Commit Graph

72661 Commits

Author SHA1 Message Date
Gero Schwäricke
ffe46c6646 board/ti/am64x-sk: update custom hashes
Commit
7efd75867c ("configs/ti_am64x_sk_defconfig:
update U-Boot to v2024.04") updated U-Boot and the ti-k3-r5-loader to
2024.04, but did not update the hash files in board/ti/am62x-sk/. It
ended up working for now, because the official versions of boot/uboot
and boot/ti-k3-r5-loader/ also use 2024.04 and therefore have this
hash, but it would have started failing as soon as boot/uboot and/or
boot/ti-k3-r5-loader official version were updated.

Signed-off-by: Gero Schwäricke <gero.schwaericke@grandcentrix.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5654eca137)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 09:21:38 +02:00
Gero Schwäricke
dbcdebb679 board/ti/am62x-sk: update custom hashes
Commit
cc2910a7db ("configs/ti_am62x_sk_defconfig:
update U-Boot to v2024.04") updated U-Boot and the ti-k3-r5-loader to
2024.04, but did not update the hash files in board/ti/am62x-sk/. It
ended up working for now, because the official versions of boot/uboot
and boot/ti-k3-r5-loader/ also use 2024.04 and therefore have this
hash, but it would have started failing as soon as boot/uboot and/or
boot/ti-k3-r5-loader official version were updated.

Signed-off-by: Gero Schwäricke <gero.schwaericke@grandcentrix.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3da51c9180)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 09:16:47 +02:00
Lance Fredrickson
f42ca9644a boot/syslinux: fix building with GCC 14.x
Add missing stdio.h include. Without this includes, the build fails
with the following error under GCC 14.x:

../../../com32/lib/syslinux/debug.c: In function ‘syslinux_debug’:
../../../com32/lib/syslinux/debug.c:91:5: error: implicit declaration of function ‘printf’ [-Wimplicit-function-declaration]
   91 |     printf("Dynamic debug unavailable\n");

Signed-off-by: Lance Fredrickson <lancethepants@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3b9d62dac5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 09:07:17 +02:00
Julien Olivain
4baf992d83 package/octave: add optional openssl support
GNU Octave supports the --with-openssl configure option since v4.0.0.

For reference, commit 40ea68b4b2 "package/octave: new package"
introduced the package at v7.1.0.

This commits adds this optional support.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0e2c2810dc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 09:04:19 +02:00
Bernd Kuhls
3d1d01f928 package/exim: security bump version to 4.98
Release notes:
https://lists.exim.org/lurker/message/20240710.155945.8823670d.en.html

Fixes CVE-2024-39929: https://bugs.exim.org/show_bug.cgi?id=3099#c4

Removed patch 0004 due to removal of codesourcery arm/aarch64 toolchains
with commit 53a8c5150e.

Patch 0005 (renamed to 0004) is still necessary with gcc-13.x,
reformatted Upstream trailer.

Removed patches 0006, 0007 & 0008 which are included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1a409fafb0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:51:37 +02:00
Bernd Kuhls
169284cd1f package/exim: update patches to be applied with fuzz 0
Commit 8f88a644ed "support/scripts/apply-patches.sh: set the maximum
fuzz factor to 0" reduced the fuzz factor.

Due to this change, exim fails to build with output:

    Applying 0004-exim_lock-fix-lstat-related-build-errors.patch using patch:
    patching file src/exim_lock.c
    Hunk #1 FAILED at 13.
    Hunk #2 succeeded at 27 (offset 1 line).
    1 out of 2 hunks FAILED -- saving rejects to file src/exim_lock.c.rej

This commit rebases the package patches on the current package version
when needed.

