa/trove-classifiers/compare/2025.1.15.22...2025.9.11.17

Fixes:
- 07903d2b27
- https://autobuild.buildroot.org/results/45b57a919182ae3f9ea0db9b0fa430a72e1e3cdf/

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
[Julien: add link to autobuilder failure]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-17 13:57:40 +02:00
James Hilliard
e2f0e4c115 package/python-dbus-fast: bump to version 2.44.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 23:19:02 +02:00
James Hilliard
ef0526fef3 package/python-cryptography: bump to version 45.0.7 
Add host-pkgconf dependency which is needed for finding openssl.

Set OPENSSL_NO_VENDOR=1 in the environment to ensure we use the
system openssl library.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:55:39 +02:00
James Hilliard
07903d2b27 package/python-cffi: bump to version 2.0.0 
License has changed due to license change from regular MIT to
MIT-no-attribution:
67a170dc79

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:55:35 +02:00
James Hilliard
b3809dfaf3 package/python-certifi: bump to version 2025.8.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:55:31 +02:00
James Hilliard
86b1af2c3f package/python-asyncssh: bump to version 2.21.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:50:53 +02:00
James Hilliard
0865a1ae4b package/python-asyncclick: bump to version 8.2.2.2 
Drop python-anyio runtime dependency which is now an optional
dependency of asyncclick. See:
ca93155e16

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add commit reference for anyio dependency change]
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:50:53 +02:00
James Hilliard
4277266753 package/python-anyio: bump to version 4.10.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:50:53 +02:00
Julien Olivain
6615c1bed8 package/apitrace: remove stale patch 
Running the command:

    make apitrace-patch

fails with error:

    Applying 0003-Explicit-header-stdint.patch using patch:
    patching file frametrim/ft_dependecyobject.hpp
    Reversed (or previously applied) patch detected!  Skipping patch.
    1 out of 1 hunk ignored -- saving rejects to file frametrim/ft_dependecyobject.hpp.rej
    patching file retrace/metric_writer.cpp
    Reversed (or previously applied) patch detected!  Skipping patch.
    1 out of 1 hunk ignored -- saving rejects to file retrace/metric_writer.cpp.rej

Commit [1] "package/apitrace: fix build with GCC 15.x" introduced a
package patch in the branch master while Buildroot was in RC cycle.
This same commit was cherry-picked in [2] in the branch "next" to also
apply cleanly the patch for commit [3] "package/apitrace: bump to
version 13".

The merge commit [4] kept the apitrace package patch
"0003-Explicit-header-stdint.patch".

This commit fixes the issue by removing this stale patch.

[1] a4b0913280
[2] bf55f4713e
[3] aec2f2ddc4
[4] 0af159ae2b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2025-09-16 22:42:45 +02:00
Julien Olivain
8988278241 package/cpp-httplib: remove stale patch 
Running the command:

    make cpp-httplib-patch

fails with error:

    Applying 0001-merge-commit-from-fork.patch using patch:
    patching file httplib.h
    Reversed (or previously applied) patch detected!  Skipping patch.
    2 out of 2 hunks ignored -- saving rejects to file httplib.h.rej
    patching file test/test.cc
    Hunk #1 FAILED at 42.
    Hunk #2 FAILED at 2839.
    Hunk #3 FAILED at 3624.
    3 out of 3 hunks FAILED -- saving rejects to file test/test.cc.rej

Commit [1] "package/cpp-httplib: add patch for CVE-2025-46728"
introduced a package patch in the branch next while Buildroot was in
RC cycle. Just after, commit [2] "package/cpp-httplib: bump to
v0.25.0", also in branch next, removed this package patch.

This commit [1] was cherry-picked in [3] in the branch master, to
apply only the security fix for the 2025.08 release.

The merge commit [4] kept the cpp-httplib package patch
"0001-merge-commit-from-fork.patch".

This commit fixes the issue by removing this stale patch.

Fixes:
https://autobuild.buildroot.org/results/5b9843089ade428997035e49817208ce9c09a10e

[1] aea7c89396
[2] 519d03657c
[3] fd313c4ceb
[4] 0af159ae2b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2025-09-16 22:42:25 +02:00
Francois Perrad
3224b90bac package/luajit: bump to version 871db2c84ecefd70a850e03a6c340214a81739f0 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2025-09-16 22:23:22 +02:00