Commit Graph

110 Commits

Author SHA1 Message Date
Clement Ramirez
d5162e790d package/connman: security bump version to 1.42
The 1.42 version of connman comes with the following CVEs fixes :
 - CVE-2022-32292
 - CVE-2022-32293
 - CVE-2023-28488

The first two CVEs have been fixed wuth upstream patches [0] which we
carry since 2f2b4c80f4 (package/connman: fix CVE-2022-3229{2,3}), now
included in this version bump; the third CVE [2] is also fixed by this
version bump [3].

[0] https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=d1a5ede5d255bde8ef707f8441b997563b9312bd
    https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=72343929836de80727a27d6744c869dff045757c
    https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=416bfaff988882c553c672e5bfc2d4f648d29e8a

[1] 2f2b4c80f4 package/connman: fix CVE-2022-3229{2,3}

[2] https://nvd.nist.gov/vuln/detail/CVE-2023-28488

[3] https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=99e2c16ea1cced34a5dc450d76287a1c3e762138

Signed-off-by: Clement Ramirez <ramirez.clement3@gmail.com>
[yann.morin.1998@free.fr:
  - squash CVE-2023-28488 backport with version bump
  - reword commit log
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-08-20 11:05:36 +02:00
Baruch Siach
651429d0b8 boot/mv-ddr-marvell: fix build with gcc 12
gcc 12 added a warning that triggers on access to low addresses. Add a
patch to allow access since this is normal for low level code.

Rebase our existing patch on top. While at it, add also a proper
Upstream tag.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4795673785

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-08-12 16:23:21 +02:00
Thomas Petazzoni
503252d8b0 boot/lpc32xxcdl: remove package
This package has dubious licensing conditions (not even documented in
the .mk file), and is a bootloader for very old platforms. The
defconfigs making use of it have been removed in Buildroot in 2014, in
commit c6a410964b ("configs: remove
lpc32xx defconfigs"), so let's get rid of the package.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Acked-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
[yann.morin.1998@free.fr: remove reference in test]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-08-10 19:41:42 +02:00
Thomas Petazzoni
f3b22e3642 package/elf2flt: refresh patches
Some patches had some fuzz, and patch 0004 was no longer applicable
using "git am". Patch 0006 is renamed so that it matches the commit
log title, as generated automatically by git format-patch.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Tested-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-08-06 15:43:07 +02:00
Neal Frager
2b738044ed board/versal: clean shellcheck issues
This patch cleans up the shellcheck issues in the versal post scripts.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-08-06 14:25:57 +02:00
Bernd Kuhls
1391c99d62 package/binutils: drop 2.38.x series
Now that 2.41.x has been added, that 2.40.x is the default version,
drop support for 2.38.x.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-08-01 23:12:01 +02:00
Bernd Kuhls
3fd79fcb61 package/gerbera: bump version to 1.12.1
Removed patch which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-30 22:43:06 +02:00
Fabrice Fontaine
7205df8a4f package/libmemcached: bump to version 1.1.4
- Switch to an active fork
- Switch to cmake-package
- Drop all patches (not needed anymore)
- Use LICENSE file instead of COPYING as COPYING is now a symlink to
  LICENSE
- Handle libevent and openssl dependencies

https://awesomized.github.io/libmemcached/ChangeLog-1.1.html#v-1-1-4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-30 00:17:52 +02:00
Bernd Kuhls
d2a2fb01c4 package/libdeflate: bump version to 1.18
Removed patches included in upstream release.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-29 23:33:56 +02:00
Thomas Petazzoni
931d5bd797 package/gcc, .checkpackageignore: fix warnings about gcc 13.2.0 patches
Patch 0001 is an old patch we have been carrying forever, and it has
no upstream status.

Patch 0002 is upstream, add proper upstream tag.

Fixes:

package/gcc/13.2.0/0001-disable-split-stack-for-non-thread-builds.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)
package/gcc/13.2.0/0002-RISC-V-fix-build-issue-with-gcc-4.9.x.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)

In:

https://gitlab.com/buildroot.org/buildroot/-/jobs/4763535592

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-28 22:50:56 +02:00
Thomas Petazzoni
599ced8690 .checkpackageignore: update after package/gcc/10.4.0 is gone
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-28 22:22:56 +02:00
Julien Olivain
50ef6a6f59 package/poco: bump version to 1.12.4
For change log, see:
https://github.com/pocoproject/poco/blob/poco-1.12.4-release/CHANGELOG

This commit also drop the package patch, which was included upstream in
version 1.12.3:
3884c734c2

The file .checkpackageignore is also updated to reflect this patch
removal.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-28 22:11:29 +02:00
Thomas Petazzoni
1bd35cd712 .checkpackageignore: update file, weston patch removed
The weston patch was removed as part of commit
318f08715c ("package/weston: bump to
version 12.0.1"), but .checkpackageignore was not updated accordingly.

