Commit Graph

71958 Commits

Author SHA1 Message Date
Dario Binacchi
4b2aabf2df package/snappy: fix compilation error raised by vqtbl1q_u8 instruction
The package compilation for the raspberrypi3_qt5we_defconfig raises the
following error:

In file included from buildroot/output/build/snappy-1.1.10/snappy.cc:29:
buildroot/output/build/snappy-1.2.1/snappy-internal.h: In function ‘snappy::internal::V128 snappy::internal::V128_Shuffle(V128, V128)’:
buildroot/output/build/snappy-1.2.1/snappy-internal.h:109:10: error: ‘vqtbl1q_u8’ was not declared in this scope; did you mean ‘vtbl1_u8’?
  109 |   return vqtbl1q_u8(input, shuffle_mask);
      |          ^~~~~~~~~~
      |          vtbl1_u8
make[4]: *** [CMakeFiles/snappy.dir/build.make:118: CMakeFiles/snappy.dir/snappy.cc.o] Error 1

The issue was raised by commit b3fb0b5b4b076 ("Enable vector byte
shuffle optimizations on ARM NEON") contained in version 1.1.10.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 01f35f8875acc98adb670d789b256790e2418be8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 11:56:32 +02:00
Maxim Kochetkov
fae5c84c3d package/libgeos: bump version to 3.12.2
Changelog: https://github.com/libgeos/geos/releases/tag/3.12.2

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5777bfc0f72db4de0315b753b2a064f017b3d652)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 11:54:51 +02:00
Julien Olivain
f5b363058b support/testing: add kmod runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 48790b43296f45aa7f9f8c6701e94fe86269c241)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 09:23:11 +02:00
Lance Fredrickson
189d9d965c boot/syslinux: fix building with GCC 14.x
Add missing stdio.h include. Without this includes, the build fails
with the following error under GCC 14.x:

../../../com32/lib/syslinux/debug.c: In function ‘syslinux_debug’:
../../../com32/lib/syslinux/debug.c:91:5: error: implicit declaration of function ‘printf’ [-Wimplicit-function-declaration]
   91 |     printf("Dynamic debug unavailable\n");

Signed-off-by: Lance Fredrickson <lancethepants@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3b9d62dac564b6d1bfa5ba5e0dd72e731fd95d55)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 09:07:29 +02:00
Julien Olivain
07659a594b package/octave: add optional openssl support
GNU Octave supports the --with-openssl configure option since v4.0.0.

For reference, commit 40ea68b4b2 "package/octave: new package"
introduced the package at v7.1.0.

This commits adds this optional support.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0e2c2810dc25de0cdc2126851061f9feabe66930)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-28 09:04:05 +02:00
Bernd Kuhls
cc610b2f12 package/exim: security bump version to 4.98
Release notes:
https://lists.exim.org/lurker/message/20240710.155945.8823670d.en.html

Fixes CVE-2024-39929: https://bugs.exim.org/show_bug.cgi?id=3099#c4

Removed patch 0004 due to removal of codesourcery arm/aarch64 toolchains
with commit 53a8c5150e.

Patch 0005 (renamed to 0004) is still necessary with gcc-13.x,
reformatted Upstream trailer.

Removed patches 0006, 0007 & 0008 which are included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1a409fafb0ea24e8e8f07529623d55e8d3435598)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:54:21 +02:00
Bernd Kuhls
f466b9305f package/exim: update patches to be applied with fuzz 0
Commit 8f88a644ed "support/scripts/apply-patches.sh: set the maximum
fuzz factor to 0" reduced the fuzz factor.

Due to this change, exim fails to build with output:

    Applying 0004-exim_lock-fix-lstat-related-build-errors.patch using patch:
    patching file src/exim_lock.c
    Hunk #1 FAILED at 13.
    Hunk #2 succeeded at 27 (offset 1 line).
    1 out of 2 hunks FAILED -- saving rejects to file src/exim_lock.c.rej

This commit rebases the package patches on the current package version
when needed.

Fixes:
http://autobuild.buildroot.net/results/ff27d5ebd7f24ac8cb236b83c67c2c75255e51c6/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Reviewed-by: Yann E. MORIN <yann.morin@orange.com>
Tested-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 20973140c14d528d91ecea12ebac6428d78d3340)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:51:56 +02:00
Thomas Petazzoni
51f827e930 DEVELOPERS: drop Mathieu Audat
Mathieu privately informed me that he no longer has access to the
TS4900 board, he is therefore unable to maintain this board moving
forward. Let's drop his entry from the DEVELOPERS file.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 39d23ce823bed1ab9db25ec32a924980ef4b91c1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:47:03 +02:00
Adrian Perez de Castro
ecd49f4552 package/wpewebkit: add backported patch to fix NEON build
Import a patch that has been backported by upstream to the 2.44 release
branch that fixes the build when the target is an ARM processor that
supports NEON instructions.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8502ac71aad426792aa51923ef0f14b83c4bf2c7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:42:22 +02:00
Bartosz Bilas
1d91c6fda4 package/rauc-hawkbit-updater: add systemd optional dependency
Take the systemd into account if present.

