Compare commits

..
284 Commits
Author SHA1 Message Date
Arnout Vandecappelle 1bf78b4185 Makefile: update for 2025.11.1
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-01-20 20:51:25 +01:00
Arnout VandecappelleandThomas Perale e272875fa7 CHANGES: update for 2025.11.1
Co-authored-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-01-20 20:51:13 +01:00
Preyas Sharma 24f4c18ccd docs: use https for documentation links
Switch a handful of documentation/website links from http to https.

Signed-off-by: Preyas Sharma <preyas17@zohomail.in>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 71f2cc7002)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:36:11 +01:00
Bernd Kuhls e850c121ef package/libarchive: bump version to 3.8.5
Fixes a bsdtar regression introduced in 3.8.4.

https://github.com/libarchive/libarchive/releases/tag/v3.8.5

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Peter: Mention regression fix]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 13c3e723ce)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:35:13 +01:00
Thomas Perale 143770fbdc package/libcoap: security bump to v4.3.5a
For more info on the release, see:

- https://github.com/obgm/libcoap/compare/v4.3.5...v4.3.5a
- https://github.com/obgm/libcoap/blob/release-4.3.5-patches/ChangeLog

Fixes the following vulnerabilities:

- CVE-2025-59391:
    A memory disclosure vulnerability exists in libcoap's OSCORE
    configuration parser in libcoap before release-4.3.5-patches. An out-
    of-bounds read may occur when parsing certain configuration values,
    allowing an attacker to infer or read memory beyond string boundaries
    in the .rodata section. This could potentially lead to information
    disclosure or denial of service.

    https://www.cve.org/CVERecord?id=CVE-2025-59391

- CVE-2025-65493:
    NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5
    allows remote attackers to cause a denial of service via a crafted
    DTLS/TLS connection that triggers BIO_get_data() to return NULL.

    https://www.cve.org/CVERecord?id=CVE-2025-65493

- CVE-2025-65494:
    NULL pointer dereference in get_san_or_cn_from_cert() in
    src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to
    cause a denial of service via a crafted X.509 certificate that causes
    sk_GENERAL_NAME_value() to return NULL.

    https://www.cve.org/CVERecord?id=CVE-2025-65494

- CVE-2025-65495:
    Integer signedness error in tls_verify_call_back() in
    src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to
    cause a denial of service via a crafted TLS certificate that causes
    i2d_X509() to return -1 and be misused as a malloc() size parameter.

    https://www.cve.org/CVERecord?id=CVE-2025-65495

- CVE-2025-65496:
    NULL pointer dereference in coap_dtls_generate_cookie() in
    src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to
    cause a denial of service via a crafted DTLS handshake that triggers
    SSL_get_SSL_CTX() to return NULL.

    https://www.cve.org/CVERecord?id=CVE-2025-65496

- CVE-2025-65497:
    NULL pointer dereference in coap_dtls_generate_cookie() in
    src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to
    cause a denial of service via a crafted DTLS handshake that triggers
    SSL_get_SSL_CTX() to return NULL.

    https://www.cve.org/CVERecord?id=CVE-2025-65497

- CVE-2025-65498:
    NULL pointer dereference in coap_dtls_generate_cookie() in
    src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to
    cause a denial of service via a crafted DTLS handshake that triggers
    SSL_get_SSL_CTX() to return NULL.

    https://www.cve.org/CVERecord?id=CVE-2025-65498

- CVE-2025-65499:
    Array index error in tls_verify_call_back() in src/coap_openssl.c in
    OISM libcoap 4.3.5 allows remote attackers to cause a denial of
    service via a crafted DTLS handshake that triggers
    SSL_get_ex_data_X509_STORE_CTX_idx() to return -1.

    https://www.cve.org/CVERecord?id=CVE-2025-65499

- CVE-2025-65500:
    NULL pointer dereference in coap_dtls_generate_cookie() in
    src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to
    cause a denial of service via a crafted DTLS handshake that triggers
    SSL_get_SSL_CTX() to return NULL.

    https://www.cve.org/CVERecord?id=CVE-2025-65500

- CVE-2025-65501:
    Null pointer dereference in coap_dtls_info_callback() in OISM libcoap
    4.3.5 allows remote attackers to cause a denial of service via a DTLS
    handshake where SSL_get_app_data() returns NULL.

    https://www.cve.org/CVERecord?id=CVE-2025-65501

LICENSE Year updated see [1].

[1] https://github.com/obgm/libcoap/commit/c9135b6b26b978295a3e1312ff59cb7cb9b32251

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d3ebc63ce7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:34:28 +01:00
Bernd Kuhls 29d7905db4 package/libcurl: security bump to version 8.18.0
https://curl.se/ch/8.18.0.html

Fixes CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819,
CVE-2025-15079 & CVE-2025-15224: https://curl.se/docs/vuln-8.17.0.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39aaf317d5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:33:53 +01:00
Waldemar Brodkorb beb6064cd5 package/uclibc: bump to 1.0.56
Changes in this release:

Julian Vetter (1):
      libc: kvx: add {get,set,swap,make}context functions

Waldemar Brodkorb (6):
      Add glibc internal macros for 64 Bit architectures
      fix verbose output with make 4.4.1
      nds32: add missing define for TLS
      NPTL: remove attribute_protected from function
      add gettid syscall wrapper
      bump version for 1.0.56 release

tinyusbboard .matrixstorm (1):
      avoid crashes in statical linked binaries when dlopen()

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f82f5fe177)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:32:31 +01:00
Bernd Kuhls b9bb73c0eb package/bitcoin: broken on m68k
Buildroot commit a3a88ff1c8 bumped bitcoin
to version 26.0 which includes upstream commit
https://github.com/bitcoin/bitcoin/commit/b8401c3281978beed6198b2f9782b6a8dd35cbd7
causing an assertion on m68k:

/home/thomas/autobuild/instance-7/output-1/build/bitcoin-30.0/src/support/allocators/pool.h:92:36:
 error: static assertion failed: Units of size ELEM_SIZE_ALIGN need to
 be able to store a ListNode
   92 |     static_assert(sizeof(ListNode) <= ELEM_ALIGN_BYTES, "Units
      |                   ~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
 of size ELEM_SIZE_ALIGN need to be able to store a ListNode");

/home/thomas/autobuild/instance-7/output-1/build/bitcoin-30.0/src/support/allocators/pool.h:92:36:
 note: the comparison reduces to '(4 <= 2)'

To fix the problem we disable bitcoin on m68k.

Fixes:
30.0: https://autobuild.buildroot.net/results/268/2688e4a2aa8dc34343f0218fd6727d0ae3adb132/
26.0: https://autobuild.buildroot.net/results/fb0/fb05401c7de289e0f87f5c9e3a7f92f5589b590b/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 555114a0ec)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:31:54 +01:00
Vincent Stehlé 9eb3839f23 support/testing: test_xen: add block
Enhance the Xen python tests to exercise block devices: this boils down
to switching from ramdisks to disk partitions for the domains rootfs.
(Refer to the comments in the python script for block devices details.)

- Add support for PCI and Xen block to the Linux kernel configurations.
- Add a few commands to list the xvda block device for good measure.
- Generate two partitions with the rootfs in the disk images; we use the
  same rootfs contents twice, once for each domain.
- Add a paravirtualized block device to the Xen dom1 configurations and
  adjust both domains kernel command lines, to specify the rootfs
  locations.
- Build host-qemu for Arm v7, to workaround an issue with 32b Arm and
  old Qemu versions, which is what we have on CI currently.
- While at it, bump Linux kernel to 6.18.4 and U-Boot to 2026.01.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Cc: Julien Olivain <ju.o@free.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 09baeb4653)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:30:40 +01:00
Vincent Stehlé dc3e25cbee package/xen: xen tools need coreutils stat at runtime
Xen tools scripts need the stat program from coreutils to work
correctly, and not the one from busybox.
One such example is the /etc/xen/scripts/locking.sh script, which will
cause timeouts for operations such as "xl block-attach", or when
starting a DomU with a disk.

Add the dependency on coreutils to fix this.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Cc: Alistair Francis <alistair@alistair23.me>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ca23f860d1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:28:52 +01:00
Bernd Kuhls e35028d708 linux: bump CIP kernel to version 5.10.246-cip66
Added Upstream: tag to patch.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fd2555ecfd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:28:21 +01:00
James Hilliard 431dfa0e0b package/python-certifi: bump to version 2026.1.4
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3e5fa2e9d2)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:23:30 +01:00
Marcus Hoffmann 98dcc7c43f package/python-certifi: bump to 2025.11.12
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4c06257302)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:23:20 +01:00
Francois Perrad c882087ec4 DEVELOPERS: Drop support for some packages from Francois Perrad
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0a1f5fd592)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:20:31 +01:00
Francois Perrad d09417453c package/perl-mozilla-ca: bump to version 20250602
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8e1abc7c3f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:19:22 +01:00
Bernd Kuhls 845eb6c33d package/vlc: security bump to version 3.0.23
https://code.videolan.org/videolan/vlc/-/blob/3.0.23/NEWS
"Security:
 * Fix null deref in libass, undefined shift in theora and cc-708,
   integer overflow in daala, Infinite loop in h264 parsing, buffer
   overflow in png and multiple format-overflows"

https://code.videolan.org/videolan/vlc/-/tags/3.0.23
"It also adds a small feature on audio codec information, and fixes extra
 security issues compared to the numerous we fixed in 3.0.22."

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9c3d400816)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:18:23 +01:00
Bernd Kuhls 09e041bdf8 package/vlc: bump to version 3.0.22
Release notes:
https://code.videolan.org/videolan/vlc/-/blob/3.0.22/NEWS

Rebased patch 0005.

Removed patch 0011 which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a8c2ab3995)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:17:32 +01:00
Giulio Benetti 8a6bf80827 package/rpcbind: fix build failure due to missing BR2_PACKAGE_LIBTIRPC_RPCDB
Package rpcbind requires libtirpc rpcdb option enabled. Package
libtirpc with commit [1] disabled rpcdb functions by default so let's
select it by default to enable rpcdb functions required.

[1]:
https://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=7cea8ad66aecc21e6caae330b5d31075af399193

Fixes:
https://autobuild.buildroot.org/results/f461212605d9d5f1c38a1ffe00a83912522bf482/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a2159c80b5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:16:32 +01:00
Giulio Benetti 52b6234061 package/nfs-utils: fix build failure due to missing BR2_PACKAGE_LIBTIRPC_RPCDB
Package nfs-utils requires libtirpc rpcdb option enabled. Package
libtirpc with commit [1] disabled rpcdb functions by default so let's
select it by default to enable rpcdb functions required.

[1]:
https://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=7cea8ad66aecc21e6caae330b5d31075af399193

Fixes:
https://autobuild.buildroot.org/results/29adf2d04cf4c46e492af95edaa96983985d6b57/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 83d0ba5faf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:16:21 +01:00
Giulio Benetti 848adc792e package/libtirpc: introduce BR2_PACKAGE_LIBTIRPC_RPCDB
Package libtirpc with commit[1] exposes --enable-rpcdb so make it
selectable to allow packages that use rpcdb functions to enable it
and build correctly.

[1]:
https://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=7cea8ad66aecc21e6caae330b5d31075af399193

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Petr Vorel <petr.vorel@gmail.com>
[Bernd: move gss comment into if-block]
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 746dd2ad2b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:15:49 +01:00
James Knight d36d284bc2 package/gvfs: remove schema compile and cleanup hook
Dropping the need for this package to compile any schemas as the
libglib2 package (a dependency) already handles this during target
finalization.

In addition, libglib2 already removes schemas from the target during
target finalization so the gvfs-specific cleanup can be dropped.

Signed-off-by: James Knight <git@jdknight.me>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7b5735cc69)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:15:40 +01:00
James Knight aa290648ea package/libgtk4: remove schema compile hook
Dropping the need for this package to compile any schemas as the
libglib2 package (a dependency) already handles this during target
finalization.

Signed-off-by: James Knight <git@jdknight.me>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2fb684fd68)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:15:10 +01:00
James Knight f89a71d306 package/libgtk3: remove schema compile hook
Dropping the need for this package to compile any schemas as the
libglib2 package (a dependency) already handles this during target
finalization.

Signed-off-by: James Knight <git@jdknight.me>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f9ce4dd52f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:14:30 +01:00
Peter Seiderer c4ac35c600 package/ssdp-responder: update S50ssdpd (move shellcheck comment)
- S50ssdpd: move shellcheck comment to the line where needed

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Reviewed-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0687bdeaae)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:14:05 +01:00
Peter Seiderer d0a755cfe2 package/iwd: suppress S40iwd shellcheck warnings
- suppress S40iwd shellcheck warnings:

  In package/iwd/S40iwd line 8:
  [ -r "/etc/default/$DAEMON" ] && . "/etc/default/$DAEMON"
                                     ^--------------------^ SC1090 (warning): ShellCheck can't follow non-constant source. Use a directive to specify location.

  In package/iwd/S40iwd line 15:
  		-- $IWD_ARGS
                     ^-------^ SC2086 (info): Double quote to prevent globbing and word splitting.

- remove package/iwd/S40iwd from .checkpackageignore

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f38453f00e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:13:12 +01:00
Peter Seiderer f7b4ef3d38 package/iwd: update S40iwd (use long options)
- use long options (as suggested in [1] example)
- drop '-q'/quiet option from startup

[1] https://nightly.buildroot.org/#adding-packages-start-script

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 58a19f3240)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:12:38 +01:00
Philip Molloy 69d6fd1be5 configs/beagleboneai_defconfig: fix whitespace
Signed-off-by: Philip Molloy <philip.molloy@analog.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 18655efbd5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 09:10:48 +01:00
Giulio Benetti 9527a010f2 package/efl: bump to version 1.28.1
Some important addition and several bug fixes for gcc-15. Some of those
fixes are committed but not part of version 1.28.1 so they are added as
local patches while dropping old patches except the tslib one.

See Release Notes of all versions:
https://www.enlightenment.org/news/2025-03-17-efl-1.28.1
https://www.enlightenment.org/news/2025-01-11-efl-1.28.0
https://www.enlightenment.org/news/2023-12-23-efl-1.27.0

COPYING.images was removed as part of upstream commit
83d598a79c16b532113aeda8b1d3ff8a0816bde7.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c7a1b73f17)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-15 08:44:47 +01:00
Titouan Christophe 1f642b56de {linux, linux-headers}: bump 6.18.x, 6.17.x, 6.12.x, 6.6.x, 6.1.x series
Update the latest kernel releases to:
 - 6.18 -> 6.18.5
 - 6.17.11 -> 6.17.13
 - 6.12.61 -> 6.12.65
 - 6.6.119 -> 6.6.120
 - 6.1.159 -> 6.1.160

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2026-01-13 09:34:22 +01:00
Thomas Petazzoni df60f37551 package/perl-dbd-mysql: add missing dependencies
Since commit 8708f3a23a ("package/mysql:
drop virtual package"), we no longer have mysql as a virtual package,
and therefore perl-dbd-mysql directly selects mariadb. However,
mariadb as stricter dependencies than what the mysql virtual package
had, and this commit forgot to properly propagate those dependencies,
causing a Config.in warning:

WARNING: unmet direct dependencies detected for BR2_PACKAGE_MARIADB
  Depends on [n]: BR2_INSTALL_LIBSTDCPP [=y] && !BR2_STATIC_LIBS [=n] && BR2_USE_MMU [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y] && (BR2_TOOLCHAIN_HAS_ATOMIC [=y] || BR2_TOOLCHAIN_HAS_SYNC_8 [=n]) && BR2_USE_WCHAR [=n]
  Selected by [y]:
  - BR2_PACKAGE_PERL_DBD_MYSQL [=y] && BR2_PACKAGE_PERL [=y] && !BR2_STATIC_LIBS [=n] && BR2_INSTALL_LIBSTDCPP [=y] && BR2_USE_MMU [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y]

Fixes: 8708f3a23a ("package/mysql: drop virtual package")
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 64a288e33c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:40 +01:00
Thomas Petazzoni 9cfb7daaea package/perl-dbd-mysql: update dependency comments
Since commit 8708f3a23a ("package/mysql:
drop virtual package"), we no longer have mysql as a virtual package,
and therefore perl-dbd-mysql directly selects mariadb. As part of
that, the comments related to the dependencies have not been updated
accordingly. Fix that up.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 65fcceed89)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:38 +01:00
Thomas Petazzoni 6fad2374f0 package/libgtk4: add missing dependency for BR2_PACKAGE_LIBGTK4_GSTREAMER
Back when the libgtk4 package was introduced in commit
faf2a1d2ab, its
BR2_PACKAGE_LIBGTK4_GSTREAMER option did not properly propagate the
dependencies of BR2_PACKAGE_GST1_PLUGINS_BASE_LIB_OPENGL, causing the
following Config.in warning:

WARNING: unmet direct dependencies detected for BR2_PACKAGE_GST1_PLUGINS_BASE_LIB_OPENGL
  Depends on [n]: BR2_PACKAGE_GSTREAMER1 [=y] && BR2_PACKAGE_GST1_PLUGINS_BASE [=y] && (BR2_PACKAGE_HAS_LIBGL [=n] || BR2_PACKAGE_HAS_LIBGLES [=n])
  Selected by [y]:
  - BR2_PACKAGE_LIBGTK4_GSTREAMER [=y] && BR2_PACKAGE_LIBGTK4 [=y]

Fix that by properly propagating the dependency.

Fixes: faf2a1d2ab ("package/libgtk4: new package")
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d0034ff965)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:36 +01:00
Thomas Petazzoni 09e77d09bb package/mender-update-modules: fix dependencies of BR2_PACKAGE_MENDER_UPDATE_MODULES_ROOTFS_VERSION_CHECK
Since this option was introduced in commit
a474642fdc ("package/mender-update-modules:
new package"), its dependencies have been incorrect. It selects
BR2_PACKAGE_PYTHON3 without replicating all its dependencies, so we
fix that.

Also, it did have the !BR2_STATIC_LIBS dependency propagated, but not
mentioned in the Config.in comment, so we fix that as well.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7571ee4a36)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:34 +01:00
Thomas Petazzoni b8638757b2 package/opencv4: add missing Config.in comments on gcc >= 8
Commit
75ab6cf93a ("package/{python-}protobuf:
bump to version 28.1") added a whole bunch of gcc >= 8 dependencies to
opencv4 options, but forgot to create or update appropriate Config.in
comments for several options:

BR2_PACKAGE_OPENCV4_LIB_OBJDETECT
BR2_PACKAGE_OPENCV4_LIB_STITCHING
BR2_PACKAGE_OPENCV4_WITH_PROTOBUF

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 73e9b996fb)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:33 +01:00
Thomas Petazzoni c5ef366701 package/opencv4-contrib: add missing gcc >= 8 dependencies
Commit
75ab6cf93a ("package/{python-}protobuf:
bump to version 28.1") added a whole bunch of gcc >= 8 dependencies to
OpenCV 4 options, but forgot to propagate those to opencv4-contrib.

Fixes:

WARNING: unmet direct dependencies detected for BR2_PACKAGE_OPENCV4_LIB_OBJDETECT
  Depends on [n]: BR2_PACKAGE_OPENCV4 [=y] && !BR2_TOOLCHAIN_USES_UCLIBC [=n] && BR2_PACKAGE_PROTOBUF_ARCH_SUPPORTS [=y] && BR2_TOOLCHAIN_GCC_AT_LEAST_8 [=n]
  Selected by [y]:
  - BR2_PACKAGE_OPENCV4_CONTRIB_LIB_FACE [=y] && BR2_PACKAGE_OPENCV4_CONTRIB [=y] && BR2_PACKAGE_PROTOBUF_ARCH_SUPPORTS [=y] && !BR2_TOOLCHAIN_USES_UCLIBC [=n]

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a67ab908d4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:31 +01:00
Thomas Petazzoni 0744d70e27 package/opencv4-contrib: fix Config.in comments
The comments saying that dnn_objdetect and dnn_superres need a glibc
or musl toolchain should be shown when a uClibc toolchain is selected,
not when a toolchain NOT using uClibc is selected (as this is exactly
what's needed).

Fixes: a2e01b23fc ("package/opencv-contrib: propagate opencv4 dependencies")
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3b84ec3ee2)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:29 +01:00
Thomas Petazzoni 311a9a8d89 package/mender-update-modules: fix kernel header dependency
Commit f933a165e2 ("package/podman:
raise kernel header requirement to v4.14") raised the kernel headers
dependency of podman from 3.17 to 4.14, but forgot to propagate this
change to the mender-update-modules podman option, causing the
following kconfig warning:

WARNING: unmet direct dependencies detected for BR2_PACKAGE_PODMAN
  Depends on [n]: BR2_USE_MMU [=y] && BR2_PACKAGE_HOST_GO_TARGET_ARCH_SUPPORTS [=y] && BR2_PACKAGE_HOST_RUSTC_TARGET_ARCH_SUPPORTS [=y] && BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS [=y] && BR2_PACKAGE_LIBSECCOMP_ARCH_SUPPORTS [=y] && BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_14 [=n] && BR2_TOOLCHAIN_HAS_THREADS [=y] && BR2_USE_WCHAR [=y]
  Selected by [y]:
  - BR2_PACKAGE_MENDER_UPDATE_MODULES_PODMAN [=y] && BR2_PACKAGE_MENDER_UPDATE_MODULES [=y] && BR2_USE_MMU [=y] && BR2_PACKAGE_HOST_GO_TARGET_ARCH_SUPPORTS [=y] && BR2_PACKAGE_HOST_RUSTC_TARGET_ARCH_SUPPORTS [=y] && BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS [=y] && BR2_PACKAGE_LIBSECCOMP_ARCH_SUPPORTS [=y] && BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_17 [=y] && BR2_TOOLCHAIN_HAS_THREADS [=y] && BR2_USE_WCHAR [=y]

Fix this by properly propagating the dependency.

Fixes: f933a165e2 ("package/podman: raise kernel header requirement to v4.14")
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0cead19ec2)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:27 +01:00
Julien Olivain a160539c5f package/gnupg2: bump to version 2.4.9
For release note, see:
https://dev.gnupg.org/T8001

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 611ad8e88c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:25 +01:00
Julien Olivain 6922f4b1fa support/testing: add flac runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8e76564b0e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:23 +01:00
Julien Olivain ed5ec9571d support/testing: add opus-tools runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7f1c2b9d69)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:21 +01:00
Bernd Kuhls 86bf49e0f6 package/icu: now needs gcc >= 7 due to C++17 usage
Buildroot commit dcee99507c bumped icu
from version 73-2 to 77-1.

Upstream raised the minimum C++ requirement to C++17 in version 75-1:

https://github.com/unicode-org/icu/releases/tag/release-75-1
https://icu.unicode.org/download/75
"C++ code now requires C++17 [...]"

Consequently, this commit switches the minimum gcc version needed by
package/icu to 7, and propagates this to icu's reverse dependencies.

No autobuilder errors were recorded since we don't test toolchains as
old as gcc 6.x

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4b4d7621a1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:19 +01:00
Quentin Schulz 9f7467c84c boot/uboot: fix externally provided env file not used on 2025.10
fb5235239aad ("env: Rename DEFAULT_ENV_FILE to
ENV_DEFAULT_ENV_TEXT_FILE") renamed the Kconfig symbols and thus we need
to adapt the U-Boot package in Buildroot to support it.

Fixes: 128c26f287 ("boot/uboot: bump to version 2025.10")
Reported-by: Ozan Durgut <ozandurgut.2001@hotmail.com>
Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 088bec09fb)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:17 +01:00
Titouan Christophe 6f1f23e55c package/mender: ignore mender CVE because it doesn't affect the client package
CVE-2024-46948 only affects the device management and update server part
of Mender, and not the client running on the devices

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f16475f377)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 18:22:15 +01:00
Julien Olivain 68ed68d578 package/spice: add missing gcc >= 6 dependency
spice uses std::list allocator, which requires gcc >= 6. There are no
known autobuilder failures as we don't test toolchains as old as gcc
5.

Signed-off-by: Julien Olivain <ju.o@free.fr>
[Thomas: extracted from
https://patchwork.ozlabs.org/project/buildroot/patch/20241122213809.176709-1-ju.o@free.fr/]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit e09811f971)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 17:05:02 +01:00
Julien Olivain dc1dd39001 package/spice: propagate libglib2 BR2_USE_MMU dependency
spice selects libglib2, but forgot to propagate the BR2_USE_MMU
dependency. There is no practical implication at the moment as spice
is only available for i386 and x86-64, and both always have MMU. But
as we're about to relax this architecture dependency, it makes sense
to fix the propagation of BR2_USE_MMU.

Signed-off-by: Julien Olivain <ju.o@free.fr>
[Thomas: patch extracted from
https://patchwork.ozlabs.org/project/buildroot/patch/20241122213809.176709-1-ju.o@free.fr/]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ec45430d19)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 17:04:50 +01:00
Bernd Kuhls cc96e9214a package/fio: fix build
Buildroot commit 215133c0fc bumped fio from
3.38 to 3.41. Upstream commit
https://github.com/axboe/fio/commit/4175f4dbec5d1d9e5e0490026e98b1806188e098
was added to fio 3.40 including FALLOC_FL_ZERO_RANGE which causes build
errors.

Added upstream commit which not only fixes musl builds but also uclibc.

Fixes:
musl: https://autobuild.buildroot.net/results/8e9/8e946c7104be0295a9a2b946fe4a82bba0e28db8/
uclibc: https://autobuild.buildroot.net/results/ece/ece6ff1b20fa3482a88ffb3a6167b2bba9b06101/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8ba59c12e9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 17:03:12 +01:00
Neal Frager 279b5fd4c0 boot/arm-trusted-firmware: override BL31 environment variable error
When building the arm-trusted-firmware, if the host environment has a value
configured in the BL31 variable such as the following:

export BL31=/tmp/bl31.elf

This will cause the build of the bl31.elf to be skipped leading to the
following build error:

make[1]: Nothing to be done for 'bl31'.
And then:
readelf: Error: './output/build/arm-trusted-firmware-custom/build/versal/release/bl31/bl31.elf': No such file

To fix this, clear the BL31 variable in the MAKE_OPTS, so that building the
arm-trusted-firmware will build regardless of the host environment.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Tested-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6019df8f99)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 17:02:05 +01:00
Michael Nosthoff 1416b2a9df package/boost: remove dependencies on Boost.System
Boost.System is a header only library since Boost 1.69.0 [0].

A Stub Library remained for backward compatibility. This
mainly affects CMake Packages that use FindPackage and
explicitly list 'system'.

For Boost internal modules this is not the case so remove this
dependency.

Buildroot packages should select BR2_PACKAGE_BOOST_SYSTEM explicitly
if needed and not rely on a proxy dependency from other boost packages.

[0] https://github.com/boostorg/system/blob/develop/doc/system/changes.adoc#changes-in-boost-169

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fbb5c74058)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 17:01:22 +01:00
Michael Nosthoff b5ddb8b794 package/libcpprestsdk: add dependency on Boost.System
libcpprestsdk searches for the Boost.System module in its
CMakeLists. Hence it should be selected as a dependency.

This does not fix any build failure, as boost-system was implicitly
selected by one of the other boost-* options that this package
selects, but an upcoming commit is going to change how boost-system is
selected by other boost-* modules, making this preparation change
necessary.

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c659e0383d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 17:00:36 +01:00
Waldemar Brodkorb 76ba19668b package/evilwm: fix compilation with external toolchains
Switch to generic-package, as the configure script isn't really a
autotool generated script. This fixes building evilwm with an
external toolchain.

Fixes:
 - https://autobuild.buildroot.org/results/250/25040ce7e94acf8f92c24db895d7dea081de1d7a

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d7f6ed49f8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:59:53 +01:00
Waldemar Brodkorb 01e73806f1 package/fontconfig: disable doc and tests for host
On Debian 13 doc generation fails. Disable it like for
the target.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 20f31f90ad)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:58:11 +01:00
Bernd Kuhls e97f1cfe35 package/atf: fix non-threaded build
Buildroot commit d6c3257e93 bumped the
package from 0.21 to 0.23. Upstream release 0.22 includes commit
https://github.com/freebsd/atf/commit/d7c7c53c0626ab59a62aa4efcf05323b3621baa9
which uses CLOCK_MONOTONIC without including time.h.

Fixes:
https://autobuild.buildroot.net/results/41b/41b25ee8e66e34323eca011e4b5fe479ece9ed76/

Two minimal defconfigs to reproduce the build error:

BR2_TOOLCHAIN_BUILDROOT_UCLIBC=y
BR2_PTHREADS_NONE=y
BR2_TOOLCHAIN_BUILDROOT_CXX=y
BR2_PACKAGE_ATF=y

BR2_TOOLCHAIN_BUILDROOT_UCLIBC=y
BR2_PTHREADS_NONE=y
BR2_GCC_VERSION_13_X=y
BR2_TOOLCHAIN_BUILDROOT_CXX=y
BR2_PACKAGE_ATF=y

All defconfigs of the build errors recorded by the buildroot autobuilders
contain BR2_PTHREADS_NONE=y.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit cf383d3e13)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:56:30 +01:00
Dario Binacchi 0475b9df92 package/qt6/qt6base: use correct QT6BASE_CONF_OPTS variable for Vulkan
The Vulkan option was appended to QT6BASE_CONFIGURE_OPTS instead of
QT6BASE_CONF_OPTS, which is the variable actually used during CMake
configuration. This prevented the feature from being enabled/disabled
as expected.

Fixes: 1c27f3a12d ("package/qt6base: add vulkan option")
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 451e735aa0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:55:34 +01:00
Bernd Kuhls 82c003dbee package/atf: update project URL
The old URL redirects to the new URL.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9d334c4abf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:54:14 +01:00
Bernd Kuhls 16ae657333 package/libdill: update project URL
https://github.com/sustrik/libdill/pull/228

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f615dcb271)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:51:33 +01:00
Thomas Perale 802aa14e37 package/softether: fix various build errors
This patch add several upstream patches that fix build error we are
experiencing on the autobuilder related to host-gcc15 and gcc14.

- 0010-use-bool-from-stdbool.patch

Fix a host-gcc15 error with C23 bool reserved keyword when building
host-softether package. This appeared on the autobuilder.

```
                 from Cfg.c:116:
../../src/Mayaqua/MayaType.h:257:33: error: 'bool' cannot be defined via 'typedef'
  257 | typedef unsigned int            bool;
      |                                 ^~~~
../../src/Mayaqua/MayaType.h:257:33: note: 'bool' is a keyword with '-std=c23' onwards
../../src/Mayaqua/MayaType.h:257:1: warning: useless type name in empty declaration
  257 | typedef unsigned int            bool;
      | ^~~~~~~
```

- 0011-fix-implicit-declaration-of-function-getch.patch

Fix an implicit function declaration.

- 0012-vlanunix-fix-implicit-declaration-of-function-freetap.patch

Fix an implicit function declaration.

- 0013-fix-build-on-freebsd-version-140091.patch

Incompatible pointer type which appeared on the autobuilder as well:

```
Unix.c: In function 'UnixIgnoreSignalForThread':
Unix.c:324:25: error: assignment to 'void (*)(int,  siginfo_t *, void *)' from incompatible pointer type 'void * (*)(int,  siginfo_t *, void *)' [-Wincompatible-pointer-types]
  324 |         sa.sa_sigaction = signal_received_for_ignore;
      |                         ^
```

- 0014-cedar-hub-properly-set-value-for-hub-admin-options.patch

Fix an incompatible pointer type error.

- 0015-adjust-types-of-variables.patch

Fix an incompatible pointer type error which appeared on the autobuilder as
well.

```
Secure.c: In function 'OpenSec':
Secure.c:1829:56: error: passing argument 3 of 'sec->Api->C_GetSlotList' from incompatible pointer type [-Wincompatible-pointer-types]
 1829 |         if ((err = sec->Api->C_GetSlotList(true, NULL, &sec->NumSlot)) != CKR_OK || sec->NumSlot == 0)
      |                                                        ^~~~~~~~~~~~~
      |                                                        |
      |                                                        UINT * {aka unsigned int *}
```

- 0016-Cedar-Proto_IKE-fix-too-many-arguments-to-function-N.patch

Fix a function call.

Fixes: https://autobuild.buildroot.org/results/c43/c43a9a221896d37ee8a9d34c5b8e2725351c6eb5
Fixes: https://autobuild.buildroot.org/results/751/7517bb4d32c38d475d901769b0b2fd2c2f3dd543
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Acked-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5b5aebc085)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:43:34 +01:00
Florian Fainelli 84bb54f628 package/cpulimit: correct function signature to use named parmeters
Update 0005-Correct-loop-function-signature.patch to include a named
parameter otherwise the following compiler warning turned error is
triggered:

busy.c:6:1: error: parameter name omitted
 void *loop(void *)
 ^~~~

Interestingly, this builds with GCC > 10.x, but fails fails with GCC
<= 10.

