Commit Graph

62381 Commits

Author SHA1 Message Date
Kory Maincent
672807b815 configs/octavo_osd32mp1_red: new defconfig
This patch adds support for the Octavo Systems RED board. We use the
TF-A, U-Boot and Linux versions from ST, Device Trees from Octavo, as
well as a U-Boot patch from Octavo.

Reference:

  https://octavosystems.com/octavo_products/osd32mp1-red/

The device tree blobs come from Octavo System:

  https://github.com/octavosystems/OSD32MP1-RED-Device-tree.git

The uboot patches come from Octavo System:

  395ebd1f48/patches/u-boot-2018.11

Signed-off-by: Kory Maincent <kory.maincent@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 18:08:55 +01:00
Kory Maincent
0380696669 configs/octavo_osd32mp1_brk: new defconfig
This patch adds support to Octavo Systems BRK board. We use the TF-A,
U-Boot and Linux versions from ST, Device Trees from Octavo as well as
a U-Boot patch from Octavo.

Reference:

    https://octavosystems.com/octavo_products/osd32mp1-brk/

The device tree blobs come from Octavo System:

    https://github.com/octavosystems/OSD32MP1-BRK-device-tree.git

The uboot patches come from Octavo System:

    https://github.com/octavosystems/BRK_Developer_Package_patches/tree/master/u-boot-v2020.01-stm32mp

Signed-off-by: Kory Maincent <kory.maincent@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 18:08:52 +01:00
Fabrice Fontaine
343d7940a4 package/agentpp: bump to version 4.5.3
Drop patch (not needed anymore):
"Fixed: Allow compilation without _SNMPv3 defined."

https://agentpp.com/download/changes_agent++.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 18:06:38 +01:00
Fabrice Fontaine
6db3b6d48c package/snmppp: bump to version 3.4.9
Update hash of src/v3.cpp, update in year and "Frank Fock" added:

 -  _##  SNMP++ v3.3
 +  _##  SNMP++ v3.4
 -  _##  Copyright (c) 2001-2013 Jochen Katz, Frank Fock
 +  _##  Copyright (c) 2001-2021 Jochen Katz, Frank Fock
 -  _##  Hewlett-Packard and Jochen Katz make no representations about the
 -  _##  suitability of this software for any purpose. It is provided
 +  _##  Hewlett-Packard, Frank Fock, and Jochen Katz make no representations
 +  _##  about the suitability of this software for any purpose. It is provided

https://www.agentpp.com/download/changes_snmp++v3.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 18:06:37 +01:00
Fabrice Fontaine
3398e8e6d4 package/timescaledb: security bump to version 2.5.2
Fix CVE-2022-24128: Timescale TimescaleDB 1.x and 2.x before 2.5.2 may
allow privilege escalation during extension installation. The
installation process uses commands such as CREATE x IF NOT EXIST that
allow an unprivileged user to precreate objects. These objects will be
used by the installer (which executes as Superuser), leading to
privilege escalation. In order to be able to take advantage of this, an
unprivileged user would need to be able to create objects in a database
and then get a Superuser to install TimescaleDB into their database. (In
the fixed versions, the installation aborts when it finds that an object
already exists.)

"This release contains bug fixes since the 2.5.1 release.
This release is high priority for upgrade. We strongly recommend that
you upgrade as soon as possible."

https://github.com/timescale/timescaledb/releases/tag/2.5.2

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 18:06:35 +01:00
Bernd Kuhls
c9af74adca package/sqlite: bump to version 3.38.1
Release notes: https://sqlite.org/releaselog/3_38_1.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:45 +01:00
Bernd Kuhls
996f43f734 package/{mesa3d, mesa3d-headers}: bump version to 21.3.8
Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2022-March/000666.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:44 +01:00
Bernd Kuhls
065750ee0c package/libks: bump version to 1.8.0
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:43 +01:00
Bernd Kuhls
ba6fd52195 package/fetchmail: bump version to 6.4.29
Updated license hash due to OpenBSD-related upstream commit:
c4419bdd25/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:42 +01:00
Bernd Kuhls
ff867be030 package/php: bump version to 8.0.17
Changelog: https://www.php.net/ChangeLog-8.php#8.0.17

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:41 +01:00
Bernd Kuhls
27c0f4532a package/kodi-pvr-waipu: bump version to 19.2.0-Matrix
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:39 +01:00
Bernd Kuhls
3eea7df286 package/samba4: bump version to 4.15.6
Release notes: https://www.samba.org/samba/history/samba-4.15.6.html

Added new answer to samba4-cache.txt needed due to upstream commit:
f7e31127e7

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:38 +01:00
Bernd Kuhls
3e8c436902 package/postgresql: bump version to 14.2
Release notes: https://www.postgresql.org/docs/release/14.2/

Updated license hash due to copyright year bump:
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=61c8da50cb39ab41c3a7a0122d6943f72bb0798e

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:37 +01:00
Bernd Kuhls
f9c448a016 package/openvpn: security bump version to 2.5.6
Switched _SITE to https and _SOURCE to .gz because upstream does not
provide a .xz tarball anymore.

