Commit Graph

63778 Commits

Author SHA1 Message Date
Fabrice Fontaine
9353c93a4f package/libbytesize: bump to version 2.7
https://github.com/storaged-project/libbytesize/releases/tag/2.7
https://github.com/storaged-project/libbytesize/blob/2.7/NEWS.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 09:19:32 +02:00
Fabrice Fontaine
490768cc8c package/libwebsockets: fix openssl build without threads
Fix the following openssl build failure without threads raised since
bump to version 4.3.1 in commit 3a9cf51ab3 and
471dbf5280:

In file included from /home/buildroot/autobuild/instance-0/output-1/build/libwebsockets-4.3.1/include/libwebsockets.h:661,
                 from /home/buildroot/autobuild/instance-0/output-1/build/libwebsockets-4.3.1/lib/core/./private-lib-core.h:140,
                 from /home/buildroot/autobuild/instance-0/output-1/build/libwebsockets-4.3.1/lib/plat/unix/unix-misc.c:28:
/home/buildroot/autobuild/instance-0/output-1/build/libwebsockets-4.3.1/include/libwebsockets/lws-genhash.h:85:18: error: field 'ctx' has incomplete type
   85 |         HMAC_CTX ctx;
      |                  ^~~

Fixes:
 - http://autobuild.buildroot.org/results/2ae9e3249b6fcc9e6c30e7783e264fc6599e61df

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 09:14:48 +02:00
Fabrice Fontaine
2025d665ec package/libwebsockets: renumber patches
Fix wrong patch number added by commit
2097e1ba39

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 09:14:45 +02:00
Fabrice Fontaine
107cff4616 package/i2pd: add I2PD_CPE_ID_VENDOR
cpe:2.3🅰️i2pd:i2pd is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ai2pd%3Ai2pd

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 00:23:02 +02:00
Fabrice Fontaine
6f9283d696 package/assimp: add ASSIMP_CPE_ID_VENDOR
cpe:2.3🅰️assimp:assimp is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aassimp%3Aassimp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 00:23:00 +02:00
Fabrice Fontaine
33677fb46e package/wpa_supplicant: fix ifupdown-scripts build
Fix the following build failure with ifupdown-scripts and
BR2_PER_PACKAGE_DIRECTORIES raised since commit
eed183e67e:

ln -sf ../if-up.d/wpasupplicant /nvmedata/autobuild/instance-11/output-1/per-package/wpa_supplicant/target/etc/network/if-down.d/wpasupplicant
ln: failed to create symbolic link '/nvmedata/autobuild/instance-11/output-1/per-package/wpa_supplicant/target/etc/network/if-down.d/wpasupplicant': No such file or directory

Fixes:
 - http://autobuild.buildroot.org/results/fb35c29a966e21a29df5923e6d27ca372a4b4909

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 00:21:46 +02:00
Kris Bahnsen
c74332c780 package/wilc-driver: fix kconfig syntax
Sub-options SPI and SDIO weren't rendering as nested options for
wilc-driver, instead showing on the same indent level. Move the
comment and depends on to bottom of file to correct this.

Fixes: 1a47c42b33 ("package/wilc-driver: add missing BR2_LINUX_KERNEL dependency")
Signed-off-by: Kris Bahnsen <kris@embeddedTS.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 00:06:32 +02:00
Fabrice Fontaine
e23b230a20 package/ola: fix build with musl 1.2.3
Fix the following build failure with musl 1.2.3:

ola/AutoStart.cpp: In function 'ola::network::TCPSocket* ola::client::ConnectToServer(short unsigned int)':
ola/AutoStart.cpp:116:12: error: invalid cast from type 'std::nullptr_t' to type 'char*'
  116 |            reinterpret_cast<char*>(NULL));
      |            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/88be323e64f66433cabc962e719307b5fb6a6177

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 00:05:44 +02:00
Fabrice Fontaine
33599d5f35 package/openssl: fix libressl dependency
libressl can be built with uclibc on noMMU since bump to version 3.0.2
in commit 26f42106e8 and
f542e84c85

