Compare commits

..
214 Commits
Author SHA1 Message Date
Arnout Vandecappelle 344fcb4cdd Makefile: update for 2025.05.1
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-08-11 16:56:29 +02:00
Titouan Christophe 6ae1f61894 CHANGES: update for 2025.05.1
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-08-11 16:51:19 +02:00
Thomas Perale 5651149371 package/gcc-bare-metal: fix symlink to gcc 14.3.0
With gcc bump to version 14.3.0 in [1]. The gcc-bare-metal version
was not aligned to the same version which led to the following error in
the autobuilder:

```
make[1]: Leaving directory '/workdir/instance-0/output-1/build/host-mpc-1.3.1'
ERROR: No hash found for gcc-14.2.0.tar.xz
make: *** [package/pkg-generic.mk:179: /workdir/instance-0/output-1/build/host-gcc-bare-metal-14.2.0/.stamp_downloaded] Error 1
```

This patch align gcc-bare-metal with the version of gcc 14.

[1] 1e8c1e0ef0 package/gcc: update to 14.3.0

Fixes: https://autobuild.buildroot.org/results/3a2/3a228e885cb04e0c91eee470f9622e0e44eec3d7
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
(cherry picked from commit 176fed6cc0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-09 19:34:40 +02:00
Thomas Perale 3c2f5ce23e package/ltp-testsuite: Revert "package/ltp-testsuite: Fix uclibc-ng build"
This reverts commit ab7297f3c1.

It was mistakenly applied but the error described doesn't apply on the
LTS branch.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
(cherry picked from commit e69822b2dc)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 22:10:43 +02:00
Thomas Perale 0ae11e1e83 package/sqlite: ignore CVE-2025-3277
The CVE-2025-3277 as been marked as a duplicate of CVE-2025-29087 by the
debian security tracker [1].

The CVE-2025-29087 has already been fixed in commit [2] so this patch
adds CVE-2025-3277 to the ignored CVEs.

[1] https://security-tracker.debian.org/tracker/CVE-2025-3277
[2] 835b5659ea package/sqlite: add patch to fix CVE-2025-29087

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 014174f00d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:54 +02:00
Bernd Kuhls 04341bb906 {linux, linux-headers}: bump 6.{6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 51b27bad91)
[thomas: drop 6.15]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:52 +02:00
Thomas Perale 804c1030f8 package/php: bump to v8.3.24
This is a bug fix release.

For more information, see:

 - https://www.php.net/ChangeLog-8.php#PHP_8_3
 - https://news-web.php.net/php.announce/466

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4089677c2d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:49 +02:00
Thomas Bonnefille 2efe093f5a package/libspdm: bump version to 3.8.0
For change log since 3.5.0, see:
https://github.com/DMTF/libspdm/releases

Following the upgrade of libopenssl to version 3.5.0 [1], the build
process for libspdm encountered issues due to the new openssl API.
It requires some modifications in the asn1.h file of libspdm.
This build error was addressed by a specific commit [2] in libspdm.

As Buildroot 2025.02 isn't impacted, this commit bumps libspdm to the
latest libspdm version to fix the build error.

This commit also updates the license hash, after a year update in:
https://github.com/DMTF/libspdm/commit/e8a35c8d0dfe5edb2bbafaa07ebf74b097824364

[1]: https://gitlab.com/buildroot.org/buildroot/-/commit/9868ca6ec98afa28a94aea50cc940db7df860396
[2]: https://github.com/DMTF/libspdm/commit/88797f83daf6654d6381e3539abe1670763f2ac1

Fixes:
https://autobuild.buildroot.org/results/87b8805975ef132a58c40e622e2e023199f6ee2a/

Signed-off-by: Thomas Bonnefille <thomas.bonnefille@bootlin.com>
[Julien:
 - add link to change log
 - fix LICENSE.md hash
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a01c07f572)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:47 +02:00
Thomas Perale d4cf1b5e11 package/libxml2: add patch for CVE-2025-6170
This fixes the following vulnerability:

- CVE-2025-6170

    A flaw was found in the interactive shell of the xmllint command-line
    tool, used for parsing XML files. When a user inputs an overly long
    command, the program does not check the input size properly, which can
    cause it to crash. This issue might allow attackers to run harmful
    code in rare configurations without modern protections.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2025-6170
  - https://gitlab.gnome.org/GNOME/libxml2/-/commit/c340e419505cf4bf1d9ed7019a87cc00ec200434

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c68a14d73a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:45 +02:00
Thomas Petazzoni 1d16248816 package/gcc: drop stale 13.3.0 patches
Commit 0b8b72d2fe bumped gcc 13.x from
13.3.0 to 13.4.0 but forgot to drop the gcc 13.3.0, so let's remove
those patches.

Cc: Kadambini Nema <kadambini.nema@gmail.com>
Fixes: 0b8b72d2fe
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2fbf98da7c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:43 +02:00
Fabien Lehoussel 9167bed639 package/gcc/gcc-final: fix CPE identification
Fix the CPE (Common Platform Enumeration) identification in the
gcc-final package to ensure proper vulnerability tracking through the
NVD database:

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnu:gcc

Signed-off-by: Fabien Lehoussel <fabien.lehoussel@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b2801c7bce)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:41 +02:00
Adrian Perez de Castro 706a0591d3 package/wpewebkit: security bump to version 2.48.3
This bumps WPE WebKit to the 2.48 stable series, skipping over 2.46.

WPE WebKit 2.48 and 2.46 highlights:

- https://wpewebkit.org/blog/2025-04-11-wpewebkit-2.48.html
- https://wpewebkit.org/blog/2024-wpewebkit-2.46.html

Release notes:

- https://wpewebkit.org/release/wpewebkit-2.48.3.html
- https://wpewebkit.org/release/wpewebkit-2.48.2.html
- https://wpewebkit.org/release/wpewebkit-2.48.1.html
- https://wpewebkit.org/release/wpewebkit-2.48.0.html
- https://wpewebkit.org/release/wpewebkit-2.46.7.html
- https://wpewebkit.org/release/wpewebkit-2.46.6.html
- https://wpewebkit.org/release/wpewebkit-2.46.5.html
- https://wpewebkit.org/release/wpewebkit-2.46.4.html
- https://wpewebkit.org/release/wpewebkit-2.46.3.html
- https://wpewebkit.org/release/wpewebkit-2.46.2.html
- https://wpewebkit.org/release/wpewebkit-2.46.1.html
- https://wpewebkit.org/release/wpewebkit-2.46.0.html

Fixes the following security issues:

- From https://wpewebkit.org/security/WSA-2025-0004.html
  CVE-2025-24223, CVE-2025-31204, CVE-2025-31205, CVE-2025-31206,
  CVE-2025-31215, CVE-2025-31257

- From https://wpewebkit.org/security/WSA-2025-0003.html
  CVE-2024-54551, CVE-2025-24208, CVE-2025-24209, CVE-2025-24213,
  CVE-2025-24216, CVE-2025-24264, CVE-2025-30427

- From https://wpewebkit.org/security/WSA-2025-0002.html
  CVE-2024-44192, CVE-2024-54467, CVE-2025-24201

- From https://wpewebkit.org/security/WSA-2025-0001.html
  CVE-2024-27856, CVE-2024-54543, CVE-2024-54658, CVE-2025-24143,
  CVE-2025-24150, CVE-2025-24158, CVE-2025-24162

- From https://wpewebkit.org/security/WSA-2024-0008.html
  CVE-2024-54479, CVE-2024-54502, CVE-2024-54505, CVE-2024-54508,
  CVE-2024-54534

- From https://wpewebkit.org/security/WSA-2024-0007.html
  CVE-2024-44308, CVE-2024-44309

- From https://wpewebkit.org/security/WSA-2024-0006.html
  CVE-2024-44185, CVE-2024-44244, CVE-2024-44296

- From https://wpewebkit.org/security/WSA-2024-0005.html
  CVE-2024-40866, CVE-2024-44187

As for build system changes, the minimum GCC requirement gets raised to
version 11 [1], the ENABLE_SPEECH_SYNTHESIS option is now enabled by
default [2] and needs handling, and Skia (bundled with the sources) is
now preferred on little-endian targets.

[1] https://github.com/WebKit/WebKit/commit/682ac4ba74c53d0cd488c7a595096224a9abb036
[2] https://github.com/WebKit/WebKit/commit/10381a8de938024f31935184af470ccbce0b22d9

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2882cf4ae6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:39 +02:00
Nathaniel Roach 9049b5ff85 package/sudo: Enable libxcrypt with glibc, allowing hashed passwords without PAM
Per https://gitlab.com/buildroot.org/buildroot/-/issues/27 , on glibc
builds without PAM, sudo will "fail" all password prompts.

It was found that it's simply checking the entered string against the
raw hash, because 'libcryp' isn't available. On glibc, we need libxcrypt,
so enable it and ensure sudo is built with it.

musl and uclibc do have crypt() functions, so this is not needed.

Relevant code from sudo:
 https://github.com/sudo-project/sudo/blob/v1.9.17p1/plugins/sudoers/auth/passwd.c#L139

Signed-off-by: Nathaniel Roach <nroach44@nroach44.id.au>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6044cc5f26)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:37 +02:00
Petr Vorel 586f3b2760 package/ltp-testsuite: Fix uclibc-ng build
Backport upstream fix.

Fixes:
https://autobuild.buildroot.org/results/f3e/f3e03b9a1a69988d6497f36c9d64a37a66e9ad20/
https://autobuild.buildroot.org/results/856/856365f467efc449faee1951250e63d8d4442bbc/
https://autobuild.buildroot.org/results/2ac/2ac08cecd6a505f1bac1a673efc280b3a8dcb23a/
https://autobuild.buildroot.org/results/59b/59b3ad33667b7e87c81e49dd434d5f494e189e0d/
https://autobuild.buildroot.org/results/b1a/b1a36f9971c97300670d8d772ace11e5fedceaaa/

Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
Tested-By: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 97cc946e2f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:35 +02:00
Titouan Christophe 97e03b27fd package/rust: add CPE_ID_VENDOR
This gives a proper cpe-id string to the Rust buildroot package,
as it can be found in the NVD database:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Reviewed-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0c2769b9c3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:33 +02:00
Stefan Nickl 3480fe66fb package/modem-manager: Add option to enable AT commands via D-Bus
Signed-off-by: Stefan Nickl <Stefan.Nickl@gmail.com>
Reviewed-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f103e3696f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:31 +02:00
Thomas Perale 20d017a89e package/micropython: add patch for CVE-2024-8947
This fixes the following vulnerability:

- CVE-2024-8947

 A vulnerability was found in MicroPython 1.22.2. It has been declared
 as critical. Affected by this vulnerability is an unknown functionality
 of the file py/objarray.c. The manipulation leads to use after free.
 The attack can be launched remotely. The complexity of an attack is
 rather high. The exploitation appears to be difficult. Upgrading to
 version 1.23.0 is able to address this issue. It is recommended to
 upgrade the affected component. In micropython objarray component, when
 a bytes object is resized and copied into itself, it may reference
 memory that has already been freed.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2024-8947
  - https://github.com/micropython/micropython/commit/4bed614e707c0644c06e117f848fa12605c711cd

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1fc0e90450)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:29 +02:00
Thomas Perale 184252d460 package/orc: bump to version 0.4.41
This bump include fix for CVE-2024-40897 which has been addressed in
previous patch.

For more information on the release, see:
  - https://gitlab.freedesktop.org/gstreamer/orc/-/blob/main/RELEASE
  - https://gitlab.freedesktop.org/gstreamer/orc/-/compare/0.4.34..0.4.41

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 74e38b3c4d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:27 +02:00
Thomas Perale 458696a88c package/orc: add patch for CVE-2024-40897
This fixes the following vulnerabilities:

- CVE-2024-40897

 Stack-based buffer overflow vulnerability exists in orcparse.c of ORC
 versions prior to 0.4.39. If a developer is tricked to process a
 specially crafted file with the affected ORC compiler, an arbitrary
 code may be executed on the developer's build environment. This may
 lead to compromise of developer machines or CI build environments.
 https://www.cve.org/CVERecord?id=CVE-2024-40897

For more information, see:
 - https://www.cve.org/CVERecord?id=CVE-2024-40897
 - https://gitlab.freedesktop.org/gstreamer/orc/-/commit/fb7db9ae3e8ac271651d1884a3611d30bac04a98

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2f7afa54ce)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:25 +02:00
Thomas Perale b2f2d587db package/orc: add CPE identifier
The cpe:2.3:a:gstreamer:orc:0.4.34:*:*:*:*:*:*:* is
valid for this package.

See https://nvd.nist.gov/products/cpe/detail/37DFA009-0707-4825-B28A-62451B1E2AFC

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 279cb43814)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:24 +02:00
Thomas Perale 101aff81d2 package/qpid-proton: update mirror url
The current mirror now only has the version 0.40.0 available.

Older version of apache packages moved to the "archive.apache.org"
location.

Fixes: https://autobuild.buildroot.org/results/853/853c354b9bde4408e122046496fd3f0e7ffb0b55
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Tested-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 60fe9b3733)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:22 +02:00
Waldemar Brodkorb afc5c86054 package/uclibc: update to 1.0.54
See here for release notes:
https://mailman.openadk.org/mailman3/hyperkitty/list/devel@uclibc-ng.org/thread/FCUVZRWXEWHOREQPCR5OZGGS3R5WVK2Z/

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Reviewed-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c261dd9122)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:20 +02:00
Yegor Yefremov 59cdad3c0e DEVELOPERS: add Yegor Yefremov for package/libxmlrpc
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Acked-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 44801fa77d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:18 +02:00
Julien Olivain 0e38d5a53c support/testing: test_xen: rename TestXen to TestXenAarch64
Commit [1] introduced an Armv7 test case for Xen named TestXenArmv7,
next to the original Aarch64 test case which was simply named TestXen.

The test list shows, for example with the command
"support/testing/run-tests -l":

    tests.package.test_xen.TestXen
    tests.package.test_xen.TestXenArmv7

In order to make this test list a bit more explicit, this commit
renames the TestXen to TestXenAarch64. With that change, the list
becomes:

    tests.package.test_xen.TestXenAarch64
    tests.package.test_xen.TestXenArmv7

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/5346824a83488f840008eb24f84866435ac32a12

Cc: Vincent Stehlé <vincent.stehle@arm.com>
Reviewed-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d15ffdfda7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:11:16 +02:00
Julien Olivain 426f5b89f2 package/berkeleydb: fix build with host gcc-15.x
Commit [1] fixed berkeleydb target build with gcc-15.x.
The host variant package also fails when building with host gcc-15.x.

This commit fixes the issue by replicating the same fix for the package
host variant.

Fixes:
https://autobuild.buildroot.org/results/a8051600ab95a63c852960f8dace757b16c665f0/

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/c1d422edde19d07d6406705b1a4b059125dba689

Reviewed-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0ffc3aa43e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:40 +02:00
Kadambini Nema 5d3485b24e package/gcc: update to 14.3.0
Release announcement:
https://gcc.gnu.org/pipermail/gcc-announce/2025/000186.html

List of bugs which were resolved in 14.3.0:
https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=14.3

Drop upstream patch 0003-libquadmath-Fix-up-libquadmath-math-sqrtq.c-compilat.patch
https://gcc.gnu.org/cgit/gcc/commit/?id=3fe5720430a9ba61ed7562aac4d758cc77d49a28

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
[Julien:
 - rebase on branch next
 - fix patch 0003 upstream merge URL
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e9227311d9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:38 +02:00
Kadambini Nema 1d299888fe package/gcc: update to 13.4.0
Release announcement:
https://gcc.gnu.org/pipermail/gcc-announce/2025/000187.html

Changelog:
https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=13.4

Signed-off-by: Kadambini Nema <kadambini.nema@gmail.com>
[Julien: fix check-package error by fixing .checkpackageignore entry]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0b8b72d2fe)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:36 +02:00
Thomas Petazzoni 599f40da45 package/gcc: drop useless condition on BR2_GCC_ENABLE_GRAPHITE
For a long while now, we only support building GCC >= 8.x, so the
dependency of BR2_GCC_ENABLE_GRAPHITE on GCC >= 5.x is useless, drop
it, together with the corresponding Config.in comment.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b5f14d65cb)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:34 +02:00
Thomas Petazzoni 4e06f64349 package/gcc: drop dead code related to BR2_GCC_SUPPORTS_LIBCILKRTS
The libcilkrts library was removed from gcc 8.x, and gcc 8.x is the
oldest version we allow building (to still support PowerPC SPE). So it
means the BR2_GCC_SUPPORTS_LIBCILKRTS is basically dead code because:

	default y if !BR2_TOOLCHAIN_GCC_AT_LEAST_8

Will never evaluate to 'y' in current Buildroot.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 62e784cb97)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:32 +02:00
Thomas Petazzoni cb33a98cda package/gcc: drop stale hash
The hash for the GCC 10.4.0 tarball should have been removed a long
time ago, when support for GCC 10.x has been removed.

Fixes: d37a8f3a2e ("package/gcc: remove gcc 10.x")
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5fd75bfb02)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:30 +02:00
Thomas Perale f8ec9b7f52 package/kvmtool: fix build failure w/ musl
Starting GCC14 'implicit-function-declaration' are treated as errors by
default. When building kvmtool with musl libc, the following error
occurs due to missing declaration of 'basename':

```
vfio/core.c:537:22: error: implicit declaration of function ‘basename’ [-Wimplicit-function-declaration]
  537 |         group_name = basename(group_path);
      |                      ^~~~~~~~
vfio/core.c:537:22: warning: nested extern declaration of ‘basename’ [-Wnested-externs]
vfio/core.c:537:20: error: assignment to ‘char *’ from ‘int’ makes pointer from integer without a cast [-Wint-conversion]
  537 |         group_name = basename(group_path);
      |                    ^
```

This error can be reproduced with:

```
cat >.config <<EOF
BR2_aarch64=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_AARCH64_MUSL_BLEEDING_EDGE=y
BR2_PACKAGE_KVMTOOL=y
EOF
make olddefconfig
make kvmtool
```

This patch adds the upstream commit that fixes this issue by including
the appropriate header, ensuring compatibility with musl and GCC14.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cec0acc84d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:28 +02:00
Bernd Kuhls bbaa3000cf Revert "package/libva: fix build error"
This reverts commit c41f953ab9.

This commit broke gst1-vaapi:
https://lists.buildroot.org/pipermail/buildroot/2025-July/782786.html

Reported-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7de76ae8d1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:26 +02:00
Bernd Kuhls a5a0c4a38e package/libcurl: bump version to 8.15.0
Upstream removed optional BearSSL support:
https://github.com/curl/curl/commit/08a3e8e19a59d1530bfb208e187ac7c34c978dfd

Changelog: https://curl.se/ch/8.15.0.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4cd8a7d748)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:23 +02:00
Bernd Kuhls ba2fadb399 package/libcurl: remove configure option --with-random
Upstream removed this configure option in version 8.10.0:
https://github.com/curl/curl/commit/269fdd4c6ed5d837d57448ac977f6f300968df15
which was added to buildroot with commit
d68b999787.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d48412b58e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:22 +02:00
Bernd Kuhls dde378c63e package/libcurl: remove configure option --disable-ntlm-wb
Upstream removed this configure option in version 8.8.0:
https://github.com/curl/curl/commit/50def7c881ba560ab6e0235990e8f07fa69f4bc8
which was added to buildroot with commit
50bdb2a3b7.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8ee654b28e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:20 +02:00
Scott Fan df7e6c6357 package/mosquitto: bump to version 2.0.22
Drop the patch that was fixed in the v2.0.22, see the closed issues and PRs:
https://github.com/eclipse-mosquitto/mosquitto/issues/3246
https://github.com/eclipse-mosquitto/mosquitto/pull/3256
https://github.com/eclipse-mosquitto/mosquitto/pull/3227
https://github.com/eclipse-mosquitto/mosquitto/pull/3252

However, a new issue was reported by GasparQ, when WITH_TLS option is off.
https://github.com/eclipse-mosquitto/mosquitto/issues/3318

Fortunately, besmarsh had pushed a PR that fixed this issue.
https://github.com/eclipse-mosquitto/mosquitto/pull/3321

The patch file was quoted in this commit.

For more details of v2.0.22, see the changelog:
https://github.com/eclipse-mosquitto/mosquitto/blob/v2.0.22/ChangeLog.txt

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2c20a2541c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:18 +02:00
Scott Fan 78fe304aeb package/libmicrohttpd: bump version to 1.0.2
Fix double-close bugs on bind() errors reported by MC on the list.

Removed MHD2 draft code, now in libmicrohttpd2.git.

Changelog: https://git.gnunet.org/libmicrohttpd.git/tree/ChangeLog

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2fd7933125)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:16 +02:00
Vincent Stehlé c55b9b0a70 support/testing: test_xen: test on 32-bit Arm v7
Add a TestXenArmv7 class with its related files in an arm/ subfolder
under test_xen/, to test Xen on 32-bit Arm v7.

We cannot boot with UEFI in this case; we use a custom U-Boot script,
which creates the Xen configuration Devicetree during boot.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5346824a83)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:13 +02:00
Vincent Stehlé 2bd4834d9e support/testing: test_xen: add a base class
In preparation of adding a test for Xen on 32-bit Arm v7:
- Introduce an architecture-agnostic TestXenBase class where we move
  most of the Xen test scenario and bits of the configuration.
- Re-organise the test_xen/ folder with the architecture-agnostic files
  under common/ and the 64-bit Arm specific files under aarch64/.

Make the 64-bit Arm TestXen class inherit from the base class and leave
in there only the architecture-specific parts:
- The 64-bit Arm configuration bits.
- The test function, which passes the proper 64-bit Arm simulator
  options to the generic test function.

No functional change intended.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a6f0d33c87)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:11 +02:00
Florian Larysch 2ea375ceef package/chartjs: fix license path
Commit a954d39a58 ("package/chartjs: bump to version 3.9.1") updated the
package version and the license file hash, but also changed the path to
the license file in the hash file. However, the path to the license file
hasn't changed, causing an error during "make legal-info". Revert the
path change.

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 353745e095)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:09 +02:00
Bernd Kuhls 7e76ce3289 package/apache: security bump version to 2.4.65
Changelog:
https://downloads.apache.org/httpd/CHANGES_2.4.65

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-54090

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ebb6648046)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:07 +02:00
Bernd Kuhls e9b8986841 package/rust-bindgen: security bump version to 0.72.0
Changelog, since version 0.65.1:
https://github.com/rust-lang/rust-bindgen/blob/v0.72.0/CHANGELOG.md#0720-2025-06-08

The package updated some of its dependencies to fix
security issues:

Version 0.70.0 updates "tempfile" and "rustix" to fix:
https://github.com/advisories/GHSA-c827-hfw6-qwvm
https://www.cve.org/CVERecord?id=CVE-2024-43806

Version 0.69.3 updates shlex to fix:
https://rustsec.org/advisories/RUSTSEC-2024-0006.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien:
 - use version tag for change log url
 - mark the update as security related
 - add link to fixed rustix CVE
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1a229c54b8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:05 +02:00
El Mehdi YOUNES 915ee9cd4f utils/update-rust: fix MIT hash
The LICENSE-MIT file has changed.
Commit 432aef05 fixed it for rust package but forgot
the update-rust script.

Signed-off-by: El Mehdi YOUNES <elmehdi.younes@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b97175b49a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:03 +02:00
Bernd Kuhls 805aee8226 {linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 065c1b84b5)
[thomas: drop 6.15]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:09:01 +02:00
Yegor Yefremov a331907858 package/avrdude: remove the obsolete hook
Since its introduction in commit [1], avrdude has a post install
target hook removing a backup configuration file.

Commit [2] updated avrdude to version 7.1 and switch to the
cmake infra.

CMake recipe doesn't create a backup of the avrdude.conf.

This commit removes this hook which is no longer needed.

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/dc776f0d0546900b22d1552f3e522be2080016c6
[2] https://gitlab.com/buildroot.org/buildroot/-/commit/f89f3787a05d123a33f1a000c802fe42c96a487f

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[Julien: add extra info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 51cf8e5663)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:59 +02:00
Fiona Klute b15d605d0d package/lrzsz: fix build with musl
lib/long-options.c failed to compile with musl for the same reason
0002-lib-long-options.c-include-stdlib.h.patch was added to fix,
exit() being undefined. The fix is the same as well: include stdlib.h.

Fixes: b6784a1f1f ("package/lrzsz: fix build with GCC >= 14.x")
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 54240460dc)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:57 +02:00
Titouan Christophe 9e9f3b9a15 package/python-starlette: security bump to v0.47.2
For release note, see:
https://github.com/encode/starlette/releases/tag/0.47.2

This fixes the following vulnerability:

- CVE-2025-54121:
    Starlette is a lightweight ASGI (Asynchronous Server Gateway
    Interface) framework/toolkit, designed for building async web services
    in Python. In versions 0.47.1 and below, when parsing a multi-part
    form with large files (greater than the default max spool size)
    starlette will block the main thread to roll the file over to disk.
    This blocks the event thread which means the application can't accept
    new connections. The UploadFile code has a minor bug where instead of
    just checking for self._in_memory, the logic should also check if the
    additional bytes will cause a rollover. The vulnerability is fixed in
    version 0.47.2.
    https://www.cve.org/CVERecord?id=CVE-2025-54121

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Reviewed-by: Marcus Hoffmann <buildroot@bubu1.eu>
[Julien: add link to release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8945ea3e67)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:55 +02:00
Lance Fredrickson a89d3b4070 package/ncurses: bump to version 6.5.20250720
Release notes:
https://github.com/ThomasDickey/ncurses-snapshots/blob/v6_5_20250720/NEWS

Fixes observed issues with htop on aarch64/musl after the last ncurses update.

Signed-off-by: Lance Fredrickson <lancethepants@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1471c9b421)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:53 +02:00
Markus Mayer 50c07d88fd toolchain/toolchain-wrapper.c: fix indentation
A recent commit introduced a few lines that were indented with spaces
rather than a tab. Rectify this.

Fixes: 00b30f887a ("toolchain-wrapper.c: get rid of EXCLUSIVE_ARGS")
Signed-off-by: Markus Mayer <mmayer@broadcom.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5e4cb7607b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:51 +02:00
Giulio Benetti 23cc7bde08 package/rtl8821au: update upstream
Benetti Engineering just took over Larry Finger(lwfinger)'s repository [0]
rtl8821au since Larry unfortunately passed away[1](RIP) and there are
pending PRs that will never be checked as stated here. So basically move
github user to benetti-engineering-sas and update version with latest that
fixes build failure with Linux version 6.15. And of course let's update
package's URL due to the moving.

[0]: https://github.com/lwfinger/rtl8812au/issues/32
[1]: https://lwn.net/Articles/979419/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2dd7a4a374)
[thomas: only change the upstream]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:49 +02:00
Giulio Benetti a9df497204 package/rtl8723ds: update upstream
Benetti Engineering just took over Larry Finger(lwfinger)'s repository [0]
rtl8723ds since Larry unfortunately passed away[1](RIP) and there are
pending PRs that will never be checked as stated here. So basically move
github user to benetti-engineering-sas and update version with latest that
fixes build failure with Linux version 6.15. And let's drop local patches
that are now upstreamed as well. And of course let's update package's
URL due to the moving.

[0]: https://github.com/lwfinger/rtl8723ds/issues/53
[1]: https://lwn.net/Articles/979419/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 54ee4a71c0)
[thomas: only change the upstream]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:47 +02:00
Giulio Benetti c743fcdd79 package/rtl8723bu: update upstream
Benetti Engineering just took over Larry Finger(lwfinger)'s repository
rtl8723bu since Larry unfortunately passed away[0](RIP) and there are
pending PRs that will never be checked as stated here[1]. So basically move
github user to benetti-engineering-sas and update version with latest that
fixes build failure with Linux version 6.15. And of course let's update
package's URL due to the moving.

[0]: https://lwn.net/Articles/979419/
[1]: https://github.com/lwfinger/rtl8723bu/issues/206

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d1fc513da7)
[thomas: only change the upstream]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:45 +02:00
Giulio Benetti 189bdc4d01 package/rtl8188eu: move upstream to Benetti Engineering Github
Benetti Engineering just took over Larry Finger(lwfinger)'s repository
rtl8188eu since Larry unfortunately passed away[0](RIP) and there are
pending PRs that will never be checked as stated here[1]. So basically move
github user to benetti-engineering-sas and update version with latest that
fixes build failure with Linux version 6.15. And let's drop local patches
that are now upstreamed as well. Let's also drop obsolete Config.in
informations since as stated here[2]: "This driver is under development
and has a limited feature set. In particular it does not yet support 40MHz
channels and power management". At the same time drop other suggestions
like enabling CONFIG_WIRELESS_EXT or "this package needs a firmware loading
mechanism to load the binary blob for the chip to work" since they are now
part of the package. And of course let's update package's URL due to the
moving.

[0]: https://lwn.net/Articles/979419/
[1]: https://github.com/lwfinger/rtl8188eu/pull/464

Fixes:
https://autobuild.buildroot.org/results/d59537da8eb27d737718885dc81ec257a2791455/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a9c5dc024a)
[Thomas: only change upstream]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:43 +02:00
Peter Korsgaard 7b8400f71b toolchain/toolchain-wrapper.c: get rid of EXCLUSIVE_ARGS
Rather than having a hard coded amount of exclusive args (with the risk of
overflow when new logic is added), simplify the argument buffer allocation
logic to always allocate room for DEFAULT_MAX_ARGS (1024) arguments and just
realloc to grow for the rare situation where that is not enough.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 00b30f887a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:42 +02:00
Peter Korsgaard 09da162ef5 toolchain/toolchain-wrapper.c: slightly simplify cmdline copying
C99 section 5.1.2.2.1p2 mandates that:

- argv[argc] shall be a null pointer.

https://www.open-std.org/jtc1/sc22/wg14/www/docs/n1256.pdf

So we might as well copy the null pointer along in the memcpy() rather than
copy everything up to the null pointer and then add one afterwards for
simplicity.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6b8ffbf97b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:40 +02:00
Petr Vorel 325fa4b316 package/ltp-testsuite: backport musl build fixes
When building LTP with a musl toolchain with kernel headers >= 6.14,
compilation fails with error:

    In file included from listmount02.c:22:
    listmount.h: In function ‘listmount’:
    listmount.h:18:16: error: variable ‘req’ has initializer but incomplete type
       18 |         struct mnt_id_req req = {
          |                ^~~~~~~~~~

The issue can be reproduced with commands:

    cat >.config <<EOF
    BR2_aarch64=y
    BR2_TOOLCHAIN_BUILDROOT_MUSL=y
    BR2_LINUX_KERNEL=y
    BR2_LINUX_KERNEL_LATEST_VERSION=y
    BR2_LINUX_KERNEL_USE_ARCH_DEFAULT_CONFIG=y
    BR2_PACKAGE_LTP_TESTSUITE=y
    EOF
    make olddefconfig
    make ltp-testsuite

Backport 2 commits from upstream which fixes LTP on musl on
kernel >= 6.14.

Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
[Julien:
 - add commands to reproduce the issue in commit log
 - move _AUTORECONF up to be nearer _VERSION
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0ccd9300cd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:38 +02:00
Yegor Yefremov 60b8fb63cc package/watchdog: do not guard shutdown __GLIBC__
These headers are provided by uclibc/musl/glibc and bionic so we can
assume they are not needed to be glibc specific includes. This also
ensures that we get proper declaration of reboot() API.

Upstream:
https://sourceforge.net/p/watchdog/code/ci/aa371bf201b1d59c595a1ad7b3464ae544ed142f/

Fixes:
https://autobuild.buildroot.org/results/3e67d5b3b89d794e3f6c510803368f8b100b07a7/

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[Julien: reformat Upstream: tag in patch to fix check-package error]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ea797e760b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:36 +02:00
Bernd Kuhls 33cc49849d package/ntp: add Upstream tag to patch 0001
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c72557eaf8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:34 +02:00
Bernd Kuhls fa1c1f83eb package/ntp: fix build with gcc-14
Fixes:
https://autobuild.buildroot.org/results/114/114a81f216b44a00c5de830e21315df68a62987d/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 526ab2f6c0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:32 +02:00
Bernd Kuhls b4ec33b693 package/ntp: fix OpenSSL detection
Fixes:
https://autobuild.buildroot.org/results/261e630f20dd20b7f606a7bcbd8fa7b50ce82fbe/

The build error occurs when libatomic is needed for linking.
In ntp_openssl.m4 the result of OpenSSL's pkgconf was omitted.

Enable configure option --enable-verbose-ssl to help future debugging:
configure: ntp_ssl_libs_l:   (-lssl -lcrypto -latomic)

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6a20660c5a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:29 +02:00
Gero Schwäricke 4482f1de4f package/rauc-hawkbit-updater: fix missing user
Systemd support for the RAUC hawkbit updater was added in

  4aa7a4ad8a (package/rauc-hawkbit-updater: add systemd optional dependency, 2024-07-10)

This installs the RAUC hawkbit updater service, which executes as user
"rauc-hawkbit" [1], which doesn't exist by default.

[1] https://github.com/rauc/rauc-hawkbit-updater/blob/2711c0e02781eb9d97285c87197f1bafef75d0d1/script/rauc-hawkbit-updater.service

Signed-off-by: Gero Schwäricke <gero.schwaericke@sevenlab.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 69b2777291)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:27 +02:00
Fiona Klute (WIWA) c7f71cc764 package/network-manager: set "nft" path if BR2_PACKAGE_NFTABLES=y
Nftables should be preferred over iptables if available, which
NetworkManager will do if both paths are set.

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7c8cca9baa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:25 +02:00
Titouan Christophe e8fcc04257 package/assimp: security bump to v6.0.2
For release notes since version 5.4.3, see:
https://github.com/assimp/assimp/releases

This fixes the following vulnerabilities:

- CVE-2025-2750:
    A vulnerability, which was classified as critical, was found in Open
    Asset Import Library Assimp 5.4.3. This affects the function
    Assimp::CSMImporter::InternReadFile of the file
    code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The
    manipulation leads to out-of-bounds write. It is possible to initiate
    the attack remotely. The exploit has been disclosed to the public and
    may be used.
    https://www.cve.org/CVERecord?id=CVE-2025-2750

- CVE-2025-2751:
    A vulnerability has been found in Open Asset Import Library Assimp
    5.4.3 and classified as problematic. This vulnerability affects the
    function Assimp::CSMImporter::InternReadFile of the file
    code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The
    manipulation of the argument na leads to out-of-bounds read. The
    attack can be initiated remotely. The exploit has been disclosed to
    the public and may be used.
    https://www.cve.org/CVERecord?id=CVE-2025-2751

- CVE-2025-2757:
    A vulnerability classified as critical was found in Open Asset Import
    Library Assimp 5.4.3. This vulnerability affects the function
    AI_MD5_PARSE_STRING_IN_QUOTATION of the file
    code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The
    manipulation of the argument data leads to heap-based buffer overflow.
    The attack can be initiated remotely. The exploit has been disclosed
    to the public and may be used.
    https://www.cve.org/CVERecord?id=CVE-2025-2757

- CVE-2025-3158:
    A vulnerability, which was classified as critical, has been found in
    Open Asset Import Library Assimp 5.4.3. Affected by this issue is the
    function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file
    code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler.
    The manipulation leads to heap-based buffer overflow. It is possible
    to launch the attack on the local host. The exploit has been disclosed
    to the public and may be used.
    https://www.cve.org/CVERecord?id=CVE-2025-3158

Also, drop local security patches that have been applied upstream

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add link to relase notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3c312f149b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:23 +02:00
Titouan Christophe 0c37b4367f package/mbedtls: security bump to v3.6.4
This is a security release of the Long Term Support branch, see release notes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4

Also update the download location, because upstream changed the tag naming
scheme from v<...> to mbedtls-<...>

This fixes the following vulnerabilities:

- CVE-2025-47917
    Fix possible use-after-free or double-free in code calling
    mbedtls_x509_string_to_names(). This was caused by the function calling
    mbedtls_asn1_free_named_data_list() on its head argument, while the
    documentation did no suggest it did, making it likely for callers relying
    on the documented behaviour to still hold pointers to memory blocks after
    they were free()d, resulting in high risk of use-after-free or double-free,
    with consequences ranging up to arbitrary code execution.
    In particular, the two sample programs x509/cert_write and x509/cert_req
    were affected (use-after-free if the san string contains more than one DN).
    Code that does not call mbedtls_string_to_names() directly is not affected.

- CVE-2025-48965
    Fix a bug in mbedtls_asn1_store_named_data() where it would sometimes leave
    an item in the output list in an inconsistent state with val.p == NULL but
    val.len > 0. This impacts applications that call this function directly,
    or indirectly via mbedtls_x509_string_to_names() or one of the
    mbedtls_x509write_{crt,csr}set{subject,issuer}_name() functions. The
    inconsistent state of the output could then cause a NULL dereference either
    inside the same call to mbedtls_x509_string_to_names(), or in subsequent
    users of the output structure, such as mbedtls_x509_write_names(). This
    only affects applications that create (as opposed to consume) X.509
    certificates, CSRs or CRLs, or that call mbedtls_asn1_store_named_data()

- CVE-2025-49087
    Fix a timing side channel in the implementation of PKCS#7 padding
    which would allow an attacker who can request decryption of arbitrary
    ciphertexts to recover the plaintext through a timing oracle attack.

- CVE-2025-49600:
    In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid
    signatures if hash computation fails and internal errors go unchecked,
    enabling LMS (Leighton-Micali Signature) forgery in a fault scenario.
    Specifically, unchecked return values in mbedtls_lms_verify allow an
    attacker (who can induce a hardware hash accelerator fault) to bypass
    LMS signature verification by reusing stale stack data, resulting in
    acceptance of an invalid signature. In mbedtls_lms_verify, the return
    values of the internal Merkle tree functions create_merkle_leaf_value
    and create_merkle_internal_value are not checked. These functions
    return an integer that indicates whether the call succeeded or not. If
    a failure occurs, the output buffer (Tc_candidate_root_node) may
    remain uninitialized, and the result of the signature verification is
    unpredictable. When the software implementation of SHA-256 is used,
    these functions will not fail. However, with hardware-accelerated
    hashing, an attacker could use fault injection against the accelerator
    to bypass verification.
    https://www.cve.org/CVERecord?id=CVE-2025-49600

- CVE-2025-49601:
    In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not
    check that the input buffer is at least 4 bytes before reading a
    32-bit field, allowing a possible out-of-bounds read on truncated
    input. Specifically, an out-of-bounds read in
    mbedtls_lms_import_public_key allows context-dependent attackers to
    trigger a crash or limited adjacent-memory disclosure by supplying a
    truncated LMS (Leighton-Micali Signature) public-key buffer under four
    bytes. An LMS public key starts with a 4-byte type indicator. The
    function mbedtls_lms_import_public_key reads this type indicator
    before validating the size of its input.
    https://www.cve.org/CVERecord?id=CVE-2025-49601

- CVE-2025-52496:
    Mbed TLS before 3.6.4 has a race condition in AESNI detection if
    certain compiler optimizations occur. An attacker may be able to
    extract an AES key from a multithreaded program, or perform a GCM
    forgery.
    https://www.cve.org/CVERecord?id=CVE-2025-52496

- CVE-2025-52497:
    Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer
    underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse
    functions, via untrusted PEM input.
    https://www.cve.org/CVERecord?id=CVE-2025-52497

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: fix upstream hash URL in hash file]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 24639e0f72)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:21 +02:00
James Hilliard c4a1b99ef4 package/python-dbus-fast: fix cython 3.1.x compatibility
Since python-cython bump to 3.1.2 in commit [1], python-dbus-fast
is failing to build.

Set --skip-dependency-check as dbus-fast specifies an unnecessarily
strict maximum cython version.

Fixes:
ERROR Missing dependencies:
	Cython<3.1.0,>=3

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/b536caaec0d800ccf7669a50fce5192bce2405a6

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add reference to buildroot commit introducing the issue]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f38d4e63d7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:19 +02:00
Marcus Hoffmann 4e09315fd1 package/python-msgpack: fix project url
The previous url pointed to an unrelated but similarly named project.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 90fdb03f47)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:17 +02:00
Marcus Hoffmann 508bf5a2cf package/python-asgiref: switch upstream URL to https
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit bbfd0951fa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:15 +02:00
Bernd Kuhls 102b89bf9d package/libcddb: Fix build with gcc-14
libcddb fail to build with gcc-14 with error:

    cddb_net.c: In function 'timeout_connect':
    cddb_net.c:328:63: error: passing argument 5 of 'getsockopt' from incompatible pointer type [-Wincompatible-pointer-types]
      328 |                 getsockopt(sockfd, SOL_SOCKET, SO_ERROR, &rv, &l);
          |                                                               ^~
          |                                                               |
          |                                                               size_t * {aka long unsigned int *}

This commit adds a patch to fix the issue.

Fixes:
https://autobuild.buildroot.net/results/723/7236cf5fd4f33aabd3178586f877dff04d754abe/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add error message in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f1b4657bc0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:13 +02:00
Titouan Christophe c65fa3c7df package/python-aiohttp: fix missing build dependency
Since aiohttp was bumped in e4451602eb,
it now requires pkgconfig at setup time, see upstream commit
https://github.com/aio-libs/aiohttp/commit/40563751adf02b811d5acf95696c096a4dbd9ed4

Reported-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit dcf9df16d8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:10 +02:00
James Hilliard e3e5ea1e82 package/python-cython: bump to version 3.1.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
(cherry picked from commit b536caaec0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:08 +02:00
James Hilliard d809b87703 package/python-setuptools: bump to version 80.9.0
Rebase add executable patch.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
(cherry picked from commit 0b171693a9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:06 +02:00
Titouan Christophe 108ed8dc3f package/python-aiohttp: security bump to v3.12.14
This fixes the following vulnerability:
- CVE-2025-53643:
    In aiohttp prior to version 3.12.14, the Python parser is vulnerable
    to a request smuggling vulnerability due to not parsing trailer
    sections of an HTTP request. If a pure Python version of aiohttp is
    installed (i.e. without the usual C extensions) or
    AIOHTTP_NO_EXTENSIONS is enabled, then an attacker may be able to
    execute a request smuggling attack to bypass certain firewalls or
    proxy protections. Version 3.12.14 contains a patch for this issue.
    https://www.cve.org/CVERecord?id=CVE-2025-53643

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
(cherry picked from commit e4451602eb)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:04 +02:00
Yann E. MORIN 0cc802c363 package/podman: security bump to version 5.5.2
For release notes since 5.4.1, see:
https://github.com/containers/podman/releases

The release 5.5.2 includes a security fix for CVE-2025-6032.

Fixes:
https://github.com/advisories/GHSA-65gg-3w2w-hr4h
https://www.cve.org/CVERecord?id=CVE-2025-6032

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
[Julien:
 - mark as a security bump
 - add link to release notes
 - add link to CVE
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit faff38912b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:08:02 +02:00
Yann E. MORIN d5dd06fb07 support/testing: add a crun-based runtime test for docker-compose
Via the docker-compose runtime test, we can exercise the full suite of
the docker-related packages: docker-compose, of course, but also
docker-engine, which in turn allows exercising containerd. The latter
by defualt uses runc as the container runtime, but can alternatively use
crun.

Extend the docker-compose runtime test with a variant that enables crun.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 34e4480950)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:07:59 +02:00
Yann E. MORIN 321e6745b1 package/passt: needs headers >= 5.0
Upstream passt only documents runtime dependencies; and they advertise
being able to run on kernel 3.8 or later. However, they do not document
the build dependencies.

As reported by Julien, since 2024_12_11.09478d5, upstream requires
kernel headers >= 5.0, as they make use of linux/vhost_types.h, only
introduced in 5.0.

Add a dependency to kernel headers, and propagate it to podman's passt
backend.

Reported-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ed99b77e5d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:07:57 +02:00
Marcus Hoffmann 522fe8d976 package/python-starlette: bump to 0.47.1
Release notes:
* https://github.com/encode/starlette/releases/tag/0.47.0
* https://github.com/encode/starlette/releases/tag/0.47.1

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b17a5979c3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:07:55 +02:00
Marcus Hoffmann 7535596950 package/python-fastapi: bump to 0.116.1
Release notes:
* https://github.com/fastapi/fastapi/releases/tag/0.116.0
* https://github.com/fastapi/fastapi/releases/tag/0.116.1

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 25d8e7f1a0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:07:53 +02:00
Thomas Perale 8f2f6cbca0 package/libesmtp: bump to version v1.1.0-14-g335ee8d to fix build with gcc-14
When building libesmtp on the autobuilder with gcc-14, the
following error occurs:

    /workdir/instance-0/output-1/per-package/libesmtp/host/bin/arc-linux-gcc -Ilibesmtp.so.6.2.0.p -I. -I.. -I/workdir/instance-0/output-1/per-package/libesmtp/host/arc-buildroot-linux-gnu/sysroot/usr/include -fdiagnostics-color=always -Wall -Winvalid-pch -std=c11 -O3 -D_POSIX_C_SOURCE=200809L -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -g0 -D_FORTIFY_SOURCE=2 -fPIC -pthread -MD -MQ libesmtp.so.6.2.0.p/smtp-api.c.o -MF libesmtp.so.6.2.0.p/smtp-api.c.o.d -o libesmtp.so.6.2.0.p/smtp-api.c.o -c ../smtp-api.c
    ../smtp-api.c: In function 'smtp_version':
    ../smtp-api.c:1183:7: error: implicit declaration of function 'strlcpy'; did you mean 'strncpy'? [-Wimplicit-function-declaration]
     1183 |   if (strlcpy (buf, v, len) > len)
          |       ^~~~~~~
          |       strncpy

This error has been fixed upstream in commit [1], but no new release
has been made since.
This patch update the package version to fetch the latest upstream
commit v1.1.0-14-g335ee8d.

For the changes, see:

 - https://github.com/libesmtp/libESMTP/compare/v1.1.0...335ee8d2fa5cb7d30db7b818ec05563ad139ee2f

[1] https://github.com/libesmtp/libESMTP/commit/972eb547493357681b1b7012ef20618e6831cfde

Fixes: https://autobuild.buildroot.org/results/ced/ceda012506edccda1727904eb3327017b07e27d8
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien:
 - mention gcc-14 as the root cause of the build failure
 - use "git describe --tags --abbrev=40" format in _VERSION
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 84077c7776)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:07:51 +02:00
Bernd Kuhls 9fc5178111 package/oniguruma: bump version to 6.9.10
Release notes:
https://github.com/kkos/oniguruma/releases/tag/v6.9.10

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 11818cd07d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-08-07 19:07:49 +02:00
Titouan Christophe 8facccc14e package/redis: security bump to v8.0.3
For release note, see:
https://github.com/redis/redis/releases/tag/8.0.3

This fixes the following vulnerabilities:

- CVE-2025-32023:
    An authenticated user may use a specially crafted string to trigger a
    stack/heap out of bounds write on hyperloglog operations, potentially
    leading to remote code execution.
    https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43

- CVE-2025-48367:
    An unauthenticated connection can cause repeated IP protocol errors,
    leading to client starvation and, ultimately, a denial of service.
    https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add link to release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c87ddd6ee4)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-08-07 19:07:47 +02:00
Bernd Kuhls 745acf6a8d package/libcrossguid: bump version to v0.2.2-52-gca1bf4b
Needed for kodi 22.x.

