Update for 2024.11-rc2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/util-linux-libs: allowing building even on non-Y2038 compliant systems
2024-11-23 11:00:53 +01:00 · 2024-11-23 10:51:49 +01:00 · 2024-11-23 10:46:59 +01:00 · 2024-11-23 10:44:03 +01:00 · 2024-11-23 10:42:18 +01:00 · 2024-11-21 23:42:47 +01:00
31 changed files with 188 additions and 86 deletions
@@ -1,3 +1,11 @@
+2024.11-rc2, released November 23rd, 2024
+
+	Fixes all over the tree.
+
+	Updated/fixed packages: bmap-tools, go, intel-microcode,
+	libblockdev, libcurl, libkrb5, libnvme, libpng, php,
+	postgresql, python-sip, skopeo, tiff, util-linux-libs
+
 2024.11-rc1, released November 13th, 2024

 	Fixes all over the tree and package updates.
@@ -46,6 +54,20 @@
 	- ripgrep leaves /usr/crates2.json / .crates.toml files
 	  https://gitlab.com/buildroot.org/buildroot/-/issues/17

+2024.08.2, released November 14th, 2024
+
+	Important / security related fixes.
+
+	Updated/fixed packages: apache, asterisk, bind, cmake, criu,
+	file, fluidsynth, ghostscript, heimdal, intel-microcode,
+	iproute2, jailhouse, jsoncpp, libarchive, libcurl, libldns,
+	libgit2, liblinear, libmdbx, libopenh264, libpng,
+	libtraceevent, libxml2, ltrace, nethogs, nghttp2, ntp,
+	openjdk, php, postgresql,procps-ng, python-pyqt5, python3,
+	qemu, ruby, sqlite, sysvinit, tor, trace-cmd, wpebackend-fdo
+
+	New packages: python-pyqt5-sip
+
 2024.08.1, released October 20th, 2024

 	Important / security related fixes.
@@ -424,6 +446,19 @@
        #16036: android-tools version is too old
        #16075: Cannot use linux kernel extensions from external tree..

+2024.02.8, released November 14th, 2024
+
+	Important / security related fixes.
+
+	Updated/fixed packages: apache, asterisk, bind, bootgen, criu,
+	file, fluidsynth, ghostscript, heimdal, intel-microcode,
+	jailhouse, jsoncpp, libarchive, libcurl, libldns, liblinear,
+	libmdbx, libopenh264, ltrace, lightning, nghttp2, ntp, php,
+	postgresql, procps-ng, python-pyqt5, ruby, sysvinit, tor,
+	wpebackend-fdo
+
+	New packages: python-pyqt5-sip
+
 2024.02.7, released October 21th, 2024

 	Important / security related fixes.
@@ -282,18 +282,6 @@ F:	package/python-bottle/
 F:	package/sqlcipher/
 F:	package/stress/

-N:	Asaf Kahlon <asafka7@gmail.com>
-F:	package/collectd/
-F:	package/libfuse3/
-F:	package/libuv/
-F:	package/python*
-F:	package/snmpclitools/
-F:	package/spdlog/
-F:	package/uftp/
-F:	package/uftrace/
-F:	package/uvw/
-F:	package/zeromq/
-
 N:	Ash Charles <ashcharles@gmail.com>
 F:	package/pru-software-support/
 F:	package/ti-cgt-pru/
@@ -2527,7 +2515,7 @@ F:	package/dbus-broker/
 F:	package/systemd/
 F:	package/tcf-agent/

-N:	Yu Chien Peter Lin <peterlin@andestech.com>
+N:	Leo Yu-Chi Liang <ycliang@andestech.com>
 F:	board/andes
 F:	configs/andes_ae350_45_defconfig
 F:	package/andes-spi-burn/
@@ -92,9 +92,9 @@ all:
 .PHONY: all

 # Set and export the version string
-export BR2_VERSION := 2024.11-rc1
+export BR2_VERSION := 2024.11-rc2
 # Actual time the release is cut (for reproducible builds)
-BR2_VERSION_EPOCH = 1731520600
+BR2_VERSION_EPOCH = 1732356000

 # Save running make version since it's clobbered by the make package
 RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -8,105 +8,105 @@
    <div class="panel-heading">Download</div>
    <div class="panel-body">

-      <h3 style="text-align: center;">Latest long term support release: <b>2024.02.7</b></h3>
+      <h3 style="text-align: center;">Latest long term support release: <b>2024.02.8</b></h3>