However, uclibc-ng doesn't provide __register_atfork without NPTL
resulting in the following libressl build failure:

/nvmedata/autobuild/instance-28/output-1/host/lib/gcc/arceb-buildroot-linux-uclibc/10.3.0/../../../../arceb-buildroot-linux-uclibc/bin/ld: ../../tls/libtls.a(arc4random.c.o): in function `_rs_stir':
arc4random.c:(.text+0x50c): undefined reference to `__register_atfork'

So fix the dependency and, while at it, drop the double negation for
readability

Fixes:
 - http://autobuild.buildroot.org/results/2fa4fa10cf19f1f942b6b49b5f6f05339c008cd4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-17 00:04:02 +02:00
Vincent Stehlé
019d4b312d support/testing: add test for msr-tools
Add a simple test to verify that msr-tools are working.

The test needs to build a custom x86_64 kernel with support for CPUID and
MSR.

As the TSC_AUX MSR is emulated on qemu we can use it to test that a value
written with wrmsr can indeed be read back with rdmsr.

Signed-off-by: Vincent Stehlé <vincent.stehle@laposte.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 23:48:25 +02:00
Vincent Stehlé
49fde7057e support/testing: add test for pixz
Add a simple compress-uncompress test to verify that pixz is working.

Signed-off-by: Vincent Stehlé <vincent.stehle@laposte.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 23:44:04 +02:00
Fabrice Fontaine
2092909249 package/suricata: security bump to version 6.0.6
Various security, performance, accuracy, and stability issues have been
fixed.

https://forum.suricata.io/t/suricata-6-0-6-and-5-0-10-released

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:37:09 +02:00
Fabrice Fontaine
dbc2d3a827 package/mbedtls: security bump to version 2.28.1
Fix CVE-2022-35409: Buffer overread in DTLS ClientHello parsing.

https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/advisories/mbedtls-security-advisory-2022-07.md
https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:37:06 +02:00
Fabrice Fontaine
5deea4be64 package/python-bottle: security bump to version 0.12.21
- Fix CVE-2022-31799: Bottle before 0.12.20 mishandles errors during
  early request binding.
- Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:37:04 +02:00
Adrian Perez de Castro
008ab9474e package/webkitgtk: security bump to version 2.36.4
Bugfix release, fixes a WebKitWebProcess leak, MPRIS/MediaSession
support, adds a missing ATSPI a11y interface, and security patches
for CVE-2022-22677 and CVE-2022-26710.

Release notes:

  https://webkitgtk.org/2022/07/05/webkitgtk2.36.4-released.html

Accompanying security advisory:

  https://webkitgtk.org/security/WSA-2022-0006.html

One patch is now included in the packaged release, and another with a
build fix imported, which is actually a revert of a patch that made it
into the release but can cause linking issues when using LTO.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:34:46 +02:00
Adrian Perez de Castro
8cd727c3af package/wpewebkit: security bump to version 2.36.4
Bugfix release, fixes a WPEWebProcess leak, MPRIS/MediaSession support,
adds a missing ATSPI a11y interface, and security patches for
CVE-2022-22677 and CVE-2022-26710.

Release notes:

  https://wpewebkit.org/release/wpewebkit-2.36.4.html

Accompanying security advisory:

  https://wpewebkit.org/security/WSA-2022-0006.html

One patch is not included in the packaged release, and another with a
build fix imported, which is actually a revert of a patch that made it
into the release but can cause linking issues when using LTO.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:34:43 +02:00
Fabrice Fontaine
5a0a9227ba package/gnupg2: security bump to version 2.3.7
Fix CVE-2022-34903: GnuPG through 2.3.6, in unusual situations where an
attacker possesses any secret-key information from a victim's keyring
and other constraints (e.g., use of GPGME) are met, allows signature
forgery via injection into the status line.

