Commit Graph

67631 Commits

Author SHA1 Message Date
Peter Thompson
7e763381b7 package/sdl2_image: bump version to 2.6.3
Signed-off-by: Peter Thompson <peter.macleod.thompson@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 22:14:55 +02:00
Peter Thompson
8d9308a5a6 package/sdl2_ttf: bump version to 2.20.2
Signed-off-by: Peter Thompson <peter.macleod.thompson@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 22:14:54 +02:00
Baruch Siach
13812ee16e package/daemon: bump to version 0.8.2
Drop upstream patches.

Update license to include mode licenses. Add license file hashes and
update hashes of existing files for added licenses, as well as
formatting and copyright date updates.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 22:14:53 +02:00
Dario Binacchi
5b5b68df60 configs/beaglebone: bump U-Boot version to 2023.04
Bump U-Boot to version 2023.04.

Tested on beaglebone black.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 22:14:51 +02:00
Laurent Vivier
a2f554c1bd package/petitboot: new package
Although this is a "boot loader", it really is a tool that should be
part of an image that acts as the bootloader. Thus, it is not in the
bootloader menu.

A UI is required and can be provided by ncurses, X11 or fbdev. Only
ncurses is supported for now. The other two use libtwin which isn't part
of Buildroot for now.

Adapted from https://github.com/glevand/petitboot--buildroot
Updated to work with m68k architecture rather than just PlayStation3
(focused on qemu-system-m68k virt machine)

Signed-off-by: Laurent Vivier <laurent@vivier.eu>
Reviewed-by: Thomas Huth <huth@tuxfamily.org>
[Arnout:
 - Add missing arch and toolchain dependencies.
 - Remove nonexistent BR2_PACKAGE_NCURSES_TARGET_* selects.
 - Swap kexec/kexec-lite priority.
 - Add hash for license file.
 - Use version without v for VERSION.
 - Remove unnecessary --localstatedir=/var.
 - Add --disable-busybox.
 - Remove --enable-debug.
 - Remove --with-ncursesw and explicit libraries.
 - Add explicit arguments for all configure options.
 - Always select busybox tftp.
 - Add optional dependency on dtc.
 - Move dtc-specific options under a single condition.
 - Minor cleanups (whitespace, comments, ...).
]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-04-05 22:08:37 +02:00
Laurent Vivier
3d7557d80f package/kexec: add m68k support
kexec supports m68k since commit
027413d822fd57dd39d2d2afab1484bc6b6b84f9 in v2.0.5

Signed-off-by: Laurent Vivier <laurent@vivier.eu>
Reviewed-by: Thomas Huth <huth@tuxfamily.org>
[Arnout:
 - Split off in a separate commit.
]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-04-05 22:08:36 +02:00
Arnout Vandecappelle
64fa94f72f package/kexec: introduce BR2_PACKAGE_KEXEC_ARCH_SUPPORTS
This makes it easier for other packages to add the arch dependency.

Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-04-05 22:08:35 +02:00
Stefan Agner
0d8d348826 package/docker-cli: bump version to v23.0.3
This release contains some fixes and small improvements. For the
full list see:
https://github.com/moby/moby/releases/tag/v23.0.3

Signed-off-by: Stefan Agner <stefan@agner.ch>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 22:01:56 +02:00
Stefan Agner
238d494687 package/docker-engine: security bump version to v23.0.3
Fixed a number of issues that can cause Swarm encrypted overlay networks
to fail to uphold their guarantees, addressing CVE-2023-28841,
CVE-2023-28840, and CVE-2023-28842.

https://github.com/moby/moby/releases/tag/v23.0.3

Signed-off-by: Stefan Agner <stefan@agner.ch>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 22:01:25 +02:00
Stefan Agner
8bf66c5640 package/containerd: security bump to version 1.6.20
Various bugfixes and improvements. Noteable security fixes:

- CVE-2023-25153: Fix OCI image importer memory exhaustion
  https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2

- CVE-2023-25173: Fix supplementary groups not being set up properly
  https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p

https://github.com/containerd/containerd/releases/tag/v1.6.20

Signed-off-by: Stefan Agner <stefan@agner.ch>
[Peter: add CVE references]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 21:58:18 +02:00
Waldemar Brodkorb
f12bf2e6a7 package/uclibc: security update to 1.0.43
Security fix for CVE-2022-29503

