Git Repo - buildroot-mgba.git/log

configs/nitrogen*: add missing pylibfdt u-boot dependency

Needed by binman.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4519271714
https://gitlab.com/buildroot.org/buildroot/-/jobs/4519271716
https://gitlab.com/buildroot.org/buildroot/-/jobs/4519271718
https://gitlab.com/buildroot.org/buildroot/-/jobs/4519271719

Signed-off-by: Gary Bisson <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

configs/nitrogen*: add missing openssl u-boot dependency

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4519271709
https://gitlab.com/buildroot.org/buildroot/-/jobs/4519271710
https://gitlab.com/buildroot.org/buildroot/-/jobs/4519271712

Signed-off-by: Gary Bisson <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/dnsmasq: improve init script

- Use pidfile for more accurate process match
- Fix coding style issues to be able to drop a problem reported by
check-package on missing variables

Signed-off-by: Konstantin Menyaev <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

toolchain/toolchain-external/toolchain-external-arm-aarch64-be: bump to version 12.2-rel1

Updated to gcc 12.2, gdb 12, binutils 2.39, glibc 2.36.

Upstream changed version scheme previously based on the release
date (2021.07) to a version scheme based on gcc version (12.2.rel1).

The runtime issue (Illegal instruction on some x86 host) [1] seems to
be fixed since it can't be reproduced anymore on the same host.

The x86_64 host variant prebuilt toolchain is built on RHEL7
(glibc 2.17) and is likely also be useable on OS versions like
RHEL8, Ubuntu 18.04 or later.

The AArch64 host variant prebuilt toolchain is built on Ubuntu 18.04
(glibc 2.27) is likely also be useable on OS versions like RHEL8,
Ubuntu 18.04 or later.

Use the sha256 hash that is now provided by upsteam.

[1] https://bugs.linaro.org/show_bug.cgi?id=5825#c19
[2] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

toolchain/toolchain-external/toolchain-external-arm-aarch64: bump to version 12.2-rel1

Updated to gcc 12.2, gdb 12, binutils 2.39, glibc 2.36.

Upstream changed version scheme previously based on the release
date (2021.07) to a version scheme based on gcc version (12.2.rel1).

The runtime issue (Illegal instruction on some x86 host) [1] seems to
be fixed since it can't be reproduced anymore on the same host.

The x86_64 host variant prebuilt toolchain is built on RHEL7
(glibc 2.17) and is likely also be useable on OS versions like
RHEL8, Ubuntu 18.04 or later.

The AArch64 host variant prebuilt toolchain is built on Ubuntu 18.04
(glibc 2.27) is likely also be useable on OS versions like RHEL8,
Ubuntu 18.04 or later.

Use the sha256 hash that is now provided by upsteam.

Tested with qemu_aarch64_virt_defconfig.

[1] https://bugs.linaro.org/show_bug.cgi?id=5825#c19
[2] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

toolchain/toolchain-external/toolchain-external-arm-arm: bump to version 12.2-rel1

Updated to gcc 12.2, gdb 12, binutils 2.39, glibc 2.36.

Upstream changed version scheme previously based on the release
date (2021.07) to a version scheme based on gcc version (12.2.rel1).

The runtime issue (Illegal instruction on some x86 host) [1] seems to
be fixed since it can't be reproduced anymore on the same host.

The x86_64 host variant prebuilt toolchain is built on RHEL7
(glibc 2.17) and is likely also be useable on OS versions like
RHEL8, Ubuntu 18.04 or later.

The AArch64 host variant prebuilt toolchain is built on Ubuntu 18.04
(glibc 2.27) is likely also be useable on OS versions like RHEL8,
Ubuntu 18.04 or later.

Use the sha256 hash that is now provided by upsteam.

Tested with qemu_arm_vexpress_defconfig.

[1] https://bugs.linaro.org/show_bug.cgi?id=5825#c19
[2] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

configs/imx7d-sdb: bump the kernel version

Bump the kernel version to 6.1.34.

Signed-off-by: Fabio Estevam <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/crucible: bump to version 2023.04.12

Bump to version 2023.04.12.

Signed-off-by: Fabio Estevam <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/lightning: bump version to 2.2.2

Release notes:
https://lists.gnu.org/archive/html/lightning/2023-04/msg00004.html

Fixes:
http://autobuild.buildroot.net/results/c50/c50fa2d861c634eb0800cf551fc4a7e5fa5752bf/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/libmdbx: bump version to 0.12.7 "Artek"

This is bugfix release of stable libmdbx branch,
on the day of international children's camp «Artek».