Fixes:

  https://gitlab.com/buildroot.org/buildroot/-/jobs/4758335423

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-28 09:21:32 +02:00
Guillaume W. Bres
39610c8b3c package/mbw: bump to version 2.0
This new version is released under GPL-3.0. The patch can be removed
as it has been accepted upstream as of commit
86a38c688a.

Signed-off-by: Guillaume W. Bres <guillaume.bressaix@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-28 00:06:07 +02:00
Bernd Kuhls
f6b96fbd62 package/make: bump version to 4.4.1
Removed all patches, they are included in this release.

Release notes:
https://lists.gnu.org/archive/html/info-gnu/2023-02/msg00011.html
https://lists.gnu.org/archive/html/info-gnu/2022-10/msg00008.html
https://lists.gnu.org/archive/html/info-gnu/2020-01/msg00004.html

The COPYING license file has changed due to the switch from http:// to
https:// URLs in the text.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-27 23:15:16 +02:00
Julien Olivain
0403bdd929 package/acpica: bump to version 20230628
For change log since 20220331, see:
- https://github.com/acpica/acpica/blob/R06_28_23/documents/changes.txt

This commit also drop the patch removing -Werror in CFLAGS, as an
alternative is now available upstream, merged in [1]. This commit is
included in release 20221020. The build commands are updated
accordingly to set the new NOWERROR=TRUE option to achieve the same
behavior.

With the patch removal, .checkpackageignore is also updated
accordingly.

Upstream commit [2] also introduced a use of wcslen() and <wchar.h>.
This commit was first included in tag R10_20_22 (version 20221020).
Therefore, this new version need wchar. The new depedency is added.

The _SOURCE file is also changed from acpica-unix2 to acpica-unix,
as the current acpica download page at [3] shows:

"""
Note: The unix2 source package is deprecated since the dual license is
now included in all source modules (along with the Intel
license). This package will be removed from future ACPICA releases.
"""

The _SITE url is also updated to the new download link, since the
acpica website now redirects to Intel:

    curl -si https://www.acpica.org | grep Location:
    Location: https://www.intel.com/content/www/us/en/developer/topic-technology/open/acpica/overview.html

The license file hash is also updated, due to the copyright year
update. It is also worth mentioning that the files in the new archive
have three alternative licenses in their headers: Intel, BSD-3-Clause
and GPL-2.0.

Finally, since a SHA1 hash is published on the download page, it is
added to the hash file.

This version bump is motivated by the introduction of RISC-V related
definitions.

[1] 3fd0f94040
[2] cd6a308975
[3] https://www.intel.com/content/www/us/en/developer/topic-technology/open/acpica/download.html

Cc: Erico Nunes <nunes.erico@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-27 12:34:49 +02:00
Bernd Kuhls
e84fad2848 package/hiredis: bump version to 1.2.0
Removed patch which is included in this release.

Changelog: https://github.com/redis/hiredis/blob/master/CHANGELOG.md

This release includes improvements for static-only builds:
https://github.com/redis/hiredis/pull/1160

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-27 12:29:39 +02:00
James Hilliard
6daa5562fe package/wayland-utils: bump to version 1.2.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-07-25 22:59:11 +02:00
Thomas Devoogdt
0721f4e71a package/fluent-bit: bump to version 2.1.7
Fluent Bit v2.1 is the start of the new stable series of the project.

Release Notes:

  https://fluentbit.io/announcements/v2.1.0/
  https://fluentbit.io/announcements/v2.1.1/
  https://fluentbit.io/announcements/v2.1.2/
  https://fluentbit.io/announcements/v2.1.3/
  https://fluentbit.io/announcements/v2.1.4/
  https://fluentbit.io/announcements/v2.1.5/
  https://fluentbit.io/announcements/v2.1.6/
  https://fluentbit.io/announcements/v2.1.7/

Fluent Bit v2.1.7 contains this list of upstreamed patches:

  https://github.com/fluent/fluent-bit/pull/7266
  https://github.com/fluent/fluent-bit/pull/7254
  https://github.com/fluent/fluent-bit/pull/7253

So the old patches can be dropped.

