Commit Graph

64784 Commits

Author SHA1 Message Date
Christian Stewart
ec8e8aaa3a package/runc: bump to version 1.1.4
This is the fourth patch release in the 1.1.z series of runc, primarily fixing a
regression introduced in 1.1.3 related to device rules, as well as other bugs.

 - Fix mounting via wrong proc fd. When the user and mount namespaces are used,
 and the bind mount is followed by the cgroup mount in the spec, the cgroup was
 mounted using the bind mount's mount fd.
 - Switch kill() in libcontainer/nsenter to sane_kill().
 - Fix "permission denied" error from runc run on noexec fs.
 - Fix failed exec after systemctl daemon-reload. Due to a regression in v1.1.3,
 the DeviceAllow=char-pts rwm rule was no longer added and was causing an error
 open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.

https://github.com/opencontainers/runc/releases/tag/v1.1.4

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 12:14:12 +02:00
Julien Olivain
93f53e4e17 package/fluidsynth: bump to version 2.2.9
For change log since v2.2.8, see:
- https://github.com/FluidSynth/fluidsynth/releases/tag/v2.2.9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:58:54 +02:00
Yann E. MORIN
67ccc49fab DEVELOPERS: Add Yann (at work) for gpsd
Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:56:29 +02:00
Yann E. MORIN
05595cbeac package/gpsd: bump to 3.24
In 3.24, the NTRIP and NMEA0183 drivers are now always enabled, so the
configure options ntrip and nmea0183 have been removed (upstream commits
f8cf4c922 and 838220fee respectively).

As a consequence, drop the options in menuconfig. We do not need to add
legacy support for those options. Indeed, users who had those enabled
will still get the feature, and those who did not will get them, in both
cases without loss of feature.

Finally, we need to fix a runtime issue that makes the kernel segfault
(yeah, that much), because upstream has been yoda-ifying their code, and
they actually borked a comparison. The issue has been fixed upstream,
but that is in a patch tha cobbles up many changes and brings new stuff,
so we just fix the issue with an unupstreamable patch (which we can drop
when we bump when upstream tags a newer release and we update).

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:56:25 +02:00
Yann E. MORIN
a99f1ee0f6 package/gpsd: remove obsolete config option
The oldstyle option has been removed a while ago now:
    2015-02-22 a5a123b4f3b0 Feature removal - delete last remnants of
                            old pre-JSON protocol from libgps.

Drop it from Buildroot now.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:55:17 +02:00
Fabrice Fontaine
2ee1bd7bb2 package/libqb: bump to version 2.0.6
https://github.com/ClusterLabs/libqb/releases/tag/v2.0.6
https://github.com/ClusterLabs/libqb/releases/tag/v2.0.5
https://github.com/ClusterLabs/libqb/releases/tag/v2.0.4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:36:05 +02:00
Fabrice Fontaine
308678e528 package/libtasn1: bump to version 4.19.0
Drop patch (already in version) and so autoreconf

https://gitlab.com/gnutls/libtasn1/-/blob/v4.19.0/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:31:33 +02:00
Fabrice Fontaine
dde7b6dfac package/libldns: bump to version 1.8.3
Drop patch (already in version)

https://github.com/NLnetLabs/ldns/blob/1.8.3/Changelog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:18:54 +02:00
Fabrice Fontaine
adaf397f0b package/libnftnl: bump to version 1.2.3
https://www.netfilter.org/projects/libnftnl/files/changes-libnftnl-1.2.2.txt
https://www.netfilter.org/projects/libnftnl/files/changes-libnftnl-1.2.3.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:16:06 +02:00
Fabrice Fontaine
8ba9b47d6b package/libnice: bump to version 0.1.19
https://gitlab.freedesktop.org/libnice/libnice/-/blob/0.1.19/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:08:36 +02:00
Fabrice Fontaine
000546fd7c package/gensio: fix musl build
Fix the following musl build failure raised since bump to version 2.5.2
in commit 5bb747f0b7:

gensiotool.c:47:10: fatal error: sys/unistd.h: No such file or directory
   47 | #include <sys/unistd.h>
      |          ^~~~~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/99a60831da94f94fdf798c1c30cc09f0e51416c7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 11:07:38 +02:00
Леонид Юрьев (Leonid Yuriev)
b8ff431322 package/libmdbx: bump version to 0.11.11
This is stable bugfix release of libmdbx. So it is reasonable to backport
this patch to all applicable releases/branches of Buildroot.

