Commit Graph

62043 Commits

Author SHA1 Message Date
Fabrice Fontaine
7ec5f99b3a package/tiff: fix CVE-2022-22844
LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in
certain situations involving a custom tag and 0x0200 as the second word
of the DE field.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 18:24:14 +01:00
Fabrice Fontaine
9229054bd5 package/libgeotiff: bump to version 1.7.0
https://github.com/OSGeo/libgeotiff/releases/tag/1.7.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 18:23:22 +01:00
Thomas Devoogdt
53fa10f4c9 package/glib-networking: bump to version 2.70.0
PKCS#11 is required if gnutls is used:
9b3d30e40f

Add an upstream patch to fix compilation with older compilers:
b192086b99

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@gmail.com>
Reviewed-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 18:21:35 +01:00
Fabrice Fontaine
adca60540f package/domoticz: bump to version 2022.01
https://github.com/domoticz/domoticz/blob/2022.1/History.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:32:56 +01:00
Fabrice Fontaine
1e48e5bf0c package/lcms2: bump to version 2.13
https://littlecms.com/blog/2022/01/28/lcms2-2.13

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:31:51 +01:00
Fabrice Fontaine
cc27267ae4 package/safeclib: bump to version 3.7.1
Drop patch (already in version) and so autoreconf

https://github.com/rurban/safeclib/blob/v3.7.1/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:31:20 +01:00
Fabrice Fontaine
d0e519ad3d package/libgpg-error: add or1k support
or1k is supported since version 1.18 and
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgpg-error.git;a=commit;h=c143fa81462584ad39ea780908266bce3fb9a49e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:30:02 +01:00
Thomas Claveirole
a9c94d126f package/openlayers: bump to version 6.12.0
Signed-off-by: Thomas Claveirole <thomas.claveirole@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:28:44 +01:00
Fabrice Fontaine
79f631000f package/keepalived: bump to version 2.2.7
Drop patches (already in version)

https://www.keepalived.org/release-notes/Release-2.2.7.html
https://www.keepalived.org/release-notes/Release-2.2.4.html
https://www.keepalived.org/release-notes/Release-2.2.3.html
https://www.keepalived.org/release-notes/Release-2.2.2.html
https://www.keepalived.org/release-notes/Release-2.2.0.html
https://www.keepalived.org/release-notes/Release-2.1.5.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:14:35 +01:00
Maxim Kochetkov
714498eb29 package/osm2pgsql: bump version 1.5.2
Release-notes: https://github.com/openstreetmap/osm2pgsql/releases/tag/1.5.2

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:14:03 +01:00
Maxim Kochetkov
119f221306 package/libosmium: bump version to 2.17.3
Release-notes: https://github.com/osmcode/libosmium/releases/tag/v2.17.3

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:13:49 +01:00
Maxim Kochetkov
df013c4de6 package/libgeos: bump version to 3.10.2
Changelog: https://github.com/libgeos/geos/blob/3.10.2/NEWS

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:13:34 +01:00
James Hilliard
c2151a3f22 package/meson: bump to version 0.61.1
Drop patch that is now upstream.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:11:42 +01:00
Fabrice Fontaine
7ddbcb76aa package/bullet: bump to version 3.21
- Drop patch (already in version)
- Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 16:09:08 +01:00
Peter Seiderer
dc66c5901c package/gst1-python: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:55:44 +01:00
Peter Seiderer
ce4bc45000 package/gst-omx: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:55:34 +01:00
Peter Seiderer
aa87c2e168 package/gstreamer1-editing-services: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:55:27 +01:00
Peter Seiderer
56c0d7b886 package/gst1-rtsp-server: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:55:19 +01:00
Peter Seiderer
aef9027773 package/gst1-vaapi: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:55:09 +01:00
Peter Seiderer
8de78f3da0 package/gst1-libav: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:54:59 +01:00
Peter Seiderer
efd9eac4d7 package/gst1-devtools: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:54:37 +01:00
Peter Seiderer
4d02d512f3 package/gst1-plugins-ugly: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:54:26 +01:00
Peter Seiderer
ed2f427fd2 package/gst1-plugins-bad: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:54:05 +01:00
Peter Seiderer
8741ac0e50 package/gst1-plugins-good: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:53:44 +01:00
Peter Seiderer
ecdc76a39c package/gst1-plugins-base: bump version to 1.18.6
- removed 0001-gst-libs-gst-video-gstvideoaggregator.c-fix-build-wi.patch
  (upstream accepted [1], [2])

[1] https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/-/merge_requests/974
[2] d86cf6314f.patch

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:53:33 +01:00
Peter Seiderer
58be19b028 package/gstreamer1: bump version to 1.18.6
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:53:22 +01:00
Bernd Kuhls
9a60a0ff34 package/intel-gmmlib: bump version to 22.0.2
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 15:01:46 +01:00
Bernd Kuhls
6ec46f5608 package/dovecot-pigeonhole: bump version to 0.5.18
Release notes:
https://github.com/dovecot/pigeonhole/blob/release-0.5.18/NEWS

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 14:59:52 +01:00
Adam Duskett
c60848387b package/python-django: bump to version 4.0.2
Tested with:
support/testing/run-tests tests.package.test_python_django.TestPythonPy3Django

Signed-off-by: Adam Duskett <aduskett@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 14:59:11 +01:00
Peter Seiderer
e26b261ab5 package/mtools: bump version to 4.0.37
For details see [1].

[1] https://lists.gnu.org/archive/html/info-gnu/2022-01/msg00006.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 14:58:38 +01:00
Bernd Kuhls
e830f40635 package/kodi-pvr-mythtv: bump version to 19.0.7-Matrix
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 13:55:44 +01:00
Peter Seiderer
ad2a752d7b package/findutils: bump version to 4.9.0
For details see [1].

