Commit Graph

82997 Commits

Author SHA1 Message Date
Bernd Kuhls
e09f2e76b4 package/gcc: bump 16.x series to 16.2.0
https://gcc.gnu.org/pipermail/gcc-announce/2026/000193.html

GCC 16.2 is a bug-fix release from the GCC 16 branch
containing important fixes for regressions and serious bugs in
GCC 16.1 with more than 102 bugs fixed since the previous release.

For the list of bugs fixed in this version, see:
https://gcc.gnu.org/gcc-16/changes.html#16.2

Removed patch 0003 which was backported from the gcc-16 branch and is
included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 10:52:15 +02:00
Bernd Kuhls
3f8db818df {linux, linux-headers}: bump 6.6.x, 6.1.x, 5.15.x, 5.10.x series
Update the latest kernel releases to:
 - 6.6.149 -> 6.6.150
 - 6.1.181 -> 6.1.182
 - 5.15.214 -> 5.15.215
 - 5.10.263 -> 5.10.264

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-08 09:02:33 +02:00
Bernd Kuhls
3fc6765289 {linux, linux-headers}: bump 7.1.x, 6.18.x, 6.12.x, 6.6.x, 6.1.x, 5.15.x, 5.10.x series
Update the latest kernel releases to:
 - 7.1.6 -> 7.1.7
 - 6.18.42 -> 6.18.43
 - 6.12.101 -> 6.12.102
 - 6.6.148 -> 6.6.149
 - 6.1.180 -> 6.1.181
 - 5.15.213 -> 5.15.214
 - 5.10.262 -> 5.10.263

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-07 12:37:34 +02:00
Dario Binacchi
2f5eb8f8f3 Revert "configs/stm32f429_disco_xip: fix boot failure after uClibc bump"
This reverts commit 72f7aa47e7.

The MALLOC_SIMPLE workaround is no longer needed: the root cause, a
zero _dl_pagesize on noMMU/FLAT targets, is fixed by commit
35d3927e85 ("package/uclibc: fix for noMMU targets using FLAT
binaries").

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:44:24 +02:00
Dario Binacchi
8f103c70de Revert "configs/stm32f469_disco_{sd, xip}: fix boot failure after uClibc bump"
This reverts commit 832ff692ab.

The MALLOC_SIMPLE workaround is no longer needed: the root cause, a
zero _dl_pagesize on noMMU/FLAT targets, is fixed by commit
35d3927e85 ("package/uclibc: fix for noMMU targets using FLAT
binaries").

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:44:24 +02:00
Dario Binacchi
c784c1fadb Revert "configs/stm32f769_disco_sd: fix boot failure after uClibc bump"
This reverts commit dd67de1bd3.

The MALLOC_SIMPLE workaround is no longer needed: the root cause, a
zero _dl_pagesize on noMMU/FLAT targets, is fixed by commit
35d3927e85 ("package/uclibc: fix for noMMU targets using FLAT
binaries").

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:44:24 +02:00
Bernd Kuhls
dab2b76234 package/openvpn: security bump version to 2.7.6
https://github.com/OpenVPN/openvpn/blob/v2.7.6/Changes.rst

Fixes CVE-2026-63649 & CVE-2026-63650.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:21:33 +02:00
Bernd Kuhls
209117f1dd package/apr-util: security bump to version 1.6.4
https://archive.apache.org/dist/apr/Announcement-aprutil-1.x.html
https://archive.apache.org/dist/apr/CHANGES-APR-UTIL-1.6

Fixes CVE-2025-49506, CVE-2026-32327, CVE-2026-34191, CVE-2026-34501 &
CVE-2026-34502.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:20:15 +02:00
Bernd Kuhls
8583d8b2b4 package/python3: security bump version to 3.14.7
https://www.python.org/downloads/release/python-3147/
https://docs.python.org/release/3.14.7/whatsnew/changelog.html

Rebased patch 0010 due to upstream commit:
04735deeb2 (diff-b9d5f29e160364d4616b4bcc3b04538fca8d1d1cca809af4196bcaf16c7c5d40)

Removed patches 0011-0015 which are included in this release.