Fixes: https://autobuild.buildroot.org/results/8592e4eb5959124acc885a1cbc2f9d24fb7bcbd1
Fixes: https://autobuild.buildroot.org/results/cf12d080ddd7a2398a79be430d935071ca3250a3/
Fixes: e63181bc00 ("package/cpulimit: Backport fix for function signature")
Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 04ca5dc2cd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:40:08 +01:00
Bernd Kuhls 10efa38ee5 package/xinetd: bump version to 2.3.15.4
Switched to maintained fork:
https://github.com/xinetd-org/xinetd/issues/30

Removed all patches, they are either included in this release or not
needed anymore.

uClibc builds are broken due to missing ecvt/fcvt functions:
https://cgit.uclibc-ng.org/cgi/cgit/uclibc-ng.git/tree/include/stdlib.h?h=v1.0.55#n830
needed by
https://github.com/openSUSE/xinetd/blob/master/src/sio/sprint.c#L176

Added -std=gnu17 to CFLAGS as per upstream recommendation to fix build
errors with newer gcc: https://github.com/openSUSE/xinetd/issues/49

COPYRIGHT file has changed with the following changes:

+Modifications:
+Version 2.3.15.x
+Copyright 2017 SUSE LINUX GmbH and other parties

Fixes:

  https://autobuild.buildroot.net/results/399108140f1932e867e2907c5fa1be2add53beab/

Note: this also fixes issues affecting 2025.02.x, but there is no
simple backport to address those issues. Therefore, the most
reasonable option is probably to take this version bump in 2025.02.x.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4ced81d0b4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:33:23 +01:00
Thomas Petazzoni 1803d68a89 package/lttng-modules: bump to latest 2.13.x to fix build with recent kernels
lttng-modules fails to build in master and in our LTS branch
2025.02.x. Indeed, our LTS branch uses the 6.12 kernel as the latest
LTS, and lttng-modules in version 2.13.10 don't build with the 6.12
kernel:

BR2_arm=y
BR2_cortex_a9=y
BR2_ARM_ENABLE_VFP=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_USE_ARCH_DEFAULT_CONFIG=y
BR2_PACKAGE_LTTNG_MODULES=y

fails to build with 2025.02.x.

To fix this, let's bump to the latest point release in the 2.13.x
branch, which mostly contains fixes needed for the 2.13.x releases to
work with newer kernels. This is considered a reasonable bump for our
2025.02 LTS.

The hash of the license file is updated as the list of files under
each license has changed a bit, but that doesn't change the overall
list of licenses.

Fixes:

  https://autobuild.buildroot.net/results/78d05ded97877f866d2bd7aa600a2dafa01bb364/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 63d0611b0c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:32:14 +01:00
Thomas Devoogdt eebbf7b6bc package/openjdk: fix patch subdirectories
This commit fixes the wrong patch folders which should have been fixed
in commit 475c79d ("package/openjdk{-bin}: bump versions to 17.0.12+7
and 21.0.4+7")

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f2992604a3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:31:14 +01:00
Théo Lebrun 1627619ad0 gitignore: ignore utils/brmake log output named br.log
The `utils/brmake` tool runs `make all` with logs put into `br.log`.
That file is therefore the result of a build and committing it never
makes sense, neither upstream nor on any other remote/branch.

    ⟩ git status --short
    ⟩ make beaglebone_defconfig
    ⟩ ./utils/brmake
    ⟩ git status --short
    ?? br.log

Add a new `/br.log` entry in the root `.gitignore` file.
Append to the end because no ordering logic was found.

Signed-off-by: Théo Lebrun <theo.lebrun@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a5d29e752a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:30:13 +01:00
Fiona Klute 198829dc2f package/dbus: rewrite and rename SysV init script
This brings the script in line with current standards, except the
expected PIDFILE value because changing the PID file path would
require changing build options.

The stop action now uses the PID file instead of "killall", and reload
is supported using SIGHUP (with limitations described in D-Bus
documentation). "--syslog" is added to the dbus-daemon arguments to
ensure log messages will be available, otherwise log messages after
fork may be lost.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f51a475280)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:28:10 +01:00
Fiona Klute f6d2f86388 package/dbus: remove broken "condrestart" action & comment from init script
The "servicename" environment variable was never set, so the condition
in the "condrestart" case would always evaluate to false. Nobody seems
to have noticed since it was introduced with commit
ceb2859765 in 2007, so simply remove it.

Likewise, the comment in the stop function that mentions $servicename
is incorrect, there is no safety check to the "killall" call.

With those, remove the /var/lock/subsys/dbus-daemon file that was
created but never used.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3dd3944097)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:27:43 +01:00
Fiona Klute bb678171b4 package/busybox: tidy up klogd init script
* Wait for process to stop before deleting PID file, instead of fixed
  wait during restart

* Use long form options

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b91258e424)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:23:53 +01:00
Giulio Benetti 828152362c DEVELOPERS: add Giulio Benetti to Putty package
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5c6552cd60)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:23:42 +01:00
Joseph Kogut ba8965f72d package/x11r7/xlib_libxshmfence: set shared-memory-dir
libxshmfence has multiple paths available for the shared memory
directory, as some distros [0] opt to mount their tmpfs in a
non-standard location such as /run/shm rather than /dev/shm.

The default value of 'auto' will set this path to whatever the host is
using, leaking host configuration into the target. See [1].

With X configurations that depend on shared memory files for futexes,
(muvm [2] is a notable example), this results in applications silently
breaking during presentation with a blank window, as the configured
path doesn't have the required tmpfs mount.

Set this path explicitly to avoid situations where the host context
leaks into the package build, causing feature breakage.

[0] https://wiki.ubuntu.com/OneiricOcelot/ReleaseNotes?action=show&redirect=OneiricOcelot%2FTechnicalOverview#Upgrades
[1] https://gitlab.freedesktop.org/xorg/lib/libxshmfence/-/blob/libxshmfence-1.3.3/configure.ac#L144
[2] https://github.com/AsahiLinux/muvm

Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
[Julien:
 - add link to shared memory dir detection code in commit log
 - replace "+=" by "=" in _CONF_OPTS
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cb79eee7fe)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:23:33 +01:00
Thomas Petazzoni 21868726d3 package/rpi-firmware: drop support for vcdbg
This tool has been removed from upstream rpi-firmware, so drop the
corresponding option and logic in rpi-firmware.mk.

The tool has been removed by upstream commit
d1fcc26038186aecc1501a0b749833300afba801 ("opt: Remove builds of
deprectated userland tools").

It is Buildorot commit
28e6953ba8 ("package/rpi-firmware: bump
version to 5476720") that did a bump to a version of rpi-firmware that
no longer provided vcdbg.

Cc: Köry Maincent <kory.maincent@bootlin.com>
Cc: Gaël PORTAY <gael.portay@rtone.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Kory Maincent <kory.maincent@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f53a1af56b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:22:08 +01:00
Thomas Petazzoni 9ddd7fe42c package/zxing-cpp: drop support for Python bindings
Since the bump of zxing-cpp to version 2.3.0 in Buildroot commit
fb032bd34a ("package/zxing-cpp: bump to
version 2.3.0"), the build of the Python bindings has been broken. We
tried to figure things out, but couldn't, and nobody bothered fixing
this since February 2025, so let's drop support for the Python
bindings for the time being.

Fixes:

  https://autobuild.buildroot.net/results/93ffa69b9f92f142c65169f9c3a7c7ad0e733551/

Cc: Thomas Bonnefille <thomas.bonnefille@bootlin.com>
Cc: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f78163431c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:20:10 +01:00
Thomas Petazzoni 463ee61b0f package/libdnet: drop support for Python module
The libdnet Python module no longer builds with Python >= 3.13. The
issue has been reported upstream on August 17, 2025, and there has
been no feedback:

  https://github.com/ofalk/libdnet/issues/114

Until this gets resolved, we have no choice but to drop support for
the Python module of this package.

Fixes:

  https://autobuild.buildroot.net/results/4df6bcaa66d79efac3619a47b08f3cb02c13e276/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit acba4b0fef)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:19:25 +01:00
Thomas Petazzoni a82e419c3d package/python-pyqt5: disable qt5webkit module
Due to issues in the installation of qt5webkit, building the
corresponding Python binding fails:

Project ERROR: Unknown module(s) in QT: webkit
Error: /home/thomas/buildroot/br/output-all/host/bin/qmake failed to create a
makefile from PyQt5.pro.
make[1]: *** [package/pkg-generic.mk:263: /home/thomas/buildroot/br/output-all/build/python-pyqt5-5.15.6/.stamp_configured] Error 1
make: *** [Makefile:83: _all] Error 2

https://lore.kernel.org/buildroot/20220929181350.1026033-1-thomas.ballasi@savoirfairelinux.com/
was an attempt at fixing it, but this patch doesn't work and looks
weird.

So for the time being, disable the Webkit module in python-pyqt5. This
issue has indeed been around for as far as 2022.

Fixes:

  https://autobuild.buildroot.net/results/b9d69d21e734aa62a6e0b4d4124c2bcfc027ebe4/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b3e9dc303e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:17:46 +01:00
Thomas Petazzoni 127b327b99 package/qt5/qt5webkit: fix gcc >= 14.x build issue
Add another patch from Fedora, also used in Arch Linux to fix a gcc >=
14.x build issue:

build/qt5webkit-5.212.0-alpha4/Source/WebCore/page/csp/ContentSecurityPolicy.cpp:235:56:   required from here
  235 |             if ((policy.get()->*allowed)(std::make_pair(algorithm, digest)))
      |                                          ~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
host/opt/ext-toolchain/aarch64-buildroot-linux-gnu/include/c++/14.3.0/type_traits:1246:52: error: non-constant
condition for static assertion
 1246 |       static_assert(std::__is_complete_or_unbounded(__type_identity<_Tp>{}),
      |                     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b79eb5a28f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:17:26 +01:00
Thomas Petazzoni 30236c972d package/qt5/qt5webkit: add patch to fix missing <cstdint> include
It is not clear which change introduce this breakage, but we suspect
it is related to GCC 14.x. In any case, the fix does no harm and is
good to backport to 2025.02.x.

Fixes:

/home/thomas/buildroot/br/output-all/build/qt5webkit-5.212.0-alpha4/Source/ThirdParty/ANGLE/src/common/mathutil.h:575:8: error: ‘uint32_t’ does not name a type
  575 | inline uint32_t RotL(uint32_t x, int8_t r)
      |        ^~~~~~~~
/home/thomas/buildroot/br/output-all/build/qt5webkit-5.212.0-alpha4/Source/ThirdParty/ANGLE/src/common/mathutil.h:19:1: note: ‘uint32_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’
   18 | #include <stdlib.h>
  +++ |+#include <cstdint>
   19 |

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d10726a1a1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:17:15 +01:00
Thomas Petazzoni c2ce12fabc package/qt5/qt5webkit: fix build with ICU >= 76
Since the bump of ICU from ICU 73 to ICU 77 in commit
dcee99507c, the build of qt5webkit fails
with:

/home/thomas/buildroot/br/output-all/host/aarch64-buildroot-linux-gnu/sysroot/usr/include/unicode/char16ptr.h:271:38: error: ‘enable_if_t’ in namespace ‘std’ does not name a template type
  271 | template<typename T, typename = std::enable_if_t<std::is_same_v<T, UChar>>>
      |                                      ^~~~~~~~~~~

We taken two patches from Arch Linux, one which is a partial upstream
backport, and another which was submitted upstream, to address this
build issue.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0ad3afa191)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:16:28 +01:00
Thomas Petazzoni b20acc5bea package/qt5/qt5webkit: add patch to fix CMake >= 4 compatibility
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 31fd1e4a36)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:16:15 +01:00
Bernd Kuhls 3c7ed8125d package/ledmon: update patch to fix musl build
Updated patch following an upstream review:
https://github.com/md-raid-utilities/ledmon/pull/272#issuecomment-3596495739

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b4668eded3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:13:43 +01:00
Fiona Klute 7244ac0442 package/apache: fix checkpackage warnings in init script
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3862abb010)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:12:16 +01:00
Bernd Kuhls fb3e4e1d2d package/utfcpp: fix comments
Buildroot commit dc55e7eb51 added this
package as copy from the taglib package but forgot to change all taglib-
related comments.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b7b96c97f9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:10:45 +01:00
Bernd Kuhls b91b6ff646 package/libupnp: disable blocking-tcp
Suggested by Gerbera:
https://github.com/gerbera/gerbera/commit/fcf31472239705e7d28af81cbe326f8f416f7f7d

CMake Warning at CMakeLists.txt:583 (message):
  !! It is strongly recommended to build libupnp with --disable-blocking-tcp-connections !!
  Without this option non-responsive control points can cause libupnp to hang.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 48c1e7cc6d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:09:04 +01:00
Thomas Perale aecb01fa11 package/cmake: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

These IGNORE_CVES entry introduced in [2] is then no longer matched to
the cmake package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching
[2] 5ce1e773b9 package/cmake: ignore CVE-2016-10642

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ac47f65186)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:04:41 +01:00
Thomas Perale 700f6e24a1 package/dovecot: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

These IGNORE_CVES entry introduced in [2] is then no longer matched to
the dovecot package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching
[2] 948e71689a package/dovecot: ignore CVE-2016-4983

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9dbd14df22)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:04:33 +01:00
Thomas Perale a43ad685df package/freerdp: remove stale IGNORE_CVES
The NVD DB is now correctly tracking the vulnerability starting version
3.0 (see [1]). The IGNORE_CVES entry introduced in [2] is then no longer
needed.

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-4478
[2] f741e8f6e6 package/freerdp: ignore CVE-2025-4478

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b3007ebcaf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:04:27 +01:00
Thomas Perale c4958f7b98 package/glibc: remove stale IGNORE_CVES
The IGNORE_CVES entries introduced in [1] no longer match to the glibc
package following the bump to v2.42 in [2]. The version boundaries
specified on the NVD DB are specific to 2.40 & 2.41.

The CVE-2025-8058 though don't have any information available on the NVD
DB and will remain on the IGNORE_CVES then.

[1] feaf53585a package/glibc: security bump to version 2.41-70
[2] fb6256c0ef package/{glibc, localdef}: bump to version 2.42

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6fc37d7c6e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:04:19 +01:00
Thomas Perale 6f5c8638c1 package/glibc: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

These IGNORE_CVES entries introduced in [2] are then no longer matched to
the glibc package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching
[2] adaae82c58 package/glibc: ignore CVEs not considered as security issues by upstream

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9383a3a726)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:04:13 +01:00
Thomas Perale 50dcf7107f boot/grub2: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

The IGNORE_CVES entries introduced in [2][3][4] are then no longer
matched to the grub2 package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching
[2] 2495630383 boot/grub2: ignore CVE-2024-1048
[3] e2f46ed03d boot/grub2: ignore CVE-2023-4001
[4] a490687571 boot/grub2: ignore the last 3 remaining CVEs

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2a2184f317)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:04:05 +01:00
Thomas Perale af8b9d3635 package/libcurl: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

The CVE-2024-32928 introduced in [2] is then no longer matched to the
libcurl package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching
[2] 7e739d49b2 package/libcurl: ignore CVE-2024-32928

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b155395a52)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:56 +01:00
Thomas Perale e4542119d6 package/libssh: remove stale IGNORE_CVES
The entry was added in commit [1]. But since then the NVD database
updated the version end specifier.

This IGNORE_CVES entry is then no longer needed.

[1] 51b1e1daf5 package/libssh: ignore CVE-2025-5318

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4aacd22a85)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:47 +01:00
Thomas Perale 2b8072fcbd package/pixman: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

The CVE-2023-37769 is then no longer matched to the pixman package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5043af53ed)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:38 +01:00
Thomas Perale 39976c2bb8 package/postgresql: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

The CVE-2017-8806 is then no longer matched to the postgresql package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit b1ca8ca4ba)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:28 +01:00
Thomas Perale 9e371bf1e0 package/rsyslog: remove stale IGNORE_CVES
Since Buildroot commit [1] the CVEs are no longer matched to CPEs with
versions using '-'.

The CVE-2015-3243 is then no longer matched to the rsyslog package.

For more information, see the explanation in commit [1].

[1] 35f376d88e support/scripts/cve.py: fix CPE matching

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1e48fde1cb)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:22 +01:00
Thomas Perale 6a3f34be1a package/tiff: remove stale IGNORE_CVES
The Buildroot commit [1] introduced this IGNORE_CVES entry that was due
to a bad NVD entry.

The NVD database has now fixed the annotation [2] and it can be removed.

[1] 740412aefc package/tiff: ignore CVE-2025-8851
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-8851

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 237cd294b7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:14 +01:00
Thomas Perale f8e626f026 package/patch: add CVE trailer in patches
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patches header as well
as the `Upstream` trailer.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 74b079d9e9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:08 +01:00
Thomas Perale e043bfbc7c package/shellinabox: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header
and adds the `Upstream` trailer.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7c9166cd86)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:03:02 +01:00
Thomas Perale 5ac2cc70b2 package/xinetd: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header
and adds the `Upstream` trailer.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7a8524a701)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:02:54 +01:00
Bernd Kuhls 5611da8c0c package/liburiparser: security bump version to 1.0.0
https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog

Added sha256 hash provided by upstream.

Fixes CVE-2025-67899.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3ef90e752b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:02:43 +01:00
Pierre-Yves Kerbrat a57f9dbc1f package/imagemagick: security bump to 7.1.2-12
Changelog:
https://github.com/ImageMagick/Website/blob/main/ChangeLog.md

CVE-2025-66628:

    In versions 7.1.2-9 and prior, the TIM (PSX TIM) image parser
    contains a critical integer overflow vulnerability in its
    ReadTIMImage function (coders/tim.c).

    For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2025-66628

Signed-off-by: Pierre-Yves Kerbrat <pkerbrat@free.fr>
[Julien: mark commit as security related and add cve info]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4a315e153f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:00:56 +01:00
Alexis Lothoré 7b360bde0d packages/linux-tools: perf: enforce PKG_CONFIG_LIBDIR
For kernel patched with 440cf77625e3 ("perf: build: Setup
PKG_CONFIG_LIBDIR for cross compilation"), if neither PKG_CONFIG_LIBDIR,
PKG_CONFIG_PATH nor PKG_CONFIG_SYSROOT_DIR are provided, the perf
Makefile while try to set some default value for PKG_CONFIG_LIBDIR,
which will not point correctly to buildroot staging directory. This
issue will lead for example to a failure to find libtraceevent even
if it is correctly enabled and installed in the staging dir, and so it
will make perf fail to build.

Make sure to call the perf make command with PKG_CONFIG_LIBDIR variable
set and pointing to buildroot staging area to make sure to properly
detect perf dependencies.

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Tested-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f784c823ef)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 16:00:35 +01:00
Alexis Lothoré 5eca2fdcad package/linux-tools: perf: build with libtraceevent support when it is selected
When trying to perform a custom uprobe recording on a target with perf
built by buildroot, the recording step fails as perf can not record
uprobes without libtraceevent support:

  $ perf probe -x linked_list insert_name index
  Target program is compiled without optimization. Skipping prologue.
  Probe on address 0x808 to force probing at the function entry.

  Added new event:
    probe_linked_list:insert_name (on insert_name in /root/gdb/linked_list with index)

  perf is not linked with libtraceevent, to use the new probe you can use tracefs:

          cd /sys/kernel/tracing/
          echo 1 > events/probe_linked_list/insert_name/enable
          echo 1 > tracing_on
          cat trace_pipe
          Before removing the probe, echo 0 > events/probe_linked_list/insert_name/enable
  $ perf record -e probe_linked_list:insert_name ./linked_list
  event syntax error: 'probe_linked_list:insert_name'
                       \___ unsupported tracepoint

  libtraceevent is necessary for tracepoint support
  Run 'perf list' for a list of valid events

   Usage: perf record [<options>] [<command>]
      or: perf record [<options>] -- <command> [<options>]

      -e, --event <event>   event selector. use 'perf list' to list available events

libtraceevent support for perf has been disabled with commit
b4ab45a5c1 ("package/linux-tools: disable libtracevent detection")
because there was no libtraceevent package in buildroot to replace the
former libtraceevent removed from the kernel sources. Since then, commit
1474f1b34b ("package/libtraceevent: new package") has introduced a
libtraceevent package. We can then expose again the possibility to build
perf with libtraceevent support.

Make buildroot perf makefile detect if libtraceevent package has been
enabled, and if so, allow to build perf with libtraceevent support.

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Tested-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5396f730d7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 15:58:11 +01:00
Dario Binacchi 37992e0766 package/embiggen-disk: fix EMBIGGEN_DISK_VERSION
Make EMBIGGEN_DISK_VERSION compliant with release-monitoring.org.

Fixes: 4ae18c511a
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Reviewed-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9824b964a7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 15:57:49 +01:00
Thomas Perale 838449ec20 package/libfreeimage: various vulnerability patches
This package’s last release dates back to July 2018. Since then, a
number of CVEs have accumulated. This patch applies several
vulnerability fixes from the Fedora project. Not all vulnerabilities are
addressed by this patch.

- CVE-2019-12211

    When FreeImage 3.18.0 reads a tiff file, it will be handed to the
    Load function of the PluginTIFF.cpp file, but a memcpy occurs in
    which the destination address and the size of the copied data are
    not considered, resulting in a heap overflow.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2019-12211

- CVE-2019-12213

    When FreeImage 3.18.0 reads a special TIFF file, the
    TIFFReadDirectory function in PluginTIFF.cpp always returns 1,
    leading to stack exhaustion.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2019-12213

- CVE-2020-24292

    Buffer Overflow vulnerability in load function in PluginICO.cpp in
    FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary
    code via opening of crafted ico file.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2020-24292
  - https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/

- CVE-2020-24293

    Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp
    in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary
    code via opening of crafted psd file.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2020-24293
  - https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/

- CVE-2020-24295

    Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in
    FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary
    code via use of crafted psd file.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2020-24295
  - https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/

- CVE-2021-33367

    Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker
    to cause a denial of service via a crafted JXR file.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2021-33367
  - https://sourceforge.net/p/freeimage/discussion/36109/thread/1a4db03d58/

- CVE-2021-40263

    A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad
    function in PluginTIFF.cpp.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2021-40263
  - https://sourceforge.net/p/freeimage/bugs/336/

- CVE-2021-40266

    FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is
    vulnerabile to null pointer dereference.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2021-40266
  - https://sourceforge.net/p/freeimage/bugs/334/

- CVE-2023-47995

    Memory Allocation with Excessive Size Value discovered in
    BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0
    allows attackers to cause a denial of service.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2023-47995

- CVE-2023-47997

    An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in
    FreeImage 3.18.0 leads to an infinite loop and allows attackers to
    cause a denial of service.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2023-47997

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6750719a20)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-09 15:57:02 +01:00
Thomas Perale f510a02f93 package/libconfuse: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header
and adds the `Upstream` trailer.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ba51d53019)
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-01-08 08:52:16 +01:00
Thomas Perale e985152990 package/mupdf: add CVE-2024-2425{8, 9} to IGNORE_CVES
Buildroot commit [1] removed the IGNORE_CVES entries for
CVE-2024-24258 & CVE-2024-24259 because they referenced a patches no
longer existing.

Those IGNORE_CVES entries are still required because the CVEs reference
the exact mupdf version Buildroot is using.

Re-introduce those IGNORE_CVES entries with an updated comment instead.

[1] f2e442a14d package/mupdf: remove stale IGNORE_CVES

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a8e7e6c852)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:09:34 +01:00
Thomas Perale 070d7302f2 package/pixman: fix patch reference in IGNORE_CVES
Since Buildroot commit [1] the
`0001-Disable-tests.patch` patch reference
was removed in favour of a build argument that disable the tests.

This update the reference in IGNORE_CVES accordingly.

[1] ba2fb599cd package/pixman: bump to version 0.44.2

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f276648692)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:09:30 +01:00
Thomas Perale 3315c0d2c6 package/sdl: fix patch reference in IGNORE_CVES
Since Buildroot commit [1] the
`0003-SDL_x11yuv.c-fix-possible-use-after-free.patch` patch reference
was renamed.

This update the reference in IGNORE_CVES accordingly.

[1] 9fab7bb79d package/sdl: drop directfb support

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d372b654a4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:09:22 +01:00
Thomas Perale cf87779694 package/sdl: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ee647574b7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:09:14 +01:00
Thomas Perale 0d2f7675a2 package/libtomcrypt: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9265e69735)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:09:06 +01:00
Thomas Perale 7ca4625da7 package/cups-filter: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c9b63b439c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:07:54 +01:00
Thomas Perale d7c3aa1413 package/avahi: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header
and adds the `Upstream` trailer.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit cef136b5f0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:07:46 +01:00
Thomas Perale f409cf2452 package/dovecot: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit eb0dde58b3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:07:25 +01:00
Thomas Perale bae0e9a453 package/lua-http: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 848d7dc51f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:07:18 +01:00
Thomas Perale e071e4dd0f package/opusfile: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0b76139aa9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:06:39 +01:00
Thomas Perale 7405e40023 package/tinyxml: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header
and adds the `Upstream` trailer.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7b8c58ae03)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:04:23 +01:00
Thomas Perale 350261e5b9 package/x11vnc: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6244163284)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:03:10 +01:00
Thomas Perale ed0fb7130f package/sox: add CVE trailer in patches
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patches header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9d0e4db4c4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:03:02 +01:00
Francois Perrad 618b0c6822 package/collectl: switch to GitHub
development no longer on https://sourceforge.net/projects/collectl/
but documentation still on https://collectl.sourceforge.net/

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f8b9a50a0e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:02:34 +01:00
Thomas Petazzoni b7a154df97 package/vim: fix reinstallation with a patch
In commit 67e84345c1 ("package/vim: fix
reinstallation"), we fixed the reinstallation of vim for the target
package by removing symlinks before calling "make installlinks".

However, this didn't fix the same problem for the host-vim package.

So instead, this commit adds a patch, accepted upstream, that uses "ln
-sf" instead of "ln -s" to create the symlinks, allowing them to be
overwriten on reinstallation.

Fixes:

ln: failed to create symbolic link 'view': File exists

on reinstallation of host-vim.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ee656a4486)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:02:20 +01:00
Julien Olivain c5ac63e267 support/testing: new kvmtool runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 577a2a32af)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:02:11 +01:00
Julien Olivain 0315fd3d1f package/kvmtool: remove unneeded KVMTOOL_EXTRA_LDFLAGS
Buildroot commit [1] "kvmtool: bump to f77d646ba0" removed the
definition of KVMTOOL_EXTRA_LDFLAGS but forgot to remove its usage
in KVMTOOL_MAKE_OPTS.

This commit removes it since it is no longer needed.

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/f20615b53e83d6263346cb038d59df8e8d6b2b74

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 443307ef50)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:02:02 +01:00
Julien Olivain 9308660696 support/testing: ltp-testsuite: replace runltp by kirk
The run log of this ltp-testsuite test shows:

    INFO: runltp script is deprecated, try kirk
    https://github.com/linux-test-project/kirk

This commit updates this test to replace this deprecated runltp
shell script with the newer kirk Python script.

The logic of this runtime test remains the same: it runs a small number
of 'read' system call tests, and checks there is no failures and at
least one test succeed.

Cc: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Acked-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 43e254a646)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:01:54 +01:00
Bernd Kuhls dc36ea2088 DEVELOPERS: add Bernd Kuhls for libid3tag
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 023c735f42)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:01:46 +01:00
Bernd Kuhls aa066a537f package/python-pysnmp-mibs: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d0900ca523)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:01:32 +01:00
Bernd Kuhls 5222d152d3 package/python-pysendfile: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2952d38125)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:01:24 +01:00
Bernd Kuhls acc6b5d3d0 package/python-pyqrcode: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 46f8497e1c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:01:16 +01:00
Bernd Kuhls a00713b773 package/python-pynacl: fix sort order of dependencies in Config.in
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 50922517f7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:01:09 +01:00
Bernd Kuhls 094ed4d09e package/python-pyinotify: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d2fbbecf94)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:00:55 +01:00
Bernd Kuhls 1e8db1db49 package/python-pyfatfs: add md5 hash
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 92f633b6a7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:00:40 +01:00
Bernd Kuhls 30d817a6f9 package/python-pyasyncore: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 56be405248)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:00:35 +01:00
Bernd Kuhls 3611cdc451 package/python-pyasynchat: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Reviewed-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 424a55cffd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:00:20 +01:00
Bernd Kuhls 9461acbe5d package/python-mpmath: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 15e9110383)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:00:12 +01:00
Bernd Kuhls 4fa742eb86 package/python-minimalmodbus: add md5 hash
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8132e84e04)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:00:04 +01:00
Bernd Kuhls 027b6edc67 package/python-libconf: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5d76be1c04)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:59:57 +01:00
Bernd Kuhls 562e7fb5d2 package/python-json-schema-validator: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 63863ed1f7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:59:49 +01:00
Bernd Kuhls e0fd58288c package/python-ipython-genutils: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 84536c1498)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:59:42 +01:00
Bernd Kuhls eaae745b40 package/python-iowait: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9b7399336e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:59:34 +01:00
Bernd Kuhls a3010c58cf package/python-iniparse: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c62e2390e9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:59:27 +01:00
Bernd Kuhls 4beab2c92f package/python-httplib2: fix sort order of dependencies in Config.in
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 84c9fc51cc)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:59:20 +01:00
Bernd Kuhls 04071794aa package/python-fs: add md5 hash
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4ba2439ccf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:59:11 +01:00
Bernd Kuhls 67ab9c832a package/python-dockerpty: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3b0683d66e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:58:45 +01:00
Bernd Kuhls 7d33e2668b package/python-crcmod: update tarball URL
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 00c12275b9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:58:37 +01:00
Bernd Kuhls 21c7f13b6b package/python-crccheck: add md5 hash
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 30379483bb)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:58:29 +01:00
Bernd Kuhls 410fc58666 package/python-crc16: switch SITE to pypi.org
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4adcc7cac3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:58:25 +01:00
Bernd Kuhls b495fc06c1 package/python-colorzero: switch SITE to pypi.org
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6ac7c62cce)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:58:17 +01:00
Bernd Kuhls 20b7af0d01 package/python-characteristic: add md5 hash, update SITE
Updated package as computed by scanpypi.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 39a123b9ec)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:58:08 +01:00
Julien Olivain f244566d7f support/testing: add tio runtime test
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7c8c8e01fa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:58:01 +01:00
Julien Olivain ca558fb399 package/tio: Config.in: add missing selection of libglib2
Buildroot commit [1] (package/tio: bump to 3.5) added the libglib2 in
the .mk file without selecting it in Config.in.

This commit fixes that.

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/3d85e9df431af790930e03d860bfa098108888a0

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5a40d54cc3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:57:53 +01:00
Thomas Perale ac7842ab6b package/openvmtools: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch fixes the information to the patch header to have a single
vulnerability per line.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 96ba06347b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:57:40 +01:00
Thomas Perale 19f5ea0f92 package/musl: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c0921c6b38)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:57:31 +01:00
Thomas Perale 99520a4485 package/libsndfile: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3efa0091a4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:57:24 +01:00
Thomas Perale 5bf3e72b57 package/jbig2dec: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 51a3cb5db4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:57:16 +01:00
Thomas Perale 7db91bf950 package/graphicsmagick: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 04d80d13ec)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:57:09 +01:00
Thomas Perale 6a50b98029 boot/grub2: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d464e5e856)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:57:03 +01:00
Thomas Perale 160e25159f package/openvmtools: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0669124d77)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:56:53 +01:00
Thomas Perale 4618db63e0 package/mupdf: remove stale IGNORE_CVES
The fixes for the CVE-2024-24258 & CVE-2024-24259 were introduced in [1]
and targeted the package libfreeglut.

The patches that fixed CVE-2024-24258 & CVE-2024-24259 in libfreeglut
were removed in Buildroot commit [2]. With this bump the IGNORE_CVES
entries for mupdf were not removed.

[1] 0f4fef076f package/libfreeglut: add upstream security fix for CVE-2024-2425{8, 9}
[2] b1c77090ef package/libfreeglut: bump version to 3.6.0

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit f2e442a14d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:56:40 +01:00
Thomas Perale 94e3d1a741 package/yasm: add CVE trailer in patch
Since Buildroot commit [1] the patches that fixes a security
vulnerability needs to reference the fixed vulnerability.

This patch adds the relevant information to the patch header.

[1] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1b656345ec)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:56:35 +01:00
Thomas Perale 8d4db92e66 package/cpp-httplib: remove stale IGNORE_CVES
Buildroot commit [1] removed the stale cpp-httplib patched but the
IGNORE_CVES entry wasn't removed.

[1] 8988278241 package/cpp-httplib: remove stale patch

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 77d1dcd2ea)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:56:27 +01:00
Bernd Kuhls 24b6fcc197 package/irqbalance: fix build with gcc >= 15.x
When the ncurses UI code in irqbalance is enabled, the build fails
with gcc >= 15.x, for example with:

BR2_arm=y
BR2_cortex_a53=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PACKAGE_NCURSES=y
BR2_PACKAGE_NCURSES_WCHAR=y
BR2_PACKAGE_IRQBALANCE=y

Backport two upstream patches that fix those issues.

Fixes:

  https://autobuild.buildroot.net/results/3b609fe191e03330480f647b09dd06916da13317/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5335dd1733)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:56:19 +01:00
Bernd Kuhls cb492295c0 package/qt5/qt5enginio: update SITE
Old URL returns 404.

Fixes:
https://autobuild.buildroot.net/results/064/0647daa54deb9df953d43b438ac05ebefb81b6ce/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 814eef2adf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:56:10 +01:00
Bernd Kuhls 0584d66576 package/xvkbd: fix build with gcc >= 14.x
Fixes:

  https://autobuild.buildroot.net/results/86f2ba051e864375bda620dd92e01cb7b8532ac3/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 62db5ae567)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:56:02 +01:00
Julien Olivain 8fb28e79f2 support/testing: ddrescue: use f-string for test config
Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c3d5f2c254)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:55:52 +01:00
Julien Olivain 0a258ddc56 support/testing: ddrescue: use dmsetup from lvm2
The ddresue runtime test is using the `dmsetup` command provided by the
dmraid package. This package is outdated and will be removed. This
command is also provided by the lvm2 package, which is still maintained.

