Commit Graph

72357 Commits

Author SHA1 Message Date
J. Neuschäfer
2c96b9b395 package/aer-inject: switch upstream
According to a commit in Linux[1], the upstream of aer-inject changed to
https://github.com/intel/aer-inject.

[1]: https://git.kernel.org/linus/a29e5290e3566ae4db4e6fe5f31caf23118c82b6

Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e40c6f2156cd59082fd02c37b24c3a2750eee809)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 22:19:08 +02:00
Bernd Kuhls
dfcce6c6b3 {linux, linux-headers}: bump 6.{1, 6, 10}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0b5feb52afd2165be21a1dfb8f8f870eab9b9acb)
[Peter: drop 6.10.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 22:15:52 +02:00
Roy Kollen Svendsen
3789f1b9ab docs/manual: fix description of how to reply to <message-id>
Patch v1 not set to 'superseded' when replying to <message-id> with v2.

I'm using git version 2.46.0. The manual says the following is the
correct way to use the '--in-reply-to' option:

git send-email --in-reply-to=<message-id>

Signed-off-by: Roy Kollen Svendsen <roykollensvendsen@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6677d9c4e18107cbf3dc691dea3beb801e03df98)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 22:14:54 +02:00
Waldemar Brodkorb
0643531972 package/szip: update SZIP_SITE
Fix broken link.

While at it, use $(SZIP_VERSION) inside SZIP_SITE instead of
duplicating the version.

Fixes:

 http://autobuild.buildroot.org/results/35d/35d08103bbd0da22a5e111f1f86f28aba7062ee6

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 180216631a64d5319ab0420cf7b37acb4fa0799c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 22:14:21 +02:00
Waldemar Brodkorb
f12d22ceae package/comix-cursors: update COMIX_CURSORS_SITE
The project moved to Gitlab and renamed it's archive.
Fix the download URL and update the hash.

Fixes:

 http://autobuild.buildroot.org/results/734/734917ff9f613f07e6995c1f333eab1ee8bc5760

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 62ccb5b25d421f5df5a6ee7a88db21159f3c5e23)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 22:13:28 +02:00
Waldemar Brodkorb
ff44a8f626 package/zabbix: fixup download URL
Fixes:
 http://autobuild.buildroot.org/results/9ff/9ffb4a9e3b2291498d0ccf3c9124bebc466860bc

Zabbix 6.2.x is EOL and the tarballs have now been moved under oldstable/.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Peter: extend commit message]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 345c94ad4e709116c7a22d143aae9ef815e8dfeb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:51:20 +02:00
Thomas Petazzoni
23a6237391 package/libuecc: switch to a functional Github repo
The https://projects.universe-factory.net/attachments/download/85 URL
no longer works, so let's switch to what appears to be the official
Github repo:

  https://github.com/neocturne/libuecc

The v7 in this Github is 100% identical to the v7 that was available
from https://projects.universe-factory.net/attachments/download/85.

Also at
https://metadata.ftp-master.debian.org/changelogs//main/libu/libuecc/libuecc_7-5_copyright
Debian lists https://github.com/NeoRaider/libuecc as the source, and
this URL redirects to https://github.com/neocturne/libuecc.

Thanks to the original tarball being a .tar.xz, and our Github macro
generating a .tar.gz, the filename is different, and therefore the
different hash will not be an issue.

