mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity
67,414 Commits 6 Branches 483 Tags
dbbcd3be5da0fe86a167ee8e86e7992aa1e92a7a
Commit Graph

67414 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Romain Naour
dbbcd3be5d package/crudini: fix python 3.10+ warning due to pipes import 
The TestCrudiniPy3 test fail due to a python 3.10 warning due to pipes
import in crudini.

Indeed, pipes is deprecated since python 3.10 and slated for removal
in python 3.13.

Backport an upstream patch fixing the warning.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4322819049

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d3a93df9e8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 17:02:28 +02:00
Romain Naour
f1237f0429 package/python-can: add missing setuptools runtime dependency 
The commit [1] removed setuptools from runtime dependencies
"Drop spurious setuptools runtime dependency.". Since then
the test TestPythonPy3Can fail with the following error:

  ModuleNotFoundError: No module named 'pkg_resources'

Add back setuptools to provide "pkg_resources".

Fixes
https://gitlab.com/buildroot.org/buildroot/-/jobs/4322819285

[1] 09c966af73

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8ac1458e81)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 16:57:58 +02:00
Romain Naour
e69bd1179c package/python-django: add missing python-zlib runtime dependency 
Tree django core files are using "import zlib" and requires
BR2_PACKAGE_PYTHON3_ZLIB to be enabled.

django/core/cache/backends/filebased.py:import zlib
django/core/files/images.py:import zlib
django/core/signing.py:import zlib

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4322819300

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit aecf8a96e1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 16:57:23 +02:00
Bernd Kuhls
e453fbe0e6 {linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 2, 3}.x series 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c27bf8881d)
[Peter: drop 6.2.x / 6.3.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 16:56:49 +02:00
Bagas Sanjaya
971cabfd91 toolchain-external-custom: Describe BR2_TOOLCHAIN_EXTERNAL_CUSTOM_PREFIX 
"Toolchain prefix" option apparently doesn't have any help describing
it, which causes confusion when using external toolchain. Leaving this
option at default prefix name ("$(ARCH)-linux") when external toolchain
components are called with different prefix (e.g.
"$(ARCH)-unknown-linux-gnu") may cause build failure unless the prefix
symlink is already in place (e.g. when using Buildroot-generated
toolchain as external toolchain).

Describe the option to clarify.

Signed-off-by: Bagas Sanjaya <bagasdotme@gmail.com>
Reviewed-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e418a2c06a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 09:14:24 +02:00
Peter Seiderer
0a92e97196 package/libcurl: security bump version to 8.0.1 
For details see [1] and [2].

[1] https://curl.se/changes.html#8_0_0
[1] https://curl.se/changes.html#8_0_1

Fixes the following security issues:

CVE-2023-27533: https://curl.se/docs/CVE-2023-27533.html
CVE-2023-27534: https://curl.se/docs/CVE-2023-27534.html
CVE-2023-27535: https://curl.se/docs/CVE-2023-27535.html
CVE-2023-27536: https://curl.se/docs/CVE-2023-27536.html
CVE-2023-27537: https://curl.se/docs/CVE-2023-27537.html
CVE-2023-27538: https://curl.se/docs/CVE-2023-27538.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 1e735c4837)
[Peter: Mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 09:09:31 +02:00
Peter Seiderer
8f0fa2899b package/llvm: fix host compile with gcc-13 
Add upstream patch to fix host compile error on openSUSE Tumbleweed
(gcc-13.0.1).

Fixes:

  .../build/host-llvm-11.1.0/include/llvm/Support/Signals.h:117:8: error: variable or field ‘CleanupOnSignal’ declared void
    117 |   void CleanupOnSignal(uintptr_t Context);
        |        ^~~~~~~~~~~~~~~
  .../build/host-llvm-11.1.0/include/llvm/Support/Signals.h:117:24: error: ‘uintptr_t’ was not declared in this scope
    117 |   void CleanupOnSignal(uintptr_t Context);
        |                        ^~~~~~~~~
  .../build/host-llvm-11.1.0/include/llvm/Support/Signals.h:18:1: note: ‘uintptr_t’ is defined in header ‘<cstdint>’; did you forget to ‘#include <cstdint>’?
     17 | #include <string>
    +++ |+#include <cstdint>
     18 |