      <div class="row mt centered">
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.02.7.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.02.8.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.02.7.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.02.8.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>
-	  <h3><a href="/downloads/buildroot-2024.02.7.tar.gz">buildroot-2024.02.7.tar.gz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.02.7.tar.gz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2024.02.8.tar.gz">buildroot-2024.02.8.tar.gz</a></h3>
+	  <p><a href="/downloads/buildroot-2024.02.8.tar.gz.sign">PGP signature</a></p>
 	</div>
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.02.7.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.02.8.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.02.7.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.02.8.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2024.02.7.tar.xz">buildroot-2024.02.7.tar.xz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.02.7.tar.xz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2024.02.8.tar.xz">buildroot-2024.02.8.tar.xz</a></h3>
+	  <p><a href="/downloads/buildroot-2024.02.8.tar.xz.sign">PGP signature</a></p>
 	</div>
      </div>

-      <h3 style="text-align: center;">Latest stable release: <b>2024.08.1</b></h3>
+      <h3 style="text-align: center;">Latest stable release: <b>2024.08.2</b></h3>

      <div class="row mt centered">
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.08.1.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.08.2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.08.1.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.08.2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>
-	  <h3><a href="/downloads/buildroot-2024.08.1.tar.gz">buildroot-2024.08.1.tar.gz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.08.1.tar.gz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2024.08.2.tar.gz">buildroot-2024.08.2.tar.gz</a></h3>
+	  <p><a href="/downloads/buildroot-2024.08.2.tar.gz.sign">PGP signature</a></p>
 	</div>
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.08.1.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.08.2.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.08.1.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.08.2.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2024.08.1.tar.xz">buildroot-2024.08.1.tar.xz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.08.1.tar.xz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2024.08.2.tar.xz">buildroot-2024.08.2.tar.xz</a></h3>
+	  <p><a href="/downloads/buildroot-2024.08.2.tar.xz.sign">PGP signature</a></p>
 	</div>
      </div>

-      <h3 style="text-align: center;">Latest release candidate: <b>2024.11-rc1</b></h3>
+      <h3 style="text-align: center;">Latest release candidate: <b>2024.11-rc2</b></h3>
      <div class="row mt centered">
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.11-rc1.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.11-rc2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.11-rc1.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.11-rc2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2024.11-rc1.tar.gz">buildroot-2024.11-rc1.tar.gz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.11-rc1.tar.gz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2024.11-rc2.tar.gz">buildroot-2024.11-rc2.tar.gz</a></h3>
+	  <p><a href="/downloads/buildroot-2024.11-rc2.tar.gz.sign">PGP signature</a></p>
 	</div>
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.11-rc1.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.11-rc2.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.11-rc1.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2024.11-rc2.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2024.11-rc1.tar.xz">buildroot-2024.11-rc1.tar.xz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.11-rc1.tar.xz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2024.11-rc2.tar.xz">buildroot-2024.11-rc2.tar.xz</a></h3>
+	  <p><a href="/downloads/buildroot-2024.11-rc2.tar.xz.sign">PGP signature</a></p>
 	</div>
      </div>

@@ -9,6 +9,65 @@
 <h2>News</h2>
 <ul class="timeline">

+  <li>
+    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
+    <div class="timeline-panel">
+      <div class="timeline-heading">
+	<h4 class="timeline-title">2024.11-rc2 released</h4>
+	<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>23 November 2024</small></p>
+      </div>
+      <div class="timeline-body">
+        <p>Another week, another release candidate with more cleanups and build fixes. See the
+	  <a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2024.11-rc2/CHANGES">CHANGES</a>
+	  file for more details.</p>
+
+	<p>Go to the <a href="/downloads/">downloads page</a> to pick up the
+	  <a href="/downloads/buildroot-2024.11-rc2.tar.xz">2024.11-rc2
+	  release</a>, and report any problems found to the
+         <a href="support.html">mailing list</a> or
+         <a href="https://bugs.buildroot.org">bug tracker</a>.</p>
+      </div>
+    </div>
+  </li>
+
+  <li class="timeline-inverted">
+    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
+    <div class="timeline-panel">
+      <div class="timeline-heading">
+	<h4 class="timeline-title">2024.02.8 released</h4>
+	<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>14 November 2024</small></p>
+      </div>
+      <div class="timeline-body">
+	<p>The 2024.02.8 bugfix release is out, fixing a number of important /
+	  security related issues discovered since the 2024.02.7 release. See the
+	  <a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2024.02.8/CHANGES">CHANGES</a>
+	  file for more details, read the
+	  <a href="https://lore.kernel.org/buildroot/87plmxwz50.fsf@dell.be.48ers.dk/T/#u">announcement</a>
+	  and go to the <a href="/downloads/">downloads page</a> to pick up the
+	  <a href="/downloads/buildroot-2024.02.8.tar.xz">2024.02.8 release</a>.</p>
+      </div>
+    </div>
+  </li>
+
+  <li>
+    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
+    <div class="timeline-panel">
+      <div class="timeline-heading">
+	<h4 class="timeline-title">2024.08.2 released</h4>
+	<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>14 November 2024</small></p>
+      </div>
+      <div class="timeline-body">
+	<p>The 2024.08.2 bugfix release is out, fixing a number of important /
+	  security related issues discovered since the 2024.08.1 release. See the
+	  <a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2024.08.2/CHANGES">CHANGES</a>
+	  file for more details, read the
+	  <a href="https://lore.kernel.org/buildroot/871pzex7gn.fsf@dell.be.48ers.dk/T/#u">announcement</a>
+	  and go to the <a href="/downloads/">downloads page</a> to pick up the
+	  <a href="/downloads/buildroot-2024.08.2.tar.xz">2024.08.2 release</a>.</p>
+      </div>
+    </div>
+  </li>
+
  <li class="timeline-inverted">
    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
    <div class="timeline-panel">
@@ -134,7 +134,7 @@ config BR2_LINUX_KERNEL_CUSTOM_REPO_GIT_SUBMODULES