It is reasonable to backport this patch to all applicable releases/branches of Buildroot.

The most significant fixes of v0.12.7:
- added workaround for build issues with modern GCC using `-m32 -arch=i686 -Ofast`.
- fixed the cause of the false-positive warning of modern GCC in the C++ API.
- refined DB opening in "recovery" mode and switching to a given meta-page.

The complete ChangeLog: https://gitflic.ru/project/erthink/libmdbx/blob?file=ChangeLog.md

Signed-off-by: Леонид Юрьев (Leonid Yuriev) <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/libnss: bump version to 3.91

Signed-off-by: Giulio Benetti <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/rygel: fix Config.in comment

Move the comment out of the if-clause and include the python3 dependency

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/gupnp-av: fix build with newer versions of libxml2

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/gupnp: fix build with newer versions of libxml2

Fixes:
http://autobuild.buildroot.net/results/b26/b267c4137edebc504757b6275824c748cce3d894/

libxml2 deprecated the function xmlRecoverMemory with commit
https://github.com/GNOME/libxml2/commit/51035c539edf67de93ced3cf037bb1f2b298e526
first included in versions 2.11.0. Buildroot bumped libxml2 to the 2.11
branch with commit dfe1ca7872a45bcdc825ff0900d7fd929097a635.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/qt6/qt6svg: new package

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/qt6: bump version to 6.4.3

For details see [1].

[1] https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/6.4.3/release-note.md

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/uuu: bump to version 1.5.104

Release notes:
https://github.com/nxp-imx/mfgtools/releases/tag/uuu_1.5.104

The changes to README.md are not related to license modifications.

Signed-off-by: Dario Binacchi <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/fluidsynth: bump to version 2.3.3

For change log since v2.3.2, see:
- https://github.com/FluidSynth/fluidsynth/releases/tag/v2.3.3

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/syslog-ng: bump version to 4.2.0

Updated upstream URL of patch file.

Release notes:
https://axoflow.com/axosyslog-release-4-2/
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.2.0

Signed-off-by: Bernd Kuhls <[email protected]>
Reviewed-by: Chris Packham <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/syslog-ng: disable python support

Upstream added a list of python modules declared as runtime dependencies
https://github.com/syslog-ng/syslog-ng/commit/f18345d2a16aea1a95d891ebb24a4ace9c652621
most of them with fixed (and outdated) versions.

Disable python support for the time being.

Fixes:
http://autobuild.buildroot.net/results/436/436e90bb1f77143b05cb98df78934555bbb7df35/

Signed-off-by: Bernd Kuhls <[email protected]>
Reviewed-by: Chris Packham <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/agentpp: fix build error due to type mismatch

This was supposedly fixed by commit 5f06ecf5e151 ("package/agentpp:
security bump to version 4.6.0") but has kept happening so far.

No public place for contributions, thus this patch has been sent to private
e-mail.

Fixes:
http://autobuild.buildroot.net/results/e8abd6bdc62a028955915706b03d72239786c703/
http://autobuild.buildroot.net/results/24441fb679fbf5f913c9b6431c98aec596ead587/

Signed-off-by: Luca Ceresoli <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/freetype: bump version to 2.13.1

Release notes:
https://sourceforge.net/projects/freetype/files/freetype2/2.13.1/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/flac: bump version to 1.4.3

Changelog: https://xiph.org/flac/changelog.html

Updated license hash due to copyright year bump:
https://github.com/xiph/flac/commit/e00d9b881f3fb8a181699ada966e909ab6d689c0

Removed all PowerPC-related configure options, quoting changelog:
"All PowerPC-specific code has been removed, as it turned out those
improvements didn’t actually improve anything"

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/libpng: bump version to 1.6.40

Release notes:
https://sourceforge.net/p/png-mng/mailman/message/37860896/

Updated license hash due to copyright year bump:
https://github.com/pnggroup/libpng/commit/9923515ff441b4c07ce3f8c9985a547fe582c4da

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/audit: update musl fix

Upstream proposed a different fix:
https://github.com/linux-audit/audit-userspace/pull/311#issuecomment-1609953611

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/samba4: add optional dependency to libunwind

Upstream added configure options for libunwind in commit
https://github.com/samba-team/samba/commit/14feb93d481011765f62614ab49b304e17e4f6fd