Added build fix for >= gcc-13.

Switched build system to cmake following upstream:
https://github.com/graeme-hill/crossguid/commit/13683c56e559f93d75f8640488aa3335f43443ed

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --tags --abbrev=40" format for _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c61d7d61b1)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 22:24:23 +02:00
Marcus Hoffmann b18a365e49 package/python-typing-extensions: update description
Minimum python version is now 3.9, but also it's not really relevant to
mention this in the package description.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8d1d851d78)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 22:24:22 +02:00
Florian Larysch d8df38f305 fs: erofs: reword "all-fragments" Kconfig text
Currently, both BR2_TARGET_ROOTFS_EROFS_ALL_FRAGMENTS and
BR2_TARGET_ROOTFS_EROFS_FRAGMENTS have the same Kconfig prompt, making
them hard to distinguish.

Reword the one for -Eall-fragments to be distinct.

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit df7e428cf5)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 22:24:20 +02:00
Julien Olivain 142dc23100 package/openblas: bump to version v0.3.30
For change log since v0.3.29, see:
https://github.com/OpenMathLib/OpenBLAS/releases/tag/v0.3.30

Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 565ee4a917)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 22:24:19 +02:00
Bernd Kuhls d61bf8b068 package/samba4: bump version to 4.21.7
Release notes:
https://www.samba.org/samba/history/samba-4.21.7.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 282e7add88)
[Titouan: Bump to 4.21.7 on buildroot 2025.05]
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 22:24:18 +02:00
Adrian Perez de Castro 6ad1e1a8a7 package/libdex: bump to version 0.10.1
This is a bugfix release which includes a few improvements and fixes
leaks of Unix signal futures. Release notes:

  https://gitlab.gnome.org/GNOME/libdex/-/blob/0.10.1/NEWS

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8f427b78a9)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 22:24:17 +02:00
Adrian Perez de Castro e1785557ac package/webkitgtk: bump to version 2.48.3
Fixes a number of crashes. Release notes:

  https://webkitgtk.org/2025/05/28/webkitgtk2.48.3-released.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 676c4369d9)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 13:17:50 +02:00
Michael Fischer aaca2bc830 package/sdl2: bump version to 2.32.8
Bugfix release, fixing various minor issues:
https://github.com/libsdl-org/SDL/releases/tag/release-2.32.8

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d4819ab45f)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 13:17:43 +02:00
Michael Fischer fbb1c478bb package/gnuplot: bump version to 6.0.3
For release note, see:
http://www.gnuplot.info/ReleaseNotes_6_0_3.html

SHA256 hash now from:
https://sourceforge.net/projects/gnuplot/files/gnuplot/6.0.3/gnuplot-6.0.3.tar.gz.sha256

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7443e881f8)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 13:17:37 +02:00
Tim Soubry 9e870099fa package/ncmpc: Fix build error with gcc-14
The error appears on autobuilder with the build using GCC14:
FAILED: ncmpc.p/src_Styles.cxx.o
In file included from ../src/Styles.cxx:7:
/home/buildroot/instance-0/output-1/host/microblazeel-buildroot-linux-gnu/sysroot/usr/include/libintl.h:39:14: error: expected unqualified-id before 'const'
   39 | extern char *gettext (const char *__msgid)
      |              ^~~~~~~
/home/buildroot/instance-0/output-1/host/microblazeel-buildroot-linux-gnu/sysroot/usr/include/libintl.h:39:14: error: expected ')' before 'const'
../src/i18n.h:22:20: note: to match this '('
   22 | #define gettext(x) (x)
      |                    ^
[80/102] Compiling C++ object ncmpc.p/src_xterm_title.cxx.o
[81/102] Compiling C++ object ncmpc.p/src_db_completion.cxx.o
[82/102] Compiling C++ object ncmpc.p/src_signals.cxx.o
ninja: build stopped: subcommand failed.
make: *** [package/pkg-generic.mk:273: /home/buildroot/instance-0/output-1/build/ncmpc-0.49/.stamp_built] Error 1
make: Leaving directory '/home/buildroot/instance-0/buildroot'

Starting GCC14 the C++ standard library includes libintl.h that contains
a definition of gettext which caused a clash with the definition present
in ncmpc. This patch resolved this build error seen in [1] by
backporting an upstream commit [2] that renamed the internal gettext
implementation.

Applying the commits of [2], fixes the build error [1].

[1] https://autobuild.buildroot.org/results/cb2/cb292f2c99cdca742a8f52dbfc25f193fe513c6e/build-end.log
[2] https://github.com/MusicPlayerDaemon/ncmpc/commit/249b62fc9f5e3a653ebdd22da0d75fbe87069457

Fixes: https://autobuild.buildroot.org/results/cb2/cb292f2c99cdca742a8f52dbfc25f193fe513c6e/build-end.log
Signed-off-by: Tim Soubry <tim.soubry@mind.be>
[Julien:
 - mention gcc-14 in commit title
 - remove patch numbering to fix check-package error
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a52269e221)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-17 13:17:31 +02:00
Bernd Kuhls ab6022a410 {linux, linux-headers}: bump 5.15.x / 6.{1, 6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e7a175355b)
[Titouan: drop 6.15 not present in buildroot 2025.05]
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 23:14:24 +02:00
Dario Binacchi 1ec82cfadd configs/beaglebone: bump Linux to 6.12.23-ti-arm32-r11
The patch bumps the Linux kernel to version 6.12.23-ti-arm32-r11

Tested on beaglebone black.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d4c5cfe80d)
[Titouan: only bump Linux LTS]
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 23:11:52 +02:00
Dario Binacchi 6bf2b6a384 configs/ti_am62x_sk: bump Linux version
This patch bumps:

- Linux kernel to version 6.12.36 (LTS)

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Reviewed-by: Bryan Brattlof <bb@ti.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8fe9da71a3)
[Titouan: only bump linux LTS version]
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 23:09:22 +02:00
Bernd Kuhls 7edc5c5a99 {linux, linux-headers}: bump 6.{1, 6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 09880508cb)
[Titouan: drop 6.15 not present in buildroot 2025.05]
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 23:06:09 +02:00
Fiona Klute ffbe08e6fb package/eudev: remove obsolete --disable-introspection configure flag
It was removed from eudev with version 1.5.1, when introspection
became part of the gudev option [1]. This has in turn been removed and
replaced by package/libgudev, yet somehow the flag stayed. Remove it
to remove a warning during configure stage.

[1] https://github.com/eudev-project/eudev/commit/d5d6a7f3040992f853eb23eb1bafac3b77891c2d

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 993c0ba460)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:59:17 +02:00
Tim Soubry 8071e56341 package/libxml2: add patch for CVE-2025-49795
This patch mitigates CVE-2025-49795 [1] by backporting the commit [2] to
libxml2 2.13.

[1] https://nvd.nist.gov/vuln/detail/cve-2025-49795
[2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/499bcb78ab389f60c2fd634ce410d4bb85c18765
[3] https://security-tracker.debian.org/tracker/CVE-2025-49795

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit bb1a568945)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:58:52 +02:00
Tim Soubry e99cfb81cb package/libxml2: add patch for CVE-2025-49794 & CVE-2025-49796
This patch fixes CVE-2025-49794 [1] and CVE-2025-49796 [2] by
backporting the commit from [3] to libxml2 2.13.

[1] https://nvd.nist.gov/vuln/detail/cve-2025-49794
[2] https://nvd.nist.gov/vuln/detail/cve-2025-49796
[3] https://gitlab.gnome.org/GNOME/libxml2/-/commit/71e1e8af5ee46dad1b57bb96cfbf1c3ad21fbd7b

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0df4585100)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:58:42 +02:00
Tim Soubry 65a8824c26 package/libxml2: add patch for CVE-2025-6021
This fixes an integer overflow vulnerability [1], in libxml2 version
2.13 by backporting the commit [2] from libxml2 2.14. This commit uses
the SIZE_MAX macro, for which stdint.h was included in tree.c, as done in [3].

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-6021
[2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/ad346c9a249c4b380bf73c460ad3e81135c5d781
[3] https://git.openembedded.org/openembedded-core/tree/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a1cf6bcc06)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:58:31 +02:00
Thomas Perale 3d2a2bafef package/libargtable2: fix build error with gcc-14
The following build error is happening on the autobuilder:

```
arg_int.c:60:12: error: implicit declaration of function 'isspace' [-Wimplicit-function-declaration]
   60 |     while (isspace(*ptr))
      |            ^~~~~~~
arg_int.c:33:1: note: include '<ctype.h>' or provide a declaration of 'isspace'
   32 | #include <limits.h>
  +++ |+#include <ctype.h>
   33 |
arg_int.c:89:8: error: implicit declaration of function 'toupper' [-Wimplicit-function-declaration]
   89 |    if (toupper(*ptr++)!=toupper(X))
      |        ^~~~~~~
arg_int.c:89:8: note: include '<ctype.h>' or provide a declaration of 'toupper'
```

Both `isspace` and `toupper` are declared in the `ctype.h` header.
This build error started to happen with gcc-14.
The `ctype.h` include was added in a later upstream commit.
This patch adds that upstream commit and strip everything else to only
patch that include.

Fixes: https://autobuild.buildroot.org/results/d38/d38e3e12f52c3fde08ab446ca14a1a7bd65c9469//
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add comment about gcc-14]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cd6f2b465b)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:58:16 +02:00
Adrian Perez de Castro 1a0486503b package/wpebackend-fdo: bump to version 1.16.0
This maintenance release solves build issues and memory leaks.
Release notes:

  https://wpewebkit.org/release/wpebackend-fdo-1.16.0.html
  https://wpewebkit.org/release/wpebackend-fdo-1.14.4.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
[Julien: add link to 1.14.4 release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8b0bb89640)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:57:55 +02:00
Tim Soubry bf6e1577f4 package/libhtp: security bump to version 0.5.49
Fixes a potential Denial of Service as described in [1].
Release notes:
https://github.com/OISF/libhtp/releases/tag/0.5.49

Fixes:
https://www.cve.org/CVERecord?id=CVE-2024-45797

[1] https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
[Julien: add link to fixed CVE]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3cf709e331)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:53:36 +02:00
Bernd Kuhls a0e632e0bf package/apache: security bump version to 2.4.64
Fixes CVE-2025-53020, CVE-2025-49812, CVE-2025-49630, CVE-2025-23048,
CVE-2024-47252, CVE-2024-43394, CVE-2024-43204 & CVE-2024-42516.

Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.64

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b4bd1edcd0)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:53:28 +02:00
Giulio Benetti 835b833d0c DEVELOPERS: add Giulio Benetti to liblo
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1db8472c39)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:53:03 +02:00
Titouan Christophe ffe57eecb5 package/sngrep: security bump to v1.8.2
See the release notes:

- https://github.com/irontec/sngrep/releases/tag/v1.7.0
- https://github.com/irontec/sngrep/releases/tag/v1.8.0
- https://github.com/irontec/sngrep/releases/tag/v1.8.1
- https://github.com/irontec/sngrep/releases/tag/v1.8.2

This fixes the following vulnerabilities:

- CVE-2024-3119:
    A buffer overflow vulnerability exists in all versions of sngrep since
    v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP
    headers. The functions sip_get_callid and sip_get_xcallid in sip.c use
    the strncpy function to copy header contents into fixed-size buffers
    without checking the data length. This flaw allows remote attackers to
    execute arbitrary code or cause a denial of service (DoS) through
    specially crafted SIP messages.
    https://www.cve.org/CVERecord?id=CVE-2024-3119

- CVE-2024-3120:
    A stack-buffer overflow vulnerability exists in all versions of sngrep
    since v1.4.1. The flaw is due to inadequate bounds checking when
    copying 'Content-Length' and 'Warning' headers into fixed-size buffers
    in the sip_validate_packet and sip_parse_extra_headers functions
    within src/sip.c. This vulnerability allows remote attackers to
    execute arbitrary code or cause a denial of service (DoS) via crafted
    SIP messages.
    https://www.cve.org/CVERecord?id=CVE-2024-3120

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f52e17596d)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:52:13 +02:00
Marcus Hoffmann 54773e6c1e package/sudo: fix SUDO_ENABLE_SUDO_GROUP_RULE following version bump
Since the version bump of sudo to 1.9.17p1 [1], the sed command in
SUDO_ENABLE_SUDO_GROUP_RULE no longer matches the the line in the
example sudoers file shipped with the sudo package. This is due to
upstream commit [2].

This commit fixes the regexp to match the new sudoers file.

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/ee86844e632d5760355154ea4e928c9228f3dfd1
[2] https://github.com/sudo-project/sudo/commit/7c121ff8340c6fa551ba4997dde9d450cf74e40c

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
[Julien: add link to upstream commit introducing the issue]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 35708db024)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:52:01 +02:00
Thomas Perale 0b267a5f6c package/libiec61850: fix build w/ mbedtls v3.6
Since the mbedtls bump to v3.6 [1] the libiec61850 package is failling
on the autobuilder with the following error:

```
[  2%] Building C object hal/CMakeFiles/hal.dir/tls/mbedtls/tls_mbedtls.c.o
/workdir/instance-0/output-1/build/libiec61850-1.6.0/hal/tls/mbedtls/tls_mbedtls.c: In function 'compareCertificates':
/workdir/instance-0/output-1/build/libiec61850-1.6.0/hal/tls/mbedtls/tls_mbedtls.c:122:17: error: 'mbedtls_x509_crt' has no member named 'sig'
  122 |         if (crt1->sig.len == crt2->sig.len)
      |                 ^~
/workdir/instance-0/output-1/build/libiec61850-1.6.0/hal/tls/mbedtls/tls_mbedtls.c:122:34: error: 'mbedtls_x509_crt' has no member named 'sig'
  122 |         if (crt1->sig.len == crt2->sig.len)
      |                                  ^~
...
```

The logic to support mbedtls v3 is already present on the version
present in buildroot.
This patch ensures that the CMake build uses the mbedtls headers and
libraries provided by buildroot rather than the bundled copy.

By setting the following variable the mbedtls v3.6 is correctly found
during the configuration of the package.

```
Found mbedtls 3.6 -> can compile HAL with TLS 1.3 support
```

[1] 3481a9643f package/mbedtls: bump to version 3.6.3.1

Fixes: https://autobuild.buildroot.org/results/5fc/5fca384510d2fb9dd1d01736dee34b53339d62ff/build-end.log
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 30fc97c2c5)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:51:53 +02:00
Thomas Perale 542f884600 package/shairport-sync: fix build w/ mbedtls v3.6
Since [1] when trying to build this package with mbedtls v3.6 the
following error is happening:

```
player.h:12:10: fatal error: mbedtls/havege.h: No such file or directory
   12 | #include <mbedtls/havege.h>
      |          ^~~~~~~~~~~~~~~~~~
compilation terminated.
```

This error can be reproduced with the following config:

```
cat <<EOF >.config
BR2_arm=y
BR2_cortex_a7=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PACKAGE_MBEDTLS=y
BR2_PACKAGE_SHAIRPORT_SYNC=y
EOF
make olddefconfig
make
```

This patch backport the upstream commit [2] that add support for
mbedtls v3.

[1] 3481a9643f package/mbedtls: bump to version 3.6.3.1
[2] https://github.com/mikebrady/shairport-sync/commit/d73b585c6f6d9136ae7a04243a54d734fa57d779

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d53f8f2691)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:51:41 +02:00
Thomas Perale 008efd2fe4 package/ustream-ssl: fix build w/ mbedtls v3.6
Since the mbedtls bump to v3.6 [1] the ustream-ssl package is failling
on the autobuilder with the following error:

```
In file included from /home/buildroot/instance-0/output-1/build/ustream-ssl-68d09243b6fd4473004b27ff6483352e76e6af1a/ustream-internal.h:25,
                 from /home/buildroot/instance-0/output-1/build/ustream-ssl-68d09243b6fd4473004b27ff6483352e76e6af1a/ustream-ssl.c:25:
/home/buildroot/instance-0/output-1/build/ustream-ssl-68d09243b6fd4473004b27ff6483352e76e6af1a/ustream-mbedtls.h:24:10: fatal error: mbedtls/certs.h: No such file or directory
   24 | #include <mbedtls/certs.h>
      |          ^~~~~~~~~~~~~~~~~
compilation terminated.
```

This error can be reproduced with the following config:

```
cat <<EOF >.config
BR2_arm=y
BR2_cortex_a7=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PACKAGE_MBEDTLS=y
BR2_PACKAGE_USTREAM_SSL=y
EOF
make olddefconfig
make
```

This patch backport upstream commit that address the compatibility with
mbedtls v3.6.

 - [2] rename the `_random` function used by the mbedtls functions
 - [3] update `mbedtls_pk_parse_keyfile` function to support new mbedtls
     definition and use `mbedtls_pk_get_type`.

[1] 3481a9643f package/mbedtls: bump to version 3.6.3.1
[2] 0001-ustream-mbedtls-use-getrandom-instead-of-dev-urandom.patch
[3] 0002-ustream-mbedtls-add-compatibility-with-mbed-tls-3-0-0.patch

Fixes: https://autobuild.buildroot.org/results/c20/c20dac7cbe5def2c6036d2e1d06de0bfea68b57c
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d28ae8b00b)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:51:28 +02:00
Vincent Stehlé 950e39b1d7 package/xen: fix build for arm with binutils >= 2.41
Xen currently fails to build for 32-bit Arm v7 with binutils >= 2.41,
with the following error:

    proc-v7.S:33: Error: junk at end of line, first unrecognized character is `#'

The failure can be reproduced with the commands:

    cat >.config <<EOF
    BR2_arm=y
    BR2_cortex_a9=y
    BR2_ARM_ENABLE_VFP=y
    BR2_ARM_EABIHF=y
    BR2_TOOLCHAIN_EXTERNAL=y
    BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
    BR2_PACKAGE_XEN=y
    BR2_PACKAGE_XEN_HYPERVISOR=y
    BR2_PACKAGE_XEN_TOOLS=y
    EOF
    make olddefconfig
    make xen

Backport a patch from Xen 4.18 plus one patch it depends on to fix the
build.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Cc: Alistair Francis <alistair@alistair23.me>
[Julien:
 - reword commit title
 - add commands to reproduce the issue in commit log
 - add missing SoB lines to patches
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2c868ca44d)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:51:00 +02:00
Peter Korsgaard a930f65552 package/libconfuse: use current upstream URL
https://github.com/martinh/libconfuse/ now redirects to
/libconfuse/libconfuse/, so use that instead in .mk and help text.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cf8ccddaa2)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:50:37 +02:00
Peter Korsgaard 2a67ac2fc6 toolchain/toolchain-wrapper.c: correct CCACHE_BASEDIR comment
Commit 1e97b27873 ("ccache: support changing the output directory") added
the CCACHE_BASEDIR logic, but added a comment (presumably from cut'n'paste)
about compilercheck instead, fix that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f66e4c2568)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:50:21 +02:00
Yegor Yefremov 4cce71330e package/parted: fix compilation with gcc-15
With gcc 15-20241117 compile fails with the below error, update the
do_version declaration to match the header in command.h

../../parted/parted.c: In function '_init_commands':
../../parted/parted.c:2469:9: error: passing argument 2 of 'command_create' from incompatible pointer type [-Wincompatible-pointer-types]
 2469 |         do_version,
      |         ^~~~~~~~~~
      |         |
      |         int (*)(void)
In file included from ../../parted/parted.c:28:
../../parted/command.h:35:39: note: expected 'int (*)(PedDevice **, PedDisk **)' {aka 'int (*)(struct _PedDevice **, struct _PedDisk **)'} but argument is of type 'int (*)(void)'
   35 |                                 int (*method) (PedDevice** dev, PedDisk** diskp),
      |                                 ~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Upstream: https://cgit.git.savannah.gnu.org/cgit/parted.git/commit/?id=16343bda6ce0d41edf43f8dac368db3bbb63d271

Fixes:
https://autobuild.buildroot.org/results/283f52d50ffef91d82a1bdc1f4dde1d54c5ffc23/build-end.log

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[Julien: reword commit title]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 14b5a19486)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-15 22:48:29 +02:00
Titouan Christophe 2b23a3bc19 package/sudo: drop patch that has been merged upstream
The patch has been integrated upstream as part of sudo 1.9.16p2, and was
therefore removed from Buildroot in [1]. However, because that change in
Buildroot was not considered as a security bump at that time, it hasn't
been cherry-picked to the 2025.02.x LTS branch.

Later on, sudo issued a new security version, which has been promptly
merged into Buildroot master in [2]. Since this addressed a security issue,
the patch has also been backported into the 2025.02.x LTS branch [3]. The
backport integrated the 2 versions bumps into one change, but the patch
removal was lost in the process.

Fixes: https://autobuild.buildroot.net/results/260/260a8e8da6e459b7c723fbeaeb23fb1fcf0db155//

[1] 969bdb9d2e
[2] ee86844e63
[3] 9bcbbcc37f

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
(cherry picked from commit 38264adb15)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-07-11 16:02:03 +02:00
Titouan Christophe 3028f68635 package/git: security bump to v2.49.1
Read the announcement: https://lwn.net/ml/all/xmqq5xg2wrd1.fsf@gitster.g/

This fixes the following vulnerabilities:

- CVE-2025-27613 (Gitk):
   When a user clones an untrusted repository and runs Gitk without
   additional command arguments, any writable file can be created and
   truncated. The option "Support per-file encoding" must have been
   enabled. The operation "Show origin of this line" is affected as
   well, regardless of the option being enabled or not.
   https://www.cve.org/CVERecord?id=CVE-2025-27613

- CVE-2025-27614 (Gitk):
   A Git repository can be crafted in such a way that a user who has
   cloned the repository can be tricked into running any script
   supplied by the attacker by invoking `gitk filename`, where
   `filename` has a particular structure.
   https://www.cve.org/CVERecord?id=CVE-2025-27614

- CVE-2025-46835 (Git GUI):
   When a user clones an untrusted repository and is tricked into
   editing a file located in a maliciously named directory in the
   repository, then Git GUI can create and overwrite any writable
   file.
   https://www.cve.org/CVERecord?id=CVE-2025-46835

- CVE-2025-48384:
   When reading a config value, Git strips any trailing carriage
   return and line feed (CRLF). When writing a config entry, values
   with a trailing CR are not quoted, causing the CR to be lost when
   the config is later read.  When initializing a submodule, if the
   submodule path contains a trailing CR, the altered path is read
   resulting in the submodule being checked out to an incorrect
   location. If a symlink exists that points the altered path to the
   submodule hooks directory, and the submodule contains an executable
   post-checkout hook, the script may be unintentionally executed
   after checkout.
   https://www.cve.org/CVERecord?id=CVE-2025-48384

- CVE-2025-48385:
   When cloning a repository Git knows to optionally fetch a bundle
   advertised by the remote server, which allows the server-side to
   offload parts of the clone to a CDN. The Git client does not
   perform sufficient validation of the advertised bundles, which
   allows the remote side to perform protocol injection.
   This protocol injection can cause the client to write the fetched
   bundle to a location controlled by the adversary. The fetched
   content is fully controlled by the server, which can in the worst
   case lead to arbitrary code execution.
   https://www.cve.org/CVERecord?id=CVE-2025-48385

- CVE-2025-48386:
   The wincred credential helper uses a static buffer (`target`) as a
   unique key for storing and comparing against internal storage. This
   credential helper does not properly bounds check the available
   space remaining in the buffer before appending to it with
   `wcsncat()`, leading to potential buffer overflows.
   https://www.cve.org/CVERecord?id=CVE-2025-48386

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
(cherry picked from commit 62788e0e49)
[thomas: bumped v2.49.1 instead]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-11 14:20:04 +02:00
Thomas Perale 538eaa586f Revert "support/testing: enable lpxelinux for syslinux runtime test"
This reverts commit 5d6d1da5e4.

LPXELINUX is not present on 2025.05.x

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-11 13:08:23 +02:00
Marcus Hoffmann 0493fe6fe2 package/systemd: bump to 256.17
Changes: https://github.com/systemd/systemd/compare/v256.16...v256.17

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
(cherry picked from commit 58cdf8da63)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:50:25 +02:00
Bernd Kuhls 3495230a9f package/libheif: security bump version to 1.20.1
Release notes: https://github.com/strukturag/libheif/releases

Version 1.19.6 fixes CVE-2025-43966 & CVE-2025-43967:
https://github.com/strukturag/libheif/releases/tag/v1.19.6

Updated license hash due to upstream commit:
https://github.com/strukturag/libheif/commit/377a957bd84018f4d27588c989fa5c66935c16ed

Note:

The patch for CVE-2025-43966 fixes libheif/image-items/iden.cc which was
added in version 1.19.0.
https://github.com/advisories/GHSA-7g9v-7vc7-pmrw

The patch for CVE-2025-43967 does not apply cleanly to 1.18.2 even after
renaming "/image-items/" to "/codecs/". Therefore, this patch is not
backported.
https://github.com/advisories/GHSA-c48q-x6xw-g5h8

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add justification from Bernd why the security fix is not
  backported]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit accb006d9b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:40:06 +02:00
Thomas Perale 89af23d713 package/libuhttpd: fix build w/ mbedtls v3.6
Since the mbedtls bump to v3.6 [1] the libuhttpd fails to build with the
following error:

```
[  8%] Building C object src/ssl/CMakeFiles/xssl.dir/mbedtls.c.o
.../buildroot/output/build/libuhttpd-3.14.1/src/ssl/mbedtls.c:52:10: fatal error: mbedtls/certs.h: No such file or directory
   52 | #include <mbedtls/certs.h>
      |          ^~~~~~~~~~~~~~~~~
compilation terminated.
```

This error can be reproduced with the following config:

```
cat <<EOF >.config
BR2_arm=y
BR2_cortex_a7=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PACKAGE_MBEDTLS=y
BR2_PACKAGE_LIBUHTTPD=y
EOF
make olddefconfig
make
```

The compatibility with mbedtls v3 has been addressed upstream in the
zhaojh329/ssl project included as a submodule of libuhttpd [2].

This patch backport this upstream commit to be applied on the submodule
directory. This required adaptation of the line numbers (see [3]) and
renaming a function reference passed as parameter of
'mbedtls_pk_parse_keyfile' caused by the commit [4].

[1] 3481a9643f package/mbedtls: bump to version 3.6.3.1
[2] https://github.com/zhaojh329/ssl/commit/28cc9b5d98179d161673d20e79333ae5a4864228
[3] https://github.com/zhaojh329/ssl/commit/8092b5a490eedeb042cc1036ebeab6442624cf4c#diff-fbc46fa2db83f8649ccf1f46c6a044473b7b228edc7d4c0f7cc04b5a879f6fb7
[4] https://github.com/zhaojh329/ssl/commit/0e7d2f73d769cc4ddb350381cebb5ef6f27ab653#diff-fbc46fa2db83f8649ccf1f46c6a044473b7b228edc7d4c0f7cc04b5a879f6fb7R92

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1a8e868623)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:40:01 +02:00
Edgar Bonet 9b2aa912c0 boot/at91bootstrap3: fix build with host GCC 15
Building at91bootstrap3 with GCC 15 fails with:

    include/types.h:23:23: error: ‘bool’ cannot be defined via ‘typedef’
       23 | typedef unsigned char bool;
          |                       ^~~~
    include/types.h:23:23: note: ‘bool’ is a keyword with ‘-std=c23’ onwards

This is due to GCC 15 defaulting to the C23 language dialect.

Signed-off-by: Edgar Bonet <bonet@grenoble.cnrs.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 500678593f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:56 +02:00
Bernd Kuhls 869270f6ba package/libva: fix build error
Fixes:
https://autobuild.buildroot.net/results/18b/18b551ae20a2f2f40c1fb003bb701f53f5daec45/

/workdir/instance-0/output-1/host/lib/gcc/aarch64_be-buildroot-linux-gnu/14.3.0/../../../../aarch64_be-buildroot-linux-gnu/bin/ld:
 va/libva.so.2.2200.0: version node not found for symbol vaCreateSurfaces@VA_API_0.32.0

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c41f953ab9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:51 +02:00
Bernd Kuhls a7aeb028b4 package/hddtemp: fix build without nls
Fixes:
https://autobuild.buildroot.org/results/06b44df261318ce1d07f6cb20b26e4ad64222940/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 196989235e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:46 +02:00
Bernd Kuhls d6db027193 package/tor: bump version to 0.4.8.17
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/stable-release-0-4-8-17/19681

Removed patch which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1e8be117f0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:41 +02:00
Julien Olivain e57fbecdb4 boot/shim: bump to version 16.0
For release note, see:
https://github.com/rhboot/shim/releases/tag/16.0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7c0da58313)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:37 +02:00
Thomas Perale 99726cdafe package/bmx7: fix build w/ mbedtls v3.6
Since the mbedtls bump to v3.6 [1] the bmx7 package is failling on the
autobuilder:

```
/workdir/instance-0/output-1/host/bin/xtensa-buildroot-linux-uclibc-gcc -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -mlongcalls -mauto-litpools -Os -g3  -pedantic -W -Wall -Wstrict-prototypes -Wno-unused-parameter -Os -g3 -std=gnu99 -DGIT_REV=\"0\" -DAVL_5XLINKED -DDEBUG_MALLOC -DCORE_LIMIT=20000      -pedantic -W -Wall -Wstrict-prototypes -Wno-unused-parameter -Os -g3 -std=gnu99 -DGIT_REV=\"0\" -DAVL_5XLINKED -DDEBUG_MALLOC -DCORE_LIMIT=20000       -c crypt.c -o crypt.o
crypt.c:66:10: fatal error: mbedtls/compat-1.3.h: No such file or directory
   66 | #include "mbedtls/compat-1.3.h"
      |          ^~~~~~~~~~~~~~~~~~~~~~
compilation terminated.
```

This patch includes a set of upstream patches that address the
compatibility with the v3.6 of mbedtls.

[1] 3481a9643f package/mbedtls: bump to version 3.6.3.1

Fixes: https://autobuild.buildroot.org/results/b77/b776e34d1c5bc3904ea7138bd6c4ac17a1f0fd34/
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c32230fe35)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:32 +02:00
Thomas Perale ac8b1ac446 package/shadowsocks-libev: fix build w/ mbedtls v3.6
Since the mbedtls bump to v3.6 [1] the shadowsocks-libev package is
failling  on the autobuilder:

```
checking for mbedtls_cipher_setup in -lmbedcrypto... yes
checking whether mbedtls supports Cipher Feedback mode or not... configure: error: MBEDTLS_CIPHER_MODE_CFB required
make: *** [package/pkg-generic.mk:263: /workdir/instance-0/output-1/build/shadowsocks-libev-3.3.5/.stamp_configured] Error 1
make: Leaving directory '/workdir/instance-0/buildroot'
```

This is due to the breaking changes in the mbedtls API with the version
bump.

This patch adds the upstream patch [2] that address this issue by verifying
conditionally the version of mbedtls we are running on to make the API
calls and includes.

[1] 3481a9643f package/mbedtls: bump to version 3.6.3.1
[2] https://github.com/shadowsocks/shadowsocks-libev/commit/9afa3cacf947f910be46b69fc5a7a1fdd02fd5e6#

Fixes: https://autobuild.buildroot.org/results/070/070581d95f2739cee3b4cb8252639dd92b5a8421
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 78198bc0f3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:28 +02:00
James Knight 9e0870e09e utils/test-pkg: stop on sigint
When SIGINT is issued for a package test run, it will abort the active
toolchain run then proceed to the next. If a user is running the entire
default toolchain set (`-a`), they can be required to invoke SIGINT
multiple times to stop a run.

This commit uses a SIGINT hook to flag a shutdown state and stop further
attempts to run anymore toolchain tests.

Signed-off-by: James Knight <git@jdknight.me>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8f09106e81)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:23 +02:00
James Knight 4f2d5b0e50 utils/check-package: handle missing files
When running check-package before completing commits for a change, if
any files are setup for removal, check-package will throw
FileNotFoundError exceptions instead of generating a warning state. For
example:

 $ utils/docker-run make check-package
 Traceback (most recent call last):
   ...
 FileNotFoundError: [Errno 2] No such file or directory: 'package/.../0001-some-removed-patch.patch'
 make: *** [Makefile:1264: check-package] Error 1

This commit will now catch FileNotFoundError and populate a warning
message:

 $ utils/docker-run make check-package
 package/.../0001-some-removed-patch.patch: missing; unstaged file removal?
 package/.../0002-another-removed-patch.patch: missing; unstaged file removal?
 427843 lines processed
 3 warnings generated
 make: *** [Makefile:1264: check-package] Error 1

Signed-off-by: James Knight <git@jdknight.me>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c41a06bbd9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:19 +02:00
Bernd Kuhls d15df0aee3 package/libopenssl: security bump version to 3.5.1
Fixes CVE-2025-4575:
https://github.com/openssl/openssl/releases/tag/openssl-3.5.1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e97ca416c6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:14 +02:00
Florian Fainelli c78d8a4aba package/cpulimit: Backport fix for function signature
Backport the upstream pull request patch fixing the incorrect function
signature passed to pthread_create()

Fixes: https://autobuild.buildroot.org/results/5308cb8239f31ef39e5c67d65ff1d69cdec1cedc
Fixes: https://autobuild.buildroot.org/results/6722247e3c830558ac0377352d05f4bb1684978d
Fixes: https://autobuild.buildroot.org/results/adc385fe35432be28453b8ed9f40e8a6647a4b28
Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
[Julien: reformat patch "Upstream:" tag to fix check-package error]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e63181bc00)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:09 +02:00
Titouan Christophe a073d51398 package/libsoup: add many security patches
Import all security patches from OpenEmbedded for libsoup.
This fixes the following 18 known vulnerabilities:

- CVE-2024-52530:
    GNOME libsoup before 3.6.0 allows HTTP request smuggling in some
    configurations because '\0' characters at the end of header names are
    ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the
    same as a "Transfer-Encoding: chunked" header.
    https://www.cve.org/CVERecord?id=CVE-2024-52530

- CVE-2024-52531:
    GNOME libsoup before 3.6.1 allows a buffer overflow in applications that
    perform conversion to UTF-8 in soup_header_parse_param_list_strict.
    There is a plausible way to reach this remotely via
    soup_message_headers_get_content_type (e.g., an application may want to
    retrieve the content type of a request or response).
    https://www.cve.org/CVERecord?id=CVE-2024-52531

- CVE-2024-52532:
    GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption.
    During the reading of certain patterns of WebSocket data from clients.
    https://www.cve.org/CVERecord?id=CVE-2024-52532

- CVE-2025-2784:
    Libsoup: heap buffer over-read in `skip_insignificant_space`
    when sniffing content
    https://www.cve.org/CVERecord?id=CVE-2025-2784

- CVE-2025-4476:
    Libsoup: null pointer dereference in libsoup may lead to denial of service
    https://www.cve.org/CVERecord?id=CVE-2025-4476

- CVE-2025-4948:
    Libsoup: integer underflow in soup_multipart_new_from_message() leading to
    denial of service in libsoup
    https://www.cve.org/CVERecord?id=CVE-2025-4948

- CVE-2025-4969:
    Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c
    https://www.cve.org/CVERecord?id=CVE-2025-4969

- CVE-2025-32050:
    Libsoup: integer overflow in append_param_quoted
    https://www.cve.org/CVERecord?id=CVE-2025-32050

- CVE-2025-32052:
    Libsoup: heap buffer overflow in sniff_unknown()
    https://www.cve.org/CVERecord?id=CVE-2025-32052

- CVE-2025-32053:
    Libsoup: heap buffer overflows in sniff_feed_or_html() and
    skip_insignificant_space()
    https://www.cve.org/CVERecord?id=CVE-2025-32053

- CVE-2025-32906:
    Libsoup: out of bounds reads in soup_headers_parse_request()
    https://www.cve.org/CVERecord?id=CVE-2025-32906

- CVE-2025-32910:
    Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c
    through "soup_auth_digest_authenticate" on client when server omits the
    "realm" parameter in an unauthorized response with digest authentication
    https://www.cve.org/CVERecord?id=CVE-2025-32910

- CVE-2025-32911:
    Libsoup: double free on soup_message_headers_get_content_disposition()
    through "soup-message-headers.c" via "params" ghashtable value
    https://www.cve.org/CVERecord?id=CVE-2025-32911

- CVE-2025-32912:
    Libsoup: null pointer dereference in client when server omits the "nonce"
    parameter in an unauthorized response with digest authentication
    https://www.cve.org/CVERecord?id=CVE-2025-32912

- CVE-2025-32913:
    Libsoup: null pointer dereference in
    soup_message_headers_get_content_disposition when "filename" parameter is
    present, but has no value in content-disposition header
    https://www.cve.org/CVERecord?id=CVE-2025-32913

- CVE-2025-32914:
    Libsoup: oob read on libsoup through function
    "soup_multipart_new_from_message" in soup-multipart.c leads to crash or
    exit of process
    https://www.cve.org/CVERecord?id=CVE-2025-32914

- CVE-2025-46420:
    Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c
    https://www.cve.org/CVERecord?id=CVE-2025-46420

- CVE-2025-46421:
    Libsoup: information disclosure may leads libsoup client sends authorization
    header to a different host when being redirected by a server
    https://www.cve.org/CVERecord?id=CVE-2025-46421

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit eee0f6c078)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:04 +02:00
Bernd Kuhls aab7ddec16 package/php: security bump version to 8.3.23
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3

Fixes CVE-2025-1735, CVE-2025-6491 & CVE-2025-1220:
https://news-web.php.net/php.announce/465

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a56ce5d46d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:39:00 +02:00
Thomas Perale 1717b84b68 package/python-future: add CPE identifier
The cpe:2.3:a:pythoncharmers:python-future:*:*:*:*:*:*:*:* is
valid for this package.

See https://nvd.nist.gov/products/cpe/detail/6E3F033B-5565-461B-8450-D23E68419313

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 96899dd692)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:38:55 +02:00
Thomas Perale a78d7c6e11 package/python-multipart: add CPE identifier
The cpe:2.3:a:fastapiexpert:python-multipart:0.0.20:*:*:*:*:*:*:* is
valid for this package.

See https://nvd.nist.gov/products/cpe/detail/8C38E43A-00AD-4851-9AC9-80408FF89F52

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit de8cc1ae50)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:38:51 +02:00
Thomas Perale bb4fe1300d package/fwupd: add CPE identifier
The cpe:2.3:a:fwupd:fwupd:*:*:*:*:*:*:*:* is valid for this package.

See https://nvd.nist.gov/products/cpe/detail/46E1E3C0-2F72-49BA-8374-1FBF203AE0F0

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8965024022)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:38:46 +02:00
Tim Soubry 73b95a0116 package/sox: ignore CVE-2023-34432
Commit [1] introduced a patch addressing CVE-2021-23159. Since then,
CVE-2023-34432 ([2]) remained the only unresolved CVE reported
against the sox package in pkg-stat.  This patch adds CVE-2023-34432
to the list of ignored CVEs for sox, based on the report from the
Debian Security Tracker ([3]) and the sox issue tracker ([4]), both
indicate that the patch introduced in [1] also resolves this CVE.

[1] 14aa0f5ec1 package/sox: add fix for CVE-2021-23159, CVE-2021-23172, CVE-2023-34318
[2] https://nvd.nist.gov/vuln/detail/CVE-2023-34432
[3] https://security-tracker.debian.org/tracker/CVE-2023-34432
[4] https://sourceforge.net/p/sox/bugs/367/

Signed-off-by: Tim Soubry <tim.soubry@mind.be>
[Julien: change commit ref [1] to use commit id from master branch]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e868b974a7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:38:41 +02:00
Thomas Perale 52e5a733f8 package/cpp-httplib: add CPE identifier
The cpe:2.3:a:cpp-httplib_project:cpp-httplib:*:*:*:*:*:*:*:* is valid
for this package.

See https://nvd.nist.gov/products/cpe/detail/955012E0-158A-4637-99DE-37520A12BB7D

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6b8dd4ddf3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:38:37 +02:00
Thomas Perale 78e297a3a8 package/libp11: fix build w/ host-gcc15
The following error appeared on the autobuilder for host using
host-gcc15:

```
p11_attr.c: In function 'pkcs11_addattr_bool':
p11_attr.c:126:25: error: expected identifier or '(' before 'true'
  126 |         static CK_BBOOL true = CK_TRUE;
      |                         ^~~~
p11_attr.c:127:25: error: expected identifier or '(' before 'false'
  127 |         static CK_BBOOL false = CK_FALSE;
      |                         ^~~~~
p11_attr.c:128:44: error: lvalue required as unary '&' operand
  128 |         pkcs11_addattr(tmpl, type, value ? &true : &false, sizeof(CK_BBOOL));
      |                                            ^
p11_attr.c:128:52: error: lvalue required as unary '&' operand
  128 |         pkcs11_addattr(tmpl, type, value ? &true : &false, sizeof(CK_BBOOL));
      |                                                    ^
make[3]: *** [Makefile:646: libp11_la-p11_attr.lo] Error 1
```

This is due to the change in the default C language version in GCC15.

This patch backport the upstream patch that fix that issue by not using
the keywords.

Fixes: https://autobuild.buildroot.org/results/da7/da71db9b04f181b9d2e72df73ac8541709f5a1d4

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit df60b105b4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:38:32 +02:00
Titouan Christophe 09ba8925c3 package/tailscale: add CPE_ID_VENDOR
This gives a proper cpe-id string to the tailscale buildroot package

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fd04cba20d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:37:34 +02:00
Titouan Christophe 380d9c0ffa package/libolm: remove package
Upstream has explicitely stated that libolm is now deprecated.
Since no other package depend on libolm, we can easily remove it from
Buildroot. If any user is interested in this feature, we can add its
successor: vodozemac.

More information here:
https://gitlab.matrix.org/matrix-org/olm#important-libolm-is-now-deprecated

Also, there is CVE reported on this latest 3.2.16 version declared
as no longer maintained. See:
https://www.cve.org/CVERecord?id=CVE-2024-45191
https://www.cve.org/CVERecord?id=CVE-2024-45192
https://www.cve.org/CVERecord?id=CVE-2024-45193

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add a note about CVE reported on this package]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit edf08553dd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:37:29 +02:00
Titouan Christophe f5ad99c02a package/php: ignore CVE-2024-3566 that only affects Windows
For reference, see:
https://www.cve.org/CVERecord?id=CVE-2024-3566

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add link to CVE in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7c0e9d795a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:36:40 +02:00
Titouan Christophe 179cce3931 package/tcpreplay: security bump to v4.5.1
This fixes the following vulnerabilities:

- CVE-2023-4256:
    Within tcpreplay's tcprewrite, a double free vulnerability has been
    identified in the tcpedit_dlt_cleanup() function within
    plugins/dlt_plugins.c. This vulnerability can be exploited by
    supplying a specifically crafted file to the tcprewrite binary. This
    flaw enables a local attacker to initiate a Denial of Service (DoS)
    attack.
    https://www.cve.org/CVERecord?id=CVE-2023-4256

- CVE-2023-43279:
    Null Pointer Dereference in mask_cidr6 component at cidr.c in
    Tcpreplay 4.4.4 allows attackers to crash the application via crafted
    tcprewrite command.
    https://www.cve.org/CVERecord?id=CVE-2023-43279

- CVE-2024-22654:
    tcpreplay v4.4.4 was discovered to contain an infinite loop via the
    tcprewrite function at get.c.
    https://www.cve.org/CVERecord?id=CVE-2024-22654

See the release notes:
https://github.com/appneta/tcpreplay/releases/tag/v4.5.1

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 31619696b9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:36:24 +02:00
Titouan Christophe 7d1fc33dd0 package/gvfs: update website URL
The website URL was outdated, resulting in an HTTP error 403 Forbidden

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d8523b00e0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:36:20 +02:00
Peter Korsgaard a169f37f18 package/jose: add CPE identifier
cpe:2.3:a:latchset:jose:14:*:*:*:*:*:*:* is a valid CPE ID.

See:
https://nvd.nist.gov/products/cpe/detail/7E6A7E16-E8B0-47BA-B7C7-0D4102933031

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 23e6d91c69)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:36:15 +02:00
Peter Korsgaard 07cde1ad1e package/sudo: security bump to version 1.9.17p1
For release note, see:
https://www.sudo.ws/releases/stable/#1.9.17p1

Fixes the following security issues:

- CVE-2025-32462: Sudo before 1.9.17p1, when used with a sudoers file that
  specifies a host that is neither the current host nor ALL, allows listed
  users to execute commands on unintended machines (since sudo 1.8.8)

  https://www.sudo.ws/security/advisories/host_any/

- CVE-2025-32463: Sudo before 1.9.17p1 allows local users to obtain root
  access because /etc/nsswitch.conf from a user-controlled directory is used
  with the --chroot option (since sudo 1.9.4)

  https://www.sudo.ws/security/advisories/chroot_bug/

Update the LICENSE.md hash for a change in copyright years:
https://github.com/sudo-project/sudo/commit/30729312c2091f3891daa39b571efa40cb261785

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to release note in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ee86844e63)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:36:01 +02:00
Thomas Perale b27c3ef88b package/daq: fix build with GCC14
The daq package fails to build with GCC14 toolchains:

```
daq_nfq.c: In function 'SetPktHdr':
daq_nfq.c:395:37: error: passing argument 2 of 'nfq_get_payload' from incompatible pointer type [-Wincompatible-pointer-types]
  395 |     int len = nfq_get_payload(nfad, (char**)pkt);
      |                                     ^~~~~~~~~~~
      |                                     |
      |                                     char **
```

The issue can be reproduced with the following config:

```
cat > daq.config <<EOF
BR2_arm=y
BR2_cortex_a7=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PACKAGE_DAQ=y
BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBNETFILTER_QUEUE=y
EOF
```

This patch port a patch taken from openembedded meta-networking [1] and
is tested with test-pkg:

```
$ ./utils/test-pkg -c daq.config -p daq
```

[1] https://layers.openembedded.org/layerindex/recipe/37594/

Fixes: https://autobuild.buildroot.org/results/c69/c69ab134463a18eec65ded836aecf89a5cb4a75c/build-end.log
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 533c0aac28)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:35:03 +02:00
Thomas Perale 1b72e438a7 package/x11r7/xwayland: security bump to version 24.1.8
Fixes the following security issues:

- CVE-2025-49175: A flaw was found in the X Rendering extension's
    handling of animated cursors. If a client provides no cursors, the
    server assumes at least one is present, leading to an out-of-bounds
    read and potential crash.

