Commit Graph

60362 Commits

Author SHA1 Message Date
Giulio Benetti
175dbdf3fc package/libblockdev: bump to version 3.2.1
For change log, see:
https://github.com/storaged-project/libblockdev/blob/3.2.1/NEWS.rst

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-21 23:42:47 +01:00
Bernd Kuhls
96d73b3091 package/php: security bump version to 8.3.14
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/444

Fixes CVE-2024-8929, CVE-2024-8932, CVE-2024-11233, CVE-2024-11234 &
CVE-2024-11236.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-21 21:59:27 +01:00
Bernd Kuhls
257c1de7e9 package/postgresql: security bump version to 16.5
Release notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/

Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-20 22:31:35 +01:00
Yann E. MORIN
575d971820 package/go: ensure there is a host-go provider, take 2
Commit 7b2a164b74 (package/go/go-bin: new host-go provider) broke the
case for prompt-less, host-only go packages, as the main host-go symbol
would not be selected.

This very same use-case was initially broken when the first go-src
provider was introduced with fa2536ec94 (package/go: make host package
a virtual package), and subsequently fixed in 99a5d51c6e (package/go:
ensure there is a host-go provider), so 7b2a164b74 is causing a
regression of a fixed regression.

Fix that the very same way it was originally fixed.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:13:40 +01:00
Julien Olivain
f3b82925a9 package/skopeo: select BR2_PACKAGE_HOST_GO
host-skopeo fail to build, using the commands:

    echo BR2_PACKAGE_HOST_SKOPEO=y >.config
    make olddefconfig
    make host-skopeo

This commit fixes the issue by selecting BR2_PACKAGE_HOST_GO
in the Config.in file.

Fixes:

    make: *** No rule to make target 'host-', needed by '/buildroot/output/build/host-go-1.23.2/.stamp_configured'.  Stop.

Reviewed-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-19 22:05:18 +01:00
Giulio Benetti
7e2515a5ad package/libnvme: bump to version 1.11.1
For release note, see:
https://github.com/linux-nvme/libnvme/releases/tag/v1.11.1

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-18 23:42:41 +01:00
Bernd Kuhls
54cfff355c package/libpng: fix arm build with NEON
Fixes:
http://autobuild.buildroot.net/results/52c/52c974e70f922e9d7efea4c538e4438a22faa846/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-authored-by: Peter Korsgaard <peter@korsgaard.com>
[https://lists.buildroot.org/pipermail/buildroot/2024-November/767661.html]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-16 10:48:18 +01:00
Julien Olivain
0416ae0ed5 package/libkrb5: security bump to version 1.21.3
For the change log, see [1].

The license hash file changed, due to the year update.  See [2].  This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371

[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] fec2c44ee9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-16 10:47:41 +01:00
Bernd Kuhls
649b31fc6d package/intel-microcode: security bump version to 20241112
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html

CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-15 23:25:53 +01:00
Julien Olivain
d571951c67 package/tiff: security bump to version 4.7.0
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html

This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.

This commit also adds a comment in the hash file about pgp signature
veritication.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 19:52:43 +01:00
Bernd Kuhls
ed4348d1c5 package/libcurl: security bump version to 8.11.0
Changelog: https://curl.se/ch/8.11.0.html

Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-14 19:52:31 +01:00
Michel Alex
e53014bcc8 package/libzenoh-pico: bump to version 1.0.2
https://github.com/eclipse-zenoh/zenoh-pico/releases/tag/1.0.2

Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:44 +01:00
Michel Alex
ee157845d3 package/libzenoh-c: bump to version 1.0.2
https://github.com/eclipse-zenoh/zenoh-c/releases/tag/1.0.2

Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:44 +01:00
Scott Fan
00f370c0ff package/timescaledb: bump version to 2.17.2
Release notes: https://github.com/timescale/timescaledb/blob/2.17.2/CHANGELOG.md

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:43 +01:00
Nicolas Cavallari
268d5145c8 package/libgit2: bump version to 1.8.4
upstream mistakenly based 1.8.3 on 1.8.1 so it didn't include the
1.8.2 fixes.  1.8.4 includes fixes from 1.8.2 and 1.8.3.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:42 +01:00
Francois Perrad
856a7e96d5 package/expat: security bump to version 2.6.4
fix CVE-2024-50602

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-13 18:55:41 +01:00
Romain Naour
1a9f5eac98 package/xenomai: fix latest version
The last xenomai version bump [1] forgot to update the
BR2_PACKAGE_XENOMAI_LATEST_VERSION option string.

