mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 16:01:54 -09:00
Code Issues Packages Projects Releases Wiki Activity
63,665 Commits 6 Branches 483 Tags
d4558c5299ea5dab67cc218466d13ff7e4c9ada6
Commit Graph

63665 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Fabrice Fontaine
d4558c5299 package/dmidecode: bump to version 3.4 
http://git.savannah.gnu.org/cgit/dmidecode.git/plain/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:27:32 +02:00
Fabrice Fontaine
a3e0bf8509 package/libsamplerate: bump to version 0.2.2 
- Switch site to get latest release
- Update indentation in hash file (two spaces)

https://github.com/libsndfile/libsamplerate/blob/0.2.2/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:24:07 +02:00
Fabrice Fontaine
eb8bef884b package/libsamplerate: disable sndfile 
libsndfile is only used for examples and tests so disable it

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:22:52 +02:00
Fabrice Fontaine
5ef445e84f package/libsamplerate: use --{dis, en}able-alsa 
Commit 5b679d7806 forgot to set
--{dis,en}able-alsa

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:22:12 +02:00
Bernd Kuhls
2d972d4f03 package/x11r7/xcb-proto: bump version to 1.15.2 
Release notes:
https://lists.x.org/archives/xorg-announce/2022-June/003169.html
https://lists.x.org/archives/xorg-announce/2022-June/003170.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:20:35 +02:00
Bernd Kuhls
d4ca769ad4 package/x11r7/xlib_libX11: bump version to 1.8.1 
Release notes:
https://lists.x.org/archives/xorg-announce/2022-June/003168.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:19:51 +02:00
Bernd Kuhls
9b4914cc4c package/unixodbc: bump version to 2.3.11 
Removed unsecure md5 hash, upstream does not provide other hashes so we
keep our sha256 hash. Switched _SITE to http.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:19:02 +02:00
Giulio Benetti
e186b4d89d package/harfbuzz: bump to version 4.4.0 
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:18:13 +02:00
Bernd Kuhls
480da99652 package/intel-mediasdk: bump version to 22.4.4 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:16:42 +02:00
Bernd Kuhls
3cfdd0777d package/intel-mediadriver: bump version to 22.4.4 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:16:38 +02:00
Bernd Kuhls
8fc1fe6483 package/libva-utils: bump version to 2.15.0 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:16:24 +02:00
Bernd Kuhls
0cd5902030 package/libva: bump version to 2.15.0 
Release notes: https://github.com/intel/libva/blob/v2.15-branch/NEWS

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:15:39 +02:00
Fabrice Fontaine
569873ae9d package/inih: bump to version 55 
https://github.com/benhoyt/inih/releases/tag/r54
https://github.com/benhoyt/inih/releases/tag/r55

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:14:59 +02:00
Fabrice Fontaine
03edfd96e8 package/memtester: bump to version 4.5.1 
https://pyropus.ca./software/memtester/CHANGELOG

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:14:23 +02:00
Fabrice Fontaine
d932260f8f package/isl: bump to version 0.24 
https://repo.or.cz/isl.git/blob/3ea3e8b77475bea49b35b8215d8f66af94121b3c:/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:13:33 +02:00
Fabrice Fontaine
876be2b0f3 package/keyutils: add KEYUTILS_CPE_ID_VENDOR 
cpe:2.3:a:keyutils_project:keyutils is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Akeyutils_project%3Akeyutils

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:12:29 +02:00
Fabrice Fontaine
03920e842b package/libgpgme: fix LIBGPGME_CPE_ID_PRODUCT 
Fix typo added by commit 6b79c8fb05

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 23:11:48 +02:00
Heiko Thiery
167a15b764 package/netopeer2: bump version to 2.1.23 
Add patch to fix issue building with buildroot. The patch is already
accepted upstream.

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 21:47:48 +02:00
Heiko Thiery
62d5699d00 package/libnetconf2: bump version to 2.1.11 
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 21:47:15 +02:00
Heiko Thiery
ca336ca3bf package/sysrepo: bump version to 2.1.64 
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 21:46:59 +02:00
Heiko Thiery
528fcb326f package/libyang: bump version to 2.0.194 
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 21:46:42 +02:00
Dario Binacchi
f414afe53d package/uuu: bump to version 1.4.224 
It requires the host-zstd package.

The hash of README.md changed due to changes unrelated to the license
terms:

-- `sudo apt-get install libusb-1.0-0-dev libbz2-dev pkg-config cmake libssl-dev g++`
+- `sudo apt-get install libusb-1.0-0-dev libbz2-dev libzstd-dev pkg-config cmake libssl-dev g++`

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-06 08:51:18 +02:00
Marcus Folkesson
dedc1b71d9 package/libostree: bump to version 2022.4 
Signed-off-by: Marcus Folkesson <marcus.folkesson@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-05 22:17:12 +02:00
Quentin Schulz
bba4dad9aa package/libcamera: strip symbols before signing IPA libs 
Open-Source IPA shlibs need to be signed in order to be runnable within
the same process, otherwise they are deemed Closed-Source and run in
another process and communicate over IPC.