For more information, see:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-49175
    - https://gitlab.freedesktop.org/xorg/xserver/-/commit/0885e0b2

- CVE-2025-49176: A flaw was found in the Big Requests extension. The
    request length is multiplied by 4 before checking against the maximum
    allowed size, potentially causing an integer overflow and bypassing
    the size check.

For more information, see:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-49176
    - https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b32

- CVE-2025-49177: A flaw was found in the XFIXES extension. The
    XFixesSetClientDisconnectMode handler does not validate the request
    length, allowing a client to read unintended memory from previous
    requests.

For more information, see:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-49177
    - https://gitlab.freedesktop.org/xorg/xserver/-/commit/ab02fb96

- CVE-2025-49178: A flaw was found in the X server's request handling.
    Non-zero 'bytes to ignore' in a client's request can cause the server
    to skip processing another client's request, potentially leading to a
    denial of service.

For more information, see:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-49178
    - https://gitlab.freedesktop.org/xorg/xserver/-/commit/d55c54ce

- CVE-2025-49179: A flaw was found in the X Record extension. The
    RecordSanityCheckRegisterClients function does not check for an
    integer overflow when computing request length, which allows a client
    to bypass length checks.

For more information, see:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-49179
    - https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca4

- CVE-2025-49180: A flaw was found in the RandR extension, where the
    RRChangeProviderProperty function does not properly validate input.
    This issue leads to an integer overflow when computing the total size
    to allocate.

For more information, see:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-49180
    - https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b76
    - https://gitlab.freedesktop.org/xorg/xserver/-/commit/0235121c

For more details on the version bump, see:
    - Security Advisory https://lists.x.org/archives/xorg/2025-June/062055.html
    - 24.1.7 https://lists.x.org/archives/xorg/2025-June/062057.html
    - 24.1.8 https://lists.x.org/archives/xorg/2025-June/062066.html

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5d5a4950b5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:34:58 +02:00
Thomas Perale 9f2b5a2304 package/x11r7/xserver_xorg-server: security bump to version 21.1.18
Fixes the following security issues:

- CVE-2025-49175: A flaw was found in the X Rendering extension's
  handling of animated cursors. If a client provides no cursors, the
  server assumes at least one is present, leading to an out-of-bounds
  read and potential crash.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-49175
  - https://gitlab.freedesktop.org/xorg/xserver/-/commit/0885e0b2

- CVE-2025-49176: A flaw was found in the Big Requests extension. The
  request length is multiplied by 4 before checking against the maximum
  allowed size, potentially causing an integer overflow and bypassing
  the size check.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-49176
  - https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b32

- CVE-2025-49177: A flaw was found in the XFIXES extension. The
  XFixesSetClientDisconnectMode handler does not validate the request
  length, allowing a client to read unintended memory from previous
  requests.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-49177
  - https://gitlab.freedesktop.org/xorg/xserver/-/commit/ab02fb96

- CVE-2025-49178: A flaw was found in the X server's request handling.
  Non-zero 'bytes to ignore' in a client's request can cause the server
  to skip processing another client's request, potentially leading to a
  denial of service.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-49178
  - https://gitlab.freedesktop.org/xorg/xserver/-/commit/d55c54ce

- CVE-2025-49179: A flaw was found in the X Record extension. The
  RecordSanityCheckRegisterClients function does not check for an
  integer overflow when computing request length, which allows a client
  to bypass length checks.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-49179
  - https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca4

- CVE-2025-49180: A flaw was found in the RandR extension, where the
  RRChangeProviderProperty function does not properly validate input.
  This issue leads to an integer overflow when computing the total size
  to allocate.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-49180
  - https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b76
  - https://gitlab.freedesktop.org/xorg/xserver/-/commit/0235121c

For more details on the version bump, see:
  - Security Advisory https://lists.x.org/archives/xorg/2025-June/062055.html
  - 21.1.17 https://lists.x.org/archives/xorg/2025-June/062056.html
  - 21.1.18 https://lists.x.org/archives/xorg/2025-June/062066.html

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8b94ff6c6b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:34:54 +02:00
Thomas Perale dd100567ed package/net-tools: fix regression introduced by CVE fix
Commit [1] backported an upstream patch to address CVE-2025-46836 that
included a regression.
Upstream later fixed this regression in commit [2].

This patch add that fix to correct the issue introduced by the original
patch.

[1] 323aaa9f54 package/net-tools: add upstream security fix for CVE-2025-46836
[2] https://sourceforge.net/p/net-tools/code/ci/ddb0e375fb9ca95bb69335540b85bbdaa2714348/

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d3274210f9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:34:49 +02:00
Titouan Christophe 5248c9b80a package/python-urllib3: security bump to v2.5.0
For release note, see:
https://github.com/urllib3/urllib3/releases/tag/2.5.0

This fixes the following vulnerabilities:
- CVE-2025-50181:
    urllib3 redirects are not disabled when retries are disabled on
    PoolManager instantiation

- CVE-2025-50182:
    urllib3 does not control redirects in browsers and Node.js

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add link to release note in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7006854ce1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:34:44 +02:00
Titouan Christophe 3536feedee package/tinyxml: add patch for CVE-2023-34194
This fixes the following vulnerability:
- CVE-2023-34194:
    StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML
    through 2.6.2 has a reachable assertion (and application exit) via a
    crafted XML document with a '\0' located after whitespace.

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 184a1b94a5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:34:39 +02:00
Peter Korsgaard c37f419f2a package/jose: security bump to version 14
Jose-13 fixed the following security issue:

- CVE-2023-50967: latchset jose through version 11 allows attackers to cause
  a denial of service (CPU consumption) via a large p2c (aka PBES2 Count)
  value.
  https://github.com/latchset/jose/issues/151

In addition, jose-14 worked around another DoS issue related to
decompression:
https://github.com/latchset/jose/pull/157

Drop now upstreamed patches:

- 0001-lib-hsh.c-rename-hsh-local-variable.patch: Upstream as of
  https://github.com/latchset/jose/commit/3d5b287243f87ce0243b23abd690d86c41fc499c

- 0002-man-add-option-to-skip-building-man-pages.patch: Upstream after
  getting reworked to use -Ddocs=disabled as of
  https://github.com/latchset/jose/commit/786b426df018edf30a53e2d82155df20d13047c1

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: remove .checkpackageignore entries to fix check-package errors]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 394a8fb406)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:34:32 +02:00
Bernd Kuhls 1de9f44d9d {linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f6d9a93c51)
[thomas: drop 6.15]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:34:04 +02:00
Yann E. MORIN 5d6d1da5e4 support/testing: enable lpxelinux for syslinux runtime test
The syslinux runtime test (which is in fact a build-only test) ensures
that syslinux does get build at least once a week (via the gitlab-CI
weekly pipeline). Runtime testing would need much more work, though, but
nothing in syslinux is currently runtime tested anyway.

Reported-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a6ddf2b91d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:31:41 +02:00
Thomas Perale 7569ec2a6c package/kvmtool: fix build failure w/ musl
The following error occurs on the autobuilder for builds with musl
libc.

```
  CC       util/bitmap.o
In file included from include/linux/bitmap.h:7,
                 from util/bitmap.c:9:
include/linux/bitops.h:4:10: fatal error: bits/wordsize.h: No such file or directory
    4 | #include <bits/wordsize.h>
      |          ^~~~~~~~~~~~~~~~~
```

The error occurs because bits/wordsize.h is specific to glibc.

This patch applies an upstream fix that replaces the use of __WORDSIZE
with an internal macro, making the code portable across different libc.

Fixes: https://autobuild.buildroot.org/results/30d/30d6e407e6a0fc7d85062c2d56008755c70ca733/build-end.log
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 901b9e19ed)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:31:34 +02:00
Thomas Perale be11632916 package/libavif: security bump to v1.3.0
Fixes the following security issues:

- CVE-2025-48174: makeRoom in stream.c has an integer overflow and
    resultant buffer overflow in stream->offset+size.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-48174
  - https://github.com/AOMediaCodec/libavif/pull/2768/commits

- CVE-2025-48175: avifImageRGBToYUV in reformat.c has integer overflows
    in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and
    vRowBytes.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-48175
  - https://github.com/AOMediaCodec/libavif/commit/64d956ed5a602f78cebf29da023280944ee92efd

For more details on the version bump, see:
  - https://github.com/AOMediaCodec/libavif/releases/tag/v1.3.0
  - https://github.com/AOMediaCodec/libavif/releases/tag/v1.2.1
  - https://github.com/AOMediaCodec/libavif/releases/tag/v1.2.0

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0c1fa0bce1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:31:30 +02:00
Thomas Perale 1fba91af01 package/modsecurity2: security bump to v2.9.10
Fixes the following security issues:

- CVE 2025-47947: Versions up to and including 2.9.8 are vulnerable to
  denial of service in one special case (in stable released versions):
  when the payload's content type is application/json, and there is at
  least one rule which does a sanitiseMatchedBytes action. A patch is
  available at pull request 3389 and expected to be part of version
  2.9.9. No known workarounds are available.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-47947
  - https://github.com/owasp-modsecurity/ModSecurity/pull/3389

- CVE-2025-48866: Versions prior to 2.9.10 contain a denial of service
  vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The
  `sanitiseArg` (and `sanitizeArg` - this is the same action but an
  alias) is vulnerable to adding an excessive number of arguments,
  thereby leading to denial of service. Version 2.9.10 fixes the issue.
  As a workaround, avoid using rules that contain the `sanitiseArg` (or
  `sanitizeArg`) action.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-48866
  - https://github.com/owasp-modsecurity/ModSecurity/commit/3a54ccea62d3f7151bb08cb78d60c5e90b53ca2e

For more details on the version bump, see:
  - https://github.com/owasp-modsecurity/ModSecurity/releases/tag/v2.9.8
  - https://github.com/owasp-modsecurity/ModSecurity/releases/tag/v2.9.9
  - https://github.com/owasp-modsecurity/ModSecurity/releases/tag/v2.9.10

Also this patch change the _SOURCE variable that now include a 'v'
prefixing the version.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: update hash source url in hash file comment]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3d593a8144)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:31:26 +02:00
Maxime Chevallier e32b787683 package/elfutils: elfutils programs now require a c++ toolchain
The 0.192 release of elfutils introduced the src/srcfiles.cxx program,
that lists all source files of a given ELF binary. As this is a C++
program, we need a toolchain that supports it.

Without it, the build system tries to use "no" as the CXX compiler,
resulting in the following errors :

  /bin/sh: line 1: no: command not found

as can be seen here for example :

https://autobuild.buildroot.net/results/849/849221c794a469a423857a290db775d150b84900

Add a dependency to a CPP toolchain for the elfutils programs.

Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 268d7ad180)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:31:21 +02:00
Maxime Chevallier 5440c8d75e package/elfutils: Show a comment explaining that elfutils progs need glibc
The elfutils programs require Glibc to be used as the C library. Show a
comment when this libc isn't used in the toolchain.

Suggested-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 52ba3ed657)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:31:17 +02:00
Thomas Perale ed46462036 package/gstreamer1/gstreamer1-editing-services: fix COPYING hash
With the version bump to v1.24.11 (see [1]) the license hash changed for
the gstreamer1-editing-services package (see [2]).

This patch update the hash accordingly.

Fixes: https://autobuild.buildroot.org/results/9e1/9e1807cf5ac7bb69ae9bbe7a6a71411eb500188c/build-end.log

[1] fd00502ee0 package/gstreamer1/gstreamer1-editing-services: bump version to 1.24.11
[2] https://salsa.debian.org/gstreamer-team/gstreamer-editing-services1.0/-/commit/2a56edb6af3409ebdca39a96f310b43e0d780be0

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fc1387b4a5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-10 11:30:09 +02:00
Marcus Hoffmann b7d87dd285 package/systemd: bump to 256.16
Systemd stable versions don't really have release notes, so best we can
do is link to the diff between the two tags:

https://github.com/systemd/systemd/compare/v256.7...v256.16

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
(cherry picked from commit f11fc14734)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-04 08:43:57 +02:00
Bram Oosterhuis 7a7acd723a package/libgcrypt: bump to v1.11.1
For release note, see:
https://dev.gnupg.org/T7166

This version fixes a build error which can happen with 32-bit arm
configurations.

The issue can be reproduced with commands:

    cat >.config <<EOF
    BR2_arm=y
    BR2_cortex_a8=y
    BR2_ARM_INSTRUCTIONS_THUMB2=y
    BR2_TOOLCHAIN_EXTERNAL=y
    BR2_PACKAGE_LIBGCRYPT=y
    EOF
    make olddefconfig
    make libgcrypt

Build is failing with output:

    ec-nist.c: In function '_gcry_mpi_ec_nist256_mod':
    ec-inline.h:902:5: error: 'asm' operand has impossible constraints or there are not enough registers
      902 |     __asm__ ("subs %3, %7, %10\n" \
          |     ^~~~~~~

Details for this buggix: https://dev.gnupg.org/T7226

Signed-off-by: Bram Oosterhuis <dev@bybram.com>
[Julien: reword commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 89ca1bd4f4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:55 +02:00
Yann E. MORIN eaec42a1e4 boot/syslinux: fix install with top-level parallel build
syslinux is... special. It is a target package, but it is installed in
HOST_DIR *in the target install commands*: in addition to the boot files
that run on the target, syslinux installs a set of host tools that are
to be used at build time (e.g. extlinux, to prepare bootable media, like
an iso96660 image). Then, from HOST_DIR, the actual boot files are
copied into BINARIES_DIR (i.e. images/); we do it that way because the
boot files are scattered about everywhere in the build tree, while they
are all packed together in a single directory once installed.

However, there is no dependency between the target and image install
steps. So, when using top-level parallel builds, there is no guarantee
that the target install commands are finished before the image install
commands are started.

We fix that by first installing into a temporary location, as part of
the build step, and by then copying from there as part of the install
step. This ensures that the boot files are easily available, without
needing a dependency on the target install step, that we can't express.

Note that we do not change the actual installation into HOST_DIR: it can
be set up differently that our temporary location, and we do not want
to duplicate that setup here (it's going to diverge over time).

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 90e76818a1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:50 +02:00
Titouan Christophe 613ae88fcb package/libmpeg2: add CPE_ID_VENDOR
At the moment, package stats indicates that libmpeg2 is affected by
https://nvd.nist.gov/vuln/detail/CVE-2022-37416

However, this CVE applies to a completely different piece of software,
that has the same name "libmpeg2" [1].

To avoid the confusion, let's add a proper CPE vendor to Buildroot's libmpeg2.
The library itself does not clearly identify any vendor name, and there isn't
any existing CPE on the NVD website. Since this library is not updated for
many years (maybe even before the introduction of the CPE system), but the
code is somehow related to the Videolan project, let's add this as the
vendor, which sould solve the matched CVE issue.

[1] https://github.com/ittiam-systems/libmpeg2

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: fix typo in commit title]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 585ee147dd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:46 +02:00
Titouan Christophe 1f01a3f514 package/libmpeg2: switch to videolan Gitlab repository
The source code archives don't seem to be available anymore from the libmpeg2
website (Sourceforge) [1], and their SVN repository [2] doesn't seem
reachable either.

This fixes recent autobuilder failures, such as
https://autobuild.buildroot.net/results/ede/edeef6a480350880b12eebd94654644e43c2670e/

[1] https://libmpeg2.sourceforge.io/
[2] svn://svn.videolan.org/libmpeg2/trunk

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2f2a83fdc4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:42 +02:00
Julien Olivain 140afe490d package/gcc/Config.in.host: hide gcc version for unsupported CPUs
When a new gcc version is introduced, for example gcc 15 in
commit [1], it should have also added a "depends on
!BR2_ARCH_NEEDS_GCC_AT_LEAST_15" to the previous gcc version.

This logic is described for external toolchains in commit [2],
for example. The internal Buildroot toolchains should have the
same logic. This logic existed for previous gcc version. See for
example the removal of gcc 12 in commit [3].

There is usually no problem, because all the three latest active gcc
versions supports all CPUs present in Buildroot.

However, the commit [4] recently added the support for the Arm
Cortex-A720 CPU, which needs at least gcc 14. Since there is no
logic preventing the selection of the gcc version, it is possible
to select an unsupported gcc version (i.e. gcc 13).

In such a case, the host-gcc-initial package configuration fails
with output:

    Unknown cpu used in --with-cpu=cortex-a720

This commit fixes the issue by adding those missing dependencies.

Fixes:
https://autobuild.buildroot.org/results/918b90aee0b65f01efc241622015cb847b4e23a8/

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/75891397abe60dbe3d82a1ec39654ff81d1b1406
[2] https://gitlab.com/buildroot.org/buildroot/-/commit/f577d8218f3f18016aa084255e337a7f589eeed1
[3] https://gitlab.com/buildroot.org/buildroot/-/commit/58cf7c51da3ae4804332f68ee934e153d695d047#66f7e875db173e5538d3511c8297acc1ba30da33_27_25
[4] https://gitlab.com/buildroot.org/buildroot/-/commit/de374e06d856dd5079fc792c883b06563af950b0

Cc: Romain Naour <romain.naour@gmail.com>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6f231d3003)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:38 +02:00
Raphaël Mélotte 418051aeb2 support/testing: new runtime test for gumbo-parser
The new test requires a br2-external directory because we compile a
small test program on the host and install it on the target, but it's
not useful to have it in the main Buildroot package tree.

The test program loads and parses a sample HTML document. Taking
inspiration from 'examples/get_title.c' in gumbo-parser, it also
searches for the title of the document just to check that we can do
more than the parsing.

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit da23be6338)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:34 +02:00
Raphaël Mélotte fdd08f7308 package/gumbo-parser: update upstream repository
Development on Google's GitHub repository has stopped a long time ago.
A fork exists on Codeberg, and multiple distributions (Fedora, Arch
Linux, ...) are already using it (see [1]).

Update the source URL to use the new upstream location.

The new upstream has a different hash for the 0.10.1 tarball, so
update it as well.

[1]: https://repology.org/project/gumbo-parser/versions

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1e106d8412)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:30 +02:00
Raphaël Mélotte 67463373b8 support/testing: add new test for nginx-modsecurity
This test verifies that we can run nginx with the modsecurity
directives.
It also checks a very simple rule that blocks requests containing the
keyword "blockme".

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
[Julien:
 - add / at directory end in DEVELOPERS
 - sort DEVELOPERS entries alphabetically
 - remove unneeded test configs already present in
   BASIC_TOOLCHAIN_CONFIG
 - sort test config directives alphabetically
]
Signed-off-by: Julien Olivain <ju.o@free.fr>

(cherry picked from commit 5cda85cb56)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:27 +02:00
Raphaël Mélotte f58f7d472f package/binutils: fix build with gcc 15
Backport the upstream patch that fixes the following build error when
compiling for mips with gcc 15:

In file included from mips-opc.c:29:
mips-opc.c: In function 'decode_mips_operand':
mips-formats.h:86:7: error: expected identifier or '(' before
'static_assert'
   86 |       static_assert[(1 << (SIZE)) == ARRAY_SIZE (MAP)]; \
         |       ^~~~~~~~~~~~~

The patch is already part of upstream binutils 2.44, so we only need
it for 2.42 and 2.43.1.

All 3 versions we have of host-binutils were build-tested using the
defconfig from the autobuilder failure (see the link below) and gcc 15
on the host.

Fixes:
- https://autobuild.buildroot.org/results/873/873ec25cf01d5f2b9ae7044e0b1d8d8791b781e6/

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 430aa91c3d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:21 +02:00
Titouan Christophe b9cfe67d8c package/libarchive: security bump to v3.8.1
This fixes the following CVEs:

- CVE-2025-5914
    Libarchive: double free at archive_read_format_rar_seek_data()
    in archive_read_support_format_rar.c
    https://www.cve.org/CVERecord?id=CVE-2025-5914

- CVE-2025-5915
    Libarchive: heap buffer over read in copy_from_lzss_window()
    at archive_read_support_format_rar.c
    https://www.cve.org/CVERecord?id=CVE-2025-5915

- CVE-2025-5916
    Libarchive: integer overflow while reading warc files
    at archive_read_support_format_warc.c
    https://www.cve.org/CVERecord?id=CVE-2025-5916

- CVE-2025-5917
    Libarchive: off by one error in build_ustar_entry_name()
    at archive_write_set_format_pax.c
    https://www.cve.org/CVERecord?id=CVE-2025-5917

- CVE-2025-5918
    Libarchive: reading past eof may be triggered for piped file streams
    https://www.cve.org/CVERecord?id=CVE-2025-5918

See the release notes:
- https://github.com/libarchive/libarchive/releases/tag/v3.8.0
- https://github.com/libarchive/libarchive/releases/tag/v3.8.1

In addition to the version bump, the following changes are required:
- The COPYING file has been edited upstream because of filename change on a
  sub-licensed component; see
  https://github.com/libarchive/libarchive/commit/c26f0377457db392bd57a640e8fe25506120f810
- The upstream "sha256sums" is currently unavailable, so the archive checksum
  has been computed locally
- Drop patches for libiconv in configure.ac, which has been properly addressed
  upstream in https://github.com/libarchive/libarchive/pull/2611
- Following the above, AUTORECONF is not needed any longer
- Drop mbedtls patch that has been applied upstream

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 95db5707df)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:57:18 +02:00
Titouan Christophe 8ecdef8dd0 package/libwebsock: remove package
The upstream Github repository payden/libwebsock is no longer available,
and its URL now redirects to some completely unrelated software.
We don't know for sure what happened, but at least the package does not
build anymore, because its source code has vanished.

Since no other buildroot package depends on libwebsock, and it hasn't
received any update; let's simply remove it from here.

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9f2dbf1486)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:56:56 +02:00
Titouan Christophe bd6305a8f1 package/libbpf: add patch for CVE-2025-29481
This fixes the following CVE:

- CVE-2025-29481:
    Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to
    execute arbitrary code via the bpf_object__init_prog` function of libbpf.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-29481

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add direct link to CVE in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fba60c7732)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:54:06 +02:00
Giulio Benetti 32df10e8ff board/freescale/mxs: fix Linux booting
Actually DTB_LIST accepts only file and not files with relative path
preprended. This leads to have vfat without .dtb files and so Linux
doesn't start. Let's fix this by including slash in sed command as done
for mxc as well as basename in front of $dt.dtb to remove possible
useless folders present in the dts path. Let's also add set -e at the
top of the script to make it more verbose on error and modify this
section according to spellcheck as done for mxc.

This commit align this "mxs/post-image.sh" with its "imx/post-image.sh"
counterpart which was improved for arm64 in commit [1].

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/4755bf2bd43a7b4c3bf4f88be790240a01b3116f

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien:
 - change space indentation to tabs for consistency
 - add note in commit log about imx/post-image.sh
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 50297207a8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:59 +02:00
Julien Olivain 9b21865469 boot/edk2: add security fix for CVE-2024-38805
This commit adds a security fix from the upstream commit:
https://github.com/tianocore/edk2/commit/b3a2f7ff24e156e8c4d694fffff01e95a048c536

It fixes CVE-2024-38805:
https://www.cve.org/CVERecord?id=CVE-2024-38805
Note: at the time of this commit, this CVE is "reserved" by a CNA.
Details will come later.

See also the associated pull request:
https://github.com/tianocore/edk2/pull/11042

This commit also adds the corresponding _IGNORE_CVES entry.

Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 14d07d1914)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:54 +02:00
Peter Korsgaard 52589e9dd7 Makefile: unexport TOPDIR to fix gnu-efi >= 3.0.18 build issue
gnu-efi fails to build if TOPDIR is exported in the environment since the
move to version 3.0.18 in commit 9efeb7e914 ("package/gnu-efi: bump to
version 3.0.18").

The reason is the change in TOPDIR logic introduced by upstream commit
31913f8489 ("Make: make TOPDIR actually work and get rid of unused CDIR"):

https://github.com/ncroxon/gnu-efi/commit/31913f8489f8e6eb624b6447d2e5cf1f6367bebf

export TOPDIR=foo; make gnu-efi
...
/path/to/buildroot/output-gnuefi/host/bin/aarch64-linux-ld: cannot find
 /path/to/buildroot/output-gnuefi/build/gnu-efi-4.0.0//apps/../aarch64/gnuefi/crt0-efi-aarch64.o:
 No such file or director
make[2]: *** [Makefile:89: apps] Error 2
make[1]: *** [package/pkg-generic.mk:273: /path/to/buildroot/output-gnuefi/build/gnu-efi-4.0.0/.stamp_built] Error 2
make: *** [Makefile:23: _all] Error 2

As a workaround, unexport TOPDIR like we do for other sensitive environment
variables.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2b5544ab7a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:49 +02:00
Peter Korsgaard c7221c53df Makefile: sort unexport lines
The list of environment variables to unexport has grown organically over the
years and is no longer sorted. Sort it alphabetically for clarity.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit da04cfa26c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:44 +02:00
Marcus Hoffmann 4aad0cdeef package/python-dotenv: bump to 1.1.1
Release notes:
https://github.com/theskumar/python-dotenv/releases/tag/v1.1.1

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2286b6dd1b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:39 +02:00
Raphaël Mélotte 01c2d42344 package/modsecurity2: update upstream URLs
'https://github.com/SpiderLabs/ModSecurity' now redirects to
'https://github.com/owasp-modsecurity/ModSecurity', so update our
URLs accordingly.

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Reviewed-by: Herve Codina <herve.codina@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 602fb43d34)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:34 +02:00
Raphaël Mélotte 1341786226 package/nginx-modsecurity: update upstream URLs
'https://github.com/SpiderLabs/ModSecurity-nginx' now redirects to
'https://github.com/owasp-modsecurity/ModSecurity-nginx', so update our
URLs accordingly.

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5d9551d303)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:29 +02:00
Raphaël Mélotte 23794fee66 package/mupdf: update homepage URL
The current homepage URL leads to an HTTP 404 error.

Fix it by using the homepage URL currently mentioned in mupdf's git
repository.

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d1ea9a64e6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:53:23 +02:00
Maxime Chevallier 6fe714bbc3 configs/globalscale_espressobin: Bump linux to v5.15.186
Bump from v5.15.1 to the latest LTS, v5.15.186.

Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
Reviewed-by: Joachim Wiberg <troglobit@gmail.com>
[Julien: reword commit title]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3953bd3e9c)
[thomas: bump to v5.15.186 instead]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:51:54 +02:00
Peter Korsgaard 82e4e0d313 package/libcurl: unbreak threads + c-ares conditional
Commit 0fce7a9623 ("package/libcurl: fix build w/ threads + c-ares") added a
conditional for threads + c-ares, but ended up with a end-parenthesis too
many - so the condition is never true.  Fix that.

Reported-by: Tibault Damman <tibault.damman@basalte.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Reviewed-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 17399baa7c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:50:49 +02:00
Maxime Chevallier 038218fcad package/linux-tools: rtla: Pass TARGET_LD to the make arguments
In Linux v6.8,  the rtla Makefile was rewritten :

  01474dc706ca ("tools/rtla: Use tools/build makefiles to build rtla")

The new Makefile uses default linker values, so the host linker being used to
produce the final rtla binary.

This results in the following error :

ld: [...] trace.o: error adding symbols: file in wrong format

Add LD=$(TARGET_LD) to the RTLA_MAKE_OPTS to fix rtla cross-compilation.

Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
Reviewed-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f28f34e200)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:50:36 +02:00
Thomas Petazzoni 20774d8fb4 package/cifs-utils: bump to version 7.4
According to
https://lists.samba.org/archive/samba-technical/2025-June/139484.html:

A new update, version 7.4, of cifs-utils has been released today.
Users of cifs-utils version 7.3 on older kernels are encouraged to
update to 7.4 since it includes a fix for a mount problem with version
7.3 of cifs-utils on older kernels when using namespaces.

[...]

Detailed list of changes since version 7.3 was released
----------------------------------------------------------------
Enzo Matsumiya (1):
      mount.cifs: retry mount on -EINPROGRESS

Henrique Carvalho (1):
      cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP

Paulo Alcantara (1):
      cifs.upcall: fix memory leaks in check_service_ticket_exits()

Pavel Shilovsky (1):
      cifs-utils: bump version to 7.4

Z. Liu (2):
      getcifsacl, setcifsacl: use <libgen.h> for basename
      cifscreds: use <libgen.h> for basename

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4abd7bb9df)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:50:26 +02:00
Bernd Kuhls 9a34df3678 package/mpv: remove stale patch
Buildroot commit 8f69974c20 switched the
buildsystem of mpv from waf to meson but forgot to remove a patch which
fixed a waf-related build error.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 942b88e693)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-03 10:50:21 +02:00
Francois Perrad b53d612a80 package/lua: bump to version 5.4.8
For differences with 5.4.7, see:
https://www.lua.org/work/diffs-lua-5.4.7-lua-5.4.8.html

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[Julien: add link to diff with previous version]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 393d7e4d21)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-02 18:38:21 +02:00
Bernd Kuhls 17a252545a package/python3: security bump to 3.13.5
3.13.4 fixes CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, CVE 2025-4435
and CVE 2025-4517 but introduced some regressions fixed in 3.13.5.

Release notes:
https://www.python.org/downloads/release/python-3135/
https://www.python.org/downloads/release/python-3134/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1bb4a955fa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:44:22 +02:00
Joseph Kogut 883c977c9a package/python-glslang: bump to version 15.3.0
See changelog:
https://github.com/KhronosGroup/glslang/blob/15.3.0/CHANGES.md

Fixes build issue: error: ‘uint32_t’ has not been declared, encountered
on GCC v15, caused by cstdint not being implicitly included.

https://bugs.gentoo.org/937261

This commit also adds host-spriv-tools in _DEPENDENCIES to use the
version packaged in Buildroot. It also adds
ALLOW_EXTERNAL_SPIRV_TOOLS=ON in _CONF_OPTS, which was added in upstream
commit [1], introduced in version 13.0.0.

Also, when trying to build this python-glslang version 15.3.0 on a host
providing cmake < 3.26, the configuration fails with the error message:

    CMake Error at CMakeLists.txt:345 (add_test):
      Error evaluating generator expression:

        $<TARGET_RUNTIME_DLL_DIRS:spirv-remap>

      Expression did not evaluate to a known generator expression

This happens in the Buildroot docker reference image, which provides a
cmake version 3.25. To workaround this issue which happen in glslang
testing code, this commit disable those tests by adding
GLSLANG_TESTS=OFF in _CONF_OPTS.

[1] https://github.com/KhronosGroup/glslang/commit/3805888a57c07904b6bbdec639bfe5f078e26342

Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
[Julien:
 - resolve merge conflict
 - update changelog link to use version tag
 - disable glslang tests
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 53076f0eba)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:44:16 +02:00
Bernd Kuhls ebe6cba2b1 {linux, linux-headers}: bump 6.{6, 12}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7a1d7189a0)
[thomas: dropped version 6.15]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:43:45 +02:00
Giulio Benetti 4b572de8e5 package/libblockdev: security bump to version 3.3.1
This version fixes CVE-2025-6019, see:
https://github.com/storaged-project/libblockdev/blob/3.3.1/NEWS.rst

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-6019

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add link to CVE]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0233c854b1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:42:04 +02:00
Romain Naour 3661052ce7 package/squashfs: update URL to source archive after Github changes
The squashfs 4.6.1 archive hash has been changed suddenly two weeks
ago by Github without any intended changes from the squashfs maintainer
[1].

The orginal squashfs 4.6.1 archive has been manually uploaded again.

Update the URL to download the archive that match the expected hash.

Since we don't use the github download helper anymore, the squashfs
archive name is changed from squashfs-4.6.1.tar.gz to
squashfs-tools-4.6.1.tar.gz.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/10355448207
(and many more...)

See:
[1] https://github.com/plougher/squashfs-tools/issues/313

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e374ae03b5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:42:00 +02:00
Bernd Kuhls 59425e9b4a package/clamav: security bump version to 1.0.9
Fixes CVE-2025-20260:
"The code flaw was present prior to version 1.0.0, but a change in
 version 1.0.0 that enables larger allocations based on untrusted data
 made it possible to trigger this bug."
https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 09f6aa642d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:54 +02:00
Bernd Kuhls e851f1341b package/mjpg-streamer: bump version to v1.0.0-1-g310b29f4
Add fix to build with cmake 4.x.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --tags --abbrev=40" format in _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f1adb7952d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:43 +02:00
Bernd Kuhls c54ca15c65 package/libplatform: bump version
Removed patch which is included in this release:
https://github.com/Pulse-Eight/platform/commit/e48db06c64613ac76c820511da95228bcd072f64

Use upstream-provided license file:
https://github.com/Pulse-Eight/platform/commit/92220248b11c43a80105567dbb074c5f30b04029

This bump includes compatibility with cmake 4.x:
https://github.com/Pulse-Eight/platform/commit/d7faed1c696b1a6a67f114a63a0f4c085f0f9195

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: remove patch entry in .checkpackageignore]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4da169b03e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:14 +02:00
Bernd Kuhls 4fe2c33f19 package/rapidjson: bump version
This bump includes compatibility with cmake 4.x:
https://github.com/Tencent/rapidjson/commit/ebd87cb468fb4cb060b37e579718c4a4125416c1

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6e2b109e96)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:09 +02:00
Bernd Kuhls 8d9eecf60a package/lpac: needs libqmi for optional support of libqrtr-glib
Buildroot commit dad998a807 added this
package but forgot to select libqmi for optional support of libqrtr-glib.

Fixes:
https://autobuild.buildroot.net/results/95e/95e30d1031912efa200edb9c7b926a31f0abe32f/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 03be706382)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:41:05 +02:00
Fiona Klute (WIWA) b057dce157 package/libndp: fix build with GCC 14 and musl
Patch has been pending upstream for a while [1], Alpine has merged an
older version that includes some whitespace damage but is functionally
equivalent.

[1] https://github.com/jpirko/libndp/pull/29

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0c2aa35fbe)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:57 +02:00
Gwenhael Goavec-Merou f22768cd7a package/python-remi: bump to master commit and fixes build failure
REMI hasn't received new release since July 2022 and is currently broken
with error:

Traceback (most recent call last):
  File "<string>", line 26, in <module>
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 116, in setup
    _install_setup_requires(attrs)
    ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 89, in _install_setup_requires
    _fetch_build_eggs(dist)
    ~~~~~~~~~~~~~~~~~^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 94, in _fetch_build_eggs
    dist.fetch_build_eggs(dist.setup_requires)
    ~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 80, in fetch_build_eggs
    raise SetupRequirementsError(specifier_list)
setuptools.build_meta.SetupRequirementsError: ['setuptools_scm']

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 389, in <module>
    main()
    ~~~~^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 373, in main
    json_out["return_val"] = hook(**hook_input["kwargs"])
                             ~~~~^^^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 143, in get_requires_for_build_wheel
    return hook(config_settings)
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 331, in get_requires_for_build_wheel
    return self._get_build_requires(config_settings, requirements=[])
           ~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 301, in _get_build_requires
    self.run_setup()
    ~~~~~~~~~~~~~~^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 512, in run_setup
    super().run_setup(setup_script=setup_script)
    ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/build_meta.py", line 317, in run_setup
    exec(code, locals())
    ~~~~^^^^^^^^^^^^^^^^
  File "<string>", line 31, in <module>
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/__init__.py", line 117, in setup
    return distutils.core.setup(**attrs)
           ~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/_distutils/core.py", line 148, in setup
    _setup_distribution = dist = klass(attrs)
                                 ~~~~~^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/dist.py", line 323, in __init__
    _Distribution.__init__(self, dist_attrs)
    ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/_distutils/dist.py", line 309, in __init__
    self.finalize_options()
    ~~~~~~~~~~~~~~~~~~~~~^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/dist.py", line 786, in finalize_options
    ep(self)
    ~~^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools/dist.py", line 806, in _finalize_setup_keywords
    ep.load()(self, ep.name, value)
    ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^
  File "/workdir/instance-0/output-1/host/lib/python3.13/site-packages/setuptools_scm/_integration/setuptools.py", line 82, in version_keyword
    assert isinstance(value, dict), "version_keyword expects a dict or True"
           ~~~~~~~~~~^^^^^^^^^^^^^
AssertionError: version_keyword expects a dict or True

ERROR Backend subprocess exited when trying to invoke get_requires_for_build_wheel
make: *** [package/pkg-generic.mk:273: /workdir/instance-0/output-1/build/python-remi-2022.7.27/.stamp_built] Error 1
make: Leaving directory '/workdir/instance-0/buildroot'

Since last release code has been corrected and now build end
successfully.

Another issue with remi is related to python CGI library no more available with
python 3.13. This patch also updates Config.in to add a select BR2_PACKAGE_PYTHON_LEGACY_CGI

This commit also updates the LICENSE file hash, because line ending
changed from "CR-LF" (Windows) in old release archive to "LF" (Unix)
in the github download. Apart from that, the content is the same.

Fixes:
- https://autobuild.buildroot.org/results/f0409533ebdc31e522f2ee2ea8a5acc11dbc7430/
- https://autobuild.buildroot.org/results/a16cf5105d4b726b5d4136a2d8f82abcfdc0faba/
- https://autobuild.buildroot.org/results/e7ac28e20ad92863d337e96c225463346ee6c690/

Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
[Julien:
 - use "git describe --abbrev=40" format in _VERSION
 - fix LICENSE hash
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 14ce0d2e6e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:15 +02:00
Fiona Klute (WIWA) 1e068c139d package/libglib2: security bump version to 2.84.3
Fixes CVE-2025-6052, see [1] (backport of "gstring: Fix overflow check
when expanding the string" [2] to the stable 2.84 series).

Release note:
https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.3

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-6052

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4656
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4655

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
[Julien: add link to CVE and release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0b5ad8157a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:08 +02:00
Marcus Hoffmann 7b0bec2580 package/ca-certificates: bump to 20250419
Changelog: https://metadata.ftp-master.debian.org/changelogs//main/c/ca-certificates/ca-certificates_20250419_changelog

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4a085462e4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:40:03 +02:00
Bernd Kuhls 025ad0dcf9 package/samba4: security bump version to 4.21.6
Release notes:
https://www.samba.org/samba/history/samba-4.21.5.html
https://www.samba.org/samba/history/samba-4.21.6.html

Version 4.21.6 fixes CVE-2025-0620:
https://www.samba.org/samba/security/CVE-2025-0620.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cae9a45e55)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:58 +02:00
Marcus Hoffmann dc4d5453f3 package/python-requests: update project homepage
http://www.python-requests.org/ is dead, the project lives on
https://requests.readthedocs.io/ now.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 15996bc4ff)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:54 +02:00
Marcus Hoffmann 9679e85fab package/python-requests: security bump to 2.32.4
Fixes: CVE-2024-47081
  Fixed an issue where a maliciously crafted URL and
  trusted environment will retrieve credentials for
  the wrong hostname/machine from a netrc file.

Release notes: https://github.com/psf/requests/releases/tag/v2.32.4

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit aefdca1e5c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:46 +02:00
Marcus Hoffmann 50c2a16694 package/python-django: security bump to 5.2.3
Followup release to 5.2.2 that completes the mitigations for
CVE-2025-48432[1].

Full changelog: https://docs.djangoproject.com/en/5.2/releases/5.2.3/

[1] https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 301587f5ef)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:42 +02:00
Bernd Kuhls 8e1aea0433 package/php: bump version to 8.3.22
Changelog: https://www.php.net/ChangeLog-8.php#8.3.22

Release notes:
https://news-web.php.net/php.announce/460

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1b4b429e89)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:37 +02:00
Bernd Kuhls c5e93c53d2 package/dht: fix cmake4 compatibility
The only dependee of dht, transmission, forked dht due to upstream
rejection of cmake support:
https://github.com/jech/dht/pull/50
https://github.com/jech/dht/pull/19

A fix was added to this fork for building with cmake 4.x:
https://github.com/transmission/dht/commits/post-0.27-transmission/

Instead of adding yet another patch to buildroot we switch to the repo
maintained by transmission.

Fixes:
https://autobuild.buildroot.org/results/30339a4fdb9c0b608ca3c5ae0692596b21b2fc3f/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --abbrev=40" format in _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1b5f8d04c8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:33 +02:00
Bernd Kuhls d173b8d722 package/python-glslang: fix host-python3 dependency
python-glslang is a host-only package and the host-python3 dependency
was wrongly added as target dependency with buildroot commit
f9fe0cf8f6.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 27a38cbcad)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:29 +02:00
Bernd Kuhls 3a264b42e2 package/libebur128: remove package
libebur128 was added to buildroot in July 2016 with commit
a32d29cd84 to provide an external
dependency for ffmpeg.

ffmpeg removed this external dependency and switched to an internal
version in November 2016 with upstream commit
http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=005d058f4230f3207ebcf1131df7426d4f57392f
which was first included in ffmpeg version 3.3.

Buildroot bumped ffmpeg to version 3.3 in April 2017 with commit
21d93a1351 and forgot to remove the
dependency to libebur128.

This went unnoticed until libebur128 fails to build with cmake 4.x.
Upstream saw its last commit four years ago. Instead of fixing an
unused package we removed it from buildroot.

Fixes:
https://autobuild.buildroot.org/results/e629bd151cc539f01b909e44d07e17451a29ba27/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6586a2b165)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:39:17 +02:00
Bernd Kuhls 2529507c7f package/bcg729: bump version to 1.1.1-3-g8bec1e5fc
This bump includes three patches which were added since version 1.1.1
to the cmake files:
https://github.com/BelledonneCommunications/bcg729/commits/master/

One of them fixes build errors with cmake 4.x:
https://github.com/BelledonneCommunications/bcg729/commit/e29952e7ceff64de6fc6f8db43e3b326481280be#diff-1e7de1ae2d059d21e1dd75d5812d5a34b0222cef273b7c3a2af62eb747f9d20aL23-L81

Fixes:
https://autobuild.buildroot.net/results/118/118349d20eae2dccdadab949065f6bc6471c825e/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: use "git describe --abbrev=40" format in _VERSION]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7139ffaf06)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:42 +02:00
Yann E. MORIN 7b7c8f3346 package/docker-credential-gcr: add LICENSE hash
The hash has for the license file been missing since the package was
introduced in commit 992d43b373 (package/docker-credential-gcr: new
package).

Add it now.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9cfaccee78)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:28 +02:00
Yann E. MORIN baa4ed68ea package/docker-credential-acr-env: add LICENSE hash
The hash has for the license file been missing since the package was
introduced in commit e679cd4974 (package/docker-credential-acr-env:
new package)

Add it now.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d1dff142a1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:23 +02:00
Yann E. MORIN b61cc3f432 package/amazon-ecr-credential-helper: add LICENSE hash
The hash has for the license file been missing since the package was
introduced in commit 9a95806225 (package/amazon-ecr-credential-helper:
new package).

Add it now.

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 36b0bf1f29)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:18 +02:00
Bernd Kuhls 3a528c9f5e {linux, linux-headers}: bump 6.{12, 14}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3a00ac13d8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-06-24 20:37:05 +02:00
Florian Larysch 51fc7d63b9 package/libssh2: bump to version 1.11.1
Release notes: https://libssh2.org/changes.html#1.11.1

Among other things, this release includes the patches previously carried
by Buildroot and also has fixes for build issues with mbedTLS 3.6.x. It
also includes a purely cosmetic copyright bump[1].

Builds with test-pkg against all three crypto providers.