Fixes CVE-2026-12003 and others.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-06 23:15:31 +02:00
Fiona Klute
e313a2d259 package/libglib2: security bump to version 2.88.3
There have been a number of security fixes of mixed severity in
libglib2 since 2.86.0, sorted by release:

2.87.1
* CVE-2025-13601: Incorrect calculation of buffer size in
  g_escape_uri_string()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3827
* CVE-2025-14087: Buffer underflow on Glib through glib/gvariant via
  bytestring_parse() or string_parse() leads to OOB Write
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3834
* CVE-2025-14512: GIO: Integer overflow in file attribute escaping
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3845

2.87.3
* CVE-2026-1484: Integer Overflow -> Buffer Underflow on Glib through
  glib/gbase64.c via g_base64_encode_close() leads to OOB Write
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3870
* CVE-2026-1485: Buffer underflow on Glib through
  gio/gcontenttype-fdo.c via parse_header() lead to OOB Read/Write
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3871
* CVE-2026-1489: Integer Overflow on Glib through glib/guniprop.c via
  output_marks() lead to OOB Write in glib/gutf8.c:g_unichar_to_utf8()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3872

2.88.1
* CVE-2026-58010: Buffer Over-read on GLib through
  glib/gvariant-serialiser.c:1253 via gvs_tuple_is_normal()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3915
* CVE-2026-58011: OOB Read on GLib through
  glib/gdatetime.c:g_date_time_get_ymd via invalid `GDateTime`
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3917
* CVE-2026-58012: Buffer Over-read on GLib's g_regex_replace() through
  glib/gregex.c:string_append() via g_utf8_next_char()
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3918
* CVE-2026-58013: Buffer Over-read on GLib through glib/giochannel.c
  via "g_io_channel_read_line_backend"
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3925
* CVE-2026-58014: Off-by-one Error on GLib through glib/gkeyfile.c via
  "g_key_file_get_locale_string_list"
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3930
* CVE-2026-58015: Path Traversal on GLib DBus through
  glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry,
  mechanism_client_data_receive (COOKIE_SHA1 Client Authentication)
  leads to Arbitrary File Read (sort of)
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3931

2.88.3
* CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded
  SASL line buffering
  https://gitlab.gnome.org/GNOME/glib/-/work_items/3985

Full upstream changelog:
https://gitlab.gnome.org/GNOME/glib/-/blob/2.88.3/NEWS?ref_type=tags

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-05 21:35:55 +02:00
Deividas Puplauskas
3c323d714a package/perl-switch: new package
See here for a description:
https://metacpan.org/pod/Switch

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:46:47 +02:00
Deividas Puplauskas
639353897d package/perl-log-message-simple: new package
See here for a description:
https://metacpan.org/pod/Log::Message::Simple

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:45:32 +02:00
Deividas Puplauskas
42bc2e2ac1 package/perl-log-message: new package
See here for a description:
https://metacpan.org/pod/Log::Message

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:45:08 +02:00
Deividas Puplauskas
7b822ef500 package/perl-cgi-session: new package
See here for a description:
https://metacpan.org/pod/CGI::Session

Signed-off-by: Deividas Puplauskas <deividas.puplauskas@gmail.com>
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:44:39 +02:00
Waldemar Brodkorb
35d3927e85 package/uclibc: fix for noMMU targets using FLAT binaries
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:16:09 +02:00
Romain Naour
c8bf258e5b configs/acmesystems_arietta_g25_{128mb, 256mb}_defconfig: remove defconfig
This configuration for the acmesystems arietta g25 were added back in
February 2016 (commit e173aeece5), and has
not been updated in any significant way since 2019 (the last major
kernel update [1]).