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit f0795bd104)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 08:58:01 +02:00
Romain Naour
0f229a4231 support/config-fragments/autobuild/br-arm-internal-glibc: update to bleeding edge components 
The br-arm-internal-glibc.config used to be generally used as a configuration
to test the bleeding edge versions of components. However, it has been
lagging behind somewhat and produce invalid configuration since binutils 2.36
removal in d08639e6b9e5... so let's bring it up-to-date:

- Binutils 2.39.x
- GCC 12.x

Since Buildroot 2022.02, the autobuilders doesn't use the csv file anymore
but the test-pkg script still use it.

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4944ff2878)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-29 08:53:26 +02:00
Francois Perrad
88aee033d1 package/lua: bump to version 5.4.6 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 603df32a0c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-16 22:48:49 +02:00
Julien Olivain
bd4d2ece38 DEVELOPERS: add Julien Olivain for package/openblas 
The package has been orphan since commit ee58353 (2018-12-22).

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 90ffab4011)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-16 14:41:42 +02:00
Peter Seiderer
7ce01f03f2 package/edid-decode: change download from git URL to https 
- change download from git URL to https (and SITE_METHOD git)

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9507e5a4b4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-16 14:40:49 +02:00
Peter Seiderer
18ea458338 package/edid-decode: fix typo in Config.in for comment selection 
Fix typo ('!!' vs. '!') Config.in for dependencies comment selection
(introduced by commit 'package/edid-decode: bump version to 1889504',
see [1]).

[1] https://git.buildroot.net/buildroot/commit/?id=d498088fe7e1e664d4ee8d9bc54262d40227d6e5

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0ee49d6272)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-16 14:36:26 +02:00
Bernd Kuhls
1b2cc4afbf {linux, linux-headers}: bump 5.15.x / 6.{1, 2, 3}.x series 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 773a6fb1b2)
[Peter: drop 6.2.x / 6.3.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-16 14:33:44 +02:00
Peter Korsgaard
8025cfad10 Update for 2023.02.1 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023.02.1 		2023-05-09 22:38:47 +02:00
Daniel Lang
9446c4a7b6 package/dnsmasq: fix CVE-2023-28450 
Adds the upstream patch that fixes the CVE.
No new release so far.

Signed-off-by: Daniel Lang <dalang@gmx.at>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 3816471496)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 21:18:49 +02:00
Christian Stewart
0189f41ecc package/go: security bump to version 1.19.9 
go1.19.9 (released 2023-05-02) includes three security fixes to the
html/template package, as well as bug fixes to the compiler, the runtime, and
the crypto/subtle, crypto/tls, net/http, and syscall packages.

CVE-2023-24539: html/template: improper sanitization of CSS values
CVE-2023-24540: html/template: improper handling of JavaScript whitespace
CVE-2023-29400: html/template: improper handling of empty HTML attributes

https://go.dev/doc/devel/release#go1.19.9
https://github.com/golang/go/issues?q=milestone%3AGo1.19.9+label%3ACherryPickApproved

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 509a5d66c4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 21:16:44 +02:00
Daniel Lang
3232298f1e package/libgtk3: fix cups backend 
When explicitly specifying printing backends libgtk3 requires file
to be one of them on linux.

Fixes:
- output/build/libgtk3-3.24.37/modules/printbackends/meson.build:39:4: ERROR: Problem encountered: 'file' print backed needs to be enabled

Signed-off-by: Daniel Lang <dalang@gmx.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9a0857d734)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 21:09:25 +02:00
Francois Perrad
aa6e00367f package/libgtk3: bump to version 3.24.37 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c4a2c66f6c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 21:08:55 +02:00
James Knight
93d44d9571 package/libcurl: drop override of LD_LIBRARY_PATH 
A previous commit [1] (libcurl 7.19.2) configured `LD_LIBRARY_PATH` to
prevent cross-compiling errors when target == host; however, such an
override is no longer needed [2][3] (libcurl 7.37, 7.74) and causes
build errors in some environments. Dropping the override.