This commit replaces the dmraid package by lvm2 in the test config.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4fc6e8637b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:55:44 +01:00
Thomas Petazzoni b0bf5cb73a package/matchbox-lib: fix build failure with GCC 15.x
Backport upstream patch fixing:

hash.c:76:6: error: conflicting types for ‘hash_empty’; have ‘void(struct hash *)’
   76 | void hash_empty(struct hash *h)
      |      ^~~~~~~~~~
In file included from hash.c:22:
hash.h:41:6: note: previous declaration of ‘hash_empty’ with type ‘void(void)’
   41 | void hash_empty();
      |      ^~~~~~~~~~

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2bfdadab43)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:55:33 +01:00
Thomas Petazzoni 934795b78d package/matchbox-panel: add patch fixing GCC 14.x build issue
Fixes:

mb-applet-launcher.c: In function ‘get_launch_window’:
mb-applet-launcher.c:269:18: error: implicit declaration of function ‘time’ [-Wimplicit-function-declaration]
  269 |   time_t stime = time(NULL);
      |                  ^~~~

No autobuilder failures, it was hidden by other failures.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d5bb2902ec)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:55:24 +01:00
Bernd Kuhls c7684b92f6 package/matchbox-panel: fix build with GCC 14.x
No autobuild errors recorded due to download errors with dependencies.

Patch not sent anymore, original project has no updates since 2010:
https://git.yoctoproject.org/matchbox-panel

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit e235a191dd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:55:09 +01:00
Bernd Kuhls 9b4ab22096 package/matchbox-keyboard: switch to gz tarball
Switched _SOURCE to .gz, upstream does not provide bz2 tarballs
anymore. This means in fact _SOURCE can be dropped, as it's now the
default value.

No autobuild errors recorded due to previous download error with
matchbox-lib.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 446fea34aa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:54:51 +01:00
Bernd Kuhls 9dedbd569c package/matchbox-fakekey: switch to gz tarball
Switched _SOURCE to .gz, upstream does not provide bz2 tarballs anymore.

No autobuild errors recorded due to previous download error with
matchbox-lib.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit c687f2fcf5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:54:32 +01:00
Thomas Petazzoni 9011ca9d31 package/matchbox-lib: switch to gz tarball
Switched _SOURCE to .gz, upstream does not provide bz2 tarballs anymore.

Fixes:

  https://autobuild.buildroot.net/results/66ac5ae4b1cd053122ccebad9f61af02fa5fe7f6/

Co-developed-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 4b33839f12)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:54:23 +01:00
Yann E. MORIN 3d23d0a30a package/skopeo: needs NPTL
So far, skopeo inherited the thread dependency from its runtime
dependencies. However, skopeo uses pthread_getattr_np(3), which
is only available with NPTL on uClibc. glibc and musl have had
it for ages (and only implement NPTL anyway).

Fixes: https://autobuild.buildroot.org/results/b9d123986c2a65427bfca32ee3ea792a988e6890/

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit dab0feeae8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:54:13 +01:00
Marcus Hoffmann 836753465c package/python-can: remove msgpack dependency
Dependency was made optional in 4.6.0 release here:
https://github.com/hardbyte/python-can/commit/6058ab9dfe8b3ba5d23cbff670c0fe767147390a

python-can has a lot of optional dependencies, most of which are not
represented in buildroot. As msgpack is used for the virtual multicast
udp can interface[1], which does seem like a bit of a niche usecase,
just drop the mandatory dependency without introducing a user-visible
config option to enable it.

[1] https://python-can.readthedocs.io/en/4.0.0/interfaces/udp_multicast.html

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit a4cdb412f1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:35 +01:00
Marcus Hoffmann 820df57a93 support/testing: add libiio python bindings runtime test
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 61966c2133)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:31 +01:00
Marcus Hoffmann 8140148332 package/libiio: fix python bindings without glibc utils
Libiio python bindings use ctypes and specifically the find_library()
function from there to load the libiio.so shared library. This is not
working unless glibc utils (specifically ldconfig) is installed to the
target (alternatively the target would need gcc or binutils, for objdump
or ld).

The easy fix here is to just bypass the find_library() machinery
altogether as it's not needed on a buildroot system.

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Tested-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 193df1cbec)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:22 +01:00
Bernd Kuhls 1b9addfc6c package/open-lldp: fix musl build with >= gcc-14.x
GCC >= 14.x is stricter amount having access to the prototypes of
functions being used, causing a build failure in open-lldp due to a
missing <string.h> include. This is only visible with musl probably
because with other C libraries <string.h> end up being included by
some other header.

Fixes:
https://autobuild.buildroot.net/results/0f8/0f88cbe9152ab816b4ae17e1d84e8257f458eb4a/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fe917c3671)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:52:06 +01:00
Thomas Petazzoni c55f7eb582 toolchain/Config.in: drop BR2_TOOLCHAIN_HAS_GCC_BUG_121567
GCC bug 121567 is actually a duplicate of GCC bug 81426, which already
existed upstream, and for which we already had
BR2_TOOLCHAIN_HAS_GCC_BUG_81246.

In addition, BR2_TOOLCHAIN_HAS_GCC_BUG_81246 is correctly defined as
affecting SuperH regardless of the optimization level. Indeed, when
BR2_TOOLCHAIN_HAS_GCC_BUG_121567 was introduced, it was thought that
only -O2 and -O3 levels are affected, but -Og, -O1 and -Ofast are also
affected, causing the python3 build to fail.

Fixes:

  https://autobuild.buildroot.net/results/aca1812415ee84eef223b0fdff88f31a39775294/ (-O1 build)

  https://autobuild.buildroot.net/results/3fd91ce3ff8727d2f9c12f6721df922c60282d70/ (-Ofast build)

  https://autobuild.buildroot.net/results/e5536dcf598a51f5006343513a76f4e223e80a55/ (-Og build)

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2667cab664)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:56 +01:00
Thomas Petazzoni f3a7d86a7c package/python3: make SuperH tweak actually effective
In commit a68899d49e ("package/python3:
work around GCC bug 121567"), we introduced a work around for a gcc
bug, by reducing to -O1 the optimization level on SuperH.

However, it turns out that this is not sufficient, as the build will
only succeeded at -O0.

Fixes:

  https://autobuild.buildroot.net/results/31f/31f34a983036b4135c12e5797b5c2258ab33e6c2/

Which is a config with BR2_OPTIMIZE_2=y, which means
BR2_TOOLCHAIN_HAS_GCC_BUG_121567=y, and therefore -O1 is passed, but
still the build fails. At -O0 the build doesn't fail.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0f938aed25)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:50 +01:00
Sébastien Szymanski 42f81fae5b package/pixman: really enable NEON support on AArch64
The test to enable NEON on AArch64 is as following:

ifeq ($(BR2_aarch64)$(BR2_ARM_CPU_HAS_NEON),yy)

It cannot be to true as $(BR2_aarch64) and $(BR2_ARM_CPU_HAS_NEON) are
mutually exclusive. NEON is compulsory on AArch64 so remove
$(BR2_ARM_CPU_HAS_NEON) from the test.

Fixes: ba2fb599cd ("package/pixman: bump to version 0.44.2")
Signed-off-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d297569eb4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:45 +01:00
Bernd Kuhls 3a2608c47a package/libselinux: allow pip to use system-provided packages
Since the bump of pip to version 25.3 in commit
285097051d, the build of the Python
bindings of libselinux is broken for both the host and target
variants.

For the host variant, because "pip install" no longer finds the
system-provided setuptools and tries to download setuptools by itself,
causing build issues because our host-python doesn't have SSL support:

  Could not fetch URL https://pypi.org/simple/setuptools/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/setuptools/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping

For the target variant, because "pip install" no longer finds the
sysconfigdata package:

  ModuleNotFoundError: No module named '_sysconfigdata__linux_sparc64-linux-gnu'
  [end of output]

We fix this by taking a patch from Debian, which is slightly tweaked
to also cover our host package (the original Debian patch was passing
--no-build-isolation only when DESTDIR was not empty, but in Buildroot
host packages are built with DESTDIR empty, and we do need
--no-build-isolation).

Fixes:

  https://autobuild.buildroot.net/results/0e9de0c0d8b6ec57eea9f8834f02076b296ba4f1/ (host-libselinux)
  https://autobuild.buildroot.org/results/1b87c659f1901b0bf33fa4a2ff0ed40b13114bba/ (libselinux)

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Co-Authored-By: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0e5eef911c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:51:29 +01:00
Thomas Perale 79b670f497 package/linenoise: add CPE
The CPE 'cpe:2.3:a:antirez:linenoise:1.0:*:*:*:*:*:*:*' is valid for the
package linenoise [1].

Since the latest version is '1.0' since 2015 the CPE_ID_VERSION is set
to that version.

The CVE that applies on version 1.0 were checked with the 'cve-check'
script:

```
echo '{"components": [{"bom-ref": "linenoise", "name": "linenoise", "version": "1.0", "cpe": "cpe:2.3:a:antirez:linenoise:1.0:-:*:*:*:*:*:*"}]}' | support/scripts/cve-check | jq -r '.vulnerabilities[].id'
```

Only the CVE-2025-9810 exists and that was fixed in [2].

[1] https://nvd.nist.gov/products/cpe/detail/10423C23-6AAA-439E-B723-1FCDEB3A769F
[2] 3c7cbf97d7 package/linenoise: security bump to version e26268de5e

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2668d121e5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:50:58 +01:00
Thomas Petazzoni d943f82156 package/opencv3: drop support for ffmpeg
opencv3's code is not compatible with newer versions of ffmpeg, and
opencv3 is no longer maintained, so we have no choice but to disable
its ffmpeg support.

Fixes:

  https://autobuild.buildroot.net/results/9ae3911583cccb6362f33cd82e5eaafb059fdc76/

It's not clear which ffmpeg version bump broken the build exactly, but
this issue is definitely present in 2025.02.x as the following
defconfig fails to build in a similar way on 2025.02.x:

 BR2_aarch64=y
 BR2_TOOLCHAIN_EXTERNAL=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_AARCH64_GLIBC_STABLE=y
 BR2_PACKAGE_FFMPEG_NONFREE=y
 # BR2_PACKAGE_FFMPEG_FFMPEG is not set
 # BR2_PACKAGE_FFMPEG_INDEVS is not set
 # BR2_PACKAGE_FFMPEG_OUTDEVS is not set
 BR2_PACKAGE_OPENCV3=y
 BR2_PACKAGE_OPENCV3_LIB_VIDEOIO=y
 BR2_PACKAGE_OPENCV3_BUILD_PERF_TESTS=y
 BR2_PACKAGE_OPENCV3_WITH_FFMPEG=y
 BR2_PACKAGE_OPENCV3_INSTALL_DATA=y

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ef538cf4d9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:50:44 +01:00
Thomas Petazzoni 5d83145af3 package/opencv3: drop support for protobuf
The protobuf support breaks the build, as protobuf includes
libabseil-cpp headers, which now require C++14. opencv3 doesn't have
any ENABLE_CXX14 option, so for the time being, disable protobuf
support until someone bothers enough to fix this up.

While we suspect a libabseil-cpp version bump to be responsible for
the issue, we are not 100% sure. However, the issue is definitely
present in Buildroot 2025.02.x, as it can be reproduced using the
following defconfig:

BR2_aarch64=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PACKAGE_OPENCV3=y
BR2_PACKAGE_OPENCV3_LIB_SHAPE=y
BR2_PACKAGE_OPENCV3_LIB_STITCHING=y
BR2_PACKAGE_OPENCV3_LIB_SUPERRES=y
BR2_PACKAGE_OPENCV3_LIB_TS=y
BR2_PACKAGE_OPENCV3_LIB_VIDEOSTAB=y
BR2_PACKAGE_OPENCV3_WITH_PROTOBUF=y

Fixes:

  https://autobuild.buildroot.net/results/39432e7746e6bc5224592a7d2f744ca992bd529a/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0865927da4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:46:40 +01:00
Thomas Petazzoni ef6c4dddf3 package/cppcms: change upstream to Github, bump to 2.0.1
cppcms.com now points to a Github page at
https://github.com/artyom-beilis/cppcms which has a 2.0.1 version, so
let's use that. The number of differences to 2.0.0.beta2 is very
small:

$ git log --online v2.0.0.beta2..v2.0.1
b872972 (tag: v2.0.1, origin/master, origin/HEAD, master) Version to 2.0.1
a1914f7 (tag: v2.0.0) Replaced system category with one from predating C++11 (v1.2) because std::system_category does not translate WSAGetLastError results
c4febcc Merge pull request #104 from dreaming-augustin/upstream
922cd49 Python 3.12 compatibility: wrap regex in r''.
a11e9d4 Merge branch 'cpp11'
3000bc6 (origin/1.2_updates) Merge pull request #99 from dreaming-augustin/master
44e24c7 [#89] cppcms_error fix typo + consistent  messages
a6d5575 (origin/cpp11) Added backtrace to system error
b3aef3b Fixed missing include for stripped down build
463a9a6 Removed IPV6 due to travis limitations
f8163c6 Merges from cpp11
31d4fe7 Added verbose log on failure
90bc996 Added Linux to build matrix - so I have fallback if normal build environment fails
f78ee39 Added Readme for github
a737d5d Merged python3 compatibility from master
0c67544 Support of python 2.7 and python 3
0d121a7 Python3 compatibility
2fc7e38 Python3 compatibility
d745869 python3 fix for tmp_cc

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 29641d1675)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:42:48 +01:00
Thomas Petazzoni a7eafdcb0e package/cppcms: fix build with recent versions of ICU
Since Buildroot commit dcee99507c that
bumped package/icu to version 77-1, the build of cppcms with ICU
support enabled fails.

Indeed, ICU now requires C++17, and while cppcms.mk has some logic to
get C++ flags using icu-config, the -std=c++17 gets ultimately
overridden by the built-in -std=c++11 flag encoded in cppcms
CMakeLists.txt.

To fix this, we have submitted a patch upstream that ensures the
CMAKE_CXX_FLAGS passed on the command line take precedence over the
built-in flags defined in cppcms CMakeLists.txt.

Fixes:

  https://autobuild.buildroot.net/results/9c34a08ea02499b28093ad3fa184cee10b2883ac/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5a8811cade)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:42:32 +01:00
Thomas Petazzoni f4edd12ac1 package/cppcms: add patch to fix build with CMake 4
Fixes:

  https://autobuild.buildroot.net/results/5f0a3a525866519ee12acb9997d217b4a8b870fe/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fa6a81b4d9)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:42:26 +01:00
Bernd Kuhls c3846436d5 package/trinity: bump version
Switched _SITE to github, old project site is down.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: change _VERSION to use 'git describe --abbrev=40' format]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 652dbe71c3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:41:16 +01:00
Giulio Benetti 8ec8167d80 DEVELOPERS: add Giulio Benetti to package dash
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 92f2cb5045)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:40:04 +01:00
Giulio Benetti 71fa1a61c5 DEVELOPERS: add Giulio Benetti for package zlib-ng
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39bcd45891)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:50 +01:00
Giulio Benetti 980ee4e02f DEVELOPERS: add Giulio Benetti to vim
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit edf4a89aaf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:41 +01:00
Giulio Benetti d362a9c2f6 DEVELOPERS: add Giulio Benetti to package util-linux
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 85a8faec19)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:34 +01:00
Giulio Benetti 262a051134 DEVELOPERS: add Giulio Benetti to tmux
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit dca8423fbc)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:26 +01:00
Peter Seiderer 3b276e91c9 package/rpi-firmware: bump version to 063bcab
Version 063bcab matches with kernel 6.12.61

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c1ab01cdc8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:16 +01:00
Peter Seiderer 61261f2cad configs/raspberrypi*: bump kernel version to 21b4101 (6.12.61)
Now based on 6.12.61 (from 6.12.41)

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1f5a9ab083)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:39:08 +01:00
Thomas Petazzoni d6bba36979 package/vim: inline the VIM_REMOVE_DOCS variable
The VIM_REMOVE_DOCS variable is currently a post install target hook,
but it can just as well be done inside VIM_INSTALL_TARGET_CMDS
directly.

The hook was registered conditionally based on BR2_PACKAGE_VIM_RUNTIME
because prior to commit f7a07f42f7, the
hook's logic was:

    find $(TARGET_DIR)/usr/share/vim -type f -name "*.txt" -delete

which was failing if BR2_PACKAGE_VIM_RUNTIME was not enabled, as
$(TARGET_DIR)/usr/share/vim would not exist.

But since this commit, the hook logic is:

    $(RM) -rf $(TARGET_DIR)/usr/share/vim/vim*/doc/

which obviously won't fail if $(TARGET_DIR)/usr/share/vim doesn't
exist.

So let's simplify the whole logic.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7bcc99b57b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:36:37 +01:00
Thomas Petazzoni 6578fa8677 package/vim: refactor install target logic
Instead of calling $(MAKE) multiple times, let's call it once, with
all installation targets needed. We introduce a VIM_INSTALL_TARGETS
variable to collect the list of make install targets that need to be
invoked.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 525a234303)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:36:12 +01:00
Thomas Petazzoni 3bfab7709d package/vim: use more conventional $(MAKE) construct
In Buildroot, we more commonly do:

   $(MAKE) -C $(@D)/src

than:

   cd $(@D)/src; $(MAKE)

so let's adopt this more conventional style.

This coding style in vim.mk dates from when the package was introduced
by Peter Korsgaard back in 2010.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 21e613753e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:36:04 +01:00
Thomas Petazzoni c33f9a2871 package/vim: fix reinstallation
While not very common, it is nice when package re-installation
works. Unfortunately the "installlinks" target of vim installs links
with "ln -s", causing a package reinstallation to fail with:

cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim ex
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim view
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim rvim
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim rview
cd /home/thomas/buildroot/br/output-all/target/usr/bin; ln -s vim vimdiff
ln: failed to create symbolic link 'ex': File exists
ln: failed to create symbolic link 'view': File exists
make[2]: *** [Makefile:2749: /home/thomas/buildroot/br/output-all/target/usr/bin/ex] Error 1
make[2]: *** Waiting for unfinished jobs....
make[2]: *** [Makefile:2752: /home/thomas/buildroot/br/output-all/target/usr/bin/view] Error 1
ln: failed to create symbolic link 'rvim': File exists
ln: failed to create symbolic link 'rview': File exists

To fix this, we remove the target links before proceeding with the
installation.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 67e84345c1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:35:54 +01:00
Viacheslav Bocharov 8718e8be5e package/rtl8822cs bump driver version to latest with support kernel 6.18
Update rtl8822cs driver for Kernel 6.17/6.18
Fixes: https://autobuild.buildroot.org/results/bafd5af112e49359201580ece3a12bc8724914fe/

Signed-off-by: Viacheslav Bocharov <adeep@lexina.in>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 57395ccf91)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:35:28 +01:00
Giulio Benetti 2853c71b31 DEVELOPERS: add Giulio Benetti to libtirpc and rpcbind
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e9786cbb7b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:35:18 +01:00
Marcus Hoffmann 60d6b2a58c package/python-django: security bump to 5.2.9
Fixes:
* CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL
* CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer

Full release notes: https://docs.djangoproject.com/en/6.0/releases/5.2.9/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2622f9ca25)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 08:33:31 +01:00
Thomas Perale 70072dc0e2 package/python-filelock: fix CVE-2025-68146
Fixes the following vulnerability:

- CVE-2025-68146

A Time-of-Check-Time-of-Use (TOCTOU) race condition allows local
attackers to corrupt or truncate arbitrary user files through symlink
attacks.

For more informations, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-68146
  - https://github.com/tox-dev/filelock/commit/18a99880087934252e7c0c994640f66e80e34be9

(cherry picked from commit d9c1379d1f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:30 +01:00
Bernd Kuhls 9a315994a6 package/libmbus: bump version to 0.9.0
Release notes:
https://github.com/rscada/libmbus/blob/0.9.0/release_notes.txt

Downloading the source tarball is broken since at least Oct 30th, 2024
as reported by the buildroot autobuilders:
https://autobuild.buildroot.net/?reason=libmbus-0.8.0&step=50&start=50

Switching to the github helper provides the correct source code but the
tarball downloaded has a different hash. A quick search did not provide
alternative download locations for the original tarball
libmbus-0.8.0.tar.gz.

To solve the broken build we do not only switch _SITE to github but also
bump the package to 0.9.0 and add autoreconf which needs two directories
being created in _POST_PATCH_HOOKS. One missing directory was already
reported upstream: https://github.com/rscada/libmbus/issues/179

Updated license hash due to upstream commit:
https://github.com/rscada/libmbus/commit/ab8919136d3cabb943b1cbdd4d6e2f7eea4b8f3f

Fixes:
https://autobuild.buildroot.net/results/91a/91a82dc73bf87cf1969cd6a2ddea1809ab9a1613/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: change release notes url to use tag]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e42b3de3b1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:27 +01:00
Bernd Kuhls ca0f992fe9 package/v4l2loopback: bump version to 0.15.3
Changelog:
https://github.com/v4l2loopback/v4l2loopback/blob/v0.15.3/ChangeLog

This new version fixes compilation errors with gcc >= 14.

Fixes:
https://autobuild.buildroot.net/results/910/910e27b189c62f977bc42f7c53471334eb765168/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add comment about the fixed issue]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5ab46339aa)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:25 +01:00
Giulio Benetti 7be6c54266 package/rtl8723bu: bump to 2025-12-14 version
This version allows to build with Linux 6.18

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e6499d14f5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:23 +01:00
Giulio Benetti aed6e63fb8 package/rtl8821cu: bump to version 2025-12-14
With this commit it builds with Linux 6.18

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7b22fcfeff)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-02 18:22:21 +01:00
Fiona Klute 7b000714da support/testing: add tests for FIT hash support in package/uboot-tools
The tests check if all supported hash algorithms are usable in
mkimage, for both host and target packages. Additionally, as a
necessary tool, it verifies the previous fix for FIT output from
dumpimage.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
[Julien: use builtin kernel for faster testing]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2dbe71dba6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:21 +01:00
Fiona Klute cdadcf814a support/testing: infra: add host bin dir to PATH when running host command
Some host commands need to call other host commands: For example,
"mkimage" from host-uboot-tools needs to run "dtc". This would fail or
call system commands without adding the host bin dir to PATH.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
[Julien: use python functions/constants to build path]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit befb6ae81d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:18 +01:00
Fiona Klute 6406861a56 package/uboot-tools: include FIT print support if FIT support is enabled
Otherwise "dumpimage -l" produces only a newline when processing a FIT
image.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39b925a0a6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:16 +01:00
Yegor Yefremov cd84d000ce package/libconfig: bump to version 1.8.2
For change log, see:

https://github.com/hyperrealm/libconfig/releases/tag/v1.8.2

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Reviewed-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d40462ac54)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-30 18:53:14 +01:00
Thomas Petazzoni 45e06e7e57 package/mesa3d: add missing dependencies for imagination driver
The build of the following basic configuration enabling the
imagination Vulkan driver

BR2_aarch64=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_AARCH64_GLIBC_STABLE=y
BR2_PACKAGE_MESA3D=y
BR2_PACKAGE_MESA3D_VULKAN_DRIVER_IMAGINATION=y

fails with:

meson.build:847:3: ERROR: Feature llvm cannot be disabled: CLC requires LLVM

Adding just LLVM as a dependency is not enough, as then libclc is
needed, then LLVMSPIRVLib, then clangBasic, then the pco_clc tool.

In fact, like the Panfrost driver, building the Imagination driver
requires building host tools using host-mesa3d. To fix this we:

- Make the BR2_PACKAGE_MESA3D_OPENCL option selectable

- Make sure that BR2_PACKAGE_MESA3D_VULKAN_DRIVER_IMAGINATION depends
  on BR2_PACKAGE_MESA3D_LLVM and select
  BR2_PACKAGE_MESA3D_NEEDS_PRECOMP_COMPILER (the latter being needed to
  build host-mesa3d)

- Make sure the host-mesa3d builds imagination
  tools (-Dtools=imagination) and install
  pco_clc (HOST_MESA3D_INSTALL_PCO_CLC). This requires introducing
  HOST_MESA3D_TOOLS as a list of tools to build, which then gets used
  to construct the -Dtools argument, as we can now have both
  "panfrost" and "imagination" in this list.

With all this, the defconfig above builds successfully.

This has been broken since Buildroot commit
5e818c16a3, which introduced the vulkan
driver support.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e1d159c5d5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 17:32:52 +01:00
Francois Perrad b9238d89a4 package/linenoise: security bump to version e26268de5e
Fixes:
CVE-2025-9810: TOCTOU in linenoiseHistorySave
https://www.cve.org/CVERecord?id=CVE-2025-9810

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3c7cbf97d7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 17:32:52 +01:00
Bernd Kuhls 14e37d0278 package/php: security bump version to 8.4.16
https://www.php.net/ChangeLog-8.php#8.4.16
https://news-web.php.net/php.announce/478

Fixes CVE-2025-14177, CVE-2025-14178, CVE-2025-14180 & CVE-2025-67899.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1525803179)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 17:32:52 +01:00
Thomas Petazzoni 656e2d012e package/sway: properly propagate wlroots dependencies
Commit 00fb3a57cb added a wlroots ->
libgbm dependency, but forgot to propagate it to package/sway.

Cc: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Adrian Perez de Castro <aperez@igalia.com>
Reviewed-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Tested-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6c512c8be0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 16:31:11 +01:00
Thomas Petazzoni 792d1b9011 package/cage: properly propagate wlroots dependencies
Commit 00fb3a57cb added a wlroots ->
libgbm dependency, but forgot to propagate it to package/cage.

Fixes:

  https://autobuild.buildroot.net/results/dc185c3d4886e9cfd9e6f46b50b864e5b2f28605/

Cc: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3d7261b27a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 16:31:03 +01:00
Bernd Kuhls cff225bfb3 package/exim: security bump version to 4.99.1
Release notes:
https://lists.exim.org/lurker/message/20251217.151548.85d1a2bc.en.html

Fixes CVE-2025-67896:
https://code.exim.org/exim/exim/src/branch/exim-4.99+fixes/doc/doc-txt/exim-security-2025-12-09.1/report.txt

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a058aa701)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 16:30:40 +01:00
Thomas Devoogdt 59d867fd97 package/libfcgi: security bump to 2.4.7
This is a security bump to fix CVE-2025-23016.

See:
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.7

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 626bc1f199)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-27 10:32:03 +01:00
Marcus Hoffmann ce4465f040 package/zic: bump to 2025c
Release notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2dc61b52e8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-24 15:13:19 +01:00
Marcus Hoffmann 286173ff2c package/tzdata: bump to 2025c
Release Notes:
https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5cda56f05e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-24 15:13:11 +01:00
Matt Johnston 808cb90403 package/dropbear: security bump to version 2025.89
Fixes CVE-2025-14282
https://security-tracker.debian.org/tracker/CVE-2025-14282
CVE-2019-6111 for scp
https://security-tracker.debian.org/tracker/CVE-2019-6111

Release notes:
https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2025.89

Signed-off-by: Matt Johnston <matt@codeconstruct.com.au>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 700fcc4847)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-24 15:12:06 +01:00
Thomas Devoogdt 053eb1a984 package/fluent-bit: security bump to 4.2.0
This is a major release that introduces new features,
including one highlighted in the release notes:

"The v4.2 release introduces a powerful new Direct Routing
 capability that allows inputs to specify routes directly to
 outputs, bypassing the traditional routing mechanism."

But it also brings some security fixes. Not all of them are relevant,
but some piece of lecture can be found here [1]. It fixes the
following CVEs:

CVE-2025-12977
CVE-2025-12978
CVE-2025-12972
CVE-2025-12970
CVE-2025-12969

News:
- https://fluentbit.io/announcements/v4.1.0/
- https://fluentbit.io/announcements/v4.1.1/
- https://fluentbit.io/announcements/v4.2.0/

The patch 0001-plugins-kafka-fix-cmake-cross-compile-error.patch
can be dropped as it has been merged upstream [2].

[1] https://www.theregister.com/2025/11/24/fluent_bit_cves/
[2] https://github.com/fluent/fluent-bit/pull/9600

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7a037d0913)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 17:03:40 +01:00
Bernd Kuhls 65bc6c132c package/libvncserver: fix cmake 4 compatibility
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3600d2fd4a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 17:02:07 +01:00
Michael Nosthoff 6aad76c4c4 package/grpc: remove BUILD_CSHARP_EXT option
the CSharp Extension was removed in grcp 1.47.0 [0] and the option in
the CMakeLists was dropped in 1.58.0 [1], which means that it is no
longer relevant since Buildroot commit
91d1207de0, which bumped grpc from
1.51.1 to 1.66.1.

So remove this option for host-grpc as well.

Fixes:
  CMake Warning:
    Manually-specified variables were not used by the project:

      gRPC_BUILD_CSHARP_EXT

[0] https://github.com/grpc/grpc/releases/tag/v1.47.0
[1] https://github.com/grpc/grpc/commit/3a2bd221ef1166ae7d7bba3f700ff92ce3df5e86

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit e513d6a5fd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 17:01:51 +01:00
Giulio Benetti 6425628a87 package/rtl8821au: bump to version 2025-12-13
With Kernel >= 6.18 introduced in [1] rtl8821au fails at build
time with error:

    core/rtw_security.c:2008:13: error: conflicting types for 'sha256_init'; have 'void(struct sha256_state_rtk *)'

Fixes:
https://autobuild.buildroot.org/results/bc0ec5fe3acb37740b54eb1af1fe5d9284c87cf2/

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/a06d79862a60d3c8d5ddd6a9ab12b5ccdd91984c

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add details in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d75b8c5b75)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 17:01:25 +01:00
Thomas Petazzoni 6e99889c74 linux: select host-openssl for all architectures when building latest version
Since at least Linux 6.16, but possibly earlier, host-openssl is now
needed on the vast majority of CPU architectures.

A common reason to require host-openssl in the Kernel is to enable
Wireless Networking. This is now enabled in most defconfigs.

- When enabling CONFIG_NET [1]
- CONFIG_WIRELESS is enabled by default [2]
- For Wireless, CONFIG_CFG80211 is commonly enabled too [3]
- CONFIG_CFG80211_REQUIRE_SIGNED_REGDB is enabled by default
  which selects SYSTEM_DATA_VERIFICATION [4]
- CONFIG_SYSTEM_DATA_VERIFICATION
  select SYSTEM_TRUSTED_KEYRING [5]
- CONFIG_SYSTEM_TRUSTED_KEYRING adds system_certificates.o
  which needs x509_certificate_list and extract-cert [6]
- and finally, extract-cert uses host-openssl [7]

Even if some architecture defconfigs (such as m68k) are not directly
enabling CONFIG_CFG80211 in the Kernel, there is still chances for
this option to be enabled by Kernel configuration fixups of selected
Buildroot package. This situation can happen in Buildroot
autobuilders.

Also, in some specific cases, host-openssl might be needed for
some other reasons (e.g. s390 arch defconfig enables
SYSTEM_DATA_VERIFICATION which ends up the same way).

Indeed, in order to fix build issues, we would have to add: armeb,
microblaze, loongarch, m68k, mips, mipsel, mips64, mips64el, powerpc,
powerpc64, powerpc64el, riscv, s390, and possibly others.

So intead, when "latest kernel" is used with the default architecture
configuration, always select host-openssl independently of the
selected architectures.

Fixes:

  https://autobuild.buildroot.net/results/9a314e759f7640d760003e46f86153300478ec60/ (mipsel)
  https://autobuild.buildroot.net/results/3bcc674ea5a7cdf031200b0cd2f9f71400ba391c/ (mips64el)
  https://autobuild.buildroot.net/results/b24983fd91f408de56479b7d7d57fc9fd3333d7d/ (s390)
  https://autobuild.buildroot.net/results/b262fc6f67a9fed55faffcdd580d89f4664e1e16/ (powerpc64)
  https://autobuild.buildroot.net/results/45da1538457b18671fa18efe3e1aa57a15561370/ (m68k)
  https://autobuild.buildroot.net/results/0a457375d2509f1b29a449dfa50f29fc7e56e568/ (armeb)
  https://autobuild.buildroot.net/results/814ca5f048827a635dea0199878fa82d5012b649/ (loongarch64)
  https://autobuild.buildroot.net/results/b684d0b37e5187aa9b31693356f8515857d19f7a/ (microblaze)

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/net/Kconfig?h=v6.18.1#n6
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/net/Kconfig?h=v6.18.1#n428
[3] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/net/wireless/Kconfig?h=v6.18.1#n17
[4] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/net/wireless/Kconfig?h=v6.18.1#n89
[5] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/init/Kconfig?h=v6.18.1#n2063
[6] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/certs/Makefile?h=v6.18.1#n6
[7] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/certs/extract-cert.c?h=v6.18.1#n21

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
[Julien: add extra info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit bba86304b0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 17:01:07 +01:00
Francois Perrad 03b076fec8 package/perl: security bump to version 5.40.3
This commit fixes CVE-2025-40909:
Perl threads have a working directory race condition where file
operations may target unintended paths.

