Commit Graph

75445 Commits

Author SHA1 Message Date
Scott Fan
fee18cca53 package/procps-ng: fix pidfd_open checking
Fixes:
http://autobuild.buildroot.net/results/02a2b1d9ece040c529308800403f0230ead4ed3e/

The previous build setup would check for pidfd_open using
AC_CHECK_FUNC and would be incorrectly reported as true.

Backport patch from upstream:
[1] 2507bc4757
[2] 587efb47df
[3] 5acbb5dc15

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-05 17:55:32 +01:00
Thomas Petazzoni
80f25d4706 package/lmbench: fix build by adjusting LDLIBS logic
The lmbench package (largely unmaintained upstream, last release in
2006) uses a home-grown build system. The scripts/build script sets
LDLIBS to -lm and Buildroot's makefile changes that to:

LDLIBS+=-lm

Except that when Buildroot passes LDLIBS="`$(PKG_CONFIG_HOST_BINARY)
--libs libtirpc`", the LDLIBS variable ends up being equal to:

       -ltirpc-lm

Yes, without any space between -ltirpc and -lm.

Due to this, the checks in scripts/build that use ${LDLIBS} all fail,
and in particular the test that checks when socklen_t is a known type
fails, causing lmbench to provide its own definition, which clashes
with the C library headers definition, and therefore causing build
failures such as:

bench.h:81:13: error: conflicting types for 'socklen_t'; have 'int'

This commit fixes that by adjusting scripts/build using a patch to
properly allow passing additional ${LDLIBS} value, with the needed
space to separate the value from -lm.

Fixes:

  http://autobuild.buildroot.net/results/f1715de95b46a1d08143e529bd4574bc7dbcfb3e/

We have been unable to determine exactly when this issue was
introduced. The first build failure we could find is the one
referenced above, which dates back from Aug 19, 2024. Since this date,
lmbench has been consistently failing on a very regular
basis. However, prior to Aug 19, 2024, the previous failure was from
December 2022, and was unrelated. It is unclear what changed in Aug
2024 to cause this issue to surface. The one thing that changed right
before commit ce3dedc2 (first failing commit) are changes to
genrandconfig, which ensures all autobuilders now generated fully
random configurations instead of configurations based on a
well-defined list of arch/toolchain configurations. But even with
this, this lmbench issue should have appeared earlier, and we have
been unable to find a scientific explanation.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-05 16:52:49 +01:00
Romain Naour
f6fa3324eb package/polkit: disable PIDFD when systemd is not available
Since the Polkit version bump 125, TestPolkitInitd fail due to an
upstream issue related to the new PIDFD support introduced in
Polkit 124 [1].

The PIDFD issue only affect OS without systemd.

Only enable PIDFD support when systemd is available until
upstream fix the issue.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8199992596

[1] https://github.com/polkit-org/polkit/issues/451

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:53:12 +01:00
TIAN Yuanhao
c4a56d3f6d package/gnutls: fix configure options
Two configure option names have been changed since version 3.7.5 [1]:

> Old: --without-libbrotli --without-libzstd (also --with-*)
> New: --without-brotli --without-zstd (also --with-*)

Fixes:

  configure: WARNING: unrecognized options: [...] --without-libbrotli, --without-libzstd

[1]: 6b794e49d1

Signed-off-by: TIAN Yuanhao <tianyuanhao3@163.com>
Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:49:54 +01:00
Thomas Petazzoni
1eec67d164 package/android-tools: fix b64_pton() issue with GCC >= 14.x
The android-tools code base uses the __b64_pton() function, which
isn't provided by all C libraries. So the Debian patch
debian/patches/add_adbd.patch adds an implementation of b64_pton(),
but doesn't actually use it, nor defines a prototype for it. Our
existing patch 0003-Fix-build-issue-with-uclibc.patch switches the
code to use the b64_pton() function... but still without providing a
prototype, causing the following build failures with GCC >= 14.x:

adb_auth_client.c:75:15: error: implicit declaration of function 'b64_pton'

To fix this, we rework 0003-Fix-build-issue-with-uclibc.patch into a
patch that:

 (1) Renames b64_pton() to adb_b64_pton() to make sure it won't clash
     with implementations provided by some C libraries, and adjusts
     the call sites accordingly.