Release notes since v0.11.8:
 - for v0.11.9  https://gitflic.ru/project/erthink/libmdbx/release/4742671e-a691-45a5-88de-c6341f762d0b
 - for v0.11.10 https://gitflic.ru/project/erthink/libmdbx/release/2886daeb-f583-4c30-bede-b8e60965c834
 - for v0.11.11 https://gitflic.ru/project/erthink/libmdbx/release/7f1a026d-28aa-4d92-a1e0-a1a75ebe0b3d

The complete ChangeLog: https://gitflic.ru/project/erthink/libmdbx/blob?file=ChangeLog.md

Signed-off-by: Леонид Юрьев (Leonid Yuriev) <leo@yuriev.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:54:29 +02:00
Thomas Petazzoni
b831f84e13 package/libmdbx: drop useless hash
Commit c099842544 ("package/libmdbx:
bump version to 0.11.8") forgot to drop the hash for the previous
0.11.7 version, let's do so now.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:53:04 +02:00
Francois Perrad
2acf847bba package/perl-uri: bump to version 5.12
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:11 +02:00
Francois Perrad
a4a7aba25a package/perl-path-tiny: bump to version 0.124
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:09 +02:00
Francois Perrad
8032f56571 package/perl-net-http: bump to version 6.22
diff LICENSE:
-This software is copyright (c) 2020 by Toby Inkster.
+This software is copyright (c) 2022 by Toby Inkster.

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:08 +02:00
Francois Perrad
b420c3a162 package/perl-net-dns: bump to version 1.34
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:06 +02:00
Francois Perrad
526592a5df package/perl-mojolicious: bump to version 9.26
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:05 +02:00
Francois Perrad
bb98700038 package/perl-libwww-perl: bump to version 6.67
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:03 +02:00
Francois Perrad
aa7ac182f9 package/perl-io-socket-ssl: bump to version 2.075
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:02 +02:00
Francois Perrad
ebe96e90c2 package/perl-http-message: bump to version 6.37
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:39:00 +02:00
Francois Perrad
acefa946dd package/perl-date-manip: bump to version 6.89
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:38:59 +02:00
Yann E. MORIN
63727d9a54 package/mosquitto: add mosquitto group
Since version 2.0.15, and upstream commit 71a90177d7b2 (Systemd: Add
mosquitto group ownership), mosquitto uses its own group rather than
the generic nobody group.

This means that mosquitto can now no longer start on a systemd-based
system.

Change our mosquitto user definition to specify a mosquitto group.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: Peter Korsgaard <peter@korsgaard.com>
Cc: Titouan Christophe <titouanchristophe@gmail.com>
Cc: Francois Perrad <fperrad@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:34:25 +02:00
Yann E. MORIN
ceabca4b85 package/network-manager: fix detection of pppd
With the switch to meson in 58c5846631 (package/network-manager:
migrate autotools build system to meson), the detection of pppd is
broken for cross-compilation:

    Has header "pppd/pppd.h" : YES
    Program pppd /sbin/pppd /usr/sbin/pppd found: NO

    ../../../O/br-2022.08/vtc/build/network-manager-1.36.4/meson.build:570:4: ERROR: Assert failed: pppd required but not found, please provide a valid pppd path or use -Dppp=false to disable it

Indeed, meson will simply look for existing files on the host, and that
can't work in cross-compilation.