 config BR2_LINUX_KERNEL_VERSION
 	string
-	default "6.11.7" if BR2_LINUX_KERNEL_LATEST_VERSION
+	default "6.11.9" if BR2_LINUX_KERNEL_LATEST_VERSION
 	default "5.10.162-cip24" if BR2_LINUX_KERNEL_LATEST_CIP_VERSION
 	default "5.10.162-cip24-rt10" if BR2_LINUX_KERNEL_LATEST_CIP_RT_VERSION
 	default BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE \
@@ -1,13 +1,13 @@
 # From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  0bf5ec644817d7928920f763581311f5bf258a92759cf2f30985da743af3ebb2  linux-6.11.7.tar.xz
-sha256  52f9e32d5082ab94253447fd66670d0c3bb765cfcb99b0bf61d1b8eae25952ef  linux-6.6.60.tar.xz
-sha256  17eb68336ee2a8f34378bf6089ffe8f805b978eda314c299d2a63b0603833b81  linux-6.1.116.tar.xz
+sha256  75658a7aa3bd9598c96ee1e5862c5e1d34fced75c28d825c727a1510a6f384b4  linux-6.11.9.tar.xz
+sha256  e2c35611775534941b9d4dd871f3ae5b988b6594dc9033b5ca784366e07d9336  linux-6.6.62.tar.xz
+sha256  010784bd7161c32c4cd68a423d4dcb14e4587677d238b2825a31fe012869224c  linux-6.1.118.tar.xz
 # From https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc
-sha256  2953e064d8123c4c22c4fd48011378d73c8b99a3bf3d989e33f4f5c8f82f2a3b  linux-5.15.171.tar.xz
-sha256  08a6b5e6bbff85ef017f67b722f6beec7f12fe36fc0f9043f27a91990b88cde0  linux-5.10.229.tar.xz
-sha256  be32c37ef2f6f724fa13acf43cbc9aacfd3acef58964923dae5daa6206d3429c  linux-5.4.285.tar.xz
+sha256  8a4b2a47ccc9b208b2b6ed9a216ea1a5eb12852c723bec1a04de9e671a1d7da8  linux-5.15.173.tar.xz
+sha256  cd1850ef3b771886df4e0b4c4eb07033864abab2bb553a20fd9e3cdc23584b47  linux-5.10.230.tar.xz
+sha256  180754f3df0e8d7f206625255b3f5a6e1f441feec83336df42613ca8f6b1887c  linux-5.4.286.tar.xz
 # From https://www.kernel.org/pub/linux/kernel/v4.x/sha256sums.asc
-sha256  eec9215fbac649d826fda9d3421da47aebd3c4e69e060e5106d32e309a9b6a1c  linux-4.19.323.tar.xz
+sha256  90e140ad2d07da88b43d5930cfda7bffc5c121660e9d8a86d96a9efe4d87ffe6  linux-4.19.324.tar.xz
 # Locally computed
 sha256  fb0edc3c18e47d2b6974cb0880a0afb5c3fa08f50ee87dfdf24349405ea5f8ae  linux-cip-5.10.162-cip24.tar.gz
 sha256  b5539243f187e3d478d76d44ae13aab83952c94b885ad889df6fa9997e16a441  linux-cip-5.10.162-cip24-rt10.tar.gz
@@ -1,5 +1,6 @@
 config BR2_PACKAGE_HOST_BMAP_TOOLS
 	bool "host bmap-tools"
+	select BR2_PACKAGE_HOST_PYTHON3 # runtime
 	select BR2_PACKAGE_HOST_PYTHON_SIX # runtime
 	help
 	  Tool to flash image files to block devices using the block map
@@ -78,13 +78,13 @@ config BR2_PACKAGE_HOST_GO_BIN

