Commit Graph

71711 Commits

Author SHA1 Message Date
Dario Binacchi
aa11275c9d package/qemu: renumber patch
Commit 3fa1ae0068 ("package/qemu: add option to enable tracing")
added a patch with a wrong number.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit bf8e4c2052)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-26 21:47:11 +02:00
Dario Binacchi
55a7000a7d package/qemu: fix disabling fp-bench test compilation
With the bump to version 8.1.1, the patch that disabled the compilation
of the fp-bench test is no longer applicable, even though the package
compilation process does not report any errors in applying the patch
itself. The new patch does not disable the test by default but only if
the file fenv.h is not missing, with the hope that this approach will be
considered acceptable by the maintainer and merged upstream.

The patch is an adaptation of the one sent upstream.

Link: https://lists.nongnu.org/archive/html/qemu-devel/2021-03/msg00492.html
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2bb0c57ca2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-26 21:46:32 +02:00
Fabrice Fontaine
330a987a53 package/kexec: fix x86_64 build with binutils 2.41
Fix the following x86_64 build failure with binutils 2.41:

purgatory/arch/i386/entry32-16.S:23: Error: 64bit mode not supported on `i386'.

Fixes:
 - http://autobuild.buildroot.org/results/60f2f163b491879a8ea7f2d56a6b0d38b3cf439c

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a2be156169)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-22 08:19:55 +02:00
Peter Seiderer
8ee092e337 package/git: security bump version to 2.43.4
Fixes CVE-2024-32002, CVE-2024-32004, CVE-2024-32020 and CVE-2024-32021
(for details see [1]).

[1] https://lore.kernel.org/lkml/xmqqv83g4937.fsf@gitster.g/

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-22 08:14:14 +02:00
Fabrice Fontaine
3edd6d9fce package/ti-sgx-km: needs BR2_ARM_EABIHF
ti-sgx-km raises the following build failure without BR2_ARM_EABIHF:

eurasiacon/build/linux2/toplevel.mk:230: eurasiacon/build/linux2/moduledefs/target_armel.mk: No such file or directory

Fixes:
 - http://autobuild.buildroot.org/results/17e4da346d062570b9a84ab8eb1ce93c6d7384be
 - http://autobuild.buildroot.org/results/04fd659472f1928c2621354bb0ea3b60c5dfadec

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5924a5c2c6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-22 08:12:48 +02:00
Brandon Maier
ad20908243 boot/arm-trusted-firmware: enable verbose output
Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a8c7a53985)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-22 08:11:55 +02:00
Fabrice Fontaine
222220d06e package/proj: needs NPTL
NPTL is mandatory since bump to version 9.3.0 in commit
57aba033e6 and
ce08025122:

/home/buildroot/instance-0/output-1/build/proj-9.3.0/src/iso19111/factory.cpp: In member function 'std::shared_ptr<osgeo::proj::io::SQLiteHandle> osgeo::proj::io::SQLiteHandleCache::getHandle(const std::string&, PJ_CONTEXT*)':
/home/buildroot/instance-0/output-1/build/proj-9.3.0/src/iso19111/factory.cpp:622:9: error: 'pthread_atfork' was not declared in this scope; did you mean 'pthread_attr_t'?
  622 |         pthread_atfork(nullptr, nullptr,
      |         ^~~~~~~~~~~~~~
      |         pthread_attr_t

Fixes: 57aba033e6
 - http://autobuild.buildroot.org/results/392664375c5bc5f047d39bff31534a226e8ea526

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4eeb69c983)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 22:16:42 +02:00
Fabrice Fontaine
e26c33a4b9 package/libglib2: update atomic patch
Commit 929bffbf4b forgot to update patch
number
Moreover, replace it with a new iteration to follow upstream request [1]
and avoid the following build host build failure with br-autobuild-1:

/usr/bin/ld: cannot find /usr/lib64/libatomic.so.1.2.0: No such file or directory

Fixes: 929bffbf4b
 - http://autobuild.buildroot.org/results/a12b9c4436594818f4ce128595b429adf7d90e31