Signed-off-by: Bartosz Bilas <b.bilas@grinn-global.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4aa7a4ad8a6f729ad6ee6baf16f01d657559b3e6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 16:34:01 +02:00
Christian Stewart
78ea31ddd7 package/containerd: bump version to v1.7.18
https://github.com/containerd/containerd/releases/tag/v1.7.18

Fixes #21

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4e01942d83c57ce4973e549afa4735a52394de35)
[Peter: adjust tarball filename for 2024.02.x]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-23 09:42:09 +02:00
Peter Korsgaard
0040095a17 package/openssh: add CVE ignore for CVE-2024-6387
Commit ecc0c1fb12 (package/openssh: disable async-signal-unsafe code in
sshsigdie()) add a patch for CVE-2024-6387 but forgot to add an _IGNORE_CVES
entry.  Fix that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-20 10:26:13 +02:00
Peter Korsgaard
e0a2687421 Update for 2024.02.4
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-13 14:29:13 +02:00
Julien Olivain
e01bb070d9 package/xfsprogs: update Kconfig package homepage URL
The old xfs homepage URL [1] seems defunct at the time of this commit.
The http URL redirects to https, the certificate expired on
2024-01-26. If the certificate expiration date is ignored, the site
shows a "502 Bad Gateway" error.

The package README [2] advertise the homepage as [3].

This commit updates the URL to the new one.

[1] http://xfs.org
[2] https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/tree/README?h=v6.4.0#n12
[3] https://xfs.wiki.kernel.org

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit daa5d775d729efd529ff7ff8c58c0380018f1e42)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-13 13:11:47 +02:00
Fiona Klute
2e34d5638d package/raspberrypi-usbboot: bump version to 20221215-105525
The "msd" (mass storage device) firmware files in 2021.07.01 don't
work with some newer CM4 based devices, the one I had issues with is a
RevPi Connect 4. Updating fixes the issue. Mass storage device mode is
required to flash the eMMC of CM4 devices.

Signed-off-by: Fiona Klute <fiona.klute+wiwa@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fbd9a3f3114ef52d6ff9a14ec2648926909fd46e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-13 12:59:24 +02:00
Aleksandr Makarov
9cddd68f8e board/pine64/rockpro64/linux.fragment: integrate stmmac driver
Currently, the stmmac driver is configured as a module in the defconfig, which
means that the network functionality is not available until the driver module
is manually inserted.

Use extra config fragment to integrate it directly into the kernel, ensuring that network
functionality is available immediately upon boot.

Signed-off-by: Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 54c82a237581dbed74aab2086381ae69b4626cc6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 23:26:07 +02:00
Bernd Kuhls
60495596cd package/ghostscript: security bump version to 10.03.1
Fixes CVE-2024-33869, CVE-2023-52722, CVE-2024-33870, CVE-2024-33871
and CVE-2024-29510.

Release notes:
https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/tag/gs10031

Remove patch which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 515e579567a8e44e8e4c537ba10f49d5b5d732d9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:43:53 +02:00
Bernd Kuhls
5e25a2e865 package/openvpn: security bump version to 2.6.11
Release notes:
https://sourceforge.net/p/openvpn/mailman/message/58786888/

Changelog:
https://github.com/OpenVPN/openvpn/blob/release/2.6/ChangeLog
https://github.com/OpenVPN/openvpn/blob/release/2.6/Changes.rst

Fixes CVE-2024-4877, CVE-2024-5594 & CVE-2024-28882.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b55b1e893ef7584d32aa8882401918aee7e823c7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:42:44 +02:00
Bernd Kuhls
c9f3284cd3 package/znc: security bump version to 1.9.1
Fixes CVE-2024-39844.

Changelog: https://wiki.znc.in/ChangeLog/1.9.1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 01becd31ca25a6be311544e4f6c7f7131b2f7689)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:31:03 +02:00
Bernd Kuhls
ce0af75342 package/znc: bump version to 1.9.0
Removed all patches, they are included in this release.