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-23 11:50:19 +02:00
Thomas Petazzoni
0cfb890a04 package/resiprocate: fix Upstream: tags in patches
Fixes:

package/resiprocate/0002-rutil-OpenSSLInit-disable-use-of-legacy-OpenSSL-memo.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)
package/resiprocate/0003-rutil-fix-typo-in-preprocessor-condition.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)
package/resiprocate/0004-resip-stack-ssl-Security-cxx-remove-deprecated-OpenS.patch:0: missing Upstream in the header (http://nightly.buildroot.org/#_additional_patch_documentation)
make: *** [Makefile:1253: check-package] Error 1

In:

https://gitlab.com/buildroot.org/buildroot/-/jobs/4718833134

and while at it, we also address the same issue in patch 0001, which
was currently ignored through .checkpackageignore.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-22 23:53:54 +02:00
Francois Perrad
2c97f3fc0b package/janet: bump to version 1.29.1
remove merged patch

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-21 23:12:44 +02:00
Bernd Kuhls
2cfa86a548 package/erlang: bump version to 26.0.2
Needed for compatibility with OpenSSL 3.x which was added in version 25:
f11a9f2d3a

Added dependency to wchar due to upstream commit
bd0865ff86

Removed all patches.
Added new patch to fix build with defconfig bootlin-x86-64-uclibc.

CVE-2021-29221 does not need to be ignored anymore, the latest broken
version was 23.2.3.

Removed ERLANG_REMOVE_SSL_DEPS hook, bug was fixed upstream:
f03feee7e3

Updated ERLANG_RUN_AUTOCONF due to upstream commit
d277599a42 (diff-9d7b6b593fbd689e1f48ba5964dc3bcc87c51e8e1aab5ff496a4e5ba3a248775R1233)

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-20 23:08:03 +02:00
Lang Daniel
d8291fde5e package/llvm-project: bump to version 15.0.3
- Add new build dependencies to lld and llvm
- Add host-gcc and gcc >= 7.x dependency since clang doesn't build with gcc 6.3

  [ 28%] Building CXX object utils/TableGen/CMakeFiles/obj.clang-tblgen.dir/TableGen.cpp.o
  output/build/host-clang-15.0.3/utils/TableGen/RISCVVEmitter.cpp: In instantiation of ‘{anonymous}::SemaSignatureTable::init(llvm::ArrayRef<{anonymous}::SemaRecord>)::<lambda(auto:2&)> [with auto:2 = const llvm::SmallVector<clang::RISCV::PrototypeDescriptor>]’:
  /usr/include/c++/6/bits/stl_algo.h:3769:5:   required from ‘_Funct std::for_each(_IIter, _IIter, _Funct) [with _IIter = std::_Rb_tree_const_iterator<llvm::SmallVector<clang::RISCV::PrototypeDescriptor> >; _Funct = {anonymous}::SemaSignatureTable::init(llvm::ArrayRef<{anonymous}::SemaRecord>)::<lambda(auto:2&)>]’
  output/host/include/llvm/ADT/STLExtras.h:1611:23:   required from ‘UnaryFunction llvm::for_each(R&&, UnaryFunction) [with R = std::set<llvm::SmallVector<clang::RISCV::PrototypeDescriptor>, {anonymous}::SemaSignatureTable::init(llvm::ArrayRef<{anonymous}::SemaRecord>)::Compare>&; UnaryFunction = {anonymous}::SemaSignatureTable::init(llvm::ArrayRef<{anonymous}::SemaRecord>)::<lambda(auto:2&)>]’
  output/build/host-clang-15.0.3/utils/TableGen/RISCVVEmitter.cpp:249:64:   required from here
  output/build/host-clang-15.0.3/utils/TableGen/RISCVVEmitter.cpp:249:50: error: cannot call member function ‘void {anonymous}::SemaSignatureTable::insert(llvm::ArrayRef<clang::RISCV::PrototypeDescriptor>)’ without object
    llvm::for_each(Signatures, [this](auto &Sig) { insert(Sig); });
                                                      ^~~~~~
  utils/TableGen/CMakeFiles/obj.clang-tblgen.dir/build.make:313: recipe for target 'utils/TableGen/CMakeFiles/obj.clang-tblgen.dir/RISCVVEmitter.cpp.o' failed
  make[4]: *** [utils/TableGen/CMakeFiles/obj.clang-tblgen.dir/RISCVVEmitter.cpp.o] Error 1

  Indeed LLVM_TEMPORARILY_ALLOW_OLD_TOOLCHAIN is OFF, the CheckCompilerVersion.cmake
  trigger an error if gcc < 7.x. Indded since llvm 15 this option check for C++17 [1]

  The last gcc 7.x version (7.5) has been released in 2019.
  Fixing llvm/clang issues for old compiler maybe it's not worth it.