For release notes, see:
https://perldoc.perl.org/5.40.3/perl5403delta

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-40909

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[Julien: add link to cve.org]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 61f5e2efca)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:57:53 +01:00
Bernd Kuhls a291caf139 package/samba4: bump version to 4.23.4
https://www.samba.org/samba/history/samba-4.23.4.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d39ec85091)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:57:30 +01:00
Giulio Benetti a57d4e39bb package/rtl8723ds: bump to version 2025-12-09
With Kernel >= 6.18 introduced in [1] rtl8723ds fails at build
time with error:

    core/rtw_security.c:2183:13: error: conflicting types for 'sha256_init'; have 'void(struct rtl_sha256_state *)'

Fixes:
https://autobuild.buildroot.org/results/52081e3a500dd2566af145e8c6d793df7f72d025/

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/a06d79862a60d3c8d5ddd6a9ab12b5ccdd91984c

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add details in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1bd758209e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:56:54 +01:00
Giulio Benetti 45a8a415bc package/rtl8192eu: bump to 2025-10-13 version on branch 5.11.2.1
This version allows to build with Linux 6.18.

Fixes:

    In file included from core/crypto/sha256.c:11:
    core/crypto/sha256.h:16:5: error: conflicting types for 'hmac_sha256'; have 'int(const u8 *, size_t,  const u8 *, size_t,  u8 *)' {aka 'int(const unsigned char *, long unsigned int,  const unsigned char *, long unsigned int,  unsigned char *)'}

Build failure still not occured in autobuilders.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: add details about the error being fixed]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9ec337489a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:56:36 +01:00
Thomas Perale 3709f8ee85 docs/manual: mention CVE trailer
Adds documentation about adding a patch that address a vulnerability.

The patch-policy file now explain mention that patches that address a
vulnerability needs to include a `CVE:` trailer with the reference of
that vulnerability.

Until now only adding the reference to the `_IGNORE_CVES` variable was
necessary, so the documentation of this entry is modified as well to
point to the patch policy.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1167d0ff3d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:56:26 +01:00
Thomas Perale 2942d6592d utils/generate-cyclonedx: add support for 'resolved_with_pedigree'
The CycloneDX specification for vulnerabilities defines four analysis
states ([1]) for cases where a vulnerability does not affect a component:

* resolved
* resolved_with_pedigree
* not_affected
* false_positive

Currently, the metadatas present in Buildroot does not allow an accurate
mapping of ignored CVEs to the appropriate CycloneDX vulnerability
categories. As a result, all ignored CVEs are currently marked as
'in_triage' by default.

This default analysis was established during the introduction of the
'generate-cyclonedx' script. The reasoning at the time was that SBOM
consumers might want to re-evaluate ignored vulnerabilities, as the
Buildroot infrastructure could not reliably determine their actual
state.

This patch adds support for automatically marking vulnerabilities as
'resolved_with_pedigree' when a Buildroot patch includes a 'CVE:''
tag in its header referencing the CVE identifier.

The 'CVE:' tag appears alongside the already required 'Upstream:', if
the patch address a security vulnerability and may be repeated if a
patch addresses multiple vulnerabilities.

If a vulnerability is addressed by multiple patches, each patch will need to
reference the vulnerability identifier.

For details on how CycloneDX handles 'resolved_with_pedigree', see
[1][2].

As an example, the CVE-2025-3198 from the binutils package will result
in the following pedigree for the binutils component:

```
{
    "type": "unofficial",
    "diff": {
        "text": {
            "content": "..."
        }
    },
    "resolves": [
        {
            "type": "security",
            "name": "CVE-2025-3198"
        }
    ]
},
```

The `resolves` property is an array of issue the pedigree resolves. If
multiple are addressed by the same patch, then multiple identifier will be
present in this array.

In the listed vulnerabilities the entry for the CVE-2025-3198 looks like
this:

```
{
    "id": "CVE-2025-3198",
    "analysis": {
        "state": "resolved_with_pedigree",
        "detail": "The CVE 'CVE-2025-3198' has been marked as ignored by Buildroot"
    },
    "affects": [
        {
            "ref": "binutils"
        }
    ]
}
```

[1] https://cyclonedx.org/docs/1.6/json/#vulnerabilities_items_analysis_state
[2] https://cyclonedx.org/docs/1.6/json/#components_items_pedigree_patches_items_resolves

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 9415529923)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:56:20 +01:00
Bernd Kuhls b7ec498e39 package/libarchive: security bump version to 3.8.4
https://github.com/libarchive/libarchive/releases/tag/v3.8.3
"Libarchive 3.8.3 is a bugfix and security release."
https://github.com/libarchive/libarchive/releases/tag/v3.8.4

Switch to sha256 tarball hash provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien:
 - add missing '#' in hash file to fix check-package error
 - add back the comment with the pgp signature
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 68b83f9a80)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:56:05 +01:00
Bernd Kuhls b807e9d053 package/python-brotli: security bump to version 1.2.0
https://github.com/google/brotli/blob/v1.2.0/CHANGELOG.md

Adds the following security hardening:

python: added Decompressor::can_accept_more_data method and optional
output_buffer_limit argument Decompressor::process; that allows mitigation
of unexpectedly large output

Which is needed to complete the security fixes in python-urllib3 2.6.0.

Added dependency to host-python-pkgconfig to fix build error which would
be introduced by this bump.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Peter: mark as security bump, describe the relation with urllib3]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit fe5dcf402c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:55:56 +01:00
Thomas Petazzoni 0580d6a0b1 support/dependencies: improve error message
"Fix you PATH" not only has a typo, but isn't very clear. Turn it into
"Fix your PATH environment variable".

Fixes: https://gitlab.com/buildroot.org/buildroot/-/issues/151
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f59bf34164)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-12-18 16:55:42 +01:00
Peter Korsgaard 08d71521d3 Update for 2025.11
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-11 23:46:12 +01:00
Bernd Kuhls b0aa7e5a23 package/python-fonttools: security bump version to 4.61.0
https://github.com/fonttools/fonttools/releases/tag/4.61.0

Fixes CVE-2025-66034:
https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-11 23:21:26 +01:00
Peter Korsgaard 974b5ce907 package/python-urllib3: bump to version 2.6.2
Fixes a regression in the 2.6.x series:

- Fixed HTTPResponse.read_chunked() to properly handle leftover data in the
  decoder's buffer when reading compressed chunked responses

https://github.com/urllib3/urllib3/releases/tag/2.6.2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-11 23:14:14 +01:00
Marcus Hoffmann e73101a0c3 package/python-urllib3: security bump to 2.6.1
Version 2.6.0 fixes the following security issues:

* CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 [1]:
  Fixed a security issue where streaming API could improperly handle
  highly compressed HTTP content ("decompression bombs") leading to
  excessive resource consumption even when a small amount of data was
  requested. Reading small chunks of compressed data is safer and much
  more efficient now.

* CVE-2025-66418 / GHSA-gm62-xv2j-4w53 [2]:
  Fixed a security issue where an attacker could compose an HTTP
  response with virtually unlimited links in the Content-Encoding header,
  potentially leading to a denial of service (DoS) attack by exhausting
  system resources during decoding. The number of allowed chained
  encodings is now limited to 5.

2.6.0 also contains the removal of a deprecated but apparently still
widely used API. 2.6.1 reintroduces this API. [3]

Full 2.6.0 Changelog: https://github.com/urllib3/urllib3/blob/main/CHANGES.rst#260-2025-12-05

[1] https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37
[2] https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53
[3] https://github.com/urllib3/urllib3/blob/main/CHANGES.rst#261-2025-12-08

Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-11 23:08:41 +01:00
Arnout Vandecappelle 9dd501bcc9 docs/website/{download,news}.html: update for 2025.02.9 and 2025.08.3
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-12-11 13:40:38 +01:00
Arnout Vandecappelle a09176f8a9 CHANGES: update for 2025.08.3
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
(cherry picked from commit b338a0ca2f)
2025-12-11 09:30:23 +01:00
Arnout Vandecappelle e1edb6c9a8 CHANGES: update for 2025.02.9
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-12-11 09:29:47 +01:00
Giulio Benetti d655b6e4f1 package/rtl8188eu: fix build failure due to sha256_init() conflict
Bump to version 2025-12-10 on branch v5.2.2.4 to fix build failure due
to sha256_init() conflict with Kernel >= 6.18 introduced in Buildroot
commit [1].

Fixes:
https://autobuild.buildroot.org/results/12d0a01d3d3ea17bc99ee9aca5b50d20be83a5f4/

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/a06d79862a60d3c8d5ddd6a9ab12b5ccdd91984c

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
[Julien: add comment about Kernel 6.18]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-10 21:33:18 +01:00
Nicolas Cavallari c4debc9909 package/libgit2: security bump version to 1.9.2
Fix two vulnerabilities related to SSH support:
* The external SSH execution code lacked shell quoting on repositories
  name, resulting in arbitrary command execution.
* SSH public keys were zeroed by calling memset with the wrong length,
  resulting in either buffer overflow or incomplete zeroing.

Release notes:
https://github.com/libgit2/libgit2/releases/tag/v1.9.2

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-10 21:11:09 +01:00
Preyas 638224b4e6 package/pigz: switch site to HTTPS
Prefer HTTPS for source downloads.
No functional change; hashes unchanged.
Align comment in .hash and Config.in.

Signed-off-by: Preyas <preyas17@zohomail.in>
[Julien: also update Config.in package home page]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-09 22:16:08 +01:00
Bernd Kuhls 55a3abfcca package/sqlite: bump version to 3.51.1
Release notes of this bugfix release:
https://sqlite.org/releaselog/3_51_1.html

"Changes in this specific patch release, version 3.51.1 (2025-11-28):

    Fix incorrect results from nested EXISTS queries caused by the
    optimization in item 6b in the 3.51.0 release.
    Fix a latent bug in fts5vocab virtual table, exposed by new
    optimizations in the 3.51.0 release"

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-09 19:38:36 +01:00
Thomas Petazzoni 3f3d6e43de package/libtirpc: bump to version 1.3.7
Changes 1.3.6..1.3.7:

f138e68e7ffefa3f4d71857ddb137fff877fd1d0 getnetconfig.c: free linep to avoid memory leakage
eea92ef0bf2f3f0e337cfd074ebc34d91945f19b Revert "getnetconfig.c: free linep to avoid memory leakage"
d473f1e1f6ba80bfaee4daa058da159305167323 Update declarations to allow compile with gcc-15
240ee6c774729c9c24812aa8912f1fcf8996b162 update signal and key_call declarations to allow compile with gcc-15
07e45147b877c63a1d3dd1f5ae6070543b1d93cf Convert old-style function definitions into modern-style definitions
2cfe608550dbe44ac8fc6c26216f529565713fc4 Convert old-style function definitions into modern-style definitions
581152976f093f31957c48567278535ef54f6b3c Convert old-style function definitions into modern-style definitions
2832da026b0812a23e65773b313b048c68147b09 Convert old-style function definitions into modern-style definitions
d3ff4c39bbcf22e3ff736261b66a9f6c6a6bf4ca Convert old-style function definitions into modern-style definitions
791063e55d9739fa8c7c1a0d4ac1c4f8023a2843 Convert old-style function definitions into modern-style definitions
23b0aa66a34fc6de16d285fbeb60b0fd68fa40d5 Convert old-style function definitions into modern-style definitions
2c9ed28d9c364c6e7c29d9b5b740893a8baea014 Convert old-style function definitions into modern-style definitions
41cb38e2dfdc7053ebcbd777cf868f8fcbcfcf23 Convert old-style function definitions into modern-style definitions
b73283a6982f83974b48d1858735649d6acf6398 Convert old-style function definitions into modern-style definitions
c717a52ed169701b2907ac8eb8678ca41b1533ba Convert old-style function definitions into modern-style definitions
4eeb59a8dbcc6b4d3db1b81a00615f6e7832a97c Convert old-style function definitions into modern-style definitions
7cea8ad66aecc21e6caae330b5d31075af399193 Add conditional version script support
5bd87617e4b3129e76e79847c95bdea4b1290d9f Release 1.3.7

Our two patches are upstream as of
d473f1e1f6ba80bfaee4daa058da159305167323 and
240ee6c774729c9c24812aa8912f1fcf8996b162 respectively.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-08 23:47:24 +01:00
Bernd Kuhls bd57bf7129 package/libxslt: security bump version to 1.1.45
Release notes:
https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.45.news

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-7424
https://www.cve.org/CVERecord?id=CVE-2025-9714
https://www.cve.org/CVERecord?id=CVE-2025-11731

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-08 22:23:21 +01:00
Bernd Kuhls 52f83ccfbc package/libpng: security bump version to 1.6.53
Release notes:
https://raw.githubusercontent.com/pnggroup/libpng/v1.6.53/ANNOUNCE
https://raw.githubusercontent.com/pnggroup/libpng/v1.6.52/ANNOUNCE

Version 1.6.52 fixed CVE-2025-66293 (high severity).

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-66293

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-08 21:56:37 +01:00
Bernd Kuhls d98d9ba28f package/kbd: fix zlib build, add optional dependencies
Buildroot commit 930660890b bumped kbd to
version 2.9.0 which includes optional support for various compression
libraries. This commit adds the corresponding configure options and a
fix for build errors caused by zlib.

The build error was happening when a zlib was compiled before kbd.
The issue can be reproduced with the commands:

    cat >.config <<EOF
    BR2_aarch64=y
    BR2_TOOLCHAIN_EXTERNAL=y
    BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
    BR2_PACKAGE_KBD=y
    BR2_PACKAGE_ZLIB=y
    EOF
    make olddefconfig
    make zlib
    make kbd

The compilation fails with the erro:

    kbdfile-zlib.c: In function 'dlopen_note':
    elf-note.h:27:30: error: 'sym_gzopen' undeclared (first use in this function); did you mean 'sym_gzopen64'?
       27 | #define DLSYM_ARG(symbol__) &sym_##symbol__, STRINGIFY(symbol__),
          |                              ^~~~

Fixes:
https://autobuild.buildroot.net/results/8ff/8ff6c3d940b68069f748f12646f7516ec86172c1/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien:
 - add commands to reproduce the issue
 - update patch "Upstream:" link to upstream commit
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-08 21:32:58 +01:00
Bernd Kuhls 8344efd764 package/strace: bump version to 6.18
Release notes: https://github.com/strace/strace/blob/v6.18/NEWS

Buildroot commit a06d79862a bumped the
linux kernel to version 6.18 which broke the build of strace.

The issue can be reproduced with commands:

    cat >.config <<EOF
    BR2_aarch64=y
    BR2_PACKAGE_STRACE=y
    EOF
    make olddefconfig
    make strace

The build is failing with error:

    listmount.c: In function 'print_mnt_id_req':
    listmount.c:39:16: error: 'struct mnt_id_req' has no member named 'spare'
       39 |         if (req.spare) {
          |                ^

Fixes:
https://autobuild.buildroot.org/results/8e3de892a1c4aa176a8b3a5defba48aa9830bc89/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien:
 - update pgp key comment in hash file
 - add commands to reproduce the issue and error log
 - add autobuilder failure log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-08 20:33:50 +01:00
Bernd Kuhls 6086429850 package/cryptodev-linux: Fix build for Linux 6.18
Buildroot commit a06d79862a bumped the
linux kernel to version 6.18 which broke the build of cryptodev-linux.

Added upstream patch to fix the problem.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-08 10:32:42 +01:00
Bernd Kuhls 8745e0d5ca package/python3: security bump version to 3.13.11
Release notes:
https://www.python.org/downloads/release/python-31311/
https://docs.python.org/release/3.13.11/whatsnew/changelog.html

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-12084
https://www.cve.org/CVERecord?id=CVE-2025-13836

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien:
 - add link to detailed change log
 - add CVE-2025-13836 in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-07 23:55:48 +01:00
Bernd Kuhls 7bd818a067 package/rdesktop: fix build error
Fixes:
https://autobuild.buildroot.net/results/8ad/8ad5d33f726fe57910a70df7c8f40a9568c2dfa7/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 21:52:48 +01:00
Bernd Kuhls 655accbfea package/racehound: switch project site
Previous repo is unavailable, switch to fork.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 21:48:16 +01:00
Thomas Petazzoni 899703cb37 package/python3: fix build on Sparc64 due to glibc 2.42 bump
Since we bumped to glibc 2.42, the build of Python 3 is failing on
Sparc64 due to the removal of the "struct termio" definition from
glibc. Since this only affects a small number of termio operations, we
simply drop support for them, since they basically can't be used
anymore (and we don't really care that much about those specific
operations that only exist on Sparc64).

Fixes:

  https://autobuild.buildroot.net/results/28fee0f8368ae3dc1d607ebad4881b736e360f07/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 21:45:18 +01:00
Thomas Perale fa7fac0985 support/scripts/cve-check: don't fail with unknown CVE
The NVD database has CVE entries that are not present but may be
referenced in other security trackers.

For instance the CVE-2024-12455 is documented in the Debian security
tracker [1]. However, the NVD page is empty [2] and this entry is not
present in the NVD database mirror.

The following command would make the script fail:

```
echo '{
  "vulnerabilities": [
    {
      "id": "CVE-2024-12455"
    }
  ]
}' | support/scripts/cve-check --enrich-only
```

No CVEs present in Buildroot ignored CVEs are affected. But when
enriching an SBOM with legitimate CVE not present on NVD, the script
will fail.

This patch change the behavior to just log to stderr unknown CVEs
instead of making the script fail.

[1] https://security-tracker.debian.org/tracker/CVE-2024-12455
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-12455

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Peter: Tweak warning message]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 21:40:53 +01:00
Thomas Perale 8b740cee42 support/scripts/cve-check: fix typos and grammar
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 21:31:13 +01:00
Thomas Petazzoni 3ce3e04d02 package/glibc: use DESTDIR instead of install_root to fix build issue
Building a simple configuration such as:

BR2_aarch64=y
BR2_FORCE_HOST_BUILD=y

Under our reference Docker container, as an out-of-tree build:

./utils/docker-run make O=output-test

will fail during the glibc staging installation step with:

/usr/bin/install -c -m 644 /home/thomas/buildroot/br/output-glibc/build/glibc-2.42-3-gbc13db73937730401d592b33092db6df806d193e/build/libc.a /usr/lib64/libc.a
/usr/bin/install: cannot create regular file '/usr/lib64/libc.a': Permission denied

The problem being that the install_root variable is for some reason
lost along the way. We definitely pass it during the staging
installation step, but then glibc calls a sub-make and in that
submake, install_root is empty.

Observations:

- Building the same configuration inside the Docker container, but
  in-tree, doesn't exhibit the problem.

- Building outside of the Docker container, but with the same make
  version as the one we build due to BR2_FORCE_HOST_BUILD=y doesn't
  exhibit the problem.

However, it turns out that glibc sets install_root to $(DESTDIR). And
passing DESTDIR just works. So we drop our custom
GLIBC_INSTALL_STAGING_OPTS to rely on the default one, and this fixes
the problem. It's not extremely satisfying to not fully understand
what's going on, but after spending quite some time on this, and
having a trivial and actually pretty nice workaround, we simply
propose to use this solution.

There is no autobuilder issue as we're not using our Docker container
to do autobuild builds.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 21:29:19 +01:00
Alexis Lothoré 4d016a1d98 package/libdbi: fix small typo in Config.in
When browsing the available Database packages, libdbi appears in the
menuconfig as "lidbi".

Fix the menuconfig entry by updating the relevant boolean name.

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:32:43 +01:00
Peter Korsgaard 3b04688e7f package/dmraid: switch SITE to https
The http link is broken:

Connecting to people.redhat.com (people.redhat.com)|209.132.178.26|:80...
 failed: No route to host.

No autobuilder error recorded.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:10:14 +01:00
Bernd Kuhls 80f8be48b6 package/audit: switch SITE to https
The http link is broken:

Connecting to people.redhat.com (people.redhat.com)|209.132.178.26|:80...
 failed: No route to host.

No autobuilder error recorded.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:10:13 +01:00
Bernd Kuhls 9c12266739 package/mosh: update SITE
Old URL returns 404, update SITE according to https://mosh.org/

Fixes:
https://autobuild.buildroot.net/results/c1c/c1cf4568c82deb118aad0171bda356c7f59f17dd/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:10:13 +01:00
Bernd Kuhls f2b5cdf5a3 package/ficl: update SITE
Upstream moved the tarball to another folder:
https://sourceforge.net/p/ficl/news/2025/07/ficl4-is-retiring/
and also retired the package.

This patch just fixes the download problem.
CC'ing Francois to ask whether the package should be removed until a new
version 3.x is released.

Fixes:
https://autobuild.buildroot.net/results/125/125fa1c0a3b37b4d09389a49640b90121838c665/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:10:12 +01:00
Bernd Kuhls 699a4a629f package/xl2tp: fix build with gcc-15.x
Fixes:
https://autobuild.buildroot.net/results/bac/bac6a0cb3f38b0de5b0376e7eba5e0ede5fce589/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:10:10 +01:00
Bernd Kuhls 8c2947eaa5 package/x11r7/xdriver_xf86-video-intel: update SITE
Updated URL of git server, tarball hash is unchanged.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:09:34 +01:00
Bernd Kuhls 442622055d package/x11r7/xapp_xkbutils: bump version to 1.0.6
Release notes:
https://lists.x.org/archives/xorg-announce/2024-February/003448.html

Updated license hash due to upstream commit:
https://gitlab.freedesktop.org/xorg/app/xkbutils/-/commit/6dbcbb55951efb25af2e38034bdd86fa095aa9e5

Fixes:
https://autobuild.buildroot.net/results/eb7/eb7d32e65eece403538032a9006ea2f573ea10f8/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:09:34 +01:00
Bernd Kuhls dd2b360794 package/softhsm2: update SITE
Original site is down, unchanged tarball can be downloaded from github.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:09:33 +01:00
Bernd Kuhls 4d61edf6b1 DEVELOPERS: remove Prabhu Sannachi, bouncing e-mail
Prabhu's e-mail address at Collins is bouncing, so let's drop this stale
entry:

<prabhu.sannachi@collins.com>: host
    mxb-00105402.gslb.gpphosted.com[67.231.147.145] said: 550 5.1.1 User
    Unknown (in reply to RCPT TO command)

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-07 18:09:31 +01:00
Thomas Petazzoni 15bb41a461 package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues
unzip currently fails to build with GCC 15.x. We're already fetching
from Debian, using patchlevel -27, and it turns out that Debian
patchlevel -29 has the GCC 15.x fix, and very few other fixes:

unzip (6.0-29) unstable; urgency=medium

  * Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
    Closes: #661956, #1064000.
  * Drop conflicting declarations of gmtime() and localtime().
    Should fix build with gcc-15. Closes: #1098043.
  * Fix zipgrep handling of escapes. Closes: #1054628.
  * Stop using update-mime. Closes: #1072396.
  * Add debian/source/lintian-overrides for *.a files.
  * Do not trim Debian changelog.
  * Add debian/salsa-ci.yml.
  * Add Vcs-Git and Vcs-Browser fields.
  * Update Standards-Version.

unzip (6.0-28) unstable; urgency=medium

  * Drop debian/source/lintian-overrides, obsolete since version 6.0-18.
  * Update URI for Info-ZIP license in copyright file.
  * Update standards version to 4.6.2.
  * Run wrap-and-sort.
  * Update Homepage.

So let's just bump to this patchlevel version.

Note that the .dsc file link in the .hash file was wrong, it was still
referring to patchlevel -26.

Fixes:

  https://autobuild.buildroot.net/results/d81cb9d7c9e87dd233dde350d15cb03427ba2036/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Tested-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Bernd:
 Updated _SITE from /debian-debug/ to /debian/ (Baruch)
 Updated comment of UNZIP_IGNORE_CVES to reflect bump.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-12-07 17:57:37 +01:00
Bernd Kuhls 7c9d6018e6 package/linux-headers: drop 5.4.x option
The 5.4.x series is now EOL upstream, so drop the linux-headers
option and add legacy handling for it.

Bump kernel version in test_zfs.py.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-07 12:51:25 +01:00
Bernd Kuhls a06d79862a linux: bump latest version to 6.18
For an overview of changes in 6.18, see:
https://kernelnewbies.org/Linux_6.18

Also, the Kernel 6.18 series was also selected as a longterm
supported one (LTS). See:
https://git.kernel.org/pub/scm/docs/kernel/website.git/commit/?id=b9ea3472ee1d973f4c27d075c7e4445afa7ade89

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add comment about 6.18 being LTS]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-07 12:51:03 +01:00
Bernd Kuhls 6f311de2de {toolchain, linux-headers}: add support for 6.18 headers
And add (and default to) 6.18 to linux-headers.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-07 12:41:14 +01:00
Bernd Kuhls eb1d45388f {linux, linux-headers}: bump 5.{10, 15}.x / 6.{1, 6, 12, 17}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-07 12:41:13 +01:00
Bernd Kuhls a1f691fb02 package/unbound: security bump version to 1.24.2
Changelog: https://nlnetlabs.nl/projects/unbound/download/

Fixes CVE-2025-11411:
https://nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt

Removed UNBOUND_IGNORE_CVES, the fix is included in this release.

The unbound version 1.23.0 also includes a fix when compiling with
gcc 15. See:
https://github.com/NLnetLabs/unbound/pull/1262

Fixes:
https://autobuild.buildroot.net/results/d3d/d3d6b84ba667e3e2586b7cfdaddcd160232eddfd/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add comment about gcc-15 fix]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-07 12:33:36 +01:00
Thomas Petazzoni d4a998f0fa package/glibc: only supports ARC little-endian since glibc 2.41
Since upstream commit
https://sourceware.org/git/?p=glibc.git;a=commit;h=4ff55d08df0e6f11cbd217f4dca4532bd7d9330d,
glibc no longer supports ARC big-endian, and the configure step fails
with:

checking for egrep -e... (cached) /bin/grep -E
checking for big endian... yes
configure: error: big-endian not supported
make: *** [package/pkg-generic.mk:263: /home/buildroot/instance-0/output-1/build/glibc-2.41-70-g1502c248d58cb99a203731707987a4342926e830/.stamp_configured] Error 1

This commit was first merged in glibc 2.41, so this issue is
applicable to both master (glibc 2.42) and 2025.02.x (glibc 2.41).

Fixes:

  https://autobuild.buildroot.net/results/87e4b84f3aee64d041c3b845cb003e6b90649ffb/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-06 07:34:25 +01:00
Bernd Kuhls a65bbef5ba package/lugaru: switch to github
Old site returns 404 for the tarball and does not contain any repos:
https://bitbucket.org/osslugaru/workspace/repositories/

Switch _SITE to URL shown at https://osslugaru.gitlab.io/

The hash value of the tarball is unchanged.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-06 07:26:59 +01:00
Raphael Pavlidis e11cac64a2 package/xwayland: security bump to version 24.1.9
Fixes the following security issues:

1) CVE-2025-62229: Use-after-free in XPresentNotify structures creation

    Using the X11 Present extension, when processing and adding the
    notifications after presenting a pixmap, if an error occurs, a dangling
    pointer may be left in the error code path of the function causing a
    use-after-free when eventually destroying the notification structures
    later.

    Introduced in: Xorg 1.15
    Fixed in: xorg-server-21.1.19 and xwayland-24.1.9
    Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/5a4286b1
    Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative.

2) CVE-2025-62230: Use-after-free in Xkb client resource removal

    When removing the Xkb resources for a client, the function
    XkbRemoveResourceClient() will free the XkbInterest data associated
    with the device, but not the resource associated with it.

    As a result, when the client terminates, the resource delete function
    triggers a use-after-free.

    Introduced in: X11R6
    Fixed in: xorg-server-21.1.19 and xwayland-24.1.9
    Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/99790a2c
         https://gitlab.freedesktop.org/xorg/xserver/-/commit/10c94238
    Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative.

3) CVE-2025-62231: Value overflow in Xkb extension XkbSetCompatMap()

    The XkbCompatMap structure stores some of its values using an unsigned
    short, but fails to check whether the sum of the input data might
    overflow the maximum unsigned short value.

    Introduced in: X11R6
    Fixed in: xorg-server-21.1.19 and xwayland-24.1.9
    Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/475d9f49
    Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative.

https://lists.x.org/archives/xorg-announce/2025-October/003635.html

Changelog:
https://lists.x.org/archives/xorg/2025-October/062148.html

Also update the COPYING hash for a change of copyright year.

Signed-off-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
[Peter: Mark as security bump, extend commit message, fix COPYING hash]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-05 22:02:02 +01:00
Thomas Devoogdt c522cd914a docs/manual: fix typo in migrating-golang-packages
Commit 00230e7 "package/pkg-golang: catch use of legacy FOO_INSTALL_BINS"
introduced a small typo, fixing that.

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-05 22:02:02 +01:00
Bernd Kuhls 181242dfe8 package/intel-vpl-gpu-rt: bump version to 25.4.5
For release notes, see:
https://github.com/intel/vpl-gpu-rt/releases/tag/intel-onevpl-25.4.5

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-05 22:02:01 +01:00
Bernd Kuhls 29fae1d459 package/intel-mediadriver: bump version to 25.4.5
For release notes, see:
https://github.com/intel/media-driver/releases/tag/intel-media-25.4.5

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-05 22:02:01 +01:00
Raphael Pavlidis 78513ff979 package/x11r7/xserver_xorg-server: security bump to version 21.1.20
Changelog:
https://lists.x.org/archives/xorg/2025-October/062147.html
https://lists.x.org/archives/xorg/2025-October/062150.html

This commit also updates the COPYING license file hash, after year
update in upstream commit:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/7cd443c610e5186ff09f0038d0d615600bd9a1e5

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-62229
https://www.cve.org/CVERecord?id=CVE-2025-62230
https://www.cve.org/CVERecord?id=CVE-2025-62231

Signed-off-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
[Julien: fix COPYING license file hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-05 21:50:50 +01:00
Bernd Kuhls 77e4a8858c package/apache: security bump version to 2.4.66
Changelog:
https://downloads.apache.org/httpd/CHANGES_2.4.66

Fixes CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082 &
CVE-2025-66200.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-05 21:43:56 +01:00
Raphael Pavlidis fc4ec2369b package/podman: security bump to version 5.7.0
Changelog:
https://github.com/containers/podman/releases/tag/v5.7.0

This commit fixes the CVE-2025-52881 security vulnerability. See:
https://github.com/advisories/GHSA-cgrx-mc8f-2prm

Signed-off-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-05 19:23:44 +01:00
Bernd Kuhls eed28fd448 package/go: security bump to version 1.25.5
Release notes:
https://go.dev/doc/devel/release#go1.25.5
https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
Fixes CVE-2025-61727 & CVE-2025-61729.

https://go.dev/doc/devel/release#go1.25.4
https://groups.google.com/g/golang-announce/c/tVVHm9gnwl8

Updated _SITE because previous URL returns 403.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-05 19:23:44 +01:00
Bernd Kuhls 9ae99d19b9 package/python3: security bump version to 3.13.10
For release notes of this bugfix release, see [1].
While the release notes [1] does not mention any security fixes,
the more detailed change log at [2] has a security section:

- gh-139700: "Check consistency of the zip64 end of central directory
  record." refers to CVE-2025-8291 [3],
- gh-136065: "Fix quadratic complexity in os.path.expandvars()."
  refers to CVE-2025-6075 [4],
- gh-119342: "Fix a potential memory denial of service in the
  plistlib module." refers to CVE-2025-13837 [5].

Fixes:
- [3], [4] and [5].

[1] https://www.python.org/downloads/release/python-31310/
[2] https://docs.python.org/release/3.13.10/whatsnew/changelog.html#security
[3] https://www.cve.org/CVERecord?id=CVE-2025-8291
[4] https://www.cve.org/CVERecord?id=CVE-2025-6075
[5] https://www.cve.org/CVERecord?id=CVE-2025-13837

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add info in commit log about CVEs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-04 17:58:04 +01:00
Bernd Kuhls bd1831d161 {linux, linux-headers}: bump 5.4.x series
https://lwn.net/Articles/1049060/
"This is the LAST 5.4.y release.  It is now end-of-life and should not be
 used by anyone, anymore.  As of this point in time, there are 1539
 documented unfixed CVEs for this kernel branch, and that number will
 only increase over time as more CVEs get assigned for kernel bugs."

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-03 22:40:40 +01:00
Peter Korsgaard 0981b4117d support/scripts/pkg-stats: use an unique HTTP user-agent
As requested by the gnu.org admins:

"
Since August 2024, we've been under DDoS attacks from common command line
tools.

To fix this, we would need to change the user-agent from "Python/3.11
aiohttp/3.8.4" to "buildroot.org pkg-stats" instead.
"

It indeed probably makes sense to use an unique user-agent string, so rework
the script to do that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-03 22:32:30 +01:00
Thomas Petazzoni 6e88765aa1 package/libcap: fix static builds
Since libcap has been updated to version 2.77 in Buildroot commit
42f2b480a5, the build fails for
statically-linked configurations when the host system doesn't have a
static version of libc installed:

/usr/bin/ld: cannot find -lc: No such file or directory
/usr/bin/ld: have you installed the static version of the c library ?

This is because the -static flag that is supposed to be used when
building target code also gets passed to the host compiler... which is
obviously incorrect and leads to the build failure.

This issue was introduced by upstream commit
c3ddf45d9afaab85d3b7db0dc7bfd1aafb8fde50, which was reverted right
after the 2.77 release in commit
542d7d86ecd2129dd5fe7e5b31ba307304f5b319, which we are simply
backporting here.

Fixes:

  https://autobuild.buildroot.net/results/f6d/f6dc61a9d57e282691b87a3a8fadcb5d5ea8fd8b/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-12-03 20:55:25 +01:00
Bernd Kuhls b41c6b21d5 {linux, linux-headers}: bump 6.{6, 12, 17}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-02 22:46:23 +01:00
Peter Korsgaard f9f3e6ccc6 support/scripts/pkg-stats: check_url_status(): use HEAD requests to limit server load
The gnu.org admins have been blocking the IP address of machines running
pkg-stats as the GET requests for the (many) packages with gnu.org URLs are
seen as abusive.

