Commit Graph

72529 Commits

Author SHA1 Message Date
TIAN Yuanhao
ecec8f8f32 package/gnutls: bump to version 3.8.8
Signed-off-by: TIAN Yuanhao <tianyuanhao3@163.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 10f892b19d9ede510bc448f4fb4346231b9afa41)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-08 15:43:22 +01:00
Scott Fan
b4554306d2 package/procps-ng: fix pidfd_open checking
Fixes:
http://autobuild.buildroot.net/results/02a2b1d9ece040c529308800403f0230ead4ed3e/

The previous build setup would check for pidfd_open using
AC_CHECK_FUNC and would be incorrectly reported as true.

Backport patch from upstream:
[1] 2507bc4757
[2] 587efb47df
[3] 5acbb5dc15

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit fee18cca535f6f08e8d94bb13450e65adbcb7a27)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 10:47:29 +01:00
Thomas Petazzoni
17fedf85c5 package/lmbench: fix build by adjusting LDLIBS logic
The lmbench package (largely unmaintained upstream, last release in
2006) uses a home-grown build system. The scripts/build script sets
LDLIBS to -lm and Buildroot's makefile changes that to:

LDLIBS+=-lm

Except that when Buildroot passes LDLIBS="`$(PKG_CONFIG_HOST_BINARY)
--libs libtirpc`", the LDLIBS variable ends up being equal to:

       -ltirpc-lm

Yes, without any space between -ltirpc and -lm.

Due to this, the checks in scripts/build that use ${LDLIBS} all fail,
and in particular the test that checks when socklen_t is a known type
fails, causing lmbench to provide its own definition, which clashes
with the C library headers definition, and therefore causing build
failures such as:

bench.h:81:13: error: conflicting types for 'socklen_t'; have 'int'

This commit fixes that by adjusting scripts/build using a patch to
properly allow passing additional ${LDLIBS} value, with the needed
space to separate the value from -lm.

Fixes:

  http://autobuild.buildroot.net/results/f1715de95b46a1d08143e529bd4574bc7dbcfb3e/

We have been unable to determine exactly when this issue was
introduced. The first build failure we could find is the one
referenced above, which dates back from Aug 19, 2024. Since this date,
lmbench has been consistently failing on a very regular
basis. However, prior to Aug 19, 2024, the previous failure was from
December 2022, and was unrelated. It is unclear what changed in Aug
2024 to cause this issue to surface. The one thing that changed right
before commit ce3dedc2 (first failing commit) are changes to
genrandconfig, which ensures all autobuilders now generated fully
random configurations instead of configurations based on a
well-defined list of arch/toolchain configurations. But even with
this, this lmbench issue should have appeared earlier, and we have
been unable to find a scientific explanation.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 80f25d47060dea19b8f3b5fd84b6238375c54729)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-07 10:45:13 +01:00
Thomas Petazzoni
fa11dff848 package/android-tools: fix b64_pton() issue with GCC >= 14.x
The android-tools code base uses the __b64_pton() function, which
isn't provided by all C libraries. So the Debian patch
debian/patches/add_adbd.patch adds an implementation of b64_pton(),
but doesn't actually use it, nor defines a prototype for it. Our
existing patch 0003-Fix-build-issue-with-uclibc.patch switches the
code to use the b64_pton() function... but still without providing a
prototype, causing the following build failures with GCC >= 14.x:

adb_auth_client.c:75:15: error: implicit declaration of function 'b64_pton'

To fix this, we rework 0003-Fix-build-issue-with-uclibc.patch into a
patch that:

 (1) Renames b64_pton() to adb_b64_pton() to make sure it won't clash
     with implementations provided by some C libraries, and adjusts
     the call sites accordingly.

 (2) Adds a prototype definition of adb_b64_pton() in places where
     this function is used.