 endchoice

+endif
+
 config BR2_PACKAGE_PROVIDES_HOST_GO
 	string
-	# Default to host-go-src
+	# Default to host-go-bin unless src explicitly requested
 	default "host-go-src" if BR2_PACKAGE_HOST_GO_SRC
-	default "host-go-bin" if BR2_PACKAGE_HOST_GO_BIN
-
-endif
+	default "host-go-bin"

 source "package/go/go-bin/Config.in.host"
 source "package/go/go-bootstrap-stage1/Config.in.host"
@@ -1,3 +1,3 @@
 # Locally computed
-sha256  8b7582eac7e9a691356e18b3bdcbc7b2db09494e040ec980a4a5fb6d0da261bf  intel-microcode-20240910.tar.gz
+sha256  37246208ef68039be752438c72400a688a2238df13a7f5282497c80be2d8366d  intel-microcode-20241112.tar.gz
 sha256  03efb1491c7e899feb2665fa299363e64035e5444c1b8bc1f6ebed30de964e12  license
@@ -4,7 +4,7 @@
 #
 ################################################################################

-INTEL_MICROCODE_VERSION = 20240910
+INTEL_MICROCODE_VERSION = 20241112
 INTEL_MICROCODE_SITE = $(call github,intel,Intel-Linux-Processor-Microcode-Data-Files,microcode-$(INTEL_MICROCODE_VERSION))
 INTEL_MICROCODE_LICENSE = PROPRIETARY
 INTEL_MICROCODE_LICENSE_FILES = license
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  f2918de9ce1b54ac1aee5e5757e555947896a74674cdca9d05940a53d19e32a8  libblockdev-3.2.0.tar.gz
+sha256  318b9e2cedfdfe88161f28079fcb63239aeb5592223f4485b861cfc6ef11189a  libblockdev-3.2.1.tar.gz
 sha256  97bdc721d875501b6243a456333fdfdb1ab64d31c4da2554de845caf4674b946  LICENSE
@@ -4,7 +4,7 @@
 #
 ################################################################################

-LIBBLOCKDEV_VERSION = 3.2.0
+LIBBLOCKDEV_VERSION = 3.2.1
 LIBBLOCKDEV_SITE = https://github.com/storaged-project/libblockdev/releases/download/$(LIBBLOCKDEV_VERSION)
 LIBBLOCKDEV_LICENSE = LGPL-2.1
 LIBBLOCKDEV_LICENSE_FILES = LICENSE
@@ -1,5 +1,5 @@
 # Locally calculated after checking pgp signature
-# https://curl.se/download/curl-8.10.1.tar.xz.asc
+# https://curl.se/download/curl-8.11.0.tar.xz.asc
 # signed with key 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2
-sha256  73a4b0e99596a09fa5924a4fb7e4b995a85fda0d18a2c02ab9cf134bebce04ee  curl-8.10.1.tar.xz
+sha256  db59cf0d671ca6e7f5c2c5ec177084a33a79e04c97e71cf183a5cdea235054eb  curl-8.11.0.tar.xz
 sha256  adb1fc06547fd136244179809f7b7c2d2ae6c4534f160aa513af9b6a12866a32  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-LIBCURL_VERSION = 8.10.1
+LIBCURL_VERSION = 8.11.0
 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.xz
 LIBCURL_SITE = https://curl.se/download
 LIBCURL_DEPENDENCIES = host-pkgconf \
@@ -1,5 +1,7 @@
 # Locally calculated after checking pgp signature
-sha256  9560941a9d843c0243a71b17a7ac6fe31c7cebb5bce3983db79e52ae7e850491  krb5-1.21.2.tar.gz
+# from https://web.mit.edu/kerberos/dist/krb5/1.21/krb5-1.21.3.tar.gz.asc
+# with key C4493CB739F4A89F9852CBC20CBA08575F8372DF
+sha256  b7a4cd5ead67fb08b980b21abd150ff7217e85ea320c9ed0c6dadd304840ad35  krb5-1.21.3.tar.gz

 # Hash for license file:
-sha256  0d5373486138cb176c063db98274b4c4ab6ef3518c4191360736384b780306c2  NOTICE
+sha256  7601361a275aadbe35c90185519323c28730d60c553683e56fd06cf9c5f749a6  NOTICE
@@ -5,7 +5,7 @@
 ################################################################################