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-05 21:54:00 +02:00
Stefan Agner
413a28940b package/docker-cli: bump version to v23.0.2
This release contains some fixes and small improvements. For the
full list see:
https://github.com/moby/moby/releases/tag/v23.0.2

Signed-off-by: Stefan Agner <stefan@agner.ch>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-03 11:01:27 +02:00
Stefan Agner
cebd1389f4 package/docker-engine: security bump version to v23.0.2
Fixes the following security issue:

- CVE-2023-26054: (Buildkit): Credentials inlined to Git URLs could end up
  in provenance attestation
  https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc

In addition, a number of issues have been fixed. For the full list, see:
https://github.com/moby/moby/releases/tag/v23.0.2

Signed-off-by: Stefan Agner <stefan@agner.ch>
[Peter: Mark as security bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-03 10:59:57 +02:00
Christian Stewart
52976c54f7 package/runc: security bump to version v1.1.5
This is the fifth patch release in the 1.1.z series of runc, which fixes
three CVEs found in runc.

CVE-2023-25809 is a vulnerability involving rootless containers where
(under specific configurations), the container would have write access to the
/sys/fs/cgroup/user.slice/... cgroup hierarchy. No other hierarchies on the host
were affected. This vulnerability was discovered by Akihiro Suda.
GHSA-m8cg-xc2p-r3fc

CVE-2023-27561 was a regression which effectively re-introduced CVE-2019-19921.
This bug was present from v1.0.0-rc95 to v1.1.4. This regression was discovered
by Beuc. GHSA-vpvm-3wq2-2wvm

CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the same patch.
This variant of the above vulnerability was reported by Lei Wang.
GHSA-g2j6-57v7-gm8c

In addition, the following other fixes are included in this release:

 - Fix the inability to use /dev/null when inside a container
 - Fix changing the ownership of host's /dev/null caused by fd redirection
 - Fix rare runc exec/enter unshare error on older kernels, including CentOS < 7.7
 - nsexec: Check for errors in write_log()

https://github.com/opencontainers/runc/releases/tag/v1.1.5

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-04-03 10:52:52 +02:00
James Hilliard
63463ee43f package/python-pypa-build: bump to version 0.10.0
Migrate to flit-bootstrap build backend.

Remove no longer needed host-python-pep517 dependency.

Add new host-python-pyproject-hooks dependency.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-04-02 22:40:41 +02:00
James Hilliard
a2ac1a951f package/python-pyproject-hooks: new package
There's a runtime dependency on tomli, but only for Python < 3.11.
Therefore this is not applicable for us.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-04-02 22:39:54 +02:00
Fabrice Fontaine
a45f2af7fa package/snmppp: fix build without SNMPV3
Fix the following build failure without BR2_PACKAGE_SNMPPP_SNMPV3 raised
since bump to version 3.5.0 in commit
e011fa0415:

msgqueue.cpp: In member function 'int Snmp_pp::CSNMPMessage::ResendMessage()':
msgqueue.cpp:263:34: error: 'version3' was not declared in this scope; did you mean 'version1'?
  263 |   if (m_target->get_version() == version3) {
      |                                  ^~~~~~~~
      |                                  version1

Fixes:
 - http://autobuild.buildroot.org/results/8ef3e4407a51c53c15e530606227338761dd905b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Tested-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-29 08:48:38 +02:00
Peter Seiderer
16cd9494ba package/flann: needs C++11 support
Fixes:

  - http://autobuild.buildroot.net/results/c92a3df1bc73e00e1e4493500bfb7277cf5064ee

  .../build/flann-1.9.2/src/cpp/flann/util/lsh_table.h:367:5: error: 'random_device' is not a member of 'std'
     std::random_device rd;
     ^

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-03-28 22:58:01 +02:00
Luca Ceresoli
fb515a4b28 package/linux-tools: add USB tools (testusb and ffs-test)
Extend the linux-tools package to also build the userspace USB tools,
which currently include testusb and ffs-test.

These tools are in the kernel tree since a long time, and althogh a
Makefile had been present since kernel 2.6.39, it has been entirely
rewritten (with an install rule) back with kernel 5.9, to allow building
the same way as other tools provided with the kernel.