Fixes:
http://autobuild.buildroot.net/results/63c/63c469106e9daa198f77d8da7a5bb123edcce0f7/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/diffutils: bump version to 3.10

Release notes:
https://lists.gnu.org/archive/html/info-gnu/2023-05/msg00009.html

Added sha1 hash provided by upstream.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/libbsd: bump version to 0.11.7

Release notes:
https://archive.hadrons.org/software/libbsd/libbsd-0.11.4.announce
https://archive.hadrons.org/software/libbsd/libbsd-0.11.5.announce
https://archive.hadrons.org/software/libbsd/libbsd-0.11.6.announce
https://archive.hadrons.org/software/libbsd/libbsd-0.11.7.announce

Removed patch which is included in upstream release:
https://gitlab.freedesktop.org/libbsd/libbsd/-/commit/873639ebb5bc3688e5e78d71e5c0c49469498f46

Update hash of license file, which has changed due to:
- Copyright year updates
- Changes in list of files affected by the different license
- Removal of one part under BSD-4-Clause, but as there are still other
parts under BSD-4-Clause, this doesn't change the overall license
information in Buildroot

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/libmd: bump version to 1.1.0

Release notes:
https://archive.hadrons.org/software/libmd/libmd-1.1.0.announce

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/libssh2: bump version to 1.11.0

Changelog:
https://www.libssh2.org/changes.html
https://lists.haxx.se/pipermail/libssh2-devel/2023-May/000114.html

Removed patch which is included in current release:
https://github.com/libssh2/libssh2/commit/b952674f120748174ed2c0fb93e7bd78cf355cac

Updated license hash due to copyright year bump:
https://github.com/libssh2/libssh2/commit/1a186f1ead5ab0beca1fcc12aa693c166ef855b8

Switched tarball to .xz

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/bind: security bump version to 9.16.42

Changelog: https://ftp.isc.org/isc/bind9/9.16.42/CHANGES

Fixes CVE-2023-2911

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>

package/wireshark: security bump to version 4.0.6

Fixes the following security issues:

- CVE-2023-1992: The RPC over RDMA dissector could crash
  https://www.wireshark.org/security/wnpa-sec-2023-09.html

- CVE-2023-1993: The LISP dissector could go into a large loop
  https://www.wireshark.org/security/wnpa-sec-2023-10.html

- CVE-2023-1994: The GQUIC dissector could crash
  https://www.wireshark.org/security/wnpa-sec-2023-11.html

- CVE-2023-2855: The Candump log file parser could crash
  https://www.wireshark.org/security/wnpa-sec-2023-12.html

- CVE-2023-2857: The BLF file parser could crash
  https://www.wireshark.org/security/wnpa-sec-2023-13.html

- The GDSDB dissector could go into an infinite loop
  https://www.wireshark.org/security/wnpa-sec-2023-14.html

- CVE-2023-2858: The NetScaler file parser could crash
  https://www.wireshark.org/security/wnpa-sec-2023-15.html

- CVE-2023-2856: The VMS TCPIPtrace file parser could crash
  https://www.wireshark.org/security/wnpa-sec-2023-16.html

- CVE-2023-2854: The BLF file parser could crash
  https://www.wireshark.org/security/wnpa-sec-2023-17.html

- CVE-2023-0666: The RTPS dissector could crash
  https://www.wireshark.org/security/wnpa-sec-2023-18.html

- CVE-2023-0668: The IEEE C37.118 Synchrophasor dissector could crash
  https://www.wireshark.org/security/wnpa-sec-2023-19.html

- The XRA dissector could go into an infinite loo
  https://www.wireshark.org/security/wnpa-sec-2023-20.html

[Peter: refer to SIGNATURES files now that it is again fixed]
Signed-off-by: Peter Korsgaard <[email protected]>

package/wget: bump version to 1.21.4

Release notes:
https://lists.gnu.org/archive/html/bug-wget/2023-05/msg00004.html

Added upstream sha1 hash.
Updated license hash due to copyright year bump:
https://git.savannah.gnu.org/gitweb/?p=wget.git;a=commitdiff;h=42239969300cae065e38781df3d157483897ff6b

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/rrdtool: bump version to 1.8.0

Release notes:
https://github.com/oetiker/rrdtool-1.x/releases/tag/v1.8.0

Switched _SITE due to upstream move: https://oss.oetiker.ch/rrdtool/pub/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/privoxy: bump to version 3.0.34

Removed md5 hash, switched _SITE to https.