Fixes:

  http://autobuild.buildroot.net/results/b25b25337c7ad89c33f8bd20b646850bd993ec53ae9/

Even though GCC 14.x support was merged in Buildroot in May 2024, this
particular b64_pton() only started appearing on July 15 2024, with the
first occurrence being:

  http://autobuild.buildroot.net/results/1cbe87bbe3c56f28444b3aaba1ba1d05f947d36e/

Indeed, it's not before July 15 2024 that we merged commit
d201f2f5cd0d1e0389430cda78adead37977a6cd ("package/android-tools: add
patches to fix build with GCC 14.x"), which fixed other GCC 14.x
issues, which were hiding this b64_pton() problem.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 1eec67d164c7087aa0bed30599681e908fb2fb41)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:43:14 +01:00
Thomas Petazzoni
b8e9a352d2 package/android-tools: fix build issue on mips64 and powerpc64
The kernel headers on mips64 and powerpc64 were historically "broken",
defining u64 as an "unsigned long" instead of "unsigned long
long". This has been fixed in the upstream Linux kernel by introducing
the __SANE_USERSPACE_TYPES__ definition.

Our commit a2e178d6b4 ("android-tools:
disable on some architecture with old kernel headers") already
disabled building fastboot on powerpc64 and mips64 systems that have
too old kernel headers. However, it turns out that even with the new
kernel headers, there are build issues because
__SANE_USERSPACE_TYPES__ isn't defined everywhere it should be in the
android-tools code base. The Debian patche
debian/patches/ppc64el-ftbfs.patch adds some definitions, but it's
missing one file, and in another the definition comes too late.

This commit adds an extra patch that fixes this up, and makes fastboot
build properly on mips64 and powerpc64.

Fixes:

  http://autobuild.buildroot.net/results/8528ff876e695f79bdfe64f5330d9d51eeef66cb/ (powerpc64)
  http://autobuild.buildroot.net/results/36ac6af73b618c28d1636093da333f7ebd9d6cfe/ (mips64)

This issue has been occurring as far as Feb 2021, with the first
occurence apparently being:

  http://autobuild.buildroot.net/results/d9521b4bfeafb1140c21745dbfe28d476a9b71ec/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit ee65a2119aba93692970ae83e083974ef865c15b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:39:37 +01:00
Thomas Petazzoni
0a0dfa9cb2 package/android-tools: convert all patches to Git-formatted patches
This will make it easier to modify the patch series moving forward. No
functional changes.

On one patch, we added the SoB from Giulio, which was missing. Giulio
was the original contributor of the patch, and nobody touched it since
it was introduced.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 3ee745782a0802b1479eb6a8f678b6a261775295)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:39:18 +01:00
Thomas Petazzoni
08dd363ff9 package/android-tools: add patches to fix build with GCC 14.x
This commit adds 3 patches that fix various implicit declarations
error that arise with GCC 14.x.

Fixes host-android-tools build issues:

 http://autobuild.buildroot.net/results/1fd0d0a9547d4ad2a24916eb79230d49a825e694
 http://autobuild.buildroot.net/results/9e3bb951d7db1c8a8725b5570c54f6dec0e8b344
 http://autobuild.buildroot.net/results/8c9345fcad6e935c13b16c318bbb27282de10ac1
 http://autobuild.buildroot.net/results/4e8a2ce69bfb8a86da2711cb32a99ad51b0bdf5f
 http://autobuild.buildroot.net/results/ca6310cfcb0a9787eb5cec3c33aab903f4964cab
 http://autobuild.buildroot.net/results/a77509d4df8281d666d870faeb008f9196d3bbc3
 http://autobuild.buildroot.net/results/74cdcbcbe8bab244b1c368260162e3cef133376f
 http://autobuild.buildroot.net/results/225b2722b030b1ea1706db8dd54d62da81d8725b

As well as android-tools build issues:

 http://autobuild.buildroot.net/results/abfaf53328d0b29c778f75e105cc7043f2ad44fe
 http://autobuild.buildroot.net/results/d2467a2ac4a915d850cc8bc2341d9803346604a9
 http://autobuild.buildroot.net/results/a4cf59ce479b7db7f0a3269c0462ce1ccc9f600e
 http://autobuild.buildroot.net/results/667a49bff45b226dec4349d54f977c8bd6abadd5
 http://autobuild.buildroot.net/results/92cf3eea0e0d7531220cd9850993e269a3a4744d

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d201f2f5cd0d1e0389430cda78adead37977a6cd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:36:20 +01:00
Julien Olivain
fa5719e8f7 package/rt-tests: fix _SITE download url
Upstream moved old versions in an "older" directory. The current version
in Buildroot was moved to this directory and fail to download.