Fixes:
http://autobuild.buildroot.net/results/ff27d5ebd7f24ac8cb236b83c67c2c75255e51c6/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Reviewed-by: Yann E. MORIN <yann.morin@orange.com>
Tested-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 20973140c1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:51:30 +02:00
Thomas Petazzoni
f907f52c0c DEVELOPERS: drop Mathieu Audat
Mathieu privately informed me that he no longer has access to the
TS4900 board, he is therefore unable to maintain this board moving
forward. Let's drop his entry from the DEVELOPERS file.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 39d23ce823)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:46:57 +02:00
Adrian Perez de Castro
9c29e72aef package/wpewebkit: add backported patch to fix NEON build
Import a patch that has been backported by upstream to the 2.44 release
branch that fixes the build when the target is an ARM processor that
supports NEON instructions.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8502ac71aa)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:42:08 +02:00
Bartosz Bilas
7e2f295681 package/rauc-hawkbit-updater: add systemd optional dependency
Take the systemd into account if present.

Signed-off-by: Bartosz Bilas <b.bilas@grinn-global.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4aa7a4ad8a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:33:46 +02:00
Christian Stewart
b16821b9e2 package/containerd: bump version to v1.7.18
https://github.com/containerd/containerd/releases/tag/v1.7.18

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4e01942d83)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 09:23:24 +02:00
Peter Korsgaard
144a817f4f package/openssh: add CVE ignore for CVE-2024-6387
Commit e7f124e9b6 (package/openssh: disable async-signal-unsafe code in
sshsigdie()) add a patch for CVE-2024-6387 but forgot to add an _IGNORE_CVES
entry.  Fix that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-20 10:28:11 +02:00
Peter Korsgaard
2555f47788 Update for 2024.05.1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024.05.1
2024-07-13 13:48:13 +02:00
Julien Olivain
38b5b42086 package/xfsprogs: update Kconfig package homepage URL
The old xfs homepage URL [1] seems defunct at the time of this commit.
The http URL redirects to https, the certificate expired on
2024-01-26. If the certificate expiration date is ignored, the site
shows a "502 Bad Gateway" error.

The package README [2] advertise the homepage as [3].

This commit updates the URL to the new one.

[1] http://xfs.org
[2] https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/README?h=v6.4.0#n12
[3] https://xfs.wiki.kernel.org

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit daa5d775d7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-13 13:12:02 +02:00
Fiona Klute
13d564b62e package/raspberrypi-usbboot: bump version to 20221215-105525
The "msd" (mass storage device) firmware files in 2021.07.01 don't
work with some newer CM4 based devices, the one I had issues with is a
RevPi Connect 4. Updating fixes the issue. Mass storage device mode is
required to flash the eMMC of CM4 devices.

Signed-off-by: Fiona Klute <fiona.klute+wiwa@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fbd9a3f311)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-13 12:59:38 +02:00
Aleksandr Makarov
70cd92cae1 board/pine64/rockpro64/linux.fragment: integrate stmmac driver
Currently, the stmmac driver is configured as a module in the defconfig, which
means that the network functionality is not available until the driver module
is manually inserted.

Use extra config fragment to integrate it directly into the kernel, ensuring that network
functionality is available immediately upon boot.

Signed-off-by: Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 54c82a2375)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 23:26:12 +02:00
Bernd Kuhls
26226496c0 package/ghostscript: security bump version to 10.03.1
Fixes CVE-2024-33869, CVE-2023-52722, CVE-2024-33870, CVE-2024-33871
and CVE-2024-29510.

Release notes:
https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/tag/gs10031

Remove patch which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 515e579567)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:43:59 +02:00
Bernd Kuhls
1697eca986 package/openvpn: security bump version to 2.6.11
Release notes:
https://sourceforge.net/p/openvpn/mailman/message/58786888/

Changelog:
https://github.com/OpenVPN/openvpn/blob/release/2.6/ChangeLog
https://github.com/OpenVPN/openvpn/blob/release/2.6/Changes.rst

Fixes CVE-2024-4877, CVE-2024-5594 & CVE-2024-28882.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b55b1e893e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:42:31 +02:00
Waldemar Brodkorb
e77fa97f59 configs/qemu_sh4*: switch to initramfs
Qemu 9.0.0/9.0.1 has introduced a Bug in sh4/sh4eb emulation so
that the system doesn't boot anymore.
The issue is already reported by Guenter Roeck:
https://lists.nongnu.org/archive/html/qemu-devel/2024-05/msg00606.html

Switch to initramfs for sh4/sh4eb emulation.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 44a6b7866c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:34:36 +02:00
Bernd Kuhls
a11afff771 package/znc: security bump version to 1.9.1
Fixes CVE-2024-39844.

