Commit Graph

62761 Commits

Author SHA1 Message Date
James Hilliard
5011081550 package/gst1-libav: bump version to 1.20.3
Drop patch which is now upstream.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 88d70d2c2b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:32:31 +02:00
James Hilliard
2742cf49b6 package/gst1-devtools: bump version to 1.20.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6bf46fc5cc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:32:31 +02:00
James Hilliard
c6a20a9d32 package/gst1-plugins-ugly: bump version to 1.20.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2d230792e3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:32:31 +02:00
James Hilliard
4b53df1729 package/gst1-plugins-bad: bump version to 1.20.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 65852010cd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:32:31 +02:00
James Hilliard
7070762da9 package/gst1-plugins-good: security bump to version 1.20.3
Fixes the following security issues:

- avidemux: Fix integer overflow resulting in heap corruption in DIB buffer
  inversion code
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/2609

- matroskademux: Avoid integer-overflow resulting in heap corruption in
  WavPack header handling code
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/2613

- matroskademux, qtdemux: Fix integer overflows in zlib/bz2/etc
  decompression code
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/2611

- smpte: Fix integer overflow with possible heap corruption in GstMask
  creation
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/2605

- smpte: integer overflow with possible heap corruption in GstMask creation
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1231

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ce4a549dbe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:32:31 +02:00
James Hilliard
c8f5b29805 package/gst1-plugins-base: bump version to 1.20.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b1a2a28460)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:32:30 +02:00
James Hilliard
49cf74f457 package/gstreamer1: bump to version 1.20.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d8376fc31e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:32:30 +02:00
Fabrice Fontaine
1597bcd136 package/libsndfile: fix libsndfile.pc
Fix the following build failure with libsamplerate or minimodem raised
since bump to version 1.1.0 in commit
c59a9d12b7:

powerpc-buildroot-linux-uclibc-gcc.br_real: error: EXTERNAL_MPEG_LIBS@: No such file or directory

Add host-pkgconf dependency to avoid the following build failure when
running autoreconf:

configure.ac:345: error: macro PKG_INSTALLDIR is not defined; is a m4 file missing?
m4/ax_require_defined.m4:35: AX_REQUIRE_DEFINED is expanded from...

Fixes:
 - http://autobuild.buildroot.org/results/6de2d7634b1958693b7cf96fbcc79121f92347e9
 - http://autobuild.buildroot.org/results/bf66b19cacd6394957f534035af647ddd8037d60

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit affabe47a2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:24:23 +02:00
Fabrice Fontaine
50fda39538 package/libsndfile: security bump to version 1.1.0
Fix the following security issues:
 - Heap buffer overflow in wavlike_ima_decode_block()
 - Heap buffer overflow in msadpcm_decode_block()
 - Heap buffer overflow in psf_binheader_readf()
 - Index out of bounds in psf_nms_adpcm_decode_block()
 - Heap buffer overflow in flac_buffer_copy()
 - Heap buffer overflow in copyPredictorTo24()
 - Uninitialized variable in psf_binheader_readf()

Drop patch (already in version)

While at it, also drop mention of CVE-2018-13419 which is correctly
tagged as only affecting version 1.0.28 in NVD NIST database:
https://nvd.nist.gov/vuln/detail/CVE-2018-13419

https://github.com/libsndfile/libsndfile/releases/tag/1.1.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c59a9d12b7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:24:21 +02:00
Angelo Compagnucci
f431001592 package/cups: security bump to version 2.4.2
Fixes CVE-2022-26691
https://github.com/OpenPrinting/cups/blob/master/CHANGES.md

Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 433fd541ea)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:18:19 +02:00
Angelo Compagnucci
a431164d4f package/cups: bump to version 2.4.1
NOTICE hash is changed due to a copyright year update.

Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit bac3eadda8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:18:01 +02:00
Fabrice Fontaine
2a01961719 package/paxtest: disable on microblaze
Disable paxtest on microblaze to avoid the following build failure:

shlibtest.c:9:1: error: requested alignment '65536' exceeds object file maximum 32768
    9 | char shbss[PAGE_SIZE_MAX] __pagealigned;
      | ^~~~

Updating second patch to set PAGE_SIZE_MAX to 32768 will raise another
build failure:

/tmp/cccMSYDr.s: Assembler messages:
/tmp/cccMSYDr.s: Error: PC relative branch to label buf which is not in the instruction space

Fixes:
 - http://autobuild.buildroot.org/results/aba489143b4017617f67c1012bba1f4687708380

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit abfca98ea2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:16:01 +02:00
James Hilliard
8cd128da92 package/{webkitgtk, wpewebkit}: select debugutils for multimedia
When using webkit with multimedia support the fakevideosink element
is used in some places, as such we should select debugutils which
provides fakevideosink when building with multimedia support.

See:
12086bcde7/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp (L3863)

Additionally webkit may also use the fpsdisplaysink element which
is also provided by debugutils.

See:
12086bcde7/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp (L3897)

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Acked-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e826142874)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-22 08:14:20 +02:00
Peter Korsgaard
2ccfe0066e package/wireguard-linux-compat: bump version to 1.0.20211208
For details, see the announcement:
https://lists.zx2c4.com/pipermail/wireguard/2021-December/007369.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit df27a9daa6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 23:50:18 +02:00
Nicolas POIROT
e924e351f6 docs/manual: fix configurations listing command
Signed-off-by: Nicolas POIROT <ni.poirot@laposte.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5c5f30cbc7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 23:43:45 +02:00
Fabrice Fontaine
8f6aebdb2e package/ecryptfs-utils: add libgpgme optional dependency
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit e122d962a1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 19:09:32 +02:00
Fabrice Fontaine
59e7917e61 package/ecryptfs-utils: add pkcs11-helper optional dependency
pkcs11-helper is an optional dependency which needs openssl

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit f90061fc38)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 19:09:28 +02:00
Fabrice Fontaine
c3a3cf97e9 package/fxload: fix static build
Fix the following static build failure:

/home/buildroot/autobuild/instance-3/output-1/host/bin/sh4-buildroot-linux-musl-gcc -o fxload ezusb.o main.o
/home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/sh4-buildroot-linux-musl/10.3.0/../../../../sh4-buildroot-linux-musl/bin/ld: /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/sh4-buildroot-linux-musl/10.3.0/libgcc.a(unwind-dw2.o): in function `size_of_encoded_value':
/home/buildroot/autobuild/instance-3/output-1/build/host-gcc-final-10.3.0/build/sh4-buildroot-linux-musl/libgcc/../../../libgcc/unwind-pe.h:89: undefined reference to `abort'

Fixes:
 - http://autobuild.buildroot.org/results/bca28d7a6d2b324fb61fe99b8af4b86caa2350ee

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit dbfb753749)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 19:03:30 +02:00
Fabrice Fontaine
1f484313c5 package/libtalloc: fix build wihout SSP
Fix the following build failure without SSP raised since the addition of
the package in commit f0d37e275a:

/home/autobuild/autobuild/instance-5/output-1/host/lib/gcc/i686-buildroot-linux-musl/9.4.0/../../../../i686-buildroot-linux-musl/bin/ld: talloc.c.5.o: in function `_vasprintf_tc':
talloc.c:(.text+0x427d): undefined reference to `__stack_chk_fail_local'

Fixes:
 - http://autobuild.buildroot.org/results/e221bde25c7622db99761d0adcd56663296beb15

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 6a8dae6ddd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 19:01:21 +02:00
Fabrice Fontaine
2d021a7e71 package/libmodsecurity: needs dynamic library with libcurl and mbedtls
libmodsecurity embeds several mbedtls source files since version 3.0.0
and
a3ae686f25
resulting in the following static build failure if curl is built with
mbedtls support:

/home/buildroot/autobuild/instance-0/output-1/host/opt/ext-toolchain/m68k-buildroot-uclinux-uclibc/bin/ld.real: /home/buildroot/autobuild/instance-0/output-1/host/bin/../m68k-buildroot-uclinux-uclibc/sysroot/usr/lib/libmbedcrypto.a(md5.c.o): in function `mbedtls_md5_free':
md5.c:(.text+0x16): multiple definition of `mbedtls_md5_free'; ../../src/.libs/libmodsecurity.a(libmbedtls_la-md5.o):md5.c:(.text+0x16): first defined here

Fixes:
 - http://autobuild.buildroot.org/results/98472a3a41cdbcb3d02289a437074a267f4b2e8e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 9fc652a373)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 18:35:54 +02:00
Fabrice Fontaine
a087851b4e package/procrank_linux: fix static build
Pass TARGET_CFLAGS which will contain -static to fix the following
static build failure:

/home/buildroot/autobuild/instance-0/output-1/host/bin/sh4a-buildroot-linux-musl-gcc -Wall procrank.c -Ilibpagemap/include -Llibpagemap -lpagemap -o procrank
/home/buildroot/autobuild/instance-0/output-1/host/lib/gcc/sh4a-buildroot-linux-musl/10.3.0/../../../../sh4a-buildroot-linux-musl/bin/ld: /home/buildroot/autobuild/instance-0/output-1/host/lib/gcc/sh4a-buildroot-linux-musl/10.3.0/libgcc.a(unwind-dw2.o): in function `size_of_encoded_value':
/home/buildroot/autobuild/instance-0/output-1/build/host-gcc-final-10.3.0/build/sh4a-buildroot-linux-musl/libgcc/../../../libgcc/unwind-pe.h:89: undefined reference to `abort'

Fixes:
 - http://autobuild.buildroot.org/results/8eccc34c99a75501179fe93a80646cc684261ff4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 22b7fb8a8d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 18:26:54 +02:00
Fabrice Fontaine
a1ccba72dd package/sofia-sip: security bump to version 1.13.8
Fix CVE-2022-31001, CVE-2022-31002 and CVE-2022-31003:
https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-79jq-hh82-cv9g
https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-g3x6-p824-x6hm
https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8w5j-6g2j-pxcp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit d4b47d41ca)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 18:24:21 +02:00
Fabrice Fontaine
2f7b6e3990 package/sofia-sip: fix version
Fix version to better match what is expected by NVD NIST database,
release-monitoring.org as well as upstream github
(https://github.com/freeswitch/sofia-sip/tags)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 978800fadb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 18:24:12 +02:00
Fabrice Fontaine
2ac47218c6 package/sofia-sip: add SOFIA_SIP_CPE_ID_VENDOR
cpe:2.3🅰️signalwire:sofia-sip is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Asignalwire%3Asofia-sip

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit b77ee6ce55)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 18:24:06 +02:00
Angelo Compagnucci
2a066059d6 package/wpa_supplicant: fixing "Invalid configuration line"
Default configuration file is wrong for the default compiling options.

Fixes:

Successfully initialized wpa_supplicant
Line 1: unknown global field 'ctrl_interface=/var/run/wpa_supplicant'.
Line 1: Invalid configuration line
'ctrl_interface=/var/run/wpa_supplicant'.
Failed to read or parse configuration '/etc/wpa_supplicant.conf'.

Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit a76294cd6c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 18:09:50 +02:00
Fabrice Fontaine
aee9de937d package/qdecoder: security bump to version 12.1.0
This is a maintenance release includes important security updates that
fixes possible vulnerability in URL decoding (see the report attached
below). All the qDecoder users are recommended to upgrade to this
version as soon as possible.