We make use of the Makefile install rule, thus version >= 5.9 is
required. Support for older kernels may be added later if needed, and
is left as an exercise for the motivated party.

Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Reviewed-by: Herve Codina <herve.codina@bootlin.com>
[yann.morin.1998@free.fr: fix history of Makefile]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-03-28 21:54:55 +02:00
Luca Ceresoli
9a3d4e3818 docs/manual: ditch redundant -f 'rm' flag
The value of the RM variable in make is 'rm -f' [0], thus the additional
-f is redundant. Avoid it on the docs to avoid developers taking it as a
good example to follow.

[0] https://www.gnu.org/software/make/manual/make.html#index-RM

Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-03-28 21:36:07 +02:00
Luca Ceresoli
37e63bb2c9 package/linux-tools: perf: ditch redundant -f 'rm' flag
The value of the RM variable in make is 'rm -f' [0], thus the additional
-f is redundant.

[0] https://www.gnu.org/software/make/manual/make.html#index-RM

Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-03-28 21:34:41 +02:00
Simon Rowe
7ad6dd20ff package/multipath-tools: enable with musl
Now LVM2 can be built using musl drop the toolchain config
restriction.

Signed-off-by: Simon Rowe <simon.rowe@nutanix.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-26 23:10:35 +02:00
Simon Rowe
c5e9422197 package/lvm2: enable package with musl
LVM relies on the glibc-specific behaviour of assigning to the
standard streams (stdin etc). As a result the package is currently
disabled when using musl.

This commit backports two patches from upstream lvm2 (not yet in a
release) that fix some build issues with musl, and two additional
patches taken from the Gentoo distribution to address more issues.

With those 4 patches combined, lvm2 builds fine with musl and can
therefore be re-enabled in musl configurations.

Signed-off-by: Simon Rowe <simon.rowe@nutanix.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-26 22:32:59 +02:00
Peter Seiderer
05d3fdfd13 package/zerofree: fix double space in Config.in comment
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-26 21:59:27 +02:00
Peter Seiderer
9611a3b323 package/osm2pgsql: fix double space in Config.in comment
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-26 21:59:26 +02:00
Peter Seiderer
e81ca40516 package/libosmium: fix double space in Config.in comment
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-26 21:59:25 +02:00
Peter Seiderer
2b2a679dfb package/lcdproc: fix double space in Config.in comment
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-26 21:59:24 +02:00
Peter Seiderer
0472287484 package/protozero: fix double space in Config.in comment
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-03-26 21:59:22 +02:00
Arnout Vandecappelle
48311b11e0 package/python-marshmallow-sqlalchemy: fix spaces in hash file
check-package complains with:
package/python-marshmallow-sqlalchemy/python-marshmallow-sqlalchemy.hash:2: separation does not match expectation (http://nightly.buildroot.org/#adding-packages-hash)

Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 22:06:08 +01:00
Vincent Fazio
2bc95879f7 manual: drop LIBFOO_GETTEXTIZE, add LIBFOO_AUTOPOINT
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:56:19 +01:00
Vincent Fazio
e9e1cd239f package/gettext: drop GETTEXTIZE variable
This variable is no longer used anywhere in the tree so remove it.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:55:14 +01:00
Vincent Fazio
e32123b866 package/pkg-autotools: drop support for FOO_GETTEXTIZE
Remove all support for FOO_GETTEXTIZE and alert users to FOO_AUTOPOINT
as the recommended solution in its stead. We can use the standard
check-deprecated-variable for this, because from a user perspective
FOO_AUTOPOINT is pretty-much a drop-in replacement.

The warnings about FOO_GETTEXTIZE_OPTS are no longer relevant, because
they will only make sense if FOO_GETTEXTIZE was already set.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
[Arnout:
 - use check-deprecated-variable;
 - remove FOO_GETTEXTIZE_OPTS warnings;
 - remove definition of GETTEXTIZE]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:55:00 +01:00
Vincent Fazio
98de5e4aad package/popt: remove POPT_GETTEXTIZE
Commit 895bfba dropped POPT_AUTORECONF but did not drop POPT_GETTEXTIZE,
which requires POPT_AUTORECONF = YES.