- Remove LLVM_TEMPORARILY_ALLOW_OLD_TOOLCHAIN since
  gcc >= 7 is mendatory.

  When updating LLVM, we also need to update the version of
  SPIRV_LLVM_TRANSLATOR because its CMakeLists.txt verifies the LLVM
  base version [2].

  The patch
  package/llvm/0002-Add-missing-cstdint-header-to-Signals.h.patch has
  been included in tag llvmorg-15.0.0 of llvm-project.

  [1] 4c72deb613
  [2] 5be08b8bb9/CMakeLists.txt (LL82C6-L82C6)

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Sebastian Weyer <sebastian.weyer@smile.fr>
Tested-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-20 22:57:43 +02:00
Lang Daniel
5fad34d0d1 package/libclc: move to llvm-project subfolder
To make version bumping easier, move libclc to a new llvm-project subfolder
and specify site for the project. Since the version of libclc is more
recent than the version specified in LLVM_PROJECT_VERSION, don't change
it for now until a later update.

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Sebastian Weyer <sebastian.weyer@smile.fr>
Tested-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-20 22:41:53 +02:00
Lang Daniel
2d660e4cdc package/clang: move to llvm-project subfolder
To make version bumping easier, move clang to a new llvm-project subfolder
and specify site and version for the project.

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Sebastian Weyer <sebastian.weyer@smile.fr>
Tested-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-20 22:41:35 +02:00
Lang Daniel
2bef68f3b0 package/llvm: move to llvm-project folder
To make updating easier, move llvm into the llvm-project folder
and use the defined information.

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Sebastian Weyer <sebastian.weyer@smile.fr>
Tested-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-20 22:39:20 +02:00
Bernd Kuhls
525cb6a8fb package/pound: bump version to 4.8
Original upstream ended the development of pound 2.8 in 2022:
https://groups.google.com/g/pound_proxy/c/O8xaIIODw18

Switch project to use a maintained fork at https://github.com/graygnuorg
and remove all patches, they are not needed anymore.

Follow the rename of the license file:
223b4276ac

Release notes: https://github.com/graygnuorg/pound/blob/master/NEWS

This bump includes compatibility with OpenSSL 3.x (since version 4.0)
and added optional support for pcre2:
a797374f22

Fixes:
http://autobuild.buildroot.net/results/1ca/1ca31debd709f634e65492bee0806ca81bcf9ee5/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-18 23:13:14 +02:00
Bernd Kuhls
10f40a6b0c package/gnuradio: bump version to 3.10.7.0
Removed all patches, they are included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-18 23:12:09 +02:00
Julien Olivain
76f20b728f package/gawk: bump to version 5.2.2
For news since 5.2.0, see:
https://git.savannah.gnu.org/cgit/gawk.git/tree/NEWS?h=gawk-5.2.2

For detailed change log, see:
https://git.savannah.gnu.org/cgit/gawk.git/tree/ChangeLog?h=gawk-5.2.2

This commit also removes the package patch, as it is included in
upstream version 5.2.1, in:
https://git.savannah.gnu.org/cgit/gawk.git/commit/?id=baab183439ff4e0c6b77d62156d447e61fc1dcfb

The file .checkpackageignore is also updated to reflect this patch
removal.

The motivation of this bump is mainly the RISC-V fixes.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-18 22:43:27 +02:00
Danny Wood
3c66f65a6a package/libopenssl: bump version to 3.0.9
Rebase patches onto new version

Remove 0005-crypto-perlasm-ppc-xlate.pl-add-linux64v2-flavour.patch,
0006-Add-support-for-io_pgetevents_time64-syscall.patch, and
0007-Fixup-support-for-io_pgetevents_time64-syscall.patch as these are
already applied upstream

Updated license after switch to Apache license:
https://www.openssl.org/blog/blog/2021/06/17/OpenSSL3.0ReleaseCandidate/

[Bernd: fixed license file/hash]

Signed-off-by: Danny Wood <danny@rotronics.co.uk>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Peter: update .checkpackageignore]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-07-15 16:39:28 +02:00
Thomas Petazzoni
d3db2e61ce .checkpackageignore: remove entry to tovid patch
The tovid package was removed in commit
7be241b49c, but .checkpackageignore was
forgotten.