Fixes:

  http://autobuild.buildroot.org/results/c4c24bd06bc7889c46d78e14d5bef528340d4463/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f14e03ba21491407d2aaa47e782cc0e924ab6164)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:49:46 +02:00
Waldemar Brodkorb
8d376b3972 package/fbset: update download URL
Fixes:

 http://autobuild.buildroot.org/results/13e/13e28650fc58fc62c801a664d79616c6dd39a8ac

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c1a6987da9bfebac25db0d05fa69a706a933889f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:08:53 +02:00
Mattia Narducci
1f6026dfa0 package/proftpd: fix group name preventing server from starting
Replace the group name 'nogroup' with 'nobody' in the default ProFTPD
configuration file. This fixes the following error when starting the
server:

  proftpd[110]: fatal: Group: Unknown group 'nogroup' on line 30 of '/etc/proftpd.conf'

Fixes: 0d887cc2b4 ("system: replace nogroup with nobody")
Signed-off-by: Mattia Narducci <mattianarducci1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2383768cdf03ad78a89a0b4355c4e1a576c2d219)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:08:08 +02:00
Scott Fan
6eea6b524d package/postgresql: fix typo in init script info printout
Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 74f327e2869841b499d66cac6a7bd8a83b1269f5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:07:12 +02:00
Scott Fan
94b7bb247c package/postgresql: security bump version to 16.4
Release notes:
 - https://www.postgresql.org/docs/release/16.4/
 - https://www.postgresql.org/about/news/postgresql-164-158-1413-1316-1220-and-17-beta-3-released-2910/

Fixes CVE-2024-7348:
 - https://www.postgresql.org/support/security/CVE-2024-7348/

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 10088427cf3b714db85a1d10e6a023c2639bd790)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:06:46 +02:00
Waldemar Brodkorb
e612ba63c5 package/xserver_xorg-server: security update to 21.1.13
Fixes the following security issues:

- CVE-2024-31080: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
- CVE-2024-31081: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
- CVE-2024-31082: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap
- CVE-2024-31083: User-after-free in ProcRenderAddGlyphs

For more details, see thee security page of Xorg:
https://www.x.org/wiki/Development/Security/

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Peter: add actual list of CVEs]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e33db30aab02188c8b3aae6451d26288d06d7a15)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:05:47 +02:00
J. Neuschäfer
68e71cde30 package/x264: disable assembly code on x86 + musl + PIC/PIE
The x264 package uses large amounts of non-PIC assembly code
(e.g. common/x86/dct-a.asm), which results in textrels, which aren't
supported by musl-libc's dynamic linker.

Disable x264's assembly code when compiling for x86 with PIC/PIE and
musl-libc to avoid this particular incompatibility.

Reported-by: Yann Morin <yann.morin@orange.com>
Fixes: https://lore.kernel.org/buildroot/ZrsirnrvgsEIpAJI@tl-lnx-nyma7486-2/
Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0196ec4198771e5fe83d6df02c7cd3b13c0ce05f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 19:04:12 +02:00
Bernd Kuhls
090dea2faa package/sofia-sip: fix static build with openssl >= 3.2.0
Fixes:
http://autobuild.buildroot.org/results/de08bd5c68f5fcdaa5c0374a4f5051c4751ebb88/
and many others.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 71f54e07804437df8cc389e618e7374e5c3e40d2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:48:48 +02:00
Bernd Kuhls
a733300f8f package/sofia-sip: fix build with gcc 14.x
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit d3f47c2486)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:48:41 +02:00
Bernd Kuhls
4fd3639ea3 package/dovecot-pigeonhole: bump version to 0.5.21.1
Release note of this bugfix release:
https://dovecot.org/mailman3/hyperkitty/list/dovecot-news@dovecot.org/thread/4KDY5GDGPVG5ZMXKTBEKPKK764LT56WU/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5dae8cddeecf16c791f3c138542ec51c4e627d75)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:47:19 +02:00
Bernd Kuhls
6699f2dd5d package/dovecot: security bump version to 2.3.21.1
Fixes CVE-2024-23184 & CVE-2024-23185:
https://dovecot.org/mailman3/hyperkitty/list/dovecot-news@dovecot.org/thread/2CSVL56LFPAXVLWMGXEIWZL736PSYHP5/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 786484e631d34f9630baaa74006a8398aa19ad7d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:46:58 +02:00
Julien Olivain
40030e1c6f package/unbound: security bump to version 1.21.0
Fixes the following security issue:

- CVE-2024-43167: A NULL pointer dereference flaw was found in the
  ub_ctx_set_fwd function in Unbound.  This issue could allow an attacker
  who can invoke specific sequences of API calls to cause a segmentation
  fault

See announcement:
https://nlnetlabs.nl/news/2024/Aug/15/unbound-1.21.0-released/

See also change log:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-21-0

This commit also updates the _SITE url from [1] to [2], to follow the
HTTP redirect, and the url published on the download page [3].