 (2) Adds a prototype definition of adb_b64_pton() in places where
     this function is used.

Fixes:

  http://autobuild.buildroot.net/results/b25b25337c7ad89c33f8bd20b646850bd993ec53ae9/

Even though GCC 14.x support was merged in Buildroot in May 2024, this
particular b64_pton() only started appearing on July 15 2024, with the
first occurence being:

  http://autobuild.buildroot.net/results/1cbe87bbe3c56f28444b3aaba1ba1d05f947d36e/

Indeed, it's not before July 15 2024 that we merged commit
d201f2f5cd ("package/android-tools: add
patches to fix build with GCC 14.x"), which fixed other GCC 14.x
issues, which were hiding this b64_pton() problem.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:44:17 +01:00
Thomas Petazzoni
ee65a2119a package/android-tools: fix build issue on mips64 and powerpc64
The kernel headers on mips64 and powerpc64 were historically "broken",
defining u64 as an "unsigned long" instead of "unsigned long
long". This has been fixed in the upstream Linux kernel by introducing
the __SANE_USERSPACE_TYPES__ definition.

Our commit a2e178d6b4 ("android-tools:
disable on some architecture with old kernel headers") already
disabled building fastboot on powerpc64 and mips64 systems that have
too old kernel headers. However, it turns out that even with the new
kernel headers, there are build issues because
__SANE_USERSPACE_TYPES__ isn't defined everywhere it should be in the
android-tools code base. The Debian patche
debian/patches/ppc64el-ftbfs.patch adds some definitions, but it's
missing one file, and in another the definition comes too late.

This commit adds an extra patch that fixes this up, and makes fastboot
build properly on mips64 and powerpc64.

Fixes:

  http://autobuild.buildroot.net/results/8528ff876e695f79bdfe64f5330d9d51eeef66cb/ (powerpc64)
  http://autobuild.buildroot.net/results/36ac6af73b618c28d1636093da333f7ebd9d6cfe/ (mips64)

This issue has been occurring as far as Feb 2021, with the first
occurence apparently being:

  http://autobuild.buildroot.net/results/d9521b4bfeafb1140c21745dbfe28d476a9b71ec/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:42:52 +01:00
Thomas Petazzoni
3ee745782a package/android-tools: convert all patches to Git-formatted patches
This will make it easier to modify the patch series moving forward. No
functional changes.

On one patch, we added the SoB from Giulio, which was missing. Giulio
was the original contributor of the patch, and nobody touched it since
it was introduced.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:40:19 +01:00
Julien Olivain
8e5a5a9bcc package/rt-tests: fix _SITE download url
Upstream moved old versions in an "older" directory. The current version
in Buildroot was moved to this directory and fail to download.

This commit simply updates the _SITE url to reflect this change.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8514189435

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:37:37 +01:00
Maxim Kochetkov
928494b785 package/alsa-lib: ucm: add BR2_USE_MMU dependency
Build fails with:
ucm_exec.c: In function 'uc_mgr_exec':
ucm_exec.c:229:13: error: implicit declaration of function 'fork' [-Wimplicit-function-declaration]
  229 |         p = fork();
      |             ^~~~

ucm uses fork() so add BR2_USE_MMU dependency for it.

Fixes: https://autobuild.buildroot.org/results/a287d3eef7ea5ea9a85b5b35d14e3698df4ecd01/build-end.log
Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:33:09 +01:00
Baruch Siach
f39d38d77a package/sexpect: fix build with GCC 14 and uClibc
GCC 14 makes implicit declaration an error by default, which breaks
build with uClibc when _GNU_SOURCE is not defined. Add a patch adding
_GNU_SOURCE for uClibc build.