[1] 44fafcc41a

Reported-by: Pierre Ficheux <pierre.ficheux@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2024-11-13 17:26:46 +01:00
James Hilliard
66f66bbdb5 package/python-pillow: set new build options
Explicitly set new imagequant, raqm and zlib build options.

Fixes: baa3db0c34

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-11-12 20:53:16 +01:00
James Hilliard
a97a592a73 package/python-pillow: fix webp DependencyException
As of baa3db0c34 webp mux/demux are no
longer optional for webp support in python-pillow. The
-Cwebpmux=enable/disable option no longer exists.

Fixes:
DependencyException:
The headers or library files could not be found for webp,
which was requested by the option flag --enable-webp

Fixes: baa3db0c34

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2024-11-12 20:52:48 +01:00
Fiona Klute (WIWA)
012bbb70c2 package/raspberrypi-usbboot: bump version to 20240926-102326
This version adds the -i flag to select the device to boot by serial
number [1], which is important when working with multiple RPi
devices. Otherwise mostly firmware updates, see [2] for all changes.

Also switch to the git download method for reproducible archives.

[1] 481c5e8a77
[2] https://github.com/raspberrypi/usbboot/compare/20221215-105525...20240926-102326

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 22:31:35 +01:00
Bernd Kuhls
323567552b {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:52:28 +01:00
Julien Olivain
9b40127534 package/usbredir: bump version to 0.14.0
For change log, see [1].

This commit also updates the _SITE to the URL published on the
homepage [2]. The main motivation is to use HTTPS.

This commit also adds a comment in the hash file about the pgp
signature verification.

[1] https://gitlab.freedesktop.org/spice/usbredir/-/blob/usbredir-0.14.0/ChangeLog.md
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:41:29 +01:00
Julien Olivain
122a5e2529 package/usbredir: fix package homepage URL
The current homepage URL [1] redirects to its https and ends up to
a HTTP 404 not found error. This commit fixes the issue by replacing
it with the new URL [2].

[1] http://www.spice-space.org/page/UsbRedir
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:41:21 +01:00
Julien Olivain
77fcce23c6 package/findutils: bump version to 4.10.0
For release announce, see:
https://lists.gnu.org/archive/html/info-gnu/2024-07/msg00002.html

This commit also updates the hash file comment, to use the sha256 hash
published in the release announce, to provide the signature URL and the
pgp key id used for the signature verification.

See the gnulib documentation for details [1]. Contrary to what the
option name might suggest, it doesn't really disable Y2038 support,
but only the check that the system is Y2038 compliant. So even with
--disable-year2038, if the system is Y2038 compliant (uses a 64-bit
arch, uses the musl C library, or uses the glibc C library with
BR2_TIME_BITS_64=y), findutils will be Y2038 compliant.

[1] https://www.gnu.org/software/gnulib/manual/html_node/Avoiding-the-year-2038-problem.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:25:26 +01:00
Julien Olivain
5456830db9 package/iperf: bump to version 2.2.1
For release note, see after the file list at:
https://sourceforge.net/projects/iperf2/files/

This commit also adds a package patch to fix the build with musl
libc toolchains.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:25:07 +01:00
Michael Nosthoff
7d358fe180 package/spdlog: bump to version 1.15.0
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:22:55 +01:00
Julien Olivain
799d43ae05 package/blake3: bump version to 1.5.4
For change log since 1.5.1, see: [1] [2] [3].

Also, v1.5.2 added the new license "Apache-2.0 with (LLVM)
exceptions". The initial LICENSE file was split in three
different files (one file per license). See [4] [5].
This commit updates _LICENSE, _LICENSE_FILES and the hash
file accordingly.