This defconfig still use a 4.19 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913803 (acmesystems_arietta_g25_256mb_defconfig)
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913802 (acmesystems_arietta_g25_128mb_defconfig)

[1] 42ea31c114

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
41806d5ed5 configs/acmesystems_aria_g25_{128mb, 256mb}_defconfig: remove defconfig
This configuration for the acmesystems aria g25 were added back in July
2015 (commit 2e52be7982), and has not
been updated in any significant way since 2019 (the last major kernel
update [1]).

This defconfig still use a 4.19 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913801 (acmesystems_aria_g25_256mb_defconfig)
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728913800 (acmesystems_aria_g25_128mb_defconfig)

[1] ab10b5b3ee

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
b1ce687923 configs/ts5500_defconfig: remove defconfig
This configuration for the TS-5400 was added back in September
2014 (commit 483e3bef47), got some update
in 2018 (commit 6461d76992) and has not
been updated in any significant way since then.

This defconfig still use a 4.14 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728914087 (ts5500_defconfig)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Cc: Vivien Didelot <vivien.didelot@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
47b558b111 package/ts4900-fpga: remove package
The ts4900 defconfig was removed, this package is no longer used.

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
fac93ecea8 configs/ts4900_defconfig: remove defconfig
This configuration for the TS-4900 was added back in September
2016 (commit 3138ab3fee), and has not
been updated in any significant way since then.

This defconfig still use a 4.12 kernel that is no longer maintained.

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728914086 (ts4900_defconfig)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Romain Naour
81490b9592 configs/s6lx9_microboard_defconfig: remove defconfig
This configuration for the s6lx9 microboard was added back in March 2012
(commit 49084a1982), and has not been
updated in any significant way since then.

This defconfig still use a 4.4.7 (no longer maintained) and out of tree
devicetree (lx9_mmu.dts).

Remove its support.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/14728914045 (s6lx9_microboard_defconfig)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 22:00:24 +02:00
Bernd Kuhls
6737c90bc6 package/gdb: remove version 14.x
Now that gdb 17.x has been added[1], and gdb 16.x made the default[2],
let's remove support for gdb 14.x.

Aside from the usual removal, we also simplify things a bit as GDB
14.x was the last version not depending on gcc >= 9.x. As it is now a
mandatory dependency we move it outside the choice.

[1] 4868e0dd62
[2] 23e70547ca

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 21:24:04 +02:00
Yann E. MORIN
ed980191eb docs/manual: fix indentation in pkg-hare example
Fixes: 44d3843234 (package/pkg-hare.mk: new infrastructure)

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 21:14:26 +02:00
Alsey Coleman Miller
d80d38a551 package/pipewire: add support for the LC3 bluetooth codec
The bluez5 plugin can encode and decode LC3 (Bluetooth LE Audio) when
built against liblc3, but the meson option was unconditionally disabled.
Enable it when BR2_PACKAGE_LIBLC3 is set, using the same conditional
idiom as the neighbouring opus and aac codecs.

Signed-off-by: Alsey Coleman Miller <alseycmiller@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:31:00 +02:00
Alsey Coleman Miller
d046fd0883 package/liblc3: new package
liblc3 is the Google implementation of LC3, the mandatory codec of the
Bluetooth LE Audio profiles. The PipeWire bluez5 plugin can use it to
encode and decode LE Audio streams.

https://github.com/google/liblc3

Signed-off-by: Alsey Coleman Miller <alseycmiller@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:31:00 +02:00
Fiona Klute
c01426fe96 package/librsvg: update project URL
wiki.gnome.org has a big deprecation warning saying "All information
on this site is out of date and should not be used." Point at the
librsvg project on gitlab.gnome.org instead.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:26:01 +02:00
Joachim Wiberg
8aca1f26c1 package/mini-snmpd: enable optional .conf and ethtool support
Both libConfuse and ethtool support is relatively new features.  Enable
optional support for them, including an example /etc/mini-snmpd.conf

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:22:49 +02:00
Joachim Wiberg
54485e075d package/mini-snmpd: add sysv init script
A start script has been missing since the package was added, so the
daemon was not started automatically on sysv/busybox systems.