Fixes CVE 2022-0547, changelog:
https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:36 +01:00
Bernd Kuhls
a0d806dea6 package/{bluez5_utils, bluez5_utils-headers}: bump to version 5.64
Removed all patches after being applied upstream:
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=ec8c8f22efb66ccae533fbd55a236570ffcf756c
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=710220f861b100856711a0a4d4a852874228a57a
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=9f09e69ecb077082301dafb745856e1f3731aaa7
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=cfab569484b18407fc117bb96634525cc76ea1f5
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=fb57ad9b9d107856e5f1c8135da04ffa2f7a11ac
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=58dec00edcaa316909cdd5309bd7bd3239ee221a

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-03-20 16:24:35 +01:00
Fabrice Fontaine
1bb495e8ca package/xscreensaver: add gl dependency
Fix the following build failure without gl raised since bump to version
6.03 in commit cbcbd66b0f:

       Note: The OpenGL 3D library is not being used.

             Those demos which use 3D will not be built or installed.
             That is most of them.

make: *** [package/pkg-generic.mk:282: /home/peko/autobuild/instance-0/output-1/build/xscreensaver-6.03/.stamp_configured] Error 1

A patch was sent to Jamie Zawinski to fix this failure and he replied:

"Why would you do that? I pretty much consider that an unsupported
configuration, since that's more than half of the savers at this point."

I told him that some embedded devices don't have gl and he replied:

"Such as? Just about every modern "embedded device" I'm aware of is more
performant than the desktop computers on which I developed many of those
GL hacks..."

So just add a dependency on gl.

Fixes:
 - http://autobuild.buildroot.org/results/b76743a48d75b5b7539712318fa0b2937a157f88

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[yann.morin.1998@free.fr: keep --with-gl=yes]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-19 18:54:20 +01:00
Clément Léger
00c5186775 package/optee-benchmark: bump to version 3.16.0
Bump OP-TEE Benchmark package version to OP-TEE release 3.16.0.

Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:45:21 +01:00
Clément Léger
91f8e51217 package/optee-client: bump to version 3.16.0
Bump OP-TEE Client package version to OP-TEE release 3.16.0.

Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:44:39 +01:00
Clément Léger
6631e1f708 package/optee-examples: bump to version 3.16.0
Bump OP-TEE Examples package version to OP-TEE release 3.16.0.

Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:44:00 +01:00
Clément Léger
bc6cbab1d3 package/optee-test: bump to version 3.16.0
Bump OP-TEE test package version to OP-TEE release 3.16.0.

Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:43:31 +01:00
Clément Léger
c5d441b7f2 boot/optee-os: bump to version 3.16.0
Bump OP-TEE OS package version to OP-TEE release 3.16.0 and set
BR2_TARGET_OPTEE_OS_LATEST to select
BR2_TARGET_OPTEE_OS_NEEDS_PYTHON_CRYPTOGRAPHY since
python-cryptography is now needed to build optee-os.

Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:39:45 +01:00
Clément Léger
752f478aff boot/optee-os: add support to build with python-cryptography
Newer version of optee-os (>= 3.16) uses python-cryptography instead of
python-pycryptodomex in python scripts. Add support to build these
newer versions by adding a new
BR2_TARGET_OPTEE_OS_NEEDS_PYTHON_CRYPTOGRAPHY option which will
select host-python-cryptography dependency when building optee-os.

Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
[yann.morin.1998@free.fr:
  - move the _ARCH_DEPENDS option from the main symbol to thus new
    symbol
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:26:34 +01:00
Clément Léger
c1b25c32a2 package/python-cryptography: enable host package
Enable host package and add needed variables. Host POST_PROCESS and
DOWNLOAD_DEPENDENCIES variables are inherited from target ones.

Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:22:51 +01:00
Yann E. MORIN
efa7712b09 package/pkg-generic: host variant inherits target download settings
It seems reasonable to expect that the download of the host and target
variants should usually be exactly the same and thus reuse the target
package values for the host package. This commits add support to
inherit host _DL_SUBDIR, _DOWNLOAD_DEPENDENCIES, _DL_ENV and
_DOwNLOAD_POST_PROCESS variables from target ones. These variables can
still be overriden if necessary for the host package.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Clément Léger <clement.leger@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:21:44 +01:00
Fabrice Fontaine
c7520b7ea1 package/minidlna: fix CVE-2022-26505
A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1
allows a remote web server to exfiltrate media files.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:16:47 +01:00
Fabrice Fontaine
0368e0abd0 package/rtl_433: fix CVE-2022-25051
An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when
decoding a crafted file.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:12:54 +01:00
Fabrice Fontaine
3e1de2ef06 package/wireplumber: fix introspection build
introspection needs host-doxygen and host-python-lxml since the addition
of the package in commit c9a3c10417 and
2e5b13f970