Finally, this commit adds a comment in the hash file that the PGP
signature was checked.

[1] https://www.unbound.net/downloads
[2] https://nlnetlabs.nl/downloads/unbound
[3] https://nlnetlabs.nl/projects/unbound/download

Signed-off-by: Julien Olivain <ju.o@free.fr>
[Peter: Mark as security bump, add CVE info]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ed34c4c77b8b2a830c7a9ffb1d75c7bf1e35a7c4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:44:54 +02:00
Dario Binacchi
22208c646b package/libcuefile: fix build failure due to implicit declaration
Fixes:
- http://autobuild.buildroot.org/results/28f1e34166e836bf3b984f228bb09842840de82a

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d0d23b47393e0133b76437a274f724c16a7d7e2d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:43:19 +02:00
Waldemar Brodkorb
0717afbd5f package/libglob: update download URL
Fixes:

 http://autobuild.buildroot.org/results/92c/92c697697c07f63f0e03ceb655b5d558e85c392e

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b331217a50e975e89e28741a05d1f7b60c62496a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:42:09 +02:00
Marcus Hoffmann
36328f64d9 package/python-sqlparse: security bump to version 0.5.1
Changelog:
* https://sqlparse.readthedocs.io/en/latest/changes.html#release-0-5-1-jul-15-2024
* https://sqlparse.readthedocs.io/en/latest/changes.html#release-0-5-0-apr-13-2024

Version 0.5.0 fixes the following security issue [1]:
Parsing heavily nested list leads to Denial of Service

Build backend switched from flit to hatchling in [2].

[1] https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-2m57-hf25-phgg
[2] 326a316446

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 65247fcc6a12eb2443ae9861e7cd36b3881a466e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:10:18 +02:00
Bernd Kuhls
9425e2f723 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 10}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ebef582bd28fa183818ab973b58e167c75548a07)
[Peter: drop 6.10.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:07:40 +02:00
Bernd Kuhls
452bfb9e86 package/libcurl: security bump to version 8.9.1
Changelog: https://curl.se/changes.html#8_9_1

Fixes CVE-2024-7264.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit e656625b8a68e15deb9afaeaa4d61de5171288a4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:04:14 +02:00
Thomas Huth
c4535680ba DEVELOPERS: drop some entries from Thomas Huth's section
I lack the time (and interest) to properly keep these entries up to
date, so drop them from my section.

Signed-off-by: Thomas Huth <huth@tuxfamily.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6fdbab87a2b9d00743ed9fe6caa6db365d7ca326)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:02:13 +02:00
Thomas Petazzoni
8ed0272aa3 boot/grub2: ignore CVE-2023-4001
This vulnerability is irrelevant to Buildroot, as it affects only some
downstream changes from Redhat.

See:

  https://security-tracker.debian.org/tracker/CVE-2023-4001
  https://www.openwall.com/lists/oss-security/2024/01/15/3

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit e2f46ed03db7f07e62ce44f22dba0db53a5d2fd4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:02:02 +02:00
Thomas Petazzoni
5aec55c983 boot/grub2: ignore CVE-2024-1048
As explained in:

  https://security-tracker.debian.org/tracker/CVE-2024-1048
  https://www.openwall.com/lists/oss-security/2024/02/06/3

CVE-2024-1048 is related to a tool called grub-set-bootflag which only
exists in the Redhat fork of Grub, and which we don't use in
Buildroot, so this CVE should be ignored.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2495630383c4a6659b6b91a58e4f71cdda283f2f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 18:01:55 +02:00
Tan En De
ed80615cf4 package/libkcapi: update site path
Update the site path to reflect the recent organizational changes on the
chronox.de website.

