Commit Graph

65345 Commits

Author SHA1 Message Date
James Hilliard
a855e21bcb package/python-ujson: bump to version 5.5.0
Switch to now supported system double-conversion library.

Disable built in strip so that stripping is handled by buildroot.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 15:03:53 +01:00
James Hilliard
f3f71a4f6c package/python-typing-extensions: bump to version 4.4.0
License hash changed due to date/formatting updates:
fb77519b19

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 15:03:52 +01:00
James Hilliard
ff89dab6a0 package/python-aiohttp-session: bump to version 2.12.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 15:03:50 +01:00
Fabrice Fontaine
c4db8416ff package/dahdi-linux: fix build with kernel >= 5.18
Fix the following build failure with kernel >= 5.18 raised since bump to
version 3.2.0 in commit 6cbfed0dbf:

/home/autobuild/autobuild/instance-0/output-1/build/dahdi-linux-3.2.0/drivers/dahdi/wct4xxp/base.c: In function ‘t4_allocate_buffers’:
/home/autobuild/autobuild/instance-0/output-1/build/dahdi-linux-3.2.0/drivers/dahdi/wct4xxp/base.c:3864:17: error: implicit declaration of function ‘pci_alloc_consistent’ [-Werror=implicit-function-declaration]
 3864 |         alloc = pci_alloc_consistent(wc->dev, numbufs * T4_BASE_SIZE(wc) * 2,
      |                 ^~~~~~~~~~~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/ddacd807dddeb1649e957264ac57bba27d9bb463

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 15:02:56 +01:00
Fabrice Fontaine
cd317f701b package/kmemd: needs headers >= 5.14
kmemd unconditionally uses BPF_PSEUDO_MAP_IDX_VALUE which is only
available since kernel 5.14 and
387544bfa2
resulting in the following build failure since the addition of the
package in commit b3f915c656:

kmem.c:36:17: error: 'BPF_PSEUDO_MAP_IDX_VALUE' undeclared here (not in a function); did you mean 'BPF_PSEUDO_MAP_VALUE'?
   36 |                 BPF_PSEUDO_MAP_IDX_VALUE, 0, _idx       \
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/dcd7e6321d64746b8b867fa3f32095d1180a40fc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 15:02:56 +01:00
Thomas Petazzoni
2b3f0153bb package/glibc: headers >= 5.4 needed on RISC-V 32-bit
Since glibc 2.33 (upstream commit
7a55dd3fb6d2c307a002a16776be84310b9c8989), headers >= 5.4.0 are needed
to build glibc for RISC-V 32-bit. Indeed
sysdeps/unix/sysv/linux/riscv/configure.ac contains:

if test $libc_cv_riscv_int_abi = ilp32; then
  arch_minimum_kernel=5.4.0
fi

In order to take into account this dependency, we add the appropriate
logic in package/glibc/Config.in and
toolchain/toolchain-buildroot/Config.in.

This change means that if headers < 5.4.0 are selected, then no C
library at all will be available for RISC-V 32-bit, as glibc is the
only C library supporting RISC-V 32-bit currently. However, thanks to
the recent addition of BR2_TOOLCHAIN_BUILDROOT_NONE, the
choice...endchoice for the C library selection will not be empty,
allowing the user to see the Config.in comment explaining why glibc
can't be selected.

Therefore, technically this commit does prevent from creating a
configuration with RISC-V 32-bit and headers < 5.4.0, but it will have
BR2_TOOLCHAIN_BUILDROOT_NONE=y, which is catched by
package/Makefile.in, which aborts the build early on pointing out that
the configuration is invalid.

Fixes:

  http://autobuild.buildroot.net/results/5ca49b2732f68eccb5276e7112f7f496dcc514ee/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-10-30 12:44:15 +01:00
Thomas Petazzoni
e1550ef755 toolchain/toolchain-buildroot: introduce BR2_TOOLCHAIN_BUILDROOT_NONE
In the internal toolchain backend, we have a choice..endchoice block
to allow the user to select the C library, between glibc, uClibc and
musl.

However, there are situations were no C library at all is
supported. In this case, the choice does not appear, and does not
allow to see the Config.in comments that are within the
choice..endchoice block and that may explain why no C library is
available.

For example, on RISC-V 32-bit, the only C library supported is glibc,
and the minimum kernel header version required by glibc on this
architecture is 5.4.0. In a future commit, we are going to add this
dependency on glibc (to fix build issues on configurations that have
headers < 5.4.0). But since glibc is the only supported C library on
RISC-V 32-bit, it means that the choice..endchoice for the C library
contains no entry, preventing from seeing the Config.in comment.