This commit simply updates the _SITE url to reflect this change.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8514189435

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 8e5a5a9bcc55c17f5a515b35f92d5df8023febaa)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:32:00 +01:00
Maxim Kochetkov
fef9d959cb package/alsa-lib: ucm: add BR2_USE_MMU dependency
Build fails with:
ucm_exec.c: In function 'uc_mgr_exec':
ucm_exec.c:229:13: error: implicit declaration of function 'fork' [-Wimplicit-function-declaration]
  229 |         p = fork();
      |             ^~~~

ucm uses fork() so add BR2_USE_MMU dependency for it.

Fixes: https://autobuild.buildroot.org/results/a287d3eef7ea5ea9a85b5b35d14e3698df4ecd01/build-end.log
Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 928494b7859e1b2ab44d56a17dc8fcec8a661780)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:30:24 +01:00
Cherniaev Andrei
511a6157e2 boot/grub2/readme.txt: don't specify /dev/loop0
losetup -f returns the next free loop device, which may not be
/dev/loop0.  If you blindly follow the readmy you may end up destroying
an existing device.

Make it more robust with a variable to store the loop device.

Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
[Arnout: keep the actual losetup atomic]
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 7dd56b6cd928ee36c96a697075e3fa47b0c52d5e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:27:02 +01:00
Bernd Kuhls
b3fad7e105 package/libvpl: not supported on mips64
Although adding " || defined(__mips__)" here:
https://github.com/intel/libvpl/blob/main/api/vpl/mfxdefs.h#L71

would fix the problem, libvpl alone makes no sense and the only
dependee, intel-vpl-gpu-rt, is unsupported on mips anyway.

Fixes:
http://autobuild.buildroot.net/results/50d/50d64ab2d547c70b39e2421ee2763d8309873125/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 014a8201c857e81abeca026211e84f9c9353c9ba)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:25:53 +01:00
Anssi Hannula
d016e8b886 package/nfs-utils: fix unit dependencies without systemd on build host
nfs-utils configure script uses "systemd-escape" to determine the
rpc_pipefs mount point unit name in the non-default case.

If the host build system has no systemd this will silently result in an
empty name, causing rpc_pipefs.target to incorrectly depend on ".mount".

Fix that by depending on host-systemd for build.

Signed-off-by: Anssi Hannula <anssi.hannula@bitwise.fi>
Acked-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4c9b13b8dd993050ba0f026bf4e402f816a3f6df)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:24:15 +01:00
Scott Fan
83c1c81d1c package/python-psycopg2: add config dependencies from postgresql
Also update site url to https://github.com/psycopg/psycopg2/

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit a0964a91579a4b1135a96588c7bfcae4663d8678)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 23:19:52 +01:00
J. Neuschäfer
8bf55f1da7 package/musl: Fix -ztext build failures on microblaze
The particular combination of LVM2 (which enables -PIE), musl-libc with
dynamic linking (and thus -ztext, banning TEXTRELs), and microblaze
leads to an error because a TEXTREL is produced in musl-libc's Scrt1.o.

The upstream patch added in this commit fixes (or works around) the
problem.

Fixes: http://autobuild.buildroot.net/results/5bb283eff4b4a2b17d1028bbe0b3e1bea8fbeba8/
Signed-off-by: J. Neuschäfer <j.neuschaefer@gmx.net>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4033902ad095bdeb6a32c827a6275b49ad61a3bb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 22:59:50 +01:00
Florian Fainelli
a1e5061463 package/linux-tools: perf: Disable shellcheck
The use of shellcheck within perf is not a functional requirement and it can
lead to build failures where the perf makefile attempts to link in empty
.shellcheck_log files:

https://lore.kernel.org/r/fb078045-dc05-426e-b21e-72ffae3e8e1b@gmail.com

Disable shellcheck since we do not need it at all.