The resource body is not used, so use a HTTP HEAD request instead of a GET
to limit server load and bandwidth use.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-02 22:18:19 +01:00
450 changed files with 5841 additions and 2027 deletions
+3 -26
View File
@@ -176,7 +176,6 @@ configs/uevm5432_defconfig lib_defconfig.ForceCheckHash
configs/visionfive_defconfig lib_defconfig.ForceCheckHash
configs/wandboard_defconfig lib_defconfig.ForceCheckHash
configs/warp7_defconfig lib_defconfig.ForceCheckHash
linux/5.10.162-cip24-rt10/0001-arch-microblaze-mm-init.c-fix-build.patch lib_patch.Upstream
package/18xx-ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
package/4th/0001-avoid-regen-during-install.patch lib_patch.Upstream
package/acl/0001-Build-with-old-GCC-versions.patch lib_patch.Upstream
@@ -201,7 +200,6 @@ package/android-tools/0009-Fix-makefiles-for-out-of-tree-ext4_utils-build.patch
package/android-tools/0010-adb-added-patch-for-openssl-1.1.0-compatibility.patch lib_patch.Upstream
package/aoetools/0001-Change-shell-script-interpreter-from-bin-bash-to-bin.patch lib_patch.Upstream
package/apache/0001-cross-compile.patch lib_patch.Upstream
package/apache/S50apache Shellcheck lib_sysv.Indent lib_sysv.Variables
package/apr-util/0001-remove-checkapr.patch lib_patch.Upstream
package/apr/0001-sys-param-h.patch lib_patch.Upstream
package/apr/0002-Revert-Backport-r1872164.-Fix-the-name-of-libtool-wh.patch lib_patch.Upstream
@@ -218,7 +216,6 @@ package/attr/0001-build-with-older-GCCs.patch lib_patch.Upstream
package/aumix/0001-fix-incorrect-makefile-am.patch lib_patch.Upstream
package/autoconf/0001-dont-add-dirty-to-version.patch lib_patch.Upstream
package/automake/0001-noman.patch lib_patch.Upstream
package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch lib_patch.Upstream
package/avahi/S05avahi-setup.sh lib_sysv.Indent lib_sysv.Variables
package/avahi/S50avahi-daemon lib_sysv.Indent lib_sysv.Variables
package/babeld/S50babeld Shellcheck lib_sysv.Indent lib_sysv.Variables
@@ -305,7 +302,6 @@ package/davfs2/0001-src-Makefile.am-do-not-hardcode-fstack-protector-str.patch l
package/dbus-cpp/0001-gcc4.7.patch lib_patch.Upstream
package/dbus-cpp/0002-cross-compile-tools.patch lib_patch.Upstream
package/dbus-cpp/0003-src-pipe.c-fix-build-error-with-gcc-7.x.patch lib_patch.Upstream
package/dbus/S30dbus Shellcheck lib_sysv.Indent lib_sysv.TrailingSpace lib_sysv.Variables
package/dc3dd/0001-no_man.patch lib_patch.Upstream
package/dc3dd/0002-fix-autoreconf.patch lib_patch.Upstream
package/dc3dd/0003-fix-for-glibc-2.28.patch lib_patch.Upstream
@@ -340,9 +336,7 @@ package/ebtables/0001-replace-ebtables-save-perl-script-with-bash.patch lib_patc
package/ecryptfs-utils/0001-musl.patch lib_patch.Upstream
package/ecryptfs-utils/0002-openssl110.patch lib_patch.Upstream
package/ecryptfs-utils/0003-fix-parallel-build-issue.patch lib_patch.Upstream
package/efl/0001-ecore_evas-engines-drm-meson.build-use-gl_deps-as-en.patch lib_patch.Upstream
package/efl/0002-ecore_evas-engines-drm-meson.build-fix-gl_drm-includ.patch lib_patch.Upstream
package/efl/0003-ecore_fb-fix-build-with-tslib.patch lib_patch.Upstream
package/efl/0001-ecore_fb-fix-build-with-tslib.patch lib_patch.Upstream
package/eigen/0001-Adds-new-CMake-Options-for-controlling-build-compone.patch lib_patch.Upstream
package/elftosb/0001-fixes-includes.patch lib_patch.Upstream
package/elftosb/0002-force-cxx-compiler.patch lib_patch.Upstream
@@ -504,7 +498,6 @@ package/irqbalance/S13irqbalance Shellcheck lib_sysv.Indent lib_sysv.Variables
package/irrlicht/0001-override-CPPFLAGS-CXXFLAGS-and-CFLAGS-in-Makefile.patch lib_patch.Upstream
package/irrlicht/0002-makefile-override-LDFLAGS-and-remove-obsolete-X11R6-.patch lib_patch.Upstream
package/iucode-tool/S00iucode-tool lib_sysv.Variables
package/iwd/S40iwd Shellcheck
package/janus-gateway/0001-disable-ssp.patch lib_patch.Upstream
package/kexec-lite/0001-clean-restart.patch lib_patch.Upstream
package/keyutils/0001-fix-install-rule.patch lib_patch.Upstream
@@ -532,7 +525,6 @@ package/libb64/0002-Initialize-C++-objects.patch lib_patch.Upstream
package/libcdaudio/0001-libcdaudio-enable-autoreconf.patch lib_patch.Upstream
package/libcgi/0001-CMakeLists.txt-honour-BUILD_TESTING.patch lib_patch.Upstream
package/libcgicc/0001-disable-documentation-option.patch lib_patch.Sob lib_patch.Upstream
package/libconfuse/0001-Fix-163-unterminated-username-used-with-getpwnam.patch lib_patch.Upstream
package/libcorrect/0002-CMakeLists.txt-conditionally-use-fsanitize-address.patch lib_patch.Upstream
package/libcuefile/0001-fix-static-link.patch lib_patch.Upstream
package/libdaemon/0001-testd-use-unistd-h-instead-of-sys-unistd-h.patch lib_patch.Upstream
@@ -771,8 +763,8 @@ package/olsr/0006-build-patch-for-gpsd-3-25.patch lib_patch.Upstream
package/olsr/S50olsr Shellcheck lib_sysv.Indent lib_sysv.Variables
package/open-plc-utils/0001-Remove-OWNER-and-GROUPS-parameters-to-install.patch lib_patch.Upstream
package/open2300/0001-fix-makefile.patch lib_patch.Upstream
package/openjdk/17.0.9+9/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openjdk/21.0.1+12/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openjdk/17.0.12+7/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openjdk/21.0.4+7/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openldap/0001-fix-bignum.patch lib_patch.Upstream
package/openldap/0002-disable-docs.patch lib_patch.Upstream
package/openntpd/S49ntp Shellcheck lib_sysv.Variables
@@ -808,11 +800,7 @@ package/opusfile/0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch li
package/owfs/S55owserver Shellcheck lib_sysv.Variables
package/owfs/S60owfs Shellcheck lib_sysv.Variables
package/owl-linux/0001-fix-for-linux-3.3.x.patch lib_patch.Upstream
package/patch/0001-Fix-segfault-with-mangled-rename-patch.patch lib_patch.Upstream
package/patch/0002-Allow-input-files-to-be-missing-for-ed-style-patches.patch lib_patch.Upstream
package/patch/0003-Fix-arbitrary-command-execution-in-ed-style-patches-.patch lib_patch.Upstream
package/patch/0004-Invoke-ed-directly-instead-of-using-the-shell.patch lib_patch.Upstream
package/patch/0005-Don-t-follow-symlinks-unless--follow-symlinks-is-given.patch lib_patch.Upstream
package/patchelf/0001-Add-option-to-make-the-rpath-relative-under-a-specif.patch lib_patch.Upstream
package/paxtest/0001-genpaxtest-move-log-location.patch lib_patch.Upstream
package/paxtest/0002-paxtest-page-alignment-ARM-and-NIOS2-arch.patch lib_patch.Upstream
@@ -961,7 +949,6 @@ package/shadowsocks-libev/0003-lib-Makefile.am-remove-static-from-LDFLAGS.patch
package/shairport-sync/S99shairport-sync Shellcheck lib_sysv.Indent lib_sysv.Variables
package/shared-mime-info/0001-Remove-incorrect-dependency-from-install-data-hook.patch lib_patch.Upstream
package/shellinabox/0001-Makefile-disable-always-building-statically.patch lib_patch.Upstream
package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch lib_patch.Upstream
package/skeleton-init-systemd/fakeroot_tmpfiles.sh Shellcheck
package/slang/0001-slsh-libs.patch lib_patch.Upstream
package/smcroute/S41smcroute NotExecutable lib_sysv.Indent lib_sysv.Variables
@@ -1028,13 +1015,8 @@ package/ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
package/tinyalsa/0001-include-time.h-before-asound.h.patch lib_patch.Upstream
package/tinycompress/0001-wave-add-time.h-missing-header-inclusion.patch lib_patch.Upstream
package/tinydtls/0001-sha2-sha2.c-fix-build-on-big-endian.patch lib_patch.Upstream
package/tinyxml/0001-In-stamp-always-advance-the-pointer-if-p-0xef.patch lib_patch.Upstream
package/transmission/S92transmission Shellcheck lib_sysv.ConsecutiveEmptyLines lib_sysv.Indent lib_sysv.Variables
package/triggerhappy/S10triggerhappy Shellcheck lib_sysv.Indent lib_sysv.Variables
package/trinity/0001-Fix-build-with-GCC-10.patch lib_patch.Upstream
package/trinity/0002-net-proto-ip-raw.c-fix-build-with-kernel-5.13.patch lib_patch.Upstream
package/trinity/0003-Use-fcntl-h-for-dev_t-mode_t.patch lib_patch.Upstream
package/trinity/0004-drop-decnet.patch lib_patch.Upstream
package/trousers/0001-Check-if-the-compiler-understands-pie-and-relro-options.patch lib_patch.Upstream
package/trousers/0002-Check-that-getpwent_r-is-available-before-using-it.patch lib_patch.Upstream
package/trousers/0003-Fix-build-with-LibreSSL-2-7.patch lib_patch.Upstream
@@ -1139,11 +1121,6 @@ package/xen/0001-9pfs-include-linux-limits.h-for-XATTR_SIZE_MAX.patch lib_patch.
package/xen/0002-Fix-build-with-64-bits-time_t.patch lib_patch.Upstream
package/xen/0003-libs-light-fix-tv_sec-printf-format.patch lib_patch.Upstream
package/xen/0004-libs-light-fix-tv_sec-fprintf-format.patch lib_patch.Upstream
package/xinetd/0001-ar.patch lib_patch.Upstream
package/xinetd/0002-destdir.patch lib_patch.Upstream
package/xinetd/0003-rpc-fix.patch lib_patch.Upstream
package/xinetd/0004-configure-rlim_t.patch lib_patch.Upstream
package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch lib_patch.Upstream
package/xl2tp/xl2tpd lib_shellscript.TrailingSpace
package/xml-security-c/0001-fix-build-with-libressl-3.5.0.patch lib_patch.Upstream
package/yajl/0001-Let-the-shared-and-the-static-library-have-the-same-.patch lib_patch.Upstream
+1
View File
@@ -13,3 +13,4 @@
*.rej
*~
*.pyc
/br.log
+156
View File
@@ -1,3 +1,98 @@
2025.11.1, released January 20, 2026
Important / security related fixes:
apache: CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082,
CVE-2025-66200
cryptsetup
dropbear: CVE-2025-14282, CVE-2019-6111
exim: CVE-2025-67896
gnupg2
imagemagick: CVE-2025-66628
libarchive
libcoap: CVE-2025-59391, CVE-2025-65493, CVE-2025-65494
CVE-2025-65495, CVE-2025-65496, CVE-2025-65497, CVE-2025-65498,
CVE-2025-65499, CVE-2025-65500, CVE-2025-65501
libcurl: CVE-2025-13034, CVE-2025-14017, CVE-2025-14524,
CVE-2025-14819, CVE-2025-15079, CVE-2025-15224
libfcgi: CVE-2025-23016.
libfreeimage: CVE-2019-12211, CVE-2019-12213, CVE-2020-24292,
CVE-2020-24293, CVE-2020-24295, CVE-2021-33367, CVE-2021-40263,
CVE-2021-40266, CVE-2023-47995, CVE-2023-47997
libpng: CVE-2025-66293
liburiparser: CVE-2025-67899
libxslt: CVE-2025-7424, CVE-2025-9714, CVE-2025-11731
linenoise: CVE-2025-9810
perl: CVE-2025-40909
php: CVE-2025-14177, CVE-2025-14178, CVE-2025-14180
python-django: CVE-2025-13372, CVE-2025-64460
python-filelock: CVE-2025-68146
python-fonttools: CVE-2025-66034
python-urllib3: CVE-2025-66471, CVE-2025-66418
unbound: CVE-2025-11411
vlc
xserver_xorg-server: CVE-2025-62229, CVE-2025-62230,
CVE-2025-62231
xwayland: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231
Infrastructure updates/fixes:
- pkg-stats use HEAD request & unique HTTP user-agent
- cve-check: don't fail with unknown CVE
- generate-cyclonedx: support 'resolved_with_pedigree'
- testing: add host bin dir to PATH
- testing: add tests for FIT hash support in package/uboot-tools
- testing: add libiio python bindings runtime test
- testing: ddrescue: use dmsetup from lvm2
- testing: ddrescue: use f-string for test config
- testing: add tio runtime test
- add 'CVE:' trailer in various patches
- add md5 hash and update tarball url to various python packages
- testing: ltp-testsuite: replace runltp by kirk
- testing: new kvmtool runtime test
- gitignore: ignore utils/brmake log output named `br.log`
- testing: add opus-tools runtime test
- testing: add flac runtime test
- testing: test_xen: add block
Updated / fixed packages: apache, arm-trusted-firmware, atf, audit,
bitcoin, boost, busybox, cage, cmake, collectl, cppcms, cpulimit,
cryptsetup, dbus, dmraid, dropbear, efl, embiggen-disk, evilwm, exim,
ficl, fio, fluent-bit, fontconfig, glibc, gnupg2, grpc, gvfs, icu,
imagemagick, irqbalance, iwd, kvmtool, ledmon, libarchive, libcoap,
libconfig, libcpprestsdk, libcurl, libdill, libdnet, libfcgi, libfreeimage,
libgit2, libgtk3, libgtk4, libiio, libmbus, libpng, libselinux, libtirpc,
libupnp, liburiparser, libvncserver, libxslt, linenoise, linux-tools,
lttng-modules, lugaru, matchbox-fakekey, matchbox-keyboard, matchbox-lib,
matchbox-panel, mender-update-modules, mesa3d, mosh, nfs-utils, open-lldp,
opencv4, opencv4-contrib, openjdk, perl, perl-dbd-mysql, perl-mozilla-ca,
php, pigz, pixman, python-brotli, python-can, python-certifi, python-django,
python-filelock, python-fonttools, python-pyqt5, python-urllib3, python3,
qt5enginio, qt5webkit, qt6base, racehound, rdesktop, rpcbind, rpi-firmware,
rtl8192eu, rtl8723bu, rtl8723ds, rtl8821au, rtl8821cu, rtl8822cs, samba4,
skopeo, softether, softhsm2, spice, ssdp-responder, sway, tio, trinity,
tzdata, uboot, uboot-tools, uclibc, unbound, utfcpp, v4l2loopback, vim, vlc,
xdriver_xf86-video-intel, xen, xinetd, xlib_libxshmfence,
xserver_xorg-server, xvkbd, xwayland, zic, zxing-cpp
Removed packages: opencv3 'protobuf', opencv3 'ffmpeg',
libdnet 'python', rpi-firmware 'vcdbg'
2025.11, released December 11th, 2025
Fixes all over the tree.
linux: Default to 6.18 for runtime kernel and kernel headers,
drop the now EOL 5.4.x series.
Updated/fixed packages: apache, audit, cryptodev-linux,
dmraid, ficl, glibc, go, intel-mediadriver, intel-vpl-gpu-rt,
kbd, libcap, libdbi, libgit2, libpng, libtirpc, libxslt,
lugaru, mosh, pigz, podman, python-fonttools, python-urllib3,
python3, racehound, rdesktop, rtl8188eu, softhsm, sqlite,
strace, unbound, unzip, xapp_xkbutils,
xdriver_xf86-video-intel, xl2tp, xserver_xorg-server, xwayland
2025.11-rc2, released November 30th, 2025
Fixes all over the tree.
@@ -53,6 +148,37 @@
linphone, logsurfer, mediastreamer, metacity, mongrel2, ola,
ortp, procrank_linux, ramspeed, sylpheed
2025.08.3, released December 11, 2025
Important / security related fixes:
- asterisk: CVE-2025-1131, CVE-2025-57767, CVE-2025-49832,
CVE-2025-47780, CVE-2025-47779
- gnutls: CVE-2025-9820
- libpng: CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018
- luksmeta: CVE-2025-11568
- mariadb: CVE-2025-30693, CVE-2025-30722, CVE-2023-52969,
CVE-2023-52970, CVE-2023-52971
- openvpn: CVE-2025-13086
- postgresql: CVE-2025-12817, CVE-2025-12818
- python-django: CVE-2025-64458, CVE-2025-64459
- python-startlette: GHSA-7f5h-v6xp-fcq8
Infrastructure updates/fixes:
- New script support/scripts/cve-check to enricht CycloneDX SBoM with
CVE information from NVD database.
Updated / fixed packages: 18xx-ti-utils, asterisk, enscript, gnutls,
libpng, libroxml, libteam, linux-headers, luksmeta, mariadb, nbd, neard,
nss-pam-ldapd, open-plc-utils, openjdk, openjdk-bin, openvpn, oprofile,
pdmenu, perl-net-ssleay, postgresql, python-django, python-starlette,
redis, sane-bacends, sbc, sdbusplus, sdl, swipl, tailscale, thermald,
tmux, tor
Removed packages: bctoolbox, belle-sip, belr, linphone, mediastreamer,
mongrel2, ortp
2025.08.2, released November 20, 2025
Important / security related fixes:
@@ -633,6 +759,36 @@
- netsnmp: unexpected header length in /proc/net/snmp...
https://gitlab.com/buildroot.org/buildroot/-/issues/110
2025.02.9, released December 11, 2025
Important / security related fixes:
- asterisk: CVE-2025-1131, CVE-2025-57767, CVE-2025-49832,
CVE-2025-47780, CVE-2025-47779
- gnutls: CVE-2025-9820
- libpng: CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018
- luksmeta: CVE-2025-11568
- mariadb: CVE-2025-30693, CVE-2025-30722, CVE-2023-52969,
CVE-2023-52970, CVE-2023-52971
- openvpn: CVE-2025-13086
- postgresql: CVE-2025-12817, CVE-2025-12818
- python-django: CVE-2025-64458, CVE-2025-64459
- python-startlette: GHSA-7f5h-v6xp-fcq8
Infrastructure updates/fixes:
- New script support/scripts/cve-check to enricht CycloneDX SBoM with
CVE information from NVD database.
Updated / fixed packages: 18xx-ti-utils, asterisk, gnutls, libpng,
libroxml, libteam, linux-headers, luksmeta, mariadb, nbd, neard,
openjdk, openjdk-bin, openvpn, oprofile, perl-net-ssleay, postgresql,
python-django, python-starlette, redis, sdbusplus, sdl, swipl,
tailscale, thermald, tmux, tor
Removed packages: bctoolbox, belle-sip, belr, linphone, mediastreamer,
mongrel2, ortp
2025.02.8, released November 20, 2025
Important / security related fixes:
+36
View File
@@ -144,8 +144,44 @@ endif
###############################################################################
comment "Legacy options removed in 2025.11.1"
config BR2_PACKAGE_RPI_FIRMWARE_INSTALL_VCDBG
bool "rpi-firmware vcdbg option removed"
select BR2_LEGACY
help
rpi-firmware upstream has dropped the vcdbg tool
config BR2_PACKAGE_LIBDNET_PYTHON
bool "libdnet python module removed"
select BR2_LEGACY
help
The libdnet Python module is no longer compatible with
Python >= 3.13, so it had to be removed.
config BR2_PACKAGE_OPENCV3_WITH_FFMPEG
bool "opencv3 ffmpeg support removed"
select BR2_LEGACY
help
Support for OpenCV 3 ffmpeg support has been removed as it
was no longer compatible with recent versions of ffmpeg.
config BR2_PACKAGE_OPENCV3_WITH_PROTOBUF
bool "opencv3 protobuf support removed"
select BR2_LEGACY
help
Support for OpenCV 3 protobuf support has been removed as it
was no longer compatible with recent versions of protobuf.
comment "Legacy options removed in 2025.11"
config BR2_KERNEL_HEADERS_5_4
bool "kernel headers version 5.4.x are no longer supported"
select BR2_LEGACY
help
Version 5.4.x of the Linux kernel headers are no longer
maintained upstream and are now removed.
config BR2_PACKAGE_LIBARGTABLE2
bool "libargtable2 has been removed"
select BR2_LEGACY
+14 -16
View File
@@ -420,6 +420,7 @@ F: package/libglew/
F: package/libglu/
F: package/libhdhomerun/
F: package/libheif/
F: package/libid3tag/
F: package/libilbc/
F: package/libldns/
F: package/libmicrohttpd/
@@ -1153,33 +1154,25 @@ F: configs/sipeed_licheepi_nano_defconfig
F: configs/visionfive2_defconfig
N: Francois Perrad <francois.perrad@gadz.org>
F: board/freescale/ls1028ardb/
F: board/olimex/a20_olinuxino
F: board/olimex/imx233_olinuxino/
F: board/olimex/stmp1_olinuxino/
F: configs/ls1028ardb_defconfig
F: configs/olimex_a20_olinuxino_*
F: configs/olimex_imx233_olinuxino_defconfig
F: configs/olimex_stmp157_olinuxino_lime_defconfig
F: package/4th/
F: package/cgilua/
F: package/chipmunk/
F: package/cog/
F: package/collectl/
F: package/copas/
F: package/coxpcall/
F: package/dado/
F: package/ficl/
F: package/graphene/
F: package/janet/
F: package/libgtk4/
F: package/libtomcrypt/
F: package/libtommath/
F: package/libwpe/
F: package/linenoise/
F: package/ljlinenoise/
F: package/lua-inotify/
F: package/lmdb/
F: package/lpeg/
F: package/lpty/
F: package/lrandom/
@@ -1188,16 +1181,11 @@ F: package/lua*
F: package/lynis/
F: package/lzlib/
F: package/moarvm/
F: package/mstpd/
F: package/netsurf/
F: package/perl*
F: package/pkg-perl.mk
F: package/pkg-luarocks.mk
F: package/quickjs/
F: package/rings/
F: package/tekui/
F: package/wpebackend-fdo/
F: package/wpewebkit/
F: package/wsapi/
F: package/wsapi-fcgi/
F: package/wsapi-xavante/
@@ -1291,6 +1279,7 @@ F: configs/rockpro64_defconfig
F: package/at/
F: package/binutils/
F: package/cryptsetup/
F: package/dash/
F: package/erlang-jiffy/
F: package/esp-hosted/
F: package/gcc/
@@ -1301,6 +1290,7 @@ F: package/liblo/
F: package/libnspr/
F: package/libnss/
F: package/libnvme/
F: package/libtirpc/
F: package/libtraceevent/
F: package/libtracefs
F: package/linux-tools/linux-tool-rtla.mk.in
@@ -1309,10 +1299,12 @@ F: package/minicom/
F: package/mongoose/
F: package/mmc-utils/
F: package/nfs-utils/
F: package/putty/
F: package/python-libconf/
F: package/python-uvloop/
F: package/qt5/
F: package/rockchip-mali/
F: package/rpcbind/
F: package/rtl8188eu/
F: package/rtl8189es/
F: package/rtl8192eu/
@@ -1326,9 +1318,13 @@ F: package/sunxi-mali-utgard-driver/
F: package/sunxi-tools/
F: package/swugenerator/
F: package/swupdate/
F: package/tmux/
F: package/trace-cmd/
F: package/udisks/
F: package/util-linux/
F: package/vim/
F: package/wilc-driver/
F: package/zlib-ng/
F: toolchain/
N: Graeme Smecher <gsmecher@threespeedlogic.com>
@@ -1888,6 +1884,7 @@ F: support/testing/tests/package/test_exfatprogs.py
F: support/testing/tests/package/test_exfatprogs/
F: support/testing/tests/package/test_file.py
F: support/testing/tests/package/test_file/
F: support/testing/tests/package/test_flac.py
F: support/testing/tests/package/test_fluidsynth.py
F: support/testing/tests/package/test_fluidsynth/
F: support/testing/tests/package/test_fping.py
@@ -1925,6 +1922,8 @@ F: support/testing/tests/package/test_kmod.py
F: support/testing/tests/package/test_kmod/
F: support/testing/tests/package/test_kmscube.py
F: support/testing/tests/package/test_kmscube/
F: support/testing/tests/package/test_kvmtool.py
F: support/testing/tests/package/test_kvmtool/
F: support/testing/tests/package/test_lame.py
F: support/testing/tests/package/test_less.py
F: support/testing/tests/package/test_libcamera.py
@@ -1972,6 +1971,7 @@ F: support/testing/tests/package/test_oath_toolkit.py
F: support/testing/tests/package/test_octave.py
F: support/testing/tests/package/test_openblas.py
F: support/testing/tests/package/test_openocd.py
F: support/testing/tests/package/test_opus_tools.py
F: support/testing/tests/package/test_parted.py
F: support/testing/tests/package/test_patch.py
F: support/testing/tests/package/test_patch/
@@ -2013,6 +2013,7 @@ F: support/testing/tests/package/test_tcl.py
F: support/testing/tests/package/test_tcl/
F: support/testing/tests/package/test_tcpdump.py
F: support/testing/tests/package/test_tesseract_ocr.py
F: support/testing/tests/package/test_tio.py
F: support/testing/tests/package/test_trace_cmd.py
F: support/testing/tests/package/test_trace_cmd/
F: support/testing/tests/package/test_tree.py
@@ -2769,9 +2770,6 @@ F: package/libdvbpsi/
F: package/mraa/
F: package/synergy/
N: Prabhu Sannachi <prabhu.sannachi@collins.com>
F: package/redis-plus-plus/
N: Qais Yousef <qais.yousef@arm.com>
F: package/bpftrace/
+2 -2
View File
@@ -92,9 +92,9 @@ all:
.PHONY: all
# Set and export the version string
export BR2_VERSION := 2025.11-rc2
export BR2_VERSION := 2025.11.1
# Actual time the release is cut (for reproducible builds)
BR2_VERSION_EPOCH = 1764530000
BR2_VERSION_EPOCH = 1768938600
# Save running make version since it's clobbered by the make package
RUNNING_MAKE_VERSION := $(MAKE_VERSION)
+1 -1
View File
@@ -3,7 +3,7 @@ Linux systems through cross-compilation.
The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html
Online documentation can be found at https://buildroot.org/docs.html
To build and use the buildroot stuff, do the following:
+1 -1
View File
@@ -19,7 +19,7 @@ image sdcard.img {
partition u-boot {
partition-type = 0xC
bootable = "true"
image = "boot.vfat"
image = "boot.vfat"
}
partition rootfs {
+1 -1
View File
@@ -1,2 +1,2 @@
# Locally calculated
sha256 afc44e2899a3c32a1b968272a5816e5c90bea346341153807553396621e65dde linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz
sha256 7c31df8061aae748a6e72417bfe743a54198fb5bdc96e229ecc605dc621d32ef linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz
@@ -162,6 +162,8 @@ endif
ifeq ($(BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL31),y)
ARM_TRUSTED_FIRMWARE_MAKE_TARGETS += bl31
# Avoid BL31 environment variable from polluting the build
ARM_TRUSTED_FIRMWARE_MAKE_OPTS += BL31=
endif
ifeq ($(BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL31_UBOOT),y)
@@ -5,8 +5,8 @@ Subject: [PATCH] fs/hfs: Fix stack OOB write with grub_strcpy()
Replaced with grub_strlcpy().
Fixes: CVE-2024-45782
Fixes: CVE-2024-56737
CVE: CVE-2024-45782
CVE: CVE-2024-56737
Fixes: https://savannah.gnu.org/bugs/?66599
Reported-by: B Horn <b@horn.uk>
@@ -9,7 +9,7 @@ number parsed by read_number(). Later direct arithmetic calculation like
grub_size_t leading to heap OOB write. This patch fixes the issue by
using grub_add() and checking for an overflow.
Fixes: CVE-2024-45780
CVE: CVE-2024-45780
Reported-by: Nils Langius <nils@langius.de>
Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
@@ -9,7 +9,7 @@ to 0 leading to heap OOB write. This patch fixes
the issue by using grub_add() and checking for
an overflow.
Fixes: CVE-2024-45777
CVE: CVE-2024-45777
Reported-by: Nils Langius <nils@langius.de>
Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
@@ -6,8 +6,8 @@ Subject: [PATCH] fs/bfs: Disable under lockdown
The BFS is not fuzz-clean. Don't allow it to be loaded under lockdown.
This will also disable the AFS.
Fixes: CVE-2024-45778
Fixes: CVE-2024-45779
CVE: CVE-2024-45778
CVE: CVE-2024-45779
Reported-by: Nils Langius <nils@langius.de>
Signed-off-by: Daniel Axtens <dja@axtens.net>
@@ -9,11 +9,11 @@ hfsplus, iso9660, squash4, tar, xfs and zfs.
The JFS, ReiserFS, romfs, UDF and UFS security vulnerabilities were
reported by Jonathan Bar Or <jonathanbaror@gmail.com>.
Fixes: CVE-2025-0677
Fixes: CVE-2025-0684
Fixes: CVE-2025-0685
Fixes: CVE-2025-0686
Fixes: CVE-2025-0689
CVE: CVE-2025-0677
CVE: CVE-2025-0684
CVE: CVE-2025-0685
CVE: CVE-2025-0686
CVE: CVE-2025-0689
Suggested-by: Daniel Axtens <dja@axtens.net>
Signed-off-by: Daniel Axtens <dja@axtens.net>
@@ -9,8 +9,8 @@ overflow checks are in place.
The HFS+ and squash4 security vulnerabilities were reported by
Jonathan Bar Or <jonathanbaror@gmail.com>.
Fixes: CVE-2025-0678
Fixes: CVE-2025-1125
CVE: CVE-2025-0678
CVE: CVE-2025-1125
Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
@@ -9,6 +9,7 @@ The code is extracted from the upstream commit:
Fix: bsc#1234959
CVE: CVE-2024-56738
Signed-off-by: Gary Lin <glin@suse.com>
Upstream: not submitted upstream, as upstream has switched to gcrypt
Taken-from: https://build.opensuse.org/projects/SUSE:SLE-15-SP5:Update/packages/grub2.39923/files/grub2-constant-time-grub_crypto_memcmp.patch?expand=0
-11
View File
@@ -15,17 +15,6 @@ HOST_GRUB2_DEPENDENCIES = host-bison host-flex host-gawk \
$(BR2_PYTHON3_HOST_DEPENDENCY)
GRUB2_INSTALL_IMAGES = YES
# CVE-2019-14865 is about a flaw in the grub2-set-bootflag tool, which
# doesn't exist upstream, but is added by the Redhat/Fedora
# packaging. Not applicable to Buildroot.
GRUB2_IGNORE_CVES += CVE-2019-14865
# vulnerability is specific to the Redhat distribution, affects a
# downstream change from Redhat related to password authentication
GRUB2_IGNORE_CVES += CVE-2023-4001
# vulnerability is specific to the Redhat distribution, affects the
# grub2-set-bootflag tool, which doesn't exist upstream
GRUB2_IGNORE_CVES += CVE-2024-1048
# 0004-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch (yes, two
# CVEs are fixed by this patch)
GRUB2_IGNORE_CVES += CVE-2024-45782
+4
View File
@@ -409,8 +409,12 @@ UBOOT_KCONFIG_OPTS = $(UBOOT_MAKE_OPTS) HOSTCC="$(HOSTCC_NOCCACHE)" HOSTLDFLAGS=
ifeq ($(BR2_TARGET_UBOOT_DEFAULT_ENV_FILE_ENABLED),y)
UBOOT_DEFAULT_ENV_FILE = $(call qstrip,$(BR2_TARGET_UBOOT_DEFAULT_ENV_FILE))
define UBOOT_KCONFIG_DEFAULT_ENV_FILE
# Pre-2025.10
$(call KCONFIG_SET_OPT,CONFIG_USE_DEFAULT_ENV_FILE,y)
$(call KCONFIG_SET_OPT,CONFIG_DEFAULT_ENV_FILE,"$(shell readlink -f $(UBOOT_DEFAULT_ENV_FILE))")
# 2025.10 and later
$(call KCONFIG_SET_OPT,CONFIG_ENV_USE_DEFAULT_ENV_TEXT_FILE,y)
$(call KCONFIG_SET_OPT,CONFIG_ENV_DEFAULT_ENV_TEXT_FILE,"$(shell readlink -f $(UBOOT_DEFAULT_ENV_FILE))")
endef
endif
endif # BR2_TARGET_UBOOT_BUILD_SYSTEM_LEGACY
+1 -1
View File