Release notes: https://www.privoxy.org/announce.txt

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/pngquant: bump version to 2.18.0

Bump this package to the latest release of the package written in C.
Version 3.x are written in Rust: https://pngquant.org/rust.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/pciutils: bump version to 3.10.0

Changelog:
https://git.kernel.org/pub/scm/utils/pciutils/pciutils.git/tree/ChangeLog

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/dmidecode: bump to version 3.5

For change log, see:
https://git.savannah.gnu.org/cgit/dmidecode.git/tree/NEWS?h=dmidecode-3-5

Note: this patch also adds a comment about pgp signature verification in
the hash file.

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/sofia-sip: bump version to 1.13.15

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/alsa-utils: bump version to 1.2.9

Changelog:
https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-utils

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/alsa-lib: bump version to 1.2.9

Changelog:
https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-lib

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/libva-utils: bump version to 2.18.2

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/xmrig: bump version to 6.19.3

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/sqlite: bump version to 3.42.0

Release notes: https://sqlite.org/releaselog/3_42_0.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

package/dav1d: bump version to 1.2.1

Release notes:
https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

boot/opensbi: Bump to version 1.3

Signed-off-by: Bin Meng <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

boot/opensbi: Config.in: Cosmetic style fix

Use space intead of tab before 'if'.

Signed-off-by: Bin Meng <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

arch/Config.in.riscv: Remove BR2_RISCV_ISA_CUSTOM_RVA from BR2_riscv_custom

BR2_riscv_custom should only contain the basic I extension. The A
extension should be optional and selected by board configs.

Signed-off-by: Bin Meng <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

configs/beaglev_defconfig: Enable BR2_RISCV_ISA_CUSTOM_RVA explicitly

BR2_RISCV_ISA_CUSTOM_RVA is currently not explicitly listed as it is
selected by BR2_riscv_custom. This looks confusing. Let's enable it.

Signed-off-by: Bin Meng <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

configs/hifive_unleashed: Enable BR2_RISCV_ISA_CUSTOM_RVA explicitly

BR2_RISCV_ISA_CUSTOM_RVA is currently not explicitly listed as it is
selected by BR2_riscv_custom. This looks confusing. Let's enable it.

Signed-off-by: Bin Meng <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

configs/hifive_unleashed: Update to use U-Boot v2023.04

With upstream commit ae2d9506a36c ("riscv: sifive: Rename fu540 board to unleashed")
in U-Boot v2021.07 release, the defconfig for SiFive Unleashed board
has been changed to sifive_unleashed_defconfig.

Also newer U-Boot has deprecated the usage of SPL_FIT_GENERATOR
to generate u-boot.itb hence there is no 'u-boot.itb' target in
the U-Boot Makefile anymore. Instead binman is used to assemble
the u-boot.itb image.

We will need to switch to BR2_TARGET_UBOOT_FORMAT_CUSTOM for
installing u-boot.itb.

Switch over to use the latest U-Boot v2023.04 release.

Signed-off-by: Bin Meng <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

configs/hifive_unleashed: Update to use OpenSBI 1.2

Since the rest of RISC-V boards have been switched to use OpenSBI
1.2, let's update hifive_unleashed to use OpenSBI 1.2 too.

Resolves: https://bugs.busybox.net/show_bug.cgi?id=15658
Signed-off-by: Bin Meng <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/tiff: security bump to version 4.5.1

Fixes the following security issues:

- CVE-2023-1916: A flaw was found in tiffcrop, a program distributed by the
  libtiff package.  A specially crafted tiff file can lead to an
  out-of-bounds read in the extractImageSection function in
  tools/tiffcrop.c, resulting in a denial of service and limited information
  disclosure.  This issue affects libtiff versions 4.x.

- CVE-2023-25434: libtiff 4.5.0 is vulnerable to Buffer Overflow via
  extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

- CVE-2023-26965: loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0
  has a heap-based use after free via a crafted TIFF image

Drop the now upstream
0001-tiffcrop-Correct-simple-copy-paste-error-Fix-488.patch.

Signed-off-by: Peter Korsgaard <[email protected]>

package/libcgroup: remove empty line at end of file

In commit 9d58b525fcfd0d92fcdd3c66d7858213c4b139c6 the newline at the
end got accidentally removed. Commit
fd6b33426962727b97e2ea2a63bfb7a018adcfaf re-added the newline, but
accidentally added an empty line as well. Remove the empty line.