Fixes:
https://autobuild.buildroot.org/results/2c284d800e59e41669a5da85ca23e2923eea7997/

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:29:23 +01:00
Cherniaev Andrei
7dd56b6cd9 boot/grub2/readme.txt: don't specify /dev/loop0
losetup -f returns the next free loop device, which may not be
/dev/loop0.  If you blindly follow the readmy you may end up destroying
an existing device.

Make it more robust with a variable to store the loop device.

Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
[Arnout: keep the actual losetup atomic]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:17:09 +01:00
Bernd Kuhls
014a8201c8 package/libvpl: not supported on mips64
Although adding " || defined(__mips__)" here:
https://github.com/intel/libvpl/blob/main/api/vpl/mfxdefs.h#L71

would fix the problem, libvpl alone makes no sense and the only
dependee, intel-vpl-gpu-rt, is unsupported on mips anyway.

Fixes:
http://autobuild.buildroot.net/results/50d/50d64ab2d547c70b39e2421ee2763d8309873125/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 22:11:12 +01:00
Anssi Hannula
4c9b13b8dd package/nfs-utils: fix unit dependencies without systemd on build host
nfs-utils configure script uses "systemd-escape" to determine the
rpc_pipefs mount point unit name in the non-default case.

If the host build system has no systemd this will silently result in an
empty name, causing rpc_pipefs.target to incorrectly depend on ".mount".

Fix that by depending on host-systemd for build.

Signed-off-by: Anssi Hannula <anssi.hannula@bitwise.fi>
Acked-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 21:23:20 +01:00
Julien Olivain
7025f76274 package/opkg: fix --without-xattr configure option typo
Commit efe93b34e "package/opkg: bump to version 0.7.0" [1] introduced
a use of --without-xattrs (with an extra 's') configure option.

When compiling opkg, the configure step show the warning:

    configure: WARNING: unrecognized options: ... --without-xattrs

The actual option name is "--without-xattr" (without an extra 's').
See [2].

This commit fixes the typo.

[1] efe93b34ec
[2] https://git.yoctoproject.org/opkg/tree/configure.ac?h=v0.7.0#n167

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 21:14:46 +01:00
Romain Naour
e35c5ee607 package/rust/rust: remove Cargo.toml.orig fixup
When the rust package was added in Buildroot it was using
the 1.23.0 release [1]  where some vendored sources contained a
Cargo.toml.orig file that caused issues with
support/scripts/apply-patches.sh used by Buildroot package
infrastructure.

Since then, Buildroot is now using rust 1.74.1 (2024.02.x),
1.79.0 (2024.08.x) and 1.82.0 (master) where vendored
sources no longer contains any Cargo.toml.orig file.
So this post-extract hook is no longer needed.

Moreover, since Rust 1.81.0 are present in
src/tools/rustc-perf/collector/compile-benchmarks/<vendored pkg>
where there is no .cargo-checksum.json file.

Since then, the sed command fail and stop the build:

  sed: can't read [...]/host-rust-1.81.0/src/tools/rustc-perf/collector/compile-benchmarks/serde_derive-1.0.136/.cargo-checksum.json: No such file or directory

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8232367821

[1] b50522d838

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 21:12:14 +01:00
Scott Fan
a0964a9157 package/python-psycopg2: add config dependencies from postgresql
Also update site url to https://github.com/psycopg/psycopg2/

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 21:07:29 +01:00
J. Neuschäfer
4033902ad0 package/musl: Fix -ztext build failures on microblaze
The particular combination of LVM2 (which enables -PIE), musl-libc with
dynamic linking (and thus -ztext, banning TEXTRELs), and microblaze
leads to an error because a TEXTREL is produced in musl-libc's Scrt1.o.

The upstream patch added in this commit fixes (or works around) the
problem.