https://lists.gnupg.org/pipermail/gnupg-announce/2022q3/000474.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:32:05 +02:00
Fabrice Fontaine
868181108a package/gnupg2: drop unrecognized option
--disable-regex has been dropped since version 2.2.22 and
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=ba247a114c75a84473c11c1484013b09fbb9bcd1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-07-16 17:32:03 +02:00
Peter Korsgaard
5645990b88 {linux, linux-headers}: bump 4.{9, 14, 19}.x / 5.{4, 10, 15, 17}.x series
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 18:38:46 +02:00
Fabrice Fontaine
aa2d101d02 package/flatbuffers: bump to version 2.0.6
FLATBUFFERS_FLATC_EXECUTABLE must be set since
a592f4c89e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 18:38:29 +02:00
Bartosz Bilas
82586262f4 package/python-esptool: bump version to 4.1
Signed-off-by: Bartosz Bilas <bartosz.bilas@hotmail.com>
Signed-off-by: Bartosz Bilas <b.bilas@grinn-global.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 18:37:13 +02:00
Fabrice Fontaine
d2f958bbab package/liburing: bump to version 2.2
- Update hash of LICENSE (lines wrapped by
  56066e7a41)
- Update hash of README (changes not related to license)

https://github.com/axboe/liburing/blob/liburing-2.2/CHANGELOG

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 18:36:28 +02:00
Fabrice Fontaine
2943aea01e package/libidn: bump to version 1.41
Update hash of COPYINGv3 (https URLs are used since
d66411c378)

https://gitlab.com/libidn/libidn/-/blob/v1.41/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 18:36:10 +02:00
Fabrice Fontaine
83387dadf7 package/whois: bump to version 5.5.13
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 18:35:09 +02:00
Fabrice Fontaine
14da23e861 package/mutt: bump to version 2.2.6
This is a bug-fix release, fixing a variety of small issues.

https://gitlab.com/muttmua/mutt/-/blob/mutt-2-2-6-rel/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 18:34:58 +02:00
Bernd Kuhls
e3b5e6684a package/php: security bump version to 8.1.8
Changelog: https://www.php.net/ChangeLog-8.php#8.1.8

Fixes CVE-2022-31627.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 08:47:07 +02:00
Bernd Kuhls
274dd1db3c package/perl-crypt-openssl-rsa: bump version to 0.33
Removed md5 hash, reformatted license hash.

Changelog:
https://github.com/toddr/Crypt-OpenSSL-RSA/blob/master/Changes

This bump fixes a build error with LibreSSL 3.5.

Fixes:
http://autobuild.buildroot.net/results/6625daef1a9d44b9925aecd6e98e3a59bc2ce8f4/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 08:46:52 +02:00
Bernd Kuhls
c38ea2e43a package/Config.in: move pipewire to 'Audio and video applications'
The previous location 'Libraries / Graphics' does not fit the purpose
of this package, we display it next to Pulseaudio instead.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 08:46:31 +02:00
Bernd Kuhls
16e2b05ff1 package/pipewire: bump version to 0.3.54
Changelog:
https://gitlab.freedesktop.org/pipewire/pipewire/-/blob/master/NEWS

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 08:45:40 +02:00
Bernd Kuhls
e2418feca7 package/libdrm: bump version to 2.4.112
Release notes:
https://lists.freedesktop.org/archives/dri-devel/2022-July/362994.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 08:45:30 +02:00
Bernd Kuhls
253f24c8c7 package/alsa-lib: bump version to 1.2.7.2
Changelog: https://www.alsa-project.org/wiki/Changes_v1.2.7.1_v1.2.7.2

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 08:44:44 +02:00
Francois Perrad
5f96671656 package/lighttpd: bump to version 1.4.65
remove upstream patch

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 22:25:24 +02:00
Francois Perrad
76625df052 package/pango: bump to version 1.50.8
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 22:23:02 +02:00
Peter Korsgaard
9cf73b3fe1 package/libopenssl: security bump to version 1.1.1q
Fixes the following security issues:

AES OCB fails to encrypt some bytes (CVE-2022-2097)
===================================================

Severity: MODERATE

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
implementation will not encrypt the entirety of the data under some
circumstances.  This could reveal sixteen bytes of data that was
preexisting in the memory that wasn't written.  In the special case of
"in place" encryption, sixteen bytes of the plaintext would be revealed.

Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
they are both unaffected.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 22:22:55 +02:00
Fabrice Fontaine
d2286690ba package/protobuf-c: add PROTOBUF_C_CPE_ID_VENDOR
cpe:2.3🅰️protobuf-c_project:protobuf-c is a valid CPE identifier for
this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aprotobuf-c_project%3Aprotobuf-c

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 11:02:22 +02:00
Francois Perrad
298d3e2c7e package/luarocks: bump to version 3.9.1
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 11:00:16 +02:00
Francois Perrad
350e866589 package/4th: bump to version 3.64.1
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 10:59:31 +02:00
Francois Perrad
72ea8185b0 package/ethtool: bump to version 5.18
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 10:59:19 +02:00
Bernd Kuhls
73491bf4ec package/alsa-lib: bump version to 1.2.7.1
Changelog: https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1

Removed patch which was applied upstream:
92fff4e9d0

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 09:37:27 +02:00
Michael Vetter
3ad7ba90c0 package/libstrophe: bump to version 0.12.1
Remove upstreamed patch 0001-fix-ssize_t.patch

Signed-off-by: Michael Vetter <jubalh@iodoru.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 09:37:00 +02:00
Bernd Kuhls
227b162728 package/dtv-scan-tables: bump version
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 09:35:01 +02:00
Bernd Kuhls
70532a8e09 package/tvheadend: bump version
Drop patches included in upstream version.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 09:34:32 +02:00
Bernd Kuhls
f941dfb61f package/x264: bump version
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 09:34:12 +02:00
Fabrice Fontaine
a5adc9b658 package/libcurl: fix build without sched_yield
Fix the following build failure without sched_yield raised since bump to
version 7.84.0 in commit b034109dd6:

In file included from easy.c:89:
easy_lock.h: In function 'curl_simple_lock_lock':
easy_lock.h:56:7: error: implicit declaration of function 'sched_yield' [-Werror=implicit-function-declaration]
   56 |       sched_yield();
      |       ^~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/fbc80a0002d640210c81a4c518856c02669059b7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Baruch Siach <baruch@tkos.co.il>
Tested-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 09:33:40 +02:00
Fabrice Fontaine
b1d6180442 package/evtest: bump to version 1.35
- Drop patches (already in version)
- host-pkgconf is not needed since
  https://cgit.freedesktop.org/evtest/commit/?id=2cebc0ab5c36c4f81d35677c46b245de849ed062
- Update indentation in hash file (two spaces)

https://lists.freedesktop.org/archives/input-tools/2022-May/001578.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-08 09:19:29 +02:00
Neal Frager
b38fff43a7 board/zynqmp/kria/kv260/uboot.fragment: add additional uboot build options
This patch adds additional uboot build options that are
required for kria k26 soms.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-07 17:10:37 +02:00
Bernd Kuhls
b3990050c8 package/x11r7/xkeyboard-config: bump version to 2.36
Release notes: https://cgit.freedesktop.org/xkeyboard-config/tree/NEWS

Upstream switched to meson.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-07 15:18:37 +02:00
Bernd Kuhls
e4ff284ba8 package/libvpx: bump version to 1.12.0
Changelog: https://github.com/webmproject/libvpx/blob/main/CHANGELOG

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-07 15:18:01 +02:00
Bernd Kuhls
d83565fb68 package/libass: bump version to 0.16.0
Changelog: https://github.com/libass/libass/blob/master/Changelog

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-07 15:17:47 +02:00
Bernd Kuhls
e2b61502f0 package/python3: bump version to 3.10.5
Release notes:
https://docs.python.org/release/3.10.5/whatsnew/changelog.html#python-3-10-5-final

Drop md5 hash.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-07 15:16:44 +02:00