This also fixes a regression in systemd builds introduced in fccdc6bd,
when the package switched from local unit file to upstream.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:22:49 +02:00
Joachim Wiberg
7af1e0a157 package/mini-snmpd: bump to version 2.0
This bumps from v1.6 directly to v2.0, for details, please see:

 - https://github.com/troglobit/mini-snmpd/releases/tag/v1.7
 - https://github.com/troglobit/mini-snmpd/releases/tag/v2.0

The release tarball is the canonical supported source for the project
and also ships a pre-generated configure script, hence the switch.

This commit removes the package patch, which is now included in the new
version. The .checkpackageignore file is also updated accordingly.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
[Julien: update .checkpackageignore to fix check-package error]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:22:49 +02:00
Neal Frager
b60d3e2c52 package/binutils-bare-metal: bump to binutils 2.47
Bump the binutils-bare-metal package to version 2.47.

Release notes can be found here:
https://sourceware.org/pipermail/binutils/2026-July/150449.html

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-04 18:16:54 +02:00
Neal Frager via buildroot
2938f827f7 DEVELOPERS: add Neal Frager for xen
Add Neal Frager for xen and qemu-xen packages.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-04 14:08:32 +02:00
Alsey Coleman Miller
8c5f774172 package/libgtk4: enable introspection when gobject-introspection is enabled
libgtk4 passes -Dintrospection=disabled unconditionally, so Gtk-4.0.gir is
never installed. webkitgtk depends on gobject-introspection and generates
WebKit-6.0.gir, which includes Gtk-4.0.gir, so building both fails:

  FAILED: WebKit-6.0.gir
  Couldn't find include 'Gtk-4.0.gir' (search path:
  '['.../usr/share/gir-1.0', ...]')

Tie the option to BR2_PACKAGE_GOBJECT_INTROSPECTION and add the dependency,
the way package/libgtk3 already does. Systems without introspection keep the
previous behaviour.

Signed-off-by: Alsey Coleman Miller <alseycmiller@gmail.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-04 13:42:45 +02:00
Jean-Michel Hautbois
c92dc611e5 package/libglib2: disable sysprof for the host build
Whether the host libglib2 picks up sysprof support depends on whether
libsysprof-capture happens to be installed on the build machine, which
makes the host build depend on the host environment. Disable sysprof
explicitly for the host build so the result is deterministic.

Keep sysprof enabled for the target build: it is useful to profile and
measure the performance of applications running on the target.

Signed-off-by: Jean-Michel Hautbois <jeanmichel.hautbois@yoseli.org>
[Fiona: also apply to package/libglib2/libglib2-bootstrap]
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-04 13:42:04 +02:00
Bernd Kuhls
20d816651c package/gobject-introspection: bump version to 1.86.0
https://download.gnome.org/sources/gobject-introspection/1.86/gobject-introspection-1.86.0.news

The hash for giscanner/scannerlexer.l changed due to small code
additions [1].

[1] 2f6cbac545

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Fiona: add link to the commit that changed giscanner/scannerlexer.l]
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-04 00:23:26 +02:00
Bernd Kuhls
716ec5a8c1 {linux, linux-headers}: bump 6.6.x, 6.12.x, 6.18.x, 7.1.x series
Update the latest kernel releases to:
 - 6.6.147 -> 6.6.148
 - 6.12.100 -> 6.12.101
 - 6.18.41 -> 6.18.42
 - 7.1.5 -> 7.1.6

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
2026-08-03 23:14:02 +02:00
Alexis Lothoré
fef9cad1fe package/libxmlsec1: bump version to 1.3.12
Update libxmlsec from 1.3.9 to 1.3.12. The package then needs a few
adjustments:
- there are undefined references to xmlDebugDumpDocument ([1]):

  unit_tests/transform_helpers_unit_tests.c:291:9: error: implicit
  declaration of function ‘xmlDebugDumpDocument’
  [-Wimplicit-function-declaration]

This is due to xmlsec1 unit tests being built systematically, and
depending on libxml2 being built with --with-debug, so patch
apps/Makefile.am accordingly at build time to disable unit tests build.