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0c44722b0ca6c1ab7d0f7af6a703361f553e4747)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:51:47 +01:00
Yann E. MORIN
7bd02e75ae DEVELOPERS: drop Yann's entries
As it happens, I am unable to keep maintaining those entries, and it is
misleading to others about whether they should Cc me on their changes.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 773a89d41465387791350d31f51a602322734aeb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:51:18 +01:00
LP C
598f537316 DEVELOPERS: remove myself as maintainer of package/{intel-gmmlib, intel-mediadriver, intel-mediasdk}
Signed-off-by: Louis-Paul CORDIER <lpdev@cordier.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0fd5860280c2172da28aec50dfd29b7a080f6c6c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:50:00 +01:00
Neal Frager
6c060f3d1a board/zynqmp/kria/readme.txt: add usb start
When halting the boot process in u-boot, the 'usb start' command does not
automatically run.  Since the SD card is connected over a USB to SD card
bridge on the kd240 and kr260 boards, the readme.txt instructions should
document that the 'usb start' command needs to be manually enterred when
following the reflashing instructions.  Otherwise, the command to read the
boot.bin and u-boot.itb files from the SD card will fail.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e02e59d124647af71b30eb224a78b53e77db61f5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 20:49:50 +01:00
Peter Korsgaard
9bd1746ee4 package/frr: security bump to version 8.5.6
8.5.5 fixes the following security issues:

- CVE-2024-31948: bgpd: Fix error handling when receiving BGP Prefix SID
  attribute
  ba6a8f1a31

- CVE-2024-31950: ospfd: Solved crash in RI parsing with OSPF TE
  f69d1313b1

- CVE-2024-31951: ospfd: Correct Opaque LSA Extended parser
  5557a289ac

8.5.6 fixes the following security issues:

- CVE-2024-44070: bgpd: Check the actual remaining stream length before taking TLV value
  0998b38e4d

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 12:44:31 +01:00
Julien Olivain
ba7bd5efd0 support/testing: improve mosquitto test reliability
The mosquitto runtime test can randomly fail on slow
runners, see [1].

This commit improves this test in the following ways:

- the mosquitto_sub subscriber process is now started in a subshell
to suppress the job control messages (to prevent any spurious
messages when the job stops),

- the standard error is redirected to /dev/null, to prevent the
printing of any messages,

- the mosquitto_pub publisher process is started later, by increasing
the sleep time,

- finally, a new sleep time is introduced between the mosquitto_pub
publisher process and the check of the mosquitto_sub subscriber, to
make sure it will have time to write its output and exit.

Fixes: [1]

[1] https://gitlab.com/buildroot.org/buildroot/-/jobs/8453386454

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 07a444d08804b3a453e4d01686ba0bef990070ca)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:25:58 +01:00
Maxim Kochetkov
40acbd72c3 package/postgresql: bump version to 16.6
Release notes: https://www.postgresql.org/docs/release/16.6/

Note: this minor version bump fixes a bug introduced in postgresql
security bump to 16.5 fixing CVE-2024-10978.

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
[Julien: add note in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 20c2b2f76cda507a3b0dc12ea75b2b7e13bef10e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:25:42 +01:00
Bernd Kuhls
33d97647f1 {linux, linux-headers}: bump 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5d49bc51e032b0d512741618dbec6596eac9d452)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:24:33 +01:00
Julien Olivain
8dc93af8b2 Config.in: fix _FORTIFY_SOURCE help string typos
The Config.in help string for BR2_FORTIFY_SOURCE_{2,3} mention
"_FORTIFY_SOURCES" (plural, with an extra "S"). The correct macro name
is "_FORTIFY_SOURCE" (without the "S"). See [1].

This commit fixes those typos.

