Commit Graph

70684 Commits

Author SHA1 Message Date
Fabrice Fontaine
01689a9a65 package/libheif: security bump to version 1.17.6
A couple of build fixes and bug fixes detected by fuzzing.

Corrects these issues:
 - CVE-2023-49462
 - CVE-2023-49463

https://github.com/strukturag/libheif/releases/tag/v1.17.6

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-26 21:23:25 +01:00
Fabrice Fontaine
312f4ab4c8 package/onevpl-intel-gpu: add CPE variables
cpe:2.3🅰️intel:onevpl_gpu_runtime is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/7F7056CA-A41D-4AB5-B9CC-9DE24A27B8BA

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-26 21:21:21 +01:00
Fabrice Fontaine
449538348e package/cjson: security bump to version 1.7.17
- Fix null reference in cJSON_SetValuestring (CVE-2023-50472)
- Fix null reference in cJSON_InsertItemInArray (CVE-2023-50471)

https://github.com/DaveGamble/cJSON/releases/tag/v1.7.17

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-26 14:13:09 +01:00
Fabrice Fontaine
3cc18e4085 package/python-httpx: add CPE variables
cpe:2.3🅰️encode:httpx is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/0B9D7A81-3934-40D1-A7E4-FD8132304152

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-26 14:13:07 +01:00
Fabrice Fontaine
3f9709f803 package/python-uvicorn: add CPE variables
cpe:2.3🅰️encode:uvicorn is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/D3AA1B54-4363-4E52-90AB-01DC2080D950

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-26 14:13:05 +01:00
Fabrice Fontaine
55c3fe590f package/python-fastapi: add CPE variables
cpe:2.3🅰️fastapi_project:fastapi is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/E6E33EA5-0404-4037-9B3E-FE718E1593E5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-26 14:13:03 +01:00
Fabrice Fontaine
27182fcd35 package/python-starlette: add CPE variables
cpe:2.3🅰️encode:starlette is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/B4613D5C-E46D-443A-8738-58E4FBC0C127

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-26 14:13:02 +01:00
Fabrice Fontaine
7f7a7c34e5 package/python-asyncssh: add CPE variables
cpe:2.3🅰️asyncssh_project:asyncssh is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/55866328-B495-4FDC-B9EF-C014E6885187

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-26 14:12:59 +01:00
Francois Perrad
814e7fcacf package/xz: bump to version 5.4.5
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:44:11 +01:00
Francois Perrad
1edafc4b48 package/lsof: bump to version 4.99.3
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:44:09 +01:00
Francois Perrad
a449898d82 package/libgtk3: bump to version 3.24.39
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:44:07 +01:00
Francois Perrad
248effdd9b package/libatomic_ops: bump to version 7.8.2
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:44:05 +01:00
Francois Perrad
be24c10472 package/dbus: bump to version 1.14.10
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:44:03 +01:00
James Hilliard
ae9137661b package/python-httpx: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:25:19 +01:00
James Hilliard
3d743c1027 package/python-httpcore: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:24:37 +01:00
James Hilliard
607f0ecb7e package/python-fastapi-sessions: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:20:05 +01:00
James Hilliard
8e0ac9660c package/python-uvicorn: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:19:09 +01:00
James Hilliard
da1f15dbca package/python-fastapi: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 21:13:04 +01:00
James Hilliard
cfb0987517 package/python-starlette: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 11:33:10 +01:00
James Hilliard
111e725b08 package/python-anyio: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 11:30:16 +01:00
James Hilliard
02fddb29ab package/python-typing-extensions: bump to version 4.9.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Reviewed-by: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 11:29:53 +01:00
James Hilliard
442b2af2d4 package/python-asyncssh: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 11:27:14 +01:00
Julien Olivain
ebe47e7605 package/python-ml-dtypes: new package
ml_dtypes is a stand-alone implementation of several NumPy
dtype extensions used in machine learning libraries.

https://github.com/jax-ml/ml_dtypes

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 11:20:24 +01:00
James Hilliard
b48a195509 package/python-multipart: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 11:12:20 +01:00
James Hilliard
8dc5506c76 package/python-decouple: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-25 11:11:51 +01:00
Adam Duskett
31c169f556 package/sway/Config.in: Add a help note about the default terminal
The default terminal used by sway is the foot terminal. Add a note in
the Config.in explaining that if a user is using the default sway config,
it is recommended to also enable the foot package.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 23:22:58 +01:00
Adam Duskett
4163b67c37 package/sway: enable swaynag support
Add a config option to build sway with swaynag support.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 23:09:03 +01:00
Adam Duskett
31058f5fdf package/sway: enable swaybar tray support
Add a config option to build swaybar with tray support.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 23:08:58 +01:00
Adam Duskett
b08df59fc6 package/sway: enable swaybar support
Add a config option to build sway with swaybar support.
  - The bar requires dejavu fonts.
  - If bash-completions is selected, JQ is required.
  - Select dmenu-wayland as a runtime dependency.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[yann.morin.1998@free.fr: jq is a runtime dependency too]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 23:01:33 +01:00
Adam Duskett
b5b18f9eba package/sway: enable default-wallpaper support
If swaybg is selected, set default-wallpaper to true.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 22:59:36 +01:00
Adam Duskett
cb39803ee3 package/sway: enable bash-completion support
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 22:59:30 +01:00
Adam Duskett
453b993ac1 package/ncurses: install foot terminfo if foot is selected
From foot/INSTALL.md:
```
As of ncurses 2021-07-31, ncurses includes a version of foot’s
terminfo. **The recommendation is to use those**, and only install the
terminfo definitions from this git repo if the system’s ncurses
predates 2021-07-31.
```