 LIBKRB5_VERSION_MAJOR = 1.21
-LIBKRB5_VERSION = $(LIBKRB5_VERSION_MAJOR).2
+LIBKRB5_VERSION = $(LIBKRB5_VERSION_MAJOR).3
 LIBKRB5_SITE = https://web.mit.edu/kerberos/dist/krb5/$(LIBKRB5_VERSION_MAJOR)
 LIBKRB5_SOURCE = krb5-$(LIBKRB5_VERSION).tar.gz
 LIBKRB5_SUBDIR = src
@@ -1,3 +1,3 @@
 # Locally calculated sha256 checksums
-sha256  f6da60036b14e0427246718a32abff442228331f9ae3853f89160cf366d83dfe  libnvme-1.11.tar.gz
+sha256  6d5d8ba2cc4c94a61a994c9f7f25b3b26ef973fb5c0daa37729890903f37a1f1  libnvme-1.11.1.tar.gz
 sha256  dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-LIBNVME_VERSION = 1.11
+LIBNVME_VERSION = 1.11.1
 LIBNVME_SITE = $(call github,linux-nvme,libnvme,v$(LIBNVME_VERSION))
 LIBNVME_LICENSE = LGPL-2.1
 LIBNVME_LICENSE_FILES = COPYING
@@ -16,10 +16,12 @@ LIBPNG_DEPENDENCIES = host-pkgconf zlib
 HOST_LIBPNG_DEPENDENCIES = host-pkgconf host-zlib
 LIBPNG_CONFIG_SCRIPTS = libpng$(LIBPNG_SERIES)-config libpng-config
 LIBPNG_CONF_OPTS = --disable-tools
+LIBPNG_CFLAGS = $(TARGET_CFLAGS)

 ifeq ($(BR2_aarch64),y)
 LIBPNG_CONF_OPTS += --enable-arm-neon
 else ifeq ($(BR2_ARM_CPU_HAS_NEON):$(BR2_ARM_SOFT_FLOAT),y:)
+LIBPNG_CFLAGS += -mfpu=neon
 LIBPNG_CONF_OPTS += --enable-arm-neon
 else
 LIBPNG_CONF_OPTS += --disable-arm-neon
@@ -31,5 +33,8 @@ else
 LIBPNG_CONF_OPTS += --disable-intel-sse
 endif

+LIBPNG_CONF_ENV = \
+	CFLAGS="$(LIBPNG_CFLAGS)"
+
 $(eval $(autotools-package))
 $(eval $(host-autotools-package))
@@ -428,13 +428,13 @@ endchoice

 config BR2_DEFAULT_KERNEL_HEADERS
 	string
-	default "4.19.323"	if BR2_KERNEL_HEADERS_4_19
-	default "5.4.285"	if BR2_KERNEL_HEADERS_5_4
-	default "5.10.229"	if BR2_KERNEL_HEADERS_5_10
-	default "5.15.171"	if BR2_KERNEL_HEADERS_5_15
-	default "6.1.116"	if BR2_KERNEL_HEADERS_6_1
-	default "6.6.60"	if BR2_KERNEL_HEADERS_6_6
-	default "6.11.7"	if BR2_KERNEL_HEADERS_6_11
+	default "4.19.324"	if BR2_KERNEL_HEADERS_4_19
+	default "5.4.286"	if BR2_KERNEL_HEADERS_5_4
+	default "5.10.230"	if BR2_KERNEL_HEADERS_5_10
+	default "5.15.173"	if BR2_KERNEL_HEADERS_5_15
+	default "6.1.118"	if BR2_KERNEL_HEADERS_6_1
+	default "6.6.62"	if BR2_KERNEL_HEADERS_6_6
+	default "6.11.9"	if BR2_KERNEL_HEADERS_6_11
 	default BR2_DEFAULT_KERNEL_VERSION if BR2_KERNEL_HEADERS_VERSION
 	default "custom"	if BR2_KERNEL_HEADERS_CUSTOM_TARBALL
 	default BR2_KERNEL_HEADERS_CUSTOM_REPO_VERSION \
@@ -1,5 +1,5 @@
 # From https://www.php.net/downloads.php
-sha256  89adb978cca209124fe53fd6327bc4966ca21213a7fa2e9504f854e340873018  php-8.3.13.tar.xz
+sha256  58b4cb9019bf70c0cbcdb814c7df79b9065059d14cf7dbf48d971f8e56ae9be7  php-8.3.14.tar.xz

 # License file
 sha256  b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a  LICENSE
@@ -4,7 +4,7 @@
 #
 ################################################################################