[1] https://lists.gnu.org/archive/html/info-gnu/2022-02/msg00003.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 13:55:04 +01:00
Bernd Kuhls
b3058f39b8 package/tor: bump version to 0.4.6.10
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 13:52:03 +01:00
Peter Korsgaard
1983d2e6a3 package/{glibc, localedef}: security bump for additional post-2.34.x fixes
Fixes the following security issues:

  CVE-2022-23219: Passing an overlong file name to the clnt_create
  legacy function could result in a stack-based buffer overflow when
  using the "unix" protocol.  Reported by Martin Sebor.

  CVE-2022-23218: Passing an overlong file name to the svcunix_create
  legacy function could result in a stack-based buffer overflow.

  CVE-2021-3998: Passing a path longer than PATH_MAX to the realpath
  function could result in a memory leak and potential access of
  uninitialized memory.  Reported by Qualys.

  CVE-2021-3999: Passing a buffer of size exactly 1 byte to the getcwd
  function may result in an off-by-one buffer underflow and overflow
  when the current working directory is longer than PATH_MAX and also
  corresponds to the / directory through an unprivileged mount
  namespace.  Reported by Qualys.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Reviewed-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 13:51:09 +01:00
James Hilliard
89cf28a8f3 package/python3-setuptools: bump to version 60.7.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 12:44:03 +01:00
Fabio Estevam
e9fc598a4d configs/warp7: bump Kernel and U-Boot version
Bump U-Boot to 2022.01 and kernel to version 5.16.5.

Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 12:43:18 +01:00
Fabrice Fontaine
aad609936f package/libusb: bump to version 1.0.25
Drop patch (already in version)

https://github.com/libusb/libusb/blob/v1.0.25/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-05 12:42:00 +01:00
Bernd Kuhls
b784733f9c package/php: bump version to 8.0.15
Changelog: https://www.php.net/ChangeLog-8.php#8.0.15

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 23:24:33 +01:00
Bernd Kuhls
bd6f38c254 package/{mesa3d, mesa3d-headers}: bump version to 21.3.5
Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2022-January/000660.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 23:24:26 +01:00
Bernd Kuhls
6939ed9171 package/samba4: bump version to 4.15.4
Release notes: https://www.samba.org/samba/history/samba-4.15.4.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 23:15:19 +01:00
James Hilliard
b4ddaeb080 package/bat: bump to version 0.19.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 23:05:04 +01:00
Fabrice Fontaine
f54f61eb3a package/libblockdev: bump to version 2.26
- Add upstream link to first patch
- Drop second patch (already in version)

https://github.com/storaged-project/libblockdev/blob/2.26-1/NEWS.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 23:04:49 +01:00
Fabrice Fontaine
ed81b96cc5 package/ddrescue: bump to version 1.26
https://lists.gnu.org/archive/html/info-gnu/2022-01/msg00013.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 22:55:01 +01:00
Bernd Kuhls
125ec43bf0 package/kodi-pvr-iptvsimple: bump version to 19.1.0-Matrix
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 22:54:19 +01:00
Bernd Kuhls
b8720e7048 package/kodi-pvr-hts: bump version to 19.0.6-Matrix
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-02-04 22:54:09 +01:00
Joachim Wiberg
4353c71646 package/gdb: backport fix for gdbserver 11.1 on aarch64
Backported from upstream GDB geb79b23, with ChangeLogs stripped so the
patch applies properly on Buildroot.

    https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=eb79b23

Fixes the following issue:

    # gdbserver /dev/hvc1 inadyn -n -l debug
    Process inadyn created; pid = 675
    Remote debugging using /dev/hvc1
    ../../gdbserver/regcache.cc:257: A problem internal to GDBserver has been detected.
    Unknown register tag_ctl requested

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
[yann.morin.1998@free.fr: add SoB in patch, provided live on IRC]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-02-03 21:56:17 +01:00
Fabrice Fontaine
995c093d6a package/mpdecimal: bump to version 2.5.1
Drop patch (already in version) and so autoreconf

https://www.bytereef.org/mpdecimal/changelog.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-02-03 21:44:43 +01:00
Fabrice Fontaine
7a4944569c package/ghostscript: bump to version 9.55.0
- Drop patches (already in version)
- Disable pdf which fails to build and was added by
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=316c3a08269212f1005709da64efcb383f8f5ce0
- Update hash of license file (references on ETS related patents removed
  with
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=431167121968b066d90b0506347b6eb779e08a3f)

https://www.ghostscript.com/doc/9.54.0/News.htm
https://www.ghostscript.com/doc/9.55.0/News.htm

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-02-03 21:44:43 +01:00
Michael Opdenacker
8ef413b59a linux: clarify BR2_LINUX_KERNEL_CUSTOM_DTS_PATH description
This clarifies that custom DTSI files can be passed too,
and that the files are compiled after being copied to the
Linux kernel source tree.

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-02-03 21:44:43 +01:00
Giulio Benetti
de1a373787 package/poppler: fix build failure due to gcc bug 68485
The bullet package exhibits gcc bug 68485 when built for the Microblaze
architecture with optimization enabled, which causes a build failure.

As done for other packages in Buildroot work around this gcc bug by
setting optimization to -O0 if BR2_TOOLCHAIN_HAS_GCC_BUG_68485=y like we
already do for BR2_TOOLCHAIN_HAS_GCC_BUG_85180=y.

Fixes:
http://autobuild.buildroot.net/results/96e77ddba5042ba4dacb16b328fc298a4f00f49a/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-02-03 21:44:43 +01:00