Changelog: https://wiki.znc.in/ChangeLog/1.9.1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 01becd31ca)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:31:22 +02:00
Bernd Kuhls
2598a0cffc {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 9}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2389fb5bbb)
[Peter: drop 6.9.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:28:03 +02:00
Peter Korsgaard
7b3d3e52ac Revert "package/libopenssl: no-engine"
This reverts commit c366ecb95e.

While the change is correct, it causes quite some fallout from packages
using the ENGINE_* API functions without selecting
BR2_PACKAGE_LIBOPENSSL_ENGINES, so drop it from the stable branch.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 12:21:50 +02:00
Bernd Kuhls
077861ec24 package/apache: security bump version to 2.4.61
Fixes CVE-2024-39884.

Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.61

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 158c2a0004)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 12:12:04 +02:00
Bernd Kuhls
9a71dd347a package/php: bump version to 8.3.9
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/432

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 677c3f2995)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 12:11:33 +02:00
Fiona Klute (WIWA)
0660fb5ed8 package/network-manager: allow building with musl
NetworkManager officially supports building with musl since version
1.30, so the restriction to glibc toolchain is no longer necessary.

[1] 4f7c04eaf9/NEWS (L615)

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8df68d2bb4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 10:20:21 +02:00
Julien Olivain
d19fb80b36 configs/visionfive2: fix build by adding kernel header version
commit d9e6d2d081 "configs/visionfive2: update kernel to upstream
6.8.2" removed the config directive:

    BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_5_15=y

but forgot to add:

    BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_8=y

It was most likely generated with a "make savedefconfig", while Linux
kernel v6.8 was the default at that time. After commit aa70c331a2
"linux: bump latest version to 6.9", the defconfig failed to build
with error:

    Incorrect selection of kernel headers: expected 6.9.x, got 6.8.x

This commit fixes the defconfig by adding back the kernel custom header
version.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/7271150175

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1da5466bab)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 10:16:55 +02:00
Yann E. MORIN
df75cdfe4c gitlab: add default issue template
This introduces the default issue template, to help users provide issues
that are meaningful, and that will help reproduce the issue.

If needed, we can add more templates in the future.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
[Arnout:
 - add link to mailing list;
 - rephrase "pristine Buildroot";
 - add a checklist item for "I'm using latest commit";
 - add a checklist item for "make clean; make";
 - add formal items for Buildroot commit sha1 and distro.]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 32aacc4737)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 00:01:57 +02:00
Yann E. MORIN
94daade68d package/daq: workaround for upstream changing the archive
Upstream has changed the archive for the 2.0.7 release since we bumped
in c1f820bd88 (package/daq: bump version to 2.0.7). Comparing the old
archive as it is on s.b.o. with the one currently available on upstream,
gives a few deltas, mostly;
  - (C) years changed in comments
  - version string changed from 2.0.6 to 2.0.7
  - changes (that look legit) to autostuff
  - a file dropped (Visual Studio related)

Of course, that means the hashes changed, and no longer match what we
have.

Downloading the file manually and letting wget set the timestamp on it,
reveals the archive is dated 2022-06-08T13:51:59. So, for more than two
years now, we've been relying on the archive we cached on s.b.o.

So, we can't just change the hashes to the new ones, nor can we replace
the archive on s.b.o.

Instead, we use the same trick as was used in c617ebbc97
(package/python-*: fix hashes for cargo-vendored python packages): we
use the actual, real URL with a query parameter as the _SITE, and we set
_SOURCE to a different name so as not to conflict with the previous
archive.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 9e00cceb60)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-10 23:59:44 +02:00
Dario Binacchi
8ac7ef5684 package/libmad: drop GCC's "-fforce-mem" option
The commit fixes the following compilation error:

    i686-buildroot-linux-gnu-gcc.br_real: error: unrecognized command-line option ‘-fforce-mem’

From GCC 4.3 release notes [1]:

    The -fforce-mem option has been removed because it has had no effect
    in the last few GCC releases.