Fixes:
- http://autobuild.buildroot.org/results/77243633783ac2d037d15d7e9c01384781fe700e

Signed-off-by: Tan En De <ende.tan@starfivetech.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d4d8881731ed745aff676b860a05abdff9ff1a0c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 13:14:56 +02:00
Dario Binacchi
b485e48a98 package/ntpsec: fix host building
The following build failure on xtensa:

Waf: Entering directory `/home/buildroot/instance-0/output-1/build/ntpsec-1.2.3/build/host'
[1/2] Processing ntpd/ntp_parser.y
[2/2] Compiling build/host/ntpd/ntp_parser.tab.c
gcc: error: unrecognized command-line option '-mlongcalls'
gcc: error: unrecognized command-line option '-mauto-litpools'

reveals that the target's CFLAGS are being used for host compilation.
The patch fixes the host compilation by correctly setting the CFLAGS to
be used.

It should be noted that the build script used by ntpsec applies CFLAGS
for host compilation and --cross-cflags for target compilation.

Fixes:
 - http://autobuild.buildroot.org/results/9321a637f2c340ce8dcb24249676bb6c44d0dfc6

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 064e4c09fa788ccf0927fcaf3987e0f0fdc08eb7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 13:13:45 +02:00
Waldemar Brodkorb
6c2f122ce0 package/aumix: update AUMIX_SITE
The old URL gives 403 forbidden.
Use a working sourceforge URL.

Fixes:

  http://autobuild.buildroot.org/results/c0c3945cade7a6d7a615ac23523c93b02dbb056f

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 77512bba98e09c7231a2629652e464dbf882fd23)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 13:12:00 +02:00
Waldemar Brodkorb
49583ab8c3 package/strongswan: work-around wolfssl compile issue
Disable RNG support so that following build failure does not happen:
In file included from ../../../../src/libstrongswan/plugins/plugin.h:28,
                 from wolfssl_plugin.h:34,
                 from wolfssl_plugin.c:29:
wolfssl_plugin.c: In function 'get_features':
../../../../src/libstrongswan/plugins/plugin_feature.h:321:119: error: 'FEATURE_WC_RNG' undeclared (first use in this function); did you mean 'FEATURE_RNG'?
  321 | #define __PLUGIN_FEATURE_REGISTER(type, _f)                                     (plugin_feature_t){ FEATURE_REGISTER, FEATURE_##type, .arg.reg.f = _f }
      |                                                                                                                       ^~~~~~~~
../../../../src/libstrongswan/plugins/plugin_feature.h:332:73: note: in expansion of macro '__PLUGIN_FEATURE_REGISTER'
  332 | #define _PLUGIN_FEATURE_REGISTER_RNG(type, f)                           __PLUGIN_FEATURE_REGISTER(type, f)
      |                                                                         ^~~~~~~~~~~~~~~~~~~~~~~~~
../../../../src/libstrongswan/plugins/plugin_feature.h:248:39: note: in expansion of macro '_PLUGIN_FEATURE_REGISTER_RNG'
  248 | #define PLUGIN_REGISTER(type, f, ...) _PLUGIN_FEATURE_REGISTER_##type(type, f, ##__VA_ARGS__)
      |                                       ^~~~~~~~~~~~~~~~~~~~~~~~~
wolfssl_plugin.c:510:17: note: in expansion of macro 'PLUGIN_REGISTER'
  510 |                 PLUGIN_REGISTER(RNG, wolfssl_rng_create),
      |                 ^~~~~~~~~~~~~~~
../../../../src/libstrongswan/plugins/plugin_feature.h:321:119: note: each undeclared identifier is reported only once for each function it appears in
  321 | #define __PLUGIN_FEATURE_REGISTER(type, _f)                                     (plugin_feature_t){ FEATURE_REGISTER, FEATURE_##type, .arg.reg.f = _f }
      |                                                                                                                       ^~~~~~~~
../../../../src/libstrongswan/plugins/plugin_feature.h:332:73: note: in expansion of macro '__PLUGIN_FEATURE_REGISTER'
  332 | #define _PLUGIN_FEATURE_REGISTER_RNG(type, f)                           __PLUGIN_FEATURE_REGISTER(type, f)
      |                                                                         ^~~~~~~~~~~~~~~~~~~~~~~~~
../../../../src/libstrongswan/plugins/plugin_feature.h:248:39: note: in expansion of macro '_PLUGIN_FEATURE_REGISTER_RNG'
  248 | #define PLUGIN_REGISTER(type, f, ...) _PLUGIN_FEATURE_REGISTER_##type(type, f, ##__VA_ARGS__)
      |                                       ^~~~~~~~~~~~~~~~~~~~~~~~~
wolfssl_plugin.c:510:17: note: in expansion of macro 'PLUGIN_REGISTER'
  510 |                 PLUGIN_REGISTER(RNG, wolfssl_rng_create),
      |                 ^~~~~~~~~~~~~~~
make[6]: *** [Makefile:659: wolfssl_plugin.lo] Error 1