Fixes: https://autobuild.buildroot.org/results/306/30699f986c6bcd1ab247d92c4ba0999f09aa226f

[1] https://github.com/libssh2/libssh2/commit/187d89bb0740400e8fa0b5f1441d089392797f53

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 980b8c7e54)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-06-12 12:36:07 +02:00
2990 changed files with 27715 additions and 35815 deletions
+129 -6
View File
@@ -1,10 +1,17 @@
board/amarula/vyasa/post-build.sh Shellcheck
board/andes/ae350/patches/uboot/0001-mmc-ftsdc010_mci-Support-DTS-of-ftsdc010-driver-for-.patch lib_patch.Upstream
board/andes/ae350/patches/uboot/0002-spl-Align-device-tree-blob-address-at-8-byte-boundar.patch lib_patch.Upstream
board/andes/ae350/post-build.sh Shellcheck
board/arcturus/aarch64-ucls1012a/post-build.sh Shellcheck
board/arcturus/aarch64-ucls1012a/post-image.sh Shellcheck
board/aspeed/common/post-image.sh Shellcheck
board/asus/tinker/post-build.sh Shellcheck
board/atmel/flasher.sh Shellcheck
board/beagleboard/beaglebone-qt5/patches/linux/0001-keep-jtag-clock-alive-for-debugger.patch lib_patch.Upstream
board/beagleboard/beaglebone/post-build.sh Shellcheck
board/beagleboard/beagleboneai/patches/uboot/0001-am57xx_evm-fixes.patch lib_patch.Upstream
board/beagleboard/beagleboneai/post-build.sh Shellcheck
board/beelink/gs1/post-build.sh Shellcheck
board/boundarydevices/common/post-build.sh Shellcheck
board/boundarydevices/common/post-image.sh Shellcheck
board/broadcom/northstar/post-image.sh Shellcheck
@@ -16,15 +23,25 @@ board/bsh/imx8mn-bsh-smm-s2/post-build.sh Shellcheck
board/canaan/k210-soc/post-build.sh Shellcheck
board/chromebook/elm/sign.sh Shellcheck
board/chromebook/mksd.sh Shellcheck
board/chromebook/snow/sign.sh Shellcheck
board/ci20/patches/uboot/0001-mips-Remove-default-endiannes.patch lib_patch.Upstream
board/freescale/common/imx/imx8-bootloader-prepare.sh Shellcheck
board/freescale/common/mxs/post-image.sh Shellcheck
board/friendlyarm/nanopi-r2s/post-build.sh Shellcheck
board/hardkernel/odroidc2/post-image.sh Shellcheck
board/hardkernel/odroidc2/rootfs_overlay/etc/init.d/S09modload Shellcheck lib_sysv.Variables
board/hardkernel/odroidxu4/post-image.sh Shellcheck lib_shellscript.EmptyLastLine
board/intel/galileo/patches/linux/0001-x86-relocs-Make-per_cpu_load_addr-static.patch lib_patch.Upstream
board/intel/galileo/post-build.sh Shellcheck
board/intel/galileo/rootfs_overlay/etc/init.d/S09modload Shellcheck lib_sysv.Variables
board/kontron/bl-imx8mm/post-build.sh Shellcheck
board/kontron/pitx-imx8m/patches/uboot/2022.04/0001-tools-mkeficapsule-use-pkg-config-to-get-luuid-and-l.patch lib_patch.NumberedSubject lib_patch.Upstream
board/kontron/pitx-imx8m/post-build.sh Shellcheck
board/kontron/smarc-sal28/post-build.sh Shellcheck
board/lego/ev3/post-image.sh Shellcheck
board/lemaker/bananapro/patches/linux/0001-arch-arm-boot-dts-sun7i-a20-bananapro.dts-disable-00.patch lib_patch.Upstream
board/lemaker/bananapro/post-build.sh Shellcheck
board/lemaker/bananapro/post-image.sh Shellcheck
board/minnowboard/post-build.sh Shellcheck
board/nexbox/a95x/post-build.sh Shellcheck
board/nexbox/a95x/post-image.sh Shellcheck
@@ -37,13 +54,22 @@ board/olimex/a20_olinuxino/post-build.sh Shellcheck
board/olimex/a33_olinuxino/post-build.sh Shellcheck
board/olpc/post-build.sh Shellcheck
board/orangepi/common/post-build.sh Shellcheck
board/orangepi/orangepi-lite2/post-build.sh Shellcheck
board/orangepi/orangepi-one-plus/post-build.sh Shellcheck
board/orangepi/orangepi-zero/patches/linux/0001-ARM-dts-orange-pi-zero-interrupt-triggering-xr819.patch lib_patch.Upstream
board/orangepi/orangepi-zero/patches/linux/0002-ARM-dts-orange-pi-zero-enable-spi-nor.patch lib_patch.Upstream
board/orangepi/orangepi-zero/patches/linux/0003-ARM-dts-orange-pi-zero-enable-spidev.patch lib_patch.Upstream
board/orangepi/orangepi-zero/patches/linux/0004-ARM-dts-orange-pi-zero-enable-uart.patch lib_patch.Upstream
board/pine64/rock64/patches/uboot/0001-Makefile-rk3328-needs-itb-image-to-boot-properly.patch lib_patch.Upstream
board/pine64/rock64/post-build.sh Shellcheck
board/qemu/aarch64-sbsa/assemble-flash-images Shellcheck
board/qemu/x86/post-build.sh Shellcheck
board/qemu/x86_64/post-build.sh Shellcheck
board/radxa/rockpi-n8/post-build.sh Shellcheck
board/raspberrypi/post-build.sh Shellcheck
board/raspberrypi/post-image.sh Shellcheck
board/roseapplepi/patches/uboot/0001-compiler-.h-sync-include-linux-compiler-.h-with-Linu.patch lib_patch.Upstream
board/roseapplepi/post-build.sh Shellcheck
board/seeed/stm32mp157c-odyssey/patches/linux/0001-ARM-dts-stm32-fix-stm32mp157c-odyssey-card-detect.patch lib_patch.Upstream
board/sheevaplug/patches/uboot/0001-Remove-redundant-YYLOC-global-declaration.patch lib_patch.Upstream
board/solidrun/clearfog/post-build.sh Shellcheck
@@ -56,6 +82,7 @@ board/stmicroelectronics/stm32f469-disco/flash_sd.sh Shellcheck
board/stmicroelectronics/stm32f469-disco/flash_xip.sh Shellcheck
board/synopsys/axs10x/post-build.sh Shellcheck
board/technologic/ts4900/post-image.sh Shellcheck
board/toradex/apalis-imx6/post-image.sh Shellcheck
board/udoo/common/post-build.sh Shellcheck
boot/afboot-stm32/0003-Makefile-disable-stack-protector.patch lib_patch.Upstream
boot/optee-os/3.13.0/0001-core-zlib-fix-build-warning-when-_LFS64_LARGEFILE-is.patch lib_patch.Upstream
@@ -74,10 +101,17 @@ boot/syslinux/0014-Fix-build-with-binutils-note-gnu-property-section.patch lib_p
boot/syslinux/0016-Workaround-multiple-definition-of-symbol-errors.patch lib_patch.Upstream
boot/syslinux/0017-Replace-builtin-strlen-that-appears-to-get-optimized.patch lib_patch.Upstream
configs/am574x_idk_defconfig lib_defconfig.ForceCheckHash
configs/andes_ae350_45_defconfig lib_defconfig.ForceCheckHash
configs/arcturus_ucls1012a_defconfig lib_defconfig.ForceCheckHash
configs/arcturus_ucp1020_defconfig lib_defconfig.ForceCheckHash
configs/aspeed_ast2500evb_defconfig lib_defconfig.ForceCheckHash
configs/aspeed_ast2600evb_defconfig lib_defconfig.ForceCheckHash
configs/asus_tinker-s_rk3288_defconfig lib_defconfig.ForceCheckHash
configs/asus_tinker_rk3288_defconfig lib_defconfig.ForceCheckHash
configs/at91sam9260eknf_defconfig lib_defconfig.ForceCheckHash
configs/at91sam9g20dfc_defconfig lib_defconfig.ForceCheckHash
configs/at91sam9g45m10ek_defconfig lib_defconfig.ForceCheckHash
configs/at91sam9rlek_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d27_som1_ek_mmc_dev_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d2_xplained_mmc_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d2_xplained_mmc_dev_defconfig lib_defconfig.ForceCheckHash
@@ -85,6 +119,7 @@ configs/atmel_sama5d3_xplained_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d3_xplained_dev_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d3_xplained_mmc_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d3_xplained_mmc_dev_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d3xek_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d4_xplained_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d4_xplained_dev_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d4_xplained_mmc_defconfig lib_defconfig.ForceCheckHash
@@ -94,13 +129,21 @@ configs/avnet_rzboard_v2l_defconfig lib_defconfig.ForceCheckHash
configs/bananapi_m2_berry_defconfig lib_defconfig.ForceCheckHash
configs/bananapi_m2_ultra_defconfig lib_defconfig.ForceCheckHash
configs/bananapi_m2_zero_defconfig lib_defconfig.ForceCheckHash
configs/bananapro_defconfig lib_defconfig.ForceCheckHash
configs/beelink_gs1_defconfig lib_defconfig.ForceCheckHash
configs/broadcom_northstar_defconfig lib_defconfig.ForceCheckHash
configs/canaan_kd233_defconfig lib_defconfig.ForceCheckHash
configs/ci20_defconfig lib_defconfig.ForceCheckHash
configs/engicam_imx6qdl_icore_defconfig lib_defconfig.ForceCheckHash
configs/engicam_imx6qdl_icore_qt5_defconfig lib_defconfig.ForceCheckHash
configs/engicam_imx6qdl_icore_rqs_defconfig lib_defconfig.ForceCheckHash
configs/engicam_imx6ul_geam_defconfig lib_defconfig.ForceCheckHash
configs/engicam_imx6ul_isiot_defconfig lib_defconfig.ForceCheckHash
configs/freescale_p1025twr_defconfig lib_defconfig.ForceCheckHash
configs/freescale_t1040d4rdb_defconfig lib_defconfig.ForceCheckHash
configs/freescale_t2080_qds_rdb_defconfig lib_defconfig.ForceCheckHash
configs/friendlyarm_nanopi_r2s_defconfig lib_defconfig.ForceCheckHash
configs/galileo_defconfig lib_defconfig.ForceCheckHash
configs/globalscale_espressobin_defconfig lib_defconfig.ForceCheckHash
configs/imx23evk_defconfig lib_defconfig.ForceCheckHash
configs/imx6-sabreauto_defconfig lib_defconfig.ForceCheckHash
@@ -113,8 +156,10 @@ configs/imx6ullevk_defconfig lib_defconfig.ForceCheckHash
configs/imx6ulpico_defconfig lib_defconfig.ForceCheckHash
configs/imx7dpico_defconfig lib_defconfig.ForceCheckHash
configs/imx8mqevk_defconfig lib_defconfig.ForceCheckHash
configs/imxrt1050-evk_defconfig lib_defconfig.ForceCheckHash
configs/khadas_vim3_defconfig lib_defconfig.ForceCheckHash
configs/kontron_bl_imx8mm_defconfig lib_defconfig.ForceCheckHash
configs/kontron_pitx_imx8m_defconfig lib_defconfig.ForceCheckHash
configs/kontron_smarc_sal28_defconfig lib_defconfig.ForceCheckHash
configs/mangopi_mq1rdw2_defconfig lib_defconfig.ForceCheckHash
configs/mender_x86_64_efi_defconfig lib_defconfig.ForceCheckHash
@@ -138,6 +183,7 @@ configs/nitrogen8mm_defconfig lib_defconfig.ForceCheckHash
configs/nitrogen8mn_defconfig lib_defconfig.ForceCheckHash
configs/nitrogen8mp_defconfig lib_defconfig.ForceCheckHash
configs/odroidc2_defconfig lib_defconfig.ForceCheckHash
configs/odroidxu4_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a10_olinuxino_lime_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a13_olinuxino_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a20_olinuxino_micro_defconfig lib_defconfig.ForceCheckHash
@@ -145,14 +191,26 @@ configs/olimex_a33_olinuxino_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a64_olinuxino_defconfig lib_defconfig.ForceCheckHash
configs/olpc_xo175_defconfig lib_defconfig.ForceCheckHash
configs/olpc_xo1_defconfig lib_defconfig.ForceCheckHash
configs/orangepi_lite2_defconfig lib_defconfig.ForceCheckHash
configs/orangepi_one_plus_defconfig lib_defconfig.ForceCheckHash
configs/orangepi_pc2_defconfig lib_defconfig.ForceCheckHash
configs/orangepi_zero_plus_defconfig lib_defconfig.ForceCheckHash
configs/pc_x86_64_bios_defconfig lib_defconfig.ForceCheckHash
configs/pc_x86_64_efi_defconfig lib_defconfig.ForceCheckHash
configs/pcengines_apu2_defconfig lib_defconfig.ForceCheckHash
configs/pine64_defconfig lib_defconfig.ForceCheckHash
configs/pine64_pinecube_defconfig lib_defconfig.ForceCheckHash
configs/pine64_sopine_defconfig lib_defconfig.ForceCheckHash
configs/pine64_star64_defconfig lib_defconfig.ForceCheckHash
configs/riotboard_defconfig lib_defconfig.ForceCheckHash
configs/rock64_defconfig lib_defconfig.ForceCheckHash
configs/rock_pi_n8_defconfig lib_defconfig.ForceCheckHash
configs/roseapplepi_defconfig lib_defconfig.ForceCheckHash
configs/s6lx9_microboard_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_lichee_rv_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_lichee_rv_dock_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_licheepi_nano_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_licheepi_zero_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_maix_bit_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_maix_bit_sdcard_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_maix_dock_defconfig lib_defconfig.ForceCheckHash
@@ -166,12 +224,15 @@ configs/snps_arc700_nsim_defconfig lib_defconfig.ForceCheckHash
configs/snps_archs38_axs103_defconfig lib_defconfig.ForceCheckHash
configs/snps_archs38_haps_defconfig lib_defconfig.ForceCheckHash
configs/snps_archs38_hsdk_defconfig lib_defconfig.ForceCheckHash
configs/socrates_cyclone5_defconfig lib_defconfig.ForceCheckHash
configs/solidrun_clearfog_gt_8k_defconfig lib_defconfig.ForceCheckHash
configs/solidrun_macchiatobin_defconfig lib_defconfig.ForceCheckHash
configs/stm32mp157c_odyssey_defconfig lib_defconfig.ForceCheckHash
configs/terasic_de10nano_cyclone5_defconfig lib_defconfig.ForceCheckHash
configs/toradex_apalis_imx6_defconfig lib_defconfig.ForceCheckHash
configs/ts4900_defconfig lib_defconfig.ForceCheckHash
configs/ts5500_defconfig lib_defconfig.ForceCheckHash
configs/ts7680_defconfig lib_defconfig.ForceCheckHash
configs/uevm5432_defconfig lib_defconfig.ForceCheckHash
configs/visionfive_defconfig lib_defconfig.ForceCheckHash
configs/wandboard_defconfig lib_defconfig.ForceCheckHash
@@ -202,6 +263,8 @@ package/android-tools/0010-adb-added-patch-for-openssl-1.1.0-compatibility.patch
package/aoetools/0001-Change-shell-script-interpreter-from-bin-bash-to-bin.patch lib_patch.Upstream
package/apache/0001-cross-compile.patch lib_patch.Upstream
package/apache/S50apache Shellcheck lib_sysv.Indent lib_sysv.Variables
package/apitrace/0001-thirdparty-libbacktrace-backtrace-h-include-config.h.patch lib_patch.Upstream
package/apitrace/0002-gltrace-Avoid-__libc_dlsym-and-__libc_dlopen_mode-on-GLIBC-2-34.patch lib_patch.Upstream
package/apr-util/0001-remove-checkapr.patch lib_patch.Upstream
package/apr/0001-sys-param-h.patch lib_patch.Upstream
package/apr/0002-Revert-Backport-r1872164.-Fix-the-name-of-libtool-wh.patch lib_patch.Upstream
@@ -215,6 +278,9 @@ package/asterisk/0004-install-samples-need-the-data-files.patch lib_patch.Upstre
package/at/0001-Makefile.in-fix-make-install-for-non-root-don-t-stri.patch lib_patch.Upstream
package/at/S99at lib_sysv.Indent lib_sysv.Variables
package/attr/0001-build-with-older-GCCs.patch lib_patch.Upstream
package/aufs-util/0001-remove-user-settings.patch lib_patch.Upstream
package/aufs-util/0002-no-check-ver.patch lib_patch.Upstream
package/aufs-util/0003-no-strip-lib.patch lib_patch.Upstream
package/aumix/0001-fix-incorrect-makefile-am.patch lib_patch.Upstream
package/autoconf/0001-dont-add-dirty-to-version.patch lib_patch.Upstream
package/automake/0001-noman.patch lib_patch.Upstream
@@ -227,7 +293,10 @@ package/bash/0001-input.h-add-missing-include-on-stdio.h.patch lib_patch.Upstrea
package/bash/0002-parse.y-fix-compilation-for-non-multibyte-builds.patch lib_patch.Upstream
package/bc/0001-bc-use-MAKEINFO-variable-for-docs.patch lib_patch.Upstream
package/bc/0002-notice-read-and-write-errors-on-input-and-output.patch lib_patch.Upstream
package/bc/0003-dc-fix-exit-code-of-q-command.patch lib_patch.Upstream
package/bc/0004-no-gen-libmath.patch lib_patch.Upstream
package/bcache-tools/0001-Don-t-inline-crc64-for-gcc-5-compatability.patch lib_patch.Upstream
package/bctoolbox/0001-Fix-Libs.private-flags-for-mbedtls.patch lib_patch.Upstream
package/bcusdk/0002-eibd-fix-endless-recursion-when-using-USB-backends.patch lib_patch.Upstream
package/bearssl/0001-Fix-missing-objdir-dependency.patch lib_patch.Upstream
package/benejson/0001-c-std.patch lib_patch.Upstream
@@ -267,8 +336,10 @@ package/cdrkit/0003-Add-extern-to-char-outfile-declaration-to-fix-build-.patch l
package/cfm/S65cfm lib_sysv.Indent lib_sysv.Variables
package/cgroupfs-mount/S30cgroupfs Shellcheck lib_sysv.Indent lib_sysv.Variables
package/chipmunk/0001-Fix-build-failure-on-musl.patch lib_patch.Upstream
package/chocolate-doom/0001-Remove-redundant-demoextend-definition.patch lib_patch.Upstream
package/chrony/S49chronyd lib_sysv.Variables
package/cmake/0001-rename-cmake-rootfile.patch lib_patch.Upstream
package/cmocka/0001-Don-t-redefine-uintptr_t.patch lib_patch.Upstream
package/collectd/0001-src-netlink.c-remove-REG_NOERROR.patch lib_patch.Upstream
package/connman/S45connman lib_sysv.Variables
package/copas/0001-Do-not-load-coxpcall-for-LuaJIT.patch lib_patch.Upstream
@@ -315,6 +386,9 @@ package/dhcp/S80dhcp-relay Shellcheck lib_sysv.Variables
package/dhcp/S80dhcp-server Shellcheck lib_sysv.Variables
package/dhcp/dhclient-script Shellcheck lib_shellscript.TrailingSpace
package/dhcpcd/S41dhcpcd lib_sysv.Indent lib_sysv.Variables
package/dillo/0001-usr-local-include.patch lib_patch.Upstream
package/dillo/0002-Fix-openssl-detection.patch lib_patch.Upstream
package/dillo/0004-fix-build-with-gcc-10.patch lib_patch.Upstream
package/dmalloc/0001-configure-fix-build-on-mips.patch lib_patch.Upstream
package/dmalloc/0003-configure-allow-overriding-some-tests.patch lib_patch.Upstream
package/dmalloc/0004-Makefile-use-the-configure-detected-or-user-supplied.patch lib_patch.Upstream
@@ -332,6 +406,7 @@ package/dt/0002-dt-default-source-define.patch lib_patch.Upstream
package/dtc/0001-Fix-include-guards-for-older-kernel-u-boot-sources.patch lib_patch.Upstream
package/dvblast/0001-missing-lm.patch lib_patch.Upstream
package/dvblast/0002-fix-int-types.patch lib_patch.Upstream
package/dvbsnoop/0001-musl-types-h.patch lib_patch.Upstream
package/dvdrw-tools/0001-limits.h.patch lib_patch.Upstream
package/dvdrw-tools/0002-Include-sysmacros.h-to-compile-with-newer-gcc.patch lib_patch.Upstream
package/earlyoom/0001-main.c-fix-build-with-kernel-4.3.patch lib_patch.Upstream
@@ -351,6 +426,7 @@ package/elfutils/0002-Really-make-Werror-conditional-to-BUILD_WERROR.patch lib_p
package/erlang-rebar/0001-src-rebar_port_compiler-add-fPIC-to-LDFLAGS-by-defau.patch lib_patch.Upstream
package/espeak/0001-Fix-build-of-shared-library-on-architectures-needing.patch lib_patch.Upstream
package/espeak/0002-tr_languages-cast-string_ordinal-init-values.patch lib_patch.Upstream
package/eudev/S10udev Shellcheck lib_sysv.ConsecutiveEmptyLines lib_sysv.Indent lib_sysv.Variables
package/evemu/0001-Include-limits.h-for-PATH_MAX.patch lib_patch.Upstream
package/evemu/0002-evemu-Update-struct-input_event.patch lib_patch.Upstream
package/evemu/0003-src-evemu.c-fix-build-with-kernels-4.16.patch lib_patch.Upstream
@@ -359,6 +435,8 @@ package/exim/0001-Build-buildconfig-for-the-host.patch lib_patch.Upstream
package/exim/0002-Don-t-make-backup-copies-of-installed-files.patch lib_patch.Upstream
package/exim/0003-Skip-version-check-and-symlink-installation.patch lib_patch.Upstream
package/exim/S86exim lib_sysv.Indent lib_sysv.Variables
package/expect/0001-enable-cross-compilation.patch lib_patch.Upstream
package/expect/0002-allow-tcl-build-directory.patch lib_patch.Upstream
package/fail2ban/S60fail2ban Shellcheck lib_sysv.Variables
package/fakedate/fakedate Shellcheck
package/falcosecurity-libs/0001-cmake-Permit-setting-GRPC_CPP_PLUGIN.patch lib_patch.Upstream
@@ -396,9 +474,9 @@ package/ftop/0001-overflow.patch lib_patch.Upstream
package/fwts/0001-build-do-not-use-Werror.patch lib_patch.Upstream
package/fxdiv/0001-CMake-don-t-enable-CXX-unless-building-tests-benchma.patch lib_patch.Upstream
package/fxload/0001-fix-static-build.patch lib_patch.Upstream
package/gcc/12.4.0/0001-disable-split-stack-for-non-thread-builds.patch lib_patch.Upstream
package/gcc/13.4.0/0001-disable-split-stack-for-non-thread-builds.patch lib_patch.Upstream
package/gcc/14.3.0/0001-disable-split-stack-for-non-thread-builds.patch lib_patch.Upstream
package/gcc/15.2.0/0001-disable-split-stack-for-non-thread-builds.patch lib_patch.Upstream
package/gcc/8.4.0/0001-xtensa-fix-PR-target-91880.patch lib_patch.Upstream
package/gcc/8.4.0/0002-Revert-re-PR-target-92095-internal-error-with-O1-mcp.patch lib_patch.Upstream
package/gcc/8.4.0/0003-libsanitizer-Remove-cyclades-from-libsanitizer.patch lib_patch.Upstream
@@ -442,7 +520,8 @@ package/gnupg/0001-build-Always-use-EXTERN_UNLESS_MAIN_MODULE-pattern.patch lib_
package/gnuplot/0001-configure-add-without-demo-option.patch lib_patch.Upstream
package/go/go-src/0001-build.go-explicit-option-for-crosscompilation.patch lib_patch.Upstream
package/gob2/0001-dont-include-from-prefix.patch lib_patch.Upstream
package/gobject-introspection/0001-Add-rpath-links-to-ccompiler.patch lib_patch.Upstream
package/gobject-introspection/0001-disable-tests.patch lib_patch.Upstream
package/gobject-introspection/0002-Add-rpath-links-to-ccompiler.patch lib_patch.Upstream
package/gpsd/S50gpsd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/gptfdisk/0001-gptcurses-partially-revert-Tweaks-for-building-on-th.patch lib_patch.Upstream
package/graphite2/0001-don-t-install-a-libtool-file-with-static-library.patch lib_patch.Upstream
@@ -450,14 +529,17 @@ package/grpc/0003-disable-unconditionally-downloading-api-repos.patch lib_patch.
package/gstreamer1/gstd/0001-Don-t-require-gstd-check-user-xenv.sh-for-systemd-se.patch lib_patch.Upstream
package/guile/0001-calculate-csqrt_manually.patch lib_patch.Upstream
package/guile/0002-Makefile.am-fix-build-without-makeinfo.patch lib_patch.Upstream
package/gumbo-parser/0001-configure.ac-fix-build-without-C.patch lib_patch.Upstream
package/gutenprint/0001-use-pregen-xmli18n-header.patch lib_patch.Upstream
package/gutenprint/0002-cups-support-replaces-static-with-static-libtool-lib.patch lib_patch.Upstream
package/gvfs/0001-build-Remove-incorrect-i18n.merge_file-argument.patch lib_patch.Upstream
package/harfbuzz/0001-meson.build-check-for-pthread.h.patch lib_patch.Upstream
package/haserl/0001-add-haserl_lualib.inc.patch lib_patch.Upstream
package/haveged/S21haveged Shellcheck lib_sysv.Variables
package/heirloom-mailx/0001-fix-libressl-support.patch lib_patch.Upstream
package/hplip/0001-build-use-pkg-config-to-discover-libusb.patch lib_patch.Upstream
package/hplip/0002-configure.in-fix-AM_INIT_AUTOMAKE-call.patch lib_patch.Upstream
package/htpdate/S43htpdate Shellcheck
package/i2pd/S99i2pd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/i7z/0001-fix-build-with-gcc-10.patch lib_patch.Upstream
package/ibm-sw-tpm2/0001-Use-LONG_BIT-to-define-RADIX_BITS.patch lib_patch.Upstream
@@ -465,8 +547,9 @@ package/ibrcommon/0001-ibrcommon-data-File.cpp-support-POSIX-basename-call.patch
package/ibrcommon/0002-ibrcommon-added-openssl-1.1-compatibility-264.patch lib_patch.Upstream
package/ibrcommon/0003-ibrcommon-ssl-gcm-fix-static-build-with-openssl.patch lib_patch.Upstream
package/icu/0001-dont-build-static-dynamic-twice.patch lib_patch.Upstream
package/icu/0002-link-icudata-as-data-only.patch lib_patch.Upstream
package/icu/0003-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
package/icu/0002-workaround-toolchain-bugs.patch lib_patch.Upstream
package/icu/0003-link-icudata-as-data-only.patch lib_patch.Upstream
package/icu/0004-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
package/ifmetric/0001-Fix-issue-NETLINK-Packet-too-small-or-truncated-92-1.patch lib_patch.Upstream
package/ifplugd/0001-cross.patch lib_patch.Sob lib_patch.Upstream
package/ifplugd/0002-fix-headers.patch lib_patch.Sob lib_patch.Upstream
@@ -504,7 +587,7 @@ package/irqbalance/S13irqbalance Shellcheck lib_sysv.Indent lib_sysv.Variables
package/irrlicht/0001-override-CPPFLAGS-CXXFLAGS-and-CFLAGS-in-Makefile.patch lib_patch.Upstream
package/irrlicht/0002-makefile-override-LDFLAGS-and-remove-obsolete-X11R6-.patch lib_patch.Upstream
package/iucode-tool/S00iucode-tool lib_sysv.Variables
package/iwd/S40iwd Shellcheck
package/iwd/S40iwd Shellcheck lib_sysv.Variables
package/janus-gateway/0001-disable-ssp.patch lib_patch.Upstream
package/kexec-lite/0001-clean-restart.patch lib_patch.Upstream
package/keyutils/0001-fix-install-rule.patch lib_patch.Upstream
@@ -555,6 +638,7 @@ package/libfuse/0002-util-ulockmgr_server-c-conditionally-define-closefrom-fix-g
package/libgcrypt/0001-configure.ac-add-an-option-to-disable-tests.patch lib_patch.Upstream
package/libgpiod/0001-build-add-a-configure-switch-for-building-examples.patch lib_patch.Upstream
package/libgsm/0001-Misc-fixes-from-Archlinux.patch lib_patch.Upstream
package/libgtk2/0001-reduce-dependencies.patch lib_patch.Upstream
package/libgtk3/0001-Remove-Gdk-dependency-from-gtk-encode-symbolic-svg.patch lib_patch.Upstream
package/libhdhomerun/0001-dont-strip.patch lib_patch.Upstream
package/libiio/S99iiod Shellcheck lib_sysv.Variables
@@ -583,6 +667,7 @@ package/libnetfilter_conntrack/0001-conntrack-fix-build-with-kernel-5-15-and-mus
package/libnfc/0001-autotools-make-example-build-optional.patch lib_patch.Upstream
package/libnids/0001-libpcap-use-pkg-config.patch lib_patch.Upstream
package/libnss/0001-Bug-1801182-Allow-overriding-OS_ARCH-OS_TEST-and-OS_.patch lib_patch.Upstream
package/liboauth/0001-Fixes-build-issue-with-OpenSSL-1.1.0.patch lib_patch.Upstream
package/libodb-mysql/0001-fix-syntax-issue-while-checking-ldflags.patch lib_patch.Upstream
package/libodb-mysql/0002-mariadb-FTBFS-fix.patch lib_patch.Upstream
package/libopenssl/0001-Reproducible-build-do-not-leak-compiler-path.patch lib_patch.Upstream
@@ -595,9 +680,11 @@ package/liboping/0005-src-oping.c-always-use-s-style-format-for-printf-sty.patch
package/libp11/0001-src-p11_attr.c-fix-build-with-gcc-4.8.patch lib_patch.Upstream
package/libpthsem/0001-fix-build-on-linux-3.x-host.patch lib_patch.Upstream
package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch lib_patch.Upstream
package/libroxml/0001-src-roxml_mem.h-add-missing-extern.patch lib_patch.Upstream
package/librsvg/0001-gdk-pixbuf-loader-Makefile.am-set-GDK_PIXBUF_MODULED.patch lib_patch.Upstream
package/librtlsdr/0001-Makefile.am-respect-DESTDIR-with-install-udev-rules.patch lib_patch.Upstream
package/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch lib_patch.Upstream
package/libsepol/0001-support-static-only.patch lib_patch.Upstream
package/libserial/0001-SerialPort.cpp-fix-build-when-size_t-is-an-unsigned-.patch lib_patch.Upstream
package/libserial/0002-SerialPort.cpp-don-t-use-high-baudrates-when-not-ava.patch lib_patch.Upstream
package/libshdata/0001-backend-Add-missing-include-files.patch lib_patch.Upstream
@@ -609,17 +696,25 @@ package/libsigrok/0001-Support-glibmm-2.68.patch lib_patch.Upstream
package/libsigrokdecode/0001-configure-ac-Add-support-for-Python-3-9.patch lib_patch.Upstream
package/libsigrokdecode/0002-configure-Add-python-3-10-support.patch lib_patch.Upstream
package/libsigrokdecode/0003-configure-ac-Use-python3-embed-pc-as-a-fallback.patch lib_patch.Upstream
package/libsoup/0001-meson.build-set-c_std-to-gnu99.patch lib_patch.Upstream
package/libsoxr/0001-Add-Libs.private-for-static-linking.patch lib_patch.Upstream
package/libspatialindex/0001-allow-building-static-libs.patch lib_patch.Upstream
package/libspatialindex/0002-CMakeLists.txt-fix-CMAKE_BUILD_TYPE.patch lib_patch.Upstream
package/libsquish/0001-Makefile-add-f-option-for-ln-to-remove-existing-dest.patch lib_patch.Upstream
package/libsvg/0001-fix-expat-static-declaration.patch lib_patch.Upstream
package/libsvg/0002-Fix-undefined-symbol-png_set_gray_1_2_4_to_8.patch lib_patch.Upstream
package/libsvgtiny/0001-disable-debug-printfs.patch lib_patch.Upstream
package/libsvgtiny/0002-Remove-Werror.patch lib_patch.Upstream
package/libsvgtiny/0003-Hopefully-silence-warnings-about-inlines-and-non-inlines-calling-one.patch lib_patch.Upstream
package/libsvgtiny/0004-Build-Include-gperf-generated-code-directly.patch lib_patch.Upstream
package/libtalloc/0001-buildtools-wafsamba-add-disable-stack-protector-opti.patch lib_patch.Upstream
package/libtelnet/0001-fix-compilation-without-zlib.patch lib_patch.Upstream
package/libtheora/0001-link-libtheoradec.patch lib_patch.Upstream
package/libtomcrypt/0001-fix-CVE-2019-17362.patch lib_patch.Upstream
package/libtommath/0001-Build-test-bn_mp_set_double-c-on-more-platforms.patch lib_patch.Upstream
package/libtorrent/0001-libtorrent.pc.in-add-Libs.Private.patch lib_patch.Upstream
package/libubootenv/0001-src-CMakeLists.txt-do-not-force-the-build-of-a-share.patch lib_patch.Upstream
package/libuhttpd/0001-add-compatibility-for-wolfssl-5-0.patch lib_patch.Upstream
package/libuio/0001-configure.ac-set-automake-strictness-to-foreign.patch lib_patch.Upstream
package/liburcu/0001-Only-blacklist-ARM-gcc-4.8.0-and-4.8.1.patch lib_patch.Upstream
package/libvpx/0001-vpx_mem-vpx_mem.h-Fix-compilation-with-uClibc.patch lib_patch.Upstream
@@ -628,6 +723,7 @@ package/lighttpd/0001-Modify-the-default-lighttpd-configuration-file-to-ha.patch
package/lighttpd/S50lighttpd Shellcheck lib_sysv.EmptyLastLine lib_sysv.Indent lib_sysv.Variables
package/linknx/0001-configure-ac-tweak-CPPUNIT-conditional.patch lib_patch.Upstream
package/linknx/0002-src-Makefile.am-fix-linking-with-log4cpp.patch lib_patch.Upstream
package/linphone/0001-src-core-paths-paths.cpp-fix-powerpc-build.patch lib_patch.Upstream
package/linux-zigbee/0001-test-serial-Remove-test-serial.patch lib_patch.Upstream
package/linux-zigbee/0002-addrdb-coord-config-parse.y-add-missing-time.h-inclu.patch lib_patch.Upstream
package/linuxptp/S65ptp4l Shellcheck lib_sysv.Indent
@@ -637,6 +733,8 @@ package/lirc-tools/0002-configure-add-disable-doc-option.patch lib_patch.Upstrea
package/lirc-tools/S25lircd lib_sysv.Indent lib_sysv.Variables
package/live555/0001-Add-a-pkg-config-file-for-the-shared-libraries.patch lib_patch.Upstream
package/lldpd/S60lldpd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/llvm-project/clang/0001-lib-Driver-ToolChains-Gnu-Use-GCC_INSTALL_PREFIX-in-.patch lib_patch.Upstream
package/llvm-project/libclc/0001-support-out-of-tree-build.patch lib_patch.Upstream
package/lm-sensors/0001-static-build.patch lib_patch.Upstream
package/lm-sensors/0002-no-host-ldconfig.patch lib_patch.Upstream
package/lmbench/0001-scripts-build-use-bin-bash-as-shell.patch lib_patch.Upstream
@@ -649,6 +747,7 @@ package/lockfile-progs/0001-sus3v-legacy.patch lib_patch.Sob lib_patch.Upstream
package/lshw/0001-solve-Compile-error-when-g-version-is-less-than-5.patch lib_patch.Upstream
package/ltrace/0001-arm-plt.patch lib_patch.Upstream
package/ltrace/0002-sparc-add-missing-library.h-include.patch lib_patch.Upstream
package/ltrace/0003-configure.ac-fix-autoreconf-with-autoconf-2.70.patch lib_patch.Upstream
package/lttng-babeltrace/0001-tests-lib-Makefile.am-remove-unneeded-static-flag.patch lib_patch.Upstream
package/lttng-babeltrace/0002-configure.ac-fix-popt-static-build.patch lib_patch.Upstream
package/lttng-libust/0001-configure.ac-add-disable-tests.patch lib_patch.Upstream
@@ -683,19 +782,27 @@ package/matchbox-panel/0003-mb-applet-battery.patch lib_patch.Upstream
package/matchbox-startup-monitor/0001-true-false.patch lib_patch.Upstream
package/matchbox/0001-defaulttheme.patch lib_patch.Upstream
package/matchbox/0002-src-Fix-build-with-gcc-10.patch lib_patch.Upstream
package/mediastreamer/0001-src-videofilters-nowebcam.c-fix-build-without-ffmpeg.patch lib_patch.Upstream
package/mediastreamer/0002-Use-AV_INPUT_BUFFER_PADDING_SIZE-to-determine-paddin.patch lib_patch.Upstream
package/memstat/0001-PATH_MAX.patch lib_patch.Upstream
package/mender-connect/S43mender-connect Shellcheck
package/menu-cache/0001-Support-gcc10-compilation.patch lib_patch.Upstream
package/mesa3d-demos/0001-demos-makes-opengl-an-optional-component.patch lib_patch.Upstream
package/mesa3d/0001-meson-Set-proper-value-for-LIBCLC_INCLUDEDIR.patch lib_patch.Upstream
package/meson-tools/0001-amlbootenc-gxl-remove-non-std-C-convention-in-for.patch lib_patch.Upstream
package/meson/0001-Prefer-ext-static-libs-when-default-library-static.patch lib_patch.Upstream
package/meson/0002-mesonbuild-dependencies-base.py-add-pkg_config_stati.patch lib_patch.Upstream
package/metacity/0001-add-libm-reference.patch lib_patch.Upstream
package/metacity/0002-gconf.patch lib_patch.Upstream
package/metacity/0003-mag-add-libm-reference.patch lib_patch.Upstream
package/mfgtools/0001-lnx_def.h-fix-conflicting-declaration-of-__time64_t.patch lib_patch.Upstream
package/mii-diag/0001-strchr.patch lib_patch.Sob lib_patch.Upstream
package/mini-snmpd/0001-linux.c-fix-musl-build.patch lib_patch.Upstream
package/minidlna/S60minidlnad Shellcheck lib_sysv.Indent lib_sysv.Variables
package/minissdpd/S50minissdpd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/modem-manager/S44modem-manager Shellcheck lib_sysv.Variables
package/mongrel2/0001-Do-not-run-tests.patch lib_patch.Upstream
package/mongrel2/0002-Fix-Makefiles-for-cross-compilation.patch lib_patch.Upstream
package/monit/0001-Do-not-force-building-a-statically-linked-binary.patch lib_patch.Upstream
package/mono-gtksharp3/0001-Fixes-MONO_PROFILE_ENTER_LEAVE-undeclared.patch lib_patch.Upstream
package/mono-gtksharp3/0002-Mono-compilation-error-branch.patch lib_patch.Upstream
@@ -729,6 +836,7 @@ package/netplug/0002-add-missing-time-include.patch lib_patch.Upstream
package/netplug/0003-remove-assert-fail.patch lib_patch.Upstream
package/netplug/S29netplug Shellcheck lib_sysv.Indent lib_sysv.Variables
package/netplug/netplug-script Shellcheck lib_shellscript.ConsecutiveEmptyLines
package/netsniff-ng/0001-Detect-libpcap-dependencies-using-pkg-config.patch lib_patch.Upstream
package/netsnmp/S59snmpd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/netsurf/0001-avoid-system-perl-dependencies.patch lib_patch.Upstream
package/netsurf/0002-do-not-cross-compile-nsgenbind.patch lib_patch.Upstream
@@ -762,7 +870,9 @@ package/ntpsec/0001-wscript-remove-checks-for-bsd-string.h-fixes-host-co.patch l
package/nuttcp/0001-susv3-legacy.patch lib_patch.Upstream
package/nvidia-driver/0001-use-LDFLAGS.patch lib_patch.Upstream
package/octave/0001-Fix-BLAS-library-integer-size-detection.patch lib_patch.Upstream
package/ofono/0001-uclibc-backtrace.patch lib_patch.Upstream
package/ofono/S46ofono lib_sysv.Variables
package/ola/0001-ola-fix-compilation-with-musl-1-2-3.patch lib_patch.Upstream
package/olsr/0001-olsrd-migrate-to-using-bison-3.7.1.patch lib_patch.Upstream
package/olsr/0002-lib-pud-Makefile-fix-parallel-build.patch lib_patch.Upstream
package/olsr/0003-pud-adapt-to-API-changes-in-gpsd-3-20.patch lib_patch.Upstream
@@ -909,6 +1019,7 @@ package/rapidxml/0001-ensure-internal-print-operations-are-declared-before.patch
package/read-edid/0001-Fix-install-file-list.patch lib_patch.Upstream
package/read-edid/0002-Fix-compiler-check.patch lib_patch.Upstream
package/read-edid/0003-fix-build-with-gcc-10.patch lib_patch.Upstream
package/readline/0001-curses-link.patch lib_patch.Upstream
package/redis/0001-uclibc.patch lib_patch.Upstream
package/redis/0002-largefile-conditional-define.patch lib_patch.Upstream
package/redis/0003-redis.conf-adjust-defauts-for-buildroot.patch lib_patch.Upstream
@@ -943,6 +1054,8 @@ package/screen/0002-Change-binary-permission-flags-even-if-chown-fails.patch lib
package/screen/0003-Support-overriding-SCREEN-to-get-a-non-versioned-bin.patch lib_patch.Upstream
package/screen/0004-Renamed-sched.h-to-eventqueue.h.patch lib_patch.Upstream
package/scrub/0001-configure-ac-make-sure-m4-macros-are-included-in-the-build.patch lib_patch.Upstream
package/sdl/0001-fix-compilation-with-libx11.patch lib_patch.Upstream
package/sdl/0002-SDL_x11yuv.c-fix-possible-use-after-free.patch lib_patch.Upstream
package/sdl_mixer/0001-Add-Libs.private-field-to-pkg-config-file.patch lib_patch.Upstream
package/sdl_mixer/0002-configure__set_macro_directory.patch lib_patch.Upstream
package/sdl_mixer/0003-configure.ac-fix-static-linking-with-tremor.patch lib_patch.Upstream
@@ -955,6 +1068,7 @@ package/sentry-native/0001-sentry.h-include-ucontext.h.patch lib_patch.Upstream
package/ser2net/S50ser2net Shellcheck lib_sysv.Indent lib_sysv.Variables
package/setools/0001-Do-not-export-use-setools.InfoFlowAnalysis-and-setoo.patch lib_patch.Upstream
package/setserial/0001-build-system-fix.patch lib_patch.Upstream
package/setserial/0002-tiocghayesesp-build-fix.patch lib_patch.Upstream
package/shadowsocks-libev/0001-configure.ac-use-pkg-config-to-find-netfilter_conntr.patch lib_patch.Upstream
package/shadowsocks-libev/0002-fix-maybe-uninitialized-errors.patch lib_patch.Upstream
package/shadowsocks-libev/0003-lib-Makefile.am-remove-static-from-LDFLAGS.patch lib_patch.Upstream
@@ -976,6 +1090,7 @@ package/snort/0005-fix-sparc.patch lib_patch.Upstream
package/snort/0006-Fix-compile-error-when-building-against-uclibc-or-mu.patch lib_patch.Upstream
package/snort/0007-Fix-error-when-building-on-a-Fedora-host-machine.patch lib_patch.Upstream
package/snort/0008-Fix-NO-OPTIMIZE.patch lib_patch.Upstream
package/socketcand/0001-Fix-GCC10-build-failure.patch lib_patch.Upstream
package/softether/0001-Create-autotools-plumbing-for-SoftEther.patch lib_patch.Upstream
package/softether/0002-Create-libsoftether.so-and-dynamically-link.patch lib_patch.Upstream
package/softether/0003-use-fhs-install-directories.patch lib_patch.Upstream
@@ -1009,6 +1124,7 @@ package/supervisor/S99supervisord lib_sysv.Variables
package/suricata/0001-configure.ac-allow-the-user-to-override-RUST_TARGET.patch lib_patch.Upstream
package/suricata/S99suricata Shellcheck
package/swupdate/swupdate.sh Shellcheck
package/sylpheed/0001-harden-link-checker-before-accepting-click.patch lib_patch.Upstream
package/sysvinit/0001-Makefile-disable-stack-protector-strong.patch lib_patch.Upstream
package/tar/0001-lib-getrandom.c-fix-build-with-uclibc-1.0.35.patch lib_patch.Upstream
package/targetcli-fb/S50target Shellcheck lib_sysv.Variables
@@ -1026,9 +1142,12 @@ package/ti-sgx-um/0001-Makefile-do-not-install-init-script.patch lib_patch.Upstr
package/ti-sgx-um/S80ti-sgx lib_sysv.Variables
package/ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
package/tinyalsa/0001-include-time.h-before-asound.h.patch lib_patch.Upstream
package/tinycbor/0001-Makefile-add-DISABLE_WERROR.patch lib_patch.Upstream
package/tinycompress/0001-wave-add-time.h-missing-header-inclusion.patch lib_patch.Upstream
package/tinydtls/0001-sha2-sha2.c-fix-build-on-big-endian.patch lib_patch.Upstream
package/tinyxml/0001-In-stamp-always-advance-the-pointer-if-p-0xef.patch lib_patch.Upstream
package/tpm2-abrmd/S80tpm2-abrmd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/tpm2-tss/0001-Temporary-fix-for-build-without-C.patch lib_patch.Upstream
package/transmission/S92transmission Shellcheck lib_sysv.ConsecutiveEmptyLines lib_sysv.Indent lib_sysv.Variables
package/triggerhappy/S10triggerhappy Shellcheck lib_sysv.Indent lib_sysv.Variables
package/trinity/0001-Fix-build-with-GCC-10.patch lib_patch.Upstream
@@ -1042,7 +1161,8 @@ package/tstools/0001-build-get-along-with-buildroot.patch lib_patch.Upstream
package/tvheadend/0001-no-check_config.patch lib_patch.Upstream
package/tvheadend/S99tvheadend Shellcheck lib_sysv.Indent lib_sysv.Variables
package/uboot-tools/0001-drop-configh-from-tools.patch lib_patch.Upstream
package/uboot-tools/0002-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
package/uboot-tools/0002-tools-only-in-no-dot-config-targets.patch lib_patch.Upstream