Fixes: http://autobuild.buildroot.net/results/5bb283eff4b4a2b17d1028bbe0b3e1bea8fbeba8/
Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-12-04 21:01:36 +01:00
Florian Fainelli
0c44722b0c package/linux-tools: perf: Disable shellcheck
The use of shellcheck within perf is not a functional requirement and it can
lead to build failures where the perf makefile attempts to link in empty
.shellcheck_log files:

https://lore.kernel.org/r/fb078045-dc05-426e-b21e-72ffae3e8e1b@gmail.com

Disable shellcheck since we do not need it at all.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-03 21:54:21 +01:00
Yann E. MORIN
773a89d414 DEVELOPERS: drop Yann's entries
As it happens, I am unable to keep maintaining those entries, and it is
misleading to others about whether they should Cc me on their changes.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-12-03 21:17:38 +01:00
LP C
0fd5860280 DEVELOPERS: remove myself as maintainer of package/{intel-gmmlib, intel-mediadriver, intel-mediasdk}
Signed-off-by: Louis-Paul CORDIER <lpdev@cordier.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-12-03 21:12:30 +01:00
Neal Frager
e02e59d124 board/zynqmp/kria/readme.txt: add usb start
When halting the boot process in u-boot, the 'usb start' command does not
automatically run.  Since the SD card is connected over a USB to SD card
bridge on the kd240 and kr260 boards, the readme.txt instructions should
document that the 'usb start' command needs to be manually enterred when
following the reflashing instructions.  Otherwise, the command to read the
boot.bin and u-boot.itb files from the SD card will fail.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-12-03 21:08:54 +01:00
e67568ceda package/bats-core: bump to version 1.11.1
Changelog: https://github.com/bats-core/bats-core/releases/tag/v1.11.1

Signed-off-by: Brandon Maier <brandon.maier@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-03 13:44:40 +01:00
Wolfram Sang
58ff0cb5c4 package/lrzsz: fix FTBFS by upgrading and applying Debian fix
This failure appeared when trying to build lrzsz:

lsyslog.c:73:5: error: implicit declaration of function ‘vasprintf’; did you mean ‘vsprintf’? [-Wimplicit-function-declaration]

To fix the problem, let's follow Debian. Switch to 0.12.21rc (which is
already out there 25 years!) and import their patch adding includes.

Signed-off-by: Wolfram Sang <wsa+renesas@sang-engineering.com>
[Peter: add Upstream tag to patch]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-01 21:42:09 +01:00
Julien Olivain
47c5ac28e1 package/frr: security bump version to 9.1.2
For release note, see:
https://frrouting.org/release/9.1.2/

Fixes:
https://nvd.nist.gov/vuln/detail/CVE-2024-44070

Signed-off-by: Julien Olivain <ju.o@free.fr>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-01 20:16:42 +01:00
Julien Olivain
07a444d088 support/testing: improve mosquitto test reliability
The mosquitto runtime test can randomly fail on slow
runners, see [1].

This commit improves this test in the following ways:

- the mosquitto_sub subscriber process is now started in a subshell
to suppress the job control messages (to prevent any spurious
messages when the job stops),

- the standard error is redirected to /dev/null, to prevent the
printing of any messages,

- the mosquitto_pub publisher process is started later, by increasing
the sleep time,

- finally, a new sleep time is introduced between the mosquitto_pub
publisher process and the check of the mosquitto_sub subscriber, to
make sure it will have time to write its output and exit.

Fixes: [1]

[1] https://gitlab.com/buildroot.org/buildroot/-/jobs/8453386454

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-28 21:14:55 +01:00
Maxim Kochetkov
20c2b2f76c package/postgresql: bump version to 16.6
Release notes: https://www.postgresql.org/docs/release/16.6/

Note: this minor version bump fixes a bug introduced in postgresql
security bump to 16.5 fixing CVE-2024-10978.

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
[Julien: add note in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-28 19:44:58 +01:00
Julien Olivain
ed590a22e2 package/doxygen: fix _SITE download URL
Doxygen source archive download fails with a HTTP 404 Not Found
error.