Fixes:

https://gitlab.com/buildroot.org/buildroot/-/jobs/4658045130

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-14 23:48:33 +02:00
Bernd Kuhls
ad276d94a3 package/util-linux: bump version to 2.39
Release notes:
https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes

Removed patch which is included in this version bump.

Updated license hash due to upstream commit
https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=faeb1b64b36ededd1a0b62555cad65f002d47ac6
adding the BSD-2-Clause license:
https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/diff/README.licensing?id=faeb1b64b36ededd1a0b62555cad65f002d47ac6

Even though there is now some BSD-2-Clause code in util-linux, no
license file was added upstream with the BSD-2-Clause text.

Reformatted UTIL_LINUX_LICENSE and added BSD-2-Clause license.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-14 12:25:44 +02:00
Bernd Kuhls
da2a418ff9 package/eudev: bump version to 3.2.12
Release notes:
https://github.com/eudev-project/eudev/releases/tag/v3.2.12

Removed patch 0001, a different fix was applied in 2015:
c7badd37d3

Removed patch 0002 which is included in this release.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-12 23:35:30 +02:00
Grzegorz Blach
800c7de810 package/python-hiredis: bump to version 2.2.3
The existing patch is removed as it has been applied upstream in
commit
d4d701a065.

The license file has changed, it is now named LICENSE, and the
contents are not the same even though it still contains the
BSD-3-Clause license.

Signed-off-by: Grzegorz Blach <grzegorz@blach.pl>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-12 22:55:20 +02:00
Bernd Kuhls
61d2fd4008 package/ntp: bump version to 4.2.8p17
Changelog: https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/NEWS

Removed patch 0003, upstream updated autogen to 5.18.16, see Changelog.

Removed patch 0004, fixed upstream:
https://bugs.ntp.org/show_bug.cgi?id=3741

Use sha256 hash provided by upstream.

Updated license hash due to upstream additions to the license
text (https://bugs.ntp.org/show_bug.cgi?id=3725) which do not affect
the license terms: copyright year updates, list of authors, etc.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-12 21:36:22 +02:00
Thomas Petazzoni
89ffd9a479 .checkpackageignore: remove qt5wayland patch
This patch has been dropped in commit
6b23dff9e7, which forgot to update
.checkpackageignore.

Fixes:

  https://gitlab.com/buildroot.org/buildroot/-/jobs/4629552432

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-11 10:12:21 +02:00
Bernd Kuhls
506f018b3a package/libasplib: remove package
Added in 2015 to be used by Kodi ADSP addons these efforts have stopped:
https://forum.kodi.tv/showthread.php?tid=252871&pid=3053658#pid3053658
so this package is no longer needed.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-10 19:44:57 +02:00
Thomas Petazzoni
ea7caf9c47 .checkpackageignore: update after patch removals
Several recent commits removed patches without updating
.checkpatchignore, let's fix that.

Fixes:

.checkpackageignore:882: ignored file package/linuxptp/0001-missing.h-drop-clock_nanosleep-replacement.patch is missing
.checkpackageignore:883: ignored file package/linuxptp/0002-makefile-use-conditional-assignment-for-KBUILD_OUTPUT.patch is missing
.checkpackageignore:949: ignored file package/mariadb/0002-include-ssl_compat.h-fix-build-with-libressl-3.5.0.patch is missing
.checkpackageignore:1357: ignored file package/rtl8192eu/0002-Fix-conflicting-get_ra-on-PowerPC.patch is missing
.checkpackageignore:1685: ignored file package/zlib-ng/0001-Use-static-keyword-for-vec_sumsu-to-prevent-undefine.patch is missing
.checkpackageignore:1686: ignored file package/zlib-ng/0002-CMakeLists.txt-fix-version-in-zlib.pc-when-building-.patch is missing
.checkpackageignore:1687: ignored file package/zlib-ng/0003-zlib-ng-check-that-sys-auxv.h-exists-at-configure-time.patch is missing

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-10 19:41:41 +02:00
Bernd Kuhls
c3cee366cb package/musl: bump version to 1.2.4
Removed patch which is included in this release.

Switched _SITE according to http://www.musl-libc.org/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-09 18:27:06 +02:00
Bernd Kuhls
5673ea3ce4 package/putty: bump version to 0.78
Changelog:
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html

Removed patch, the patched file does not exist anymore in this release.