[1] https://gcc.gnu.org/gcc-4.3/changes.html
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 89ba9c5a0b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 19:03:15 +02:00
Dario Binacchi
167680d773 package/libmad: update the patches to be applied with fuzz 0
Commit 8f88a644ed ("support/scripts/apply-patches.sh: set the maximum
fuzz factor to 0") reduced the fuzz factor.

Due to this change, libmad fails to build with output:

    Applying mips-gcc4.4.diff using series:
    patching file fixed.h
    Hunk #1 FAILED at 297.
    1 out of 1 hunk FAILED -- saving rejects to file fixed.h.rej

The package applied the patches in two steps, first the local ones and
then the official ones downloaded from the repository. The commit fixes
the issue by reversing the order of patch application steps.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit b21184a877)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 19:03:05 +02:00
Bernd Kuhls
d4c1151632 package/apache: security bump version to 2.4.60
Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.60

Fixes CVE-2024-36387, CVE-2024-38472 (Windows-only), CVE-2024-38473,
CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477 &
CVE-2024-39573.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 33de60dbff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 18:55:51 +02:00
Joachim Wiberg
e7f124e9b6 package/openssh: disable async-signal-unsafe code in sshsigdie()
Import Debian patch[1] for CVE-2024-6387[2].  This disables the unsafe
syslog code path triggered by SIGALARM.

[1] https://salsa.debian.org/ssh-team/openssh/-/blob/master/debian/patches/sshsigdie-async-signal-unsafe.patch
[2] https://marc.info/?l=oss-security&m=171982335024767

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
[Peter: rename, add Upstream tag]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 18:49:12 +02:00
Bernd Kuhls
30252c3e0a package/dav1d: bump version to 1.4.3
Release notes:
https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit a3233807d2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 22:29:16 +02:00
Bernd Kuhls
89a2fd6385 package/xmrig: bump version to 6.21.3
Changelog: https://github.com/xmrig/xmrig/blob/master/CHANGELOG.md

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit cd83b50bdc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 22:26:54 +02:00
Bernd Kuhls
3c88f5d5ed package/vlc: security bump to version 3.0.21
Fixes http://www.videolan.org/security/sb-vlc3021.html

Release notes:
https://code.videolan.org/videolan/vlc/-/blob/3.0.21/NEWS

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit b752d0e4cc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 22:24:22 +02:00
Thomas Devoogdt
eba94bc4d2 package/fluent-bit: bump to v3.0.4
Release Notes:
- https://fluentbit.io/announcements/v3.0.4

Fixes:
- CVE-2024-4323 (https://www.tenable.com/security/research/tra-2024-17)

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 8beda6f221)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 12:48:30 +02:00
Dario Binacchi
c366ecb95e package/libopenssl: no-engine
Even though the "no-engine" option effectively disables the compilation
of the engine, it still creates the installation directory, which ends up
being empty. For this reason, the patch does not remove the hook for
removing the directory if the BR2_PACKAGE_LIBOPENSSL_ENGINES option is
not enabled.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 623d3bbe43)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:52:01 +02:00
Dario Binacchi
34b358bf2c package/libopenssl: use `no-apps' configuration option
With version 3.2.0 of OpenSSL, the "no-apps" configuration option was
added, which does not build apps, e.g. the openssl program. This is
handy for minimization. This option also disables tests.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e0bdc5ddb8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:51:04 +02:00
Dario Binacchi
0eccc6d090 package/libopenssl: use consistent logic
The patch expresses the same condition in positive logic, consistent
with what has been coded in other parts of the module and generally
in Buildroot.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c2761b5266)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:48:58 +02:00
Dario Binacchi
124b8f724e package/libopenssl: replace engines-1.1 to engines-3
The bump to version 3.0.9 in commit 3c66f65a6a (package/libopenssl:
bump version to 3.0.9), and all subsequent updates, forgot to change
the directory name, which remained that of version 1.1. The patch
fixes the directory name to be consistent with the version.