Reported Upstream:
https://github.com/strongswan/strongswan/issues/2410

This build failure started since 5.9.11 update in commit
78959665b9.

Fixes:

  http://autobuild.buildroot.net/results/278b3f74c48c858ae368d59069752adb69c05246

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 89d512729cfa5b2ef5c5165492789ba4441add19)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 13:09:04 +02:00
Waldemar Brodkorb
0499a6403a package/botan: needs gcc >= 11
The "using enum" was added in gcc 11.x [0] (see also [1]).

Compile successfully tested with internal Buildroot toolchain for
sparc with gcc 12.x as gcc 11.x is not available anymore.

The autobuild failure will be avoided now and fixed with newer external
bootlin toolchains.

Fixes:
 - http://autobuild.buildroot.org/results/ab8/ab83b920156f5a1e51ef960e4007769b5c27d0a1

[0] https://gcc.gnu.org/projects/cxx-status.html#cxx20
[1] https://stackoverflow.com/questions/75018634/how-to-use-the-using-keyword-in-gcc-10-4

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 10a70b1af67cf79986c2e401f7a54aa850ea82d6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-18 13:06:46 +02:00
Waldemar Brodkorb
5c10eb2892 package/botan: security update to 3.5.0
See here for complete changelogs:
https://botan.randombit.net/news.html#version-3-5-0-2024-07-08
https://botan.randombit.net/news.html#version-3-4-0-2024-04-08

CVE-2024-34702: Fix a DoS caused by excessive name constraints. (GH

CVE-2024-39312: Fix a name constraint processing error, where if
permitted and excluded rules both applied to a certificate, only the
permitted rules would be checked.

The License hash changed because the year was updated from 2023 to 2024.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 3ba9ac62052c99d7557adf2bbad1bab0c5577a81)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:07:53 +02:00
Waldemar Brodkorb
763d5beb5d package/asterisk: security update to 20.9.2
See here for a changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-20.9.2.md

And here for the security advisory:
https://github.com/asterisk/asterisk/security/advisories/GHSA-c4cg-9275-6w44

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 6877647e8aff18a697d49015dd6273a9886db17e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:06:58 +02:00
Waldemar Brodkorb
b4b98ee9ee package/asterisk: update to 20.9.1
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a23518b9d74a8bd66e19b8ffa7175b81dc7dd207)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:06:31 +02:00
Waldemar Brodkorb
3e6d7c9c89 package/asterisk: update to 20.8.1
See here for a ChangeLog:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-20-current.md

20.8.1 contains a fix for CVE-2024-35190. However, the vulnerability
was introduced in commit 68a49128253f677f9e1b235c70d2316342372f7d
between 20.7.0 and 20.8.0, and Buildroot was using 20.7.0, so we were
not affected by this vulnerability.