[1]: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/3606

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[yann.morin.1998@free.fr: mention upstream commit now it's merged]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit f5257789d6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 22:11:53 +02:00
Fabrice Fontaine
5c7927f698 package/libglib2: fix atomic handling
Correctly fix atomic handling to avoid the following build failure with
all users of libglib2 (e.g. gdk-pixbuf) raised since bump to version
2.76.1 in commit 3f9622fe3d:

/usr/lib/libglib-2.0.a(gthread-posix.c.o): in function `g_mutex_trylock':
gthread-posix.c:(.text+0xda8): undefined reference to `__atomic_compare_exchange_4'

Fixes:
 - http://autobuild.buildroot.org/results/24a358869b98d83ab374c7c3a185ced450064d35

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 929bffbf4b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 22:05:00 +02:00
Bernd Kuhls
535c0a5ada package/libpng: bump version to 1.6.43
Release notes:
https://sourceforge.net/p/png-mng/mailman/message/58741099/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ce3ce432fe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 14:14:42 +02:00
Michael Nosthoff
f5c0965c24 package/catch2: bump to version 3.5.4
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 30a88f4ab0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 14:05:27 +02:00
Bernd Kuhls
de61d8390a package/cmake: add BR2_HOST_CMAKE_AT_LEAST_3_28
Buildroot commit 38d07349da forgot to
add the corresponding BR2_HOST_CMAKE_AT_LEAST_X_Y option.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 81d7103a10)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 14:02:18 +02:00
Bernd Kuhls
00d911b9c6 package/intel-gmmlib: bump version to 22.3.19
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d476d2e7e5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 11:28:28 +02:00
Bernd Kuhls
a685e7866b package/tor: bump version to 0.4.8.11
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/stable-release-0-4-8-11/12265

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f1723c93b5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 11:27:53 +02:00
Francois Perrad
b392df5443 package/libarchive: bump to version 3.7.3
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 566eb38bdf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-21 11:25:56 +02:00
Romain Naour
99eafd1cc6 DEVELOPERS: remove Sebastian Weyer
Sebastian email address at Smile is bouncing, so drop it
from the DEVELOPERS file.

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7b973daac3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-16 14:24:31 +02:00
Sébastien Szymanski
27e7c199cf DEVELOPERS: add myself for Armadeus boards
Signed-off-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 74c0cf2152)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-16 14:22:40 +02:00
Jan Čermák
4415daf635 package/linux-pam: bump to version 1.6.1
Bump to latest version, fixing couple of bugs. Remove patch already
included in this release.

https://github.com/linux-pam/linux-pam/releases/tag/v1.6.1

Signed-off-by: Jan Čermák <sairon@sairon.cz>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0d394c39b8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-16 13:07:27 +02:00
Julien Olivain
48275e431f package/fwts: update _SITE url to use https
The http URL redirects to https. This commit updates this URL to
directly use https.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2aa3a23bbe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-16 11:41:54 +02:00
Julien Olivain
2b8ca3cfbe support/testing: add fwts runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7c1faf997f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-16 11:41:28 +02:00
Julien Olivain
1f383f120e support/testing: add iperf runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6317f6c9a4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-16 11:35:30 +02:00
Fabrice Fontaine
f2eb227317 package/coreutils: drop gmp optional dependency
libgmp is included in coreutils (through bootstrap.conf) since bump to
version 9.0 in commit 2ee43bad85 and
https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=13046444888a7e96f48d28fdd5a6ffe03d4ab036:

configure: WARNING: unrecognized options: --disable-gtk-doc, --disable-gtk-doc-html, --disable-doc, --disable-docs, --disable-documentation, --with-xmlto, --with-fop, --enable-ipv6, --enable-static, --enable-shared, --without-gmp

Fixes: 2ee43bad85

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 16463a00af)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-16 11:27:46 +02:00
Fabrice Fontaine
bb7a0c27d4 package/apcupsd: set ac_cv_path_SHUTDOWN
Set ac_cv_path_SHUTDOWN to /sbin/shutdown to avoid the following build
failure when shutdown is not available on host raised since the addition
of the package in commit d12b63b741:

configure: error: Missing required tool; need any one of: shutdown shutdown.bsd

Fixes: d12b63b741
 - http://autobuild.buildroot.org/results/a8bbb5ced8343e08070361f260050de422144710