In the case the library was not built with engine support, this resulted
in the presence of files in the root file system that should have been
removed.

Fixes: 3c66f65a6a
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7f9291bfe4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:42:18 +02:00
Dario Binacchi
14e82c1f17 package/libopenssl: use $(RM) instead of rm
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b39286acfc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:41:58 +02:00
Brandon Maier
e1c896b10f support/scripts/apply-patches: fallback $TAR to tar
Commit f77d698f83 changed apply-patches to
use $TAR instead of `tar`, but did not define a fallback if $TAR is not
defined. This results in an error when calling apply-patches.sh from
outside Buildroot's Makefile. Our team uses this script to setup local
checkouts of Buildroot package's with patches for development.

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 118c824b56)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:39:59 +02:00
Titouan Christophe
99e58bdad0 package/redis: bump to v7.2.5
From the release notes:
================================================================================
Redis 7.2.5    Released Thu 16 May 2024 12:00:00 IST
================================================================================

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent.

Bug fixes
=========

* A single shard cluster leaves failed replicas in CLUSTER SLOTS instead of removing them (#12824)
* Crash in LSET command when replacing small items and exceeding 4GB (#12955)
* Blocking commands timeout is reset due to re-processing command (#13004)
* Conversion of numbers in Lua args to redis args can fail. Bug introduced in 7.2.0 (#13115)

Bug fixes in CLI tools
======================

* redis-cli: --count (for --scan, --bigkeys, etc) was ignored unless --pattern was also used (#13092)
* redis-check-aof: incorrectly considering data in manifest format as MP-AOF (#12958)

Signed-off-by: Titouan Christophe <titouanchristophe@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 61a7edc0c8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:33:42 +02:00
Bernd Kuhls
9d22642eb1 package/tor: bump version to 0.4.8.12
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/stable-release-0-4-8-12/13060

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b0fe6d1be9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:27:39 +02:00
Bernd Kuhls
2ebca64aab package/{mesa3d, mesa3d-headers}: bump version to 24.0.9
Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2024-May/000761.html
https://lists.freedesktop.org/archives/mesa-announce/2024-June/000764.html

Removed two patches which are included in this version 24.0.8.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c8057515a4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:26:37 +02:00
Dario Binacchi
07ead503de package/openssh: fix build failure with gcc 11.x
The patch fix the following build failure:

output/host/bin/arm-buildroot-linux-uclibcgnueabihf-gcc -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
-D_FILE_OFFSET_BITS=64  -Os -g0  -pipe -Wno-error=format-truncation -Wall -Wextra -Wpointer-arith
-Wuninitialized -Wsign-compare -Wformat-security -Wsizeof-pointer-memaccess -Wno-pointer-sign
-Wno-unused-parameter -Wno-unused-result -Wimplicit-fallthrough -Wmisleading-indentation
-fno-strict-aliasing -D_FORTIFY_SOURCE=2 -ftrapv -fzero-call-used-regs=used -fno-builtin-memset
-fstack-protector-strong   -fPIC -I. -I.. -I. -I./.. -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
-D_FILE_OFFSET_BITS=64 -D_XOPEN_SOURCE=600 -D_BSD_SOURCE -D_DEFAULT_SOURCE -D_GNU_SOURCE
-DHAVE_CONFIG_H -c port-aix.c
sha2.c: In function ‘SHA256Init’:
sha2.c:360:1: sorry, unimplemented: ‘-fzero-call-used-regs’ not supported on this target
  360 | }
      | ^
make[3]: *** [Makefile:106: sha2.o] Error 1
make[3]: *** Waiting for unfinished jobs....
make[2]: *** [Makefile:199: openbsd-compat/libopenbsd-compat.a] Error 2

This commit applies an upstream patch that improves the detection of
-fzero-call-used-regs=used.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4aff617b95)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:19:09 +02:00
Bernd Kuhls
327a5c349d package/php: security bump version to 8.3.8
Fixes CVE-2024-4577, CVE-2024-5458, CVE-2024-5585

Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/429

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit ecf060a2ff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-06 22:51:55 +02:00
Julien Olivain
db309fb4fa support/testing: add ntp runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit c986928aff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-06 22:39:15 +02:00
Francois Perrad
94808d630d package/ntp: bump to version 4.2.8p18
diff COPYRIGHT:
    -* Copyright (c) Network Time Foundation 2011-2023                     *
    +* Copyright (c) Network Time Foundation 2011-2024                     *

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 49bd6bb638)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-06 22:39:05 +02:00
Dario Binacchi
5bdb98d537 package/uuu: bump to version 1.5.182
This is a hot fix for version 1.5.181.