Patch 0005 is applied upstream.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 622957a2adb224b8a666472c3a58bc1ade8a2040)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:06:10 +02:00
Julien Olivain
d1ee111aa4 package/asterisk: update patches to be applied with fuzz 0
Commit 8f88a644ed "support/scripts/apply-patches.sh: set the maximum
fuzz factor to 0" reduced the fuzz factor.

Due to this change, asterisk fails to build with output:

    Applying 0004-install-samples-need-the-data-files.patch using patch:
    patching file Makefile
    Hunk #1 FAILED at 779.
    1 out of 1 hunk FAILED -- saving rejects to file Makefile.rej

This commit rebase the package patches on the current package version.
Note: the patch 0005 is unchanged, as it is correct in its current
state.

Fixes:
- http://autobuild.buildroot.org/results/92d/92d58ecb67f11a6eb74695bc1efcc672f69a57a9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a6fabd961058a77622a725e7d58ac3ffb05ce5b6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:06:02 +02:00
Fabrice Fontaine
1c63395ec8 package/asterisk: fix uclibc-ng build
Fix the following uclibc-ng build failure raised since bump to version
20.7.0 in commit 0e6d4d2171 and
2694792e13:

stasis/control.c: In function 'exec_command_on_condition':
stasis/control.c:313:3: warning: implicit declaration of function 'pthread_kill'; did you mean 'pthread_yield'? [-Wimplicit-function-declaration]
  313 |   pthread_kill(control->control_thread, SIGURG);
      |   ^~~~~~~~~~~~
      |   pthread_yield
stasis/control.c:313:41: error: 'SIGURG' undeclared (first use in this function)
  313 |   pthread_kill(control->control_thread, SIGURG);
      |                                         ^~~~~~

Fixes: 0e6d4d2171
 - http://autobuild.buildroot.org/results/d16e4ca4bd26234f84d17da24c04a8c19faba6c5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit ebd44d7c5b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:05:21 +02:00
Waldemar Brodkorb
93ff1abc9a package/asterisk: fix compile issue
Fix a compile issue when libyuv and libjpeg is enabled.
Detection of following function fails:
checking for pjsip_dlg_create_uas_and_inc_lock in -lpjsip... no

In config.log you see that libjpeg is missing.

Fixes:
 http://autobuild.buildroot.net/results/7bed9fc68fc9331ad12942c3eab9742ee8a7a4c4

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 07b7d8708d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:05:08 +02:00
Waldemar Brodkorb
a404097dd0 package/asterisk: bump to 20.7.0
See here for changes:
https://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-20-current.md

There is still an open issue reported upstream:
https://github.com/asterisk/asterisk/issues/671

But it seems it is not reproducible by the asterisk developers, so
update the package so others can make use of it.

Use the external pjsip package, instead of the bundled one.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 0e6d4d2171)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 23:04:52 +02:00
Waldemar Brodkorb
c68ffcb55e package/botan: needs thread support
Botan commit 313e439c786d68bcf374b2cb0edfe3ffd891db94 added a
dependency to pthread.h. Add a dependency to thread support.

Fixes:
 - http://autobuild.buildroot.org/results/205/205d7505803990508bbd545393902789063ababd

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ad6e6f5d598a9311fc9141e4b9b08820562d1792)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 16:55:28 +02:00
James Hilliard
72ef77c836 utils/genrandconfig: allow overriding KCONFIG_PROBABILITY
Tweaking this variable should allow us to get better coverage of
packages with larger dependency trees.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ea6bb507b1d3841be052525936121f7e88c43fbd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 15:21:19 +02:00
Yann E. MORIN
3dd70ef15b utils/genrandconfig: fix fallout of dropping toolchain CSV
Commit 2f260084d577 (utils/genrandconfig: remove support for toolchain
CSV) kept the --no-toolchains-csv option, but in the rework forgot to
keep it as a bool, while argparse default is to expect a string.