[1] https://www.gnu.org/software/libc/manual/html_node/Source-Fortification.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1ec30e6f11f058b4510342a98639b06de1c43358)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:21:22 +01:00
Peter Korsgaard
5f83467a0f package/quagga: fetch from sources.buildroot.net
Fixes https://autobuild.buildroot.org/results/54a/54a165827f536be47cd45c98da3937a1e94a7c65/

Upstream is no longer accessible, so use s.b.n instead.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39a54900727a359bb0285a751ff7de857088c1f4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:20:57 +01:00
Romain Naour
c1a393045f package/python-sip: disable parallel install
{host-}python-sip may fail to install on fast machine, so disable
parallel install.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/8350440972 (TestPythonPyQt5)
http://autobuild.buildroot.org/results/8f2/8f24656f3a66d21f2d3c6d6b1adc6bb5f1c0c801 (2024-10-15)
http://autobuild.buildroot.org/results/6e6/6e6bbee714b10e0f04c9d17b7e0ecce057d21d2a (2022-07-15)

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4b271906a74ab773ff276cf5d6d90209c4d32cab)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:19:24 +01:00
Fiona Klute (WIWA)
47811443fd package/bmap-tools: select host-python3 if building host package
Host bmap-tools runs using host-python3, but did not select it,
leading to the confusing situation that BR2_PACKAGE_HOST_PYTHON3=n
even though it was built and working.

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit dbb019db73d8d78466c04b1847f501317a7aa214)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 10:18:21 +01:00
Bernd Kuhls
06b1879533 {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d9bea4bb89fe2621e8fc26a212f8123f7d53cbe1)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-06 09:41:05 +01:00
Peter Korsgaard
ba8f13e5d7 package/php: security bump to version 8.2.26
Fixes the following security issues:

- Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI
  Interface
  https://github.com/php/php-src/security/advisories/GHSA-4w77-75f9-2c8w

- CVE-2024-8932: OOB access in ldap_escape
  https://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff

- CVE-2024-8929: [Mysqlnd] Leak partial content of the heap through heap
  buffer over-read
  https://github.com/php/php-src/security/advisories/GHSA-h35g-vwh6-m678

- CVE-2024-11233: Single byte overread with convert.quoted-printable-decode
  filter
  https://github.com/php/php-src/security/advisories/GHSA-r977-prxv-hc43

- CVE-2024-11234: Configuring a proxy in a stream context might allow for
  CRLF injection in URIs
  https://github.com/php/php-src/security/advisories/GHSA-c5f2-jwm7-mmq2

- CVE-2024-11236: Integer overflow in the firebird and dblib quoters causing
  OOB writes
  https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84r-qjcv

Changelog: https://www.php.net/ChangeLog-8.php#8.2.26

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-05 22:31:07 +01:00
Bernd Kuhls
58e5e26cf5 package/postgresql: security bump version to 16.5
Release notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/

Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 257c1de7e9ec54da2d2d0a040b5a0fda06cd05f2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-05 21:55:26 +01:00
Thomas Petazzoni
4088777f7b package/systemd: fix bcachefs magic patch
Commit 29409c9d34 ("package/systemd: fix
build with recent kernels") added a patch from upstream that adds the
BCACHEFS_SUPER_MAGIC definition if not provided by the kernel headers.

However, this commit from upstream was bogus: in the case
BCACHEFS_SUPER_MAGIC was defined, it does an assert_cc() to verify
that the value matches what we expect, but this assert_cc() statement
lacks the final semi-colon, causing build breakage on host systems
that do have BCACHEFS_SUPER_MAGIC defined in their kernel headers,
with a weird error occuring in another header file... because only the
next statement after assert_cc() was considered as having a syntax
error.

Fixes:

  http://autobuild.buildroot.net/results/9f99a97df2efd5e4ae4ad5cc5882607f0c8766bc/

This issue only exists in 2024.02.x at this point, because in master
we have moved to systemd 256.x, which has dropped entirely this piece
of code related to defining BCACHEFS_SUPER_MAGIC (and we wonder how
systemd can then build with slightly older kernel headers, as
BCACHEFS_SUPER_MAGIC is only in the public kernel headers since Linux
6.10).

