Commit Graph

75408 Commits

Author SHA1 Message Date
Giulio Benetti
175dbdf3fc package/libblockdev: bump to version 3.2.1
For change log, see:
https://github.com/storaged-project/libblockdev/blob/3.2.1/NEWS.rst

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-21 23:42:47 +01:00
Bernd Kuhls
96d73b3091 package/php: security bump version to 8.3.14
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/444

Fixes CVE-2024-8929, CVE-2024-8932, CVE-2024-11233, CVE-2024-11234 &
CVE-2024-11236.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-21 21:59:27 +01:00
Bernd Kuhls
257c1de7e9 package/postgresql: security bump version to 16.5
Release notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/

Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-20 22:31:35 +01:00
Yann E. MORIN
575d971820 package/go: ensure there is a host-go provider, take 2
Commit 7b2a164b74 (package/go/go-bin: new host-go provider) broke the
case for prompt-less, host-only go packages, as the main host-go symbol
would not be selected.

This very same use-case was initially broken when the first go-src
provider was introduced with fa2536ec94 (package/go: make host package
a virtual package), and subsequently fixed in 99a5d51c6e (package/go:
ensure there is a host-go provider), so 7b2a164b74 is causing a
regression of a fixed regression.

Fix that the very same way it was originally fixed.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:13:40 +01:00
Julien Olivain
f3b82925a9 package/skopeo: select BR2_PACKAGE_HOST_GO
host-skopeo fail to build, using the commands:

    echo BR2_PACKAGE_HOST_SKOPEO=y >.config
    make olddefconfig
    make host-skopeo

This commit fixes the issue by selecting BR2_PACKAGE_HOST_GO
in the Config.in file.

Fixes:

    make: *** No rule to make target 'host-', needed by '/buildroot/output/build/host-go-1.23.2/.stamp_configured'.  Stop.

Reviewed-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:05:18 +01:00
Yu Chien Peter Lin
a359514630 DEVELOPERS: update maintainer of Andes platform
I will lose access to my email next week, so hand
it over to Leo Yu-Chi Liang.

Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
Reviewed-by: Leo Yu-Chi Liang <ycliang@andestech.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:00:32 +01:00
Thomas Petazzoni
353a37b04d DEVELOPERS: drop Asaf Kahlon
Asaf has privately requested to be removed from the DEVELOPERS file as
he will no longer be contributing to Buildroot in the forseeable
future.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-19 11:52:00 +01:00
Giulio Benetti
7e2515a5ad package/libnvme: bump to version 1.11.1
For release note, see:
https://github.com/linux-nvme/libnvme/releases/tag/v1.11.1

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-18 23:42:41 +01:00
Bernd Kuhls
54cfff355c package/libpng: fix arm build with NEON
Fixes:
http://autobuild.buildroot.net/results/52c/52c974e70f922e9d7efea4c538e4438a22faa846/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-authored-by: Peter Korsgaard <peter@korsgaard.com>
[https://lists.buildroot.org/pipermail/buildroot/2024-November/767661.html]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-16 10:48:18 +01:00
Julien Olivain
0416ae0ed5 package/libkrb5: security bump to version 1.21.3
For the change log, see [1].

The license hash file changed, due to the year update.  See [2].  This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371

[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] fec2c44ee9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-16 10:47:41 +01:00
Bernd Kuhls
649b31fc6d package/intel-microcode: security bump version to 20241112
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html

CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-15 23:25:53 +01:00
Julien Olivain
d571951c67 package/tiff: security bump to version 4.7.0
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html

This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.

This commit also adds a comment in the hash file about pgp signature
veritication.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 19:52:43 +01:00
Bernd Kuhls
ed4348d1c5 package/libcurl: security bump version to 8.11.0
Changelog: https://curl.se/ch/8.11.0.html

Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 19:52:31 +01:00
Peter Korsgaard
b4ae65e36e docs/website: Update for 2024.02.8
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 17:39:32 +01:00
Peter Korsgaard
945f3f6c45 Update for 2024.02.8
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e843fa764b)
[Peter: drop Makefile/Vagrantfile changes]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 17:37:41 +01:00
Peter Korsgaard
a7ed78badc docs/website: Update for 2024.08.2
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 14:50:12 +01:00
Peter Korsgaard
5eeab05e48 Update for 2024.08.2
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a91b9c7400)
[Peter: drop Makefile change]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 14:47:41 +01:00
Peter Korsgaard
46fa2fcb7a Update for 2024.11-rc1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:59:29 +01:00
Michel Alex
e53014bcc8 package/libzenoh-pico: bump to version 1.0.2
https://github.com/eclipse-zenoh/zenoh-pico/releases/tag/1.0.2

Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:44 +01:00
Michel Alex
ee157845d3 package/libzenoh-c: bump to version 1.0.2
https://github.com/eclipse-zenoh/zenoh-c/releases/tag/1.0.2

Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:44 +01:00
Scott Fan
00f370c0ff package/timescaledb: bump version to 2.17.2
Release notes: https://github.com/timescale/timescaledb/blob/2.17.2/CHANGELOG.md

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:43 +01:00
Nicolas Cavallari
268d5145c8 package/libgit2: bump version to 1.8.4
upstream mistakenly based 1.8.3 on 1.8.1 so it didn't include the
1.8.2 fixes.  1.8.4 includes fixes from 1.8.2 and 1.8.3.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:42 +01:00
Francois Perrad
856a7e96d5 package/expat: security bump to version 2.6.4
fix CVE-2024-50602

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:41 +01:00
Romain Naour
1a9f5eac98 package/xenomai: fix latest version
The last xenomai version bump [1] forgot to update the
BR2_PACKAGE_XENOMAI_LATEST_VERSION option string.

[1] 44fafcc41a

Reported-by: Pierre Ficheux <pierre.ficheux@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2024-11-13 17:26:46 +01:00
James Hilliard
66f66bbdb5 package/python-pillow: set new build options
Explicitly set new imagequant, raqm and zlib build options.

Fixes: baa3db0c34

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-11-12 20:53:16 +01:00
James Hilliard
a97a592a73 package/python-pillow: fix webp DependencyException
As of baa3db0c34 webp mux/demux are no
longer optional for webp support in python-pillow. The
-Cwebpmux=enable/disable option no longer exists.

Fixes:
DependencyException:
The headers or library files could not be found for webp,
which was requested by the option flag --enable-webp

Fixes: baa3db0c34

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-11-12 20:52:48 +01:00
Fiona Klute (WIWA)
012bbb70c2 package/raspberrypi-usbboot: bump version to 20240926-102326
This version adds the -i flag to select the device to boot by serial
number [1], which is important when working with multiple RPi
devices. Otherwise mostly firmware updates, see [2] for all changes.

Also switch to the git download method for reproducible archives.

[1] 481c5e8a77
[2] https://github.com/raspberrypi/usbboot/compare/20221215-105525...20240926-102326

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 22:31:35 +01:00
Scott Fan
36f1195493 configs/cubieboard1: bump Linux to 6.11.6 and U-Boot to 2024.10
Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 22:27:15 +01:00
Bernd Kuhls
323567552b {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:52:28 +01:00
Julien Olivain
9b40127534 package/usbredir: bump version to 0.14.0
For change log, see [1].

This commit also updates the _SITE to the URL published on the
homepage [2]. The main motivation is to use HTTPS.

This commit also adds a comment in the hash file about the pgp
signature verification.

[1] https://gitlab.freedesktop.org/spice/usbredir/-/blob/usbredir-0.14.0/ChangeLog.md
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:41:29 +01:00
Julien Olivain
122a5e2529 package/usbredir: fix package homepage URL
The current homepage URL [1] redirects to its https and ends up to
a HTTP 404 not found error. This commit fixes the issue by replacing
it with the new URL [2].

[1] http://www.spice-space.org/page/UsbRedir
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:41:21 +01:00
Julien Olivain
77fcce23c6 package/findutils: bump version to 4.10.0
For release announce, see:
https://lists.gnu.org/archive/html/info-gnu/2024-07/msg00002.html

This commit also updates the hash file comment, to use the sha256 hash
published in the release announce, to provide the signature URL and the
pgp key id used for the signature verification.

See the gnulib documentation for details [1]. Contrary to what the
option name might suggest, it doesn't really disable Y2038 support,
but only the check that the system is Y2038 compliant. So even with
--disable-year2038, if the system is Y2038 compliant (uses a 64-bit
arch, uses the musl C library, or uses the glibc C library with
BR2_TIME_BITS_64=y), findutils will be Y2038 compliant.

[1] https://www.gnu.org/software/gnulib/manual/html_node/Avoiding-the-year-2038-problem.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:25:26 +01:00
Julien Olivain
5456830db9 package/iperf: bump to version 2.2.1
For release note, see after the file list at:
https://sourceforge.net/projects/iperf2/files/

This commit also adds a package patch to fix the build with musl
libc toolchains.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:25:07 +01:00
Michael Nosthoff
7d358fe180 package/spdlog: bump to version 1.15.0
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:22:55 +01:00
Julien Olivain
799d43ae05 package/blake3: bump version to 1.5.4
For change log since 1.5.1, see: [1] [2] [3].