Fix CVE-2022-32265

Update hash of COPYING (change in year and URL removed:
51bdcc2c15
745878212d)

https://github.com/wolkykim/qdecoder/releases/tag/v12.1.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c79d8cb72c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 18:00:30 +02:00
Bernd Kuhls
4f8f9c1506 package/postgresql: bump version to 14.4
Release notes:
https://www.postgresql.org/about/news/postgresql-144-released-2470/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2579cc2cb3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:34:12 +02:00
Nicolas Cavallari
6ad9faf26a package/avahi: fix GNUism in S05avahi-setup.sh
This script uses "chown user.group" instead of the POSIX "chown
user:group".  The first syntax is a deprecated GNU extension.
Since coreutils 9.1, chown started issuing a warning when this syntax is
used¹.

The result is that if both avahi and coreutils are enabled, this message
appears during boot:

chown: warning: '.' should be ':': 'avahi.avahi'

[1] https://git.savannah.gnu.org/cgit/gnulib.git/commit/lib/userspec.c?id=23cca8268d21f5d58ed0209002d5673d0518c426

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ccea032c75)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:10:59 +02:00
Fabrice Fontaine
9363299e19 package/libabseil-cpp: fix musl build on mips
Fix the following musl build failure on mips:

In file included from /nvmedata/autobuild/instance-15/output-1/build/libabseil-cpp-20211102.0/absl/base/internal/low_level_alloc.cc:26:
/nvmedata/autobuild/instance-15/output-1/build/libabseil-cpp-20211102.0/absl/base/internal/direct_mmap.h:49:10: fatal error: sgidefs.h: No such file or directory
   49 | #include <sgidefs.h>
      |          ^~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/3fa027e602bacb22316fb5d9b233baa0b0f0e845

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4e56904624)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:09:59 +02:00
Fabrice Fontaine
2f0a8aa0c1 package/iptables: drop duplicated dependency
libnetfilter_conntrack dependency is wrongly duplicated since commit
b835171cf9

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Peter: drop from "main" _DEPENDENCIES instead]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 857447d2d2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:09:06 +02:00
Nicola Di Lieto
3bb7408b5f package/uacme: allow ualpn with mbedTLS
Following the update to mbedTLS 2.28.0 in commit 0f8aab08, ualpn can
work with mbedTLS without restrictions.

References
https://git.buildroot.net/buildroot/commit?id=96c3b52132b41716ca445b4c73a1a8886c26e5ee
https://github.com/ndilieto/uacme/issues/23#issuecomment-1043409796
bbee626cf5
https://github.com/Mbed-TLS/mbedtls/pull/3243

Signed-off-by: Nicola Di Lieto <nicola.dilieto@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6c7b46945e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:07:43 +02:00
Fabrice Fontaine
47718f7a1b package/libeastl: needs threads
libeastl needs threads since its addition in commit
ed9ddaafb2 and
800bc26659:

In file included from /home/autobuild/autobuild/instance-7/output-1/build/libeastl-45469730d641868ce05433fff2e199510c7d45c3/source/thread_support.cpp:7:
/home/autobuild/autobuild/instance-7/output-1/build/libeastl-45469730d641868ce05433fff2e199510c7d45c3/include/EASTL/internal/thread_support.h:37:18: fatal error: pthread.h: No such file or directory
   37 |         #include <pthread.h>
      |                  ^~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/54ff018467d157530bde4d35602fd1820d9eb348

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4c478bb055)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:05:38 +02:00
Bernd Kuhls
9451dd8dc0 package/tor: fix LibreSSL build
Fixes:
http://autobuild.buildroot.net/results/71e/71e03ee8f6e6e5a235556b85a360cbad23a22897/
http://autobuild.buildroot.net/results/4a9/4a93bea0b83eca133ace3e3cfd2b5cb60b691d6e/
http://autobuild.buildroot.net/results/6b8/6b8ab9c5253586426b33d2cba20e7f9f992dbee9/
http://autobuild.buildroot.net/results/8a9/8a9c19878c2d599de6aa3bb3a849b1701f50a829/

and many others

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 23e1e04d54)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:03:58 +02:00
Bernd Kuhls
d5c522a49d package/tor: security bump version to 0.4.7.8
Fixes CVE-2022-33903.