../output-1/build/wireplumber-0.4.8/docs/meson.build:14:0: ERROR: python3 is missing modules: lxml

Doxygen is required to build just the bare minimal (not the full
documentation) since
93c2e7d686

Fixes:
 - http://autobuild.buildroot.org/results/24c524d86a3e2e67305f698644be9b15d4562488

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 23:10:31 +01:00
Julien Olivain
0e41f883b8 package/openblas: add OPENBLAS_CPE_ID_VENDOR
cpe:2.3🅰️openblas_project:openblas is a valid CPE identifier for this
package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aopenblas_project%3Aopenblas

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 22:59:10 +01:00
Fabrice Fontaine
a9bff8a0b0 package/wavpack: fix CVE-2021-44269
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV
files. This issue triggered in function WavpackPackSamples of file
src/pack_utils.c, tainted variable cnt is too large, that makes pointer
sptr read beyond heap bound.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 22:38:07 +01:00
Peter Seiderer
0f2eb45332 package/wget: add optional c-ares dependency
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 22:30:27 +01:00
Peter Seiderer
0554aa59d7 package/wget: add optional libpsl dependency
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 22:30:25 +01:00
Peter Seiderer
b0fc0a811b package/wget: use explicit --with/without-libuuid option
This has been like tht for ages (probably an implicit dependency check
in older versions), but now wget has explicit flags, so let's use them.

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
[yann.morin.1998@free.fr: expand commit log]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-18 22:26:53 +01:00
Christian Stewart
05507efd1a package/moby-buildkit: bump to version 0.10.0
https://github.com/moby/buildkit/releases/tag/v0.10.0

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-03-17 22:36:01 +01:00
Fabrice Fontaine
fed7ed0285 package/kvm-unit-tests: bump to version 2022-03-08
- Switch site:
  https://git.kernel.org/pub/scm/virt/kvm/kvm-unit-tests.git/commit/?id=f271e1b630a1b8b5f4eae2331654fc1e70abfd66
- Update first patch
- Drop second patch (binutils < 2.23 is not supported by buildroot
  anymore)
- Drop third and fourth patches (already in version)
- This bump will fix the following build failure with powerpc and gcc 11
  thanks to
  0c111b370a

/tmp/ccSlivNE.s:348: Error: `lswx' invalid when little-endian

Fixes:
 - http://autobuild.buildroot.org/results/746e87892ac545e8fb97c17d4bfd7bd7bbc9d8be

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Thomas Huth <huth@tuxfamily.org>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-03-17 22:31:01 +01:00
Francois Perrad
2eb5838f89 package/webp: bump to version 1.2.2
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-03-17 22:30:58 +01:00
Francois Perrad
68b0efbae4 package/pango: bump to version 1.50.5
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-03-17 22:30:55 +01:00
Fabrice Fontaine
e1d0ac062c package/libminiupnpc: disable sample and tests
Disable sample and tests (which are built by default since version 2.1:
530b272350)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:16:18 +01:00
Francois Perrad
b92210ce36 package/libressl: security bump to 3.4.3
see https://marc.info/?l=openbsd-announce&m=164736531714549&w=2

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:08:40 +01:00
Peter Seiderer
09d568a6b4 package/gst1-shark: bump version to 0.7.5
Changelog ([1], [2]):

  - 0.7.5: Eclipse Plugin was removed
  - 0.7.4: Remove RidgeRun Licence from Eclipse Plugin
           Add README with warning on Eclipse Plugin future removal

[1] https://github.com/RidgeRun/gst-shark/releases/tag/v0.7.4
[2] https://github.com/RidgeRun/gst-shark/releases/tag/v0.7.5

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:41 +01:00
Peter Seiderer
fd7ebd2ca4 package/gst1-python: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:36 +01:00
Peter Seiderer
f62284487a package/gst-omx: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:34 +01:00
Peter Seiderer
eed6566513 package/gstreamer1-editing-services: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:32 +01:00
Peter Seiderer
bb3a4e313a package/gst1-rtsp-server: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:29 +01:00
Peter Seiderer
4d0a14b039 package/gst1-vaapi: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:27 +01:00
Peter Seiderer
9763aab6a0 package/gst1-libav: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:25 +01:00
Peter Seiderer
a70131455b package/gst1-devtools: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:22 +01:00
Peter Seiderer
fd865dc6fc package/gst1-plugins-ugly: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:20 +01:00
Peter Seiderer
3e39715652 package/gst1-plugins-bad: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:18 +01:00
Peter Seiderer
69b7c008fa package/gst1-plugins-good: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:15 +01:00
Peter Seiderer
1f0a550b6d package/gst1-plugins-base: bump version to 1.20.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-03-16 23:07:13 +01:00