To address this issue, this commit adds a "dummy"
BR2_TOOLCHAIN_BUILDROOT_NONE option that shows up in the
choice..endchoice only when no C library is available. Thanks to this,
the choice..endchoice is never empty, and the Config.in comments can
be seen.

If the user keeps BR2_TOOLCHAIN_BUILDROOT_NONE selected, then the
build will anyway abort early because package/Makefile.in has a check
to verify that a C library is selected, and aborts the build if not.

Some could say that the problem should be resolved by instead
preventing the selection of headers < 5.4.0 on RISC-V 32-bit, but that
is difficult to do as the user can choose a custom header version, or
simply specific that (s)he wants to use the headers of the kernel
being built. In those situations, it's difficult to prevent selecting
headers < 5.4.0.

Prevent random configurations from triggering a build failure in our
autobuilders, by excluding that symbol from accepted configuration.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
[yann.morin.1998@free.fr: update genrandconfig]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-10-30 12:42:41 +01:00
Thomas Petazzoni
69d311687a package/nodejs: drop support for the MIPS architecture
The build of NodeJS fails on mipsel due to an issue in the V8 code:

../../deps/v8/src/compiler/backend/mips/code-generator-mips.cc:4106:48: error: call of overloaded 'Operand(int64_t)' is ambiguous
 4106 |                 Operand(static_cast<int64_t>(0)));

There is apparently a lack of maintenance of the MIPS port of V8, as
is discussed in the Github issue at
https://github.com/nodejs/node/issues/26179.

Until this get improved/fixed, our best option is to drop support for
MIPS in our NodeJS package.

Fixes:

  http://autobuild.buildroot.net/results/0e6ee80c77bcb77afe18410e8d9da93b738cb0a4/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 12:10:39 +01:00
Thomas Petazzoni
2ee966794a package/sentry-cli: fix build failure by bumping to 2.8.0
For a very long time, host-sentry-cli has been failing to build with:

error[E0512]: cannot transmute between types of different sizes, or dependently-sized types
   --> /home/buildroot/autobuild/instance-2/output-1/build/host-sentry-cli-1.59.0/VENDOR/socket2/src/sockaddr.rs:176:9
    |
176 |         mem::transmute::<SocketAddrV4, sockaddr_in>(v4);
    |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    |
    = note: source type: `SocketAddrV4` (48 bits)
    = note: target type: `sockaddr_in` (128 bits)

For more information about this error, try `rustc --explain E0512`.
error: could not compile `socket2` due to previous error

This socket2 create issue has apparently been fixed by upstream commit
fd1565af4a,
as it removes/reworks the problematic code. This commit has been part
of socket2 since the 0.3.3 version, but sentry-cli 1.59.0 uses socket2
in version 0.3.2.

The next version of sentry-cli that has moved to a more recent
version of socket2 is 1.61.0, however this one also fails to build
with:

   Compiling sentry-cli v1.61.0 (/home/buildroot/buildroot/output/build/host-sentry-cli-1.61.0)
warning: fields `schemes` and `name` are never read
  --> src/utils/xcode.rs:41:5
   |
39 | pub struct XcodeProjectInfo {
   |            ---------------- fields in this struct
40 |     targets: Vec<String>,
41 |     schemes: Vec<String>,
   |     ^^^^^^^
42 |     configurations: Vec<String>,
43 |     name: String,
   |     ^^^^
   |
   = note: `#[warn(dead_code)]` on by default
   = note: `XcodeProjectInfo` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis

warning: `sentry-cli` (bin "sentry-cli") generated 1 warning
    Finished release [optimized] target(s) in 55.05s
  Installing /home/buildroot/buildroot/output/host/bin/sentry-cli
   Installed package `sentry-cli v1.61.0 (/home/buildroot/buildroot/output/build/host-sentry-cli-1.61.0)` (executable `sentry-cli`)

So we just gave up, and went for building the very lastest sentry-cli
version, 2.8.0, which apparently builds fine, at least in the
configurations that used to previously fail.

Yes, such a huge version bump is probably not ideal as a "minimal fix"
to backport on our stable branches, but that's probably the best we
can do without investing too much effort into this package that is
otherwise poorly maintained in Buildroot, as nobody stepped up to
address the issue even though it has been failing for months.