-PHP_VERSION = 8.3.13
+PHP_VERSION = 8.3.14
 PHP_SITE = https://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES
@@ -1,4 +1,4 @@
-# From https://ftp.postgresql.org/pub/source/v16.4/postgresql-16.4.tar.bz2.sha256
-sha256  971766d645aa73e93b9ef4e3be44201b4f45b5477095b049125403f9f3386d6f  postgresql-16.4.tar.bz2
+# From https://ftp.postgresql.org/pub/source/v16.5/postgresql-16.5.tar.bz2.sha256
+sha256  a6cbbb7037f98cb8afa7d3970b7c48040cf02b115e39253a0c037a8bb8e778f0  postgresql-16.5.tar.bz2
 # License file, Locally calculated
 sha256  9bf20ee493926a7e17a74bc7f05089fbc014269667b1540bc35a6b194a40c9de  COPYRIGHT
@@ -4,7 +4,7 @@
 #
 ################################################################################

-POSTGRESQL_VERSION = 16.4
+POSTGRESQL_VERSION = 16.5
 POSTGRESQL_SOURCE = postgresql-$(POSTGRESQL_VERSION).tar.bz2
 POSTGRESQL_SITE = https://ftp.postgresql.org/pub/source/v$(POSTGRESQL_VERSION)
 POSTGRESQL_LICENSE = PostgreSQL
@@ -21,8 +21,10 @@ define HOST_PYTHON_SIP_BUILD_CMDS
 	$(HOST_MAKE_ENV) $(HOST_CONFIGURE_OPTS) $(MAKE) -C $(@D)
 endef

+# Race condition on fast machine between sipconfig.py install and
+# {sipdistutils.py,mk_distinfo.py} scripts.
 define HOST_PYTHON_SIP_INSTALL_CMDS
-	$(HOST_MAKE_ENV) $(HOST_CONFIGURE_OPTS) $(MAKE) install -C $(@D)
+	$(HOST_MAKE_ENV) $(HOST_CONFIGURE_OPTS) $(MAKE1) install -C $(@D)
 endef

 define PYTHON_SIP_CONFIGURE_CMDS
@@ -42,8 +44,10 @@ define PYTHON_SIP_BUILD_CMDS
 	$(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) $(MAKE) -C $(@D)
 endef

+# Race condition on fast machine between sipconfig.py install and
+# {sipdistutils.py,mk_distinfo.py} scripts.
 define PYTHON_SIP_INSTALL_TARGET_CMDS
-	$(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) $(MAKE) install -C $(@D)
+	$(TARGET_MAKE_ENV) $(TARGET_CONFIGURE_OPTS) $(MAKE1) install -C $(@D)
 endef

 $(eval $(generic-package))
@@ -2,6 +2,7 @@ config BR2_PACKAGE_HOST_SKOPEO
 	bool "host skopeo"
 	depends on BR2_PACKAGE_HOST_GO_HOST_ARCH_SUPPORTS
 	depends on BR2_PACKAGE_HOST_GO_HOST_CGO_LINKING_SUPPORTS
+	select BR2_PACKAGE_HOST_GO
 	help
 	  skopeo is a command line utility that performs various
 	  operations on container images and image repositories.
@@ -1,3 +1,5 @@
-# Locally computed
-sha256  88b3979e6d5c7e32b50d7ec72fb15af724f6ab2cbf7e10880c360a77e4b5d99a  tiff-4.6.0.tar.gz
+# Locally computed after checking pgp signature
+# https://download.osgeo.org/libtiff/tiff-4.7.0.tar.xz.sig
+# with key: B1FA7D81EEB8E66399178B9733EBBFC47B3DD87D
+sha256  273a0a73b1f0bed640afee4a5df0337357ced5b53d3d5d1c405b936501f71017  tiff-4.7.0.tar.xz
 sha256  0780558a8bfba0af1160ec1ff11ade4f41c0d7deafd6ecfc796b492a788e380d  LICENSE.md
@@ -4,8 +4,9 @@
 #
 ################################################################################

-TIFF_VERSION = 4.6.0
-TIFF_SITE = http://download.osgeo.org/libtiff
+TIFF_VERSION = 4.7.0
+TIFF_SOURCE = tiff-$(TIFF_VERSION).tar.xz
+TIFF_SITE = https://download.osgeo.org/libtiff
 TIFF_LICENSE = tiff license
 TIFF_LICENSE_FILES = LICENSE.md
 TIFF_CPE_ID_VENDOR = libtiff
@@ -26,9 +26,13 @@ UTIL_LINUX_LIBS_DEPENDENCIES = \
 	host-pkgconf \
 	$(if $(BR2_PACKAGE_LIBXCRYPT),libxcrypt) \
 	$(TARGET_NLS_DEPENDENCIES)
+# --disable-year2038: tells the configure script to not abort if the
+# system is not Y2038 compliant. util-linux-libs will support year2038
+# if the system is compliant even with this option passed
 UTIL_LINUX_LIBS_CONF_OPTS += \
 	--disable-rpath \
-	--disable-makeinstall-chown
+	--disable-makeinstall-chown \
+	--disable-year2038