@@ -8,7 +8,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi0/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi0/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcmrpi"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2708-rpi-zero"
+1 -1
View File
@@ -8,7 +8,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi0w/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi0w/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcmrpi"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2708-rpi-zero-w"
+1 -1
View File
@@ -10,7 +10,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi2-64/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi2-64/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2710-rpi-2-b"
+1 -1
View File
@@ -11,7 +11,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi2/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi2/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2709"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2709-rpi-2-b broadcom/bcm2710-rpi-2-b"
+1 -1
View File
@@ -10,7 +10,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi3-64/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi3-64/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2710-rpi-3-b broadcom/bcm2710-rpi-3-b-plus broadcom/bcm2710-rpi-cm3"
+1 -1
View File
@@ -11,7 +11,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi3/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi3/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2709"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2710-rpi-3-b broadcom/bcm2710-rpi-3-b-plus broadcom/bcm2710-rpi-cm3"
+1 -1
View File
@@ -12,7 +12,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi3/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi3/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2709"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2710-rpi-3-b broadcom/bcm2710-rpi-3-b-plus broadcom/bcm2710-rpi-cm3"
+1 -1
View File
@@ -11,7 +11,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi4-64/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi4-64/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2711-rpi-4-b broadcom/bcm2711-rpi-400 broadcom/bcm2711-rpi-cm4 broadcom/bcm2711-rpi-cm4s"
+1 -1
View File
@@ -11,7 +11,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi4/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi4/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2711-rpi-4-b broadcom/bcm2711-rpi-400 broadcom/bcm2711-rpi-cm4 broadcom/bcm2711-rpi-cm4s"
+1 -1
View File
@@ -10,7 +10,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi5/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi5/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2712"
BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="board/raspberrypi/linux-4k-page-size.fragment"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
+1 -1
View File
@@ -9,7 +9,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypi/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcmrpi"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2708-rpi-b-rev1 broadcom/bcm2708-rpi-b broadcom/bcm2708-rpi-b-plus broadcom/bcm2708-rpi-cm"
+1 -1
View File
@@ -11,7 +11,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypicm4io-64/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypicm4io-64/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2711-rpi-cm4"
+1 -1
View File
@@ -11,7 +11,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypicm4io/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypicm4io/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2711-rpi-cm4"
+1 -1
View File
@@ -10,7 +10,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypicm5io/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypicm5io/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2712"
BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="board/raspberrypi/linux-4k-page-size.fragment"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
+1 -1
View File
@@ -9,7 +9,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypizero2w-64/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypizero2w-64/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2710-rpi-zero-2-w"
+1 -1
View File
@@ -10,7 +10,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/raspberrypizero2w/post-build.sh"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypizero2w/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,ac69f097e1fba94502cbd36278db204120a37943)/linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz"
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
BR2_LINUX_KERNEL_DEFCONFIG="bcm2709"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2710-rpi-zero-2-w"
+3 -3
View File
@@ -509,9 +509,9 @@ not and can not work as people would expect it should:
* +LIBFOO_IGNORE_CVES+ is a space-separated list of CVEs that tells
Buildroot CVE tracking tools which CVEs should be ignored for this
package. This is typically used when the CVE is fixed by a patch in
the package, or when the CVE for some reason does not affect the
Buildroot package. A Makefile comment must always precede the
addition of a CVE to this variable. Example:
the package (see xref:additional-patch-documentation[]), or when the CVE for
some reason does not affect the Buildroot package. A Makefile comment must
always precede the addition of a CVE to this variable. Example:
+
----
# 0001-fix-cve-2020-12345.patch
+1 -1
View File
@@ -227,4 +227,4 @@ your kernel or use an alternative network manager.
=== Migrating to 2025.11
In 2025.11, the +FOO_INSTALL_BINS+ variable for golang packages is no longer
supported; the list of binaries to install is automatically derived from
the +FOO_BULD_TARGETS+ variable.
the +FOO_BUILD_TARGETS+ variable.
+12 -1
View File
@@ -144,6 +144,7 @@ AC_PROG_MAKE_SET
+AM_CONDITIONAL([CXX_WORKS], [test "x$rw_cv_prog_cxx_works" = "xyes"])
----
[[additional-patch-documentation]]
=== Additional patch documentation
Ideally, all patches should document an upstream patch or patch submission, when
@@ -177,4 +178,14 @@ Upstream: N/A <additional information about why patch is Buildroot specific>
----
Adding this documentation helps streamline the patch review process during
package version updates.
package version updates.
If the patch addresses one or multiple vulnerabilities, list each identifier on
a separate line with a +CVE+ trailer.
----
CVE: <vulnerability identifier>
----
If multiple patches address the same vulnerability, reference the vulnerability
in every patch.
+5 -5
View File
@@ -14,22 +14,22 @@
<ul>
<li>Reproducing, analyzing and fixing bugs from our
<a href="https://gitlab.com/buildroot.org/buildroot/-/issues">bug tracker</a></li>
<li>Analyzing and fixing <a href="http://autobuild.buildroot.org/">
<li>Analyzing and fixing <a href="https://autobuild.buildroot.org/">
autobuild failures</a></li>
<li>Reviewing and testing patches sent by other developers. See the
<a href="http://lists.buildroot.org/mailman/listinfo/buildroot">mailing list
<a href="https://lists.buildroot.org/mailman/listinfo/buildroot">mailing list
</a> or <a href="https://patchwork.ozlabs.org/project/buildroot/list/">
patchwork</a>.</li>
<li>Working on items from the
<a href="http://www.elinux.org/Buildroot#Todo_list">TODO list</a></li>
<li><a href="http://buildroot.org/manual.html#submitting-patches">Submitting
<a href="https://www.elinux.org/Buildroot#Todo_list">TODO list</a></li>
<li><a href="https://buildroot.org/manual.html#submitting-patches">Submitting
your own patches</a> through the
<a href="http://lists.buildroot.org/mailman/listinfo/buildroot">mailing list
</a></li>
</ul>
<p>For more details on these topics, check out the
<a href="http://buildroot.org/manual.html#_contributing_to_buildroot">
<a href="https://buildroot.org/manual.html#_contributing_to_buildroot">
Contributing to buildroot</a> chapter in the Buildroot manual. Thanks for your help!</p>
<p>If you need any support yourself, have a look at <a href="./support.html">
+19 -17
View File
@@ -16,6 +16,7 @@
<th>Latest release date</th>
<th colspan="2">Downloads</td>
</tr>
<!--
<tr>
<th>Candidate</th>
<th>2025.11.x</th>
@@ -42,61 +43,62 @@
<a href="/downloads/buildroot-2025.11-rc2.tar.xz.sign">[PGP sig]</a>
</td>
</tr>
-->
<tr>
<th>Stable</th>
<th>2025.08.x</th>
<td>December 2025</td>
<th>2025.11.x</th>
<td>March 2026</td>
<td>
2025.08.2<br/>
<a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2025.08.2/CHANGES">
2025.11<br/>
<a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2025.11/CHANGES">
Changelog
</a>
</td>
<td>2025-11-20</td>
<td>2025-12-11</td>
<td>
<a href="/downloads/buildroot-2025.08.2.tar.gz">
<a href="/downloads/buildroot-2025.11.tar.gz">
<img src="images/zip.png" width="24" alt="">
.tar.gz
</a><br/>
<a href="/downloads/buildroot-2025.08.2.tar.gz.sign">[PGP sig]</a>
<a href="/downloads/buildroot-2025.11.tar.gz.sign">[PGP sig]</a>
</td>
<td>
<a href="/downloads/buildroot-2025.08.2.tar.xz">
<a href="/downloads/buildroot-2025.11.tar.xz">
<img src="images/package.png" width="24" alt="">
.tar.xz
</a><br/>
<a href="/downloads/buildroot-2025.08.2.tar.xz.sign">[PGP sig]</a>
<a href="/downloads/buildroot-2025.11.tar.xz.sign">[PGP sig]</a>
</td>
<tr>
<th>Long-term support</th>
<th>2025.02.x</th>
<td>March 2028</td>
<td>
2025.02.8<br/>
<a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2025.02.8/CHANGES">
2025.02.9<br/>
<a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2025.02.9/CHANGES">
Changelog
</a>
</td>
<td>2025-11-20</td>
<td>
<a href="/downloads/buildroot-2025.02.8.tar.gz">
<a href="/downloads/buildroot-2025.02.9.tar.gz">
<img src="images/zip.png" width="24" alt="">
.tar.gz
</a><br/>
<a href="/downloads/buildroot-2025.02.8.tar.gz.sign">[PGP sig]</a>
<a href="/downloads/buildroot-2025.02.9.tar.gz.sign">[PGP sig]</a>
</td>
<td>
<a href="/downloads/buildroot-2025.02.8.tar.xz">
<a href="/downloads/buildroot-2025.02.9.tar.xz">
<img src="images/package.png" width="24" alt="">
.tar.xz
</a><br/>
<a href="/downloads/buildroot-2025.02.8.tar.xz.sign">[PGP sig]</a>
<a href="/downloads/buildroot-2025.02.9.tar.xz.sign">[PGP sig]</a>
</td>
</tr>
</table>
This and earlier releases (and their PGP signatures) can always be downloaded from
<a href="/downloads/">http://buildroot.net/downloads/</a>.
<a href="/downloads/">https://buildroot.org/downloads/</a>.
</div>
</div>
@@ -121,7 +123,7 @@
</div><br>
<p>If you are not already familiar with using Git, we recommend
you visit <a href="http://git-scm.org">the Git
you visit <a href="https://git-scm.org">the Git
website</a>.</p>
<p>Once you've checked out a copy of the source tree, you can
+55
View File
@@ -9,6 +9,61 @@
<h2>News</h2>
<ul class="timeline">
<li class="timeline-inverted">
<div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
<div class="timeline-panel">
<div class="timeline-heading">
<h4 class="timeline-title">2025.11 released</h4>
<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>11 December 2025</small></p>
</div>
<div class="timeline-body">
<p>The stable 2025.11 release is out - Thanks to everyone
contributing and testing the release candidates. See the
<a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2025.11/CHANGES">CHANGES</a>
file for more details
and go to the <a href="/downloads/">downloads page</a> to pick up the
<a href="/downloads/buildroot-2025.11.tar.xz">2025.11 release</a>.</p>
</div>
</div>
</li>
<li class="timeline">
<div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
<div class="timeline-panel">
<div class="timeline-heading">
<h4 class="timeline-title">2025.02.9 released</h4>
<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>11 December 2025</small></p>
</div>
<div class="timeline-body">
<p>The 2025.02.9 bugfix release is out, fixing a number of important /
security related issues discovered since the 2025.02.8 release. See the
<a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2025.02.9/CHANGES">CHANGES</a>
file for more details, read the
<a href="https://lore.kernel.org/buildroot/903acb17-d505-44b1-a4c8-6ee1d1e04853@rnout.be/T/#u">announcement</a>
and go to the <a href="/downloads/">downloads page</a> to pick up the
<a href="/downloads/buildroot-2025.02.9.tar.xz">2025.02.9 release</a>.</p>
</div>
</div>
</li>
<li class="timeline-inverted">
<div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
<div class="timeline-panel">
<div class="timeline-heading">
<h4 class="timeline-title">2025.08.3 released</h4>
<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>11 December 2025</small></p>
</div>
<div class="timeline-body">
<p>The 2025.08.3 bugfix release is out, fixing a number of important /
security related issues discovered since the 2025.08.2 release. See the
<a href="https://gitlab.com/buildroot.org/buildroot/-/blob/2025.08.3/CHANGES">CHANGES</a>
file for more details, read the
<a href="https://lore.kernel.org/buildroot/31aa9f3b-d429-46c6-8bd5-1a153f5e86f6@rnout.be/T/#u">announcement</a>
and go to the <a href="/downloads/">downloads page</a> to pick up the
<a href="/downloads/buildroot-2025.08.3.tar.xz">2025.08.3 release</a>.</p>
</div>
</div>
</li>
<li>
<div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
<div class="timeline-panel">
@@ -13,9 +13,9 @@ arch/microblaze/mm/init.c:71:2: error: #endif without #if
Fixes:
- http://autobuild.buildroot.org/results/27291870cf7539d26e45c45f34322d24a6dbca33
Upstream: sent to Sebastian Andrzej Siewior <bigeasy@linutronix.de>
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Upstream status: sent to
Sebastian Andrzej Siewior <bigeasy@linutronix.de>]
---
arch/microblaze/mm/init.c | 1 +
1 file changed, 1 insertion(+)
+9 -11
View File
@@ -28,14 +28,14 @@ choice
prompt "Kernel version"
config BR2_LINUX_KERNEL_LATEST_VERSION
bool "Latest version (6.17)"
select BR2_TOOLCHAIN_HEADERS_AT_LEAST_6_17 if BR2_KERNEL_HEADERS_AS_KERNEL
bool "Latest version (6.18)"
select BR2_TOOLCHAIN_HEADERS_AT_LEAST_6_18 if BR2_KERNEL_HEADERS_AS_KERNEL
# mips always generates an ITB image
select BR2_PACKAGE_HOST_UBOOT_TOOLS if BR2_mips || BR2_mipsel || BR2_mips64 || BR2_mips64el
select BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT if BR2_mips || BR2_mipsel || BR2_mips64 || BR2_mips64el
config BR2_LINUX_KERNEL_LATEST_CIP_VERSION
bool "Latest CIP SLTS version (5.10.162-cip24)"
bool "Latest CIP SLTS version (5.10.246-cip66)"
# Support was introduced in Linux 5.19
depends on !BR2_loongarch64
select BR2_TOOLCHAIN_HEADERS_AT_LEAST_5_10 if BR2_KERNEL_HEADERS_AS_KERNEL
@@ -57,7 +57,7 @@ config BR2_LINUX_KERNEL_LATEST_CIP_VERSION
https://www.cip-project.org
config BR2_LINUX_KERNEL_LATEST_CIP_RT_VERSION
bool "Latest CIP RT SLTS version (5.10.162-cip24-rt10)"
bool "Latest CIP RT SLTS version (5.10.246-cip66-rt29)"
# Support was introduced in Linux 5.19
depends on !BR2_loongarch64
select BR2_TOOLCHAIN_HEADERS_AT_LEAST_5_10 if BR2_KERNEL_HEADERS_AS_KERNEL
@@ -141,9 +141,9 @@ config BR2_LINUX_KERNEL_CUSTOM_REPO_GIT_SUBMODULES
config BR2_LINUX_KERNEL_VERSION
string
default "6.17.9" if BR2_LINUX_KERNEL_LATEST_VERSION
default "5.10.162-cip24" if BR2_LINUX_KERNEL_LATEST_CIP_VERSION
default "5.10.162-cip24-rt10" if BR2_LINUX_KERNEL_LATEST_CIP_RT_VERSION
default "6.18.5" if BR2_LINUX_KERNEL_LATEST_VERSION
default "5.10.246-cip66" if BR2_LINUX_KERNEL_LATEST_CIP_VERSION
default "5.10.246-cip66-rt29" if BR2_LINUX_KERNEL_LATEST_CIP_RT_VERSION
default BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE \
if BR2_LINUX_KERNEL_CUSTOM_VERSION
default "custom" if BR2_LINUX_KERNEL_CUSTOM_TARBALL
@@ -175,13 +175,11 @@ config BR2_LINUX_KERNEL_USE_DEFCONFIG
config BR2_LINUX_KERNEL_USE_ARCH_DEFAULT_CONFIG
bool "Use the architecture default configuration"
# We know that the default configuration on some architectures
# We know that the default configuration on many architectures
# requires host-openssl, so select it for the latest kernel
# version. This is mainly needed to fix autobuilder testing.
select BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL if \
BR2_LINUX_KERNEL_LATEST_VERSION && \
(BR2_aarch64 || BR2_aarch64_be || BR2_arcle || BR2_arceb || \
BR2_or1k || BR2_riscv || BR2_sparc || BR2_x86_64)
BR2_LINUX_KERNEL_LATEST_VERSION
help
This option will use the default configuration for the
selected architecture. I.e, it is equivalent to running
+9 -9
View File
@@ -1,15 +1,15 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 6d08803b953c509df48d44d3281ed392524321d8bb353eb21c0555790c8f8e06 linux-6.17.9.tar.xz
sha256 a1d2cd7327f10eec022615c1bb12c06439bd110d2020164be97f698f43ca58be linux-6.12.59.tar.xz
sha256 643b31079222fdbda70cfdd0b68c514f05a3926104be4762a4685f62818b43d1 linux-6.6.117.tar.xz
sha256 ad068bfdb604ec0f4f7de385c8e7ab944008aa78a4aeeca94f53206e6726bfda linux-6.1.158.tar.xz
sha256 189d1f409cef8d0d234210e04595172df392f8cb297e14b447ed95720e2fd940 linux-6.18.5.tar.xz
sha256 116802dc3ad1646163cc6ffe9bddba24a8069b569135ec0523cd799064f2edb9 linux-6.17.13.tar.xz
sha256 54e852667af35c0ed06cfc81311e65fa7f5f798a3bfcf78a559d3b4785a139c1 linux-6.12.65.tar.xz
sha256 405c332d59eedc4fd78863ff07a06c040dfeef651e58f022910a5ac953e4dc21 linux-6.6.120.tar.xz
sha256 0e8546a8437558be17ef5a87142055347bf2e7e9863ee58bb3996cbf0fd28496 linux-6.1.160.tar.xz
# From https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc
sha256 83157953598b026fb721c906c60dfdfd8e986f25ecb9910f3504f690e2770e05 linux-5.15.196.tar.xz
sha256 eb6b76c269d2dc09791638b10b9dcb9d79fd2abd45113a31fc03f68731caa875 linux-5.10.246.tar.xz
sha256 b7718766d060e6714bbe47004c71c360e844758f42fbf62cbaa5571119527962 linux-5.4.301.tar.xz
sha256 fd218df8e2107a4443b6c29fef7f95aad167031e0fbdbc7a858ae8471360668a linux-5.15.197.tar.xz
sha256 70c8b87ba1fcd8bfa663661934dc9bda92d0b5f3c0fc3197bb56399f69d9fe0c linux-5.10.247.tar.xz
# Locally computed
sha256 fb0edc3c18e47d2b6974cb0880a0afb5c3fa08f50ee87dfdf24349405ea5f8ae linux-cip-5.10.162-cip24.tar.gz
sha256 b5539243f187e3d478d76d44ae13aab83952c94b885ad889df6fa9997e16a441 linux-cip-5.10.162-cip24-rt10.tar.gz
sha256 93408e0c5d70ff0ab63dcf9edec6fda2b8524281d611a88e56590436bda43914 linux-cip-5.10.246-cip66.tar.gz
sha256 b3454708b98016f02604433e41060be2c1feb595c2bddeb25292596f047f0915 linux-cip-5.10.246-cip66-rt29.tar.gz
# Licenses hashes
sha256 fb5a425bd3b3cd6071a3a9aff9909a859e7c1158d54d32e07658398cd67eb6a0 COPYING
+11 -11
View File
@@ -1,15 +1,15 @@
#!/bin/sh
# shellcheck disable=SC2034 # checkpackage-required variable
DAEMON="apache"
case "$1" in
start|restart|graceful|graceful-stop|stop)
apachectl -k $1
;;
reload)
apachectl -k restart
;;
*)
echo "Usage: $0 {start|restart|reload|graceful|graceful-stop|stop}"
exit 1
start|restart|graceful|graceful-stop|stop)
apachectl -k "$1"
;;
reload)
apachectl -k restart
;;
*)
echo "Usage: $0 {start|restart|reload|graceful|graceful-stop|stop}"
exit 1
esac
exit $?
+3 -3
View File
@@ -1,5 +1,5 @@
# From https://archive.apache.org/dist/httpd/httpd-2.4.65.tar.bz2.{sha256,sha512}
sha256 58b8be97d9940ec17f7656c0c6b9f41b618aac468b894b534148e3296c53b8b3 httpd-2.4.65.tar.bz2
sha512 202f8bfe2aafcfbcd7315191d466e9c10b9a8c0abafb7864510b6e1abe4cb660aaacc2456aa77d43e48ef7a49e591d0b54170d3daf67abc3e06c3da1c63fdffc httpd-2.4.65.tar.bz2
# From https://archive.apache.org/dist/httpd/httpd-2.4.66.tar.bz2.{sha256,sha512}
sha256 94d7ff2b42acbb828e870ba29e4cbad48e558a79c623ad3596e4116efcfea25a httpd-2.4.66.tar.bz2
sha512 49031a3465d956ee3b755e65810b6c35561ddd5fac2c624a273b733c238e115b914cd7b246837e5a3090ccfded6e0b8b3059bfd1f8ce4419081c805a38d05a4b httpd-2.4.66.tar.bz2
# Locally computed
sha256 47b8c2b6c3309282a99d4a3001575c790fead690cc14734628c4667d2bbffc43 LICENSE
+1 -1
View File
@@ -4,7 +4,7 @@
#
################################################################################
APACHE_VERSION = 2.4.65
APACHE_VERSION = 2.4.66
APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2
APACHE_SITE = https://archive.apache.org/dist/httpd
APACHE_LICENSE = Apache-2.0
@@ -0,0 +1,33 @@
From 67e7d350a15aff88c151b1fc838dac83d35be955 Mon Sep 17 00:00:00 2001
From: Bernd Kuhls <bernd@kuhls.net>
Date: Sat, 22 Nov 2025 23:47:41 +0100
Subject: [PATCH] atf-check.cpp: include time.h
Fixes build error with gcc 14 as reported by the buildroot autobuilders:
https://autobuild.buildroot.net/results/41b/41b25ee8e66e34323eca011e4b5fe479ece9ed76/build-end.log
atf-sh/atf-check.cpp: In function 'useconds_t get_monotonic_useconds()':
atf-sh/atf-check.cpp:183:24: error: 'CLOCK_MONOTONIC' was not declared in this scope
Upstream: https://github.com/freebsd/atf/commit/67e7d350a15aff88c151b1fc838dac83d35be955
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
atf-sh/atf-check.cpp | 1 +
1 file changed, 1 insertion(+)
diff --git a/atf-sh/atf-check.cpp b/atf-sh/atf-check.cpp
index 1354e3a..94da413 100644
--- a/atf-sh/atf-check.cpp
+++ b/atf-sh/atf-check.cpp
@@ -30,6 +30,7 @@ extern "C" {
#include <limits.h>
#include <signal.h>
#include <stdint.h>
+#include <time.h>
#include <unistd.h>
}
--
2.47.3
+1 -1
View File
@@ -6,7 +6,7 @@ config BR2_PACKAGE_ATF
ATF, or Automated Testing Framework, is a collection of
libraries to write test programs in C, C++ and POSIX shell.
https://github.com/jmmv/atf
https://github.com/freebsd/atf
comment "atf needs a toolchain w/ C++"
depends on !BR2_INSTALL_LIBSTDCPP
+1 -1
View File
@@ -5,7 +5,7 @@
################################################################################
ATF_VERSION = 0.23
ATF_SITE = https://github.com/jmmv/atf/releases/download/atf-$(ATF_VERSION)
ATF_SITE = https://github.com/freebsd/atf/releases/download/atf-$(ATF_VERSION)
ATF_INSTALL_STAGING = YES
ATF_LICENSE = BSD-2-Clause, BSD-3-Clause
ATF_LICENSE_FILES = COPYING
+1 -1
View File
@@ -17,7 +17,7 @@ config BR2_PACKAGE_AUDIT
Note: The z/OS remote plugin is disabled in this package
http://people.redhat.com/sgrubb/audit/
https://people.redhat.com/sgrubb/audit/
comment "audit needs a toolchain w/ threads, dynamic library"
depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS
+1 -1
View File
@@ -5,7 +5,7 @@
################################################################################
AUDIT_VERSION = 3.1.5
AUDIT_SITE = http://people.redhat.com/sgrubb/audit
AUDIT_SITE = https://people.redhat.com/sgrubb/audit
AUDIT_LICENSE = GPL-2.0+ (programs), LGPL-2.1+ (libraries)
AUDIT_LICENSE_FILES = COPYING COPYING.LIB
AUDIT_CPE_ID_VENDOR = linux_audit_project
@@ -9,8 +9,8 @@ Add missing NULL pointer checks to fix it.
Introduced in #175 - merge commit 8f75a045709a780c8cf92a6a21e9d35b593bdecd
[Retrieved from:
https://github.com/lathiat/avahi/commit/9d31939e55280a733d930b15ac9e4dda4497680c]
CVE: CVE-2021-36217
Upstream: https://github.com/lathiat/avahi/commit/9d31939e55280a733d930b15ac9e4dda4497680c
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
avahi-core/browse-dns-server.c | 5 ++++-
+4
View File
@@ -6,6 +6,10 @@ config BR2_PACKAGE_BITCOIN_ARCH_SUPPORTS
# support. BR2_TOOLCHAIN_HAS_ATOMIC does not provide a
# size-level granularity to express this dependency.
depends on !(BR2_arm || BR2_armeb) || BR2_USE_MMU
# error: static assertion failed: Units of size ELEM_SIZE_ALIGN
# need to be able to store a ListNode
# note: the comparison reduces to (4 <= 2)
depends on !BR2_m68k
config BR2_PACKAGE_BITCOIN
bool "bitcoin"
+4 -15
View File
@@ -24,7 +24,6 @@ config BR2_PACKAGE_BOOST_ATOMIC
config BR2_PACKAGE_BOOST_CHRONO
bool "boost-chrono"
select BR2_PACKAGE_BOOST_SYSTEM
help
Useful time utilities. C++11.
@@ -62,7 +61,6 @@ config BR2_PACKAGE_BOOST_CONTRACT
bool "boost-contract"
# pthread_condattr_setclock
depends on BR2_TOOLCHAIN_HAS_THREADS_NPTL
select BR2_PACKAGE_BOOST_SYSTEM
help
Contract programming for C++.
@@ -77,7 +75,6 @@ config BR2_PACKAGE_BOOST_COROUTINE
depends on !BR2_TOOLCHAIN_HAS_GCC_BUG_64735 # boost-context, boost-thread
select BR2_PACKAGE_BOOST_CHRONO
select BR2_PACKAGE_BOOST_CONTEXT
select BR2_PACKAGE_BOOST_SYSTEM
select BR2_PACKAGE_BOOST_THREAD
help
deprecated coroutine library, the non-deprecated coroutine2
@@ -117,7 +114,6 @@ config BR2_PACKAGE_BOOST_FIBER
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_8
select BR2_PACKAGE_BOOST_CONTEXT
select BR2_PACKAGE_BOOST_FILESYSTEM
select BR2_PACKAGE_BOOST_SYSTEM
help
C++11 userland threads library.
@@ -134,7 +130,6 @@ config BR2_PACKAGE_BOOST_FILESYSTEM
bool "boost-filesystem"
depends on BR2_TOOLCHAIN_SUPPORTS_ALWAYS_LOCKFREE_ATOMIC_INTS # boost-atomic
select BR2_PACKAGE_BOOST_ATOMIC
select BR2_PACKAGE_BOOST_SYSTEM
help
The Boost Filesystem Library provides portable facilities to
query and manipulate paths, files, and directories.
@@ -184,7 +179,6 @@ config BR2_PACKAGE_BOOST_LOCALE
depends on !(BR2_TOOLCHAIN_HAS_GCC_BUG_64735 && BR2_PACKAGE_ICU) # boost-thread
depends on BR2_TOOLCHAIN_SUPPORTS_ALWAYS_LOCKFREE_ATOMIC_INTS \
|| !BR2_PACKAGE_ICU # boost-thread
select BR2_PACKAGE_BOOST_SYSTEM
select BR2_PACKAGE_BOOST_THREAD if BR2_PACKAGE_ICU
select BR2_PACKAGE_LIBICONV if !BR2_ENABLE_LOCALE
help
@@ -209,7 +203,6 @@ config BR2_PACKAGE_BOOST_LOG
select BR2_PACKAGE_BOOST_DATE_TIME
select BR2_PACKAGE_BOOST_FILESYSTEM
select BR2_PACKAGE_BOOST_REGEX
select BR2_PACKAGE_BOOST_SYSTEM
select BR2_PACKAGE_BOOST_THREAD
help
Logging library.
@@ -279,7 +272,6 @@ config BR2_PACKAGE_BOOST_PYTHON
config BR2_PACKAGE_BOOST_RANDOM
bool "boost-random"
select BR2_PACKAGE_BOOST_SYSTEM
help
A complete system for random number generation.
@@ -306,13 +298,14 @@ comment "boost-stacktrace needs a toolchain w/ dynamic library"
config BR2_PACKAGE_BOOST_SYSTEM
bool "boost-system"
help
Operating system support, including the diagnostics support
that will be part of the C++0x standard library.
Extensible Error Reporting.
This library is now header only. Building a stub library
is still supported for backward compatibility.
config BR2_PACKAGE_BOOST_TEST
bool "boost-test"
depends on BR2_USE_MMU # fork()
select BR2_PACKAGE_BOOST_SYSTEM
select BR2_PACKAGE_BOOST_TIMER
help
Support for simple program testing, full unit testing, and for
@@ -323,7 +316,6 @@ config BR2_PACKAGE_BOOST_THREAD
depends on BR2_TOOLCHAIN_SUPPORTS_ALWAYS_LOCKFREE_ATOMIC_INTS
depends on !BR2_TOOLCHAIN_HAS_GCC_BUG_64735 # std::current_exception
select BR2_PACKAGE_BOOST_CHRONO
select BR2_PACKAGE_BOOST_SYSTEM
help
Portable C++ multi-threading. C++11, C++14.
@@ -333,7 +325,6 @@ comment "boost-thread needs a toolchain not affected by GCC bug 64735"
config BR2_PACKAGE_BOOST_TIMER
bool "boost-timer"
select BR2_PACKAGE_BOOST_CHRONO
select BR2_PACKAGE_BOOST_SYSTEM
help
Event timer, progress timer, and progress display classes.
@@ -341,7 +332,6 @@ config BR2_PACKAGE_BOOST_TYPE_ERASURE
bool "boost-type_erasure"
depends on BR2_TOOLCHAIN_SUPPORTS_ALWAYS_LOCKFREE_ATOMIC_INTS # boost-thread
depends on !BR2_TOOLCHAIN_HAS_GCC_BUG_64735 # boost-thread
select BR2_PACKAGE_BOOST_SYSTEM
select BR2_PACKAGE_BOOST_THREAD
help
Runtime polymorphism based on concepts.
@@ -371,7 +361,6 @@ config BR2_PACKAGE_BOOST_WAVE
depends on !BR2_TOOLCHAIN_HAS_GCC_BUG_64735 # boost-thread
select BR2_PACKAGE_BOOST_DATE_TIME
select BR2_PACKAGE_BOOST_FILESYSTEM
select BR2_PACKAGE_BOOST_SYSTEM
select BR2_PACKAGE_BOOST_THREAD
help
The Boost.Wave library is a Standards conformant, and highly
+9 -4
View File
@@ -13,7 +13,8 @@ KLOGD_ARGS=""
start() {
printf 'Starting %s: ' "$DAEMON"