Bumped gcc dependency to >= 8 according to changelog:
https://wiki.znc.in/ChangeLog/1.9.0

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 9246579f01)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:30:56 +02:00
Bernd Kuhls
55523f5d19 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 9}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2389fb5bbb1adfe37c4b21c4127006dee1dba25a)
[Peter: drop 6.9.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 20:29:31 +02:00
Peter Korsgaard
fed58dac5d Revert "package/libopenssl: no-engine"
This reverts commit c366ecb95e154ef7cc84179915d68654c8c96737.

While the change is correct, it causes quite some fallout from packages
using the ENGINE_* API functions without selecting
BR2_PACKAGE_LIBOPENSSL_ENGINES, so drop it from the stable branch.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 12:23:13 +02:00
Bernd Kuhls
6e5487d739 package/apache: security bump version to 2.4.61
Fixes CVE-2024-39884.

Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.61

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 158c2a000404cfcb3a216054c686d11454a5ef7f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 12:12:09 +02:00
Fiona Klute (WIWA)
6ab6731fa2 package/network-manager: allow building with musl
NetworkManager officially supports building with musl since version
1.30, so the restriction to glibc toolchain is no longer necessary.

[1] 4f7c04eaf9/NEWS (L615)

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8df68d2bb454ff22a32c598e343e63cd7e3c02f6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 10:20:14 +02:00
Yann E. MORIN
657ee644b3 gitlab: add default issue template
This introduces the default issue template, to help users provide issues
that are meaningful, and that will help reproduce the issue.

If needed, we can add more templates in the future.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
[Arnout:
 - add link to mailing list;
 - rephrase "pristine Buildroot";
 - add a checklist item for "I'm using latest commit";
 - add a checklist item for "make clean; make";
 - add formal items for Buildroot commit sha1 and distro.]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 32aacc4737e106a7ddb2f2129d4ab9f2279dcf92)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 00:01:44 +02:00
Yann E. MORIN
a09d7b1d5f package/daq: workaround for upstream changing the archive
Upstream has changed the archive for the 2.0.7 release since we bumped
in c1f820bd88 (package/daq: bump version to 2.0.7). Comparing the old
archive as it is on s.b.o. with the one currently available on upstream,
gives a few deltas, mostly;
  - (C) years changed in comments
  - version string changed from 2.0.6 to 2.0.7
  - changes (that look legit) to autostuff
  - a file dropped (Visual Studio related)

Of course, that means the hashes changed, and no longer match what we
have.

Downloading the file manually and letting wget set the timestamp on it,
reveals the archive is dated 2022-06-08T13:51:59. So, for more than two
years now, we've been relying on the archive we cached on s.b.o.

So, we can't just change the hashes to the new ones, nor can we replace
the archive on s.b.o.

Instead, we use the same trick as was used in c617ebbc97
(package/python-*: fix hashes for cargo-vendored python packages): we
use the actual, real URL with a query parameter as the _SITE, and we set
_SOURCE to a different name so as not to conflict with the previous
archive.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 9e00cceb60e9ac8ec36ec7eb43eb9ef5534b705d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-11 00:01:12 +02:00
Dario Binacchi
544d3116d5 package/libmad: drop GCC's "-fforce-mem" option
The commit fixes the following compilation error:

    i686-buildroot-linux-gnu-gcc.br_real: error: unrecognized command-line option ‘-fforce-mem’

From GCC 4.3 release notes [1]:

    The -fforce-mem option has been removed because it has had no effect
    in the last few GCC releases.

[1] https://gcc.gnu.org/gcc-4.3/changes.html
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 89ba9c5a0b05f119d8f748f52244ebcb6a0dd008)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 19:03:38 +02:00
Dario Binacchi
47caba65a0 package/libmad: update the patches to be applied with fuzz 0
Commit 8f88a644ed7d6 ("support/scripts/apply-patches.sh: set the maximum
fuzz factor to 0") reduced the fuzz factor.

Due to this change, libmad fails to build with output:

    Applying mips-gcc4.4.diff using series:
    patching file fixed.h
    Hunk #1 FAILED at 297.
    1 out of 1 hunk FAILED -- saving rejects to file fixed.h.rej

The package applied the patches in two steps, first the local ones and
then the official ones downloaded from the repository. The commit fixes
the issue by reversing the order of patch application steps.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit b21184a87733f2f2ccee69cade6875c507e439dc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 19:03:35 +02:00
Bernd Kuhls
2ddb885f6b package/apache: security bump version to 2.4.60
Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.60

Fixes CVE-2024-36387, CVE-2024-38472 (Windows-only), CVE-2024-38473,
CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477 &
CVE-2024-39573.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 33de60dbff80e44062ba57aea2489cf4dbd26d02)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 18:55:39 +02:00
Joachim Wiberg
ecc0c1fb12 package/openssh: disable async-signal-unsafe code in sshsigdie()
Import Debian patch[1] for CVE-2024-6387[2].  This disables the unsafe
syslog code path triggered by SIGALARM.