 UTIL_LINUX_LIBS_LINK_LIBS = $(TARGET_NLS_LIBS)

@@ -5,7 +5,7 @@
 ################################################################################

 # Buildroot version to use
-RELEASE='2024.08.1'
+RELEASE='2024.08.2'

 ### Change here for more memory/cores ###
 VM_MEMORY=2048
Author	SHA1	Message	Date
Peter Korsgaard	81d111dbd4	Update for 2024.11-rc2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-23 11:00:53 +01:00
Julien Olivain	fa20df5d75	package/util-linux-libs: allowing building even on non-Y2038 compliant systems Since the bump of util-linux to version 2.40.2 in Buildroot commit `f14929c657` ("package/util-linux: update to 2.40.2"), the build will fail on systems that are not Y2038, such as uClibc configurations. In order to preserve the previous behavior, pass --disable-year2038. See the gnulib documentation for details [1]. Contrary to what the option name might suggest, it doesn't really disable Y2038 support, but only the check that the system is Y2038 compliant. So even with --disable-year2038, if the system is Y2038 compliant (uses a 64-bit arch, uses the musl C library, or uses the glibc C library with BR2_TIME_BITS_64=y), util-linux tools will be Y2038 compliant. "--disable-year2038" was already added to util-linux in commit `11ae90b00` "package/util-linux: allowing building even on non-Y2038 compliant systems". Fixes: https://autobuild.buildroot.org/results/630fc287deb1cf5a684f274058b918a5d7aef989 [1] https://www.gnu.org/software/gnulib/manual/html_node/Avoiding-the-year-2038-problem.html Reviewed-by: Vincent Jardin <vjardin@free.fr> Signed-off-by: Julien Olivain <ju.o@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-23 10:51:49 +01:00
Romain Naour	4b271906a7	package/python-sip: disable parallel install {host-}python-sip may fail to install on fast machine, so disable parallel install. Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/8350440972 (TestPythonPyQt5) http://autobuild.buildroot.org/results/8f2/8f24656f3a66d21f2d3c6d6b1adc6bb5f1c0c801 (2024-10-15) http://autobuild.buildroot.org/results/6e6/6e6bbee714b10e0f04c9d17b7e0ecce057d21d2a (2022-07-15) Signed-off-by: Romain Naour <romain.naour@smile.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-23 10:46:59 +01:00
Fiona Klute (WIWA)	dbb019db73	package/bmap-tools: select host-python3 if building host package Host bmap-tools runs using host-python3, but did not select it, leading to the confusing situation that BR2_PACKAGE_HOST_PYTHON3=n even though it was built and working. Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-23 10:44:03 +01:00
Bernd Kuhls	d9bea4bb89	{linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-23 10:42:18 +01:00
Giulio Benetti	175dbdf3fc	package/libblockdev: bump to version 3.2.1 For change log, see: https://github.com/storaged-project/libblockdev/blob/3.2.1/NEWS.rst Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> [Julien: add link to change log] Signed-off-by: Julien Olivain <ju.o@free.fr>	2024-11-21 23:42:47 +01:00
Bernd Kuhls	96d73b3091	package/php: security bump version to 8.3.14 Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3 Release notes: https://news-web.php.net/php.announce/444 Fixes CVE-2024-8929, CVE-2024-8932, CVE-2024-11233, CVE-2024-11234 & CVE-2024-11236. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>	2024-11-21 21:59:27 +01:00
Bernd Kuhls	257c1de7e9	package/postgresql: security bump version to 16.5 Release notes: https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/ Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-20 22:31:35 +01:00
Yann E. MORIN	575d971820	package/go: ensure there is a host-go provider, take 2 Commit `7b2a164b74` (package/go/go-bin: new host-go provider) broke the case for prompt-less, host-only go packages, as the main host-go symbol would not be selected. This very same use-case was initially broken when the first go-src provider was introduced with `fa2536ec94` (package/go: make host package a virtual package), and subsequently fixed in `99a5d51c6e` (package/go: ensure there is a host-go provider), so `7b2a164b74` is causing a regression of a fixed regression. Fix that the very same way it was originally fixed. Signed-off-by: Yann E. MORIN <yann.morin@orange.com> Cc: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr>	2024-11-19 22:13:40 +01:00