Release notes:
https://raw.githubusercontent.com/torproject/tor/release-0.4.7/ReleaseNotes

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0e36d3a42c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:02:53 +02:00
Bernd Kuhls
96c1671af0 package/tor: bump version to 0.4.7.7
Release notes: https://forum.torproject.net/t/stable-release-0-4-7-7/3108

Added sha256 hash provided by upstream.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 854e18cc25)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:00:35 +02:00
Bernd Kuhls
0df3f22a04 package/tor: add -lz to fix static builds
In order to remove a patch which needs frequent updates on major version
bumps and to get rid of autoreconf we just add -lz when creating a static
build. This make sure that static linking occurs in the right order.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit b03e8e693a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-19 17:00:25 +02:00
Bernd Kuhls
6f4a110a74 package/php: simplify icu configure options
Since php-7.4 upstream switched to pkg-config to detect icu:
20fa2e7b58

Remove all unneeded code from php.mk.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit f939cf7c8c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-18 12:18:08 +02:00
Bernd Kuhls
c46c686e9f package/php: remove wddx extension
Upstream removed the wddx extension with version 7.4:
6bbb18a0b6

and moved it to pecl: https://pecl.php.net/package/wddx

The pecl package is unmaintained however so we do not add it as a new
package to buildroot.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 07044207ed)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-18 09:12:01 +02:00
Fabrice Fontaine
6832b9b283 package/libabseil-cpp: drop unrecognized option
ABSL_RUN_TESTS has been replaced by the standard BUILD_TESTING option
(which is already passed by cmake infrastructure) since version
20210324.0 and
a50ae369a3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 6d0c0f1a43)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-17 23:33:12 +02:00
Bernd Kuhls
b68e509790 package/php: security bump version to 8.0.20
Changelog: https://www.php.net/ChangeLog-8.php#8.0.20

Fixes CVE-2022-31625 and CVE-2022-31626.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 719ba458cb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-13 12:56:16 +02:00
Bernd Kuhls
872e1523c9 package/apache: security bump version to 2.4.54
Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.54

Fixes CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615,
CVE-2022-29404, CVE-2022-30522, CVE-2022-30556 and CVE-2022-31813.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 78e5a9c40e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-13 12:53:02 +02:00
Bernd Kuhls
d1e88798c1 package/apache: add brotli as optional dependency
Fixes:
http://autobuild.buildroot.net/results/90e/90e3a2aaf0ce0451b80c71743209797abeb83d0a/
http://autobuild.buildroot.net/results/006/006f94bb216a77f073a5670fa2f393c43f15a977/
http://autobuild.buildroot.net/results/dd6/dd69e665e51ce6b30e303a4d4670e9edbb159aea/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 0eadc83b9f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-13 12:52:54 +02:00
Fabrice Fontaine
1dfaf41d9d package/logrotate: security bump to version 3.20.1
Fix CVE-2022-1348: A vulnerability was found in logrotate in how the
state file is created. The state file is used to prevent parallel
executions of multiple instances of logrotate by acquiring and releasing
a file lock. When the state file does not exist, it is created with
world-readable permission, allowing an unprivileged user to lock the
state file, stopping any rotation. This flaw affects logrotate versions
before 3.20.

https://github.com/logrotate/logrotate/blob/3.20.1/ChangeLog.md

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit d6e7d92d82)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-13 10:57:39 +02:00
Alexander Mukhin
70ef70aabc package/tinyproxy: bump to version 1.11.1
https://github.com/tinyproxy/tinyproxy/releases/tag/1.11.1