[1] https://salsa.debian.org/ssh-team/openssh/-/blob/master/debian/patches/sshsigdie-async-signal-unsafe.patch
[2] https://marc.info/?l=oss-security&m=171982335024767

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
[Peter: rename, add Upstream tag]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-09 18:47:42 +02:00
Bernd Kuhls
d9b97b2552 package/xmrig: bump version to 6.21.3
Changelog: https://github.com/xmrig/xmrig/blob/master/CHANGELOG.md

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit cd83b50bdca87c74dfd4a4860de52eb645b76394)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 22:27:26 +02:00
Bernd Kuhls
c6797ce3d1 package/vlc: security bump to version 3.0.21
Fixes http://www.videolan.org/security/sb-vlc3021.html

Release notes:
https://code.videolan.org/videolan/vlc/-/blob/3.0.21/NEWS

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit b752d0e4cc78a921ba08cd891f68ef80fc251128)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 22:24:12 +02:00
Peter Korsgaard
f5a0a04783 package/fluent-bit: security bump to version 2.2.3
Fixes the following security vulnerability:

- CVE-2024-4323: A memory corruption vulnerability in Fluent Bit versions
  2.0.7 thru 3.0.3.  This issue lies in the embedded http server’s parsing
  of trace requests and may result in denial of service conditions,
  information disclosure, or remote code execution.

https://fluentbit.io/announcements/v2.2.3/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 13:26:53 +02:00
Dario Binacchi
1899589f66 package/libopenssl: no-engine
Even though the "no-engine" option effectively disables the compilation
of the engine, it still creates the installation directory, which ends up
being empty. For this reason, the patch does not remove the hook for
removing the directory if the BR2_PACKAGE_LIBOPENSSL_ENGINES option is
not enabled.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 623d3bbe43e9193aa8e3395367d01af59071b859)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:51:45 +02:00
Dario Binacchi
14b1bac2b1 package/libopenssl: use `no-apps' configuration option
With version 3.2.0 of OpenSSL, the "no-apps" configuration option was
added, which does not build apps, e.g. the openssl program. This is
handy for minimization. This option also disables tests.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e0bdc5ddb8a64e89709db72ad550334618cc0c0c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:51:36 +02:00
Dario Binacchi
440030c609 package/libopenssl: use consistent logic
The patch expresses the same condition in positive logic, consistent
with what has been coded in other parts of the module and generally
in Buildroot.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c2761b52663155e9247dc23350f7159493837d0e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:48:52 +02:00
Dario Binacchi
8fed4803e3 package/libopenssl: replace engines-1.1 to engines-3
The bump to version 3.0.9 in commit 3c66f65a6a (package/libopenssl:
bump version to 3.0.9), and all subsequent updates, forgot to change
the directory name, which remained that of version 1.1. The patch
fixes the directory name to be consistent with the version.

In the case the library was not built with engine support, this resulted
in the presence of files in the root file system that should have been
removed.

Fixes: 3c66f65a6a
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7f9291bfe4db9f840fe0e3c4b0df2ff4acd9560c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:42:29 +02:00
Dario Binacchi
5a7cffde18 package/libopenssl: use $(RM) instead of rm
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b39286acfc134d66d56b78720c4a6a7547e16b16)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:41:51 +02:00
Brandon Maier
4fce66e217 support/scripts/apply-patches: fallback $TAR to tar
Commit f77d698f83 changed apply-patches to
use $TAR instead of `tar`, but did not define a fallback if $TAR is not
defined. This results in an error when calling apply-patches.sh from
outside Buildroot's Makefile. Our team uses this script to setup local
checkouts of Buildroot package's with patches for development.

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 118c824b565442bfe1d4ae1c0a39d330e624b854)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:40:16 +02:00
Yann E. MORIN
ebc3216762 support/scripts/apply-patches: use appropriate TAR
Note that here, it is in fact not really relevant. We only extract a
tarball, and we don't use any "modern" or GNU-only options like
--strip-components. However, for consistency it's better to use the same
tar everywhere.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: "Maier, Brandon L Collins" <Brandon.Maier@collins.com>
Reviewed-by: brandon.maier@collins.com
[Arnout: quote TAR="..."]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit f77d698f83)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 08:40:13 +02:00
Titouan Christophe
9068c31eff package/redis: bump to v7.2.5
From the release notes:
================================================================================
Redis 7.2.5    Released Thu 16 May 2024 12:00:00 IST
================================================================================

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent.