Release notes:
https://github.com/nxp-imx/mfgtools/releases/tag/uuu_1.5.182

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit ecb7a9fd66)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-06 22:35:42 +02:00
Peter Korsgaard
b54a3e5a3d package/glibc: security bump to 2.39-74 for post-2.39 security fixes
Fixes the following security issues:

  GLIBC-SA-2024-0004:
    ISO-2022-CN-EXT: fix out-of-bound writes when writing escape
    sequence (CVE-2024-2961)

  GLIBC-SA-2024-0005:
    nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599)

  GLIBC-SA-2024-0006:
    nscd: Null pointer crash after notfound response (CVE-2024-33600)

  GLIBC-SA-2024-0007:
    nscd: netgroup cache may terminate daemon on memory allocation
    failure (CVE-2024-33601)

  GLIBC-SA-2024-0008:
    nscd: netgroup cache assumes NSS callback uses in-buffer strings
    (CVE-2024-33602)

In addition, the following bugs are fixed:

  [19622] network: Support aliasing with struct sockaddr
  [30701] time: getutxent misbehaves on 32-bit x86 when _TIME_BITS=64
  [30994] REP MOVSB performance suffers from page aliasing on Zen 4
  [31339] libc: arm32 loader crash after cleanup in 2.36
  [31325] mips: clone3 is wrong for o32
  [31335] math: Compile glibc with -march=x86-64-v3 should disable FMA4
    multi-arch version
  [31402] libc: clone (NULL, NULL, ...) clobbers %r7 register on
    s390{,x}
  [31479] libc: Missing #include <sys/rseq.h> in sched_getcpu.c may
    result in a loss of rseq acceleration
  [31316] build: Fails test misc/tst-dirname "Didn't expect signal from
    child: got `Illegal instruction'" on non SSE CPUs
  [31371] x86-64: APX and Tile registers aren't preserved in ld.so
    trampoline
  [31372] dynamic-link: _dl_tlsdesc_dynamic doesn't preserve all caller-
    saved registers
  [31429] build: Glibc failed to build with -march=x86-64-v3
  [31501] dynamic-link: _dl_tlsdesc_dynamic_xsavec may clobber %rbx
  [31640] dynamic-link: POWER10 ld.so crashes in
    elf_machine_load_address with GCC 14
  [31676] Configuring with CC="gcc -march=x86-64-v3"
    --with-rtld-early-cflags=-march=x86-64 results in linker failure
  [31677] nscd: nscd: netgroup cache: invalid memcpy under low
    memory/storage conditions
  [31678] nscd: nscd: Null pointer dereferences after failed netgroup
    cache insertion
  [31679] nscd: nscd: netgroup cache may terminate daemon on memory
    allocation failure
  [31680] nscd: nscd: netgroup cache assumes NSS callback uses in-buffer
    strings
  [31686] dynamic-link: Stack-based buffer overflow in
    parse_tunables_string
  [31719] dynamic-link: --enable-hardcoded-path-in-tests doesn't work
    with -Wl,--enable-new-dtags
  [31782] Test build failure with recent GCC trunk
    (x86/tst-cpu-features-supports.c:69:3: error: parameter to builtin
    not valid: avx5124fmaps)
  [31798] pidfd_getpid.c is miscompiled by GCC 6.4
  [31867] build: "CPU ISA level is lower than required" on SSE2-free
    CPUs
  [31883] build: ISA level support configure check relies on bashism /
    is otherwise broken for arithmetic

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7bfea9372f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-05 21:27:56 +02:00