- the build can fail with older GCC versions due to an unimplemented
  parameter ([2]):

  aarch64-linux-gcc.br_real: error: unrecognized command line option \
  ‘-Wformat-overflow=2’; did you mean ‘-Wstrict-overflow=’?

This format-overflow parameter has been implemented in GCC 7, so make
the package depend on GCC >= 7. Another solution could have been to
pass --disable-pedantic to the package's configure, but that sounds a
bit strong just to disable a parameter that has been exisiting for
almost 10 years.

- the build can fail on missing atomics ([3]):

  [...]/bootlin-m68k-5208-uclibc/host/opt/ext-toolchain/m68k-buildroot-uclinux-uclibc/bin/ld.real:
  [...]/bootlin-m68k-5208-uclibc/host/bin/../m68k-buildroot-uclinux-uclibc/sysroot/usr/lib/libcrypto.a(libcrypto-lib-threads_pthread.o):
  in function `CRYPTO_atomic_store': threads_pthread.c:(.text+0xcd2):
  undefined reference to `__atomic_is_lock_free'

So make the package depend on libatomic.

This commit updates the license hash, after a year update in [4].

[1] https://gitlab.com/jolivain/buildroot/-/pipelines/2527527034
[2] https://gitlab.com/jolivain/buildroot/-/jobs/14449681615
[3] https://gitlab.com/jolivain/buildroot/-/jobs/14449681621
[4] 2e557ee8a0

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-Developed-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
[Julien: update license hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 22:37:16 +02:00
Francois Perrad
95cdea9bdd package/hare-dbus: new package
Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
d5b1b7b1b6 package/hare-xml: new package
Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
2bcc975125 package/hare-ev: new package
Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
44d3843234 package/pkg-hare.mk: new infrastructure
Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
[Julien: split long lines]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
72ff2ad88d package/hare: new host package
Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
287454a4e2 package/harec: new host package
dependency for host-hare

Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
cfba7bc570 package/scdoc: new host package
dependency for host-hare

Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
ce99164846 package/qbe: new host package
dependency for host-hare

Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 21:15:59 +02:00
Francois Perrad
e3ff7a6f02 package/perl: security bump to version 5.42.3
fix CVE-2026-8376 - Buffer overflow in Perl_study_chunk
fix CVE-2026-57432 - Buffer overflow in S_measure_struct
fix CVE-2026-13221 - Regex trie 16-bit field overflow

For release notes, see:
https://perldoc.perl.org/5.42.3/perl5423delta

Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 20:56:04 +02:00
Frank Vanbever
b98fac95a9 package/libmodsecurity: security bump version to 3.0.16
https://github.com/owasp-modsecurity/ModSecurity/blob/v3.0.16/CHANGES

Fixes CVE-2026-52761 & CVE-2026-52747

Signed-off-by: Frank Vanbever <fvb@funkworks.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-03 20:45:35 +02:00
Romain Naour
933a591d8a support/testing: usbip: wait for the keyboard be detected
Running TestUsbIp may fail when checking if two QEMU USB Keyboards are
reported by lsusb. On fast host, the second QEMU USB keyboard may not
aleady detected when lsusb is executed. So wait a bit, to let the new
keyboard be detected.

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-02 22:04:18 +02:00
Julien Olivain
67d6e6602f support/testing: python-pydal: new runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-02 21:50:38 +02:00
Julien Olivain
dc6ff71ee3 package/python-pydal: needs python xml module at runtime
pyDAL is using xmlrpc at runtime. See:
https://github.com/web2py/pydal/blob/v20260313.1/pydal/_compat.py#L114

Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-02 21:50:38 +02:00
Julien Olivain
29c988c7fc support/testing: guile: new runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-08-02 21:50:24 +02:00