Fixes:
- https://bugs.busybox.net/show_bug.cgi?id=15181

[1]: a51ce31949
[2]: e48a821ed5
[3]: 6f3369bbcf

Signed-off-by: James Knight <james.d.knight@live.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6b6814f149)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 21:05:28 +02:00
James Knight
02dd429870 package/systemd: update help links 
When browsing the help references for various systemd features, it was
observed that the `systemd-rfkill` link was dead (originally pointing to
`systemd-rfkill@.service.html`; now `systemd-rfkill.service.html`). This
commit corrects this link, as well as updates all other links to https
(since freedesktop.org now force redirects to https).

Signed-off-by: James Knight <james.d.knight@live.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8520da532b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:35:54 +02:00
Bernd Kuhls
fbdad6a5ff package/samba4: security bump version to 4.15.13 
Release notes:
https://www.samba.org/samba/history/samba-4.15.13.html

Fixes CVE-2022-37966, CVE-2022-37967, CVE-2022-38023 & CVE-2022-45141.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 734cc8e951)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:35:06 +02:00
Fabrice Fontaine
93b506f337 package/zeek: disable with libressl 
Disable building with libressl to avoid the following build failure
raised since the addition of the package in commit
ea36681572:

In file included from /home/thomas/autobuild/instance-2/output-1/build/zeek-4.1.1/src/analyzer/protocol/mime/MIME.cc:7:
/home/thomas/autobuild/instance-2/output-1/build/zeek-4.1.1/src/zeek/digest.h: In function 'void* EVP_MD_CTX_md_data(const EVP_MD_CTX*)':
/home/thomas/autobuild/instance-2/output-1/build/zeek-4.1.1/src/zeek/digest.h:22:12: error: invalid use of incomplete type 'const EVP_MD_CTX' {aka 'const struct env_md_ctx_st'}
   22 |  return ctx->md_data;
      |            ^~

Fixes:
 - http://autobuild.buildroot.org/results/2db2988d495f9d06d058fb532a2dcfa9ef6e207c

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5b63325e86)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:33:47 +02:00
Giulio Benetti
cfaf4ec64f package/rtl8189fs: bump to version 2023-03-27 on rtl8189fs branch 
Fixes:
http://autobuild.buildroot.net/results/a1c/a1c4c386e60a082d30cae686b9e1d27d01046266/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0bd9dabec5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:32:15 +02:00
Giulio Benetti
b25cfba01e package/rtl8723ds: fix typo CLAGS renaming with CFLAGS 
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7c30ba90ce)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:31:39 +02:00
James Hilliard
a07e9f253d package/gst1-python: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8fb9e8ca6b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:30:17 +02:00
James Hilliard
1781226e5c package/gst-omx: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e29fff8388)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:30:12 +02:00
James Hilliard
cb7d10bcbe package/gstreamer1-editing-services: bump version to 1.22.2 
Drop patch which is now upstream.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e4fb09f95f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:30:02 +02:00
James Hilliard
7f0dac0234 package/gst1-rtsp-server: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e796e5a70b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:55 +02:00
James Hilliard
2a6404684e package/gst1-vaapi: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2231878df2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:43 +02:00
James Hilliard
7f23520319 package/gst1-libav: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d34c0b3df4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:37 +02:00
James Hilliard
0ece37e28d package/gst1-devtools: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e375104371)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:32 +02:00
James Hilliard
5306eebf3b package/gst1-plugins-ugly: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1155c854dc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:24 +02:00
James Hilliard
fc2aef38ee package/gst1-plugins-bad: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit aab52c395e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:19 +02:00
James Hilliard
2d95bb06f0 package/gst1-plugins-good: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 9b279b6699)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:10 +02:00
James Hilliard
a5c1c1d884 package/gst1-plugins-base: bump version to 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7812b59125)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:29:04 +02:00
James Hilliard
a708a811c1 package/gstreamer1: bump to version 1.22.2 
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 42b9277479)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 19:28:58 +02:00
Daniel Lang
f5dac8fc40 package/tcpdump: security bump to version 4.99.4 
Fixes CVE-2023-1801