package/uboot-tools/0003-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
package/ubus/0001-Install-server-and-client-examples.patch lib_patch.Upstream
package/uemacs/01-clear-ixon-termios-flag.patch lib_patch.Upstream
package/uhd/0001-host-CMakeLists-add-boost-unit_test_framework-requir.patch lib_patch.Upstream
@@ -1098,6 +1218,9 @@ package/vte/0002-build-Fix-check-for-fstack-protector-compiler-support.patch lib
package/vtun/0001-fix-installation.patch lib_patch.Upstream
package/vtun/0002-fix-ssl-headers-checks.patch lib_patch.Upstream
package/vtun/0003-openssl11.patch lib_patch.Upstream
package/waffle/0001-cmake-forward-cflags-from-.pc-files-to-waffle-cflags.patch lib_patch.Upstream
package/waffle/0002-wayland-fix-build-against-version-1-20.patch lib_patch.Upstream
package/waffle/0003-drop-C-dependency.patch lib_patch.Upstream
package/wampcc/0001-Add-RISC-V-endian-detection.patch lib_patch.Upstream
package/wampcc/0002-include-wampcc-platform.h-fix-build-with-musl-1.2.0.patch lib_patch.Upstream
package/wampcc/0003-Broken-build-on-Windows.patch lib_patch.Upstream
-829
View File
@@ -1,437 +1,3 @@
2025.11-rc2, released November 30th, 2025
Fixes all over the tree.
Infrastructure: support/scripts/check-merged (introduced in
2025.11-rc1) no longer relies on getopt from util-linux
Defconfigs: pine64 star: Update U-Boot and Linux kernel to fix
builds with GCC 14.x
Updated/fixed packages: 18xx-ti-utils, depot-tools, e2fsprogs,
enscript, fio, gnutls, intel-mediadriver, intel-vpl-gpu-rt,
ledmon, libpng, libteam, lmbench, mongoose, netsnmp,
nss-pam-ldapd, open-plc-utils, oprofile, pdmenu, php-apcu,
php-pecl-dbus, php-xdebug, php-yaml, python-flask-restx,
python-pysocks, python-starlette, sane-backends, sbc, sdl,
stress-ng, swipl, syslinux, time, tmux, tor, uboot-tools,
woff2, xfsprogs, yaml-cpp
Removed packages: libargtable2, starfive-spltool
2025.11-rc1, released November 20th, 2025
Fixes all over the tree and new features.
Infrastructure:
- Support merged /usr/sbin/ (E.G. sbin a symlink to bin rather
than separate directories), which is required by systemd
256+
- support/scripts/cve-check can now be used to enrich a SBOM
in CycloneDX format (as generated by
utils/generate-cyclonedx) with vulnerability analysis from
the NVD database.
Dropped a number of old and unmaintained packages and external
toolchains.
New defconfigs: Compulab IOT-GATE-iMX8 EBBR, QEMU x86-64 EFI
Removed defconfigs: at91sam9260eknf, atmel_sama5d3xek,
roseapplepi
New packages: broot, bvi, go-bootstrap-stage4, libpam-pkcs11,
llama-cpp, nnn, python-crccheck, python-fs, python-patch-ng,
python-pyfatfs, python-scp, python-whitenoise, snapboot, wmenu
Removed packages: aufs, aufs-util, axfsutils, bctoolbox,
belle-sip, belr, dmenu-wayland, dvbsnoop,
ev3dev-linux-drivers, expect, fbtft, gtk2-engines, gtkperf,
leafpad, lesstif, libbson, libglade, libgtk2, libjwt, libsexy,
linphone, logsurfer, mediastreamer, metacity, mongrel2, ola,
ortp, procrank_linux, ramspeed, sylpheed
2025.08.2, released November 20, 2025
Important / security related fixes:
- bind: CVE-2025-8677, CVE-2025-40778, CVE-2025-40780
- dante: CVE-2024-54662
- erlang: CVE-2024-53846, CVE-2025-4748, CVE-2025-26618, CVE-2025-30211,
CVE-2025-32433, CVE-2025-46712, CVE-2025-48038,
CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
- hostapd: CVE-2025-24912
- imagemagick: CVE-2025-62171
- iptraf-ng: CVE-2024-52949
- libarchive: CVE-2025-25724
- libglib2: CVE-2024-54662
- libvips: CVE-2025-29769, CVE-2025-59933
- libvpx: CVE-2025-5283
- libxslt: CVE-2025-24855, CVE-2024-55549
- mbedtls: CVE-2025-54764, CVE-2025-59438
- modsecurity2: CVE-2025-52891, CVE-2025-54571
- netdata: CVE-2023-22496, CVE-2023-22497
- podman: CVE-2025-9566
- poppler: CVE-2024-6239, CVE-2024-56378, CVE-2025-32364,
CVE-2025-32365, CVE-2025-43903, CVE-2025-50420,
CVE-2025-52886
- python3: gh-139312, gh-139700, gh-139400, gh-135661, gh-135661,
gh-102555, gh-135462, gh-118350, gh-86155
- python-webpy: CVE-2025-3818
- redis: CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844
- samba: CVE-2025-3818, CVE-2025-10230
- shairport-sync: Upstream security fixes without CVE
- squid: CVE-2025-59362
- suricata: CVE-2024-37151, CVE-2024-38535
- tpm2-tss: CVE-2024-29040
- xerces: CVE-2024-23807
- zabbix: CVE-2025-27231, CVE-2025-27236, CVE-2025-27238, CVE-2025-49641
- zip: CVE-2018-13410
Infrastructure updates/fixes:
- Improved matching of CPE ID with NVD database, resulting in more accurate
identification of CVEs.
- brmake: avoid garbled output with top-level parallel build
Updated / fixed packages: 4th, audit, bind, cmake, crun, dante,
ebtables, erlang, freeradius-server, freerdp, gpsd, gstd, hostapd,
imagemagick, iptraf-ng, ledmon, libarchive, libcurl, libdbi-drivers,
libdisplay-info, libglib2, libgphoto2, libgtk3, libheif, libiconv,
libsemanage, libshout, libsolv, libtpms, libvips, libvpx, libwpe,
libxslt, linux, linux-headers, live555, mbedtls, micropython,
mjpg-streamer, modsecurity2, netdata, podman, poppler, python3,
python-flask-cors, python-webpy, quota, qt6multimedia, redis, refpolicy,
samba4, shairport-sync, selinux-python, sexpect, siproxd, sqlite, squid,
suricata, tor, tpm2-tss, waffle, webkitgtk, wireless-regdb, wpewebkit,
xerces, zabbix, zip
Removed package: ramspeed
Boards updated / fixed: andes_ae350_45, beaglebone, beagleboneai,
cubieboard1, cubieboard2, imx6ulz_bsh_smm_m2, imx8mn_bsh_smm_s2,
imx8mn_bsh_smm_s2_pro, olimex_a20_olinuxino_lime*, stm32f429_disco_xip,
stm32f746_disco_sd, stm32f769_disco_sd, stm32mp1*_dk*, ti_am62x_sk
Test Improvements:
- Capture output of failing commands on host.
2025.08.1, released October 11, 2025
Important / security related fixes:
- atop: CVE-2025-31160
- civetweb: CVE-2025-55763
- cjson: CVE-2025-57052
- connman: CVE-2025-32366, CVE-2025-32743
- cups: CVE-2025-58060, CVE-2025-58364
- expat: CVE-2025-59375
- fastd: CVE-2025-24356
- fetchmail: CVE number pending
- ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800,
CVE-2025-59801
- intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
- jasper: CVE-2023-51257, CVE-2025-8835
- libcurl: CVE-2025-10148, CVE-2025-9086
- libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
- libssh: CVE-2025-8114, CVE-2025-8277
- lua: CVE-2014-5461
- opencv4: CVE-2025-53644
- pcre2: CVE-2025-58050
- poco: CVE-2025-6375
- postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
- python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
- python-pip: CVE-2025-8869
- raptor: CVE-2024-57822, CVE-2024-57823
- syslog-ng: CVE-2024-47619
- tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
Updated / fixed packages: asterisk, boinc, boot-wrapper-aarch64, c-icap,
chocolate-doom, cjson, cpp-httplib, cutekeyboard, docker-engine, fatcat,
fluent-bit, gnupg2, gnuplot, htpdate, iputils, kodi, libfreeimage,
libopenssl, libselinux, libsemanage, libxkbcommon, libxmlrpc,
linux-firmware, linuxptp, llvm, luaossl, luvi, mariadb, mdio-tools,
modsecurity2, openjpeg, pango, php-lua, policycoreutils,
python-aiohttp-session, python-certifi, python-cryptography,
python-flask-cors, python-pytz, python-trove-classifiers,
python-typing-extensions, rtl8723bu, rtl8723ds, rtl8821cu, rtl8822cs,
rtl_433, ruby, samba4, sysprof, ti-k3-boot-firmware, tiff, tor, uboot,
uclibc, upx, vulkan-headers, webkitgtk, wilc-driver, wlroots, x11r7,
xilinx-embeddedsw, xilinx-prebuilt, xlib_xtrans, xr819-xradio, zziplib
Boards updated / fixed: beagleboneai, loongarch64-efi, qemu (all),
versal, zedboard
Boards removed: at91sam9260eknf, atmel_sama5d3xek, roseapplepi
Test Improvements:
- test_docker_compose: update kernel & VM CPU
- TestZfsUclibc: use internal backend for uClibc-ng toolchain
- GitTestBase: remove git daemon due to Gitlab-CI security settings
2025.08, released September 7th, 2025
Fixes all over the tree.
Infrastructure:
- 'make show-info' now also displays the package directory.
- utils/bump-stable-kernel-versions helper script to bump
Linux (headers) kernel versions.
Fixed defconfigs: QEMU ARM / Aarch64 EBBR / SBSA, Sipeed
licheepi zero, TI am62x sk
Removed defconfigs (build failures): Bananapro, Beelink gs1,
Chromebook snow, Engicam i.MX6 boards, Galileo, Microchip
at91sam9g20df / at91sam9g45m10ek / at91sam9rlek, Odroid XU-4,
Orangepi lite2 / one+, Pcengine apu2, Pine64 rock64 / sopine,
Raxda rockpin8, Riotboard, Socrates cyclone5, Technologic
TS-7680, Toradex Apalis i.MX6
Updated/fixed packages: apitrace, avrdude, b43-firmware, bat,
brcm-patchram-plus, busybox, ecryptfs-utils, exiv2, ffmpeg,
firewalld, gdb, go, imagemagick, input-event-daemon, iozone,
ipmitool, jose, libcap-ng, libfreeglut, libftdi1, libgsm,
libkrb5, libsoxr, lighttpd, lirc-tools, lua-utf8, mariadb,
mbpfan, micropython, mosquitto, netavark, openal, postgis,
python-flask-cors, python-h2, python-yarl, python3, rtl8188eu,
rtl8821au, sqlite, squid, sslh, tcpreplay, timescaledb,
tstools, uclibc, udisks, unbound, vde2,
webrtc-audio-processing, wipe, wireshark, xlib_libXt
Removed packages: libsvgtiny, netstat-nat,
netsurf-buildsystem, thttpd
2025.08-rc3, released August 28th, 2025
Fixes all over the tree, mainly GCC 15.x build fixes
support/misc/pkg-stats: Be more robust when parsing CVEs
Fixed defconfigs: canaan_kd233, sipeed_maix*: Correct Linux
image name configuration, ci20: Needs host-openssl,
imx6ulz_bsh_smm_m2: Use correct FPU configuration
Removed defconfigs: kontron_pitx_imx8m
Updated/fixed packages: binutils, cpp-httplib, dtach,
dump1090, ffmpeg, gdbm, gpm, libjwt, liblog4c-localtime,
libv4l, lrzsz, mesa3d, p11-kit, php-lua, proftpd,
python-aexpect, python-pyroute2, python3, rpi-userland, sdl,
vim, wayland, weston, wpewebkit, xvisor
Removed packages: liboauth
2025.08-rc2, released August 21th, 2025
Fixes all over the tree.
The release tarballs are now built reproducibly.
Updated/fixed packages: bash, bcusdk, ed, elfutils, gcc,
gcc-bare-metal, go, grub, gst1-devtools, gst1-libav,
gst1-plugins-bad, gst1-plugins-base, gst1-plugins-good,
gst1-plugins-ugly, gst1-python, gst1-rtsp-server, gst1-vaapi,
gstreamer1, gstreamer1-editing-services, hwdata, iperf3, jq,
libcue, libtracefs, modem-manager, ofono, openconnect,
openjpeg, openocd, prboom, python-numpy, rpcbind, rrdtool,
rt-tests, rtl8812au-aircrack-ng, setserial, start-stop-daemon,
tinyssh, trace-cmd, vorbis-tools
2025.08-rc1, released August 11th, 2025
Fixes all over the tree and new features.
Arch: Add LoongArch64 architecture support
Toolchains:
- ARC toolchain updated to 2024.12
- Bootlin external toolchains updated to 2025.08-1
- GCC 15.1.0 added, 12.x dropped, 14.x is now default
- GCC 13.x updated to 13.4.0, 14.x updated to 14.3.0
- Default to Linux 6.16.x kernel headers
Misc:
- Various tweaks to utils/generate-cyclonedx for better SBOM
compatibility and project name/version customization
New defconfigs: BeagleY-AI, CoolPI 4B, Freescale i.MX91
Freedom, LoongArch64 EFI, QEMU LoongArch64 Virt, Raspberrypi
Compute Module 5 IO
New packages: containers-image-config, distribution-registry,
llvm-runtimes, lua-lrexlib-pcre2, msgpack-c, opencl-headers,
opencl-icd-loader, pocketpy, python-apscheduler, python-crc,
python-log-rate-limit, python-sdbus-modemmanager, soapy-sdr,
vulkan-sdk
Removed packages: libebur128, libolm, libwebsock,
python-dunamai, python-poetry-dynamic-versioning
2025.05.3, released October 11, 2025
This is the final release on the 2025.05.x branch.
Important / security related fixes:
- atop: CVE-2025-31160
- civetweb: CVE-2025-55763
- cjson: CVE-2025-57052
- connman: CVE-2025-32366, CVE-2025-32743
- cups: CVE-2025-58060, CVE-2025-58364
- exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
- expat: CVE-2025-59375
- fastd: CVE-2025-24356
- fetchmail: CVE number pending
- ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800,
CVE-2025-59801
- imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005,
CVE-2025-55160
- intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
- jasper: CVE-2023-51257, CVE-2025-8835
- libcurl: CVE-2025-10148, CVE-2025-9086
- libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
- libssh: CVE-2025-8114, CVE-2025-8277
- lua: CVE-2014-5461
- opencv4: CVE-2025-53644
- pcre2: CVE-2025-58050
- poco: CVE-2025-6375
- postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
- python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
- python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
- python-pip: CVE-2025-8869
- raptor: CVE-2024-57822, CVE-2024-57823
- sqlite: CVE-2025-6965
- syslog-ng: CVE-2024-47619
- tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
- udisks: CVE-2025-8067
- wireshark: CVE-2025-5601
Updated / fixed packages: asterisk, avrdude, boinc, boot-wrapper-aarch64,
cjson, cpp-httplib, cutekeyboard, docker-engine, ecryptfs-utils, fatcat,
fetchmail, firewalld, gnupg2, gnuplot, htpdate, iputils, jose, kodi,
libfreeimage, libopenssl, libselinux, libsemanage, libxkbcommon,
libxmlrpc, linux-firmware, linuxptp, llvm, lua-utf8, luaossl, luvi,
mariadb, mbpfan, micropython, modsecurity2, mosquitto, opencv4, openjpeg,
pango, php-lua, policycoreutils, python-aiohttp-session, python-certifi,
python-cryptography, python-flask-cors, python-pytz, python3, rtl_433,
ruby, samba4, sysprof, ti-k3-boot-firmware, tiff, tor, uclibc, upx,
webkitgtk, wlroots, x11r7, xilinx-embeddedsw, xilinx-prebuilt, zziplib
Removed package: netstat-nat
Boards updated / fixed: versal, ti_am62x_sk, qemu/{x86, x86_64},
zedboard, beagleboneai
Boards removed: roseapplepi, at91sam9260eknf, atmel_sama5d3xek
Test Improvements:
- TestSWIPL: increase timeout value
- TestOpenJdk: remove stime() function call
- test_hardening: update toolchain to aarch64 for checksec tests
- test_docker_compose: update kernel & VM CPU
- TestZfsUclibc: use internal backend for uClibc-ng toolchain
- GitTestBase: remove git daemon due to Gitlab-CI security settings
2025.05.2, released September 09, 2025
Important / security related fixes:
- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
CVE-2025-5449, CVE-2025-5987
- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
- python3: CVE-2025-8194
- libhtp: CVE-2025-53537
- tiff: CVE-2025-8176, CVE-2025-8177
- libglib2: CVE-2025-6052
- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
CVE-2024-7541, CVE-2024-7542
- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
CVE-2025-1376, CVE-2025-1377
- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
CVE-2025-0689, CVE-2025-1125
- openjpeg: CVE-2025-54874
- go: CVE-2025-4674, CVE-2025-47907
- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
- vorbis-tools: CVE-2023-43361
- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
- ffmpeg: CVE-2023-6602
- lighttpd: CVE-2025-8671
- python-h2: CPE-2025-57804
- cpp-httplib: CVE-2025-46728
Removed packages: liboauth, thttpd
Removed defconfigs: at91sam9g20dfc, at91sam9g45m10ek,
at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m,
imx6ulz_bsh_smm_m2,
Test Improvements:
- test_gstreamer1: raise tesseract-ocr timeout to 15s
- test_wine: fix test after bootlin toolchains update
- test_numactl: fix test after bootlin toolchains update
- test_dpdk: fix test after bootlin toolchains update
- test_msr_tools: fix test after bootlin toolchains update
- test_dmidecode: fix test after bootlin toolchains update
- test_iso9660: use a more recent toolchain
- test_grub: use glibc toolchain
- test_wget: replace thttpd by Busybox's httpd server
- test_libcurl: replace thttpd by Busybox's httpd server
- test_systemd_selinux: fix test after bootlin toolchains update
Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
libssh, glibc, libhtp, libapparmor, libopenssl, rpi-firmware,
brcmfmac_sdio-firmware-rpi, grout, php-pecl-dbus, tini, snooze, ngrep,
libzenoh-pico, janet, cjson, flatcc, nanocom, rtl8189es, gcc, ofono,
python-numpy, elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk,
prboom, setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
gstreamer1-editing-services, vorbis-tools, jq, lbijwt, vim, ffmpeg,
libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay, libsvgtiny,
libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2, squid, ipmitool,
ell, proftpd, liblog4c-localtime, wpewebkit, weston, cpp-httplib,
ipset, python3, python-aexpect, libftdi1
Infrastructure updates/fixes:
- Various tweaks to utils/generate-cyclonedx for better SBOM
compatibility and project name/version customization
- go: make pre-built compiler provide target support too
- test-pkg: add new option -T/--toolchain-name
- pkg-utils.mk: include package directory in show-info output
- bump-stable-kernel-versions: new tool
Boards updated / fixed:
- qemu_sh4*: switch back to disk emulation
- acmesystems_acqua_a5_*: update linux
- sipeed_licheepi_zero: update linux & uboot
- zynqmp: increase vfat partition to 64M
- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
- ci20: U-Boot needs host-openssl
2025.05.1, released August 11th, 2025
Important / security related fixes:
@@ -633,402 +199,7 @@
- netsnmp: unexpected header length in /proc/net/snmp...
https://gitlab.com/buildroot.org/buildroot/-/issues/110
2025.02.8, released November 20, 2025
Important / security related fixes:
- bind: CVE-2025-8677, CVE-2025-40778, CVE-2025-40780
- dante: CVE-2024-54662
- erlang: CVE-2024-53846, CVE-2025-4748, CVE-2025-26618, CVE-2025-30211,
CVE-2025-32433, CVE-2025-46712, CVE-2025-48038,
CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
- hostapd: CVE-2025-24912
- imagemagick: CVE-2025-62171
- iptraf-ng: CVE-2024-52949
- libarchive: CVE-2025-25724
- libglib2: CVE-2024-54662
- libvips: CVE-2025-29769, CVE-2025-59933
- libvpx: CVE-2025-5283
- libxslt: CVE-2025-24855, CVE-2024-55549
- mbedtls: CVE-2025-54764, CVE-2025-59438
- modsecurity2: CVE-2025-52891, CVE-2025-54571
- netdata: CVE-2023-22496, CVE-2023-22497
- poppler: CVE-2024-6239, CVE-2024-56378, CVE-2025-32364,
CVE-2025-32365, CVE-2025-43903, CVE-2025-50420,
CVE-2025-52886
- python3: gh-139312, gh-139700, gh-139400, gh-135661, gh-135661,
gh-102555, gh-135462, gh-118350, gh-86155
- python-webpy: CVE-2025-3818
- redis: CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844
- samba: CVE-2025-3818, CVE-2025-10230
- shairport-sync: Upstream security fixes without CVE
- squid: CVE-2025-59362
- suricata: CVE-2024-37151, CVE-2024-38535
- tpm2-tss: CVE-2024-29040
- xerces: CVE-2024-23807
- zabbix: CVE-2025-27231, CVE-2025-27236, CVE-2025-27238, CVE-2025-49641
- zip: CVE-2018-13410
Infrastructure updates/fixes:
- Improved matching of CPE ID with NVD database, resulting in more
accurate identification of CVEs.
- brmake: avoid garbled output with top-level parallel build
Updated / fixed packages: 4th, audit, bind, cmake, crun, dante,
ebtables, erlang, freeradius-server, gpsd, gstd, hostapd, imagemagick,
iptraf-ng, iozone, ledmon, libarchive, libcurl, libdbi-drivers,
libdisplay-info, libglib2, libgphoto2, libgtk3, libheif, libsemanage,
libshout, libsolv, libtpms, libvips, libvpx, libwpe, libxslt, linux,
linux-headers, live555, mbedtls, micropython, mjpg-streamer,
modsecurity2, netdata, netsnmp, poppler, python3, python-flask-cors,
python-webpy, quota, qt6multimedia, redis, refpolicy, samba4,
selinux-python, sexpect, shairport-sync, siproxd, sqlite, squid,
suricata, tor, tpm2-tss, waffle, webkitgtk, wireless-regdb, wpewebkit,
xerces, zabbix, zip
Removed package: ramspeed
Boards updated / fixed: beagleboneai, cubieboard1, cubieboard2,
stm32f429_disco_xip, stm32f746_disco_sd, stm32f769_disco_sd,
Test Improvements:
- Capture output of failing commands on host.
2025.02.7, released October 11, 2025
Important / security related fixes:
- asterisk: CVE-2024-42491
- atop: CVE-2025-31160
- civetweb: CVE-2025-55763
- cjson: CVE-2025-57052
- connman: CVE-2025-32366, CVE-2025-32743
- cups: CVE-2025-58060, CVE-2025-58364
- exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
- expat: CVE-2025-59375
- fastd: CVE-2025-24356
- fetchmail: CVE-2025-61962
- ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800, CVE-2025-59801
- imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005, CVE-2025-55160
- intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
- jasper: CVE-2023-51257, CVE-2025-8835
- libcurl: CVE-2025-10148, CVE-2025-9086
- libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
- libssh: CVE-2025-8114, CVE-2025-8277
- lua: CVE-2014-5461
- opencv4: CVE-2025-53644
- pcre2: CVE-2025-58050
- poco: CVE-2025-6375
- postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
- python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
- python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
- python-pip: CVE-2025-8869
- raptor: CVE-2024-57822, CVE-2024-57823
- sqlite: CVE-2025-6965
- syslog-ng: CVE-2024-47619
- tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
- udisks: CVE-2025-8067
- webkitgtk: CVE-2025-24189, CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
CVE-2025-43240, CVE-2025-43265, CVE-2025-6558
- wireshark: CVE-2025-5601
Updated / fixed packages: asterisk, atop, boinc, civetweb, cjson,
connman, cpp-httplib, cups, cutekeyboard, ecryptfs-utils, exiv2, expat,
fastd, fetchmail, ghostscript, gnupg2, gnuplot, htpdate, imagemagick,
intel-microcode, iputils, jasper, jose, kodi, libcurl, libopenssl,
libssh, libxkbcommon, libxmlrpc, linux-firmware, linux-headers,
linuxptp, llvm-project, lua, luaossl, luvi, mariadb, micropython,
modsecurity2, opencv4, opencv4-contrib, openjpeg, pango, pcre2, poco,
postgresql, python-certifi, python-cryptography, python-django,
python-flask-cors, python-pip, python-pyopenssl, python-pytz, raptor,
rtl_433, ruby, samba4, sqlite, syslog-ng, sysprof, tiff, tor, uclibc,
udisks, upx, webkitgtk, wireshark, wlroots, x11r7, zziplib
Removed package: netstat-nat
Boards updated / fixed: beagleboneai, qemu/{x86, x86_64}, ti_am62x_sk
versal, zedboard
Boards removed: roseapplepi, atmel_sama5d3xek, at91sam9260eknf
Test Improvements:
- TestSWIPL: increase timeout value
- TestOpenJdk: remove stime() function call
- test_hardening: update toolchain to aarch64 for checksec tests
- test_docker_compose: update kernel & VM CPU
- TestZfsUclibc: use internal backend for uClibc-ng toolchain
- GitTestBase: remove git daemon due to Gitlab-CI security settings
2025.02.6, released September 09, 2025
Important / security related fixes:
- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
CVE-2025-5449, CVE-2025-5987
- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
- python3: CVE-2025-8194
- libhtp: CVE-2025-53537
- tiff: CVE-2025-8176, CVE-2025-8177
- libglib2: CVE-2025-6052
- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
CVE-2024-7541, CVE-2024-7542
- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
CVE-2025-1376, CVE-2025-1377
- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
CVE-2025-0689, CVE-2025-1125
- openjpeg: CVE-2025-54874
- go: CVE-2025-4674, CVE-2025-47907
- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
- vorbis-tools: CVE-2023-43361
- quickjs: CVE-2025-46688
- libde265: CVE-2024-38949, CVE-2024-38950
- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
- ffmpeg: CVE-2023-6602
- lighttpd: CVE-2025-8671
- python-h2: CPE-2025-57804
- cpp-httplib: CVE-2025-46728
- iperf3: CVE-2025-54349, CVE-2025-54350
Removed package: liboauth, thttpd
Removed defconfig: at91sam9g20dfc, at91sam9g45m10ek,
at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m, imx6ulz_bsh_smm_m2,
Test Improvements:
- test_gstreamer1: raise tesseract-ocr timeout to 15s
- test_wine: fix test after bootlin toolchains update
- test_numactl: fix test after bootlin toolchains update
- test_dpdk: fix test after bootlin toolchains update
- test_msr_tools: fix test after bootlin toolchains update
- test_dmidecode: fix test after bootlin toolchains update
- test_iso9660: use a more recent toolchain
- test_gruby: use glibc toolchain
- test_wget: replace thttpd by Busybox's httpd server
- test_libcurl: replace thttpd by Busybox's httpd server
- test_systemd_selinux: fix test after bootlin toolchains update
Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
libssh, glibc, libhtp, libapparmor, php-pecl-dbus, tini, snooze, ngrep,
libzenoh-pico, janet, nanocom, rtl8189es, gcc, ofono, python-numpy,
elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk, prboom,
setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
gstreamer1-editing-services, vorbis-tools, quickjs, libde265, vim,
ffmpeg, libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay,
libsvgtiny, libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2,
squid, ipmitool, ell, proftpd, liblog4c-localtime, wpewebkit, weston,
cpp-httplib, ipset, iperf3
Infrastructure updates/fixes:
- Various tweaks to utils/generate-cyclonedx for better SBOM
compatibility and project name/version customization
- go: make pre-built compiler provide target support too
- test-pkg: add new option -T/--toolchain-name
- pkg-utils.mk: include package directory in show-info output
- bump-stable-kernel-versions: new tool
Boards updated / fixed:
- qemu_sh4*: switch back to disk emulation
- acmesystems_acqua_a5_*: update linux
- sipeed_licheepi_zero: update linux & uboot
- zynqmp: increase vfat partition to 64M
- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
- ci20: U-Boot needs host-openssl
2025.02.5, released August 11, 2025
Important / security related fixes:
- Bump mbedtls to version 3.6.4, this affect many packages depending on it.
Also fixes CVE-2025-47917, CVE-2025-48965, CVE-2025-49087,
CVE-2025-49600, CVE-2025-49601, CVE-2025-52496, CVE-2025-52497
- samba4: support Windows security hardening
- apache: CVE-2025-53020, CVE-2025-49812, CVE-2025-49630, CVE-2025-23048,
CVE-2024-47252, CVE-2024-43394, CVE-2024-43204, CVE-2024-42516,
CVE-2025-54090
- assimp: CVE-2025-2750, CVE-2025-2751, CVE-2025-2757, CVE-2025-3158
- clamav: CVE-2025-20260
- edk2: CVE-2024-38805
- git: CVE-2025-27613, CVE-2025-27614, CVE-2025-46835, CVE-2025-48384,
CVE-2025-48385, CVE-2025-48386
- jose: CVE-2023-50967
- libarchive: CVE-2025-5914, CVE-2025-5915, CVE-2025-5916, CVE-2025-5917,
CVE-2025-5918
- libavif: CVE-2025-48174, CVE-2025-48175
- libblockdev: CVE-2025-6019
- libbpf: CVE-2025-29481
- libheif: CVE-2025-43966, CVE-2025-43967
- libhtp: CVE-2024-45797
- libsoup: CVE-2024-52530, CVE-2024-52531, CVE-2024-52532, CVE-2025-2784,
CVE-2025-4476, CVE-2025-4948, CVE-2025-4969, CVE-2025-32050,
CVE-2025-32052, CVE-2025-32053, CVE-2025-32906, CVE-2025-32910,
CVE-2025-32911, CVE-2025-32912, CVE-2025-32913, CVE-2025-32914,
CVE-2025-46420, CVE-2025-46421
- libxml2: CVE-2025-6021, CVE-2025-6170, CVE-2025-49794, CVE-2025-49796,
CVE-2025-49795
- micropython: CVE-2024-8947
- modsecurity2: CVE-2025-47947, CVE-2025-48866
- orc: CVE-2024-40897
- php: CVE-2025-1735, CVE-2025-6491, CVE-2025-1220
- python-aiohttp: CVE-2025-53643
- python-starlette: CVE-2025-54121
- python-urllib3: CVE-2025-50181, CVE-2025-50182
- python3: CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435,
CVE-2025-4517
- redis: CVE-2025-32023, CVE-2025-48367
- shim: CVE-2024-2312
- sngrep: CVE-2024-3119, CVE-2024-3120
- sudo: CVE-2025-32462, CVE-2025-32463
- tcpreplay: CVE-2023-4256, CVE-2023-43279, CVE-2024-22654
- tinyxml: CVE-2023-34194
- wpewebkit: CVE-2024-27856, CVE-2024-40866, CVE-2024-44185,
CVE-2024-44187, CVE-2024-44192, CVE-2024-44244, CVE-2024-44296,
CVE-2024-44308, CVE-2024-44309, CVE-2024-54467, CVE-2024-54479,
CVE-2024-54502, CVE-2024-54505, CVE-2024-54508, CVE-2024-54534,
CVE-2024-54543, CVE-2024-54551, CVE-2024-54658, CVE-2025-24143,
CVE-2025-24150, CVE-2025-24158, CVE-2025-24162, CVE-2025-24201,
CVE-2025-24208, CVE-2025-24209, CVE-2025-24213, CVE-2025-24216,
CVE-2025-24223, CVE-2025-24264, CVE-2025-30427, CVE-2025-31204,
CVE-2025-31205, CVE-2025-31206, CVE-2025-31215, CVE-2025-31257
- xorg-server / xwayland: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177,
CVE-2025-49178, CVE-2025-49179, CVE-2025-49180
Updated / fixed packages: avrdude, berkeleydb, binutils, bmx7, boot/shim,
boot/syslinux, ca-certificates, chartjs, cifs-utils, cpp-httplib, cpulimit,
daq, elfutils, eudev, fwupd, gcc, gnuplot, gstreamer1-editing-services,
gumbo-parser, gvfs, haproxy, hddtemp, kvmtool, libargtable, libcddb,
libconfuse, libcrossguid, libcurl, libesmtp, libgcrypt, libiec61850,
libmanette, libmicrohttpd, libmpeg2, libndp, libopenssl, libp11, libssh2,
libuhttpd, libva, linux, linux-tools (rtla), lrzsz, ltp-testsuite, lua,
modem-manager, modsecurity2, mosquitto, mpv, mupdf, ncmpc, net-tools,
network-manager, nginx-modsecurity, ntp, oniguruma, openblas, orc, parted,
python-asgiref, python-cython, python-dbus-fast, python-fastapi,
python-future, python-msgpack, python-multipart, python-remi,
python-setuptools, qpid-proton, rauc-hawkbit-updater, rtl8188eu, rtl8723bu,
rtl8723ds, rtl8821au, rust, shadowsock-libev, shairport-sync, sox, sqlite,
squashfs, systemd, tailscale, tor, uclibc, ustream-ssl, watchdog,
webkitgtk, xen
Removed package: libolm, libwebsock
Infrastructure updates / fixes:
- python-glslang is now a host package only
- Makefile unexports are now fixed and sorted
- Hide GCC versions for unsupported CPUs
- check-package: handle missing files
- test-pkg: stop on sigint
- check-host-cmake.mk: set host-cmake max version
- toolchain/toolchain-wrapper.c:
- correct CCACHE_BASEDIR comment
- slightly simplify cmdline copying
- get rid of EXCLUSIVE_ARGS
Test improvements:
- nginx-modsecurity: new test
- gumbo-parser: new runtime test
- add a crun-based runtime test for docker-compose
- test_xen: add a base class
- test_xen: test on 32-bit Arm v7
- test_xen: rename TestXen to TestXenAarch64
Boards updated / fixed:
- globalscale_espressobin: update linux
- freescale/mxs: fix linux booting
- ti_am62x_sk: bump Linux version
- raspberrypi5: fix failing build because of missing in-kernel dts
2025.02.4, released June 23th, 2025
Important / security related fixes:
- assimp: CVE-2025-3015, CVE-2025-3016
- binutils: CVE-2025-3198
- connman: CVE-2025-32366, CVE-2025-32743
- go: CVE-2025-0913, CVE-2025-4673, CVE-2025-22874
- iputils: CVE-2025-47268, CVE-2025-48964
- jq: CVE-2024-23337, CVE-2025-48060, CVE-2024-53427
- libcurl: CVE-2025-4947, CVE-2025-5025, CVE-2025-5399
- net-tools: CVE-2025-46836
- nodejs: CVE-2025-23165, CVE-2025-23166
- openvmtools: CVE-2025-22247
- python-django: CVE-2025-48432
- python-requests: CVE-2024-47081
- python-tornado: CVE-2025-47287
- redis: CVE-2025-21605, CVE-2025-27151
- samba4: CVE-2025-0620
- sox: CVE-2021-23159, CVE-2021-23172, CVE-2021-23210, CVE-2021-3643,
CVE-2021-40426, CVE-2022-31650, CVE-2022-31651, CVE-2023-26590,
CVE-2023-32627, CVE-2023-34318
- webkitgtk: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
CVE-2025-31206, CVE-2025-31215, CVE-2025-31257
Updated / fixed packages: alsa-utils, atkmm, atmm2_28, audit,
bluez5_utils, busybox, catch2, connman, dbus-glib, dlib, dovecot,
esp-hosted, execline, firmware-ele-imx, flex, fluent-bit, freescale-imx,
ghostscript, gmrender-resurrect, grub2, gst1-plugins-bad, gtkmm3, iputils,
kmsxx, libcamera, libcurl, libglade, libical, libuv, llvm-project,
lm-sensors, m4, mesa3d, mongoose, openvmtools, php, protobuf-c,
python-django, python-fastapi, python-flit-core, python-jc,
python-requests, python-uvicorn, qt5 (declarative, webengine,
webengine-chromium), qt6 (base, multimedia, tools), rpm, samba4, spdlog,
systemd, uacme, uboot-tools, yasm
Removed package: libebur128
Infrastructure updates / fixes:
- pkg-cmake now forces CMake>=3.5
- pkg-meson now uses a dedicated buildroot build directory
see https://gitlab.com/buildroot.org/buildroot/-/issues/64
- include defconfigs in sub-directories in make list-defconfigs
- new manual section about private repositories
- pkg-autotools: handle libtool 2.5.x
- pkg-cmake: force check_language(CXX) to be false when building w/o C++
- pkg-stats: add support for reporting stale CVE entries
- add basic support for package file download over smb
- toolchain/wrapper: check unsafe paths earlier
- test_flutter: drop unneeded vga/vnc stanzas from QEMU invocation
Test improvements
- new python-pydantic runtime tests
- new dieharder runtime test
- test_xen: fix runtime test
- test_timezone: fix test by setting a fixed time
- new tree runtime test
Boards fixes
- imx6ulz-bsh-smm-m2: fix missing U-Boot
- freescale: fix cpu name in i.MX9 boards
- imx8mn-bsh-smm-s2: erase the entire NAND chip
- freescale_t1040d4rdb: fix kernel build
In addition, thanks to the new stale CVE reporting, reported
vulnerabilities have been fixed for the following packages:
busybox, dnsmasq, dovecot, exim, exim, freeradius-server, grub2,
libopenh264, libssh, netsnmp, ninja, qt5base, ripgrep, sox, tinyxml
2025.02.3, released May 19th, 2025
Build issues and other problems solved for packages:
libcap
+2 -391
View File
@@ -144,356 +144,7 @@ endif
###############################################################################
comment "Legacy options removed in 2025.11"
config BR2_PACKAGE_LIBARGTABLE2
bool "libargtable2 has been removed"
select BR2_LEGACY
help
libargtable2 is unmaintained and has been removed
config BR2_PACKAGE_OLA
bool "ola has been removed"
select BR2_LEGACY
help
ola is incompatible with current versions of protobuf
config BR2_PACKAGE_BATMAN_ADV_NC
bool "batman-adv removed network coding"
select BR2_LEGACY
help
batman-adv removed B.A.T.M.A.N. network coding
config BR2_PACKAGE_DVBSNOOP
bool "dvbsnoop has been removed"
select BR2_LEGACY
help
dvbsnoop is unmaintained and has been removed
config BR2_PACKAGE_PROCRANK_LINUX
bool "procrank_linux has been removed"
select BR2_LEGACY
help
procrank_linux is unmaintained and has been removed
config BR2_PACKAGE_MONGREL2
bool "mongrel2 has been removed"
select BR2_LEGACY
help
mongrel2 is incompatible with MbedTLS 3.6 and has been removed
config BR2_PACKAGE_EXPECT
bool "expect has been removed"
select BR2_LEGACY
help
expect is unmaintained and has been removed
config BR2_PACKAGE_BCTOOLBOX
bool "bctoolbox has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle bctoolbox making a separate package unnecessary.
config BR2_PACKAGE_ORTP
bool "ortp has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle ortp making a separate package unnecessary.
config BR2_PACKAGE_MEDIASTREAMER
bool "mediastreamer has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle mediastreamer making a separate package unnecessary.
config BR2_PACKAGE_BELR
bool "belr has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle belr making a separate package unnecessary.
config BR2_PACKAGE_BELLE_SIP
bool "belle-sip has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle belle-sip making a separate package unnecessary.
config BR2_PACKAGE_LINPHONE
bool "linphone has been removed"
select BR2_LEGACY
help
This package was no longer maintained in Buildroot and was
no longer building. It can be re-added if someone volunteers
to fix the issues, update the package and maintain it.
config BR2_PACKAGE_LIBJWT
bool "libjwt has been removed"
select BR2_LEGACY
help
The only dependee of libjwt, asterisk, is incompatible with
version 3 so the version bundled with asterisk is used and
this package has been removed.
config BR2_PACKAGE_RAMSPEED
bool "ramspeed has been removed"
select BR2_LEGACY
help
The ramspeed package was removed as it is not maintained
anymore and the upstream repo is gone.
config BR2_PACKAGE_LESSTIF
bool "lesstif has been removed"
select BR2_LEGACY
help
lesstif is unmaintained and has been removed
config BR2_KERNEL_HEADERS_6_16
bool "kernel headers version 6.16.x are no longer supported"
select BR2_LEGACY
help
Version 6.16.x of the Linux kernel headers are no longer
maintained upstream and are now removed.
config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_1CK
bool "This firmware has been removed"
select BR2_LEGACY
help
This firmware has been removed from Murata package
config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP
bool "BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP has been renamed"
select BR2_LEGACY
select BR2_PACKAGE_MURATA_CYW_FW_CYW4339
help
The option has been renamed to
BR2_PACKAGE_MURATA_CYW_FW_CYW4339
config BR2_PACKAGE_LIBBSON
bool "libbson has been removed"
select BR2_LEGACY
help
libbson is officially deprecated upstream and has been removed
config BR2_TARGET_ROOTFS_AXFS
bool "AXFS root filesystem has been removed"
select BR2_LEGACY
help
AXFS root filesystem support has been removed.
config BR2_PACKAGE_LOGSURFER
bool "logsurfer has been removed"
select BR2_LEGACY
help
Logsurfer last updates was on 2011 and fails to build with
GCC14.
config BR2_LINUX_KERNEL_EXT_FBTFT
bool "FB TFT drivers are deprecated"
select BR2_LEGACY
help
FB TFT drivers were only needed for linux kernels until v3.19,
since v4.0 the drivers are included in the staging area.
config BR2_PACKAGE_DMENU_WAYLAND
bool "dmenu-wayland has been removed"
select BR2_LEGACY
help
The package has been abandoned for several years.
The only package that previously relied on dmenu-wayland
was sway, and that now relies on wmenu. Please select
wmenu instead.
config BR2_PACKAGE_SYLPHEED
bool "sylpheed has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the sylpheed package has been
removed.
config BR2_PACKAGE_PINENTRY_GTK2
bool "gtk2 backend of pinentry has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk2 backend of pinentry
has been removed.
config BR2_PACKAGE_OPENCV4_WITH_GTK
bool "opencv4 gtk support has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk support of opencv4
has been removed. gtk3 support is still available.
config BR2_PACKAGE_OPENCV3_WITH_GTK
bool "opencv3 gtk support has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk support of opencv3
has been removed. gtk3 support is still available.
config BR2_PACKAGE_NETSURF_GTK
bool "gtk frontend of netsurf has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk frontend of netsurf
has been removed. The gtk3 frontend can be used instead for
example.
config BR2_PACKAGE_METACITY
bool "metacity has been removed"
select BR2_LEGACY
help
The metacity package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_LIBSEXY
bool "libsexy has been removed"
select BR2_LEGACY
help
The libsexy package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_LIBGLADE
bool "libglade has been removed"
select BR2_LEGACY
help
The libglade package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_LEAFPAD
bool "leafpad has been removed"
select BR2_LEGACY
help