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-12-01 20:34:29 +01:00
Brandon Maier
a210062ce2 support/testing: fix TestInitSystemNone for non-login shell
This test started failing at commit
0cad947b964be5612a182413da136fcf0dc5a1f2
"support/testing/infra/emulator.py: fix qemu prompt detection" with the
error message

  AttributeError: 'NoneType' object has no attribute 'run_command'

This is because we changed emulator.run() so that emulator.login() must
be called first. But this test skips the login and goes directly to a
shell. Use the new emulator.connect_shell() function which prepares the
shell without logging in.

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5ed1fab018db9a001b072fd7bcb3dd3db280aabe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:39:44 +01:00
Brandon Maier
8b83136326 support/testing/infra/emulator.py: support init=/bin/sh
The TestInitSystemNone bypasses the normal init and instead launches
directly into a shell. So it needs to bypass the login code and go
directly to a shell.

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 95e10430131fb524a27985b82ee70ae8d0fe71d9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:38:43 +01:00
Yu Chien Peter Lin
61855e0bc7 DEVELOPERS: update maintainer of Andes platform
I will lose access to my email next week, so hand
it over to Leo Yu-Chi Liang.

Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
Reviewed-by: Leo Yu-Chi Liang <ycliang@andestech.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a359514630165fe03c7bd159af10b7d20d08334a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:25:54 +01:00
Thomas Petazzoni
326df39ca3 DEVELOPERS: drop Asaf Kahlon
Asaf has privately requested to be removed from the DEVELOPERS file as
he will no longer be contributing to Buildroot in the forseeable
future.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 353a37b04d0da29b0dfda3c98381b24839a1adc9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:25:28 +01:00
Julien Olivain
90b0c694a1 package/libkrb5: security bump to version 1.21.3
For the change log, see [1].

The license hash file changed, due to the year update.  See [2].  This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371

[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] fec2c44ee9

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0416ae0ed5853cd7da4b34e9f8cd17baabf503f0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:23:56 +01:00
Bernd Kuhls
674d55f9f5 package/intel-microcode: security bump version to 20241112
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases

CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html

CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html

CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html

CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 649b31fc6d29d4fc5788ab13e32d704de63b2a0c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:23:09 +01:00
Julien Olivain
c2da8dee8b package/tiff: security bump to version 4.7.0
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html

This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.

This commit also adds a comment in the hash file about pgp signature
veritication.

Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d571951c67d63824fcdf96cba8b59c80876a827a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:22:31 +01:00
Bernd Kuhls
b302c4bbd6 package/libcurl: security bump version to 8.11.0
Changelog: https://curl.se/ch/8.11.0.html

Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ed4348d1c5657aae1b3f167471470f2eef82e7fa)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:21:53 +01:00
Francois Perrad
cea73e726b package/expat: security bump to version 2.6.4
fix CVE-2024-50602

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 856a7e96d55329ce0b0b0057baab2ce21112848e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:19:37 +01:00
Bernd Kuhls
8be0c546ae {linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 323567552bef83a82caa4c6f1f7f29231ae31a59)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:14:09 +01:00
Julien Olivain
2182134836 package/usbredir: fix package homepage URL
The current homepage URL [1] redirects to its https and ends up to
a HTTP 404 not found error. This commit fixes the issue by replacing
it with the new URL [2].

[1] http://www.spice-space.org/page/UsbRedir
[2] https://www.spice-space.org/usbredir.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 122a5e252911b2ebd84d59d802e7b28b2a499f24)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:08:16 +01:00
Michael Nosthoff
e0a8550dc2 package/boost: update download url
boost moved its package hosting from jfrog to their own url
provided by the C++ Alliance. According to [0] the old urls
might cease to exist after December 2024.

[0] https://lists.boost.org/Archives/boost/2024/05/256914.php

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8d4a9afdd530c4957ce03b156bc6a0bf1b4ca507)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-26 14:03:38 +01:00
Julien Olivain
30a1d2196e package/irssi: bump version to 1.4.5
For change log, see:
https://irssi.org/NEWS/#news-v1-4-5

This commit also adds the pgp key id used for the signature
verification.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 525c1369bc76831e8f1722d9fdad94422ab89784)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-25 17:40:08 +01:00
Thomas Devoogdt
fee127154a package/x11vnc: add and rework compile patches
Add the "Upstream" field to the patch message for:
 - 0001-Fix-build-on-32bit-arches-with-64bit-time_t.patch
 - 0002-scan-limit-access-to-shared-memory-segments-to-current-user.patch

Add a compile patch for GCC >= 10 which enables -fno-common by default.