Fix that by telling meson the results it can't find by itself.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:28:25 +02:00
Giulio Benetti
4134dff620 package/libnspr: bump to version 4.35
Let's drop local patch that has been upstreamed.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:25:15 +02:00
Francois Perrad
a20fe66a15 package/libxslt: bump to version 1.1.37
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:13:29 +02:00
Francois Perrad
a7295520a9 package/libxml2: security bump to version 2.10.2
COPYING was a link to Copyright, this link is now removed

with 2.10.0, fix CVE-2022-2309

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-09-17 10:12:31 +02:00
Lang Daniel
24261a1762 package/vim: security bump to version 9.0.0453
Fix CVE-2022-3037, CVE-2022-3099, CVE-2022-3134

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-13 14:39:13 +02:00
Lang Daniel
c0ee83d10b package/python3: security bump to version 3.10.7
Fix CVE-2020-10735

https://github.com/python/cpython/blob/v3.10.7/Misc/NEWS.d/3.10.7.rst

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-13 14:38:35 +02:00
Yann E. MORIN
1616816e13 package/python-paho-mqtt: fix merge from next
In master, we backported a patch from upstream, to fix running on python
3.10. But at the same time, on next, we bumped the version, where that
change was present.

Now, next has been merged back into master, and the patch obviously does
not apply anymore.

Remove the patch, it is no longer needed.

Fixes:
    http://autobuild.buildroot.net/results/b76/b76b1ab80bdf1b7731731f2f561c5b64e9716513/
    http://autobuild.buildroot.net/results/f9e/f9e07621d345a9bca0be1b0a53bdb21e363d2e90/
    ...

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Cc: Marcus Hoffmann <marcus.hoffmann@othermo.de>
Cc: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-12 09:28:21 +02:00
Giulio Benetti
ddedf5e785 package/qt5/qt5xmlpatterns: fix build failure due to gcc bug 90620
The qt5xmlpatterns package exhibits gcc bug 90620 [0] when built for the
Microblaze architecture with optimization enabled, which causes a build
failure.

As done for other packages in Buildroot work around this gcc bug by
setting optimization to -O0 if BR2_TOOLCHAIN_HAS_GCC_BUG_90620=y.

Fixes:
    http://autobuild.buildroot.net/results/346/346e6d502a8927c8e95eea156f5b2943a85d0a6b/

[0] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90620

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 21:39:21 +02:00
Giulio Benetti
a9d35fd78c toolchain/Config.in: update gcc bug 90620
Gcc bug 90620 reappeared with gcc 11.x so let's update
BR2_TOOLCHAIN_HAS_GCC_BUG_90620 conditions.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[yann.morin.1998@free.fr:
  - don't switch arch and gcc-version between select and depends-on
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 21:21:11 +02:00
Giulio Benetti
dd8a8cfa9a package/sox: work around gcc bug 68485
sox is impacted by the microblaze-specific gcc bug #68485 [0], which is
still unfixed as of gcc 12.x.

As for all other impacted packages, force no optimisation when using a
toolchain riddled with that bug.

Fixes:
   http://autobuild.buildroot.net/results/ac4/ac4fbd55529ac7b4e635a11766f842cd25a833a1/

[0] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=68485

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 21:09:39 +02:00
Fabrice Fontaine
95c2493a8e package/rhash: bump to version 1.4.3
https://github.com/rhash/RHash/releases/tag/v1.4.3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 20:24:52 +02:00
Fabrice Fontaine
29948fec11 package/flac: bump to version 1.4.0
This release fixes a lot of bugs found by fuzzing, and fuzzing coverage
has improved much. Also, compression should be better but a little
slower. Speedups for 64-bit ARM have been implemented. Encoding and
decoding 32 bps PCM is now possible.

- Drop sha1 (not provided anymore)
- Drop patch (already in version) and so autoreconf
- Update hash of COPYING.Xiph (year updated with:
  10d7ce268b)

https://github.com/xiph/flac/releases/tag/1.4.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 20:24:50 +02:00
Fabrice Fontaine
2de6538320 package/qlibc: bump to version 2.4.6
This is a maintenance release that includes improvements and bug fixes.