The leafpad package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_GTKPERF
bool "gtkperf has been removed"
select BR2_LEGACY
help
The gtkperf package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_GTK2_ENGINES
bool "gtk2-engines has been removed"
select BR2_LEGACY
help
The gtk2-engines package has been removed, as libgtk2 has
been removed as well.
config BR2_PACKAGE_GKRELLM_CLIENT
bool "gkrellm client has been removed"
select BR2_LEGACY
help
The gkrellm client option has been removed, as it required
libgtk2, which was removed from Buildroot.
config BR2_PACKAGE_CWIID_WMGUI
bool "cwiid wmgui has been removed"
select BR2_LEGACY
help
The wmgui part of cwiid required libgtk2, which has been
removed from Buildroot.
config BR2_LINUX_KERNEL_EXT_AUFS
bool "Aufs Filesystem Module patch has been removed"
select BR2_LEGACY
help
aufs kernel module patch is unmaintained and has been
removed.
config BR2_PACKAGE_AUFS_UTIL
bool "aufs-util has been removed"
select BR2_LEGACY
help
aufs-util package is unmaintained and has been removed.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARMEB
bool "Linaro armeb 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro armeb 2018.05 is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARM
bool "Linaro ARM 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro ARM 2018.05 is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64_BE
bool "Linaro AArch64 BE 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro AArch64 2018.05 BE is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64
bool "Linaro AArch64 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro AArch64 2018.05 is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS
bool "Sourcery CodeBench MIPS external toolchain is deprecated"
select BR2_LEGACY
help
Sourcery CodeBench MIPS 2016.05 is no longer maintained
and has been removed from Buildroot.
config BR2_LINUX_KERNEL_EXT_EV3DEV_LINUX_DRIVERS
bool "ev3dev Linux drivers have been removed"
select BR2_LEGACY
help
Linux drivers for LEGO MINDSTORMS EV3 from the ev3dev project
are targeting an outdated kernel which is no longer supported.
comment "Legacy options removed in 2025.08"
config BR2_PACKAGE_NETSTAT_NAT
bool "netstat-nat has been removed"
select BR2_LEGACY
help
The upstream URL is gone and netstat-nat has been removed
from Buildroot.
config BR2_PACKAGE_LIGHTTPD_LIBEV
bool "lighttpd removed libev support"
select BR2_LEGACY
help
Lighttpd 1.4.80 removed optional libev support.
config BR2_PACKAGE_LIBSVGTINY
bool "libsvgtiny has been removed"
select BR2_LEGACY
help
Libsvgtiny has been removed from Buildroot.
config BR2_PACKAGE_THTTPD
bool "thttpd has been removed"
select BR2_LEGACY
help
thttpd is no longer maintained actively by upstream and has
been removed from Buildroot.
config BR2_KERNEL_HEADERS_6_15
bool "kernel headers version 6.15.x are no longer supported"
select BR2_LEGACY
help
Version 6.15.x of the Linux kernel headers are no longer
maintained upstream and are now removed.
comment "Legacy options removed in 2025.05.1"
config BR2_PACKAGE_LIBCURL_BEARSSL
bool "libcurl removed BearSSL support"
@@ -515,12 +166,7 @@ config BR2_PACKAGE_LIBWEBSOCK
The upstream Github repository payden/libwebsock is no
longer available, and has been removed from Buildroot.
config BR2_TARGET_EDK2_PLATFORM_SOCIONEXT_DEVELOPERBOX
bool "EDK2 Socionext DeveloperBox support has been removed"
select BR2_LEGACY
help
The Socionext DeveloperBox support has been removed upstream
in EDK2 version edk2-stable202505.
comment "Legacy options removed in 2025.05"
config BR2_PACKAGE_LIBEBUR128
bool "libebur128 has been removed"
@@ -528,41 +174,6 @@ config BR2_PACKAGE_LIBEBUR128
help
The libebur128 package has been removed from Buildroot.
config BR2_KERNEL_HEADERS_6_14
bool "kernel headers version 6.14.x are no longer supported"
select BR2_LEGACY
help
Version 6.14.x of the Linux kernel headers are no longer
maintained upstream and are now removed.
config BR2_PACKAGE_GPSD_OCEANSERVER
bool "gpsd OceanServer removed upstream"
select BR2_LEGACY
help
Support for OceanServer has been removed upstream in gpsd
v3.26.
config BR2_PACKAGE_MESA3D_OSMESA_GALLIUM
bool "mesa3d OSMesa (Gallium) library support removed"
select BR2_LEGACY
help
Mesa3d removed the OSMesa (Off-Screen) interface library.
config BR2_PACKAGE_ALSA_LIB_ALISP
bool "alsa-lib alisp support removed"
select BR2_LEGACY
help
Support for alisp was removed from alsa-lib v1.12.14.
comment "Legacy options removed in 2025.05"
config BR2_GCC_VERSION_12_X
bool "gcc 12.x support removed"
select BR2_LEGACY
help
Support for building a toolchain based on GCC 12.x has been
removed, chose a newer GCC version instead.
config BR2_PACKAGE_MESA3D_GALLIUM_DRIVER_SWRAST
bool "mesa Gallium swrast driver was replaced by softpipe"
select BR2_LEGACY
+86 -69
View File
@@ -28,6 +28,9 @@
N: Adam Duskett <adam.duskett@amarulasolutions.com>
F: package/depot-tools/
F: package/dmenu-wayland/
F: package/fcft/
F: package/foot/
F: package/flutter-engine/
F: package/flutter-packages/
F: package/flutter-packages/flutter-adaptive-scaffold-example/
@@ -39,7 +42,9 @@ F: package/flutter-packages/flutter-rfw-local-example/
F: package/flutter-pi/
F: package/flutter-sdk-bin/
F: package/ivi-homescreen/
F: package/libutempter/
F: package/mender-update-modules/
F: package/tllist/
F: support/testing/tests/package/test_flutter.py
N: Adam Heinrich <adam@adamh.cz>
@@ -86,10 +91,6 @@ F: package/modem-manager/
N: Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
F: package/cpp-httplib/
N: Alexander Shirokov <shirokovalexs@gmail.com>
F: package/broot/
F: package/nnn/
N: Alessandro Partesotti <a.partesotti@gmail.com>
F: package/oatpp/
@@ -99,6 +100,8 @@ F: package/libzenoh-pico/
F: package/network-manager-openvpn/
N: Alex Suykov <alex.suykov@gmail.com>
F: board/chromebook/snow/
F: configs/chromebook_snow_defconfig
F: package/vboot-utils/
N: Alexander Clouter <alex+buildroot@digriz.org.uk>
@@ -149,9 +152,6 @@ F: configs/cubieboard2_defconfig
N: Alexey Lukyanchuk <skif@skif-web.ru>
F: package/zabbix/
N: Alexis Lothoré <alexis.lothore@bootlin.com>
F: package/python-scp
N: Alistair Francis <alistair@alistair23.me>
F: board/sifive/
F: boot/opensbi/
@@ -177,9 +177,6 @@ F: package/libkrb5/
F: package/p7zip/
F: package/wine/
N: Andrea Ricchi <andrea.ricchi@amarulasolutions.com>
F: package/cutekeyboard/
N: Andreas Klinger <ak@it-klinger.de>
F: package/ply/
@@ -190,7 +187,7 @@ F: package/pkg-qmake.mk
F: package/qt5/qt5opcua/
F: package/qt6/qt6opcua/
N: Andreas Ziegler <br025@umbiko.net>
N: Andreas Ziegler <br015@umbiko.net>
F: package/mpd/
N: Andrey Smirnov <andrew.smirnov@gmail.com>
@@ -407,6 +404,7 @@ F: package/libcec/
F: package/libcodec2/
F: package/libcrossguid/
F: package/libde265/
F: package/libdecor/
F: package/libdeflate/
F: package/libdisplay-info/
F: package/libdrm/
@@ -414,6 +412,7 @@ F: package/libdvbcsa/
F: package/libdvdcss/
F: package/libdvdnav/
F: package/libdvdread/
F: package/libfreeglut/
F: package/libfribidi/
F: package/libg7221/
F: package/libglew/
@@ -486,7 +485,6 @@ F: package/perl-uri/
F: package/perl-www-robotrules/
F: package/php/
F: package/pngquant/
F: package/postgresql/
F: package/pppd/
F: package/privoxy/
F: package/pure-ftpd/
@@ -582,6 +580,7 @@ F: package/jailhouse/
F: package/sunxi-boards/
N: Carsten Schoenert <c.schoenert@gmail.com>
F: package/dvbsnoop/
F: package/libdvbsi/
F: package/libsvg/
F: package/libsvg-cairo/
@@ -702,6 +701,10 @@ F: package/libsemanage/
F: package/libsepol/
F: package/policycoreutils/
N: Clément Péron <peron.clem@gmail.com>
F: board/beelink/gs1/
F: configs/beelink_gs1_defconfig
N: Colin Foster <colin.foster@in-advantage.com>
F: package/python-tftpy/
F: package/rauc-hawkbit-updater/
@@ -779,6 +782,8 @@ N: Daniel Sangue <daniel.sangue@sangue.ch>
F: package/libftdi1/
N: Danilo Bargen <mail@dbrgn.ch>
F: board/pcengines/apu2/
F: configs/pcengines_apu2_defconfig
F: package/tealdeer/
N: Danomi Manchego <danomimanchego123@gmail.com>
@@ -802,17 +807,9 @@ F: configs/stm32f746_disco_sd_defconfig
F: configs/stm32f769_disco_sd_defconfig
F: package/aespipe/
F: package/armadillo/
F: package/atf/
F: package/babeld/
F: package/bc/
F: package/cmocka/
F: package/connman/
F: package/empty/
F: package/iana-assignments/
F: package/inih/
F: package/less/
F: package/libgphoto2/
F: package/pocketpy/
F: package/sscep/
F: package/tinyinit/
F: package/ufs-utils/
@@ -838,7 +835,9 @@ F: package/libtalloc/
N: David Lechner <david@lechnology.com>
F: board/lego/ev3/
F: configs/lego_ev3_defconfig
F: linux/linux-ext-ev3dev-linux-drivers.mk
F: package/brickd/
F: package/ev3dev-linux-drivers/
N: David Pierret <david.pierret@smile.fr>
F: package/bat/
@@ -878,7 +877,6 @@ N: Dimitar Tomov <dimi@tpm.dev>
F: package/wolftpm/
N: Dimitrios Siganos <dimitris@siganos.org>
F: package/bvi/
F: package/wireless-regdb/
N: Dmitry Chestnykh <dm.chestnykh@gmail.com>
@@ -886,6 +884,9 @@ F: board/qemu/sparc-ss10/
F: configs/qemu_sparc_ss10_defconfig
F: package/uclibc-ng-test/
N: Dominik Faessler <faessler@was.ch>
F: package/logsurfer/
N: Dominik Michael Rauh <dmrauh@posteo.de>
F: package/gdal/
@@ -909,11 +910,6 @@ F: configs/acmesystems_acqua_a5_512mb_defconfig
N: Eero Aaltonen <eero.aaltonen@vaisala.com>
F: package/docopt-cpp/
N: El Mehdi YOUNES <elmehdi.younes@smile.fr>
F: package/opencl-headers/
F: package/opencl-icd-loader/
F: support/testing/tests/package/test_mesa3d.py
N: Eloi Bail <eloi.bail@savoirfairelinux.com>
F: package/bayer2rgb-neon/
F: package/gstreamer1/gst1-plugins-bayer2rgb-neon/
@@ -1007,6 +1003,9 @@ F: package/atest/
F: package/crucible/
F: package/kmscube/
N: Fabio Porcedda <fabio.porcedda@gmail.com>
F: package/netsurf-buildsystem/
N: Fabio Urquiza <fabiorush@gmail.com>
F: package/bitcoin/
@@ -1018,6 +1017,8 @@ F: package/openzwave/
N: Fabrice Fontaine <fontaine.fabrice@gmail.com>
F: package/bearssl/
F: package/belle-sip/
F: package/belr/
F: package/boinc/
F: package/cairo/
F: package/daq3/
@@ -1048,6 +1049,7 @@ F: package/libcue/
F: package/libebml/
F: package/libgee/
F: package/libglib2/
F: package/libgtk2/
F: package/libgtk3/
F: package/libhtp/
F: package/libidn/
@@ -1112,13 +1114,13 @@ N: Fiona Klute <fiona.klute@gmx.de>
F: package/*/S*
F: package/panel-mipi-dbi-firmware/
F: package/python-aiomqtt/
F: package/python-dunamai/
F: package/python-poetry-dynamic-versioning/
F: package/python-pyasynchat/
F: package/python-pyasyncore/
F: support/testing/tests/package/sample_python_networkmanager_goi.py
F: support/testing/tests/package/sample_python_pyroute2.py
F: support/testing/tests/package/test_nftables.py
F: support/testing/tests/package/test_python_networkmanager_goi.py
F: support/testing/tests/package/test_python_pyroute2.py
N: Flávio Tapajós <flavio.tapajos@newtesc.com.br>
F: configs/asus_tinker-s_rk3288_defconfig
@@ -1402,8 +1404,10 @@ F: package/volk/
N: Heiko Thiery <heiko.thiery@gmail.com>
F: board/kontron/bl-imx8mm/
F: board/kontron/smarc-sal28/
F: board/kontron/pitx-imx8m/
F: configs/kontron_bl_imx8mm_defconfig
F: configs/kontron_smarc_sal28_defconfig
F: configs/kontron_pitx_imx8m_defconfig
F: package/altera-stapl/
F: package/blake3/
F: package/ipmitool/
@@ -1490,14 +1494,24 @@ F: board/bananapi/
F: board/engicam/
F: board/olimex/a33_olinuxino/
F: board/olimex/a64-olinuxino/
F: board/orangepi/orangepi-lite2/
F: board/orangepi/orangepi-one-plus
F: board/orangepi/orangepi-zero-plus2/
F: board/pine64/
F: configs/amarula_vyasa_rk3288_defconfig
F: configs/asus_tinker_rk3288_defconfig
F: configs/engicam_imx6qdl_icore_defconfig
F: configs/engicam_imx6qdl_icore_qt5_defconfig
F: configs/engicam_imx6qdl_icore_rqs_defconfig
F: configs/engicam_imx6ul_geam_defconfig
F: configs/engicam_imx6ul_isiot_defconfig
F: configs/olimex_a33_olinuxino_defconfig
F: configs/olimex_a64_olinuxino_defconfig
F: configs/orangepi_lite2_defconfig
F: configs/orangepi_one_plus_defconfig
F: configs/orangepi_zero_plus2_defconfig
F: configs/pine64_defconfig
F: configs/pine64_sopine_defconfig
F: package/python-scipy/
F: support/testing/tests/package/sample_python_scipy.py
F: support/testing/tests/package/test_python_scipy.py
@@ -1626,13 +1640,6 @@ F: package/libuhttpd/
F: package/libuwsc/
F: package/rtty/
N: Jiaxun Yang <jiaxun.yang@flygoat.com>
F: arch/Config.in.loongarch
F: board/loongarch64-efi
F: board/qemu/loongarch64-virt-efi
F: configs/loongarch64_efi_defconfig
F: configs/qemu_loongarch64_virt_efi_defconfig
N: Joachim Wiberg <troglobit@gmail.com>
F: configs/globalscale_espressobin_defconfig
F: board/globalscale/espressobin/
@@ -1750,7 +1757,6 @@ F: package/at-spi2-core/
F: package/earlyoom/
F: package/gconf/
F: package/libnss/
F: package/llama-cpp/
F: package/llvm-project/clang/
F: package/llvm-project/lld/
F: package/llvm-project/llvm/
@@ -1789,9 +1795,14 @@ F: package/libmodbus/
F: package/ltris/
F: package/opentyrian/
N: Julien Corjon <corjon.j@ecagroup.com>
F: package/qt5/
N: Julien Grossholtz <julien.grossholtz@openest.io>
F: board/raspberrypi/
F: board/technologic/ts7680/
F: configs/raspberrypizero2w_defconfig
F: configs/ts7680_defconfig
F: package/paho-mqtt-c
N: Julien Olivain <ju.o@free.fr>
@@ -1815,6 +1826,7 @@ F: package/libopenmpt/
F: package/mokutil/
F: package/oath-toolkit/
F: package/octave/
F: package/ola/
F: package/openblas/
F: package/opencsd/
F: package/openmpi/
@@ -1935,7 +1947,6 @@ F: support/testing/tests/package/test_libjxl.py
F: support/testing/tests/package/test_lighttpd.py
F: support/testing/tests/package/test_links.py
F: support/testing/tests/package/test_links/
F: support/testing/tests/package/test_llama_cpp.py
F: support/testing/tests/package/test_lrzip.py
F: support/testing/tests/package/test_lrzsz.py
F: support/testing/tests/package/test_ltp_testsuite.py
@@ -1970,6 +1981,8 @@ F: support/testing/tests/package/test_numactl.py
F: support/testing/tests/package/test_numactl/
F: support/testing/tests/package/test_oath_toolkit.py
F: support/testing/tests/package/test_octave.py
F: support/testing/tests/package/test_ola.py
F: support/testing/tests/package/test_ola/
F: support/testing/tests/package/test_openblas.py
F: support/testing/tests/package/test_openocd.py
F: support/testing/tests/package/test_parted.py
@@ -2013,6 +2026,7 @@ F: support/testing/tests/package/test_tcl.py
F: support/testing/tests/package/test_tcl/
F: support/testing/tests/package/test_tcpdump.py
F: support/testing/tests/package/test_tesseract_ocr.py
F: support/testing/tests/package/test_thttpd.py
F: support/testing/tests/package/test_trace_cmd.py
F: support/testing/tests/package/test_trace_cmd/
F: support/testing/tests/package/test_tree.py
@@ -2128,6 +2142,9 @@ F: package/python-gunicorn/
F: support/testing/tests/package/sample_python_flask.py
F: support/testing/tests/package/test_python_flask.py
N: Lionel Orry <lionel.orry@gmail.com>
F: package/mongrel2/
N: Lothar Felten <lothar.felten@gmail.com>
F: board/bananapi/bananapi-m2-ultra/
F: board/beagleboard/beaglebone/
@@ -2260,40 +2277,28 @@ N: Marcus Hoffmann <bubu@bubu1.eu>
F: package/nethogs/
F: package/pico-sdk/
F: package/picotool/
F: package/python-apscheduler/
F: package/python-crc/
F: package/python-django/
F: package/python-immutabledict/
F: package/python-jc/
F: package/python-log-rate-limit/
F: package/python-pydantic/
F: package/python-pydantic-core/
F: package/python-pydantic-settings/
F: package/python-ruamel-yaml-clib/
F: package/python-typing-inspection/
F: package/python-tzlocal/
F: package/python-sdbus-modemmanager/
F: package/python-waitress/
F: package/python-whitenoise/
F: support/testing/tests/package/test_python_apscheduler.py
F: support/testing/tests/package/test_python_crc.py
F: support/testing/tests/package/test_python_django.py
F: support/testing/tests/package/test_python_fastapi.py
F: support/testing/tests/package/test_python_pydantic.py
F: support/testing/tests/package/test_python_pydantic_settings.py
F: support/testing/tests/package/test_python_ruamel_yaml.py
F: support/testing/tests/package/test_python_sdbus_modemmanager.py
F: support/testing/tests/package/test_python_tzlocal.py
F: support/testing/tests/package/test_python_waitress.py
F: support/testing/tests/package/test_python_whitenoise.py
F: support/testing/tests/package/sample_python_apscheduler.py
F: support/testing/tests/package/sample_python_crc.py
F: support/testing/tests/package/sample_python_django.py
F: support/testing/tests/package/sample_python_fastapi.py
F: support/testing/tests/package/sample_python_pydantic.py
F: support/testing/tests/package/sample_python_pydantic_settings.py
F: support/testing/tests/package/sample_python_ruamel_yaml.py
F: support/testing/tests/package/sample_python_sdbus_modemmanager.py
N: Marek Belisko <marek.belisko@open-nandra.com>
F: package/libatasmart/
@@ -2448,6 +2453,10 @@ F: package/libavl/
F: package/rcw-smarc-sal28/
N: Michał Łyszczek <michal.lyszczek@bofc.pl>
F: board/altera/socrates_cyclone5/
F: board/pine64/rock64
F: configs/rock64_defconfig
F: configs/socrates_cyclone5_defconfig
F: package/netifrc/
F: package/openrc/
F: package/skeleton-init-openrc/
@@ -2507,6 +2516,10 @@ F: toolchain/toolchain-bare-metal-buildroot/
N: Nicola Di Lieto <nicola.dilieto@gmail.com>
F: package/uacme/
N: Nicholas Sielicki <sielicki@yandex.com>
F: board/intel/galileo/
F: configs/galileo_defconfig
N: Nicolas Carrier <nicolas.carrier@orolia.com>
F: package/bmap-tools/
F: package/composer/
@@ -2550,6 +2563,10 @@ F: package/ofono/
N: Niklas Cassel <niklas.cassel@wdc.com>
F: configs/qemu_riscv64_nommu_virt_defconfig
N: Nikolay Dimitrov <nikolay.dimitrov@retrohub.org>
F: board/embest/riotboard/
F: configs/riotboard_defconfig
N: Nimai Mahajan <nimaim@gmail.com>
F: package/libucl/
@@ -2639,6 +2656,7 @@ F: board/librecomputer/lafrite/
F: board/nexbox/a95x/
F: board/openblocks/a6/
F: board/orangepi/
F: board/roseapplepi/
F: board/visionfive/
F: boot/shim/
F: configs/avenger96_defconfig
@@ -2650,6 +2668,7 @@ F: configs/nezha_defconfig
F: configs/openblocks_a6_defconfig
F: configs/orangepi_pc_defconfig
F: configs/orangepi_r1_defconfig
F: configs/roseapplepi_defconfig
F: configs/sheevaplug_defconfig
F: configs/visionfive_defconfig
F: package/bats-core/
@@ -2736,6 +2755,10 @@ F: package/liburcu/
N: Philippe Reynes <philippe.reynes@softathome.com>
F: package/ibm-sw-tpm2/
N: Pierre Crokaert <pct@crookies.net>
F: board/hardkernel/odroidxu4/
F: configs/odroidxu4_defconfig
N: Pierre Ducroquet <pinaraf@pinaraf.info>
F: package/kf5/
@@ -2886,13 +2909,11 @@ F: package/vnstat/
N: Romain Naour <romain.naour@gmail.com>
F: board/beagleboard/beagleboneai64/
F: board/beagleboard/beagley-ai/
F: board/qemu/
F: board/ti/am574x-idk/
F: configs/qemu_*
F: configs/am574x_idk_defconfig
F: configs/beagleboneai64_defconfig
F: configs/beagley_ai_defconfig
F: package/alure/
F: package/aubio/
F: package/bcc/
@@ -2988,6 +3009,7 @@ F: package/wlr-randr/
N: Semyon Kolganov <semenak94@mail.ru>
F: package/fmt/
F: package/libbson/
F: package/lua-resty-http/
F: package/mpir/
@@ -3022,6 +3044,8 @@ F: package/wpa_supplicant/
F: package/xr819-xradio/
N: Sergio Prado <sergio.prado@e-labworks.com>
F: board/toradex/apalis-imx6/
F: configs/toradex_apalis_imx6_defconfig
F: package/aoetools/
F: package/asn1c/
F: package/azure-iot-sdk-c/
@@ -3139,6 +3163,13 @@ N: Steven Noonan <steven@uplinklabs.net>
F: package/hwloc/
F: package/powertop/
N: Suniel Mahesh <sunil@amarulasolutions.com>
F: board/pine64/rockpro64
F: board/radxa/rockpi-n8
F: configs/rock_pi_n8_defconfig
F: configs/rockpro64_defconfig
F: package/arm-gnu-toolchain/
N: Sven Oliver Moll <svolli@svolli.de>
F: package/most/
@@ -3172,6 +3203,7 @@ F: package/x265/
N: Thomas Bonnefille <thomas.bonnefille@bootlin.com>
F: board/pine64/star64
F: configs/pine64_star64_defconfig
F: package/starfive-spltool/
N: Thomas Claveirole <thomas.claveirole@green-communications.fr>
F: package/fcgiwrap/
@@ -3183,7 +3215,7 @@ N: Thomas Devoogdt <thomas@devoogdt.com>
F: package/fluent-bit/
F: package/libsoup3/
N: Thomas Huth <th.huth+br@posteo.eu>
N: Thomas Huth <huth@tuxfamily.org>
F: package/ascii-invaders/
F: package/kvm-unit-tests/
F: package/xorcurses/
@@ -3191,8 +3223,6 @@ F: package/xorcurses/
N: Thomas Perale <thomas.perale@mind.be>
F: package/go/
F: utils/generate-cyclonedx
F: support/scripts/cve-check
F: support/scripts/cve.py
N: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
F: arch/Config.in.arm
@@ -3243,11 +3273,8 @@ F: package/pkg-autotools.mk
F: package/pkg-generic.mk
F: package/python3/
F: package/python-augeas/
F: package/python-crccheck/
F: package/python-flask-expects-json/
F: package/python-fs/
F: package/python-git/
F: package/python-pyfatfs/
F: package/python-qrcode/
F: package/python-serial/
F: package/python-unittest-xml-reporting/
@@ -3259,7 +3286,6 @@ F: package/rt-tests/
F: package/rtc-tools/
F: package/sam-ba/
F: package/scons/
F: package/snagboot/
F: package/squashfs/
F: package/tinifier/
F: package/wayland/
@@ -3276,17 +3302,10 @@ F: support/testing/tests/package/sample_python_git.py
F: support/testing/tests/package/sample_python_unittest_xml_reporting.py
F: support/testing/tests/package/test_nodejs.py
F: support/testing/tests/package/test_python_augeas.py
F: support/testing/tests/package/test_python_crccheck.py
F: support/testing/tests/package/test_python_flask.py
F: support/testing/tests/package/test_python_flask_expects_json.py
F: support/testing/tests/package/test_python_fs.py
F: support/testing/tests/package/test_python_git.py
F: support/testing/tests/package/test_python_pyfatfs.py
F: support/testing/tests/package/test_python_pyusb.py
F: support/testing/tests/package/test_python_serial.py
F: support/testing/tests/package/test_snagboot.py
F: support/testing/tests/package/test_python_unittest_xml_reporting.py
F: support/testing/tests/package/test_python_xmodem.py
F: support/testing/tests/toolchain/test_external_arm.py
F: toolchain/
@@ -3352,12 +3371,10 @@ F: package/utp_com/
N: Vincent Stehlé <vincent.stehle@arm.com>
F: board/arm/fvp-ebbr/
F: board/compulab/iot-gate-imx8-ebbr/
F: board/pine64/rockpro64-ebbr/
F: board/qemu/aarch64-ebbr/
F: board/qemu/arm-ebbr/
F: configs/arm_fvp_ebbr_defconfig
F: configs/iot-gate-imx8_ebbr_defconfig
F: configs/qemu_aarch64_ebbr_defconfig
F: configs/qemu_arm_ebbr_defconfig
F: configs/rockpro64_ebbr_defconfig
@@ -3408,7 +3425,7 @@ F: configs/stm32f746_disco_sd_defconfig
F: package/asterisk/
F: package/evilwm/
F: package/fbv/
F: package/libpam-pkcs11/
F: package/libjwt/
F: package/mksh/
F: package/ruby/
F: package/uclibc/
@@ -3529,7 +3546,7 @@ F: utils/scanpypi
N: Yunhao Tian <t123yh.xyz@gmail.com>
F: package/libopenaptx/
N: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
N: Zoltan Gyarmati <zgyarmati@zgyarmati.de>
F: package/crudini/
F: package/grantlee/
F: package/libusb/
+20 -15
View File
@@ -92,9 +92,9 @@ all:
.PHONY: all
# Set and export the version string
export BR2_VERSION := 2025.11-rc2
export BR2_VERSION := 2025.05.1
# Actual time the release is cut (for reproducible builds)
BR2_VERSION_EPOCH = 1764530000
BR2_VERSION_EPOCH = 1754924200
# Save running make version since it's clobbered by the make package
RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -781,12 +781,19 @@ endif
# For a merged /usr, ensure that /lib, /bin and /sbin and their /usr
# counterparts are appropriately setup as symlinks ones to the others.
@$(call MESSAGE,"Sanity check in overlays $(call qstrip,$(BR2_ROOTFS_OVERLAY))")
support/scripts/check-merged \
-t overlay \
$(if $(BR2_ROOTFS_MERGED_USR),-u) \
$(if $(BR2_ROOTFS_MERGED_BIN),-b) \
$(call qstrip,$(BR2_ROOTFS_OVERLAY))
ifeq ($(BR2_ROOTFS_MERGED_USR),y)
$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
@$(call MESSAGE,"Sanity check in overlay $(d)")$(sep) \
$(Q)not_merged_dirs="$$(support/scripts/check-merged-usr.sh $(d))"; \
test -n "$$not_merged_dirs" && { \
echo "ERROR: The overlay in $(d) is not" \
"using a merged /usr for the following directories:" \
$$not_merged_dirs; \
exit 1; \
} || true$(sep))
endif # merged /usr
$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
@$(call MESSAGE,"Copying overlay $(d)")$(sep) \
@@ -1212,11 +1219,11 @@ help:
# $(2): br2-external name, empty for bundled
define list-defconfigs
@first=true; \
for defconfig in $$([ -d $(1)/configs ] && find $(1)/configs -name '*_defconfig' |sort); do \
for defconfig in $$(find $(1)/configs -name '*_defconfig' |sort); do \
[ -f "$${defconfig}" ] || continue; \
if $${first}; then \
if [ "$(2)" ]; then \
printf 'External configs in "%s":\n' "$(call qstrip,$(2))"; \
printf 'External configs in "$(call qstrip,$(2))":\n'; \
else \
printf "Built-in configs:\n"; \
fi; \
@@ -1243,12 +1250,10 @@ release: OUT = buildroot-$(BR2_VERSION)
# documentation to the git output
release:
git archive --format=tar --prefix=$(OUT)/ HEAD > $(OUT).tar
SOURCE_DATE_EPOCH=$$(git log -1 --format=%at 2> /dev/null) \
$(MAKE) O=$(OUT) manual-html manual-text manual-pdf
$(MAKE) O=$(OUT) manual-html manual-text manual-pdf
$(MAKE) O=$(OUT) distclean
tar rf $(OUT).tar --owner=0 --group=0 \
--mtime="$$(git log -1 --pretty=format:%ci)" $(OUT)
gzip -9 -n -c < $(OUT).tar > $(OUT).tar.gz
tar rf $(OUT).tar $(OUT)
gzip -9 -c < $(OUT).tar > $(OUT).tar.gz
xz -9 -c < $(OUT).tar > $(OUT).tar.xz
rm -rf $(OUT) $(OUT).tar
-24
View File
@@ -80,16 +80,6 @@ config BR2_i386
Intel i386 architecture compatible microprocessor
http://en.wikipedia.org/wiki/I386
config BR2_loongarch64
bool "LoongArch64"
select BR2_USE_MMU
select BR2_ARCH_IS_64
select BR2_ARCH_NEEDS_GCC_AT_LEAST_12
help
LoongArch64 is 64-bit architecture developed by Loongson.
http://www.loongson.cn/
https://en.wikipedia.org/wiki/Loongson
config BR2_m68k
bool "m68k"
# MMU support is set by the subarchitecture file, arch/Config.in.m68k
@@ -321,10 +311,6 @@ config BR2_ARCH_NEEDS_GCC_AT_LEAST_15
bool
select BR2_ARCH_NEEDS_GCC_AT_LEAST_14
config BR2_ARCH_NEEDS_GCC_AT_LEAST_16
bool
select BR2_ARCH_NEEDS_GCC_AT_LEAST_15
# The following string values are defined by the individual
# Config.in.$ARCH files
config BR2_ARCH
@@ -363,12 +349,6 @@ config BR2_GCC_TARGET_FPU
config BR2_GCC_TARGET_FLOAT_ABI
string
# The value of this option will be passed as --with-simd=<value> when
# building gcc (internal backend) or -simd=<value> in the toolchain
# wrapper (external toolchain)
config BR2_GCC_TARGET_SIMD
string
# The value of this option will be passed as --with-mode=<value> when
# building gcc (internal backend) or -m<value> in the toolchain
# wrapper (external toolchain)
@@ -393,10 +373,6 @@ if BR2_arm || BR2_armeb || BR2_aarch64 || BR2_aarch64_be
source "arch/Config.in.arm"
endif
if BR2_loongarch64
source "arch/Config.in.loongarch"
endif
if BR2_m68k
source "arch/Config.in.m68k"
endif
+2 -12
View File
@@ -518,14 +518,6 @@ config BR2_neoverse_n2
select BR2_ARM_CPU_HAS_FP_ARMV8
select BR2_ARM_CPU_ARMV9A
select BR2_ARCH_NEEDS_GCC_AT_LEAST_11
comment "armv9.2a cores"
config BR2_cortex_a720
bool "Cortex-A720 (aka hunter)"
depends on BR2_ARCH_IS_64
select BR2_ARM_CPU_HAS_FP_ARMV8
select BR2_ARM_CPU_ARMV9A
select BR2_ARCH_NEEDS_GCC_AT_LEAST_14
endchoice
config BR2_ARM_ENABLE_NEON
@@ -785,7 +777,7 @@ config BR2_ARM_INSTRUCTIONS_THUMB
# Thumb-1 and VFP are not compatible
depends on BR2_ARM_SOFT_FLOAT
help
This option instructs the compiler to generate Thumb
This option instructions the compiler to generate Thumb
instructions, which allows to mix 16 bits instructions and
32 bits instructions. This generally provides a much smaller
compiled binary size.
@@ -798,7 +790,7 @@ config BR2_ARM_INSTRUCTIONS_THUMB2
bool "Thumb2"
depends on BR2_ARM_CPU_HAS_THUMB2
help
This option instructs the compiler to generate Thumb2
This option instructions the compiler to generate Thumb2
instructions, which allows to mix 16 bits instructions and
32 bits instructions. This generally provides a much smaller
compiled binary size.
@@ -922,8 +914,6 @@ config BR2_GCC_TARGET_CPU
# armv9.0a
default "cortex-a710" if BR2_cortex_a710
default "neoverse-n2" if BR2_neoverse_n2
# armv9.2a
default "cortex-a720" if BR2_cortex_a720
config BR2_GCC_TARGET_ABI
default "aapcs-linux" if BR2_arm || BR2_armeb
-138
View File
@@ -1,138 +0,0 @@
# LoongArch CPU
choice
prompt "Target Architecture Variant"
default BR2_loongarch64_generic if BR2_ARCH_IS_64
config BR2_loongarch64_generic
bool "Generic LoongArch 64-bit"
depends on BR2_ARCH_IS_64
help
Generic LoongArch 64-bit processor.
config BR2_loongarch64_v1_0
bool "LoongArch64 ISA version 1.0"
depends on BR2_ARCH_IS_64
select BR2_ARCH_NEEDS_GCC_AT_LEAST_14
help
LoongArch64 ISA version 1.0 processor.
config BR2_loongarch64_v1_1
bool "LoongArch64 ISA version 1.1"
depends on BR2_ARCH_IS_64
select BR2_ARCH_NEEDS_GCC_AT_LEAST_14
help
LoongArch64 ISA version 1.1 processor.
endchoice
choice
prompt "FPU Type"
default BR2_LOONGARCH_FPU_64
config BR2_LOONGARCH_FPU_64
bool "64"
help
Allow the use of hardware floating-point instructions for
32-bit and 64-bit operations.
config BR2_LOONGARCH_FPU_32
bool "32"
# Only supported by lp64s and lp64f ABIs which are marked as broken
depends on BR2_BROKEN
help
Allow the use of hardware floating-point instructions for
32-bit operations only.
config BR2_LOONGARCH_FPU_NONE
bool "none"
# Only supported by lp64s ABI which is marked as broken
depends on BR2_BROKEN
help
Prevent the use of hardware floating-point instructions.
endchoice
choice
prompt "SIMD Type"
default BR2_LOONGARCH_SIMD_NONE
config BR2_LOONGARCH_SIMD_NONE
bool "none"
help
Prevent the use of hardware SIMD instructions.
config BR2_LOONGARCH_SIMD_LSX
bool "LSX"
depends on BR2_LOONGARCH_FPU_64
help
Enable generating instructions from the 128-bit LoongArch SIMD
Extension (LSX).
config BR2_LOONGARCH_SIMD_LASX
bool "LASX"
depends on BR2_LOONGARCH_FPU_64
help
Enable generating instructions from the 256-bit LoongArch
Advanced SIMD Extension (LASX) and the 128-bit LoongArch
SIMD Extension (LSX).
endchoice
choice
prompt "Target ABI"
default BR2_LOONGARCH_ABI_LP64D if BR2_ARCH_IS_64 && BR2_LOONGARCH_FPU_64
default BR2_LOONGARCH_ABI_LP64F if BR2_ARCH_IS_64 && BR2_LOONGARCH_FPU_32
default BR2_LOONGARCH_ABI_LP64S if BR2_ARCH_IS_64 && BR2_LOONGARCH_SIMD_NONE
config BR2_LOONGARCH_ABI_LP64D
bool "lp64d"
depends on BR2_ARCH_IS_64
depends on BR2_LOONGARCH_FPU_64
config BR2_LOONGARCH_ABI_LP64F
bool "lp64f"
depends on BR2_ARCH_IS_64
# Failed to build host GCC initial, pending investigation
depends on BR2_BROKEN
depends on BR2_LOONGARCH_FPU_64 || BR2_LOONGARCH_FPU_32
config BR2_LOONGARCH_ABI_LP64S
bool "lp64s"
depends on BR2_ARCH_IS_64
# GCC can't find libraries, pending investigation
depends on BR2_BROKEN
endchoice
config BR2_ARCH
default "loongarch64" if BR2_ARCH_IS_64
config BR2_NORMALIZED_ARCH
default "loongarch"
config BR2_ENDIAN
default "LITTLE"
config BR2_GCC_TARGET_ARCH
default "loongarch64" if BR2_loongarch64_generic
default "la64v1.0" if BR2_loongarch64_v1_0
default "la64v1.1" if BR2_loongarch64_v1_1
config BR2_GCC_TARGET_FPU
default "64" if BR2_LOONGARCH_FPU_64
default "32" if BR2_LOONGARCH_FPU_32
default "none" if BR2_LOONGARCH_FPU_NONE
config BR2_GCC_TARGET_SIMD
default "lasx" if BR2_LOONGARCH_SIMD_LASX
default "lsx" if BR2_LOONGARCH_SIMD_LSX
default "none" if BR2_LOONGARCH_FPU_NONE
config BR2_GCC_TARGET_ABI
default "lp64d" if BR2_LOONGARCH_ABI_LP64D
default "lp64f" if BR2_LOONGARCH_ABI_LP64F
default "lp64s" if BR2_LOONGARCH_ABI_LP64S
config BR2_READELF_ARCH_NAME
default "LoongArch"
# vim: ft=kconfig
# -*- mode:kconfig; -*-
-1
View File
@@ -16,7 +16,6 @@ GCC_TARGET_FP32_MODE := $(call qstrip,$(BR2_GCC_TARGET_FP32_MODE))
GCC_TARGET_CPU := $(call qstrip,$(BR2_GCC_TARGET_CPU))
GCC_TARGET_FPU := $(call qstrip,$(BR2_GCC_TARGET_FPU))
GCC_TARGET_FLOAT_ABI := $(call qstrip,$(BR2_GCC_TARGET_FLOAT_ABI))
GCC_TARGET_SIMD := $(call qstrip,$(BR2_GCC_TARGET_SIMD))
GCC_TARGET_MODE := $(call qstrip,$(BR2_GCC_TARGET_MODE))
# Explicitly set LD's "max-page-size" instead of relying on some defaults
@@ -1,2 +1,2 @@
# Locally calculated
sha256 6b19a3ae99423de2416964d67251d745910277af258b4c4c63e88fd87dbf0e27 linux-6.12.41.tar.xz
sha256 87be0360df0931b340d2bac35161a548070fbc3a8c352c49e21e96666c26aeb4 linux-6.12.9.tar.xz
@@ -0,0 +1,8 @@
linux_load_address=0x100000
linux_dtb_load_address=0x100
linux_dtb=socfpga_cyclone5_socrates.dtb
linux_load=mmc rescan; fatload mmc 0:1 ${linux_load_address} zImage; fatload mmc 0:1 ${linux_dtb_load_address} ${linux_dtb}
bootargs=console=ttyS0,115200 root=/dev/mmcblk0p3 ro rootwait
source_env=fatload mmc 0:1 0x2000000 boot.scr; source 0x2000000
bootcmd=run linux_load; bootz ${linux_load_address} - ${linux_dtb_load_address}
bootdelay=1
@@ -0,0 +1,59 @@
image boot.vfat {
vfat {
files = {
"zImage",
"socfpga_cyclone5_socrates.dtb"
}
}
size = 8M
}
image uboot.img {
hdimage {
partition-table = "no"
}
partition spl {
in-partition-table = "no"
image = "u-boot-spl.bin.crc"
offset = 0
size = 64K
}
partition uboot-full {
in-partition-table = "no"
image = "u-boot.img"
offset = 256K
}
size = 1M
}
image sdcard.img {
hdimage {
}
partition uboot-env {
in-partition-table = "no"
image = "uboot-env.bin"
offset = 17K # 512 * 34 -> just after gpt
}
partition boot {
partition-type = 0xc
bootable = "true"
image = "boot.vfat"
}
partition uboot {
partition-type = 0xa2
image = "uboot.img"
}
partition rootfs {
partition-type = 0x83
image = "rootfs.ext2"
size = 500M
}
}
+52
View File
@@ -0,0 +1,52 @@
EBV SoCrates Evaluation Board
Intro
=====
More information about this board can be found here:
https://rocketboards.org/foswiki/Documentation/EBVSoCratesEvaluationBoard
Build
=====
First, load socrates config for buildroot
make socrates_cyclone5_defconfig
Build everything
make
Following files will be generated in output/images
.
├── boot.vfat
├── rootfs.ext2
├── rootfs.ext4 -> rootfs.ext2
├── rootfs.tar
├── sdcard.img
├── socfpga_cyclone5_socrates.dtb
├── u-boot-spl.bin
├── u-boot-spl.bin.crc
├── u-boot.bin
├── u-boot.img
├── uboot-env.bin
├── uboot.img
└── zImage
Creating bootable SD card
=========================
Simply invoke
dd if=output/images/sdcard.img of=/dev/sdX
Where X is your SD card device (not partition)
Booting
=======
Pins 6:8 on P18 selector is used to determine boot device. To boot socrates from
sdcard set these pins to value 0x5 (101b). Remaining pins are used to determine
how to configure FPGA and are not associated with booting into Linux kernel.
@@ -1,2 +0,0 @@
# Locally calculated
sha256 c71af3d2c86c0a0deca4f54b51d1c35217082b030052cc3513dc42e852652733 linux-v6.0.y-andes.tar.gz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 d11702103f177a2914e94eec57ce5ed820296d874f6b6525c4482e55d71a3667 opensbi-1.6.tar.gz
@@ -0,0 +1,38 @@
From 16aad5594e08550295ea3c12c1c9ed6f64774748 Mon Sep 17 00:00:00 2001
From: Rick Chen <rick@andestech.com>
Date: Tue, 29 Mar 2022 13:41:10 +0800
Subject: [PATCH] mmc: ftsdc010_mci: Support DTS of ftsdc010 driver for
generic dma
The ftsdc010 driver has been implemented for generic dma in Linux
kernel. And its compatible is andestech,atfsdc010g to distinguish
the legacy andestech,atfsdc010 which is not for generic dma.
Althought the ftsdc010_mci driver in U-Boot does not use dma, but
it still can work well with the mmc node for generic dma. So add
the compatible string to support it.
Signed-off-by: Rick Chen <rick@andestech.com>
Upstream-Status: Pending
Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
---
drivers/mmc/ftsdc010_mci.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/mmc/ftsdc010_mci.c b/drivers/mmc/ftsdc010_mci.c
index 570d54cf9d..65b1d447a8 100644
--- a/drivers/mmc/ftsdc010_mci.c
+++ b/drivers/mmc/ftsdc010_mci.c
@@ -460,6 +460,7 @@ int ftsdc010_mmc_bind(struct udevice *dev)
static const struct udevice_id ftsdc010_mmc_ids[] = {
{ .compatible = "andestech,atfsdc010" },
+ { .compatible = "andestech,atfsdc010g" },
{ }
};
--
2.34.1
@@ -0,0 +1,42 @@
From 933ad8a59f7fd9b2088badc3e97167d750a40b5a Mon Sep 17 00:00:00 2001
From: Bin Meng <bmeng.cn@gmail.com>
Date: Mon, 12 Jul 2021 11:52:31 +0800
Subject: [PATCH] spl: Align device tree blob address at 8-byte boundary
Since libfdt v1.6.1, a new requirement on the device tree address via:
commit 5e735860c478 ("libfdt: Check for 8-byte address alignment in fdt_ro_probe_()")
must be met that the device tree must be loaded in to memory at an
8-byte aligned address.
Signed-off-by: Bin Meng <bmeng.cn@gmail.com>
This patch was imported from U-boot patchwork:
https://patchwork.ozlabs.org/project/uboot/patch/20210712035231.26475-1-bmeng.cn@gmail.com/
Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
---
common/spl/spl_fit.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/common/spl/spl_fit.c b/common/spl/spl_fit.c
index a35be529..a76ad14a 100644
--- a/common/spl/spl_fit.c
+++ b/common/spl/spl_fit.c
@@ -382,6 +382,12 @@ static int spl_fit_append_fdt(struct spl_image_info *spl_image,
*/
image_info.load_addr = spl_image->load_addr + spl_image->size;
+ /*
+ * Since libfdt v1.6.1, the device tree must be loaded in to memory
+ * at an 8-byte aligned address.
+ */
+ image_info.load_addr = roundup(image_info.load_addr, 8);
+
/* Figure out which device tree the board wants to use */
node = spl_fit_get_image_node(ctx, FIT_FDT_PROP, index++);
if (node < 0) {
--
2.34.1
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
+2 -2
View File
@@ -1,3 +1,3 @@
#!/bin/sh
cp "$BINARIES_DIR"/Image "$TARGET_DIR"/boot
cp "$BINARIES_DIR"/ae350_ax45mp.dtb "$TARGET_DIR"/boot
cp $BINARIES_DIR/Image $TARGET_DIR/boot
cp $BINARIES_DIR/ae350_ax45mp.dtb $TARGET_DIR/boot
@@ -1,2 +1,2 @@
# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 3507dd105b0a0e1101bd43d294472fccf853429a259a5fa7c67467bba318f8e9 linux-6.15.7.tar.xz
sha256 5ff5bd84ea0e22c53437302db5d394d0a92d8b8b1a88ce20d1098298e9f7630a linux-6.12.15.tar.xz
+3 -8
View File
@@ -22,17 +22,12 @@ Running on the simulator
Download the AArch64 software simulator from one of the following sources,
corresponding to your host computer:
- https://developer.arm.com/-/cdn-downloads/permalink/FVPs-Architecture/FM-11.29/Foundation_Platform_11.29_27_Linux64.tgz
- https://developer.arm.com/-/cdn-downloads/permalink/FVPs-Architecture/FM-11.29/Foundation_Platform_11.29_27_Linux64_armv8l.tgz
The model will be located under one of the corresponding folders:
- Foundation_Platformpkg/models/Linux64_GCC-9.3
- Foundation_Platformpkg/models/Linux64_armv8l_GCC-9.3
- https://developer.arm.com/-/cdn-downloads/permalink/FVPs-Architecture/FM-11.27/Foundation_Platform_11.27_19_Linux64.tgz
- https://developer.arm.com/-/cdn-downloads/permalink/FVPs-Architecture/FM-11.27/Foundation_Platform_11.27_19_Linux64_armv8l.tgz