Reported by check-package.

Signed-off-by: Arnout Vandecappelle <[email protected]>

package/alsa-plugins: fix dependencies for the alsa plugin package

The alsa-utils will remove and create the /usr/share/alsa dir
as a whole and since the alsa plugins needs to add config into
this same directory it should come after those install steps.

Also, the bluez alsa needs the plugins installed to find them
during the configuration phases - so, interlock the plugins
when configured.

Signed-off-by: Charles Hardin <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/libcgroup: add newline at end of file

In commit 9d58b525fcfd0d92fcdd3c66d7858213c4b139c6 the newline at the
end got accidentally removed. Re-add it.

Reported by check-package.

Signed-off-by: Arnout Vandecappelle <[email protected]>

package/raptor: security bump version to 2.0.16

This version included the patches removed by this commit, no new CVEs
were fixed.

Release notes: https://librdf.org/raptor/RELEASE.html#rel2_0_16

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/quickjs: disable on sh*

quickjs unconditionally uses FE_{DOWN,UP}WARD and so fails to build on
sh* since its addition in commit
5d50793659acb95050c110d5fc05399df20ce30b

Fixes:
sh4:    http://autobuild.buildroot.net/results/46d/46d7da58a857939ee3a33f60ab64ad278157c3bd/
sh4a:   http://autobuild.buildroot.net/results/b1d/b1db05e79e5505c6606524e54e159224b633eac2/
sh4aeb: http://autobuild.buildroot.net/results/c30/c307a1b67142405f81c9276056b28bea366f2ccf/
sh4eb:  http://autobuild.buildroot.net/results/945/945b508385ba5aa25f982f8a8493628fa828e472/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/quickjs: disable on microblaze

quickjs unconditionally uses FE_{DOWN,UP}WARD and so fails to build on
microblaze since its addition in commit
5d50793659acb95050c110d5fc05399df20ce30b

Fixes:
http://autobuild.buildroot.net/results/3b1/3b1b1f91998bfdec65f3e6fb8931df9c8871b953/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xorgproto: bump version to 2023.2

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003408.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/libcgroup: allow to build with musl and uClibc

libcgroup depends on fts API which is missing in musl and uClibc
and provided by musl-fts package.

This patch makes libcgroup dependent on musl-fts for
non-glibc configurations.

Signed-off-by: Oleg Lyovin <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/dbus: security bump to version 1.2.28

Fixes the following security issues:

- CVE-2023-34969: Fix an assertion failure in dbus-daemon when a privileged
  Monitoring connection (dbus-monitor, busctl monitor, gdbus monitor or
  similar) is active, and a message from the bus driver cannot be delivered
  to a client connection due to <deny> rules or outgoing message quota.
  This is a denial of service if triggered maliciously by a local attacker.

- Fix an incorrect assertion that could be used to crash dbus-daemon or
  other users of DBusServer prior to authentication, if libdbus was compiled
  with assertions enabled.

For details, see the NEWS file:
https://gitlab.freedesktop.org/dbus/dbus/blob/dbus-1.12/NEWS

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/audit: bump version to 3.1.1

Changelog:
https://github.com/linux-audit/audit-userspace/blob/v3.1.1/ChangeLog

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/audit: fix musl build

Fixes:
http://autobuild.buildroot.net/results/a52/a52ff08c3373ffb253b89e9197671583354d1360/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-dbus-fast: bump to version 1.86.0

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-dbus-fast: drop python-async-timeout dependency

async-timeout dependency was dropped upstream for Python 3.11 (see [1]).

[1] https://github.com/Bluetooth-Devices/dbus-fast/commit/1b5c9e1cb94d19925776d91196cf1b657264c494

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/raptor: fix build with newer versions of libxml2

Fixes:
http://autobuild.buildroot.net/results/6a5/6a5139fe86b8370477dc6cb044bf29180bd145df/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-bleak: bump to version 0.20.2

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-xmodem: bump to version 0.4.7

Right now there is a LICENSE file included in the package, so use it for
license validation.