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 640a79000b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 17:30:35 +02:00
Julien Olivain
8811a2d0eb package/fluidsynth: bump to version 2.3.5
For change log since v2.3.4, see:
- https://github.com/FluidSynth/fluidsynth/releases/tag/v2.3.5

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0215a6d6f6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 17:29:33 +02:00
Konstantin Aladyshev
3c14bcebcb configs/pc_x86_64_{bios, efi}_defconfig: add wireless regdb
Wireless regulatory database lists the allowed radio frequencies for
each local jurisdiction. Since linux-4.15 the kernel supports loading
the files regulatory.db/regulatory.db.p7s directly from the
/lib/firmware directory. Currently this package is not enabled and
kernel complains with the following message on every boot:
"""
platform regulatory.0: Direct firmware load for regulatory.db failed
with error -2
cfg80211: failed to load regulatory.db
"""
Add wireless regulatory database package to fix the issue.

Signed-off-by: Konstantin Aladyshev <aladyshev22@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 16e9f51490)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 17:27:31 +02:00
Gero Schwäricke
e036a25271 configs/raspberrypizero2w_defconfig: fix typo in headers series option
The build for this defconfig fails with:

  Incorrect selection of kernel headers: expected 6.8.x, got 6.1.x

Found with the following command while trying to find boards that have
missing custom headers series:

  grep --null --recursive --files-without-match "BR2_TOOLCHAIN_EXTERNAL=y" ./configs \
    | xargs --null grep --null --files-with-matches "BR2_LINUX_KERNEL_CUSTOM_.*=y" \
    | xargs --null grep --null --files-without-match "BR2_KERNEL_HEADERS_[0-9]\+_[0-9]\+=y"\
    | xargs --null grep --files-without-match "BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_[0-9]\+_[0-9]\+=y"
  ./configs/mangopi_mq1rdw2_defconfig  # patch pending
  ./configs/raspberrypizero2w_defconfig
  ./configs/sipeed_licheepi_nano_defconfig  # patch pending

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6712162631

Signed-off-by: Gero Schwäricke <gero.schwaericke@posteo.de>
[Romain: add gitlab-ci link]
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit dc18b639c9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 17:09:37 +02:00
Gero Schwäricke
f113543d83 configs/sipeed_licheepi_nano_defconfig: fix missing linux headers
The build failed with:

  Incorrect selection of kernel headers: expected 6.8.x, got 6.5.x

Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/6498278078

Signed-off-by: Gero Schwäricke <gero.schwaericke@posteo.de>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit f5aac04c36)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 16:32:59 +02:00
Julien Olivain
cd987cbcc1 configs/wandboard: uboot needs openssl
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6609466641

Signed-off-by: Julien Olivain <ju.o@free.fr>
Reviewed-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit ffe920b644)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 15:34:14 +02:00
Romain Naour
0b892513d0 support/testing: TestF2FS: update kernel to 4.19.310
Since the toolchain Bootlin update to 2023.11-1 [1], the arm Linux
kernel build is broken with binutils >= 2.41 with:

  arch/arm/mm/proc-v7.S: Assembler messages:
  arch/arm/mm/proc-v7.S:640: Error: junk at end of line, first unrecognized character is `#'

A similar issue has already be fixed for qemu m68k [2].

Bump to the latest kernel 4.19 that already include the backport
of 790756c7e022 ("ARM: 8933/1: replace Sun/Solaris style flag on section directive")

[1] 7e0e6e3b86
[2] a1ce9474e4

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6703222383

Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 7e126bd38d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 15:25:16 +02:00
Romain Naour
c8a229c850 support/testing: TestATFAllwinner: add missing openssl dependency
The commit [1] updated the u-boot version with the one used by
orangepi_zero_plus2_defconfig but the dependency on openssl
was forgotten.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6703221868

[1] eb16148ddd

Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit bc75b09b1c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 15:23:39 +02:00
Robert Marko
f5a347c1dc kconfig/lxdialog: fix check() with GCC14
GCC14 now treats implicit int types as error so when check() from
check-lxdialog.sh is called to check whether we can link against ncurses
it will fail silently and the help text indicating to install ncurses is
printed.