Finally, boot your system with:
Foundation_Platform \
${LOCATION_OF_FOUNDATIONV8_SIMULATOR}/models/Linux64_GCC-9.3/Foundation_Platform \
--arm-v8.0 \
--image output/images/linux-system.axf \
--block-device output/images/rootfs.ext2 \
+3 -3
View File
@@ -30,11 +30,11 @@ image flash.img {
partition fitimage {
image = "image.itb"
offset = 512K
size = 7000K
size = 4352K
}
partition spare {
offset = 7512K
size = 25256K
offset = 4864K
size = 27904K
}
}
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81 linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81 linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 16da36d1832f058cf1a6673b6a2eedeef1260576c15e76c4998e30d0fb13d339 uboot-66672e5af36fe294df56f8e7942069e3909f3790-git4.tar.gz
+2 -2
View File
@@ -3,8 +3,8 @@
BOARD_DIR="$(dirname $0)"
mkimage=$HOST_DIR/bin/mkimage
BOARD_DT=$(sed -nr \
-e 's|^BR2_LINUX_KERNEL_INTREE_DTS_NAME="(aspeed/)?([a-z0-9\-]*).*"$|\2|p' \
BOARD_DT=$(sed -n \
's/^BR2_LINUX_KERNEL_INTREE_DTS_NAME="\([a-z0-9\-]*\).*"$/\1/p' \
${BR2_CONFIG})
sed -e "s/%BOARD_DTB%/${BOARD_DT}.dtb/" \
@@ -1,2 +1,2 @@
# Locally calculated
sha256 1db327d0743e97ec725fefe05065a6fb779abe3063845fc3b551a4a716247c0a linux-6.12.34-ti-arm32-r12.tar.gz
sha256 3654ca31003d90d20b195b23f8d60b78fcffbf0fd7fed6116c22719e20ac933d linux-6.12.23-ti-arm32-r11.tar.gz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
+3 -3
View File
@@ -1,6 +1,6 @@
#!/bin/sh
BOARD_DIR="$(dirname "$0")"
BOARD_DIR="$(dirname $0)"
cp "${BOARD_DIR}/uEnv.txt" "${BINARIES_DIR}/uEnv.txt"
cp $BOARD_DIR/uEnv.txt $BINARIES_DIR/uEnv.txt
install -m 0644 -D "${BOARD_DIR}/extlinux.conf" "${BINARIES_DIR}/extlinux/extlinux.conf"
install -m 0644 -D $BOARD_DIR/extlinux.conf $BINARIES_DIR/extlinux/extlinux.conf
@@ -1,2 +1,2 @@
# Locally calculated
sha256 c435bd74d1c21fc5a950781a50d78bae2b93944144694843359948ad3afc72a5 linux-6.12.50.tar.xz
sha256 c52bc1ffc396c11bce335c9ee5cd55fe4213cbc1fb4026ff62bb90c864c61f62 linux-5.10.217.tar.xz
@@ -1,31 +0,0 @@
From 0b161f8e89a411fe54059cf1d0ba61354ee1e8a2 Mon Sep 17 00:00:00 2001
From: Robert Nelson <robertcnelson@gmail.com>
Date: Wed, 3 Aug 2022 11:28:10 -0500
Subject: [PATCH] am57xx/board.c: assume on failure its a BBONE-AI
Signed-off-by: Robert Nelson <robertcnelson@gmail.com>
Upstream: https://github.com/beagleboard/u-boot/commit/0b161f8e89a411fe54059cf1d0ba61354ee1e8a2
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
board/ti/am57xx/board.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/board/ti/am57xx/board.c b/board/ti/am57xx/board.c
index cfc825e52a3..f369693f382 100644
--- a/board/ti/am57xx/board.c
+++ b/board/ti/am57xx/board.c
@@ -529,8 +529,10 @@ void do_board_detect(void)
rc = ti_i2c_eeprom_am_get(CONFIG_EEPROM_BUS_ADDRESS,
CONFIG_EEPROM_CHIP_ADDRESS);
- if (rc)
+ if (rc) {
printf("ti_i2c_eeprom_init failed %d\n", rc);
+ ti_i2c_eeprom_am_set("BBONE-AI", "A");
+ };
#ifdef CONFIG_SUPPORT_EMMC_BOOT
rc = board_bootmode_has_emmc();
--
2.39.5
@@ -0,0 +1,839 @@
From 702ea30b462ba06f4fbee3393f0e6c19531f1e5f Mon Sep 17 00:00:00 2001
From: Robert Nelson <robertcnelson@gmail.com>
Date: Fri, 25 Jun 2021 11:33:25 -0500
Subject: [PATCH] am57xx_evm-fixes
Signed-off-by: Robert Nelson <robertcnelson@gmail.com>
[Patch from https://github.com/beagleboard/u-boot/commit/702ea30b462ba06f4fbee3393f0e6c19531f1e5f]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
arch/arm/mach-omap2/omap5/hw_data.c | 1 +
board/ti/am57xx/board.c | 167 +++++++++++-
configs/am57xx_evm_defconfig | 15 +-
include/configs/ti_armv7_common.h | 407 ++++++++++++++++++++++++++++
include/configs/ti_omap5_common.h | 5 +
include/environment/ti/boot.h | 32 ++-
include/environment/ti/mmc.h | 49 +++-
7 files changed, 651 insertions(+), 25 deletions(-)
diff --git a/arch/arm/mach-omap2/omap5/hw_data.c b/arch/arm/mach-omap2/omap5/hw_data.c
index fa4e27063c..d5192b1671 100644
--- a/arch/arm/mach-omap2/omap5/hw_data.c
+++ b/arch/arm/mach-omap2/omap5/hw_data.c
@@ -421,6 +421,7 @@ void enable_basic_clocks(void)
(*prcm)->cm_l4per_uart1_clkctrl,
(*prcm)->cm_l4per_uart3_clkctrl,
(*prcm)->cm_l4per_i2c1_clkctrl,
+ (*prcm)->cm_l4per_i2c4_clkctrl,
#ifdef CONFIG_DRIVER_TI_CPSW
(*prcm)->cm_gmac_gmac_clkctrl,
#endif
diff --git a/board/ti/am57xx/board.c b/board/ti/am57xx/board.c
index 73063faee6..ad05c41f22 100644
--- a/board/ti/am57xx/board.c
+++ b/board/ti/am57xx/board.c
@@ -41,6 +41,7 @@
#include <mmc.h>
#include <dm/uclass.h>
#include <hang.h>
+#include <i2c.h>
#include "../common/board_detect.h"
#include "mux_data.h"
@@ -528,8 +529,10 @@ void do_board_detect(void)
rc = ti_i2c_eeprom_am_get(CONFIG_EEPROM_BUS_ADDRESS,
CONFIG_EEPROM_CHIP_ADDRESS);
- if (rc)
+ if (rc) {
printf("ti_i2c_eeprom_init failed %d\n", rc);
+ ti_i2c_eeprom_am_set("BBONE-AI", "A");
+ };
#ifdef CONFIG_SUPPORT_EMMC_BOOT
rc = board_bootmode_has_emmc();
@@ -579,6 +582,164 @@ void do_board_detect(void)
"Board: %s REV %s\n", bname, board_ti_get_rev());
}
+struct am335x_cape_eeprom_id {
+ unsigned int header;
+ char eeprom_rev[2];
+ char board_name[32];
+ char version[4];
+ char manufacture[16];
+ char part_number[16];
+ char number_of_pins[2];
+ char serial_number[12];
+ char pin_usage[140];
+ char vdd_3v3exp[ 2];
+ char vdd_5v[ 2];
+ char sys_5v[2];
+ char dc_supplied[2];
+};
+
+#define CAPE_EEPROM_BUS_NUM 3
+#define CAPE_EEPROM_ADDR0 0x54
+#define CAPE_EEPROM_ADDR1 0x55
+#define CAPE_EEPROM_ADDR2 0x56
+#define CAPE_EEPROM_ADDR3 0x57
+
+#define CAPE_EEPROM_ADDR_LEN 0x10
+
+static int probe_cape_eeprom(struct am335x_cape_eeprom_id *cape_header)
+{
+ int ret;
+ struct udevice *dev;
+ unsigned char addr;
+ /* /lib/firmware/BB-CAPE-DISP-CT4-00A0.dtbo */
+ /* 14 + 16 + 1 + 4 + 5 = 40 */
+ char hash_cape_overlay[40];
+ char cape_overlay[26];
+ char process_cape_part_number[16];
+ char process_cape_version[4];
+ char end_part_number;
+ char cape_overlay_pass_to_kernel[18];
+
+ strlcpy(cape_overlay_pass_to_kernel, "", 1);
+
+ for ( addr = CAPE_EEPROM_ADDR0; addr <= CAPE_EEPROM_ADDR3; addr++ ) {
+ ret = i2c_get_chip_for_busnum(CAPE_EEPROM_BUS_NUM, addr, 1, &dev);
+ if (ret) {
+ printf("BeagleBone Cape EEPROM: no EEPROM at address: 0x%x\n", addr);
+ } else {
+ printf("BeagleBone Cape EEPROM: found EEPROM at address: 0x%x\n", addr);
+
+ ret = i2c_set_chip_offset_len(dev, 2);
+ if (ret) {
+ printf("BeagleBone Cape EEPROM: i2c_set_chip_offset_len failure\n");
+ }
+
+ ret = dm_i2c_read(dev, 0, (uchar *)cape_header, sizeof(struct am335x_cape_eeprom_id));
+ if (ret) {
+ printf("BeagleBone Cape EEPROM: Cannot read eeprom params\n");
+ }
+
+ if (cape_header->header == 0xEE3355AA) {
+ strlcpy(hash_cape_overlay, "/lib/firmware/", 14 + 1);
+ strlcpy(cape_overlay, "", 2);
+ strlcpy(cape_overlay_pass_to_kernel, "", 2);
+ strlcpy(process_cape_part_number, "...............", 16 + 1);
+ strlcpy(process_cape_version, "...", 4 + 1);
+
+ strlcpy(process_cape_part_number, cape_header->part_number, 16 + 1);
+ printf("BeagleBone Cape EEPROM: debug part_number field:[%s]\n", process_cape_part_number);
+
+ //FIXME: some capes end with '.'
+ if ( process_cape_part_number[15] == 0x2E ) {
+ puts("debug: fixup, extra . in eeprom field\n");
+ process_cape_part_number[15] = 0x00;
+ if ( process_cape_part_number[14] == 0x2E ) {
+ process_cape_part_number[14] = 0x00;
+ }
+ }
+
+ //Find ending 0x00 or 0xFF
+ puts("BeagleBone Cape EEPROM: debug part_number field HEX:[");
+ end_part_number=16;
+ for ( int i=0; i <= 16; i++ ) {
+ if (( process_cape_part_number[i] == 0x00 ) || ( process_cape_part_number[i] == 0xFF )) {
+ end_part_number=i;
+ i=17;
+ } else {
+ printf("%x", process_cape_part_number[i]);
+ }
+ }
+ puts("]\n");
+
+ strncat(cape_overlay_pass_to_kernel, process_cape_part_number, end_part_number);
+ strncat(cape_overlay_pass_to_kernel, ",", 1);
+ //printf("debug: %s\n", cape_overlay_pass_to_kernel);
+
+ strncat(hash_cape_overlay, process_cape_part_number, end_part_number);
+ strncat(cape_overlay, process_cape_part_number, end_part_number);
+ //printf("debug: %s %s\n", hash_cape_overlay, cape_overlay);
+
+ strncat(hash_cape_overlay, "-", 1);
+ strncat(cape_overlay, "-", 1);
+ //printf("debug: %s %s\n", hash_cape_overlay, cape_overlay);
+
+ strlcpy(process_cape_version, cape_header->version, 4 + 1);
+ //printf("debug: version field:[%s]\n", process_cape_version);
+
+ //Find invalid 0xFF -> 0x30 BBAI FAN Cape...
+ puts("BeagleBone Cape EEPROM: debug version field HEX:[");
+ for ( int i=0; i <= 3; i++ ) {
+ printf("%x", process_cape_version[i]);
+ if ( process_cape_version[i] == 0xFF ) {
+ process_cape_version[i] = 0x30;
+ }
+ }
+ puts("]\n");
+
+ strncat(hash_cape_overlay, process_cape_version, 4);
+ strncat(cape_overlay, process_cape_version, 4);
+ //printf("debug: %s %s\n", hash_cape_overlay, cape_overlay);
+
+ strncat(hash_cape_overlay, ".dtbo", 5);
+ strncat(cape_overlay, ".dtbo", 5);
+ //printf("debug: %s %s\n", hash_cape_overlay, cape_overlay);
+
+ printf("BeagleBone Cape EEPROM: 0x%x %s\n", addr, cape_overlay);
+
+ switch(addr) {
+ case CAPE_EEPROM_ADDR0:
+ env_set("uboot_overlay_addr0", cape_overlay);
+ env_set("uboot_detected_capes_addr0", cape_overlay_pass_to_kernel);
+ break;
+ case CAPE_EEPROM_ADDR1:
+ env_set("uboot_overlay_addr1", cape_overlay);
+ env_set("uboot_detected_capes_addr1", cape_overlay_pass_to_kernel);
+ break;
+ case CAPE_EEPROM_ADDR2:
+ env_set("uboot_overlay_addr2", cape_overlay);
+ env_set("uboot_detected_capes_addr2", cape_overlay_pass_to_kernel);
+ break;
+ case CAPE_EEPROM_ADDR3:
+ env_set("uboot_overlay_addr3", cape_overlay);
+ env_set("uboot_detected_capes_addr3", cape_overlay_pass_to_kernel);
+ break;
+ }
+ env_set("uboot_detected_capes", "1");
+ } else {
+ printf("BeagleBone Cape EEPROM: EEPROM contents not valid (or blank) on address: 0x%x\n", addr);
+ }
+ }
+ }
+ return 0;
+}
+
+void do_cape_detect(void)
+{
+ struct am335x_cape_eeprom_id cape_header;
+
+ probe_cape_eeprom(&cape_header);
+}
+
static void setup_board_eeprom_env(void)
{
char *name = "beagle_x15";
@@ -782,8 +943,10 @@ int board_late_init(void)
/* Just probe the potentially supported cdce913 device */
uclass_get_device(UCLASS_CLK, 0, &dev);
- if (board_is_bbai())
+ if (board_is_bbai()) {
env_set("console", "ttyS0,115200n8");
+ do_cape_detect();
+ }
#if !defined(CONFIG_SPL_BUILD)
board_ti_set_ethaddr(2);
diff --git a/configs/am57xx_evm_defconfig b/configs/am57xx_evm_defconfig
index 4da4aaa1c7..ed5b8aec16 100644
--- a/configs/am57xx_evm_defconfig
+++ b/configs/am57xx_evm_defconfig
@@ -10,16 +10,20 @@ CONFIG_SPL_TEXT_BASE=0x40300000
CONFIG_OMAP54XX=y
CONFIG_TARGET_AM57XX_EVM=y
CONFIG_SPL=y
-CONFIG_ENV_OFFSET_REDUND=0x280000
CONFIG_SPL_SPI_FLASH_SUPPORT=y
CONFIG_SPL_SPI_SUPPORT=y
CONFIG_ARMV7_LPAE=y
-CONFIG_DEFAULT_DEVICE_TREE="am572x-idk"
+CONFIG_DEFAULT_DEVICE_TREE="am57xx-beagle-x15-revc"
CONFIG_AHCI=y
CONFIG_DISTRO_DEFAULTS=y
CONFIG_SPL_LOAD_FIT=y
# CONFIG_USE_SPL_FIT_GENERATOR is not set
CONFIG_OF_BOARD_SETUP=y
+CONFIG_BOOTDELAY=1
+CONFIG_AUTOBOOT_KEYED=y
+CONFIG_AUTOBOOT_PROMPT="Press SPACE to abort autoboot in %d seconds\n"
+CONFIG_AUTOBOOT_DELAY_STR="d"
+CONFIG_AUTOBOOT_STOP_STR=" "
CONFIG_USE_BOOTARGS=y
CONFIG_BOOTARGS="androidboot.serialno=${serial#} console=ttyS2,115200 androidboot.console=ttyS2 androidboot.hardware=beagle_x15board"
# CONFIG_USE_BOOTCOMMAND is not set
@@ -48,13 +52,12 @@ CONFIG_BOOTP_DNS2=y
CONFIG_CMD_AVB=y
CONFIG_OF_CONTROL=y
CONFIG_SPL_OF_CONTROL=y
-CONFIG_OF_LIST="am57xx-beagle-x15 am57xx-beagle-x15-revb1 am57xx-beagle-x15-revc am5729-beagleboneai am572x-idk am571x-idk am574x-idk"
+CONFIG_OF_LIST="am57xx-beagle-x15 am57xx-beagle-x15-revb1 am57xx-beagle-x15-revc am5729-beagleboneai"
CONFIG_ENV_OVERWRITE=y
-CONFIG_ENV_IS_IN_MMC=y
-CONFIG_SYS_REDUNDAND_ENVIRONMENT=y
+# CONFIG_ENV_IS_IN_FAT is not set
CONFIG_SYS_RELOC_GD_ENV_ADDR=y
-CONFIG_SYS_MMC_ENV_DEV=1
CONFIG_ENV_VARS_UBOOT_RUNTIME_CONFIG=y
+# CONFIG_SPL_ENV_IS_NOWHERE is not set
CONFIG_VERSION_VARIABLE=y
CONFIG_BOOTP_SEND_HOSTNAME=y
CONFIG_DM=y
diff --git a/include/configs/ti_armv7_common.h b/include/configs/ti_armv7_common.h
index f13e9e5264..eabd03e27d 100644
--- a/include/configs/ti_armv7_common.h
+++ b/include/configs/ti_armv7_common.h
@@ -92,6 +92,413 @@
#define CONFIG_SYS_I2C
#endif
+#define EEPROM_PROGRAMMING \
+ "eeprom_dump=i2c dev 0; " \
+ "i2c md 0x50 0x00.2 20; " \
+ "\0" \
+ "eeprom_blank=i2c dev 0; " \
+ "i2c mw 0x50 0x00.2 ff; " \
+ "i2c mw 0x50 0x01.2 ff; " \
+ "i2c mw 0x50 0x02.2 ff; " \
+ "i2c mw 0x50 0x03.2 ff; " \
+ "i2c mw 0x50 0x04.2 ff; " \
+ "i2c mw 0x50 0x05.2 ff; " \
+ "i2c mw 0x50 0x06.2 ff; " \
+ "i2c mw 0x50 0x07.2 ff; " \
+ "i2c mw 0x50 0x08.2 ff; " \
+ "i2c mw 0x50 0x09.2 ff; " \
+ "i2c mw 0x50 0x0a.2 ff; " \
+ "i2c mw 0x50 0x0b.2 ff; " \
+ "i2c mw 0x50 0x0c.2 ff; " \
+ "i2c mw 0x50 0x0d.2 ff; " \
+ "i2c mw 0x50 0x0e.2 ff; " \
+ "i2c mw 0x50 0x0f.2 ff; " \
+ "i2c mw 0x50 0x10.2 ff; " \
+ "i2c mw 0x50 0x11.2 ff; " \
+ "i2c mw 0x50 0x12.2 ff; " \
+ "i2c mw 0x50 0x13.2 ff; " \
+ "i2c mw 0x50 0x14.2 ff; " \
+ "i2c mw 0x50 0x15.2 ff; " \
+ "i2c mw 0x50 0x16.2 ff; " \
+ "i2c mw 0x50 0x17.2 ff; " \
+ "i2c mw 0x50 0x18.2 ff; " \
+ "i2c mw 0x50 0x19.2 ff; " \
+ "i2c mw 0x50 0x1a.2 ff; " \
+ "i2c mw 0x50 0x1b.2 ff; " \
+ "i2c mw 0x50 0x1c.2 ff; " \
+ "i2c mw 0x50 0x1d.2 ff; " \
+ "i2c mw 0x50 0x1e.2 ff; " \
+ "i2c mw 0x50 0x1f.2 ff; " \
+ "i2c md 0x50 0x00.2 20; " \
+ "\0" \
+ "eeprom_x15_b1=i2c dev 0; " \
+ "i2c mw 0x50 0x00.2 aa; " \
+ "i2c mw 0x50 0x01.2 55; " \
+ "i2c mw 0x50 0x02.2 33; " \
+ "i2c mw 0x50 0x03.2 ee; " \
+ "i2c mw 0x50 0x04.2 42; " \
+ "i2c mw 0x50 0x05.2 42; " \
+ "i2c mw 0x50 0x06.2 52; " \
+ "i2c mw 0x50 0x07.2 44; " \
+ "i2c mw 0x50 0x08.2 58; " \
+ "i2c mw 0x50 0x09.2 31; " \
+ "i2c mw 0x50 0x0a.2 35; " \
+ "i2c mw 0x50 0x0b.2 5f; " \
+ "i2c mw 0x50 0x0c.2 42; " \
+ "i2c mw 0x50 0x0d.2 2e; " \
+ "i2c mw 0x50 0x0e.2 31; " \
+ "i2c mw 0x50 0x0f.2 30; " \
+ "i2c mw 0x50 0x10.2 57; " \
+ "i2c mw 0x50 0x11.2 57; " \
+ "i2c mw 0x50 0x12.2 59; " \
+ "i2c mw 0x50 0x13.2 59; " \
+ "i2c mw 0x50 0x14.2 34; " \
+ "i2c mw 0x50 0x15.2 50; " \
+ "i2c mw 0x50 0x16.2 35; " \
+ "i2c mw 0x50 0x17.2 35; " \
+ "i2c mw 0x50 0x18.2 30; " \
+ "i2c mw 0x50 0x19.2 30; " \
+ "i2c mw 0x50 0x1a.2 30; " \
+ "i2c mw 0x50 0x1b.2 30; " \
+ "i2c mw 0x50 0x1c.2 ff; " \
+ "i2c mw 0x50 0x1d.2 ff; " \
+ "i2c mw 0x50 0x1e.2 ff; " \
+ "i2c mw 0x50 0x1f.2 ff; " \
+ "i2c md 0x50 0x00.2 20; " \
+ "\0" \
+ "eeprom_x15_c=i2c dev 0; " \
+ "i2c mw 0x50 0x00.2 aa; " \
+ "i2c mw 0x50 0x01.2 55; " \
+ "i2c mw 0x50 0x02.2 33; " \
+ "i2c mw 0x50 0x03.2 ee; " \
+ "i2c mw 0x50 0x04.2 42; " \
+ "i2c mw 0x50 0x05.2 42; " \
+ "i2c mw 0x50 0x06.2 52; " \
+ "i2c mw 0x50 0x07.2 44; " \
+ "i2c mw 0x50 0x08.2 58; " \
+ "i2c mw 0x50 0x09.2 31; " \
+ "i2c mw 0x50 0x0a.2 35; " \
+ "i2c mw 0x50 0x0b.2 5f; " \
+ "i2c mw 0x50 0x0c.2 43; " \
+ "i2c mw 0x50 0x0d.2 2e; " \
+ "i2c mw 0x50 0x0e.2 30; " \
+ "i2c mw 0x50 0x0f.2 30; " \
+ "i2c mw 0x50 0x10.2 79; " \
+ "i2c mw 0x50 0x11.2 79; " \
+ "i2c mw 0x50 0x12.2 77; " \
+ "i2c mw 0x50 0x13.2 77; " \
+ "i2c mw 0x50 0x14.2 50; " \
+ "i2c mw 0x50 0x15.2 58; " \
+ "i2c mw 0x50 0x16.2 31; " \
+ "i2c mw 0x50 0x17.2 35; " \
+ "i2c mw 0x50 0x18.2 6e; " \
+ "i2c mw 0x50 0x19.2 6e; " \
+ "i2c mw 0x50 0x1a.2 6e; " \
+ "i2c mw 0x50 0x1b.2 6e; " \
+ "i2c mw 0x50 0x1c.2 ff; " \
+ "i2c mw 0x50 0x1d.2 ff; " \
+ "i2c mw 0x50 0x1e.2 ff; " \
+ "i2c mw 0x50 0x1f.2 ff; " \
+ "i2c md 0x50 0x00.2 20; " \
+ "eeprom_bbai_a2=i2c dev 0; " \
+ "i2c mw 0x50 0x00.2 aa; " \
+ "i2c mw 0x50 0x01.2 55; " \
+ "i2c mw 0x50 0x02.2 33; " \
+ "i2c mw 0x50 0x03.2 ee; " \
+ "i2c mw 0x50 0x04.2 42; " \
+ "i2c mw 0x50 0x05.2 42; " \
+ "i2c mw 0x50 0x06.2 4F; " \
+ "i2c mw 0x50 0x07.2 4E; " \
+ "i2c mw 0x50 0x08.2 45; " \
+ "i2c mw 0x50 0x09.2 2D; " \
+ "i2c mw 0x50 0x0a.2 41; " \
+ "i2c mw 0x50 0x0b.2 49; " \
+ "i2c mw 0x50 0x0c.2 30; " \
+ "i2c mw 0x50 0x0d.2 30; " \
+ "i2c mw 0x50 0x0e.2 41; " \
+ "i2c mw 0x50 0x0f.2 32; " \
+ "i2c mw 0x50 0x10.2 57; " \
+ "i2c mw 0x50 0x11.2 57; " \
+ "i2c mw 0x50 0x12.2 59; " \
+ "i2c mw 0x50 0x13.2 59; " \
+ "i2c mw 0x50 0x14.2 53; " \
+ "i2c mw 0x50 0x15.2 42; " \
+ "i2c mw 0x50 0x16.2 41; " \
+ "i2c mw 0x50 0x17.2 49; " \
+ "i2c mw 0x50 0x18.2 30; " \
+ "i2c mw 0x50 0x19.2 30; " \
+ "i2c mw 0x50 0x1a.2 30; " \
+ "i2c mw 0x50 0x1b.2 30; " \
+ "i2c mw 0x50 0x1c.2 30; " \
+ "i2c mw 0x50 0x1d.2 30; " \
+ "i2c mw 0x50 0x1e.2 ff; " \
+ "i2c mw 0x50 0x1f.2 ff; " \
+ "i2c md 0x50 0x00.2 20; " \
+ "\0" \
+
+#define EEWIKI_MMC_BOOT \
+ "mmc_boot=${devtype} dev ${mmcdev}; ${devtype} part; " \
+ "if ${devtype} rescan; then " \
+ "echo Scanning ${devtype} device ${mmcdev};" \
+ "setenv bootpart ${mmcdev}:1; " \
+ "echo Checking for: /uEnv.txt ...;" \
+ "if test -e ${devtype} ${bootpart} /uEnv.txt; then " \
+ "load ${devtype} ${bootpart} ${loadaddr} /uEnv.txt;" \
+ "env import -t ${loadaddr} ${filesize};" \
+ "echo Loaded environment from /uEnv.txt;" \
+ "echo Checking if uenvcmd is set ...;" \
+ "if test -n ${uenvcmd}; then " \
+ "echo Running uenvcmd ...;" \
+ "run uenvcmd;" \
+ "fi;" \
+ "fi; " \
+ "echo Checking for: /boot/uEnv.txt ...;" \
+ "for i in 1 2 3 4 5 6 7 ; do " \
+ "setenv mmcpart ${i};" \
+ "setenv bootpart ${mmcdev}:${mmcpart};" \
+ "if test -e ${devtype} ${bootpart} /boot/uEnv.txt; then " \
+ "load ${devtype} ${bootpart} ${loadaddr} /boot/uEnv.txt;" \
+ "env import -t ${loadaddr} ${filesize};" \
+ "echo Loaded environment from /boot/uEnv.txt;" \
+ "if test -n ${dtb}; then " \
+ "setenv fdtfile ${dtb};" \
+ "echo debug: [dtb=${fdtfile}] ...;" \
+ "fi;" \
+ "echo Checking if uname_r is set in /boot/uEnv.txt ...;" \
+ "if test -n ${uname_r}; then " \
+ "echo debug: [uname_r=${uname_r}] ...;" \
+ "setenv oldroot /dev/mmcblk${mmcdev}p${mmcpart};" \
+ "run uname_boot;" \
+ "fi;" \
+ "fi;" \
+ "done;" \
+ "fi;\0" \
+
+#define EEWIKI_SCSI_BOOT \
+ "scsi_boot=${devtype} reset ; " \
+ "if ${devtype} dev ${mmcdev}; then " \
+ "echo Scanning ${devtype} device ${mmcdev};" \
+ "setenv bootpart ${mmcdev}:1; " \
+ "echo Checking for: /uEnv.txt ...;" \
+ "if test -e ${devtype} ${bootpart} /uEnv.txt; then " \
+ "load ${devtype} ${bootpart} ${loadaddr} /uEnv.txt;" \
+ "env import -t ${loadaddr} ${filesize};" \
+ "echo Loaded environment from /uEnv.txt;" \
+ "echo Checking if uenvcmd is set ...;" \
+ "if test -n ${uenvcmd}; then " \
+ "echo Running uenvcmd ...;" \
+ "run uenvcmd;" \
+ "fi;" \
+ "fi; " \
+ "echo Checking for: /boot/uEnv.txt ...;" \
+ "for i in 1 2 3 4 ; do " \
+ "setenv mmcpart ${i};" \
+ "setenv bootpart ${mmcdev}:${mmcpart};" \
+ "if test -e ${devtype} ${bootpart} /boot/uEnv.txt; then " \
+ "load ${devtype} ${bootpart} ${loadaddr} /boot/uEnv.txt;" \
+ "env import -t ${loadaddr} ${filesize};" \
+ "echo Loaded environment from /boot/uEnv.txt;" \
+ "if test -n ${dtb}; then " \
+ "setenv fdtfile ${dtb};" \
+ "echo debug: [dtb=${fdtfile}] ...;" \
+ "fi;" \
+ "echo Checking if uname_r is set in /boot/uEnv.txt ...;" \
+ "if test -n ${uname_r}; then " \
+ "echo debug: [uname_r=${uname_r}] ...;" \
+ "setenv oldroot /dev/sda${mmcpart};" \
+ "run uname_boot;" \
+ "fi;" \
+ "fi;" \
+ "done;" \
+ "fi;\0" \
+
+#define EEWIKI_USB_BOOT \
+ "usb_boot=${devtype} reset ; " \
+ "if ${devtype} dev ${mmcdev}; then " \
+ "echo Scanning ${devtype} device ${mmcdev};" \
+ "setenv bootpart ${mmcdev}:1; " \
+ "echo Checking for: /uEnv.txt ...;" \
+ "if test -e ${devtype} ${bootpart} /uEnv.txt; then " \
+ "load ${devtype} ${bootpart} ${loadaddr} /uEnv.txt;" \
+ "env import -t ${loadaddr} ${filesize};" \
+ "echo Loaded environment from /uEnv.txt;" \
+ "echo Checking if uenvcmd is set in /uEnv.txt ...;" \
+ "if test -n ${uenvcmd}; then " \
+ "echo Running uenvcmd ...;" \
+ "run uenvcmd;" \
+ "fi;" \
+ "fi; " \
+ "echo Checking for: /boot/uEnv.txt ...;" \
+ "for i in 1 2 3 4 ; do " \
+ "setenv mmcpart ${i};" \
+ "setenv bootpart ${mmcdev}:${mmcpart};" \
+ "if test -e ${devtype} ${bootpart} /boot/uEnv.txt; then " \
+ "load ${devtype} ${bootpart} ${loadaddr} /boot/uEnv.txt;" \
+ "env import -t ${loadaddr} ${filesize};" \
+ "echo Loaded environment from /boot/uEnv.txt;" \
+ "if test -n ${dtb}; then " \
+ "setenv fdtfile ${dtb};" \
+ "echo debug: [dtb=${fdtfile}] ...;" \
+ "fi;" \
+ "echo Checking if uname_r is set in /boot/uEnv.txt ...;" \
+ "if test -n ${uname_r}; then " \
+ "echo debug: [uname_r=${uname_r}] ...;" \
+ "setenv oldroot /dev/sda${mmcpart};" \
+ "run uname_boot;" \
+ "fi;" \
+ "fi;" \
+ "done;" \
+ "fi;\0" \
+
+#define EEWIKI_UNAME_BOOT \
+ "uname_boot="\
+ "setenv bootdir /boot; " \
+ "setenv bootfile vmlinuz-${uname_r}; " \
+ "if test -e ${devtype} ${bootpart} ${bootdir}/${bootfile}; then " \
+ "echo loading ${bootdir}/${bootfile} ...; "\
+ "run loadimage;" \
+ "setenv fdtdir /boot/dtbs/${uname_r}; " \
+ "if test -e ${devtype} ${bootpart} ${fdtdir}/${fdtfile}; then " \
+ "run loadfdt;" \
+ "else " \
+ "setenv fdtdir /usr/lib/linux-image-${uname_r}; " \
+ "if test -e ${devtype} ${bootpart} ${fdtdir}/${fdtfile}; then " \
+ "run loadfdt;" \
+ "else " \
+ "setenv fdtdir /lib/firmware/${uname_r}/device-tree; " \
+ "if test -e ${devtype} ${bootpart} ${fdtdir}/${fdtfile}; then " \
+ "run loadfdt;" \
+ "else " \
+ "setenv fdtdir /boot/dtb-${uname_r}; " \
+ "if test -e ${devtype} ${bootpart} ${fdtdir}/${fdtfile}; then " \
+ "run loadfdt;" \
+ "else " \
+ "setenv fdtdir /boot/dtbs; " \
+ "if test -e ${devtype} ${bootpart} ${fdtdir}/${fdtfile}; then " \
+ "run loadfdt;" \
+ "else " \
+ "setenv fdtdir /boot/dtb; " \
+ "if test -e ${devtype} ${bootpart} ${fdtdir}/${fdtfile}; then " \
+ "run loadfdt;" \
+ "else " \
+ "setenv fdtdir /boot; " \
+ "if test -e ${devtype} ${bootpart} ${fdtdir}/${fdtfile}; then " \
+ "run loadfdt;" \
+ "else " \
+ "echo; echo unable to find ${fdtfile} ...; echo booting legacy ...;"\
+ "run args_mmc;" \
+ "echo debug: [${bootargs}] ... ;" \
+ "echo debug: [bootz ${loadaddr}] ... ;" \
+ "bootz ${loadaddr}; " \
+ "fi;" \
+ "fi;" \
+ "fi;" \
+ "fi;" \
+ "fi;" \
+ "fi;" \
+ "fi; " \
+ "if test -n ${enable_uboot_overlays}; then " \
+ "setenv fdt_buffer 0x60000;" \
+ "if test -n ${uboot_fdt_buffer}; then " \
+ "setenv fdt_buffer ${uboot_fdt_buffer};" \
+ "fi;" \
+ "echo uboot_overlays: [fdt_buffer=${fdt_buffer}] ... ;" \
+ "if test -n ${uboot_overlay_addr0}; then " \
+ "if test -n ${disable_uboot_overlay_addr0}; then " \
+ "echo uboot_overlays: uboot loading of [${uboot_overlay_addr0}] disabled by /boot/uEnv.txt [disable_uboot_overlay_addr0=1]...;" \
+ "else " \
+ "setenv uboot_overlay ${uboot_overlay_addr0}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_addr1}; then " \
+ "if test -n ${disable_uboot_overlay_addr1}; then " \
+ "echo uboot_overlays: uboot loading of [${uboot_overlay_addr1}] disabled by /boot/uEnv.txt [disable_uboot_overlay_addr1=1]...;" \
+ "else " \
+ "setenv uboot_overlay ${uboot_overlay_addr1}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_addr2}; then " \
+ "if test -n ${disable_uboot_overlay_addr2}; then " \
+ "echo uboot_overlays: uboot loading of [${uboot_overlay_addr2}] disabled by /boot/uEnv.txt [disable_uboot_overlay_addr2=1]...;" \
+ "else " \
+ "setenv uboot_overlay ${uboot_overlay_addr2}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_addr3}; then " \
+ "if test -n ${disable_uboot_overlay_addr3}; then " \
+ "echo uboot_overlays: uboot loading of [${uboot_overlay_addr3}] disabled by /boot/uEnv.txt [disable_uboot_overlay_addr3=1]...;" \
+ "else " \
+ "setenv uboot_overlay ${uboot_overlay_addr3}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_addr4}; then " \
+ "setenv uboot_overlay ${uboot_overlay_addr4}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_addr5}; then " \
+ "setenv uboot_overlay ${uboot_overlay_addr5}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_addr6}; then " \
+ "setenv uboot_overlay ${uboot_overlay_addr6}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_addr7}; then " \
+ "setenv uboot_overlay ${uboot_overlay_addr7}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "if test -n ${uboot_overlay_pru}; then " \
+ "setenv uboot_overlay ${uboot_overlay_pru}; " \
+ "run virtualloadoverlay;" \
+ "fi;" \
+ "else " \
+ "echo uboot_overlays: add [enable_uboot_overlays=1] to /boot/uEnv.txt to enable...;" \
+ "fi;" \
+ "setenv rdfile initrd.img-${uname_r}; " \
+ "if test -e ${devtype} ${bootpart} ${bootdir}/${rdfile}; then " \
+ "echo loading ${bootdir}/${rdfile} ...; "\
+ "run loadrd;" \
+ "if test -n ${netinstall_enable}; then " \
+ "run args_netinstall; run message;" \
+ "echo debug: [${bootargs}] ... ;" \
+ "echo debug: [bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}] ... ;" \
+ "bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}; " \
+ "fi;" \
+ "if test -n ${uenv_root}; then " \
+ "run args_uenv_root;" \
+ "echo debug: [${bootargs}] ... ;" \
+ "echo debug: [bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}] ... ;" \
+ "bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}; " \
+ "fi;" \
+ "if test -n ${uuid}; then " \
+ "run args_mmc_uuid;" \
+ "echo debug: [${bootargs}] ... ;" \
+ "echo debug: [bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}] ... ;" \
+ "bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}; " \
+ "else " \
+ "run args_mmc_old;" \
+ "echo debug: [${bootargs}] ... ;" \
+ "echo debug: [bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}] ... ;" \
+ "bootz ${loadaddr} ${rdaddr}:${rdsize} ${fdtaddr}; " \
+ "fi;" \
+ "else " \
+ "if test -n ${uenv_root}; then " \
+ "run args_uenv_root;" \
+ "echo debug: [${bootargs}] ... ;" \
+ "echo debug: [bootz ${loadaddr} - ${fdtaddr}] ... ;" \
+ "bootz ${loadaddr} - ${fdtaddr}; " \
+ "fi;" \
+ "run args_mmc_old;" \
+ "echo debug: [${bootargs}] ... ;" \
+ "echo debug: [bootz ${loadaddr} - ${fdtaddr}] ... ;" \
+ "bootz ${loadaddr} - ${fdtaddr}; " \
+ "fi;" \
+ "fi;\0" \
+
/*
* The following are general good-enough settings for U-Boot. We set a
* large malloc pool as we generally have a lot of DDR, and we opt for
diff --git a/include/configs/ti_omap5_common.h b/include/configs/ti_omap5_common.h
index de0a6af2fd..0cd2ccea03 100644
--- a/include/configs/ti_omap5_common.h
+++ b/include/configs/ti_omap5_common.h
@@ -64,6 +64,11 @@
DEFAULT_FIT_TI_ARGS \
DEFAULT_COMMON_BOOT_TI_ARGS \
DEFAULT_FDT_TI_ARGS \
+ EEWIKI_USB_BOOT \
+ EEWIKI_SCSI_BOOT \
+ EEWIKI_MMC_BOOT \
+ EEWIKI_UNAME_BOOT \
+ EEPROM_PROGRAMMING \
DFUARGS \
NETARGS \
NANDARGS \
diff --git a/include/environment/ti/boot.h b/include/environment/ti/boot.h
index a9d8f28d46..1480b6e3df 100644
--- a/include/environment/ti/boot.h
+++ b/include/environment/ti/boot.h
@@ -132,6 +132,7 @@
"bootpart=0:2\0" \
"bootdir=/boot\0" \
"bootfile=zImage\0" \
+ "board_eeprom_header=undefined\0" \
"usbtty=cdc_acm\0" \
"vram=16M\0" \
AVB_VERIFY_CMD \
@@ -183,7 +184,14 @@
"else " \
"echo $apart partition not found; " \
"exit; " \
- "fi;\0"
+ "fi;\0 " \
+ "read_board_eeprom=" \
+ "if test $board_eeprom_header = beagle_x15_revb1_blank; then " \
+ "run eeprom_dump; run eeprom_x15_b1; reset; fi; " \
+ "if test $board_eeprom_header = beagle_x15_revc_blank; then " \
+ "run eeprom_dump; run eeprom_x15_c; reset; fi; " \
+ "if test $board_eeprom_header = bbai_a2_blank; then " \
+ "run eeprom_dump; run eeprom_bbai_a2; reset; fi; \0 "
#ifdef CONFIG_OMAP54XX
@@ -223,19 +231,17 @@
"echo WARNING: Could not determine device tree to use; fi; \0"
#define CONFIG_BOOTCOMMAND \
- "if test ${dofastboot} -eq 1; then " \
- "echo Boot fastboot requested, resetting dofastboot ...;" \
- "setenv dofastboot 0; saveenv;" \
- FASTBOOT_CMD \
- "fi;" \
- "if test ${boot_fit} -eq 1; then " \
- "run update_to_fit;" \
- "fi;" \
+ "run read_board_eeprom; " \
"run findfdt; " \
- "run envboot; " \
- "run mmcboot;" \
- "run emmc_linux_boot; " \
- "run emmc_android_boot; " \
+ "setenv mmcdev 0; " \
+ "setenv devtype usb; " \
+ "echo usb_boot is currently disabled;" \
+ "setenv devtype scsi; " \
+ "echo scsi_boot is currently disabled;" \
+ "setenv devtype mmc; " \
+ "run mmc_boot;" \
+ "setenv mmcdev 1; " \
+ "run mmc_boot;" \
""
#endif /* CONFIG_OMAP54XX */
diff --git a/include/environment/ti/mmc.h b/include/environment/ti/mmc.h
index b86c8dc7a4..0ec09f279a 100644
--- a/include/environment/ti/mmc.h
+++ b/include/environment/ti/mmc.h
@@ -11,11 +11,31 @@
#define DEFAULT_MMC_TI_ARGS \
"mmcdev=0\0" \
"mmcrootfstype=ext4 rootwait\0" \
- "finduuid=part uuid mmc ${bootpart} uuid\0" \
+ "finduuid=part uuid ${devtype} ${bootpart} uuid\0" \
"args_mmc=run finduuid;setenv bootargs console=${console} " \
"${optargs} " \
- "root=PARTUUID=${uuid} rw " \
- "rootfstype=${mmcrootfstype}\0" \
+ "root=PARTUUID=${uuid} ro " \
+ "rootfstype=${mmcrootfstype} " \
+ "${cmdline}\0" \
+ "args_mmc_old=setenv bootargs console=${console} " \
+ "${optargs} " \
+ "root=${oldroot} ro " \
+ "rootfstype=${mmcrootfstype} " \
+ "${cmdline}\0" \
+ "args_mmc_uuid=setenv bootargs console=${console} " \
+ "${optargs} " \
+ "root=UUID=${uuid} ro " \
+ "rootfstype=${mmcrootfstype} " \
+ "${cmdline}\0" \
+ "args_uenv_root=setenv bootargs console=${console} " \
+ "${optargs} " \
+ "root=${uenv_root} ro " \
+ "rootfstype=${mmcrootfstype} " \
+ "${musb} ${cmdline}\0" \
+ "args_netinstall=setenv bootargs ${netinstall_bootargs} " \
+ "${optargs} " \
+ "root=/dev/ram rw " \
+ "${cmdline}\0" \
"loadbootscript=load mmc ${mmcdev} ${loadaddr} boot.scr\0" \
"bootscript=echo Running bootscript from mmc${mmcdev} ...; " \
"source ${loadaddr}\0" \
@@ -24,7 +44,28 @@
"env import -t ${loadaddr} ${filesize}\0" \
"loadbootenv=fatload mmc ${mmcdev} ${loadaddr} ${bootenvfile}\0" \
"loadimage=load ${devtype} ${bootpart} ${loadaddr} ${bootdir}/${bootfile}\0" \
- "loadfdt=load ${devtype} ${bootpart} ${fdtaddr} ${bootdir}/${fdtfile}\0" \
+ "loadrd=load ${devtype} ${bootpart} ${rdaddr} ${bootdir}/${rdfile}; setenv rdsize ${filesize}\0" \
+ "loadfdt=echo loading ${fdtdir}/${fdtfile} ...; load ${devtype} ${bootpart} ${fdtaddr} ${fdtdir}/${fdtfile}\0" \
+ "loadoverlay=echo uboot_overlays: loading ${actual_uboot_overlay} ...; " \
+ "load ${devtype} ${bootpart} ${rdaddr} ${actual_uboot_overlay}; " \
+ "fdt addr ${fdtaddr}; fdt resize ${fdt_buffer}; " \
+ "fdt apply ${rdaddr}; fdt resize ${fdt_buffer};\0" \
+ "virtualloadoverlay=if test -e ${devtype} ${bootpart} ${fdtdir}/overlays/${uboot_overlay}; then " \
+ "setenv actual_uboot_overlay ${fdtdir}/overlays/${uboot_overlay}; " \
+ "run loadoverlay;" \
+ "else " \
+ "if test -e ${devtype} ${bootpart} /lib/firmware/${uboot_overlay}; then " \
+ "setenv actual_uboot_overlay /lib/firmware/${uboot_overlay}; " \
+ "run loadoverlay;" \
+ "else " \
+ "if test -e ${devtype} ${bootpart} ${uboot_overlay}; then " \
+ "setenv actual_uboot_overlay ${uboot_overlay}; " \
+ "run loadoverlay;" \
+ "else " \
+ "echo uboot_overlays: unable to find [${devtype} ${bootpart} ${uboot_overlay}]...;" \
+ "fi;" \
+ "fi;" \
+ "fi;\0" \
"envboot=mmc dev ${mmcdev}; " \
"if mmc rescan; then " \
"echo SD/MMC found on device ${mmcdev};" \
--
2.20.1
@@ -1,2 +1,2 @@
# Locally calculated
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
sha256 0d438b1bb5cceb57a18ea2de4a0d51f7be5b05b98717df05938636e0aadfe11a u-boot-2021.04.tar.bz2
+2 -1
View File
@@ -1,3 +1,4 @@
#!/bin/sh
BOARD_DIR="$(dirname $0)"
cp board/beagleboard/beagleboneai/uEnv.txt "$BINARIES_DIR/uEnv.txt"
cp board/beagleboard/beagleboneai/uEnv.txt $BINARIES_DIR/uEnv.txt
@@ -1,5 +0,0 @@
default buildroot
label buildroot
kernel /Image
devicetreedir /
append root=/dev/mmcblk1p2 rootwait rw console=ttyS2,115200n8
@@ -1,2 +0,0 @@
# Locally calculated
sha256 2bb586c954277d070c8fdf6d7275faa93b4807d9bf3353b491d8149cca02b4fc linux-6.15.6.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,5 +0,0 @@
#!/bin/sh
BOARD_DIR="$(dirname "$0")"
install -m 0644 -D "$BOARD_DIR"/extlinux.conf "$BINARIES_DIR"/extlinux/extlinux.conf
-38
View File
@@ -1,38 +0,0 @@
BeagleBoard.org BeagleY-AI Development Board
Description
===========
This configuration will build a basic image for the BeagleBoard.org
BeagleY-AI. For more details about the board, visit:
https://www.beagleboard.org/boards/beagley-ai
How to Build
============
Select the default configuration for the target:
$ make beagley_ai_defconfig
Optional: modify the configuration:
$ make menuconfig
Build:
$ make
To copy the resulting output image file to an SD card use dd:
$ dd if=output/images/sdcard.img of=/dev/sdX bs=1M
How to Run
==========
Insert the SD card into the BeagleY-AI board, and power it up
through the USB Type-C connector. The system should come up.
You can use a USB to serial adapter to connect to the connector
labeled UART0 (J13) to communicate with the board.
https://docs.beagle.cc/boards/beagley/ai/02-quick-start.html
+4
View File
@@ -0,0 +1,4 @@
label linux
kernel /Image
devicetree /sun50i-h6-beelink-gs1.dtb
append console=ttyS0,115200 earlyprintk root=/dev/mmcblk0p2 rootwait
@@ -1,15 +1,10 @@
image boot.vfat {
vfat {
files = {
"tiboot3.bin",
"tispl.bin",
"u-boot.img",
"Image",
"ti",
"extlinux",
"sun50i-h6-beelink-gs1.dtb",
"extlinux"
}
label = "boot"
}
size = 64M
@@ -20,6 +15,13 @@ image sdcard.img {
}
partition u-boot {
in-partition-table = "no"
image = "u-boot-sunxi-with-spl.bin"
offset = 8K
size = 1016K # 1MB - 8KB
}
partition boot {
partition-type = 0xC
bootable = "true"
image = "boot.vfat"
+4
View File
@@ -0,0 +1,4 @@
#!/bin/sh
BOARD_DIR="$(dirname $0)"
install -m 0644 -D $BOARD_DIR/extlinux.conf $BINARIES_DIR/extlinux/extlinux.conf
@@ -1,2 +1,2 @@
# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 55432b2af352f7bf3053c348d8549df2f2deeaa4a361c65d638c2f3b2ca7ec96 linux-6.12.56.tar.xz
sha256 d8d95404f8deeb7ff6992c0df855025062e9e8182bca6daa27ef2e9275d27749 linux-6.12.23.tar.xz
@@ -0,0 +1,45 @@
From f7cddc4c6f4e4da57c6500cd0d88ea06e937b239 Mon Sep 17 00:00:00 2001
From: Michael Trimarchi <michael@amarulasolutions.com>
Date: Thu, 15 May 2025 17:09:51 +0200
Subject: [PATCH] arm: imx: imx8m: soc: fix the macro name
The function arch_spl_mmc_get_uboot_raw_sector() was never compiled,
even when the option CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION was
enabled. So rename the macro SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION to
CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION.
Fixes: 2a00d73d081a ("spl: mmc: Try to clean up raw-mode options")
Signed-off-by: Michael Trimarchi <michael@amarulasolutions.com>
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Reviewed-by: Peng Fan <peng.fan@nxp.com>
Upstream: https://source.denx.de/u-boot/u-boot/-/commit/f7cddc4c6f4e4da57c6500cd0d88ea06e937b239
---
arch/arm/mach-imx/imx8m/soc.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/arch/arm/mach-imx/imx8m/soc.c b/arch/arm/mach-imx/imx8m/soc.c
index 567e8e9e81a0..806adcf145fa 100644
--- a/arch/arm/mach-imx/imx8m/soc.c
+++ b/arch/arm/mach-imx/imx8m/soc.c
@@ -791,7 +791,7 @@ int boot_mode_getprisec(void)
#endif
#if defined(CONFIG_IMX8MN) || defined(CONFIG_IMX8MP)
-#ifdef SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION
+#ifdef CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION
#define IMG_CNTN_SET1_OFFSET GENMASK(22, 19)
unsigned long arch_spl_mmc_get_uboot_raw_sector(struct mmc *mmc,
unsigned long raw_sect)
@@ -826,7 +826,7 @@ unsigned long arch_spl_mmc_get_uboot_raw_sector(struct mmc *mmc,
return raw_sect;
}
-#endif /* SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION */
+#endif /* CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION */
#endif
bool is_usb_boot(void)
--
2.43.0
@@ -0,0 +1,178 @@
From 4c82eeab9840983693791117aa75f7bd7fbc805b Mon Sep 17 00:00:00 2001
From: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Date: Thu, 15 May 2025 17:09:52 +0200
Subject: [PATCH] arm: imx: imx8m: soc: replace ifdef by IS_ENABLED()
Standardize on using the IS_ENABLED macro.
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Reviewed-by: Peng Fan <peng.fan@nxp.com>
Upstream: https://source.denx.de/u-boot/u-boot/-/commit/4c82eeab9840983693791117aa75f7bd7fbc805b
---
arch/arm/mach-imx/imx8m/soc.c | 40 +++++++++++++++++------------------
1 file changed, 20 insertions(+), 20 deletions(-)
diff --git a/arch/arm/mach-imx/imx8m/soc.c b/arch/arm/mach-imx/imx8m/soc.c
index 806adcf145fa..3cdb71a25284 100644
--- a/arch/arm/mach-imx/imx8m/soc.c
+++ b/arch/arm/mach-imx/imx8m/soc.c
@@ -38,7 +38,7 @@
DECLARE_GLOBAL_DATA_PTR;
-#if defined(CONFIG_IMX_HAB)
+#if IS_ENABLED(CONFIG_IMX_HAB)
struct imx_fuse const imx_sec_config_fuse = {
.bank = 1,
.word = 3,
@@ -52,7 +52,7 @@ struct imx_fuse const imx_field_return_fuse = {
int timer_init(void)
{
-#ifdef CONFIG_XPL_BUILD
+#if IS_ENABLED(CONFIG_XPL_BUILD)
struct sctr_regs *sctr = (struct sctr_regs *)SYSCNT_CTRL_BASE_ADDR;
unsigned long freq = readl(&sctr->cntfid0);
@@ -110,7 +110,7 @@ void set_wdog_reset(struct wdog_regs *wdog)
setbits_le16(&wdog->wcr, WDOG_WDT_MASK | WDOG_WDZST_MASK);
}
-#ifdef CONFIG_ARMV8_PSCI
+#if IS_ENABLED(CONFIG_ARMV8_PSCI)
#define PTE_MAP_NS PTE_BLOCK_NS
#else
#define PTE_MAP_NS 0
@@ -700,11 +700,11 @@ int arch_cpu_init(void)
return 0;
}
-#if defined(CONFIG_IMX8MN) || defined(CONFIG_IMX8MP)
+#if IS_ENABLED(CONFIG_IMX8MN) || IS_ENABLED(CONFIG_IMX8MP)
struct rom_api *g_rom_api = (struct rom_api *)0x980;
#endif
-#if defined(CONFIG_IMX8M)
+#if IS_ENABLED(CONFIG_IMX8M)
#include <spl.h>
int imx8m_detect_secondary_image_boot(void)
{
@@ -790,8 +790,8 @@ int boot_mode_getprisec(void)
}
#endif
-#if defined(CONFIG_IMX8MN) || defined(CONFIG_IMX8MP)
-#ifdef CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION
+#if IS_ENABLED(CONFIG_IMX8MN) || IS_ENABLED(CONFIG_IMX8MP)
+#if IS_ENABLED(CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION)
#define IMG_CNTN_SET1_OFFSET GENMASK(22, 19)
unsigned long arch_spl_mmc_get_uboot_raw_sector(struct mmc *mmc,
unsigned long raw_sect)
@@ -834,7 +834,7 @@ bool is_usb_boot(void)
return get_boot_device() == USB_BOOT;
}
-#ifdef CONFIG_OF_SYSTEM_SETUP
+#if IS_ENABLED(CONFIG_OF_SYSTEM_SETUP)
bool check_fdt_new_path(void *blob)
{
const char *soc_path = "/soc@0";
@@ -880,7 +880,7 @@ add_status:
return 0;
}
-#ifdef CONFIG_IMX8MQ
+#if IS_ENABLED(CONFIG_IMX8MQ)
bool check_dcss_fused(void)
{
struct ocotp_regs *ocotp = (struct ocotp_regs *)OCOTP_BASE_ADDR;
@@ -1026,7 +1026,7 @@ int disable_vpu_nodes(void *blob)
return -EPERM;
}
-#ifdef CONFIG_IMX8MN_LOW_DRIVE_MODE
+#if IS_ENABLED(CONFIG_IMX8MN_LOW_DRIVE_MODE)
static int low_drive_gpu_freq(void *blob)
{
static const char *nodes_path_8mn[] = {
@@ -1311,7 +1311,7 @@ int ft_system_setup(void *blob, struct bd_info *bd)
"/cpus/cpu@3",
};
-#ifdef CONFIG_IMX8MQ