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

python-gpiozero: migrate to setup.cfg

setup.cfg seems to be mandatory since (at least) setuptools 67.8.0
otherwise gpiozero dependencies are not properly detected

File "/builds/buildroot.org/buildroot/test-output/TestPythonPy3Gpiozero/host/lib/python3.11/site-packages/pkg_resources/__init__.py",
line 868, in _resolve_dist
raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'colorzero' distribution was not found and is required by the application

See:
http://lists.busybox.net/pipermail/buildroot/2023-June/669207.html

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/4505977906

Signed-off-by: Romain Naour <[email protected]>
Cc: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

DEVELOPERS: remove Bernd Kuhls from package/x11r7/

Remove packages which are no longer runtime-tested here.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xkeyboard-config: bump version to 2.38

Release notes:
https://gitlab.freedesktop.org/xkeyboard-config/xkeyboard-config/-/blob/master/NEWS

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xfont_font-*: mass version bump

Release notes were posted in February 2023:
https://lists.x.org/archives/xorg-announce/2023-February/date.html

Switched tarball to xz and _SITE to https.

Updated license hash of xfont_font-sun-misc due to upstream commit which
removed "All rights reserved" from Oracle copyright notices:
https://gitlab.freedesktop.org/xorg/font/sun-misc/-/commits/master/COPYING

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xorgproto: bump version to 2023.1

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003404.html

Updated license hash due to upstream commit which removed "All rights
reserved" from Oracle copyright notices:
https://gitlab.freedesktop.org/xorg/proto/xorgproto/-/commit/423098656f145afeb72cbf21aaa0b3a3f9bc36bb

Added license file COPYING-xwaylandproto:
https://gitlab.freedesktop.org/xorg/proto/xorgproto/-/commit/ad6412624ef6dc4d7548fe16c254c4166ffa7198

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xlib_libdmx: bump version to 1.1.5

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003403.html

Switched tarball to xz and _SITE to https.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xapp_xrdb: bump version to 1.2.2

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003401html

Switched tarball to xz.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xapp_xwd: bump version to 1.0.9

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003400.html

Switched tarball to xz.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xlib_xtrans: bump version to 1.5.0

Release notes:
https://lists.x.org/archives/xorg-announce/2023-June/003399.html

Updated license hash due to upstream commit which removed "All rights
reserved" from Oracle copyright notices:
https://gitlab.freedesktop.org/xorg/lib/libxtrans/-/commit/9d77996f9f972da63c06099fd8c0f0529159b98f

Added XLIB_XTRANS_INSTALL_TARGET = NO, quoting release notes:
"xtrans is a library of code that is shared among various X packages to
handle network protocol transport in a modular fashion, allowing a single
place to add new transport types - but it is *not* a shared library, more
like a "header-only" library."

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xapp_setxkbmap: bump version to 1.3.4

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xdriver_xf86-video-i128: bump version to 1.4.1

Release notes:
https://lists.x.org/archives/xorg-announce/2023-May/003395.html

Switched tarball to xz and _SITE to https.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/x11r7/xdriver_xf86-video-dummy: bump version to 0.4.1

Release notes:
https://lists.x.org/archives/xorg-announce/2023-May/003394.html

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-setuptools: migrate to pep517 build backend

Now that all dependencies of host-python-setuptools no longer
use setuptools as a build backend we can now migrate setuptools
itself to the pep517 build backend.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-wheel: new host package

This will be required for upcoming setuptools pep517 support.

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/pkg-python.mk: switch back to local setuptools distutils

We overrode the default in 4386bbdf0895dbb35e02c25f42603bae9af64451 to
work around target shebang bug, as this issue no longer appears to be
present lets revert back to the local version as this is what will be
use in the future when distutils is removed from the python stdlib.

Tested with:
$ support/testing/run-tests -d dl -o output_folder -k tests.package.test_ipython.TestIPythonPy3
15:43:26 TestIPythonPy3                           Starting
15:43:27 TestIPythonPy3                           Building
15:49:35 TestIPythonPy3                           Building done
Downloading to /home/buildroot/buildroot/dl/tmp_iyk_fn6
Renaming from /home/buildroot/buildroot/dl/tmp_iyk_fn6 to /home/buildroot/buildroot/dl/kernel-versatile-5.10.7
Downloading to /home/buildroot/buildroot/dl/tmpokk23l2z
Renaming from /home/buildroot/buildroot/dl/tmpokk23l2z to /home/buildroot/buildroot/dl/versatile-pb-5.10.7.dtb
15:50:04 TestIPythonPy3                           Cleaning up
.
----------------------------------------------------------------------
Ran 1 test in 398.709s

OK

$ head -n 1 output_folder/TestIPythonPy3/target/usr/bin/ipython
#!/usr/bin/python

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-packaging: bump to version 23.1

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-typing-extensions: bump to version 4.6.3

License file was synced with CPython project (see [1]).