The doxygen download page [1] mention that older versions can be
downloaded on SourceForge at [2].

This commit fixes the issue by changing _SITE to this new URL.

Fixes:
https://autobuild.buildroot.org/results/253450bf374ce858fe12712059c435fc773d52f8

[1] https://www.doxygen.nl/download.html
[2] https://sourceforge.net/projects/doxygen/files/

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-24 19:41:43 +01:00
Bernd Kuhls
5d49bc51e0 {linux, linux-headers}: bump 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-24 19:36:53 +01:00
Julien Olivain
1ec30e6f11 Config.in: fix _FORTIFY_SOURCE help string typos
The Config.in help string for BR2_FORTIFY_SOURCE_{2,3} mention
"_FORTIFY_SOURCES" (plural, with an extra "S"). The correct macro name
is "_FORTIFY_SOURCE" (without the "S"). See [1].

This commit fixes those typos.

[1] https://www.gnu.org/software/libc/manual/html_node/Source-Fortification.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-24 19:36:38 +01:00
Peter Korsgaard
39a5490072 package/quagga: fetch from sources.buildroot.net
Fixes https://autobuild.buildroot.org/results/54a/54a165827f536be47cd45c98da3937a1e94a7c65/

Upstream is no longer accessible, so use s.b.n instead.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-24 15:50:32 +01:00
Peter Korsgaard
b617eb3281 docs/website/news.html: refer to gitlab for buildroot-test repo
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 11:40:14 +01:00
Peter Korsgaard
366d403bed docs/website/news.html: use gitlab for all CHANGES links
We migrated to Gitlab a while ago, so update the CHANGES links to point to
that rather than git.buildroot.net.

Automated with:

sed -i 's|http://git.buildroot.net/buildroot/plain/CHANGES?id=\([^"]*\)|https://gitlab.com/buildroot.org/buildroot/-/blob/\1/CHANGES|g' \
 docs/website/news.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 11:36:10 +01:00
Peter Korsgaard
81d111dbd4 Update for 2024.11-rc2
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024.11-rc2
2024-11-23 11:00:53 +01:00
Julien Olivain
fa20df5d75 package/util-linux-libs: allowing building even on non-Y2038 compliant systems
Since the bump of util-linux to version 2.40.2 in Buildroot commit
f14929c657 ("package/util-linux: update
to 2.40.2"), the build will fail on systems that are not Y2038,
such as uClibc configurations.

In order to preserve the previous behavior, pass --disable-year2038.
See the gnulib documentation for details [1]. Contrary to what the
option name might suggest, it doesn't really disable Y2038 support,
but only the check that the system is Y2038 compliant. So even with
--disable-year2038, if the system is Y2038 compliant (uses a 64-bit
arch, uses the musl C library, or uses the glibc C library with
BR2_TIME_BITS_64=y), util-linux tools will be Y2038 compliant.

"--disable-year2038" was already added to util-linux in commit
11ae90b00 "package/util-linux: allowing building even on non-Y2038
compliant systems".

Fixes:
https://autobuild.buildroot.org/results/630fc287deb1cf5a684f274058b918a5d7aef989

[1] https://www.gnu.org/software/gnulib/manual/html_node/Avoiding-the-year-2038-problem.html

Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 10:51:49 +01:00
Romain Naour
4b271906a7 package/python-sip: disable parallel install
{host-}python-sip may fail to install on fast machine, so disable
parallel install.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8350440972 (TestPythonPyQt5)
http://autobuild.buildroot.org/results/8f2/8f24656f3a66d21f2d3c6d6b1adc6bb5f1c0c801 (2024-10-15)
http://autobuild.buildroot.org/results/6e6/6e6bbee714b10e0f04c9d17b7e0ecce057d21d2a (2022-07-15)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 10:46:59 +01:00
Fiona Klute (WIWA)
dbb019db73 package/bmap-tools: select host-python3 if building host package
Host bmap-tools runs using host-python3, but did not select it,
leading to the confusing situation that BR2_PACKAGE_HOST_PYTHON3=n
even though it was built and working.