Bug fixes
=========

* A single shard cluster leaves failed replicas in CLUSTER SLOTS instead of removing them (#12824)
* Crash in LSET command when replacing small items and exceeding 4GB (#12955)
* Blocking commands timeout is reset due to re-processing command (#13004)
* Conversion of numbers in Lua args to redis args can fail. Bug introduced in 7.2.0 (#13115)

Bug fixes in CLI tools
======================

* redis-cli: --count (for --scan, --bigkeys, etc) was ignored unless --pattern was also used (#13092)
* redis-check-aof: incorrectly considering data in manifest format as MP-AOF (#12958)

Signed-off-by: Titouan Christophe <titouanchristophe@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 61a7edc0c89b336d63551469f5a2291418fdbc19)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:33:32 +02:00
Bernd Kuhls
b4b87277b6 package/tor: bump version to 0.4.8.12
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/stable-release-0-4-8-12/13060

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b0fe6d1be9b306addf45e3722f45daa2de4ac4e5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:28:12 +02:00
Bernd Kuhls
1a8676d72c package/{mesa3d, mesa3d-headers}: bump version to 24.0.9
Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2024-May/000761.html
https://lists.freedesktop.org/archives/mesa-announce/2024-June/000764.html

Removed two patches which are included in this version 24.0.8.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c8057515a429d531f735c72042656c3bd0efa700)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:26:19 +02:00
Dario Binacchi
a157cf854f package/openssh: fix build failure with gcc 11.x
The patch fix the following build failure:

output/host/bin/arm-buildroot-linux-uclibcgnueabihf-gcc -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
-D_FILE_OFFSET_BITS=64  -Os -g0  -pipe -Wno-error=format-truncation -Wall -Wextra -Wpointer-arith
-Wuninitialized -Wsign-compare -Wformat-security -Wsizeof-pointer-memaccess -Wno-pointer-sign
-Wno-unused-parameter -Wno-unused-result -Wimplicit-fallthrough -Wmisleading-indentation
-fno-strict-aliasing -D_FORTIFY_SOURCE=2 -ftrapv -fzero-call-used-regs=used -fno-builtin-memset
-fstack-protector-strong   -fPIC -I. -I.. -I. -I./.. -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
-D_FILE_OFFSET_BITS=64 -D_XOPEN_SOURCE=600 -D_BSD_SOURCE -D_DEFAULT_SOURCE -D_GNU_SOURCE
-DHAVE_CONFIG_H -c port-aix.c
sha2.c: In function ‘SHA256Init’:
sha2.c:360:1: sorry, unimplemented: ‘-fzero-call-used-regs’ not supported on this target
  360 | }
      | ^
make[3]: *** [Makefile:106: sha2.o] Error 1
make[3]: *** Waiting for unfinished jobs....
make[2]: *** [Makefile:199: openbsd-compat/libopenbsd-compat.a] Error 2

This commit applies an upstream patch that improves the detection of
-fzero-call-used-regs=used.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4aff617b9591dc46d965eaa00f9701943e0cd723)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-08 07:20:04 +02:00
Peter Korsgaard
cb7e586019 package/php: security bump to version 8.2.21
Fixes CVE-2024-4577, CVE-2024-5458, CVE-2024-5585

Changelog: https://www.php.net/ChangeLog-8.php#8.2.21

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-06 22:56:21 +02:00
Julien Olivain
36d6d1de0b support/testing: add ntp runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit c986928affc59f5bbefae8c7af963eaf45fdc8c8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-06 22:44:56 +02:00
Francois Perrad
300cc2ae74 package/ntp: bump to version 4.2.8p18
diff COPYRIGHT:
    -* Copyright (c) Network Time Foundation 2011-2023                     *
    +* Copyright (c) Network Time Foundation 2011-2024                     *

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 49bd6bb638ff73eae3b486b207201382d46a6c05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-07-06 22:44:06 +02:00
Julien Olivain
7893c19991 package/octave: add optional libcurl support
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 913a6c7788ef2dcc76860e45d2abe70cce812b9d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-06-24 09:41:18 +02:00
Bernd Kuhls
dda4387b2c {linux, linux-headers}: bump 6.{1, 6}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7dd7a6820551278d6c002d2bda394364f9932946)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-06-23 17:50:14 +02:00
Yann E. MORIN
1f4c382e1f package/sentry-cli: needs pkgconf and openssl
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2bf45fa99c09302c4d313b79ae7b165a958e354e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-06-23 10:57:09 +02:00