However, this is not due to missing ncurses but once the stderr redirect
to /dev/null is removed we can see the root cause:
<stdin>:2:1: error: return type defaults to ‘int’ [-Wimplicit-int]

So, in order for menuconfig to work with GCC14 lets just specify the
return type of main() as int.

Npte that the upstream kconfig in the linux kernel source tree no longer
carries or uses the check-lxdialog.sh script since commit 1c5af5cf9308
(kconfig: refactor ncurses package checks for building mconf and nconf),
so there is no commit we can backport to our kconfig copy.

Signed-off-by: Robert Marko <robimarko@gmail.com>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
Tested-by: Petr Vorel <petr.vorel@gmail.com>
[yann.morin.1998@free.fr: add note about upstream kernel]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a6210d28db)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-15 15:18:09 +02:00
Peter Seiderer
0d9357b3cc package/speechd: set CPE_ID_VENDOR (to silence mismatched CVE warning)
- set CPE_ID_VENDOR to silence mismatched CVE-2001-0956 ([1], [2]) warning
  clearly aiming some other product/version ("speechd 0.54 with Festival or
  rsynth speech synthesis package")

[1] https://security-tracker.debian.org/tracker/CVE-2001-0956
[2] https://github.com/advisories/GHSA-67cw-4jhh-3jm7

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 206527347c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:49:41 +02:00
Peter Korsgaard
5e039782c3 package/docker-cli: bump version to 26.0.2
https://github.com/moby/moby/releases/tag/v26.0.2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 49c8154ee7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:47:44 +02:00
Peter Korsgaard
fe069fe639 package/docker-engine: security bump to version 26.0.2
Fixes the following security issues:

CVE-2024-32473: Ensure IPv6 is disabled on interfaces only allocated an IPv4
address by the engine

https://github.com/moby/moby/security/advisories/GHSA-x84c-p2g9-rqv9

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 8e37a887e6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:47:37 +02:00
Bernd Kuhls
1f3d93d773 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 8}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 9c592ecd3e)
[Peter: drop 6.8.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:40:52 +02:00
Angelo Compagnucci
6a9b7909bb package/openjpeg: security bump to version 2.5.2
Fixes the following security issues:

CVE-2021-3575: A heap-based buffer overflow was found in openjpeg in
color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file.  An
attacker could use this to execute arbitrary code with the permissions of
the application compiled against openjpeg.

Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ff36bc68cd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:15:47 +02:00
Fabrice Fontaine
23337c0674 package/freerdp: security bump to version 2.11.6
Fix the following CVEs:

- CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
- CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in
  clear_decompress_residual_data
- CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
- CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
- CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
- CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress

https://github.com/FreeRDP/FreeRDP/releases/tag/2.11.6

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1126be70ff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:14:16 +02:00
Peter Korsgaard
f357412f13 package/tinycbor: override prefix at build time as well
To ensure the correct prefix is used in the generated tinycbor.pc instead of
/usr/local:

>>> tinycbor 0.6.0 Building
..
sed > tinycbor.pc < tinycbor.pc.in \
        -e 's,@prefix@,/usr/local,' \
        -e 's,@exec_prefix@,/usr/local,' \
        -e 's,@libdir@,/usr/local/lib,' \
        -e 's,@includedir@,/usr/local/include,' \
        -e 's,@version@,0.6.0,'
>>> tinycbor 0.6.0 Installing to staging directory
..
install -m 644 tinycbor.pc /path/to/buildroot/output/host/aarch64-buildroot-linux-gnu/sysroot/usr/lib/pkgconfig/tinycbor.pc

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b059e08420)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:13:28 +02:00
Peter Korsgaard
e83045c482 package/php: security bump version to 8.2.18
Fixes CVE-2024-1874, CVE-2024-2756 & CVE-2024-3096.

Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2
Release notes: https://news-web.php.net/php.announce/423

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 22:03:21 +02:00
Fabrice Fontaine
5177d62dce package/python-pillow: fix legal info
Commit dfaa34ddd3 forgot to update hash of
LICENSE file:

ERROR: LICENSE has wrong sha256 hash:
ERROR: expected: e706384c6f299d1b6fa782ae657740b372b4bd7938a1a318bf94ac249114758a
ERROR: got     : cf234c27a3f275f5a050f4df3946f8855704226fe4e7ca8b33928cbcecbced37

LICENSE file has been updated to clean up authors and contributors:
4197263dff

Fixes: dfaa34ddd3
 - http://autobuild.buildroot.org/results/5a35d83c73367e1b20534b1bc7f2f564cf653a38

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b8a86f5a8f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 18:11:07 +02:00
Angelo Compagnucci
30ce03a445 package/python-pillow: security bumo to version 10.3.0
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because
strcpy is used instead of strncpy.

Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit dfaa34ddd3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 18:10:56 +02:00
Thomas Devoogdt
35e8608c4c .github: add a pull request warning that explains the mailing list workflow
Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Reviewed-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 32753c6f9d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 18:09:38 +02:00
Waldemar Brodkorb
95f301fe98 package/elf2flt: fix riscv64 noMMU build
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6655119961

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 8d366dbf56)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 18:07:32 +02:00
TIAN Yuanhao
c681f1dc7d package/ttyd: set CPE_ID_VALID
cpe:2.3🅰️ttyd_project:ttyd is a valid CPE identifier for this package:

    https://nvd.nist.gov/products/cpe/detail/DBEDA75E-4E19-48C1-92D7-43E4035BC048

Signed-off-by: TIAN Yuanhao <tianyuanhao3@163.com>
[yann.morin.1998@free.fr: Move to its own patch]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7d4ba7eaf9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 18:00:39 +02:00
Peter Korsgaard
0155095c55 Update for 2024.02.2
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-07 09:30:06 +02:00
Ben Hutchings
3d1c04c05c package/skeleton-init-sysv: Set sticky bit on /dev/shm
/dev/shm is a world-writable directory, like /tmp, and should also
have the sticky bit set.  Without this, any user can delete and
replace another user's files in /dev/shm.

This bug has been present since /dev/shm was added to the skeleton
/etc/fstab, but appears to have been fixed for systems using systemd
by commit 76fc9275f1 "system: separate sysv and systemd parts of the
skeleton" which went into Buildroot 2017.08.

Signed-off-by: Ben Hutchings <ben.hutchings@mind.be>
Fixes: 22fde22e35
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 0b2967e158)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-06 23:02:53 +02:00
Romain Naour
549aaab347 package/python-pypng: add missing python3-zlib dependency
png.py import zlib [1] so python3-zlib needs to be installed at
runtime.

[1] https://gitlab.com/drj11/pypng/-/blob/pypng-0.20220715.0/code/png.py?ref_type=tags#L185

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656971 (TestPythonPy3Qrcode)

Cc: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 15381b5755)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-06 23:02:09 +02:00
Romain Naour
0bbae94e22 support/testing: remove TestATFVexpress
TestATFVexpress is using vexpress_aemv8a_juno as as u-boot defconfig
but the Buildroot defconfig of this board was removed in 2022.11 [1]

Since both TestATFVexpress and TestATFAllwinner are now using mainline
ATF, we don't really need several ATF test anymore. Initially [2],
several runtime test were added to test ATF/U-Boot combinations when
ATF was provided by a vendor: vexpress (mainline), Allwinner and
Marvell.

Keep TestATFAllwinner as ATF mainline test.

[1] 347c108738
[2] 8cf3ce04e9

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 107bcd536d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-06 23:01:24 +02:00
Romain Naour
2e92960756 support/testing: sync TestATFAllwinner with orangepi_zero_plus2_defconfig
u-boot-2021.04 seems to be broken when pylibfdt support is enabled
and the latest python3/setuptools are used.

Since the TestATFAllwinner is using bananapi_m64 as u-boot defconfig
but the Buildroot defconfig of this board was removed in 2022.11 [1]
update TestATFAllwinner to use a newer BSP. Use the one provided
by orangepi_zero_plus2_defconfig.

[1] daf3c6661f

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656317 (TestATFAllwinner)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit eb16148ddd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-06 22:59:50 +02:00
Laurent Vivier
c28be13d01 package/petitboot: bump to version 1.15
Signed-off-by: Laurent Vivier <laurent@vivier.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5652306f7e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-05-06 22:57:12 +02:00