# shellcheck disable=SC2086 # we need the word splitting
start-stop-daemon -b -m -S -q -p "$PIDFILE" -x "/sbin/$DAEMON" \
start-stop-daemon --start --background --make-pidfile \
--pidfile "$PIDFILE" --exec "/sbin/$DAEMON" \
-- -n $KLOGD_ARGS
status=$?
if [ "$status" -eq 0 ]; then
@@ -26,20 +27,24 @@ start() {
stop() {
printf 'Stopping %s: ' "$DAEMON"
start-stop-daemon -K -q -p "$PIDFILE"
start-stop-daemon --stop --pidfile "$PIDFILE" --exec "/sbin/$DAEMON"
status=$?
if [ "$status" -eq 0 ]; then
rm -f "$PIDFILE"
echo "OK"
else
echo "FAIL"
return "$status"
fi
while start-stop-daemon --stop --test --quiet --pidfile "$PIDFILE" \
--exec "/sbin/$DAEMON"; do
sleep 0.1
done
rm -f "$PIDFILE"
return "$status"
}
restart() {
stop
sleep 1
start
}
+3 -1
View File
@@ -1,6 +1,7 @@
comment "cage needs udev, EGL and OpenGL ES support"
comment "cage needs udev, EGL, OpenGL ES and GBM support"
depends on !BR2_PACKAGE_HAS_LIBEGL || \
!BR2_PACKAGE_HAS_LIBGLES || \
!BR2_PACKAGE_HAS_LIBGBM || \
!BR2_PACKAGE_HAS_UDEV
comment "cage needs a toolchain w/ threads, dynamic library"
@@ -13,6 +14,7 @@ config BR2_PACKAGE_CAGE
depends on BR2_TOOLCHAIN_HAS_THREADS # wlroots
depends on BR2_PACKAGE_HAS_LIBEGL # wlroots
depends on BR2_PACKAGE_HAS_LIBGLES # wlroots
depends on BR2_PACKAGE_HAS_LIBGBM # wlroots
depends on BR2_PACKAGE_HAS_UDEV # wlroots
select BR2_PACKAGE_WLROOTS
help
-2
View File
@@ -11,8 +11,6 @@ CMAKE_SITE = https://cmake.org/files/v$(CMAKE_VERSION_MAJOR)
CMAKE_LICENSE = BSD-3-Clause
CMAKE_LICENSE_FILES = Copyright.txt
CMAKE_CPE_ID_VALID = YES
# Tool download MITM attack warning if using npm package to install cmake
CMAKE_IGNORE_CVES = CVE-2016-10642
# The package is a dependency to ccache so ccache cannot be a dependency
HOST_CMAKE_ADD_CCACHE_DEPENDENCY = NO
+1 -1
View File
@@ -9,4 +9,4 @@ config BR2_PACKAGE_COLLECTL
disk, inodes, infiniband, lustre, memory, network, nfs,
processes, quadrics, slabs, sockets and tcp.
http://collectl.sourceforge.net/
https://collectl.sourceforge.net/
+1 -1
View File
@@ -1,5 +1,5 @@
# Locally calculated
sha256 9fab4769441c07201748e52c7f8c7b21526ab45a05142dd2b2b1fa5c16c38750 collectl-4.3.2.src.tar.gz
sha256 552bdbe9e97071767bf0871789e19ede7d2827b68824e75da9cd7664218ea440 collectl-4.3.2.tar.gz
sha256 b92800d37afa2aa03c02817ff3b68efc7236436fe76af06ad9b1fc4682f59bcb ARTISTIC
sha256 264fe27852db5624e6a9a9845b4e14e91ee5007305b33e5556dfade394d578a8 COPYING
sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 GPL
+1 -2
View File
@@ -5,8 +5,7 @@
################################################################################
COLLECTL_VERSION = 4.3.2
COLLECTL_SOURCE = collectl-$(COLLECTL_VERSION).src.tar.gz
COLLECTL_SITE = http://downloads.sourceforge.net/collectl/collectl
COLLECTL_SITE = $(call github,sharkcz,collectl,$(COLLECTL_VERSION))
COLLECTL_LICENSE = Artistic or GPL-2.0
COLLECTL_LICENSE_FILES = COPYING ARTISTIC GPL
-3
View File
@@ -13,9 +13,6 @@ CPP_HTTPLIB_INSTALL_STAGING = YES
CPP_HTTPLIB_CONF_OPTS = \
-Dtest=false
# 0001-merge-commit-from-fork.patch
CPP_HTTPLIB_IGNORE_CVES += CVE-2025-46728
ifeq ($(BR2_PACKAGE_CPP_HTTPLIB_COMPILE),y)
CPP_HTTPLIB_CONF_OPTS += -Dcompile=true
CPP_HTTPLIB_DEPENDENCIES += host-python3
@@ -0,0 +1,107 @@
From fb3943378d84a6ced1182502eb839d6fc6e51914 Mon Sep 17 00:00:00 2001
From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Date: Tue, 16 Dec 2025 15:31:38 +0100
Subject: [PATCH] CMakeLists.txt: make it compatible with CMake 4
The build with CMake >= 4 currently fails with:
CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
Compatibility with CMake < 3.5 has been removed from CMake.
Update the VERSION argument <min> value. Or, use the <min>...<max> syntax
to tell CMake that the project requires at least <min> but has been updated
to work with policies introduced by <max> or earlier.
Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
we simply need to specify that the minimum version is 3.5 to fix the
build.
Upstream: https://github.com/artyom-beilis/cppcms/pull/106
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---
CMakeLists.txt | 2 +-
booster/CMakeLists.txt | 2 +-
contrib/server_side/sessions/CMakeLists.txt | 2 +-
contrib/server_side/sessions/berkeley_db/CMakeLists.txt | 2 +-
contrib/server_side/sessions/cppdb/CMakeLists.txt | 2 +-
contrib/server_side/sessions/sqlite3/CMakeLists.txt | 2 +-
examples/message_board/CMakeLists.txt | 2 +-
7 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/CMakeLists.txt b/CMakeLists.txt
index a9c601b..826e87f 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -1,4 +1,4 @@
-cmake_minimum_required(VERSION 2.6)
+cmake_minimum_required(VERSION 3.5)
set(CMAKE_LEGACY_CYGWIN_WIN32 0)
diff --git a/booster/CMakeLists.txt b/booster/CMakeLists.txt
index 6ec1ffa..8f63254 100644
--- a/booster/CMakeLists.txt
+++ b/booster/CMakeLists.txt
@@ -6,7 +6,7 @@
# http://www.boost.org/LICENSE_1_0.txt)
#
-cmake_minimum_required(VERSION 2.6)
+cmake_minimum_required(VERSION 3.5)
project(booster)
include(CheckFunctionExists)
include(CheckCXXSourceCompiles)
diff --git a/contrib/server_side/sessions/CMakeLists.txt b/contrib/server_side/sessions/CMakeLists.txt
index 0909fa6..e7ae01f 100644
--- a/contrib/server_side/sessions/CMakeLists.txt
+++ b/contrib/server_side/sessions/CMakeLists.txt
@@ -1,4 +1,4 @@
-cmake_minimum_required(VERSION 2.6)
+cmake_minimum_required(VERSION 3.5)
add_subdirectory(sqlite3)
add_subdirectory(cppdb)
diff --git a/contrib/server_side/sessions/berkeley_db/CMakeLists.txt b/contrib/server_side/sessions/berkeley_db/CMakeLists.txt
index 6bbac69..534bce2 100644
--- a/contrib/server_side/sessions/berkeley_db/CMakeLists.txt
+++ b/contrib/server_side/sessions/berkeley_db/CMakeLists.txt
@@ -1,4 +1,4 @@
-cmake_minimum_required(VERSION 2.6)
+cmake_minimum_required(VERSION 3.5)
if(WIN32 OR CYGWIN)
add_definitions(-DDLL_EXPORT)
diff --git a/contrib/server_side/sessions/cppdb/CMakeLists.txt b/contrib/server_side/sessions/cppdb/CMakeLists.txt
index 9781be9..792ec39 100644
--- a/contrib/server_side/sessions/cppdb/CMakeLists.txt
+++ b/contrib/server_side/sessions/cppdb/CMakeLists.txt
@@ -1,4 +1,4 @@
-cmake_minimum_required(VERSION 2.6)
+cmake_minimum_required(VERSION 3.5)
if(WIN32 OR CYGWIN)
add_definitions(-DDLL_EXPORT)
diff --git a/contrib/server_side/sessions/sqlite3/CMakeLists.txt b/contrib/server_side/sessions/sqlite3/CMakeLists.txt
index 4c236e3..82808f4 100644
--- a/contrib/server_side/sessions/sqlite3/CMakeLists.txt
+++ b/contrib/server_side/sessions/sqlite3/CMakeLists.txt
@@ -1,4 +1,4 @@
-cmake_minimum_required(VERSION 2.6)
+cmake_minimum_required(VERSION 3.5)
if(WIN32 OR CYGWIN)
add_definitions(-DDLL_EXPORT)
endif()
diff --git a/examples/message_board/CMakeLists.txt b/examples/message_board/CMakeLists.txt
index 0e5c555..96a56c2 100644
--- a/examples/message_board/CMakeLists.txt
+++ b/examples/message_board/CMakeLists.txt
@@ -1,4 +1,4 @@
-cmake_minimum_required(VERSION 2.6)
+cmake_minimum_required(VERSION 3.5)
project(cppcms)
include_directories(${CMAKE_SOURCE_DIR})
--
2.52.0
@@ -0,0 +1,58 @@
From 58faaa72919076e2c847b595a739469243ac9706 Mon Sep 17 00:00:00 2001
From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Date: Tue, 16 Dec 2025 16:02:41 +0100
Subject: [PATCH] CMakeLists.txt: allow flags passed on the command line to win
over built-in flags
CMakeLists.txt and booster/CMakeLists.txt define some flags in
CXX_FLAGS, and then set CMAKE_CXX_FLAGS in a way that causes the flags
in CXX_FLAGS to override the ones passed (for example on the command
line through CMAKE_CXX_FLAGS). This prevents the user from overriding
those compiler flags in CXX_FLAGS.
A specific example is that CXX_FLAGS sets -std=c++11, but with recent
version of ICU (such as >= 77-1), -std=c++11 is not enough, passing
-std=c++17 is needed. Unfortunately, it cannot be passed through
CMAKE_CXX_FLAGS due to the aforementioned problem.
This commit allows to resolve this by ensuring that CMAKE_CXX_FLAGS
and CMAKE_C_FLAGS win over CXX_FLAGS/C_FLAGS.
Upstream: https://github.com/artyom-beilis/cppcms/pull/107
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---
CMakeLists.txt | 4 ++--
booster/CMakeLists.txt | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 826e87f..86693e2 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -141,8 +141,8 @@ elseif(MSVC)
set(C_FLAGS "/W3")
endif()
-set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} ${CXX_FLAGS}")
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${C_FLAGS}")
+set(CMAKE_CXX_FLAGS "${CXX_FLAGS} ${CMAKE_CXX_FLAGS}")
+set(CMAKE_C_FLAGS "${C_FLAGS} ${CMAKE_C_FLAGS} ")
#############################################################################
#
diff --git a/booster/CMakeLists.txt b/booster/CMakeLists.txt
index 8f63254..4638f76 100644
--- a/booster/CMakeLists.txt
+++ b/booster/CMakeLists.txt
@@ -223,7 +223,7 @@ if(NOT IS_WINDOWS)
endif()
endif()
-set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} ${CXX_FLAGS}")
+set(CMAKE_CXX_FLAGS "${CXX_FLAGS} ${CMAKE_CXX_FLAGS}")
#############################################################################
#
--
2.52.0
+5 -5
View File
@@ -24,17 +24,17 @@ if BR2_PACKAGE_CPPCMS
config BR2_PACKAGE_CPPCMS_ICU
bool "enable icu support"
depends on !BR2_BINFMT_FLAT # icu
depends on BR2_HOST_GCC_AT_LEAST_4_9 # icu
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # icu
depends on BR2_HOST_GCC_AT_LEAST_7 # icu
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_7 # icu
select BR2_PACKAGE_ICU
help
Using ICU allows advanced localization features into CppCMS,
in another hand ICU is heavier than iconv.
comment "icu support needs a toolchain w/ gcc >= 4.9, host gcc >= 4.9"
comment "icu support needs a toolchain w/ gcc >= 7, host gcc >= 7"
depends on !BR2_BINFMT_FLAT
depends on !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 || \
!BR2_HOST_GCC_AT_LEAST_4_9
depends on !BR2_TOOLCHAIN_GCC_AT_LEAST_7 || \
!BR2_HOST_GCC_AT_LEAST_7
endif
+1 -4
View File
@@ -1,8 +1,5 @@
# From http://sourceforge.net/projects/cppcms/files/cppcms/2.0.0-beta2/
sha1 746cc5e3f58565d91d9ded6e2616399d60e9d01d cppcms-2.0.0.beta2.tar.bz2
md5 ef561d13ee92d2053151cab073feba10 cppcms-2.0.0.beta2.tar.bz2
# Locally computed:
sha256 697031c7d141fdd215c6be5090b66e2106a63bb3e52f09ee8120e8efc6c08a21 cppcms-2.0.0.beta2.tar.bz2
sha256 4a7a2217b3fa59384650912a7000e016c308b4fa986a3d2562002691e5a9d6e7 cppcms-2.0.1.tar.gz
sha256 fb7c15ddf590037d4cd18ebd61148a2304b9243369d238a64f599182377e32db COPYING.TXT
sha256 3e4012cc5950e05bedfdd2f00ceffe1ef71c46ac8c79f07e237ecb23c773f65f MIT.TXT
sha256 d6ce062e5cf4f7e3c536d7d2fee84c882c45245f1848ed3162401f2b29fa2b4b THIRD_PARTY_SOFTWARE.TXT
+2 -3
View File
@@ -4,11 +4,10 @@
#
################################################################################
CPPCMS_VERSION = 2.0.0-beta2
CPPCMS_SOURCE = cppcms-$(subst -,.,$(CPPCMS_VERSION)).tar.bz2
CPPCMS_VERSION = 2.0.1
CPPCMS_SITE = $(call github,artyom-beilis,cppcms,v$(CPPCMS_VERSION))
CPPCMS_LICENSE = MIT, BSL-1.0 (boost), Public Domain (json2.js), Zlib (md5)
CPPCMS_LICENSE_FILES = COPYING.TXT MIT.TXT THIRD_PARTY_SOFTWARE.TXT
CPPCMS_SITE = http://downloads.sourceforge.net/project/cppcms/cppcms/$(CPPCMS_VERSION)
CPPCMS_INSTALL_STAGING = YES
CPPCMS_CXXFLAGS = $(TARGET_CXXFLAGS)
@@ -1,4 +1,4 @@
From 74e95c96e8d82e4e374f86142972fcf4305fe1f2 Mon Sep 17 00:00:00 2001
From e94b6dd7b3ca884f72f02879fd85792a3aee961d Mon Sep 17 00:00:00 2001
From: Florian Fainelli <f.fainelli@gmail.com>
Date: Wed, 2 Jul 2025 20:47:58 -0700
Subject: [PATCH] Correct loop function signature
@@ -23,7 +23,7 @@ Upstream: https://github.com/opsengine/cpulimit/pull/127
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/tests/busy.c b/tests/busy.c
index b3afb7cd853b..93f0bcce67a8 100644
index b3afb7cd853b..8acbcd82e04f 100644
--- a/tests/busy.c
+++ b/tests/busy.c
@@ -3,7 +3,7 @@
@@ -31,7 +31,7 @@ index b3afb7cd853b..93f0bcce67a8 100644
#include <unistd.h>
-void *loop()
+void *loop(void *)
+void *loop(void *unused)
{
while(1);
}
@@ -0,0 +1,55 @@
From 08644db02d43478f802755903212f5ee506af73b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Joan=20Bruguera=20Mic=C3=B3?= <joanbrugueram@gmail.com>
Date: Sat, 6 Sep 2025 20:36:38 +0000
Subject: [PATCH] Fix build for Linux 6.18-rc1
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
It's no longer required to use nth_page() when iterating pages within a
single scatterlist entry.
Note I believe this code path in `sg_advance` is currently unreachable:
It is only called from `get_userbuf_srtp`, passing in a scatterlist
copied from one created by `__get_userbuf`, which only generates
entries such that `sg->offset + sg->length <= PAGE_SIZE`.
On the other hand, this code path in `sg_advance` requires that
`sg->offset + sg->length > sg->offset + consumed >= PAGE_SIZE`.
See also: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f8f03eb5f0f91fddc9bb8563c7e82bd7d3ba1dd0
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce00897b94bc5c62fab962625efcf1ab824d3688
Signed-off-by: Joan Bruguera Micó <joanbrugueram@gmail.com>
Upstream: https://github.com/cryptodev-linux/cryptodev-linux/commit/08644db02d43478f802755903212f5ee506af73b
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
util.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/util.c b/util.c
index 9eba4836..d4267816 100644
--- a/util.c
+++ b/util.c
@@ -21,6 +21,7 @@
#include <crypto/scatterwalk.h>
#include <linux/scatterlist.h>
+#include <linux/version.h>
#include "util.h"
/* These were taken from Maxim Levitsky's patch to lkml.
@@ -44,8 +45,12 @@ struct scatterlist *sg_advance(struct scatterlist *sg, int consumed)
sg->length -= consumed;
if (sg->offset >= PAGE_SIZE) {
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(6, 18, 0))
+ struct page *page = sg_page(sg) + (sg->offset / PAGE_SIZE);
+#else
struct page *page =
nth_page(sg_page(sg), sg->offset / PAGE_SIZE);
+#endif
sg_set_page(sg, page, sg->length, sg->offset % PAGE_SIZE);
}
@@ -32,6 +32,7 @@ In addition, done the following fixes and improvements:
- Use "static volatile int" for global variable job_canceled.
CVE: CVE-2023-24805
Upstream: https://github.com/OpenPrinting/cups-filters/commit/93e60d3df358c0ae6f3dba79e1c9684657683d89
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
-71
View File
@@ -1,71 +0,0 @@
#!/bin/sh
#
# messagebus: The D-BUS systemwide message bus
#
# chkconfig: 345 97 03
# description: This is a daemon which broadcasts notifications of system events \
# and other messages. See http://www.freedesktop.org/software/dbus/
#
# processname: dbus-daemon
# pidfile: /run/messagebus.pid
#
# Create needed directories.
[ -d /run/dbus ] || mkdir -p /run/dbus
[ -d /var/lock/subsys ] || mkdir -p /var/lock/subsys
[ -d /tmp/dbus ] || mkdir -p /tmp/dbus
RETVAL=0
start() {
printf "Starting system message bus: "
dbus-uuidgen --ensure
dbus-daemon --system
RETVAL=$?
echo "done"
[ $RETVAL -eq 0 ] && touch /var/lock/subsys/dbus-daemon
}
stop() {
printf "Stopping system message bus: "
## we don't want to kill all the per-user $processname, we want
## to use the pid file *only*; because we use the fake nonexistent
## program name "$servicename" that should be safe-ish
killall dbus-daemon
RETVAL=$?
echo "done"
if [ $RETVAL -eq 0 ]; then
rm -f /var/lock/subsys/dbus-daemon
rm -f /run/messagebus.pid
fi
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
restart)
stop
start
;;
condrestart)
if [ -f /var/lock/subsys/$servicename ]; then
stop
start
fi
;;
reload)
echo "Message bus can't reload its configuration, you have to restart it"
RETVAL=$?
;;
*)
echo "Usage: $0 {start|stop|restart|condrestart|reload}"
;;
esac
exit $RETVAL
+71
View File
@@ -0,0 +1,71 @@
#!/bin/sh
DAEMON="dbus-daemon"
# check-package lib_sysv.Variables
PIDFILE="/run/messagebus.pid"
start() {
printf 'Starting system %s: ' "$DAEMON"
# Create needed directories
mkdir -p /run/dbus
mkdir -p /tmp/dbus
# Generate /var/lib/dbus/machine-id if needed
dbus-uuidgen --ensure
start-stop-daemon --start --pidfile "$PIDFILE" \
--exec "/usr/bin/$DAEMON" \
-- --system --syslog
status=$?
if [ "$status" -eq 0 ]; then
echo "OK"
else
echo "FAIL"
fi
return "$status"
}
stop() {
printf 'Stopping %s: ' "$DAEMON"
start-stop-daemon --stop --pidfile "$PIDFILE" --exec "/usr/bin/$DAEMON"
status=$?
if [ "$status" -eq 0 ]; then
echo "OK"
else
echo "FAIL"
return "$status"
fi
while start-stop-daemon --stop --test --quiet --pidfile "$PIDFILE" \
--exec "/usr/bin/$DAEMON"; do
sleep 0.1
done
rm -f "$PIDFILE"
return "$status"
}
reload() {
printf "Reloading %s config: " "$DAEMON"
start-stop-daemon --stop --signal HUP -q --pidfile "$PIDFILE" \
--exec "/usr/bin/$DAEMON"
status=$?
if [ "$status" -eq 0 ]; then
echo "OK"
else
echo "FAIL"
fi
return "$status"
}
restart() {
stop
start
}
case "$1" in
start|stop|reload|restart)
"$1"
;;
*)
echo "Usage: $0 {start|stop|restart|reload}"
exit 1
;;
esac
+2 -2
View File
@@ -93,8 +93,8 @@ endef
DBUS_POST_INSTALL_TARGET_HOOKS += DBUS_REMOVE_DEVFILES
define DBUS_INSTALL_INIT_SYSV
$(INSTALL) -m 0755 -D package/dbus/S30dbus \
$(TARGET_DIR)/etc/init.d/S30dbus
$(INSTALL) -m 0755 -D package/dbus/S30dbus-daemon \
$(TARGET_DIR)/etc/init.d/S30dbus-daemon
mkdir -p $(TARGET_DIR)/var/lib
rm -rf $(TARGET_DIR)/var/lib/dbus
+1 -1
View File
@@ -12,7 +12,7 @@ config BR2_PACKAGE_DMRAID
dmraid uses the Linux device-mapper to create devices with
respective mappings for the ATARAID sets discovered.
http://people.redhat.com/~heinzm/sw/dmraid/
https://people.redhat.com/~heinzm/sw/dmraid/
comment "dmraid needs a toolchain w/ threads, dynamic library"
depends on BR2_USE_MMU
+1 -1
View File
@@ -1,4 +1,4 @@
# From http://people.redhat.com/~heinzm/sw/dmraid/src/dmraid-1.0.0.rc16-3.tar.bz2.md5.sum
# From https://people.redhat.com/~heinzm/sw/dmraid/src/dmraid-1.0.0.rc16-3.tar.bz2.md5.sum
md5 819338fcef98e8e25819f0516722beeb dmraid-1.0.0.rc16-3.tar.bz2
# locally computed
sha256 204d8eff92f95aac4df6c8122bc1505f468f3a901e5a4cc08940e0ede1938994 1.0.0.rc16-3/dmraid/LICENSE_GPL
+1 -1
View File
@@ -6,7 +6,7 @@
DMRAID_VERSION = 1.0.0.rc16-3
DMRAID_SOURCE = dmraid-$(DMRAID_VERSION).tar.bz2
DMRAID_SITE = http://people.redhat.com/~heinzm/sw/dmraid/src
DMRAID_SITE = https://people.redhat.com/~heinzm/sw/dmraid/src
DMRAID_SUBDIR = $(DMRAID_VERSION)/dmraid
# lib and tools race with parallel make
DMRAID_MAKE = $(MAKE1)
@@ -12,6 +12,7 @@ Fixed by moving mechanisms and username_filter from struct passdb_module
to struct auth_passdb, which is where they should have been in the first
place.
CVE: CVE-2022-30550
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
src/auth/auth-request.c | 6 +++---
-5
View File
@@ -21,12 +21,7 @@ DOVECOT_DEPENDENCIES = \
$(if $(BR2_PACKAGE_LIBICONV),libiconv) \
openssl
# CVE-2016-4983 is an issue in a postinstall script in the dovecot rpm, which
# is part of the Red Hat packaging and not part of upstream dovecot
DOVECOT_IGNORE_CVES += CVE-2016-4983
# 0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch
# Note: this ignore CVE entry is reported as stale by pkg-stats, but
# the NVD database is incorrect:
# https://lore.kernel.org/buildroot/20250517181815.02ce0393@windsurf/
+1 -1
View File
@@ -1,5 +1,5 @@
# From https://matt.ucc.asn.au/dropbear/releases/SHA256SUM.asc
sha256 783f50ea27b17c16da89578fafdb6decfa44bb8f6590e5698a4e4d3672dc53d4 dropbear-2025.88.tar.bz2
sha256 0d1f7ca711cfc336dc8a85e672cab9cfd8223a02fe2da0a4a7aeb58c9e113634 dropbear-2025.89.tar.bz2
# License file, locally computed
sha256 a99ce657d790b761c132ee7e0de18edb437ae6361e536d991c6a12f36e770445 LICENSE
+1 -1
View File
@@ -4,7 +4,7 @@
#
################################################################################
DROPBEAR_VERSION = 2025.88
DROPBEAR_VERSION = 2025.89
DROPBEAR_SITE = https://matt.ucc.asn.au/dropbear/releases
DROPBEAR_SOURCE = dropbear-$(DROPBEAR_VERSION).tar.bz2
DROPBEAR_LICENSE = MIT, BSD-2-Clause, Public domain
@@ -1,36 +0,0 @@
From 00833baac6935bd1e3e9856211bc165c5b02a7bd Mon Sep 17 00:00:00 2001
From: Romain Naour <romain.naour@gmail.com>
Date: Sat, 1 Aug 2020 02:25:47 +0200
Subject: [PATCH] ecore_evas/engines/drm/meson.build: use "gl_deps" as engine
dependencies
Meson trigger an error since "engine_gl_drm" variable doesn't exist.
src/modules/ecore_evas/engines/drm/meson.build:10:2: ERROR: Unknown variable "engine_gl_drm".
Instead use "gl_deps" as engine dependencies.
Upstream status:
https://sourceforge.net/p/enlightenment/mailman/message/37075016/
Signed-off-by: Romain Naour <romain.naour@gmail.com>
---
src/modules/ecore_evas/engines/drm/meson.build | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/modules/ecore_evas/engines/drm/meson.build b/src/modules/ecore_evas/engines/drm/meson.build
index 58071010d0..0741d7fccd 100644
--- a/src/modules/ecore_evas/engines/drm/meson.build
+++ b/src/modules/ecore_evas/engines/drm/meson.build
@@ -3,7 +3,7 @@ engine_deps = [ecore_drm2, ecore_input, eeze, elput, libdrm, engine_drm]
if get_option('opengl') != 'none'
config_h.set('BUILD_ECORE_EVAS_GL_DRM', '1')
- engine_deps += [engine_gl_drm]
+ engine_deps += [gl_deps]
endif
engine_include_dir += include_directories(join_paths('..', '..', '..', 'evas', 'engines', 'drm'))
--
2.31.1
@@ -1,37 +0,0 @@
From a21e71cc2284a19a34c913aff757e656e3a8c14a Mon Sep 17 00:00:00 2001
From: Romain Naour <romain.naour@gmail.com>
Date: Sat, 1 Aug 2020 01:01:00 +0200
Subject: [PATCH] ecore_evas/engines/drm/meson.build: fix "gl_drm" include
directory
The Evas_Engine_GL_Drm.h file is in "gl_drm" directory, not "drm".
../src/modules/ecore_evas/engines/drm/ecore_evas_drm.c:23:11: fatal error: Evas_Engine_GL_Drm.h: No such file or directory
23 | # include <Evas_Engine_GL_Drm.h>
| ^~~~~~~~~~~~~~~~~~~~~~
compilation terminated.
Upstream status:
https://sourceforge.net/p/enlightenment/mailman/message/37075004/
Signed-off-by: Romain Naour <romain.naour@gmail.com>
---
src/modules/ecore_evas/engines/drm/meson.build | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/modules/ecore_evas/engines/drm/meson.build b/src/modules/ecore_evas/engines/drm/meson.build
index 0741d7fccd..edda1abd71 100644
--- a/src/modules/ecore_evas/engines/drm/meson.build
+++ b/src/modules/ecore_evas/engines/drm/meson.build
@@ -6,7 +6,7 @@ if get_option('opengl') != 'none'
engine_deps += [gl_deps]
endif
-engine_include_dir += include_directories(join_paths('..', '..', '..', 'evas', 'engines', 'drm'))
+engine_include_dir += include_directories(join_paths('..', '..', '..', 'evas', 'engines', 'gl_drm'))
shared_module(mod_full_name, engine_src,
include_directories : config_dir + [engine_include_dir],
--
2.31.1
@@ -0,0 +1,198 @@
From 0fcaf460c4a33eb54a51b9d8cb38321603019529 Mon Sep 17 00:00:00 2001
From: "Carsten Haitzler (Rasterman)" <raster@rasterman.com>
Date: Thu, 24 Apr 2025 10:54:38 +0100
Subject: [PATCH] evas - fix etc codec - move to Eina_Bool from bool for c23
changes
fixes #84
@fix
Upstream: https://git.enlightenment.org/enlightenment/efl/commit/0fcaf460c4a33eb54a51b9d8cb38321603019529
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
---
src/static_libs/rg_etc/rg_etc1.c | 44 ++++++++++++++++----------------
src/static_libs/rg_etc/rg_etc1.h | 6 ++---
2 files changed, 25 insertions(+), 25 deletions(-)
diff --git a/src/static_libs/rg_etc/rg_etc1.c b/src/static_libs/rg_etc/rg_etc1.c
index 9b889a3995..49e1aa3eff 100644
--- a/src/static_libs/rg_etc/rg_etc1.c
+++ b/src/static_libs/rg_etc/rg_etc1.c
@@ -1074,7 +1074,7 @@ rg_etc1_block_color4_pack(unsigned int color, unsigned char scaled, unsigned cha
static inline void
rg_etc1_block_color4_component_unpack(unsigned char *r, unsigned char *g, unsigned char *b,
- unsigned short packed_color4, bool scaled)
+ unsigned short packed_color4, Eina_Bool scaled)
{
*r = (packed_color4 >> 8) & 15;
*g = (packed_color4 >> 4) & 15;
@@ -1103,7 +1103,7 @@ rg_etc1_block_color4_unpack(unsigned short packed_color4, unsigned char scaled,
static inline unsigned char
rg_etc1_block_color5_delta3_component_unpack(unsigned char *r, unsigned char *g, unsigned char *b,
- unsigned short packed_color5, unsigned short packed_delta3, bool scaled)
+ unsigned short packed_color5, unsigned short packed_delta3, Eina_Bool scaled)
{
unsigned char success = 1;
char dc_r, dc_g, dc_b;
@@ -1136,7 +1136,7 @@ rg_etc1_block_color5_delta3_component_unpack(unsigned char *r, unsigned char *g,
static inline unsigned char
rg_etc1_block_color5_delta3_unpack(unsigned int *result,
unsigned short packed_color5, unsigned short packed_delta3,
- bool scaled, unsigned char alpha)
+ Eina_Bool scaled, unsigned char alpha)
{
unsigned char success;
unsigned char r, g, b;
@@ -1220,8 +1220,8 @@ rg_etc1_block_subblock_color4_abs_get(unsigned int dst[4], unsigned short packed
}
// This is the exported function to unpack a block
-bool
-rg_etc1_unpack_block(const void *ETC1_block, unsigned int *pDst_pixels_BGRA, bool preserve_alpha)
+Eina_Bool
+rg_etc1_unpack_block(const void *ETC1_block, unsigned int *pDst_pixels_BGRA, Eina_Bool preserve_alpha)
{
unsigned char diff_flag, flip_flag, table_index0, table_index1;
unsigned int subblock_colors0[4] = { 0 };
@@ -1627,12 +1627,12 @@ struct _rg_etc1_optimizer_params
uint m_num_src_pixels;
const color_quad_u8* m_pSrc_pixels;
- bool m_use_color4;
+ Eina_Bool m_use_color4;
const int* m_pScan_deltas;
uint m_scan_delta_size;
color_quad_u8 m_base_color5;
- bool m_constrain_against_base_color5;
+ Eina_Bool m_constrain_against_base_color5;
};
static inline void
@@ -1665,7 +1665,7 @@ typedef struct
uint m_block_inten_table;
uint m_n;
uint8* m_pSelectors;
- bool m_block_color4;
+ Eina_Bool m_block_color4;
} rg_etc1_optimizer_results;
static inline void
@@ -1685,7 +1685,7 @@ typedef struct
Etc1_Solution_Coordinates m_coords;
uint8 m_selectors[8];
uint64 m_error;
- bool m_valid;
+ Eina_Bool m_valid;
} rg_etc1_potential_solution;
static inline void
@@ -1730,14 +1730,14 @@ rg_etc1_optimizer_clear(rg_etc1_optimizer *optimizer)
rg_etc1_potential_solution_clear(&optimizer->m_trial_solution);
}
-static bool rg_etc1_optimizer_evaluate_solution(rg_etc1_optimizer *optimizer, const Etc1_Solution_Coordinates* coords,
- rg_etc1_potential_solution* trial_solution,
- rg_etc1_potential_solution* pBest_solution);
-static bool rg_etc1_optimizer_evaluate_solution_fast(rg_etc1_optimizer *optimizer,const Etc1_Solution_Coordinates *coords,
- rg_etc1_potential_solution *trial_solution,
- rg_etc1_potential_solution *pBest_solution);
+static Eina_Bool rg_etc1_optimizer_evaluate_solution(rg_etc1_optimizer *optimizer, const Etc1_Solution_Coordinates* coords,
+ rg_etc1_potential_solution* trial_solution,
+ rg_etc1_potential_solution* pBest_solution);
+static Eina_Bool rg_etc1_optimizer_evaluate_solution_fast(rg_etc1_optimizer *optimizer,const Etc1_Solution_Coordinates *coords,
+ rg_etc1_potential_solution *trial_solution,
+ rg_etc1_potential_solution *pBest_solution);
-static bool
+static Eina_Bool
rg_etc1_optimizer_compute(rg_etc1_optimizer *optimizer)
{
const uint n = optimizer->m_pParams->m_num_src_pixels;
@@ -1811,7 +1811,7 @@ rg_etc1_optimizer_compute(rg_etc1_optimizer *optimizer)
color_quad_u8 base_color;
float avg_delta_r_f, avg_delta_g_f, avg_delta_b_f;
int br1, bg1, bb1;
- bool skip;
+ Eina_Bool skip;
Etc1_Solution_Coordinates coords1;