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 10:44:03 +01:00
Bernd Kuhls
d9bea4bb89 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 10:42:18 +01:00
Giulio Benetti
175dbdf3fc package/libblockdev: bump to version 3.2.1
For change log, see:
https://github.com/storaged-project/libblockdev/blob/3.2.1/NEWS.rst

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-21 23:42:47 +01:00
Bernd Kuhls
96d73b3091 package/php: security bump version to 8.3.14
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/444

Fixes CVE-2024-8929, CVE-2024-8932, CVE-2024-11233, CVE-2024-11234 &
CVE-2024-11236.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-21 21:59:27 +01:00
Bernd Kuhls
257c1de7e9 package/postgresql: security bump version to 16.5
Release notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/

Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-20 22:31:35 +01:00
Yann E. MORIN
575d971820 package/go: ensure there is a host-go provider, take 2
Commit 7b2a164b74 (package/go/go-bin: new host-go provider) broke the
case for prompt-less, host-only go packages, as the main host-go symbol
would not be selected.

This very same use-case was initially broken when the first go-src
provider was introduced with fa2536ec94 (package/go: make host package
a virtual package), and subsequently fixed in 99a5d51c6e (package/go:
ensure there is a host-go provider), so 7b2a164b74 is causing a
regression of a fixed regression.

Fix that the very same way it was originally fixed.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:13:40 +01:00
Julien Olivain
f3b82925a9 package/skopeo: select BR2_PACKAGE_HOST_GO
host-skopeo fail to build, using the commands:

    echo BR2_PACKAGE_HOST_SKOPEO=y >.config
    make olddefconfig
    make host-skopeo

This commit fixes the issue by selecting BR2_PACKAGE_HOST_GO
in the Config.in file.

Fixes:

    make: *** No rule to make target 'host-', needed by '/buildroot/output/build/host-go-1.23.2/.stamp_configured'.  Stop.

Reviewed-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:05:18 +01:00
Yu Chien Peter Lin
a359514630 DEVELOPERS: update maintainer of Andes platform
I will lose access to my email next week, so hand
it over to Leo Yu-Chi Liang.

Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
Reviewed-by: Leo Yu-Chi Liang <ycliang@andestech.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:00:32 +01:00
Thomas Petazzoni
353a37b04d DEVELOPERS: drop Asaf Kahlon
Asaf has privately requested to be removed from the DEVELOPERS file as
he will no longer be contributing to Buildroot in the forseeable
future.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-19 11:52:00 +01:00
Giulio Benetti
7e2515a5ad package/libnvme: bump to version 1.11.1
For release note, see:
https://github.com/linux-nvme/libnvme/releases/tag/v1.11.1

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-18 23:42:41 +01:00
Bernd Kuhls
54cfff355c package/libpng: fix arm build with NEON
Fixes:
http://autobuild.buildroot.net/results/52c/52c974e70f922e9d7efea4c538e4438a22faa846/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-authored-by: Peter Korsgaard <peter@korsgaard.com>
[https://lists.buildroot.org/pipermail/buildroot/2024-November/767661.html]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-16 10:48:18 +01:00
Julien Olivain
0416ae0ed5 package/libkrb5: security bump to version 1.21.3
For the change log, see [1].

The license hash file changed, due to the year update.  See [2].  This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371

[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] fec2c44ee9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-16 10:47:41 +01:00
Bernd Kuhls
649b31fc6d package/intel-microcode: security bump version to 20241112
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html

CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-15 23:25:53 +01:00
Julien Olivain
d571951c67 package/tiff: security bump to version 4.7.0
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html

This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.

This commit also adds a comment in the hash file about pgp signature
veritication.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 19:52:43 +01:00
Bernd Kuhls
ed4348d1c5 package/libcurl: security bump version to 8.11.0
Changelog: https://curl.se/ch/8.11.0.html

Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 19:52:31 +01:00