Fixes: 895bfba ("package/popt: bump to version 1.19")

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:35 +01:00
Arnout Vandecappelle
33c85dc3ec package/speechd: migrate to new autopoint flag
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:34 +01:00
Vincent Fazio
3c75542074 package/rrdtool: migrate to new autopoint flag
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
[Arnout: also update comment]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:33 +01:00
Vincent Fazio
8962eb6749 package/motion: migrate to new autopoint flag
Drop patch that is no longer necessary.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:20 +01:00
Vincent Fazio
cf7b3a1a36 package/libuio: migrate to new autopoint flag
Drop patch that is no longer necessary after moving to new package flag.
Add patch to fix builds due to missing required files.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:18 +01:00
Vincent Fazio
b21fc7532c package/hddtemp: migrate to new autopoint flag
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:18 +01:00
Vincent Fazio
92aea79ded package/flex: migrate to new autopoint flag
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:17 +01:00
Vincent Fazio
b75e7dc15a package/dc3dd: migrate to new autopoint flag
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
[Arnout: also update comment]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:47:16 +01:00
Vincent Fazio
323abee789 package/aumix: migrate to new autopoint flag
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:29:21 +01:00
Vincent Fazio
bb7822abad package/pkg-autotools: add FOO_AUTOPOINT flag
Add a new variable to run autopoint during autoreconf.

This variable depends on FOO_AUTORECONF = YES. It is mutually exclusive
to FOO_GETTEXTIZE. If both are set, FOO_AUTOPOINT is ignored to preserve
previous behavior.

This support is being added per a previous discussion [1].

The usage of gettextize needs to be removed cuz mama says so [2].
  ... is not part of the GNU build system, in the sense that it should
  not be invoked automatically, and not be invoked by someone who doesn’t
  assume the responsibilities of a package maintainer. For the latter
  purpose, a separate tool is provided, see Invoking the autopoint Program [3]

Using gettextize has the unintended consequence of updating the package
based on the version of host-gettext vs what was chosen by the upstream
maintainer. As mama said above, we should use autopoint. Do as she says
to avoid further scolding (gettextize shoehorning and package patching).

[1] https://patchwork.ozlabs.org/project/buildroot/patch/20170827110920.15579-1-aleksander@aleksander.es/
[2] https://www.gnu.org/software/gettext/manual/html_node/gettextize-Invocation.html
[3] https://www.gnu.org/software/gettext/manual/html_node/autopoint-Invocation.html

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:27:51 +01:00
Vincent Fazio
658e7626e5 package/pkg-autotools: set AUTOPOINT via AUTOCONF_ENV
Previously, AUTOPOINT was hardcoded to /bin/true in autoconf.mk.

Moving the definition of this variable into AUTOCONF_ENV as part of the
autotools infrastructure will allow us to conditionally set the variable
based on package flags to support migrating away from FOO_GETTEXTIZE.

While we're at it, split the overly long line that defines AUTORECONF,
wrapping at 80 columns.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
[Arnout: split long line]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:24:22 +01:00
Vincent Fazio
067a69412a manual: remove LIBFOO_GETTEXTIZE_OPTS
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:22:10 +01:00
Vincent Fazio
5672e74fdc package/pkg-autotools: drop FOO_GETTEXTIZE_OPTS support
No package in the current tree is currently utilizing this option.

The long term solution is to use autopoint over gettextize in which case
these options aren't relevant anyway.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-03-25 21:21:44 +01:00
Julien Olivain
0c7ba302bd package/hwloc: bump to version 2.9.0
For change log, see:
- https://github.com/open-mpi/hwloc/blob/hwloc-2.9.0/NEWS#L20

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-03-22 23:52:18 +01:00
Julien Olivain
4b0346feda package/less: bump to version 608
For change log, see:
https://www.greenwoodsoftware.com/less/news.608.html

Note 1: the package patch is kept, as it is included in version 609.
Note 2: the license file hash changed due to the year update.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-03-22 23:48:29 +01:00
James Hilliard
2bd5301db0 package/python-bsdiff4: bump to version 1.2.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-03-22 23:43:36 +01:00
James Hilliard
f345271e43 package/python-bottle: bump to version 0.12.25
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-03-22 23:43:17 +01:00
James Hilliard
1197165d1c package/python-botocore: bump to version 1.29.96
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-03-22 23:43:01 +01:00