Signed-off-by: Alexander Mukhin <alexander.i.mukhin@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 96de6bfa70)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-13 10:54:00 +02:00
Francois Perrad
41690b6719 package/libgtk3: bump to version 3.24.34
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit c253f84982)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 19:27:15 +02:00
Fabrice Fontaine
b3067072b9 package/gtest: needs gcc >= 5
Commit be38432532 wrongly assumed that
is_trivially_copy_constructible was available since gcc 4.9 but it
wasn't fully available until gcc 5.1 and
f5e523b76d
resulting in the following build failure with gcc 4.9.1:

In file included from /nvmedata/autobuild/instance-13/output-1/build/gtest-1.11.0/googletest/include/gtest/internal/gtest-death-test-internal.h:39:0,
                 from /nvmedata/autobuild/instance-13/output-1/build/gtest-1.11.0/googletest/include/gtest/gtest-death-test.h:41,
                 from /nvmedata/autobuild/instance-13/output-1/build/gtest-1.11.0/googletest/include/gtest/gtest.h:64,
                 from /nvmedata/autobuild/instance-13/output-1/build/gtest-1.11.0/googletest/src/gtest-all.cc:38:
/nvmedata/autobuild/instance-13/output-1/build/gtest-1.11.0/googletest/include/gtest/gtest-matchers.h: In static member function 'static constexpr bool testing::internal::MatcherBase<T>::IsInlined()':
/nvmedata/autobuild/instance-13/output-1/build/gtest-1.11.0/googletest/include/gtest/gtest-matchers.h:414:12: error: 'is_trivially_copy_constructible' is not a member of 'std'
            std::is_trivially_copy_constructible<M>::value &&
            ^

Fixes:
 - http://autobuild.buildroot.org/results/1723705cb7aea5f6fcc7e6722d866ed3bd098115

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 3dd5b65681)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 19:25:03 +02:00
Francois Perrad
7f77ffcced package/gnutls: bump to version 3.7.6
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 9ff3cd1cc1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 19:18:45 +02:00
Thomas Petazzoni
ae98c1c7c5 support/scripts/gen-bootlin-toolchains: drop "mips64" architecture variant
These toolchains have been marked obsolete by toolchains.bootlin.com
as they are replaced by the mips64-n32 toolchains. See commit:

  121e78806b

Will allow to fix:

  http://autobuild.buildroot.net/results/d13b35ba5a0f68f72e6592bdd9218b625a3c6554/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit db37e75aa3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 19:13:58 +02:00
Thomas Petazzoni
a9a3971550 support/scripts/gen-bootlin-toolchains: check that toolchains exists for a certain arch
The "arches" dict lists the architectures for which Bootlin toolchains
are available, along with the corresponding Buildroot conditions for
those architecture variants.

However, there is nothing that checks that such architectures really
have Bootlin toolchains available. Even if no toolchain is available,
the architecture is considered as support, and will be listed in the
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_ARCH_SUPPORTS option, making menuconfig
believe that some Bootlin toolchain is available for the selected
architecture variant.

This is currently the case with the "mips64" architecture (as
identified by the Bootlin toolchains project). Such toolchains have
been made obsolete in toolchains.bootlin.com and replaced by the
mips64-n32 toolchains. But "mips64" is still listed in "arches",
causing this architecture to be considered as having Bootlin
toolchains available.

To avoid this to happen in the future, this commit adds a check that
verifies that an architecture listed in "arches" really has at least
one toolchain available.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 3c11e6f3c8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 19:13:52 +02:00
Thomas Petazzoni
3c7c8fc1b6 support/scripts/gen-bootlin-toolchains: make use of BR2_TOOLCHAIN_EXTERNAL_HAS_NO_GDBSERVER
The microblazeel, microblazebe and openrisc toolchains need to select
this option as they don't have any gdb/gdbserver.

Helps in fixing:

  http://autobuild.buildroot.net/results/6315ef7b66ee4ae8f870c92186bc674d65f62f2c/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit a5599d727e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-07-11 19:12:09 +02:00