Fixes:
 - https://autobuild.buildroot.org/results/b2231fe06fe56036a5ddbe61cb8556b046e3a7b7
 - https://autobuild.buildroot.org/results/8afbcc63818d3e1586731e178f16635e773d5600
 - ...

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
[Julien: simplified autobuild URLs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e5bb457d5d703aa327354236729dff1f261348ac)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-25 17:27:44 +01:00
Peter Korsgaard
35d3dd33da package/gamin: fetch from sources.buildroot.net
Fixes https://autobuild.buildroot.org/results/ef2/ef2b87da32c81fa635f795a99f352a18f535ec25/

Upstream is no longer accessible, so use s.b.n instead.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 19:34:37 +01:00
Peter Korsgaard
7805e72284 package/babeld: unbreak download hash
Fixes https://autobuild.buildroot.org/results/9e35823ae09b8886c0fa193e903feb7bc69509a9/

Something went wrong when backporting commit 328a3b815d (package/babeld:
update URL site) and updating the download hash, the permissions were wrong
because of ACLs on the download directory leading to a wrong hash.

Fix that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 19:08:17 +01:00
Peter Korsgaard
ba77d95931 package/fbv: fetch from sources.buildroot.net
Fixes https://gitlab.com/buildroot.org/buildroot/-/issues/73

Upstream is no longer accessible, and wget takes a long time (~7 minutes)
before it times out and falls back to s.b.n, so use that instead right away:

wget --passive-ftp -nd -t 3 -O '/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.GBHVap/output' 'http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz'
--2024-11-21 17:06:55--  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Resolving s-tech.elsat.net.pl (s-tech.elsat.net.pl)... 85.11.67.252
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Retrying.

--2024-11-21 17:09:07--  (try: 2)  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Retrying.

--2024-11-21 17:11:19--  (try: 3)  http://s-tech.elsat.net.pl/fbv/fbv-1.0b.tar.gz
Connecting to s-tech.elsat.net.pl (s-tech.elsat.net.pl)|85.11.67.252|:80... failed: Connection timed out.
Giving up.

wget --passive-ftp -nd -t 3 -O '/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.MxQ1k0/output' 'https://sources.buildroot.net/fbv/fbv-1.0b.tar.gz'
--2024-11-21 17:13:30--  https://sources.buildroot.net/fbv/fbv-1.0b.tar.gz
Resolving sources.buildroot.net (sources.buildroot.net)... 104.26.0.37, 104.26.1.37, 172.67.72.56, ...
Connecting to sources.buildroot.net (sources.buildroot.net)|104.26.0.37|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 18989 (19K) [application/x-gtar-compressed]
Saving to: ‘/home/peko/source/buildroot/output/build/.fbv-1.0b.tar.gz.MxQ1k0/output’

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-23 10:36:04 +01:00
Bernd Kuhls
45963b1c7c {linux, linux-headers}: bump 5.15.x / 6.{1, 6, 11}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c9d16e41e9e27b1da1315d2b89073dac96c76c14)
[Peter: drop 6.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-22 16:54:22 +01:00
Francois Perrad
ec41522c2d package/mbedtls: security bump to 2.28.9
Fixes CVE-2024-45157: CTR_DRBG prioritized over HMAC_DRBG as the PSA DRBG

https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-08-1/

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[Peter: add CVE / advisory details]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 64884430074aa420be48d2e63665c36673aa5e4c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-22 15:31:12 +01:00
Julien Olivain
ebd4fe2723 support/testing: add audit runtime test
This test was suggested by Thomas, in:
https://lists.buildroot.org/pipermail/buildroot/2024-October/766091.html

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 60e0817ebec2a76a0c65b038092245642b31d52f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2024-11-21 10:55:15 +01:00