Julien Olivain	f3b82925a9	package/skopeo: select BR2_PACKAGE_HOST_GO host-skopeo fail to build, using the commands: echo BR2_PACKAGE_HOST_SKOPEO=y >.config make olddefconfig make host-skopeo This commit fixes the issue by selecting BR2_PACKAGE_HOST_GO in the Config.in file. Fixes: make: *** No rule to make target 'host-', needed by '/buildroot/output/build/host-go-1.23.2/.stamp_configured'. Stop. Reviewed-by: Yann E. MORIN <yann.morin@orange.com> Signed-off-by: Julien Olivain <ju.o@free.fr>	2024-11-19 22:05:18 +01:00
Yu Chien Peter Lin	a359514630	DEVELOPERS: update maintainer of Andes platform I will lose access to my email next week, so hand it over to Leo Yu-Chi Liang. Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com> Reviewed-by: Leo Yu-Chi Liang <ycliang@andestech.com> Signed-off-by: Julien Olivain <ju.o@free.fr>	2024-11-19 22:00:32 +01:00
Thomas Petazzoni	353a37b04d	DEVELOPERS: drop Asaf Kahlon Asaf has privately requested to be removed from the DEVELOPERS file as he will no longer be contributing to Buildroot in the forseeable future. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>	2024-11-19 11:52:00 +01:00
Giulio Benetti	7e2515a5ad	package/libnvme: bump to version 1.11.1 For release note, see: https://github.com/linux-nvme/libnvme/releases/tag/v1.11.1 Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Reviewed-by: Vincent Jardin <vjardin@free.fr> Signed-off-by: Julien Olivain <ju.o@free.fr>	2024-11-18 23:42:41 +01:00
Bernd Kuhls	54cfff355c	package/libpng: fix arm build with NEON Fixes: http://autobuild.buildroot.net/results/52c/52c974e70f922e9d7efea4c538e4438a22faa846/ Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Co-authored-by: Peter Korsgaard <peter@korsgaard.com> [https://lists.buildroot.org/pipermail/buildroot/2024-November/767661.html] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-16 10:48:18 +01:00
Julien Olivain	0416ae0ed5	package/libkrb5: security bump to version 1.21.3 For the change log, see [1]. The license hash file changed, due to the year update. See [2]. This commit also adds a comment in the hash file about the pgp signature file source and key id used for the verification. Fixes: - https://nvd.nist.gov/vuln/detail/CVE-2024-37370 - https://nvd.nist.gov/vuln/detail/CVE-2024-37371 [1] https://web.mit.edu/kerberos/www/krb5-1.21/ [2] https://github.com/krb5/krb5/commit/fec2c44ee93bfd3282bed99509a941d56a6e2c21 Signed-off-by: Julien Olivain <ju.o@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-16 10:47:41 +01:00
Bernd Kuhls	649b31fc6d	package/intel-microcode: security bump version to 20241112 Release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases CVE-2024-21853 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html CVE-2024-23918 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html CVE-2024-24968 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html CVE-2024-23984 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>	2024-11-15 23:25:53 +01:00
Julien Olivain	d571951c67	package/tiff: security bump to version 4.7.0 For the release note, see: http://www.simplesystems.org/libtiff/releases/v4.7.0.html This commit also adds the _SOURCE variable, to switch to the xz archive, which saves ~1.5MB. The _SITE url is also updated to switch to the https protocol. This commit also adds a comment in the hash file about pgp signature veritication. Fixes: - https://nvd.nist.gov/vuln/detail/CVE-2023-6277 - https://nvd.nist.gov/vuln/detail/CVE-2023-52356 - https://nvd.nist.gov/vuln/detail/CVE-2024-7006 Signed-off-by: Julien Olivain <ju.o@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-14 19:52:43 +01:00
Bernd Kuhls	ed4348d1c5	package/libcurl: security bump version to 8.11.0 Changelog: https://curl.se/ch/8.11.0.html Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-14 19:52:31 +01:00
Peter Korsgaard	b4ae65e36e	docs/website: Update for 2024.02.8 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-14 17:39:32 +01:00
Peter Korsgaard	945f3f6c45	Update for 2024.02.8 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit `e843fa764b`) [Peter: drop Makefile/Vagrantfile changes] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-14 17:37:41 +01:00
Peter Korsgaard	a7ed78badc	docs/website: Update for 2024.08.2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-14 14:50:12 +01:00
Peter Korsgaard	5eeab05e48	Update for 2024.08.2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit `a91b9c7400`) [Peter: drop Makefile change] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2024-11-14 14:47:41 +01:00