+#if IS_ENABLED(CONFIG_IMX8MQ)
int i = 0;
int rc;
int nodeoff;
@@ -1387,7 +1387,7 @@ usb_modify_speed:
if (is_imx8md())
disable_cpu_nodes(blob, nodes_path, 2, 4);
-#elif defined(CONFIG_IMX8MM)
+#elif IS_ENABLED(CONFIG_IMX8MM)
if (is_imx8mml() || is_imx8mmdl() || is_imx8mmsl())
disable_vpu_nodes(blob);
@@ -1396,10 +1396,10 @@ usb_modify_speed:
else if (is_imx8mms() || is_imx8mmsl())
disable_cpu_nodes(blob, nodes_path, 3, 4);
-#elif defined(CONFIG_IMX8MN)
+#elif IS_ENABLED(CONFIG_IMX8MN)
if (is_imx8mnl() || is_imx8mndl() || is_imx8mnsl())
disable_gpu_nodes(blob);
-#ifdef CONFIG_IMX8MN_LOW_DRIVE_MODE
+#if IS_ENABLED(CONFIG_IMX8MN_LOW_DRIVE_MODE)
else {
int ldm_gpu = low_drive_gpu_freq(blob);
@@ -1415,7 +1415,7 @@ usb_modify_speed:
else if (is_imx8mns() || is_imx8mnsl() || is_imx8mnus())
disable_cpu_nodes(blob, nodes_path, 3, 4);
-#elif defined(CONFIG_IMX8MP)
+#elif IS_ENABLED(CONFIG_IMX8MP)
if (is_imx8mpul()) {
/* Disable GPU */
disable_gpu_nodes(blob);
@@ -1471,7 +1471,7 @@ void reset_cpu(void)
}
#endif
-#if defined(CONFIG_ARCH_MISC_INIT)
+#if IS_ENABLED(CONFIG_ARCH_MISC_INIT)
int arch_misc_init(void)
{
if (IS_ENABLED(CONFIG_FSL_CAAM)) {
@@ -1487,8 +1487,8 @@ int arch_misc_init(void)
}
#endif
-#if defined(CONFIG_XPL_BUILD)
-#if defined(CONFIG_IMX8MQ) || defined(CONFIG_IMX8MM) || defined(CONFIG_IMX8MN)
+#if IS_ENABLED(CONFIG_XPL_BUILD)
+#if IS_ENABLED(CONFIG_IMX8MQ) || IS_ENABLED(CONFIG_IMX8MM) || IS_ENABLED(CONFIG_IMX8MN)
bool serror_need_skip = true;
void do_error(struct pt_regs *pt_regs)
@@ -1523,7 +1523,7 @@ void do_error(struct pt_regs *pt_regs)
#endif
#endif
-#if defined(CONFIG_IMX8MN) || defined(CONFIG_IMX8MP)
+#if IS_ENABLED(CONFIG_IMX8MN) || IS_ENABLED(CONFIG_IMX8MP)
enum env_location arch_env_get_location(enum env_operation op, int prio)
{
enum boot_device dev = get_boot_device();
@@ -1571,7 +1571,7 @@ enum env_location arch_env_get_location(enum env_operation op, int prio)
#endif
-#ifdef CONFIG_IMX_BOOTAUX
+#if IS_ENABLED(CONFIG_IMX_BOOTAUX)
const struct rproc_att hostmap[] = {
/* aux core , host core, size */
{ 0x00000000, 0x007e0000, 0x00020000 },
--
2.43.0
@@ -0,0 +1,49 @@
From 8acea298bb82c38b20855cd46a46b9e418dc1fb0 Mon Sep 17 00:00:00 2001
From: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Date: Tue, 20 May 2025 10:54:16 +0200
Subject: [PATCH] spl: Kconfig: support U-Boot load from raw NAND
Commit 2a00d73d081a ("spl: mmc: Try to clean up raw-mode options") breaks
the boot of the BSH SMM S2 board. As stated in the commit itself, "Some
boards use this value even though MMC is not enabled in SPL, for example
imx8mn_bsh_smm_s2".
Support load of the U-Boot image from raw NAND sector. This is equivalent
to load from MMC raw sector.
Fixes: 2a00d73d081a ("spl: mmc: Try to clean up raw-mode options")
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Upstream: https://source.denx.de/u-boot/u-boot/-/commit/8acea298bb82c38b20855cd46a46b9e418dc1fb0
---
common/spl/Kconfig | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/common/spl/Kconfig b/common/spl/Kconfig
index aa3a85eea54d..77cf04d38ed0 100644
--- a/common/spl/Kconfig
+++ b/common/spl/Kconfig
@@ -974,6 +974,21 @@ config SPL_NAND_SUPPORT
This enables the drivers in drivers/mtd/nand/raw as part of an SPL
build.
+config SPL_NAND_RAW_U_BOOT_USE_SECTOR
+ bool "NAND raw mode: by sector"
+ depends on SPL_NAND_SUPPORT
+ select SPL_LOAD_BLOCK
+ help
+ Use sector number for specifying U-Boot location on NAND in
+ raw mode.
+
+config SPL_NAND_RAW_U_BOOT_SECTOR
+ hex "Address on the NAND to load U-Boot from"
+ depends on SPL_NAND_RAW_U_BOOT_USE_SECTOR
+ help
+ Address on the NAND to load U-Boot from, when the NAND is being used
+ in raw mode. Units: NAND disk sectors (1 sector = 512 bytes).
+
config SPL_NAND_RAW_ONLY
bool "Support to boot only raw u-boot.bin images"
depends on SPL_NAND_SUPPORT
--
2.43.0
@@ -0,0 +1,42 @@
From 24d98fa63bbcb21988e4e822f11686319502fb1f Mon Sep 17 00:00:00 2001
From: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Date: Tue, 20 May 2025 10:54:17 +0200
Subject: [PATCH] imx: spl_imx_romapi: support raw NAND sector
Commit 2a00d73d081a ("spl: mmc: Try to clean up raw-mode options") breaks
the boot of the BSH SMM S2 board. As stated in the dropped comment, "Some
boards use this value even though MMC is not enabled in SPL, for example
imx8mn_bsh_smm_s2".
Support load of the U-Boot image from raw NAND sector.
Fixes: 2a00d73d081a ("spl: mmc: Try to clean up raw-mode options")
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Upstream: https://source.denx.de/u-boot/u-boot/-/commit/24d98fa63bbcb21988e4e822f11686319502fb1f
---
arch/arm/mach-imx/spl_imx_romapi.c | 8 +++-----
1 file changed, 3 insertions(+), 5 deletions(-)
diff --git a/arch/arm/mach-imx/spl_imx_romapi.c b/arch/arm/mach-imx/spl_imx_romapi.c
index 3982f4cca184..b7008df8e35a 100644
--- a/arch/arm/mach-imx/spl_imx_romapi.c
+++ b/arch/arm/mach-imx/spl_imx_romapi.c
@@ -35,12 +35,10 @@ ulong __weak spl_romapi_get_uboot_base(u32 image_offset, u32 rom_bt_dev)
{
u32 sector = 0;
- /*
- * Some boards use this value even though MMC is not enabled in SPL, for
- * example imx8mn_bsh_smm_s2
- */
-#ifdef CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_SECTOR
+#if IS_ENABLED(CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_USE_SECTOR)
sector = CONFIG_SYS_MMCSD_RAW_MODE_U_BOOT_SECTOR;
+#elif IS_ENABLED(CONFIG_SPL_NAND_RAW_U_BOOT_USE_SECTOR)
+ sector = CONFIG_SPL_NAND_RAW_U_BOOT_SECTOR;
#endif
return image_offset + sector * 512 - 0x8000;
--
2.43.0
@@ -0,0 +1,32 @@
From dce71922df352b0eb1b6cc3d40c374ad80a7d6c5 Mon Sep 17 00:00:00 2001
From: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Date: Tue, 20 May 2025 10:54:18 +0200
Subject: [PATCH] configs: imx8mn_bsh_smm_s2: load U-Boot from raw NAND
Commit 2a00d73d081a ("spl: mmc: Try to clean up raw-mode options") breaks
the boot of the BSH SMM S2 board. Add options to load U-Boot from raw NAND
sector.
Fixes: 2a00d73d081a ("spl: mmc: Try to clean up raw-mode options")
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Upstream: https://source.denx.de/u-boot/u-boot/-/commit/dce71922df352b0eb1b6cc3d40c374ad80a7d6c5
---
configs/imx8mn_bsh_smm_s2_defconfig | 2 ++
1 file changed, 2 insertions(+)
diff --git a/configs/imx8mn_bsh_smm_s2_defconfig b/configs/imx8mn_bsh_smm_s2_defconfig
index 9ffcd3b221c3..1c11d4705419 100644
--- a/configs/imx8mn_bsh_smm_s2_defconfig
+++ b/configs/imx8mn_bsh_smm_s2_defconfig
@@ -47,6 +47,8 @@ CONFIG_SPL_DMA=y
CONFIG_SPL_I2C=y
CONFIG_SPL_MTD=y
CONFIG_SPL_NAND_SUPPORT=y
+CONFIG_SPL_NAND_RAW_U_BOOT_USE_SECTOR=y
+CONFIG_SPL_NAND_RAW_U_BOOT_SECTOR=0x300
CONFIG_SPL_NAND_BASE=y
CONFIG_SPL_NAND_IDENT=y
CONFIG_SPL_POWER=y
--
2.43.0
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 55432b2af352f7bf3053c348d8549df2f2deeaa4a361c65d638c2f3b2ca7ec96 linux-6.12.56.tar.xz
sha256 e8a099182562aecff781de72ce769461e706d97af42d740dff20eb450dd5771e linux-6.12.28.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
+1
View File
@@ -0,0 +1 @@
console=tty1 clk_ignore_unused root=/dev/mmcblk1p2 rootfstype=ext4 ro
+37
View File
@@ -0,0 +1,37 @@
/dts-v1/;
/ {
description = "Buildroot kernel for Chromebook Snow";
images {
kernel@1 {
description = "kernel";
data = /incbin/("zImage");
type = "kernel_noload";
arch = "arm";
os = "linux";
compression = "none";
load = <0>;
entry = <0>;
hash@1 {
algo = "sha1";
};
};
fdt@1{
description = "exynos5250-snow.dtb";
data = /incbin/("exynos5250-snow.dtb");
type = "flat_dt";
arch = "arm";
compression = "none";
hash@1 {
algo = "sha1";
};
};
};
configurations {
default = "conf@1";
conf@1{
kernel = "kernel@1";
fdt = "fdt@1";
};
};
};
@@ -0,0 +1,2 @@
CONFIG_MWIFIEX=m
CONFIG_MWIFIEX_SDIO=m
@@ -0,0 +1,30 @@
Some versions of u-boot for this Chromebook check for tpm node
in the device tree and fail badly (reboot) if it is not found.
While not exactly correct, it is much easier to patch the mainline
device tree to match u-boot expectations than to fix u-boot on
this device.
See https://code.google.com/p/chromium/issues/detail?id=220169
and https://lkml.org/lkml/2013/3/4/242
Signed-off-by: Alex Suykov <alex.suykov@gmail.com>
Upstream: Not Applicable
[yann.morin.1998@free.fr: add Upstream tag]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
--- a/arch/arm/boot/dts/exynos5250-snow-common.dtsi
+++ b/arch/arm/boot/dts/exynos5250-snow-common.dtsi
@@ -466,6 +466,11 @@
status = "okay";
samsung,i2c-sda-delay = <100>;
samsung,i2c-max-bus-freq = <66000>;
+
+ tpm {
+ compatible = "infineon,slb9635tt";
+ reg = <0x20>;
+ };
};
&i2c_5 {
@@ -0,0 +1,2 @@
# Localy computed
sha256 5a26478906d5005f4f809402e981518d2b8844949199f60c4b6e1f986ca2a769 linux-4.15.tar.xz
+137
View File
@@ -0,0 +1,137 @@
Samsung XE303C12 aka Chromebook Snow
====================================
This file describes booting the Chromebook from an SD card containing
Buildroot kernel and rootfs, using the original bootloader. This is
the least invasive way to get Buildroot onto the devices and a good
starting point.
The bootloader will only boot a kernel from a GPT partition marked
bootable with cgpt tool from vboot-utils package.
The kernel image must be signed using futility from the same package.
The signing part is done by sign.sh script in this directory.
It does not really matter where rootfs is as long as the kernel is able
to find it, but this particular configuration assumes the kernel is on
partition 1 and rootfs is on partition 2 of the SD card.
Make sure to check kernel.args if you change this.
Making the boot media
---------------------
Start by configuring and building the images.
make chromebook_snow_defconfig
make menuconfig # if necessary
make
The important files are:
uImage.kpart (kernel and device tree, signed)
rootfs.tar
bootsd.img (SD card image containing both kernel and rootfs)
Write the image directly to some SD card.
WARNING: make sure there is nothing important on that card,
and double-check the device name!
SD=/dev/mmcblk1 # may be /dev/sdX on some hosts
dd if=output/images/bootsd.img of=$SD
Switching to developer mode and booting from SD
-----------------------------------------------
Power Chromebook down, then power it up while holding Esc+F3.
BEWARE: switching to developer mode deletes all user data.
Create backups if you need them.
While in developer mode, Chromebook will boot into a white screen saying
"OS verification is off".
Press Ctrl-D at this screen to boot Chromium OS from eMMC.
Press Ctrl-U at this screen to boot from SD (or USB)
Press Power to power it off.
Do NOT press Space unless you mean it.
This will switch it back to normal mode.
The is no way to get rid of the white screen without re-flashing the bootloader.
Troubleshooting
---------------
Loud *BEEP* after pressing Ctrl-U means there's no valid partition to boot from.
Which in turn means either bad GPT or improperly signed kernel.
Return to the OS verification screen without any sounds means the code managed
to reboot the board. May indicate properly signed but invalid image.
Blank screen means the image is valid and properly signed but cannot boot
for some reason, like missing or incorrect DT.
In case the board becomes unresponsive:
* Press Esc+F3+Power. The board should reboot instantly.
Remove SD card to prevent it from attempting a system recovery.
* Hold Power button for around 10s. The board should shut down into
its soft-off mode. Press Power button again or open the lid to turn in on.
* If that does not work, disconnect the charger and push a hidden
button on the underside with a pin of some sort. The board should shut
down completely. Opening the lid and pressing Power button will not work.
To turn it back on, connect the charger.
Partitioning SD card manually
-----------------------------
Check mksd.sh for partitioning commands.
Use parted and cgpt on a real device, and calculate the partition
sizes properly. The kernel partition may be as small as 4MB, but
you will probably want the rootfs to occupy the whole remaining space.
cgpt may be used to check current layout:
output/host/bin/cgpt show $SD
All sizes and all offsets are in 512-byte blocks.
Writing kernel and rootfs to a partitioned SD card
--------------------------------------------------
Write .kpart directly to the bootable partition:
dd if=output/images/uImage.kpart of=${SD}1
Make a new filesystem on the rootfs partition, and unpack rootfs.tar there:
mkfs.ext4 ${SD}2
mount ${SD2} /mnt/<ROOTFS-PARTITION>
tar -xvf output/images/rootfs.tar -C /mnt/<ROOTFS-PARTITION>
umount /mnt/<ROOTFS-PARTITION>
This will require root permissions even if you can write to $SD.
Kernel command line
-------------------
The command line is taken from board/chromebook/snow/kernel.args and stored
in the vboot header (which also holds the signature).
The original bootloader prepends "cros_secure console= " to the supplied
command line. The only way to suppress this is to enable CMDLINE_FORCE
in the kernel config, disabling external command line completely.
That's not necessary however. The mainline kernel ignores cros_secure,
and supplying console=tty1 in kernel.args undoes the effect of console=
Booting with console= suppresses all kernel output.
As a side effect, it makes /dev/console unusable, which the init in use must
be able to handle.
WiFi card
---------
Run modprobe mwifiex_sdio to load the driver.
The name of the device should be mlan0.
Further reading
---------------
https://www.chromium.org/chromium-os/developer-information-for-chrome-os-devices/samsung-arm-chromebook
http://linux-exynos.org/wiki/Samsung_Chromebook_XE303C12/Installing_Linux
http://archlinuxarm.org/platforms/armv7/samsung/samsung-chromebook
http://www.de7ec7ed.com/2013/05/application-processor-ap-uart-samsung.html
http://www.de7ec7ed.com/2013/05/embedded-controller-ec-uart-samsung.html
+41
View File
@@ -0,0 +1,41 @@
#!/bin/sh
# This script creates u-boot FIT image containing the kernel and the DT,
# then signs it using futility from vboot-utils.
# The resulting file is called uImage.kpart.
BOARD_DIR=$(dirname $0)
mkimage=$HOST_DIR/bin/mkimage
futility=$HOST_DIR/bin/futility
devkeys=$HOST_DIR/share/vboot/devkeys
run() { echo "$@"; "$@"; }
die() { echo "$@" >&2; exit 1; }
test -f $BINARIES_DIR/zImage || \
die "No kernel image found"
test -x $mkimage || \
die "No mkimage found (host-uboot-tools has not been built?)"
test -x $futility || \
die "No futility found (host-vboot-utils has not been built?)"
# kernel.its references zImage and exynos5250-snow.dtb, and all three
# files must be in current directory for mkimage.
run cp $BOARD_DIR/kernel.its $BINARIES_DIR/kernel.its || exit 1
echo "# entering $BINARIES_DIR for the next command"
(cd $BINARIES_DIR && run $mkimage -f kernel.its uImage.itb) || exit 1
# futility requires non-empty file to be supplied with --bootloader
# even if it does not make sense for the target platform.
echo > $BINARIES_DIR/dummy.txt
run $futility vbutil_kernel \
--keyblock $devkeys/kernel.keyblock \
--signprivate $devkeys/kernel_data_key.vbprivk \
--arch arm \
--version 1 \
--config $BOARD_DIR/kernel.args \
--vmlinuz $BINARIES_DIR/uImage.itb \
--bootloader $BINARIES_DIR/dummy.txt \
--pack $BINARIES_DIR/uImage.kpart || exit 1
rm -f $BINARIES_DIR/kernel.its $BINARIES_DIR/dummy.txt
@@ -1,45 +0,0 @@
image efi-part.vfat {
vfat {
file EFI {
image = "efi-part/EFI"
}
file Image {
image = "Image"
}
}
size = 64M
}
image disk.img {
hdimage {
partition-table-type = "gpt"
}
# When in eMMC user data, this protects U-Boot environment
partition env {
partition-type-uuid = u-boot-env
offset = 17K
size = 16K
}
# This allows to boot from recovery SD card
partition firmware {
image = "flash.bin"
# Linux reserved
partition-type-uuid = 8DA63339-0007-60C0-C436-083AC8230908
offset = 33K
}
partition boot {
image = "efi-part.vfat"
partition-type-uuid = esp
bootable = true
}
partition root {
partition-type-uuid = root-arm64
image = "rootfs.ext2"
}
}
@@ -1,6 +0,0 @@
set default="0"
set timeout="5"
menuentry "Buildroot" {
linux /Image root=PARTLABEL=root rootwait
}
@@ -1,2 +0,0 @@
# Locally calculated
sha256 e11880bf39dabfcb5945b58e848ddba661a1cd92425a997c626dec62b2dac6a9 arm-trusted-firmware-v2.13-git4.tar.gz
@@ -1 +0,0 @@
../linux/linux.hash
@@ -1,2 +0,0 @@
# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 231311bd7084dc3129944d26bb43be6ff837da82fb2104a67704aebca8bfa69f linux-6.16.8.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 e6c6b93e2be417df57ceb05a2eb6505744e3fbdd3b2ae5e5bf79bf6028b6f84d optee-client-4.7.0.tar.gz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 976b9c184678516038d4e79766608e81d10bf136f76fd0db2dc48f90f994fbd9 optee-os-4.7.0.tar.gz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,69 +0,0 @@
#!/bin/sh
set -eux
BOARD_DIR=$(dirname "$0")
# Override the default GRUB configuration file with our own.
cp -vf "${BOARD_DIR}/grub.cfg" "${BINARIES_DIR}/efi-part/EFI/BOOT/grub.cfg"
BINMAN_DIR="$BINARIES_DIR/binman"
BINMAN_DTB="$BINMAN_DIR/u-boot.dtb"
UBOOT_DIR=$(find "$BUILD_DIR" -maxdepth 1 -type d -name 'uboot-*')
# Adjust binman dtb.
rm -fr "$BINMAN_DIR"
mkdir -v "$BINMAN_DIR"
cp -v "$UBOOT_DIR/u-boot.dtb" "$BINMAN_DTB"
# Add the fip image to the list of loadables.
fdtput -t s "$BINMAN_DTB" /binman/section/fit/configurations/@config-SEQ loadables atf fip
# Remove the tee node to avoid duplicate, as it is in the FIP image.
fdtput --remove "$BINMAN_DTB" /binman/section/fit/images/tee
# Generate flash image with binman.
# We do this here to break the build dependency loop involving tf-a, op-tee, and
# u-boot.
# We use BL2 instead of BL31 in this configuration.
(cd "${UBOOT_DIR}" && \
./tools/binman/binman \
--toolpath ./tools \
-v5 \
build \
-u \
-d "$BINMAN_DTB" \
-O . \
-m \
--allow-missing \
--fake-ext-blobs \
-I "$BINMAN_DIR" \
-I . \
-I ./board/compulab/imx8mm-cl-iot-gate \
-I arch/arm/dts \
-a of-list="imx8mm-cl-iot-gate-optee" \
-I "$BINARIES_DIR" \
-a atf-bl31-path=bl2.bin \
-a tee-os-path= \
-a ti-dm-path= \
-a opensbi-path= \
-a default-dt="imx8mm-cl-iot-gate-optee" \
-a scp-path= \
-a rockchip-tpl-path= \
-a spl-bss-pad= \
-a tpl-bss-pad=1 \
-a vpl-bss-pad=1 \
-a spl-dtb=y \
-a tpl-dtb= \
-a vpl-dtb= \
-a pre-load-key-path= \
-a of-spl-remove-props="interrupt-parent interrupts" \
)
# Copy the flash image.
cp -v "$UBOOT_DIR/flash.bin" "$BINARIES_DIR/"
# Verify that it will fit in the eMMC boot partition.
size=$(du -b "$BINARIES_DIR/flash.bin" |cut -f 1)
if [ "$size" -gt 4160512 ]; then
echo "Flash image is too big! (${size} bytes)" >&2
exit 1
fi
@@ -1,131 +0,0 @@
Introduction
============
The iot-gate-imx8_ebbr_defconfig is meant to illustrate some aspects of the Arm
EBBR specification[1] and the Arm SystemReady Devicetree band[2].
It allows building an AArch64 disk image with a U-Boot based firmware
implementing the subset of UEFI defined by EBBR, as well as a Linux OS booting
with UEFI, to run on the Compulab IOT-GATE-iMX8. [3]
This configuration is not related with the official BSP from Compulab. [4]
Building
========
$ make iot-gate-imx8_ebbr_defconfig
$ make
Generated files under output/images/:
* disk.img: An eMMC or USB key disk image comprising TF-A, OP-TEE, the U-Boot
bootloader, the GRUB bootloader, the Linux kernel and the root filesystem.
* flash.bin: A firmware image suitable for flashing in eMMC boot partition
comprising TF-A, OP-TEE and the U-Boot bootloader.
Running
=======
Before flashing the firmware to eMMC, make sure that you have the IOTG-ACC-M2SD
M.2 to SD adapter for recovery and prepare a recovery SD card. [5]
Insert the SD card and the M.2 adapter.
Prepare a USB key on a PC:
# dd if=output/images/disk.img of=<USB key device> ; sync
Insert the USB key, close jumper E1 on the board to select recovery boot,
connect to the UART console on the micro USB connector (a Silicon Labs CP2104
UART bridge) with baudrate 115200, power on the board and break to U-Boot
prompt.
Flash the firmware from the USB key to the eMMC boot partition:
u-boot=> usb start
u-boot=> usb dev 0
u-boot=> usb read ${loadaddr} 0x42 0x1fbe
u-boot=> mmc dev 2 1
u-boot=> mmc write ${loadaddr} 0x42 0x1fbe
u-boot=> mmc partconf 2 0 1 0
Power off the board, remove jumper E1 and the M.2 SD card adapter, then restart
the board; it should boot to Linux, with the root filesystem on the USB key.
Other setups are also possible, with the firmware and/or the root filesystem in
the eMMC user data. The firmware binary is also available as flash.bin for
convenience, to allow network download for example.
With the firmware in the eMMC boot partition, it is possible to install or run
another OS supporting the EBBR specification.
The image generated by the aarch64_efi_defconfig, the images from Linux
distributions such as Debian, Fedora, openSUSE, Ubuntu, OpenWrt and Yocto, and
the Arm ACS Devicetree images[6] are examples of compatible OS images.
When installing other OSes to eMMC, it is recommended to protect the first 32KB
of the user data with a partition, as this is where the U-Boot environment can
be saved.
Firmware details
================
Noteworthy firmware features:
- TF-A, OP-TEE & U-Boot
- UEFI, with EFI variables stored on disk in the ESP
- Support for ethernet, USB and RTC
- U-Boot environment in eMMC user data (starting from byte 0x4400)
Architecture diagram:
Non-Secure : Secure
:
+---------------------------+ :
EL0 | Busybox | :
+---------------------------+ : +--------+
EL1 | Linux | : | OP-TEE | S-EL1
+---------------------------+ : +--------+
EL2 | U-Boot, GRUB, Linux (kvm) | :
+---------------------------+ :
...................................:
+----------------------------------------+
| ROM, U-Boot SPL, TF-A | EL3
+----------------------------------------+
Boot flow:
ROM -+-> SPL -> TF-A -+-> OP-TEE
`-> U-Boot -> GRUB -> Linux -> Busybox
The ROM loads U-Boot SPL.
U-Boot SPL does the DRAM setup, loads the fit image with TF-A, OP-TEE, U-Boot
and the Devicetree.
In this configuration TF-A is booting with BL2 and BL31.
OP-TEE amends the Devicetree, calls back TF-A to go to normal world.
U-Boot loads GRUB with UEFI, boots Linux at EL2.
Miscellaneous
=============
This configuration is based on the work of Paul Liu[7] and is inspired by the
other configurations related with EBBR, and the Arm SystemReady Devicetree Band
Integration and Testing Guide[8].
To avoid a circular build dependency, we skip the binman step during U-Boot
build:
BR2_TARGET_UBOOT_CUSTOM_MAKEOPTS="cmd_binman=:"
Then we run binman manually in the post-image script.
Firmware update and UEFI Secure Boot are currently not supported.
The disk image cannot be used for SD card recovery at this point.
[1] https://github.com/ARM-software/ebbr
[2] https://www.arm.com/architecture/system-architectures/systemready-compliance-program/systemready-devicetree-band
[3] https://www.compulab.com/products/iot-gateways/iot-gate-imx8-industrial-arm-iot-gateway/
[4] https://mediawiki.compulab.com/w/index.php?title=Building_IOT-GATE-iMX8_and_SBC-IOT-iMX8_Yocto_Linux_images
[5] https://mediawiki.compulab.com/w/index.php?title=IOT-GATE-iMX8_and_SBC-IOT-iMX8:_U-Boot:_Recovery
[6] https://github.com/ARM-software/arm-systemready/tree/main/SystemReady-devicetree-band/prebuilt_images
[7] https://git.linaro.org/plugins/gitiles/people/paul.liu/systemready/build-scripts
[8] https://developer.arm.com/documentation/DUI1101/latest/
@@ -1,6 +0,0 @@
CONFIG_ARCH_MISC_INIT=y
CONFIG_CMD_RNG=y
CONFIG_DM_REGULATOR_ANATOP=y
CONFIG_DM_RNG=y
CONFIG_FSL_CAAM=y
CONFIG_PHY_ANEG_TIMEOUT=5000
-4
View File
@@ -1,4 +0,0 @@
label coolpi-4b-buildroot
kernel /Image.gz
devicetree /rk3588s-coolpi-4b.dtb
append root=/dev/mmcblk1p2 rw rootfstype=ext4 earlycon earlyprintk console=ttyS2,1500000n8 rootwait
-35
View File
@@ -1,35 +0,0 @@
# SD card image for Cool PI 4b
image boot.vfat {
vfat {
files = {
"Image.gz",
"rk3588s-coolpi-4b.dtb",
"extlinux"
}
}
size = 32M
}
image sdcard.img {
hdimage {
partition-table-type = "hybrid"
}
partition uboot {
in-partition-table = "false"
image = "u-boot-rockchip.bin"
offset = 32K
}
partition boot {
partition-type = "0xC"
bootable = "true"
image = "boot.vfat"
}
partition rootfs {
partition-type = 0x83
image = "rootfs.ext2"
}
}
@@ -1 +0,0 @@
../linux/linux.hash
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 de8b97cfeae74c22f832ee4ca2333c157cc978d98baa122f0ee9c01796a2fe43 linux-6.14.10.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
-7
View File
@@ -1,7 +0,0 @@
#!/usr/bin/env bash
set -e
BOARD_DIR="$(dirname "$0")"
gzip -fk "${BINARIES_DIR}/Image"
install -m 0644 -D "$BOARD_DIR/extlinux.conf" "$BINARIES_DIR/extlinux/extlinux.conf"
support/scripts/genimage.sh -c board/coolpi/coolpi-4b/genimage.cfg
-57
View File
@@ -1,57 +0,0 @@
Cool Pi 4B
==============
https://www.cool-pi.com/product/cp4b/
Build:
======
$ make coolpi_4b_defconfig
$ make
Files created in output directory
=================================
output/images
.
output/images/
├── boot.vfat
├── extlinux
│   └── extlinux.conf
├── Image
├── Image.gz
├── rk3588_bl31_v1.40.elf
├── rk3588_ddr_lp4_2112MHz_lp5_2736MHz_v1.12.bin
├── rk3588s-coolpi-4b.dtb
├── rootfs.ext2
├── rootfs.ext4 -> rootfs.ext2
├── rootfs.tar
├── sdcard.img
├── u-boot.bin
└── u-boot-rockchip.bin
Creating bootable SD card:
==========================
Simply invoke (as root)
sudo dd if=output/images/sdcard.img of=/dev/sdX && sync
Where X is your SD card device.
Booting:
========
Serial console:
---------------
The Cool Pi 4B has a 40-pin GPIO header.
The Uart pins are as follows:
pin 6: gnd
pin 8: tx
pin 10: rx
Baudrate for this board is 1500000.
Login:
------
Enter 'root' as login user, and the prompt is ready.
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4850cf670a032c70f38b713a27d62046c5f747caf028c5f50b18f98606a9eb1 linux-6.12.52.tar.xz
sha256 643142c1b5991560dd12f950825cc19e4497b95b82641918ecff1177f4130c1d linux-6.12.24.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4850cf670a032c70f38b713a27d62046c5f747caf028c5f50b18f98606a9eb1 linux-6.12.52.tar.xz
sha256 643142c1b5991560dd12f950825cc19e4497b95b82641918ecff1177f4130c1d linux-6.12.24.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
+17
View File
@@ -0,0 +1,17 @@
image sdcard.img {
hdimage {
}
partition u-boot {
in-partition-table = "no"
image = "u-boot.imx"
offset = 1K
}
partition rootfs {
partition-type = 0x83
image = "rootfs.ext2"
offset = 1M
size = 60M
}
}
+38
View File
@@ -0,0 +1,38 @@
Buildroot for Embest RIoTboard
==============================
This is a small development board, based on Freescale IMX6 Solo SoC
(single core ARM Cortex-A9).
More details about the board can be found at:
http://www.embest-tech.com/riotboard
1. Compiling buildroot
----------------------
$ make riotboard_defconfig
$ make
2. Installing buildroot
-----------------------
Prepare an SD-card and plug it into your card reader. Always double
check the block device before writing to it, as writing to the wrong
block device can cause irrecoverable data loss. Now you can write the
image to your SD-card:
sudo dd if=output/images/sdcard.img of=/dev/<sdcard-block-device> bs=1M
3. Running buildroot
--------------------
Position the board so you can read the label "RIoTboard" on the right
side of SW1 DIP switches. Configure the SW1 swiches like this:
1 0 1 0 0 1 0 1
ON OFF ON OFF OFF ON OFF ON
Now plug your prepared SD-card in slot J6. Connect a serial console
(115200, 8, N, 1) to header J18. Connect a 5V/1A power supply to the
board and enjoy.
@@ -0,0 +1,6 @@
default buildroot
label buildroot
kernel /boot/zImage
devicetree /boot/imx6dl-riotboard.dtb
append console=ttymxc1,115200 root=/dev/mmcblk1p1 rw
+39
View File
@@ -0,0 +1,39 @@
image boot.vfat {
vfat {
files = {
"uImage",
"imx6ul-geam-kit.dtb"
}
}
size = 64M
}
image sdcard.img {
hdimage {
}
partition SPL {
in-partition-table = "no"
image = "SPL"
offset = 1K
}
partition u-boot-dtb {
in-partition-table = "no"
image = "u-boot-dtb.img"
offset = 69K
}
partition boot {
partition-type = 0xC
bootable = "true"
image = "boot.vfat"
offset = 8M
}
partition rootfs {
partition-type = 0x83
image = "rootfs.ext2"
}
}
+66
View File
@@ -0,0 +1,66 @@
********************************************
Buildroot for Engicam GEAM6UL SOM platforms:
********************************************
This file documents the Buildroot support for all Engicam GEAM6UL
SOM platform boards.
GEAM6UL SOM Starter kits:
https://www.engicam.com/vis-prod/101115
This configuration uses U-Boot mainline and kernel mainline.
Build
=====
First, configure Buildroot for the Engicam GEAM6UL SOM:
- for GEAM6UL SOM:
make engicam_imx6ul_geam_defconfig
Build all components:
make
You will find the following files in output/images/:
- imx6ul-geam-kit.dtb
- rootfs.ext4
- rootfs.tar
- sdcard.img
- SPL
- u-boot-dtb.img
- uImage
Create a bootable SD card
=========================
To determine the device associated to the SD card have a look in the
/proc/partitions file:
cat /proc/partitions
Buildroot prepares a bootable "sdcard.img" image in the output/images/
directory, ready to be dumped on a SD card. Launch the following
command as root:
dd if=output/images/sdcard.img of=/dev/<your-sd-device>
sync
*** WARNING! This will destroy all the card content. Use with care! ***
For details about the medium image layout, see the definition in
board/engicam/geam6ul/genimage.cfg
Boot the GEAM6UL boards with SD boot:
====================================
To boot your newly created system:
- insert the SD card in the SD slot of the board;
- connect 3-wire RS232 serial port J28 on board, and connect with other
serial end or USB cable(if serial-to-usb converter used) using
a terminal emulator at 115200 bps, 8n1;
- close JM3 for sd boot.
- power on the board.
Enjoy!
+42
View File
@@ -0,0 +1,42 @@
image boot.vfat {
vfat {
files = {
"uImage",
"imx6dl-icore.dtb",
"imx6q-icore.dtb",
"imx6q-icore-ofcap10.dtb",
"imx6q-icore-ofcap12.dtb"
}
}
size = 64M
}
image sdcard.img {
hdimage {
}
partition SPL {
in-partition-table = "no"
image = "SPL"
offset = 1K
}
partition u-boot-dtb {
in-partition-table = "no"
image = "u-boot-dtb.img"
offset = 69K
}
partition boot {
partition-type = 0xC
bootable = "true"
image = "boot.vfat"
offset = 8M
}
partition rootfs {
partition-type = 0x83
image = "rootfs.ext2"
}
}
+4
View File
@@ -0,0 +1,4 @@
# Currently kernel mainline exhibits issues when running cpufreq as ondemand
# governor on mx6.
# CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND is not set
CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
+93
View File
@@ -0,0 +1,93 @@
*********************************************
Buildroot for Engicam i.CoreM6 SOM platforms:
*********************************************
This file documents the Buildroot support for Engicam i.CoreM6
platform boards.
i.CoreM6 Quad/Dual/DualLite/Solo SOM Starter kits:
https://www.engicam.com/vis-prod/101120
i.CoreM6 Quad/Dual/DualLite/Solo Open Frame 10.1 C.TOUCH kits:
https://www.engicam.com/vis-prod/101133
This configuration uses U-Boot mainline and kernel mainline.
Build
=====
First, configure Buildroot for the Engicam i.CoreM6:
make engicam_imx6qdl_icore_defconfig
Build all components:
make
You will find the following files in output/images/:
- imx6q-icore.dtb (for i.CoreM6 Quad/Dual)
- imx6dl-icore.dtb (for i.CoreM6 DualLite/Solo)
- imx6q-icore-ofcap10.dtb (for i.CoreM6 Quad/Dual ofcap 10)
- imx6q-icore-ofcap12.dtb (for i.CoreM6 Quad/Dual ofcap 12)
- rootfs.ext4
- rootfs.tar
- sdcard.img
- SPL
- u-boot-dtb.img
- uImage
Create a bootable SD card
=========================
To determine the device associated to the SD card have a look in the
/proc/partitions file:
cat /proc/partitions
Buildroot prepares a bootable "sdcard.img" image in the output/images/
directory, ready to be dumped on a SD card. Launch the following
command as root:
dd if=output/images/sdcard.img of=/dev/<your-sd-device>
sync
*** WARNING! This will destroy all the card content. Use with care! ***
For details about the medium image layout, see the definition in
board/engicam/icorem6/genimage.cfg
Boot the i.CoreM6 boards with SD boot:
=====================================
To boot your newly created system:
- insert the SD card in the SD slot of the board;
- connect 3-wire RS232 serial port J28 on board, and connect with other
serial end or USB cable(if serial-to-usb converter used) using
a terminal emulator at 115200 bps, 8n1;
- close JM3 for sd boot.
- power on the board.
Testing graphics on i.CoreM6:
============================
Build with support for Etnaviv, Qt5 and demo applications:
make engicam_imx6qdl_icore_qt5_defconfig
make
Running kmscube
# kmscube -D /dev/dri/card1
Running glmark2-es2-drm
# glmark2-es2-drm
Running Qt5 Cinematic Demo:
- for i.CoreM6 Starter Kit
# export QT_QPA_EGLFS_KMS_CONFIG=/root/imx6qdl-icore.json
- for i.CoreM6 ofcap10
# export QT_QPA_EGLFS_KMS_CONFIG=/root/imx6qdl-icore-ofcap10.json
- for i.CoreM6 ofcap12
# export QT_QPA_EGLFS_KMS_CONFIG=/root/imx6qdl-icore-ofcap12.json
# CinematicExperience-demo
Enjoy!
@@ -0,0 +1,11 @@
{
"device": "/dev/dri/card1",
"hwcursor": false,
"pbuffers": true,
"outputs": [
{
"name": "LVDS1",
"mode": "1280x800"
}
]
}
@@ -0,0 +1,11 @@
{
"device": "/dev/dri/card1",
"hwcursor": false,
"pbuffers": true,
"outputs": [
{
"name": "LVDS1",
"mode": "1280x480"
}
]
}
@@ -0,0 +1,11 @@
{
"device": "/dev/dri/card1",
"hwcursor": false,
"pbuffers": true,
"outputs": [
{
"name": "LVDS1",
"mode": "800x480"
}
]
}
+40
View File
@@ -0,0 +1,40 @@
image boot.vfat {
vfat {
files = {
"uImage",
"imx6dl-icore-rqs.dtb",
"imx6q-icore-rqs.dtb"
}
}
size = 64M
}
image sdcard.img {
hdimage {
}
partition SPL {
in-partition-table = "no"
image = "SPL"
offset = 1K
}
partition u-boot-dtb {
in-partition-table = "no"
image = "u-boot-dtb.img"
offset = 69K
}
partition boot {
partition-type = 0xC
bootable = "true"
image = "boot.vfat"
offset = 8M
}
partition rootfs {
partition-type = 0x83
image = "rootfs.ext2"
}
}
+69
View File
@@ -0,0 +1,69 @@
*************************************************
Buildroot for Engicam i.CoreM6 RQS SOM platforms:
*************************************************
This file documents the Buildroot support for Engicam i.CoreM6 RQS
SOM platform boards.
i.CoreM6 Quad/Dual/DualLite/Solo RQS SOM Starter kits:
https://www.engicam.com/vis-prod/101124
This configuration uses U-Boot mainline and kernel mainline.
Build
=====
First, configure Buildroot for the Engicam i.CoreM6 RQS:
- for i.CoreM6 RQS Quad/Dual/DualLite/Solo:
make engicam_imx6qdl_icore_rqs_defconfig
Build all components:
make
You will find the following files in output/images/:
- for i.CoreM6 Quad/Dual RQS:
- imx6q-icore-rqs.dtb
- for i.CoreM6 DualLite/Solo RQS:
- imx6dl-icore-rqs.dtb
- rootfs.ext4
- rootfs.tar
- sdcard.img
- SPL
- u-boot-dtb.img
- uImage
Create a bootable SD card
=========================
To determine the device associated to the SD card have a look in the
/proc/partitions file:
cat /proc/partitions
Buildroot prepares a bootable "sdcard.img" image in the output/images/
directory, ready to be dumped on a SD card. Launch the following
command as root:
dd if=output/images/sdcard.img of=/dev/<your-sd-device>
sync
*** WARNING! This will destroy all the card content. Use with care! ***
For details about the medium image layout, see the definition in
board/engicam/icorem6_rqs/genimage.cfg
Boot the i.CoreM6 RQS boards with SD boot:
=========================================
To boot your newly created system:
- insert the SD card in the SD slot of the board;
- connect 3-wire RS232 serial port J7 on board, and connect with other
serial end or USB cable(if serial-to-usb converter used) using
a terminal emulator at 115200 bps, 8n1;
- close JM2 for sd boot.
- power on the board.
Enjoy!
+39
View File
@@ -0,0 +1,39 @@
image boot.vfat {
vfat {
files = {
"uImage",
"imx6ul-isiot-emmc.dtb"
}
}
size = 64M
}
image sdcard.img {
hdimage {
}
partition SPL {
in-partition-table = "no"
image = "SPL"
offset = 1K
}
partition u-boot-dtb {
in-partition-table = "no"
image = "u-boot-dtb.img"
offset = 69K
}
partition boot {
partition-type = 0xC
bootable = "true"
image = "boot.vfat"
offset = 8M
}
partition rootfs {
partition-type = 0x83
image = "rootfs.ext2"
}
}
+66
View File
@@ -0,0 +1,66 @@
********************************************
Buildroot for Engicam Is.IoT SOM platforms:
********************************************
This file documents the Buildroot support for all Engicam Is.IoT MX6UL
SOM platform boards.
Is.IoT MX6UL SOM Starter kits:
https://www.engicam.com/vis-prod/101122
This configuration uses U-Boot mainline and kernel mainline.
Build
=====
First, configure Buildroot for the Engicam Is.IoT MX6UL SOM:
- for Is.IoT MX6UL SOM:
make engicam_imx6ul_isiot_defconfig
Build all components:
make
You will find the following files in output/images/:
- imx6ul-isiot-emmc.dtb
- rootfs.ext4
- rootfs.tar
- sdcard.img
- SPL
- u-boot-dtb.img
- uImage
Create a bootable SD card
=========================
To determine the device associated to the SD card have a look in the
/proc/partitions file:
cat /proc/partitions
Buildroot prepares a bootable "sdcard.img" image in the output/images/
directory, ready to be dumped on a SD card. Launch the following
command as root:
dd if=output/images/sdcard.img of=/dev/<your-sd-device>
sync
*** WARNING! This will destroy all the card content. Use with care! ***
For details about the medium image layout, see the definition in
board/engicam/isiot/genimage.cfg
Boot the Is.IoT MX6UL boards with SD boot:
=========================================
To boot your newly created system:
- insert the SD card in the SD slot of the board;
- connect 3-wire RS232 serial port J28 on board, and connect with other
serial end or USB cable(if serial-to-usb converter used) using
a terminal emulator at 115200 bps, 8n1;
- close JM3 for sd boot.
- power on the board.
Enjoy!
@@ -20,7 +20,7 @@ main ()
"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
-ap "${BINARIES_DIR}/bl31.bin" a55 ${ATF_LOAD_ADDR} \
-ap "${BINARIES_DIR}/u-boot-hash.bin" a55 0x80200000 \
-ap "${BINARIES_DIR}/tee-raw.bin" a55 0x96000000 \
-ap "${BINARIES_DIR}/tee.bin" a55 0x96000000 \
-out "${BINARIES_DIR}/u-boot-atf-container.img"
else
"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
-2
View File
@@ -1,7 +1,5 @@
#!/usr/bin/env bash
set -e
#
# dtb_list extracts the list of DTB files from BR2_LINUX_KERNEL_INTREE_DTS_NAME
# in ${BR_CONFIG}, then prints the corresponding list of file names for the

Some files were not shown because too many files have changed in this diff Show More