Fixes:

  http://autobuild.buildroot.net/results/883b83a5ee44206e0d67a30787bf5d60765ac1e4/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 12:10:01 +01:00
Fabrice Fontaine
85c20ffa95 package/lz4: fix static build
Fix the following static build failure raised since bump to version
1.9.4 in commit 1f54af8c4f:

compiling dynamic library 1.9.4
/home/giuliobenetti/autobuild/run/instance-0/output-1/host/opt/ext-toolchain/m68k-buildroot-uclinux-uclibc/bin/ld.real: /home/giuliobenetti/autobuild/run/instance-0/output-1/host/m68k-buildroot-uclinux-uclibc/sysroot/usr/lib/crt1.o: in function `_start':
(.text+0x1c): undefined reference to `main'

Fixes:
 - http://autobuild.buildroot.org/results/9187852fb7a869bf5595275d47929632659a4407

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 12:09:25 +01:00
Fabrice Fontaine
94c6ba6c70 package/libnl: bump to version 3.7.0
https://github.com/thom311/libnl/compare/libnl3_6_0...libnl3_7_0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:12 +01:00
Fabrice Fontaine
90d8ca33ef package/liblinear: bump to version 2.45
Version 2.45 released on August 11, 2022. Some minor bugs are fixed.

Drop first patch (not needed since
7cf5d6e1c0)

https://github.com/cjlin1/liblinear/compare/v244...v245

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:10 +01:00
Fabrice Fontaine
5cf6429e2b package/libmodbus: bump to version 3.1.8
Switch site to get latest release

https://github.com/stephane/libmodbus/releases/tag/v3.1.8

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:09 +01:00
Fabrice Fontaine
20348d4859 package/libpagekite: bump to version 0.91.201110
https://github.com/pagekite/libpagekite/compare/v0.91.190530...v0.91.201110

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:08 +01:00
Fabrice Fontaine
c0a13b667b package/jack2: bump to version 1.9.21
https://github.com/jackaudio/jack2/releases/tag/v1.9.21

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:06 +01:00
James Hilliard
d86c46b83b package/python-pypa-build: bump to version 0.9.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:05 +01:00
Fabrice Fontaine
860b1b9587 package/libpam-radius-auth: bump to version 2.0.0
Switch site to get latest release

https://github.com/FreeRADIUS/pam_radius/blob/release_2_0_0/Changelog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:03 +01:00
Fabrice Fontaine
caf755999d package/kismet: bump to version 2022-08-R1
https://www.kismetwireless.net/release/kismet-2022-08-R1/

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:02 +01:00
Fabrice Fontaine
62e082ec4d package/lldpd: security bump to version 1.0.15
- Fix heap overflow when reading SONMP. CVE-2021-43612.
- https://vincentbernat.github.io/lldpd/ is redirecting to
  https://lldpd.github.io/

https://github.com/lldpd/lldpd/blob/1.0.15/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:01 +01:00
Fabrice Fontaine
29c0b4e6db package/makedumpfile: bump to version 1.7.2
Use official tarball

https://github.com/makedumpfile/makedumpfile/releases/tag/1.7.2
https://github.com/makedumpfile/makedumpfile/releases/tag/1.7.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:59 +01:00
Fabrice Fontaine
c321a08ad4 package/libidn2: bump to version 2.3.4
https://gitlab.com/libidn/libidn2/-/blob/v2.3.4/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:58 +01:00
Fabrice Fontaine
8ac75a9a21 package/minizip-zlib: bump to version 1.2.13
Use license file available since
352cb28d12

https://github.com/madler/zlib/blob/v1.2.13/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:56 +01:00
Fabrice Fontaine
3be3113b57 package/minissdpd: bump to version 1.6.0
Update hash of LICENSE file (license refined for github:
af812c8775)

http://miniupnp.free.fr/files/changelog.php?file=minissdpd-1.6.0.tar.gz

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:55 +01:00
Fabrice Fontaine
a92f29dae7 package/minizip: bump to version 3.0.7
https://github.com/zlib-ng/minizip-ng/releases/tag/3.0.7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:53 +01:00
Fabrice Fontaine
bd474c43e3 package/gawk: bump to version 5.2.0
https://git.savannah.gnu.org/cgit/gawk.git/tree/NEWS?h=gawk-5.2.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:52 +01:00
Fabrice Fontaine
9cee628345 package/sedutil: bump to version 1.20.0
https://github.com/Drive-Trust-Alliance/sedutil/compare/1.15.1...1.20.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:50 +01:00
James Hilliard
8a5178293f package/python-wsaccel: bump to version 0.6.4
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:48 +01:00
Fabrice Fontaine
32602849a8 package/pps-tools: bump to version 1.0.3
https://github.com/ago/pps-tools is redirecting to
https://github.com/redlab-i/pps-tools

e2b25049df...v1.0.3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:47 +01:00
James Hilliard
17f2af56cc package/python-maturin: bump to version 0.13.7
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:45 +01:00
Fabrice Fontaine
f020e03ad9 package/hackrf: bump to version 2022.09.1
- Update site
- Drop patch (already in version)