Signed-off-by: Daniel Lang <dalang@gmx.at>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 19a35e7236)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 13:24:57 +02:00
Michael Fischer
81a2daef27 package/sdl2: bump version to 2.26.5 
Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4ed0608c88)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-04 13:24:37 +02:00
Adrian Perez de Castro
c1fab37709 package/webkitgtk: security bump to version 2.38.6 
Bugfix release with many security fixes, including (but not limited to)
patches for CVE-2023-25358, CVE-2022-0108, CVE-2022-32885,
CVE-2023-27932, CVE-2023-27954, and CVE-2023-28205.

Release notes:

  https://webkitgtk.org/2023/04/20/webkitgtk2.38.6-released.html

Accompanying security advisory:

  https://webkitgtk.org/security/WSA-2023-0003.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d6b871e137)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 22:02:13 +02:00
Adrian Perez de Castro
802dba0f97 package/wpewebkit: security bump to version 2.38.6 
Bugfix release with many security fixes, including (but not limited to)
patches for CVE-2023-25358, CVE-2022-0108, CVE-2022-32885,
CVE-2023-27932, CVE-2023-27954, and CVE-2023-28205.

Release notes:

  https://wpewebkit.org/release/wpewebkit-2.38.6.html

Accompanying security advisory:

  https://wpewebkit.org/security/WSA-2023-0003.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b9c6684fa3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 22:02:03 +02:00
Francois Perrad
242cc8c7de package/lua: bump to version 5.4.5 
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 60d8e52576)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 14:06:41 +02:00
Romain Naour
754dc7b1b4 Config.in.legacy: add missing binutils 2.36.x entry 
Commit [1] removed binutils 2.36.1 but forgot to add the legacy
entry.

[1] d08639e6b9

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 272bfb4cab)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 13:20:44 +02:00
Bernd Kuhls
1c15acd6bc package/ffmpeg: bump version to 4.4.4 
Changelog:
https://git.videolan.org/?p=ffmpeg.git;a=blob;f=Changelog;hb=refs/heads/release/4.4

Rebased all patches, switched _SITE to https.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 72edd5633e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 11:50:34 +02:00
Bernd Kuhls
13cf1ba623 package/intel-microcode: security bump version to 20230214 
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/main/releasenote.md

CVE-2022-21216
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html

CVE-2022-33196
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html

CVE-2022-38090
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f32673ff8d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 11:31:56 +02:00
Bernd Kuhls
ba339be0f7 package/libxml2: security bump to version 2.10.4 
- [CVE-2023-29469] Hashing of empty dict strings isn't deterministic
- [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
- schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK

https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.4

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 162053090f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 09:26:19 +02:00
Bernd Kuhls
65a935c50c package/x11r7/xserver_xorg-server: security bump version to 21.1.8 
Release notes:
https://lists.x.org/archives/xorg-announce/2023-March/003377.html

Fixes CVE-2023-1393:
https://lists.x.org/archives/xorg-announce/2023-March/003374.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 83f6a49871)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 09:25:56 +02:00
Bernd Kuhls
8117ff67d0 package/apache: security bump version to 2.4.57 
Release notes:
https://lists.apache.org/thread/lp9t6w2t0qsbbo14lylk2yvfj8hgfoh9

Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.57
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 839c0c7d7c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 09:25:17 +02:00
Bernd Kuhls
a5145ca1f8 package/php: bump version to 8.2.5 
Changelog:
https://www.php.net/ChangeLog-8.php#8.2.4
https://www.php.net/ChangeLog-8.php#8.2.5

Release notes:
https://news-web.php.net/php.announce/351
https://news-web.php.net/php.announce/352

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1fb66e2852)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 09:24:31 +02:00
Bernd Kuhls
6fab42da90 {linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.1.x series 
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d79fce3edd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 08:48:38 +02:00
Yann E. MORIN
5c3c5a6bbd package/readline: fix "Upstream:" tag 
The test chckes that the "Upstream:" tag be on the first column, without
any leading character (no space, no bracket of any kind).

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d89fdaea2b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-05-02 08:47:42 +02:00