Also, v1.5.2 added the new license "Apache-2.0 with (LLVM)
exceptions". The initial LICENSE file was split in three
different files (one file per license). See [4] [5].
This commit updates _LICENSE, _LICENSE_FILES and the hash
file accordingly.

[1] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.2
[2] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.3
[3] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.4
[4] bb8761256a
[5] 0b2c630cc5

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:22:49 +01:00
Julien Olivain
6febbd6f1e package/motion: bump version to 4.7.0
For the change log, see:
https://github.com/Motion-Project/motion/releases/tag/release-4.7.0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:22:29 +01:00
Michael Nosthoff
8d4a9afdd5 package/boost: update download url
boost moved its package hosting from jfrog to their own url
provided by the C++ Alliance. According to [0] the old urls
might cease to exist after December 2024.

[0] https://lists.boost.org/Archives/boost/2024/05/256914.php

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:20:17 +01:00
Julien Olivain
fca1933e19 support/testing/tests/boot/test_grub.py: new test for RISCV64 EFI
Commit f439b47ed "boot/grub2: add RISC-V 64bit EFI support" [1]
introduced the grub2 RISC-V UEFI support.

At that time, it was not possible to have a runtime test for this.
qemu-system-riscv64 is not in the Buildroot Docker reference image,
and the base distribution (Debian 11) does not provide a
sufficiently recent version. A qemu-system-riscv64 >= 8.0.0 is needed.

Commit 0d4177598 "support/testing/infra/emulator.py: add build host
dir to qemu search path" [2] added the capability to use the
Buildroot host-qemu package inside runtime test.

With this support, it is now possible to add a runtime test for a
grub2 UEFI boot on RISC-V 64bit.

Also, due to an upstream edk2 git submodule issue, this commit
includes a workaround to use https://sources.buildroot.net for this
test. See [3].

[1] f439b47ed6
[2] 0d4177598c
[3] 47fc9e5509

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:15:33 +01:00
Thomas Petazzoni
48490cf7b1 CHANGES: add issues resolved in 2024.11-rc1
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 20:52:40 +01:00
Thomas Petazzoni
5a59c24e57 CHANGES: update in preparation for 2024.11-rc1
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 20:38:21 +01:00
Julien Olivain
d7deecbce2 package/uhubctl: bump to version 2.6.0
For the release note, see:
https://github.com/mvp/uhubctl/releases/tag/v2.6.0

This commit also updates the LICENSE hash, due to a year update. See:
4deae1731c

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 16:18:29 +01:00
Vincent Jardin
dc4a5acfde package/bfscripts: new package
Bootstrap the installation of Mellanox/NVIDIA Bluefield scripts
that can be run either on the host CPU or on the onboard ARM64 CPU.

Signed-off-by: Vincent Jardin <vjardin@free.fr>
Reviewed-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-10 19:33:08 +01:00
Julien Olivain
a842df6348 package/fluidsynth: bump to version 2.4.0
For change log since v2.3.7, see:
https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 18:14:00 +01:00
Julien Olivain
525c1369bc package/irssi: bump version to 1.4.5
For change log, see:
https://irssi.org/NEWS/#news-v1-4-5

This commit also adds the pgp key id used for the signature
verification.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 18:13:54 +01:00
Bernd Kuhls
9101aad327 package/kodi-pvr-vuplus: bump version to 21.3.0-Omega
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:53:49 +01:00
Bernd Kuhls
b2786de37b package/kodi-pvr-iptvsimple: bump version to 21.10.0-Omega
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:53:45 +01:00
Bernd Kuhls
39dde9efc1 package/kodi-inputstream-adaptive: bump version to 21.5.6-Omega
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:53:41 +01:00
Cherniaev Andrei
d2f5678f42 package/picotool: fix Config.in comment dependencies
Due to a bug in the Config.in comment dependencies, the comment "***
picotool needs a toolchain w/ C++, threads, gcc >= 4.9 ***" is always
shown even if all features are enabled.

Fixes: d30c1e3c58 ("package/picotool: fix libusb dependencies")
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:52:01 +01:00
James Hilliard
80e6f23d4d package/python-wheel: bump to version 0.45.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:35 +01:00
James Hilliard
7aad46406a package/python-werkzeug: bump to version 3.1.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:31 +01:00