https://github.com/greatscottgadgets/hackrf/releases/tag/v2022.09.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:44 +01:00
Fabrice Fontaine
c999e540dd package/f2fs-tools: fix build with lz4 1.9.4
Fix the following build failure raised since bump of lz4 to version
1.9.4 in commit 1f54af8c4f:

compress.c: In function 'lz4_compress_init':
compress.c:36:42: error: 'LZ4_STREAMSIZE_U64' undeclared (first use in this function); did you mean 'LZ4_STREAMSIZE'?
   36 | #define LZ4_STREAMSIZE                  (LZ4_STREAMSIZE_U64 * sizeof(long long))
      |                                          ^~~~~~~~~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/ca8b6646322a4cb911fad5fb9cb38046743609bf

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:51:38 +01:00
Fabrice Fontaine
952fa08764 package/f2fs-tools: add lz4 and lzo optional dependencies
lz4 and lzo are optional dependencies (enabled by default) since bump to
version 1.14.0 in commit cf566658f2 and
https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs-tools.git/commit/?id=b585244e726c1024f7b842033689992a383808cc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:51:34 +01:00
Tan En De
1ce9af6ccf package/libkcapi: support enabling lib-asym and lib-kpp
Add Kconfig options to allow enabling asymmetric cipher support
(--enable-lib-asym) and key protocol primitives support
(--enable-lib-kpp) in library.

Signed-off-by: Tan En De <ende.tan@linux.starfivetech.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:41:39 +01:00
Tan En De
4ed6d61c03 package/libkcapi: support building kcapi-dgst application
Just add a new Kconfig option in order to support building kcapi-dgst
application.

Signed-off-by: Tan En De <ende.tan@linux.starfivetech.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:41:39 +01:00
Tan En De
06a9dc3528 package/libkcapi: bump version to 1.4.0
Removed patch applied upstream:
455c4938f5

Signed-off-by: Tan En De <ende.tan@linux.starfivetech.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:41:38 +01:00
Fabrice Fontaine
8268346d75 package/pcsc-lite: bump to version 1.9.9
https://github.com/LudovicRousseau/PCSC/releases/tag/1.9.9

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:22:45 +02:00
Fabrice Fontaine
4a65c3d9cd package/pinentry: bump to version 1.2.1
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=pinentry.git;a=blob;f=NEWS;h=c080b34e57d01a6ccca9d2996d7096c42b1a3f84

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:20:35 +02:00
Fabrice Fontaine
376203a34e package/conntrack-tools: bump to version 1.4.7
https://netfilter.org/pub/conntrack-tools/changes-conntrack-tools-1.4.7.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:18:54 +02:00
Fabrice Fontaine
8acac82278 package/atftp: bump to version 0.8.0
- No configure script in official tarball
- pcre has been replaced by pcre2 since
  5739ed9507
  fdf479c31b

https://github.com/madmartin/atftp/blob/v0.8.0/Changelog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:18:37 +02:00
Brandon Maier
5f779a2071 package/bats-core: bump to version 1.8.2
https://github.com/bats-core/bats-core/releases/tag/v1.5.0
https://github.com/bats-core/bats-core/releases/tag/v1.6.0
https://github.com/bats-core/bats-core/releases/tag/v1.6.1
https://github.com/bats-core/bats-core/releases/tag/v1.7.0
https://github.com/bats-core/bats-core/releases/tag/v1.8.0
https://github.com/bats-core/bats-core/releases/tag/v1.8.1
https://github.com/bats-core/bats-core/releases/tag/v1.8.2

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:15:24 +02:00
Bernd Kuhls
098db8b4d5 DEVELOPERS: add Bernd Kuhls to package rsync
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:10:13 +02:00
Bernd Kuhls
96db6a8ac9 package/rsync: bump version to 3.2.7
Release notes: https://download.samba.org/pub/rsync/NEWS

Switched _SITE and package URL to https.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:09:43 +02:00
Bernd Kuhls
66c05c24ba package/php: security bump version to 8.1.12
Changelog: https://www.php.net/ChangeLog-8.php#8.1.12

Fixes:
- CVE-2022-31630: http://bugs.php.net/81739
- CVE-2022-37454: http://bugs.php.net/81738

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:09:22 +02:00
Fabrice Fontaine
6905bbc143 package/dahdi-tools: bump to version 3.2.0
https://github.com/asterisk/dahdi-tools/compare/v3.1.0...v3.2.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:08:41 +02:00
Fabrice Fontaine
6cbfed0dbf package/dahdi-linux: bump to version 3.2.0
- Use official tarball
- This bump will fix the following build failures with kernel >= 5.16:

/home/autobuild/autobuild/instance-6/output-1/build/dahdi-linux-5c840cf43838e0690873e73409491c392333b3b8/drivers/dahdi/wct4xxp/base.c:45:10: fatal error: stdbool.h: No such file or directory
   45 | #include <stdbool.h>
      |          ^~~~~~~~~~~

[...]