Rather than re-introduce the action="store_true" which implies the
argument is a bool, explicit make it a bool.

Fixes: 2f260084d5771728f3340ff6a86a23391133a635

Reported-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4dbb87bb6676b82f34981f6adedccfa03a9667cd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 15:20:56 +02:00
Thomas Petazzoni
82346f7c8e utils/genrandconfig: improve logging
Right now, genrandconfig just spits out the random messages from the
different make invocations, which isn't terribly useful. Instead,
let's redirect the output of make invocations to oblivion, and add
some more high level logging.

As part of this logging, we're interested to see how many iterations
were needed to find a valid configuration, so changed the loop logic
to count from 0 to 100 instead of from 100 to 0 so that we can easily
show the iteration number.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit ce3dedc26b9080399c44d86e14aa1704f7bf563a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 15:19:25 +02:00
Thomas Petazzoni
ef3f407a82 utils/genrandconfig: do not use BR2_BACKUP_SITE for some builds
In order to test that upstream sites are still working, we need to NOT
fallback to sources.buildroot.net for some builds.

As there is anyway a local cache in the autobuilder instances, we need
to do quite a lot of builds without any BR2_BACKUP_SITE configured to
have a chance to catch issues, which is why a 50% chance is used to
unset BR2_BACKUP_SITE.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit da5c25c9f91b17a3c00ff0b35164881f2d1aa425)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 15:19:09 +02:00
Thomas Petazzoni
53b1a482f2 utils/genrandconfig: rework fine-tuning logic
Before calling randpackageconfig/randconfig, we were pre-generating a
snippet of .config with:

 (1) minimal.config
 (2) BR2_CURL/BR2_WGET settings
 (3) some random selection of init system, debug, runtime debug, etc
 (4) enabling BR2_REPRODUCIBLE=y when diffoscope was found

Now that we only use randconfig, this whole fine-tuning is completely
irrelevant, as it gets overridden by "make randconfig".

(1) and (3) above are useless, as randconfig does all the
randomization that is needed.

However, we want to preserve (2) and (4) above, so we re-implement
those fixups, but *after* randconfig has done its job.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 3d33d394c2c9659f8c487929bf45f7daf673e521)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 15:18:18 +02:00
Thomas Petazzoni
d22b11c093 utils/genrandconfig: remove support for toolchain CSV
Now that the support for generating a fully random configuration has
been well-tested, the whole mechanism based on a toolchain CSV isn't
really useful anymore, so let's drop it to simplify the logic.

Note that the autobuilder code still uses --{,no-}toolchains-csv, so we
can't remove those or the autobuilders would fail. Once all supported
branches no longer use those argumetns, we can drop them from the
autobuilder code, then ask people to update their runners, and we will
finally be able to drop those arguments. Eventually.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
[yann.morin.1998@free.fr: keep --{,no-}toolchains-csv and explain why]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2f260084d5771728f3340ff6a86a23391133a635)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 15:16:20 +02:00
Thomas Petazzoni
439eaa9d10 utils/genrandconfig: remove fixups related to untested CT-NG toolchains
We have accumulated a whole bunch of very old fixups to avoid issues
with super old CT-NG toolchains, which we are not testing anymore, so
remove those fixups.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9e3388256811c943d8312db289959b74cae9536e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-17 15:13:02 +02:00
Thomas Petazzoni
6a0257e949 package/python-unittest-xml-reporting: add patch to fix LICENSE file installation
The LICENSE file gets installed directly to the root of $(TARGET_DIR),
which clashes with other packages:

FileExistsError: File already exists: /home/autobuild/autobuild/instance-3/output-1/target/LICENSE

This commit fixes this issue for the python-unittest-xml-reporting
package. Other fixes will be needed for the other patches.