The shlib installed on the target should be the same as the one signed
by libcamera during package creation otherwise the signature won't match
the shlib.

Buildroot sanitizes RPATH in a post build process. meson gets rid of
rpath while installing so we don't need to do it manually.

Buildroot may strip symbols, so we need to do the same before signing.

Signing the IPA shlibs is done by the meson install target, so we need
to strip the IPA shlibs, so after the build but before the install,
which a post-build hooks fits the best.

Cc: Quentin Schulz <foss+buildroot@0leil.net>
Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
[yann.morin.1998@free.fr: slight rewording of commit log]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2022-07-04 21:50:44 +02:00
Fabrice Fontaine
7d58c41394 package/uuu: add host-openssl dependency 
Fix the following build failure raised since the addition of the package
in commit 776385d645:

CMake Error: The following variables are used in this project, but they are set to NOTFOUND.
Please set them or make sure they are set and tested correctly in the CMake files:
OPENSSL_CRYPTO_LIBRARY (ADVANCED)
    linked by target "uuu" in directory /home/buildroot/autobuild/instance-0/output-1/build/host-uuu-1.4.193/uuu
OPENSSL_SSL_LIBRARY (ADVANCED)
    linked by target "uuu" in directory /home/buildroot/autobuild/instance-0/output-1/build/host-uuu-1.4.193/uuu

Fixes:
 - http://autobuild.buildroot.org/results/2f05bc67112a59eba8f59ff707e43d76e41dbad1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2022-07-04 18:54:06 +02:00
Fabrice Fontaine
026f35d9e7 package/libopenssl: security bump to version 1.1.1p 
The c_rehash script allows command injection (CVE-2022-2068)
============================================================

Severity: Moderate

In addition to the c_rehash shell command injection identified in
CVE-2022-1292, further circumstances where the c_rehash script does not
properly sanitise shell metacharacters to prevent command injection were
found by code review.

When the CVE-2022-1292 was fixed it was not discovered that there
are other places in the script where the file names of certificates
being hashed were possibly passed to a command executed through the
shell.

This script is distributed by some operating systems in a manner where
it is automatically executed.  On such operating systems, an attacker
could execute arbitrary commands with the privileges of the script.

Use of the c_rehash script is considered obsolete and should be replaced
by the OpenSSL rehash command line tool.

https://www.openssl.org/news/secadv/20220621.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2022-07-04 18:53:11 +02:00
Baruch Siach
a0b8eee635 package/iptables: fix build with musl libc 
Add upstream patch fixing collision of struct ethhdr definition with
kernel headers.

Add another upstream patch to remove undefined u_int16_t type build
breakage.

Fixes:
http://autobuild.buildroot.net/results/2a449752ee51eed8b8d569a52eb69f635e0369cd/
http://autobuild.buildroot.net/results/23e97f88259850ecb12f2444365b34fa6fac8211/
http://autobuild.buildroot.net/results/b8e3809d469c949a755808b7132717b0325ebafa/

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2022-07-04 18:50:23 +02:00
Yegor Yefremov
a49d70a3f2 package/python-setuptools-scm: add missing runtime dependency 
Since version 7.0.4 python-setuptools-scm requires
host-python-typing-extensions package.

Fixes:
http://autobuild.buildroot.net/results/a4a52da24032222860ad6abe89bf66839cc2e812/
http://autobuild.buildroot.net/results/2b381cd32671db4aa0b281ece5569667bae0f923/
http://autobuild.buildroot.net/results/a3c5208224cc7825152d9a27b64fd82fb000a259/

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[yann.morin.1998@free.fr: split long line]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2022-07-04 17:53:07 +02:00
Quentin Schulz
44eda2602a boot/optee-os: fix typo in help message of BR2_TARGET_OPTEE_OS_CUSTOM_TARBALL 
The custom tarball option should be given a URL pointing to an OP-TEE OS
tarball and not a "kernel" one.