[1] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.2
[2] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.3
[3] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.4
[4] bb8761256a
[5] 0b2c630cc5

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:22:49 +01:00
Julien Olivain
6febbd6f1e package/motion: bump version to 4.7.0
For the change log, see:
https://github.com/Motion-Project/motion/releases/tag/release-4.7.0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:22:29 +01:00
Michael Nosthoff
8d4a9afdd5 package/boost: update download url
boost moved its package hosting from jfrog to their own url
provided by the C++ Alliance. According to [0] the old urls
might cease to exist after December 2024.

[0] https://lists.boost.org/Archives/boost/2024/05/256914.php

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 21:20:17 +01:00
Julien Olivain
d7deecbce2 package/uhubctl: bump to version 2.6.0
For the release note, see:
https://github.com/mvp/uhubctl/releases/tag/v2.6.0

This commit also updates the LICENSE hash, due to a year update. See:
4deae1731c

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-11 16:18:29 +01:00
Vincent Jardin
dc4a5acfde package/bfscripts: new package
Bootstrap the installation of Mellanox/NVIDIA Bluefield scripts
that can be run either on the host CPU or on the onboard ARM64 CPU.

Signed-off-by: Vincent Jardin <vjardin@free.fr>
Reviewed-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2024-11-10 19:33:08 +01:00
Julien Olivain
a842df6348 package/fluidsynth: bump to version 2.4.0
For change log since v2.3.7, see:
https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 18:14:00 +01:00
Julien Olivain
525c1369bc package/irssi: bump version to 1.4.5
For change log, see:
https://irssi.org/NEWS/#news-v1-4-5

This commit also adds the pgp key id used for the signature
verification.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 18:13:54 +01:00
Bernd Kuhls
9101aad327 package/kodi-pvr-vuplus: bump version to 21.3.0-Omega
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:53:49 +01:00
Bernd Kuhls
b2786de37b package/kodi-pvr-iptvsimple: bump version to 21.10.0-Omega
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:53:45 +01:00
Bernd Kuhls
39dde9efc1 package/kodi-inputstream-adaptive: bump version to 21.5.6-Omega
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:53:41 +01:00
Cherniaev Andrei
d2f5678f42 package/picotool: fix Config.in comment dependencies
Due to a bug in the Config.in comment dependencies, the comment "***
picotool needs a toolchain w/ C++, threads, gcc >= 4.9 ***" is always
shown even if all features are enabled.

Fixes: d30c1e3c58 ("package/picotool: fix libusb dependencies")
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:52:01 +01:00
James Hilliard
80e6f23d4d package/python-wheel: bump to version 0.45.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:35 +01:00
James Hilliard
7aad46406a package/python-werkzeug: bump to version 3.1.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:31 +01:00
James Hilliard
fe4207ee79 package/python-tqdm: bump to version 4.67.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:29 +01:00
James Hilliard
8d740a7910 package/python-scapy: bump to version 2.6.1
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:28 +01:00
James Hilliard
6974f782bb package/python-rpds-py: bump to version 0.21.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:26 +01:00
James Hilliard
b449ad4aad package/python-regex: bump to version 2024.11.6
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:24 +01:00
James Hilliard
62b2ac7a8e package/python-pysnmp: bump to version 7.1.13
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:22 +01:00
James Hilliard
650a7f0245 package/python-pysmi: bump to version 1.5.9
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:20 +01:00
James Hilliard
8f61db37b1 package/python-pylibfdt: bump to version 1.7.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:18 +01:00
James Hilliard
9793094ff2 package/python-pip: bump to version 24.3.1
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:16 +01:00
James Hilliard
21ceefad6d package/python-packaging: bump to version 24.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:14 +01:00
James Hilliard
a3540f26d4 package/python-meson-python: bump to version 0.17.1
Add new host-python-packaging build dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:12 +01:00
James Hilliard
7879dfa024 package/python-google-auth: bump to version 2.36.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-11-10 17:44:10 +01:00