So it is best to follow the instructions and install the foot terminfo
provided by ncurses.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 22:48:26 +01:00
Adam Duskett
d62dda2065 package/foot: new package
This is the default terminal sway uses.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[yann.morin.1998@free.fr: add comment only for first-order deps]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 22:36:02 +01:00
Adam Duskett
2f6b1b8e68 package/dmenu-wayland: new package
The traditional dmenu is only running under X; dmenu-wayland is an
implementation that runs only on (some) wayland compositors; Sway
uses it by default as its menu bar.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[yann.morin.1998@free.fr:
  - _SYNC_4 is an arch dependency, so comment should be hidden
  - add a few missing comments for first-level dependencies
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 19:48:59 +01:00
Christian Hitz
df89e73e92 package/imagemagick: add option to build host-imagemagick with XML support
Since upstream commit
25e3a4f384
(which first appeared in version 7.1.1-19), ImageMagick does not trust
unvalidated XMP profiles in images anymore.

If such a XML profile is encountered inside e.g. a PNG image the
processing is aborted. Validating the XMP profile requires that
ImageMagick is compiled with XML support.
As host-imagemagick supports PNG file also activate XML support.

Signed-off-by: Christian Hitz <christian.hitz@bbv.ch>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 19:38:25 +01:00
Julien Olivain
c81af1667f package/perftest: bump to version 23.10.0-0.29
For change log, see:
https://github.com/linux-rdma/perftest/releases/tag/23.10.0-0.29

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 19:18:25 +01:00
James Hilliard
80286eb5f1 package/python-certifi: bump to version 2023.11.17
License hash changed due to inaccurate date cleanup:
2103453dd4

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 18:54:36 +01:00
Bernd Kuhls
58bf6a7f05 package/kodi-inputstream-adaptive: bump version to 20.3.15-Nexus
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 18:53:02 +01:00
Bernd Kuhls
d42683a055 {linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 6}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 18:52:57 +01:00
Bernd Kuhls
973eff2ff2 package/php: bump version to 8.2.14
Changelog: https://www.php.net/ChangeLog-8.php#8.2.14
Release notes: https://www.php.net/releases/8_2_14.php

This release fixes build errors with libxml2 2.12.0.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 18:52:50 +01:00
Bernd Kuhls
6d6fe258a6 package/apache: fix build with libxml2-2.12
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 18:52:43 +01:00
Bernd Kuhls
7b155cdf60 package/libxslt: bump to version 1.1.39
Release notes:
https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.39.news

Fixes:
http://autobuild.buildroot.net/results/8dc/8dc9b1fb68c196deace94951ed81a9a520f98973//

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 18:52:25 +01:00
Charles Hardin
cbd06b6ddd package/python3: add option to support curses in host-python
This can be relevant for host scripts that use Python.

Signed-off-by: Charles Hardin <ckhardin@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 18:51:35 +01:00
Julien Olivain
8219955118 configs/qemu_riscv64_virt_efi: new defconfig
This defconfig enables edk2 UEFI shell and grub2 riscv64-efi boot
of a Linux Kernel.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 17:55:24 +01:00
Julien Olivain
f439b47ed6 boot/grub2: add RISC-V 64bit EFI support
Grub can be built as a RISC-V UEFI application since commit [1]. This
commit was first included in grub version 2.04.

This commit enables this support.

[1] https://git.savannah.gnu.org/gitweb/?p=grub.git;a=commitdiff;h=f1957dc8a3347278a095bc8f44197662559a8ba3

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-24 17:55:23 +01:00
Bernd Kuhls
adf58f26be package/libva-utils: bump version to 2.20.1
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 17:32:14 +01:00
Bernd Kuhls
ee2e272b89 package/libvpl: bump version to 2.10.1
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 17:32:04 +01:00
Bernd Kuhls
f6acde11ab package/onevpl: rename package to libvpl
Upstream changed the package name and its github repo:
44df6e08cc

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 17:18:30 +01:00
Bernd Kuhls
cadbdffd53 package/intel-mediadriver: bump version to 23.4.3
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 17:18:06 +01:00
Bernd Kuhls
77b21f5566 package/intel-gmmlib: bump version to 22.3.16
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-12-24 17:18:05 +01:00