Updated license hash due to copyright year bump:
https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=ce59d8bb4f7a1c6aff677d1431ec84a803a24091

Switched build system to cmake.

Added optional dependency to libgtk3.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-03 22:36:06 +02:00
Bernd Kuhls
6a21733f83 package/e2fsprogs: bump version to 1.47.0
Release notes:
https://e2fsprogs.sourceforge.net/e2fsprogs-release.html

Removed patch which is included this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-03 21:54:36 +02:00
Julien Olivain
2bde8c744c package/xvisor: bump to version 0.3.2
For change log since version 0.3.1, see:
https://www.xhypervisor.org/index.php?page=news/20230101
or
https://github.com/xvisor/xvisor/blob/master/docs/releases/v0.3.2

This commit also drop the patch, as an equivalent fix, included in this
version, was made upstream in:
eb1d1dd465

The file .checkpackageignore is also updated to reflect this patch
removal.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-03 21:52:24 +02:00
Bernd Kuhls
ca4a986c9d package/stellarium: bump version to 23.2
Release notes:
http://stellarium.org/release/2023/03/26/stellarium-23.1.html
http://stellarium.org/release/2023/07/02/stellarium-23.2.html

Removed patch which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-03 21:17:20 +02:00
Romain Naour
8a55a0bf8e package/binutils: drop 2.37.x series
Now that 2.40.x has been added, that 2.39.x is the default version,
drop support for 2.37.x.

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-01 23:07:29 +02:00
Konstantin Menyaev
0c4c7da2f3 package/dnsmasq: improve init script
- Use pidfile for more accurate process match
- Fix coding style issues to be able to drop a problem reported by
  check-package on missing variables

Signed-off-by: Konstantin Menyaev <KAMenyaev@sberdevices.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-01 22:41:35 +02:00
Bernd Kuhls
9fc0d3a4e7 package/syslog-ng: bump version to 4.2.0
Updated upstream URL of patch file.

Release notes:
https://axoflow.com/axosyslog-release-4-2/
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.2.0

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Chris Packham <judge.packham@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-01 16:37:52 +02:00
Bernd Kuhls
62ad2ec219 package/libbsd: bump version to 0.11.7
Release notes:
https://archive.hadrons.org/software/libbsd/libbsd-0.11.4.announce
https://archive.hadrons.org/software/libbsd/libbsd-0.11.5.announce
https://archive.hadrons.org/software/libbsd/libbsd-0.11.6.announce
https://archive.hadrons.org/software/libbsd/libbsd-0.11.7.announce

Removed patch which is included in upstream release:
873639ebb5

Update hash of license file, which has changed due to:
- Copyright year updates
- Changes in list of files affected by the different license
- Removal of one part under BSD-4-Clause, but as there are still other
  parts under BSD-4-Clause, this doesn't change the overall license
  information in Buildroot

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-01 15:59:04 +02:00
Bernd Kuhls
af87ad197c package/libssh2: bump version to 1.11.0
Changelog:
https://www.libssh2.org/changes.html
https://lists.haxx.se/pipermail/libssh2-devel/2023-May/000114.html

Removed patch which is included in current release:
b952674f12

Updated license hash due to copyright year bump:
1a186f1ead

Switched tarball to .xz

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-01 15:23:19 +02:00
Peter Korsgaard
cb496970c0 package/tiff: security bump to version 4.5.1
Fixes the following security issues:

- CVE-2023-1916: A flaw was found in tiffcrop, a program distributed by the
  libtiff package.  A specially crafted tiff file can lead to an
  out-of-bounds read in the extractImageSection function in
  tools/tiffcrop.c, resulting in a denial of service and limited information
  disclosure.  This issue affects libtiff versions 4.x.

- CVE-2023-25434: libtiff 4.5.0 is vulnerable to Buffer Overflow via
  extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

- CVE-2023-26965: loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0
  has a heap-based use after free via a crafted TIFF image

Drop the now upstream
0001-tiffcrop-Correct-simple-copy-paste-error-Fix-488.patch.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-06-26 09:05:17 +02:00
Bernd Kuhls
2fa8914bf1 package/raptor: security bump version to 2.0.16
This version included the patches removed by this commit, no new CVEs
were fixed.

Release notes: https://librdf.org/raptor/RELEASE.html#rel2_0_16

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2023-06-25 21:42:32 +02:00