The issue in python-unittest-xml-reporting was introduced in upstream
commit c43427611390fba83ca13fbb5311bd8fece5048f, which first appeared
in v3.1.0. We switched from a pre-3.1.0 version to 3.2.0 in Buildroot
in commit 69ba1562d5, which was merged
in 2023.02.

Fixes:

  http://autobuild.buildroot.net/results/2c91243b440087bbc7d051d65f553f59d05dd207/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 182d3556a6838c01b0d1f4e6a36da84260605298)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-16 12:23:12 +02:00
Thomas Petazzoni
3eb2c46bc4 package/python-huepy: add patch to fix LICENSE file installation
The python-huepy has an incorrect data_files statement in its
setup.py, causing the LICENSE file to be installed directly as
$(TARGET_DIR)/LICENSE. This was detected because several packages were
doing this, and the second package doing
it (python-unittest-xml-reporting, fixed separately) was erroring out
when trying to overwrite this already existing file.

This commit fixes the case of python-huepy by adding a patch that has
been submitted upstream.

There are no autobuilder failures related to python-huepy, but this
was detected while fixing
http://autobuild.buildroot.net/results/2c91243b440087bbc7d051d65f553f59d05dd207/
for python-unittest-xml-reporting.

This bug has been in huepy since at least 2018, so this patch can be
backported to previous Buildroot versions.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4e78b2c8b1109d8a456e426ccf03a02df5f2ee2c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-16 12:22:07 +02:00
Thomas Petazzoni
daaa353029 package/gnu-efi: mark as not supported on ARM soft-float
lib/print.c in gnu-efi contains some floating point computation. On
ARM soft-float configurations, these floating point operations
generate calls to __eabi_*() functions that are provided by
gcc. However, gnu-efi builds some freestanding code, so it doesn't
link with libgcc, and therefore the build fails with:

arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1431:(.text+0x78c): undefined reference to `__aeabi_i2d'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1431:(.text+0x7a0): undefined reference to `__aeabi_dsub'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1431:(.text+0x7a4): undefined reference to `__aeabi_d2f'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1432:(.text+0x7b4): undefined reference to `__aeabi_fcmplt'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1438:(.text+0x7c8): undefined reference to `__aeabi_fmul'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1440:(.text+0x7d4): undefined reference to `__aeabi_fcmpeq'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1444:(.text+0x7f8): undefined reference to `__aeabi_fmul'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1440:(.text+0x808): undefined reference to `__aeabi_fcmpeq'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1440:(.text+0x818): undefined reference to `__aeabi_f2iz'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1451:(.text+0x834): undefined reference to `__aeabi_i2f'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1451:(.text+0x840): undefined reference to `__aeabi_fcmpeq'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1453:(.text+0x858): undefined reference to `__aeabi_fmul'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1451:(.text+0x860): undefined reference to `__aeabi_f2iz'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1451:(.text+0x868): undefined reference to `__aeabi_i2f'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1451:(.text+0x870): undefined reference to `__aeabi_fcmpeq'
arm-buildroot-linux-gnueabi-ld: /output-1/build/gnu-efi-3.0.18//lib/print.c:1451:(.text+0x89c): undefined reference to `__aeabi_f2iz'

Since we don't care about gnu-efi support on ARM soft-float
configurations, let's disable such configurations.

Note that we have chosen to use BR2_ARM_SOFT_FLOAT as we're for now
making this specific to ARM as we're not sure what is the situation on
other CPU architectures (for example RISC-V without FPU maybe). This
can be revisited once we get more data on the behavior on other CPU
architectures that can support soft-float.

Fixes:

  http://autobuild.buildroot.net/results/98d955fd2fcf4a3db1ab46e4f553447031a23b92/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b62f2f7f12a381c2e8d4aeb9562b6dfc87728589)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-09-16 12:21:16 +02:00