https://github.com/wolkykim/qlibc/releases/tag/v2.4.6

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 20:24:48 +02:00
Fabrice Fontaine
ac9c077fb8 package/mariadb: security bump to version 10.3.36
- Fixes for the following security vulnerabilities:
  - CVE-2018-25032
  - CVE-2022-32091
  - CVE-2022-32084
- Refresh first patch

https://mariadb.com/kb/en/mariadb-10336-release-notes

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 20:24:45 +02:00
Fabrice Fontaine
f7c841c75e package/jpeg-turbo: bump to version 2.1.4
https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/2.1.4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 20:24:43 +02:00
Francois Perrad
4ac4aa795a package/luarocks: use two spaces indentation in hash file
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-11 20:15:33 +02:00
Peter Korsgaard
be914b97ad Merge branch 'next'
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-11 09:57:08 +02:00
Peter Korsgaard
446fb4f170 docs/website/news.html: add 2022.08 announcement link
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-10 17:44:02 +02:00
Peter Korsgaard
834043c22d Kickoff 2022.11 cycle
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-10 17:42:09 +02:00
Peter Korsgaard
0003fdbed3 Update for 2022.08
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-10 17:00:09 +02:00
Peter Korsgaard
c8af4eef49 Revert "package/pkg-autotools: use /run as runtime path"
This reverts commit 505b5a6cdd.

This broke packages using older autoconf versions (--runstatedir was added
in 2.69b).

Fixes:
     - http://autobuild.buildroot.org/results/c853f14773d875be30e32ae24daf80e181fef34e
     - http://autobuild.buildroot.org/results/045211cd66cf78c3d89d2d8ac41ec4edf0b0ee58
     - http://autobuild.buildroot.org/results/8c5160eef99de2f1f72f33d5e5ea94d417855b2c

Acked-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-10 12:15:47 +02:00
Peter Korsgaard
b3f9ca5ffd Revert "package/pkg-autotools.mk: fix runtime path"
This reverts commit c28b27032b.

This still broke packages using certain older autoconf versions (E.G.  2.13
as used by thttpd/wipe).

Acked-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-10 12:13:43 +02:00
Peter Korsgaard
0d3a3e61ee Revert "package/pkg-autotools.mk: only pass --runstatedir=/run if supported"
This reverts commit cc9d55e19f.

This unfortunately still breaks with packages having additional configure
scripts in subdirectories where the toplevel script supports --runstatedir,
but some of the children do not.

Fixes:
http://autobuild.buildroot.net/results/c60/c607d8062e17aa6871e30a3ad90cbd0b1b921ae1/
http://autobuild.buildroot.net/results/eef/eefa67773ccc44f3b06894bccc62af97ec15dcdb/

Acked-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-10 12:09:12 +02:00
Peter Korsgaard
49f661e548 {linux, linux-headers}: bump 4.{9, 14, 19}.x / 5.{4, 10, 15}.x series
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-09 21:48:51 +02:00
Peter Korsgaard
cc9d55e19f package/pkg-autotools.mk: only pass --runstatedir=/run if supported
Fixes:
(thttpd) http://autobuild.buildroot.net/results/f74/f74cae1d981b284a69d7a4e138faf97e45e44865/
(wipe) http://autobuild.buildroot.net/results/4dc/4dc77752d5851d8a71d234c0b284ca696e633754/

And (possibly, unable to reproduce locally):
http://autobuild.buildroot.net/results/658/65882e1f266e818fecef2892c9493d3b8e1e912e/

--runstatedir was added in autoconf 2.69b:
http://git.savannah.gnu.org/gitweb/?p=autoconf.git;a=commit;h=a197431414088a417b407b9b20583b2e8f7363bd

Some earlier autoconf versions (E.G. 2.13 as used by thttpd/wipe) get
confused if --runstatedir is passed, so only do so if it is supported (E.G.
present in the script).

With this change we can go back to passing --runstatedir instead of
runstatedir, so this effectively reverts commit c28b27032b
(package/pkg-autotools.mk: fix runtime path).

Suggested-by: Norbert Lange <nolange79@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-09-09 21:45:22 +02:00
Frank Hunleth
8560315ab2 package/fwup: bump to v1.9.1
This release fixes a compiler error when using glibc 2.36.

Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-09 18:54:40 +02:00
Lang Daniel
58e60a3213 package/polkit: fix typo in POLKIT_IGNORE_CVES
The POLKIT_IGNORE_CVES variable was missing a "S",
therefore the CVE still showed up in the wrong column.

Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-09-09 11:34:36 +02:00