../dahdi-linux-5c840cf43838e0690873e73409491c392333b3b8/drivers/dahdi/xpp/xbus-core.c: In function ‘xbus_read_proc_open’:
../dahdi-linux-5c840cf43838e0690873e73409491c392333b3b8/drivers/dahdi/xpp/xbus-core.c:1845:43: error: implicit declaration of function ‘PDE_DATA’; did you mean ‘NODE_DATA’? [-Werror=implicit-function-declaration]
 1845 |  return single_open(file, xbus_proc_show, PDE_DATA(inode));
      |                                           ^~~~~~~~
      |                                           NODE_DATA

5c840cf438...v3.2.0

Fixes:
 - http://autobuild.buildroot.org/results/3f23559f01a7783d82ad4e0b2d6792171e6f2b79
 - http://autobuild.buildroot.org/results/f3f226fb661a6b1998381f5fb7cb306771c2ecc0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:08:18 +02:00
Fabrice Fontaine
7c7b4f88bc package/pahole: bump to version 1.24
https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/NEWS?h=v1.24

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:07:49 +02:00
Fabrice Fontaine
21531fa31a package/zsh: security bump to version 5.9
Security and bug fix release with several feature additions.

https://zsh.sourceforge.io/releases.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:07:15 +02:00
Bernd Kuhls
3383613ad3 package/fetchmail: bump version to 6.4.34
Switched _SITE to https.

Removed patch which was applied upstream:
28c476ec45

Release notes:
https://sourceforge.net/p/fetchmail/mailman/message/37721221/
https://sourceforge.net/p/fetchmail/mailman/message/37699234/
https://sourceforge.net/p/fetchmail/mailman/message/37687601/
https://sourceforge.net/p/fetchmail/mailman/message/37681775/
https://sourceforge.net/p/fetchmail/mailman/message/37645690/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:06:24 +02:00
Fabrice Fontaine
18b5d6205d package/wolfssl: security bump to version 5.5.2
In the case that the WOLFSSL_CALLBACKS macro is set when building
wolfSSL, there is a potential heap over read of 5 bytes when handling
TLS 1.3 client connections. This heap over read is limited to wolfSSL
builds explicitly setting the macro WOLFSSL_CALLBACKS, the feature does
not get turned on by any other build options. The macro
WOLFSSL_CALLBACKS is intended for debug use only, but if having it
enabled in production, users are recommended to disable
WOLFSSL_CALLBACKS. Users enabling WOLFSSL_CALLBACKS are recommended to
update their version of wolfSSL. CVE 2022-42905

https://github.com/wolfSSL/wolfssl/releases/tag/v5.5.2-stable

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:05:45 +02:00
Bernd Kuhls
8941d02bf1 package/samba4: security bump version to 4.15.11
Added patch from Gentoo to fix uClibc build:
access.c:(.text+0x1e8): undefined reference to `innetgr'

Release notes:
https://www.samba.org/samba/history/samba-4.15.8.html

https://www.samba.org/samba/history/samba-4.15.9.html
o CVE-2022-2031:  Samba AD users can bypass certain restrictions associated with
                  changing passwords.
                  https://www.samba.org/samba/security/CVE-2022-2031.html

o CVE-2022-32744: Samba AD users can forge password change requests for any user.
                  https://www.samba.org/samba/security/CVE-2022-32744.html

o CVE-2022-32745: Samba AD users can crash the server process with an LDAP add
                  or modify request.
                  https://www.samba.org/samba/security/CVE-2022-32745.html

o CVE-2022-32746: Samba AD users can induce a use-after-free in the server
                  process with an LDAP add or modify request.
                  https://www.samba.org/samba/security/CVE-2022-32746.html

o CVE-2022-32742: Server memory information leak via SMB1.
                  https://www.samba.org/samba/security/CVE-2022-32742.html

https://www.samba.org/samba/history/samba-4.15.10.html

https://www.samba.org/samba/history/samba-4.15.11.html
o CVE-2022-3437:  There is a limited write heap buffer overflow in the GSSAPI
                  unwrap_des() and unwrap_des3() routines of Heimdal (included
                  in Samba).
                  https://www.samba.org/samba/security/CVE-2022-3437.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:05:34 +02:00