Fixes: 9c79b369d6 "boot/optee-os: add support for custom tarball URL"
Cc: Quentin Schulz <foss+buildroot@0leil.net>
Signed-off-by: Quentin Schulz <quentin.schulz@theobroma-systems.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2022-07-04 17:41:00 +02:00
Thomas Petazzoni
91562c9045 DEVELOPERS: drop Gaël Portay 
Gaël Portay is apparently no longer at Collabora:

<gael.portay@collabora.com>: host mail.collabora.co.uk[46.235.227.172] said:
    550 5.1.1 <gael.portay@collabora.com>: Recipient address rejected: User
    unknown in local recipient table (in reply to RCPT TO command)

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-07-04 09:50:43 +02:00
Fabrice Fontaine
faeebe0858 package/watchdogd: install to staging 
Fixes:
 - https://bugs.buildroot.org/show_bug.cgi?id=14881

The package provides a library and a .pc file, so install it into staging as
well.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Acked-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:55:24 +02:00
Fabrice Fontaine
017dbc770c package/glog: bump to version 0.6.0 
https://github.com/google/glog/releases/tag/v0.6.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:54:31 +02:00
Fabrice Fontaine
df91a970b6 package/ghostscript: security bump to version 9.56.1 
Fix CVE-2022-2085: A NULL pointer dereference vulnerability was found in
Ghostscript, which occurs when it tries to render a large number of bits
in memory. When allocating a buffer device, it relies on an
init_device_procs defined for the device that uses it as a prototype
that depends upon the number of bits per pixel. For bpp > 64,
mem_x_device is used and does not have an init_device_procs defined.
This flaw allows an attacker to parse a large number of bits (more than
64 bits per pixel), which triggers a NULL pointer dereference flaw,
causing an application to crash.

Drop patch (already in version)

https://www.ghostscript.com/doc/9.56.0/News.htm
https://www.ghostscript.com/doc/9.56.1/News.htm

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:54:05 +02:00
Fabrice Fontaine
17f568f399 package/vim: security bump to version 9.0.0008 
- Fix CVE-2022-2124, CVE-2022-2125, CVE-2022-2126 and CVE-2022-2129
- Update hash of README.txt (version updated with
  eb49041875)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:53:17 +02:00
Fabrice Fontaine
a336b731af package/gtest: bump to version 1.12 
https://github.com/google/googletest/releases/tag/release-1.12.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:53:10 +02:00
James Hilliard
bf46a455bf package/weston: bump to version 10.0.1 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:50:41 +02:00
Fabrice Fontaine
7186fdb51f package/sshfs: bump to version 3.7.3 
https://github.com/libfuse/sshfs/blob/sshfs-3.7.3/ChangeLog.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:49:54 +02:00
James Hilliard
e2f743f38f package/python-weasyprint: bump to version 55.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:49:08 +02:00
James Hilliard
7cb07eef97 package/python-setuptools-scm: bump to version 7.0.3 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:48:59 +02:00
James Hilliard
f9ee963562 package/python-pyparsing: bump to version 3.0.9 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:48:50 +02:00
James Hilliard
ae879f6300 package/python-setuptools: bump to version 62.6.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:48:41 +02:00
James Hilliard
700a1f26b0 package/python-pypa-build: bump to version 0.8.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:48:34 +02:00
James Hilliard
83548c33fa package/python-pillow: bump to version 9.1.1 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:48:27 +02:00
James Hilliard
06ac43e7cc package/python-pycryptodomex: bump to version 3.15.0 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:48:20 +02:00
James Hilliard
5b022b1081 package/python-cssutils: bump to version 2.4.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 15:48:11 +02:00
Bernd Kuhls
9df9f06ace package/vdr: bump version to 2.6.1 
Changelog: https://github.com/vdr-projects/vdr/blob/master/HISTORY

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 10:05:55 +02:00
Bernd Kuhls
59c623fad6 package/sqlite: bump version to 3.39.0 
Release notes: https://sqlite.org/releaselog/3_39_0.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 09:58:19 +02:00
Bernd Kuhls
ad54a80465 package/pure-ftpd: bump version to 1.0.51 
Changelog: https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog

Updated copyright hash due to copyright year bump:
cf1a9705c6

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 09:56:39 +02:00
Bernd Kuhls
214ea2207f package/intel-gmmlib: bump version to 22.1.4 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 09:56:31 +02:00
Bernd Kuhls
b034109dd6 package/libcurl: security bump to version 7.84.0 
Fixes the following security issues:

- CVE-2022-32205: Set-Cookie denial of service
  https://curl.se/docs/CVE-2022-32205.html

- CVE-2022-32206: HTTP compression denial of service
  https://curl.se/docs/CVE-2022-32206.html

- CVE-2022-32207: Unpreserved file permissions
  https://curl.se/docs/CVE-2022-32207.html

- CVE-2022-32208: FTP-KRB bad message verification
  https://curl.se/docs/CVE-2022-32208.html

Changelog: https://curl.se/changes.html

Upstream removed configure option --enable-hidden-symbols:
0c2d3118aa

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
[Peter: mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-07-02 09:52:08 +02:00