[1] https://github.com/python/typing_extensions/commit/bb75d261196aa6f520d1b80b373891c860ebb71b

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pytest-asyncio: bump to version 0.21.0

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/python-pytest: bump to version 7.3.2

Signed-off-by: Marcin Niestroj <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/open-plc-utils: bump to version 1ba7d5a042e4e8ff6858b08e113eec5dc4e89cf2

Other changes:
- Remove 0002-plc-plc.h-fix-build-with-gcc-10.patch as
related MR https://github.com/qca/open-plc-utils/pull/141
has been merged.

Notable changes since last version:

- Drop privileges after opening the channel file descriptor
- Remove all checks for root permissions
- Add chip identification for QCA7006AQ

Signed-off-by: Kai Stuhlemmer (ebee Engineering) <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/iwd: bump version to 2.6

Changelog:
https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/ChangeLog

Depends on ell >= 0.57:
https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/configure.ac?id=464f5c25db8150dc8cea21042a5bac09a8880edc

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/ell: bump version to 0.57

Changelog:
https://git.kernel.org/pub/scm/libs/ell/ell.git/tree/ChangeLog

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/libcgroup: bump to version 2.0.3

https://github.com/libcgroup/libcgroup/releases/tag/v2.0.3

Also remove redundant LIBCGROUP_SOURCE definition, since there's no
longer an uploaded bz2 archive.

Signed-off-by: Oleg Lyovin <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>

package/ubus: bump version to f787c97

Changelog:

  - 66baa44b8dee libubus: introduce new status messages
  - b3cd5ab4c010 cli: use UBUS_STATUS_PARSE_ERROR
  - 584f56a23314 cli: improve error logging for call command
  - 2f793a4eb063 lua: add optional path filter to objects() method
  - 2bebf93cd334 ubusd: handle invoke on event object without data
  - 9913aa61de73 ubusd: add lookup command queuing support
  - f787c97b3489 libubus: add missing uloop_fd_delete call in ubus_shutdown

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/libubox: bump version to 75a3b87

Changelog:

  - be3dc7223a6d uloop: avoid integer overflow in tv_diff
  - 123e976f3d01 uloop: restore return type of uloop_timeout_remaining
  - 334415738150 uloop: add uloop_timeout_remaining64
  - c87d3e1fb67d lua/uloop: use uloop_timeout_remaining64
  - c86a894ec63d uloop: deprecate uloop_timeout_remaining
  - cce5e351278b vlist: define vlist_for_each_element_safe
  - f2d6752901f2 blob: clear buf->head when freeing a buffer
  - 45210ce14136 list.h: add container_of_safe macro
  - cfa372ff8aed blobmsg: implicitly reserve space for 0-terminator in string buf alloc
  - d2223ef9da71 blobmsg: work around false positive gcc -Warray-bounds warnings
  - ea56013409d5 jshn.sh: add json_add_fields function for adding multiple fields at once
  - b09b316aeaf6 blobmsg: add blobmsg_parse_attr function
  - eac92a4d5d82 blobmsg: add blobmsg_parse_array_attr
  - ef5e8e38bd38 usock: fix poll return code check
  - 6fc29d1c4292 jshn.sh: Add pretty-printing to json_dump
  - 5893cf78da40 blobmsg: Don't do at run-time what can be done at compile-time
  - 362951a2d96e uloop: fix uloop_run_timeout
  - 75a3b870cace uloop: add support for integrating with a different event loop

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

{linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 3}.x series

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>

package/gstreamer1/gst1-plugins-good: add adaptivedemux2 plugin option

Currently there is no explicit way to enable/disable the adaptivedemux2
plugin. Create a menu entry allowing users to disable or enable the plugin,
like we have for other features.

Signed-off-by: Dario Binacchi <[email protected]>
[[email protected]: use plugin name in prompt, drop useless help]
Signed-off-by: Yann E. MORIN <[email protected]>

configs/mx53loco: select BR2_TARGET_UBOOT_NEEDS_OPENSSL

Select BR2_TARGET_UBOOT_NEEDS_OPENSSL to fix the following
build error:

include/image.h:1383:12: fatal error: openssl/evp.h: No such file or directory

Reported-by: Jan-Benedict Glaw <[email protected]>
Signed-off-by: Fabio Estevam <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>