rg_etc1_solution_coordinates_get_scaled_color(&base_color, &optimizer->m_best_solution.m_coords);
@@ -1958,14 +1958,14 @@ rg_etc1_optimizer_init(rg_etc1_optimizer *optimizer, const rg_etc1_optimizer_par
optimizer->m_best_solution.m_error = cUINT64_MAX;
}
-static bool
+static Eina_Bool
rg_etc1_optimizer_evaluate_solution(rg_etc1_optimizer *optimizer, const Etc1_Solution_Coordinates* coords,
rg_etc1_potential_solution* trial_solution, rg_etc1_potential_solution* pBest_solution)
{
color_quad_u8 base_color;
const uint n = 8;
uint inten_table;
- bool success = EINA_FALSE;
+ Eina_Bool success = EINA_FALSE;
trial_solution->m_valid = EINA_FALSE;
@@ -2062,14 +2062,14 @@ rg_etc1_optimizer_evaluate_solution(rg_etc1_optimizer *optimizer, const Etc1_Sol
return success;
}
-static bool
+static Eina_Bool
rg_etc1_optimizer_evaluate_solution_fast(rg_etc1_optimizer *optimizer, const Etc1_Solution_Coordinates *coords,
rg_etc1_potential_solution *trial_solution, rg_etc1_potential_solution *pBest_solution)
{
color_quad_u8 base_color;
const uint n = 8;
int inten_table;
- bool success = EINA_FALSE;
+ Eina_Bool success = EINA_FALSE;
if (optimizer->m_pParams->m_constrain_against_base_color5)
{
@@ -2380,7 +2380,7 @@ rg_etc1_pack_block_solid_color(unsigned char *block, const color_quad_u8 *color,
static uint
rg_etc1_pack_block_solid_color_constrained(rg_etc1_optimizer_results *results,uint num_colors,
const uint8* pColor, rg_etc1_pack_params *pack_params EINA_UNUSED,
- bool use_diff, const color_quad_u8* pBase_color5_unscaled)
+ Eina_Bool use_diff, const color_quad_u8* pBase_color5_unscaled)
{
static uint s_next_comp[4] = { 1, 2, 0, 1 };
uint best_error = cUINT32_MAX, best_i = 0;
diff --git a/src/static_libs/rg_etc/rg_etc1.h b/src/static_libs/rg_etc/rg_etc1.h
index 4a695dc2d0..28742ca768 100644
--- a/src/static_libs/rg_etc/rg_etc1.h
+++ b/src/static_libs/rg_etc/rg_etc1.h
@@ -3,13 +3,13 @@
#ifndef __RG_ETC1_H__
#define __RG_ETC1_H__
-typedef unsigned char bool;
+#include <Eina.h>
// Unpacks an 8-byte ETC1 compressed block to a block of 4x4 32bpp RGBA pixels.
// Returns false if the block is invalid. Invalid blocks will still be unpacked with clamping.
// This function is thread safe, and does not dynamically allocate any memory.
// If preserve_alpha is true, the alpha channel of the destination pixels will not be overwritten. Otherwise, alpha will be set to 255.
-bool rg_etc1_unpack_block(const void *pETC1_block, unsigned int* pDst_pixels_rgba, bool preserve_alpha);
+Eina_Bool rg_etc1_unpack_block(const void *pETC1_block, unsigned int* pDst_pixels_rgba, Eina_Bool preserve_alpha);
// Quality setting = the higher the quality, the slower.
// To pack large textures, it is highly recommended to call pack_etc1_block() in parallel, on different blocks, from multiple threads (particularly when using cHighQuality).
@@ -23,7 +23,7 @@ typedef enum {
typedef struct
{
rg_etc1_quality m_quality;
- bool m_dithering;
+ Eina_Bool m_dithering;
} rg_etc1_pack_params;
// pack_etc1_block_init() should be called before calling pack_etc1_block(),
--
2.47.3
@@ -0,0 +1,106 @@
From 9948f15ebdfae6b39f88ab58623e28c2b9320e0b Mon Sep 17 00:00:00 2001
From: "Carsten Haitzler (Rasterman)" <raster@rasterman.com>
Date: Mon, 28 Apr 2025 12:53:01 +0100
Subject: [PATCH] eldbus - silence gcc 15 warnings
nmo bug here - just warnings for perfectly ok code and people using
-Werror ...
fixes #85
Upstream: https://git.enlightenment.org/enlightenment/efl/commit/9948f15ebdfae6b39f88ab58623e28c2b9320e0b
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
---
src/lib/eldbus/eldbus_core.c | 2 +-
src/lib/emile/emile_cipher_openssl.c | 54 ++++++++++++++++++++--------
2 files changed, 41 insertions(+), 15 deletions(-)
diff --git a/src/lib/eldbus/eldbus_core.c b/src/lib/eldbus/eldbus_core.c
index 513314741a..3f4aedd442 100644
--- a/src/lib/eldbus/eldbus_core.c
+++ b/src/lib/eldbus/eldbus_core.c
@@ -103,7 +103,7 @@ eldbus_fd_handler_del(Eldbus_Handler_Data *hd)
}
static void
-_eldbus_fork_reset()
+_eldbus_fork_reset(void *data EINA_UNUSED)
{
int i;
diff --git a/src/lib/emile/emile_cipher_openssl.c b/src/lib/emile/emile_cipher_openssl.c
index 7dd2033db1..52575e653a 100644
--- a/src/lib/emile/emile_cipher_openssl.c
+++ b/src/lib/emile/emile_cipher_openssl.c
@@ -313,7 +313,6 @@ EAPI Emile_SSL *
emile_cipher_server_listen(Emile_Cipher_Type t)
{
Emile_SSL *r;
- DH *dh_params = NULL;
int options;
int dh = 0;
@@ -343,20 +342,47 @@ emile_cipher_server_listen(Emile_Cipher_Type t)
if (!r->ssl_ctx) goto on_error;
- dh_params = DH_new();
- if (!dh_params) goto on_error;
- if (!DH_generate_parameters_ex(dh_params, 1024, DH_GENERATOR_5, NULL))
- goto on_error;
- if (!DH_check(dh_params, &dh))
- goto on_error;
- if ((dh & DH_CHECK_P_NOT_PRIME) || (dh & DH_CHECK_P_NOT_SAFE_PRIME))
- goto on_error;
- if (!DH_generate_key(dh_params))
- goto on_error;
- if (!SSL_CTX_set_tmp_dh(r->ssl_ctx, dh_params))
- goto on_error;
+//#define OPENSSL_DH_OLD 1
+
+ do
+ {
+#ifdef OPENSSL_DH_OLD
+ DH *dh_params = DH_new();
+ if (!dh_params) goto on_error;
+ if (!DH_generate_parameters_ex(dh_params, 1024, DH_GENERATOR_5, NULL))
+ goto on_error;
+ if (!DH_check(dh_params, &dh))
+ goto on_error;
+ if ((dh & DH_CHECK_P_NOT_PRIME) || (dh & DH_CHECK_P_NOT_SAFE_PRIME))
+ goto on_error;
+ if (!DH_generate_key(dh_params))
+ goto on_error;
+ if (!SSL_CTX_set_tmp_dh(r->ssl_ctx, dh_params))
+ goto on_error;
+ DH_free(dh_params);
+#else
+ EVP_PKEY *params = NULL;
+ EVP_PKEY_CTX *pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_DH, NULL);
+ if (!pctx)
+ goto on_error;
+ if (EVP_PKEY_paramgen_init(pctx) <= 0)
+ goto on_error2;
+ if (EVP_PKEY_CTX_set_dh_paramgen_prime_len(pctx, 1024) <= 0)
+ goto on_error2;
+ if (EVP_PKEY_CTX_set_dh_paramgen_generator(pctx, 5) <= 0)
+ goto on_error2;
+ if (EVP_PKEY_paramgen(pctx, &params) <= 0)
+ goto on_error2;
+ if (SSL_CTX_set0_tmp_dh_pkey(r->ssl_ctx, params) <= 0)
+ goto on_error2;
+on_error2:
+ if (params) EVP_PKEY_free(params);
+ EVP_PKEY_CTX_free(pctx);
+ if (!params) goto on_error;
+#endif
+ }
+ while (0);
- DH_free(dh_params);
INF("DH params successfully generated and applied!");
if (!SSL_CTX_set_cipher_list(r->ssl_ctx,
--
2.47.3
@@ -0,0 +1,857 @@
From 60217eff9672e55c67454df13a16236d106fc92f Mon Sep 17 00:00:00 2001
From: "Carsten Haitzler (Rasterman)" <raster@rasterman.com>
Date: Sat, 3 May 2025 15:08:54 +0100
Subject: [PATCH] efl all - gcc 15 break older c std code
gcc 15 default policy of breaking existing code. adapt. this time it's
the old func() == i take zero or more arguments func not NO arguments.
gcc15 made this a compile error and efl used it as a shortcut all over
to save being verbose when not needed.
adapt
Upstream: https://git.enlightenment.org/enlightenment/efl/commit/60217eff9672e55c67454df13a16236d106fc92f
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
---
src/bin/elementary/test_win_stack.c | 2 +-
src/bin/exactness/player.c | 2 +-
src/bin/exactness/recorder.c | 2 +-
src/lib/ecore_imf/ecore_imf_context.c | 19 ++-
src/lib/ecore_imf/ecore_imf_private.h | 4 +-
src/lib/eeze/eeze_udev_watch.c | 2 +-
src/lib/efl_canvas_wl/efl_canvas_wl.c | 16 +-
src/lib/efl_canvas_wl/x11.x | 2 +-
src/lib/efreet/efreet_cache.c | 2 +-
src/lib/eio/eio_monitor_inotify.c | 2 +-
.../system/systemd/ecore_system_systemd.c | 2 +-
.../ecore/system/upower/ecore_system_upower.c | 2 +-
.../evas/engines/gl_common/evas_gl_context.c | 158 ++++++++----------
.../evas/engines/gl_common/evas_gl_core.c | 2 +-
src/modules/evas/engines/gl_drm/evas_engine.c | 28 +---
src/modules/evas/engines/gl_x11/evas_engine.c | 94 +++++------
src/modules/evas/engines/gl_x11/evas_x_main.c | 4 +-
.../evas/engines/wayland_egl/evas_engine.c | 31 +---
18 files changed, 172 insertions(+), 202 deletions(-)
diff --git a/src/bin/elementary/test_win_stack.c b/src/bin/elementary/test_win_stack.c
index e3ca2b943e..96e0b54f41 100644
--- a/src/bin/elementary/test_win_stack.c
+++ b/src/bin/elementary/test_win_stack.c
@@ -92,7 +92,7 @@ _bt_pressed(void *data, Evas_Object *obj EINA_UNUSED, void *event_info EINA_UNUS
}
static void
-_del()
+_del(void *data EINA_UNUSED, Evas *e EINA_UNUSED, Evas_Object *o EINA_UNUSED, void *info EINA_UNUSED)
{
level = 0;
popto_win = NULL;
diff --git a/src/bin/exactness/player.c b/src/bin/exactness/player.c
index 6802c72efe..7e47a15664 100644
--- a/src/bin/exactness/player.c
+++ b/src/bin/exactness/player.c
@@ -1040,7 +1040,7 @@ _write_unit_file(void)
}
#ifdef HAVE_DLSYM
# define ORIGINAL_CALL_T(t, name, ...) \
- t (*_original_init_cb)(); \
+ t (*_original_init_cb)(...); \
_original_init_cb = dlsym(RTLD_NEXT, name); \
original_return = _original_init_cb(__VA_ARGS__);
#else
diff --git a/src/bin/exactness/recorder.c b/src/bin/exactness/recorder.c
index f161100cbc..45394c3c59 100644
--- a/src/bin/exactness/recorder.c
+++ b/src/bin/exactness/recorder.c
@@ -301,7 +301,7 @@ _setup_ee_creation(void)
#ifdef HAVE_DLSYM
# define ORIGINAL_CALL_T(t, name, ...) \
- t (*_original_init_cb)(); \
+ t (*_original_init_cb)(...); \
_original_init_cb = dlsym(RTLD_NEXT, name); \
original_return = _original_init_cb(__VA_ARGS__);
#else
diff --git a/src/lib/ecore_imf/ecore_imf_context.c b/src/lib/ecore_imf/ecore_imf_context.c
index 5ade47002b..cea45ba54e 100644
--- a/src/lib/ecore_imf/ecore_imf_context.c
+++ b/src/lib/ecore_imf/ecore_imf_context.c
@@ -780,7 +780,7 @@ ecore_imf_context_event_callback_add(Ecore_IMF_Context *ctx, Ecore_IMF_Callback_
fn = calloc(1, sizeof (Ecore_IMF_Func_Node));
if (!fn) return;
- fn->func = func;
+ fn->func = (void *)func;
fn->data = data;
fn->type = type;
@@ -806,7 +806,7 @@ ecore_imf_context_event_callback_del(Ecore_IMF_Context *ctx, Ecore_IMF_Callback_
EINA_LIST_FOREACH_SAFE(ctx->callbacks, l, l_next, fn)
{
- if ((fn) && (fn->func == func) && (fn->type == type))
+ if ((fn) && (fn->func == (void *)func) && (fn->type == type))
{
void *tmp = (void *)fn->data;
free(fn);
@@ -833,7 +833,11 @@ ecore_imf_context_event_callback_call(Ecore_IMF_Context *ctx, Ecore_IMF_Callback
EINA_LIST_FOREACH(ctx->callbacks, l, fn)
{
if ((fn) && (fn->type == type) && (fn->func))
- fn->func(fn->data, ctx, event_info);
+ {
+ Ecore_IMF_Event_Cb cb = (Ecore_IMF_Event_Cb)fn->func;
+
+ cb((void *)fn->data, ctx, event_info);
+ }
}
}
@@ -1210,6 +1214,8 @@ ecore_imf_context_input_panel_state_get(Ecore_IMF_Context *ctx)
return state;
}
+typedef void (*Ecore_IMF_Input_Panel_Callback) (void *data, Ecore_IMF_Context *ctx, int value);
+
EAPI void
ecore_imf_context_input_panel_event_callback_add(Ecore_IMF_Context *ctx,
Ecore_IMF_Input_Panel_Event type,
@@ -1230,7 +1236,7 @@ ecore_imf_context_input_panel_event_callback_add(Ecore_IMF_Context *ctx,
fn = calloc(1, sizeof (Ecore_IMF_Input_Panel_Callback_Node));
if (!fn) return;
- fn->func = func;
+ fn->func = (void *)func;
fn->data = data;
fn->type = type;
@@ -1258,7 +1264,7 @@ ecore_imf_context_input_panel_event_callback_del(Ecore_IMF_Context *ctx,
EINA_LIST_FOREACH_SAFE(ctx->input_panel_callbacks, l, l_next, fn)
{
- if ((fn) && (fn->func == func) && (fn->type == type))
+ if ((fn) && (fn->func == (void *)func) && (fn->type == type))
{
free(fn);
ctx->input_panel_callbacks = eina_list_remove_list(ctx->input_panel_callbacks, l);
@@ -1284,7 +1290,8 @@ ecore_imf_context_input_panel_event_callback_call(Ecore_IMF_Context *ctx, Ecore_
{
if ((fn) && (fn->type == type) && (fn->func))
{
- fn->func(fn->data, ctx, value);
+ Ecore_IMF_Input_Panel_Callback cb = (Ecore_IMF_Input_Panel_Callback)fn->func;
+ cb((void *)fn->data, ctx, value);
if (type == ECORE_IMF_INPUT_PANEL_STATE_EVENT &&
value == ECORE_IMF_INPUT_PANEL_STATE_HIDE &&
show_req_ctx == ctx)
diff --git a/src/lib/ecore_imf/ecore_imf_private.h b/src/lib/ecore_imf/ecore_imf_private.h
index 22d2942109..b9622bd165 100644
--- a/src/lib/ecore_imf/ecore_imf_private.h
+++ b/src/lib/ecore_imf/ecore_imf_private.h
@@ -77,14 +77,14 @@ struct _Ecore_IMF_Module
struct _Ecore_IMF_Func_Node
{
- void (*func) ();
+ void *func; // cast at call time
const void *data;
Ecore_IMF_Callback_Type type;
};
struct _Ecore_IMF_Input_Panel_Callback_Node
{
- void (*func) ();
+ void *func;
const void *data;
Ecore_IMF_Input_Panel_Event type;
};
diff --git a/src/lib/eeze/eeze_udev_watch.c b/src/lib/eeze/eeze_udev_watch.c
index 7245f9d0a6..ba5b231a34 100644
--- a/src/lib/eeze/eeze_udev_watch.c
+++ b/src/lib/eeze/eeze_udev_watch.c
@@ -362,7 +362,7 @@ error:
}
static void
-_eeze_udev_watch_reset()
+_eeze_udev_watch_reset(void *data EINA_UNUSED)
{
Eeze_Udev_Watch *watch;
diff --git a/src/lib/efl_canvas_wl/efl_canvas_wl.c b/src/lib/efl_canvas_wl/efl_canvas_wl.c
index 51ecde1b92..f0ef4a076c 100644
--- a/src/lib/efl_canvas_wl/efl_canvas_wl.c
+++ b/src/lib/efl_canvas_wl/efl_canvas_wl.c
@@ -3199,11 +3199,11 @@ shell_surface_toplevel_set_app_id(struct wl_client *client EINA_UNUSED, struct w
}
static void
-shell_surface_toplevel_show_window_menu(){}
+shell_surface_toplevel_show_window_menu(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED, struct wl_resource *resource2 EINA_UNUSED, uint32_t a EINA_UNUSED, int32_t b EINA_UNUSED, int32_t c EINA_UNUSED){}
static void
-shell_surface_toplevel_move(){}
+shell_surface_toplevel_move(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED, struct wl_resource *resource2 EINA_UNUSED, uint32_t a EINA_UNUSED){}
static void
-shell_surface_toplevel_resize(){}
+shell_surface_toplevel_resize(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED, struct wl_resource *resource2 EINA_UNUSED, uint32_t a EINA_UNUSED, uint32_t b EINA_UNUSED){}
static void
shell_surface_toplevel_set_max_size(struct wl_client *client EINA_UNUSED, struct wl_resource *resource, int32_t w, int32_t h)
@@ -3224,15 +3224,15 @@ shell_surface_toplevel_set_min_size(struct wl_client *client EINA_UNUSED, struct
}
static void
-shell_surface_toplevel_set_maximized(){}
+shell_surface_toplevel_set_maximized(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED){}
static void
-shell_surface_toplevel_unset_maximized(){}
+shell_surface_toplevel_unset_maximized(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED){}
static void
-shell_surface_toplevel_set_fullscreen(){}
+shell_surface_toplevel_set_fullscreen(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED, struct wl_resource *resource2 EINA_UNUSED){}
static void
-shell_surface_toplevel_unset_fullscreen(){}
+shell_surface_toplevel_unset_fullscreen(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED){}
static void
-shell_surface_toplevel_set_minimized(){}
+shell_surface_toplevel_set_minimized(struct wl_client *client EINA_UNUSED, struct wl_resource *resource EINA_UNUSED){}
static const struct xdg_toplevel_interface shell_surface_toplevel_interface =
{
diff --git a/src/lib/efl_canvas_wl/x11.x b/src/lib/efl_canvas_wl/x11.x
index 2d7a88352f..93d5e21f01 100644
--- a/src/lib/efl_canvas_wl/x11.x
+++ b/src/lib/efl_canvas_wl/x11.x
@@ -640,7 +640,7 @@ x11_kbd_apply(Comp_Seat *s)
static void seat_keymap_update(Comp_Seat *s);
static Eina_Bool
-x11_xkb_refresh()
+x11_xkb_refresh(void *data EINA_UNUSED, int event EINA_UNUSED, void *info EINA_UNUSED)
{
Eina_List *l;
Comp *c;
diff --git a/src/lib/efreet/efreet_cache.c b/src/lib/efreet/efreet_cache.c
index dd4dfb0b99..62134fdcd0 100644
--- a/src/lib/efreet/efreet_cache.c
+++ b/src/lib/efreet/efreet_cache.c
@@ -222,7 +222,7 @@ _cb_server_del(void *data EINA_UNUSED, int type EINA_UNUSED, void *event)
}
static void
-_efreet_cache_reset()
+_efreet_cache_reset(void *data EINA_UNUSED)
{
const char *s;
int len = 0;
diff --git a/src/lib/eio/eio_monitor_inotify.c b/src/lib/eio/eio_monitor_inotify.c
index e266877134..4c3353e832 100644
--- a/src/lib/eio/eio_monitor_inotify.c
+++ b/src/lib/eio/eio_monitor_inotify.c
@@ -159,7 +159,7 @@ _eio_inotify_handler(void *data EINA_UNUSED, Ecore_Fd_Handler *fdh)
*/
static Eina_Bool reseting;
static void
-_eio_monitor_reset()
+_eio_monitor_reset(void *data EINA_UNUSED)
{
Eina_Hash *h = _inotify_monitors;
Eina_Iterator *it;
diff --git a/src/modules/ecore/system/systemd/ecore_system_systemd.c b/src/modules/ecore/system/systemd/ecore_system_systemd.c
index ab19ff36cd..3295e8f713 100644
--- a/src/modules/ecore/system/systemd/ecore_system_systemd.c
+++ b/src/modules/ecore/system/systemd/ecore_system_systemd.c
@@ -253,7 +253,7 @@ static Eina_Bool _ecore_system_systemd_init(void);
static unsigned int reseting = 0;
static void
-_ecore_system_systemd_reset()
+_ecore_system_systemd_reset(void *data EINA_UNUSED)
{
reseting = 1;
_ecore_system_systemd_shutdown();
diff --git a/src/modules/ecore/system/upower/ecore_system_upower.c b/src/modules/ecore/system/upower/ecore_system_upower.c
index 17ef5170c8..9e0a3d04b4 100644
--- a/src/modules/ecore/system/upower/ecore_system_upower.c
+++ b/src/modules/ecore/system/upower/ecore_system_upower.c
@@ -413,7 +413,7 @@ static void _ecore_system_upower_shutdown(void);
static unsigned int reseting;
static void
-_ecore_system_upower_reset()
+_ecore_system_upower_reset(void *data EINA_UNUSED)
{
reseting = 1;
_ecore_system_upower_shutdown();
diff --git a/src/modules/evas/engines/gl_common/evas_gl_context.c b/src/modules/evas/engines/gl_common/evas_gl_context.c
index 85035d42f9..5c7deb4b30 100644
--- a/src/modules/evas/engines/gl_common/evas_gl_context.c
+++ b/src/modules/evas/engines/gl_common/evas_gl_context.c
@@ -42,14 +42,6 @@ const char *(*glsym_glGetStringi) (GLenum name, GLuint index) = NULL;
# define GL_LINE_SMOOTH 0x0B20
# endif
-// just used for finding symbols :)
-typedef void (*_eng_fn) (void);
-
-typedef _eng_fn (*glsym_func_eng_fn) ();
-typedef int (*secsym_func_int) ();
-typedef unsigned int (*secsym_func_uint) ();
-typedef void *(*secsym_func_void_ptr) ();
-
unsigned int (*eglsym_eglDestroyImage) (void *a, void *b) = NULL;
void (*secsym_glEGLImageTargetTexture2DOES) (int a, void *b) = NULL;
void *(*secsym_eglMapImageSEC) (void *a, void *b, int c, int d) = NULL;
@@ -71,10 +63,6 @@ int (*secsym_tbm_surface_map) (void *surface, int opt, void *info) = NULL;
int (*secsym_tbm_surface_unmap) (void *surface) = NULL;
int (*secsym_tbm_surface_get_info) (void *surface, void *info) = NULL;
////////////////////////////////////
-#else
-typedef void (*_eng_fn) (void);
-
-typedef _eng_fn (*glsym_func_eng_fn) ();
#endif
static int dbgflushnum = -1;
@@ -216,27 +204,27 @@ evas_gl_symbols(void *(*GetProcAddress)(const char *name), const char *extsn)
glsym_glGetStringi = dlsym(RTLD_DEFAULT, "glGetStringi");
-#define FINDSYM(dst, sym, ext, typ) do { \
+#define FINDSYM(dst, sym, ext) do { \
if (!dst) { \
if (_has_ext(ext, &exts, &num) && GetProcAddress) \
- dst = (typ) GetProcAddress(sym); \
+ dst = GetProcAddress(sym); \
if (!dst) \
- dst = (typ) dlsym(RTLD_DEFAULT, sym); \
+ dst = dlsym(RTLD_DEFAULT, sym); \
}} while (0)
-#define FALLBAK(dst, typ) do { \
+#define FALLBAK(dst) do { \
if (!dst) { \
ERR("Symbol '%s' could not be found!", (#dst) + 6); \
- dst = (typ) sym_missing; \
+ dst = (void *)sym_missing; \
failed = EINA_TRUE; \
}} while (0)
#ifdef GL_GLES
- FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffers", NULL, glsym_func_void);
- FALLBAK(glsym_glGenFramebuffers, glsym_func_void);
+ FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffers", NULL);
+ FALLBAK(glsym_glGenFramebuffers);
- FINDSYM(glsym_glBindFramebuffer, "glBindFramebuffer", NULL, glsym_func_void);
- FALLBAK(glsym_glBindFramebuffer, glsym_func_void);
+ FINDSYM(glsym_glBindFramebuffer, "glBindFramebuffer", NULL);
+ FALLBAK(glsym_glBindFramebuffer);
#else
@@ -274,79 +262,79 @@ evas_gl_symbols(void *(*GetProcAddress)(const char *name), const char *extsn)
glGenFramebuffers, glBindFramebuffer, glFramebufferTexture2D, glDeleteFramebuffers
*/
- FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffers", NULL, glsym_func_void);
- FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffersARB", "GL_ARB_framebuffer_object", glsym_func_void);
- FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffersEXT", "GL_EXT_framebuffer_object", glsym_func_void);
- FALLBAK(glsym_glGenFramebuffers, glsym_func_void);
+ FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffers", NULL);
+ FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffersARB", "GL_ARB_framebuffer_object");
+ FINDSYM(glsym_glGenFramebuffers, "glGenFramebuffersEXT", "GL_EXT_framebuffer_object");
+ FALLBAK(glsym_glGenFramebuffers);
- FINDSYM(glsym_glBindFramebuffer, "glBindFramebuffer", NULL, glsym_func_void);
- FINDSYM(glsym_glBindFramebuffer, "glBindFramebufferARB", "GL_ARB_framebuffer_object", glsym_func_void);
- FINDSYM(glsym_glBindFramebuffer, "glBindFramebufferEXT", "GL_EXT_framebuffer_object", glsym_func_void);
- FALLBAK(glsym_glBindFramebuffer, glsym_func_void);
+ FINDSYM(glsym_glBindFramebuffer, "glBindFramebuffer", NULL);
+ FINDSYM(glsym_glBindFramebuffer, "glBindFramebufferARB", "GL_ARB_framebuffer_object");
+ FINDSYM(glsym_glBindFramebuffer, "glBindFramebufferEXT", "GL_EXT_framebuffer_object");
+ FALLBAK(glsym_glBindFramebuffer);
#endif
- FINDSYM(glsym_glFramebufferTexture2D, "glFramebufferTexture2D", NULL, glsym_func_void);
- FINDSYM(glsym_glFramebufferTexture2D, "glFramebufferTexture2DARB", "GL_ARB_framebuffer_object", glsym_func_void);
- FINDSYM(glsym_glFramebufferTexture2D, "glFramebufferTexture2DEXT", "GL_EXT_framebuffer_object", glsym_func_void);
- FALLBAK(glsym_glFramebufferTexture2D, glsym_func_void);
+ FINDSYM(glsym_glFramebufferTexture2D, "glFramebufferTexture2D", NULL);
+ FINDSYM(glsym_glFramebufferTexture2D, "glFramebufferTexture2DARB", "GL_ARB_framebuffer_object");
+ FINDSYM(glsym_glFramebufferTexture2D, "glFramebufferTexture2DEXT", "GL_EXT_framebuffer_object");
+ FALLBAK(glsym_glFramebufferTexture2D);
- FINDSYM(glsym_glDeleteFramebuffers, "glDeleteFramebuffers", NULL, glsym_func_void);
- FINDSYM(glsym_glDeleteFramebuffers, "glDeleteFramebuffersARB", "GL_ARB_framebuffer_object", glsym_func_void);
- FINDSYM(glsym_glDeleteFramebuffers, "glDeleteFramebuffersEXT", "GL_EXT_framebuffer_object", glsym_func_void);
- FALLBAK(glsym_glDeleteFramebuffers, glsym_func_void);
+ FINDSYM(glsym_glDeleteFramebuffers, "glDeleteFramebuffers", NULL);
+ FINDSYM(glsym_glDeleteFramebuffers, "glDeleteFramebuffersARB", "GL_ARB_framebuffer_object");
+ FINDSYM(glsym_glDeleteFramebuffers, "glDeleteFramebuffersEXT", "GL_EXT_framebuffer_object");
+ FALLBAK(glsym_glDeleteFramebuffers);
// Not sure there's an EXT variant
- FINDSYM(glsym_glGetProgramBinary, "glGetProgramBinary", NULL, glsym_func_void);
- FINDSYM(glsym_glGetProgramBinary, "glGetProgramBinaryOES", "GL_OES_get_program_binary", glsym_func_void);
- FINDSYM(glsym_glGetProgramBinary, "glGetProgramBinaryEXT", "GL_EXT_get_program_binary", glsym_func_void);
+ FINDSYM(glsym_glGetProgramBinary, "glGetProgramBinary", NULL);
+ FINDSYM(glsym_glGetProgramBinary, "glGetProgramBinaryOES", "GL_OES_get_program_binary");
+ FINDSYM(glsym_glGetProgramBinary, "glGetProgramBinaryEXT", "GL_EXT_get_program_binary");
// Not sure there's an EXT variant
- FINDSYM(glsym_glProgramBinary, "glProgramBinary", NULL, glsym_func_void);
- FINDSYM(glsym_glProgramBinary, "glProgramBinaryOES", "GL_OES_get_program_binary", glsym_func_void);
- FINDSYM(glsym_glProgramBinary, "glProgramBinaryEXT", "GL_EXT_get_program_binary", glsym_func_void);
+ FINDSYM(glsym_glProgramBinary, "glProgramBinary", NULL);
+ FINDSYM(glsym_glProgramBinary, "glProgramBinaryOES", "GL_OES_get_program_binary");
+ FINDSYM(glsym_glProgramBinary, "glProgramBinaryEXT", "GL_EXT_get_program_binary");
- FINDSYM(glsym_glProgramParameteri, "glProgramParameteri", NULL, glsym_func_void);
- FINDSYM(glsym_glProgramParameteri, "glProgramParameteriEXT", "GL_EXT_separate_shader_objects", glsym_func_void);
- FINDSYM(glsym_glProgramParameteri, "glProgramParameteriARB", "GL_ARB_geometry_shader4", glsym_func_void);
+ FINDSYM(glsym_glProgramParameteri, "glProgramParameteri", NULL);
+ FINDSYM(glsym_glProgramParameteri, "glProgramParameteriEXT", "GL_EXT_separate_shader_objects");
+ FINDSYM(glsym_glProgramParameteri, "glProgramParameteriARB", "GL_ARB_geometry_shader4");
- FINDSYM(glsym_glReleaseShaderCompiler, "glReleaseShaderCompiler", NULL, glsym_func_void);
+ FINDSYM(glsym_glReleaseShaderCompiler, "glReleaseShaderCompiler", NULL);
#ifndef GL_GLES
- FINDSYM(glsym_glReleaseShaderCompiler, "glReleaseShaderCompiler", "GL_ARB_ES2_compatibility", glsym_func_void);
+ FINDSYM(glsym_glReleaseShaderCompiler, "glReleaseShaderCompiler", "GL_ARB_ES2_compatibility");
#endif
// Not sure there's a core variant, glActivateTileQCOM is strange as well
- FINDSYM(glsym_glStartTiling, "glStartTilingQCOM", "GL_QCOM_tiled_rendering", glsym_func_void);
- FINDSYM(glsym_glStartTiling, "glStartTiling", NULL, glsym_func_void);
- FINDSYM(glsym_glStartTiling, "glActivateTileQCOM", NULL, glsym_func_void);
- FINDSYM(glsym_glEndTiling, "glEndTilingQCOM", "GL_QCOM_tiled_rendering", glsym_func_void);
- FINDSYM(glsym_glEndTiling, "glEndTiling", NULL, glsym_func_void);
+ FINDSYM(glsym_glStartTiling, "glStartTilingQCOM", "GL_QCOM_tiled_rendering");
+ FINDSYM(glsym_glStartTiling, "glStartTiling", NULL);
+ FINDSYM(glsym_glStartTiling, "glActivateTileQCOM", NULL);
+ FINDSYM(glsym_glEndTiling, "glEndTilingQCOM", "GL_QCOM_tiled_rendering");
+ FINDSYM(glsym_glEndTiling, "glEndTiling", NULL);
if (!getenv("EVAS_GL_MAPBUFFER_DISABLE"))
{
// Not sure there's an EXT variant. (probably no KHR variant)
- FINDSYM(glsym_glMapBuffer, "glMapBuffer", NULL, glsym_func_void_ptr);
- FINDSYM(glsym_glMapBuffer, "glMapBufferOES", "GL_OES_mapbuffer", glsym_func_void_ptr);
- FINDSYM(glsym_glMapBuffer, "glMapBufferARB", "GL_ARB_vertex_buffer_object", glsym_func_void_ptr);
- FINDSYM(glsym_glMapBuffer, "glMapBufferARB", "GLX_ARB_vertex_buffer_object", glsym_func_void_ptr);
- FINDSYM(glsym_glMapBuffer, "glMapBufferEXT", NULL, glsym_func_void_ptr);
-
- FINDSYM(glsym_glUnmapBuffer, "glUnmapBuffer", NULL, glsym_func_boolean);
- FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferOES", "GL_OES_mapbuffer", glsym_func_boolean);
- FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferARB", "GL_ARB_vertex_buffer_object", glsym_func_boolean);
- FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferARB", "GLX_ARB_vertex_buffer_object", glsym_func_boolean);
- FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferEXT", NULL, glsym_func_boolean);
+ FINDSYM(glsym_glMapBuffer, "glMapBuffer", NULL);
+ FINDSYM(glsym_glMapBuffer, "glMapBufferOES", "GL_OES_mapbuffer");
+ FINDSYM(glsym_glMapBuffer, "glMapBufferARB", "GL_ARB_vertex_buffer_object");
+ FINDSYM(glsym_glMapBuffer, "glMapBufferARB", "GLX_ARB_vertex_buffer_object");
+ FINDSYM(glsym_glMapBuffer, "glMapBufferEXT", NULL);
+
+ FINDSYM(glsym_glUnmapBuffer, "glUnmapBuffer", NULL);
+ FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferOES", "GL_OES_mapbuffer");
+ FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferARB", "GL_ARB_vertex_buffer_object");
+ FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferARB", "GLX_ARB_vertex_buffer_object");
+ FINDSYM(glsym_glUnmapBuffer, "glUnmapBufferEXT", NULL);
}
- FINDSYM(glsym_glRenderbufferStorageMultisample, "glRenderbufferStorageMultisample", NULL, glsym_func_void);
+ FINDSYM(glsym_glRenderbufferStorageMultisample, "glRenderbufferStorageMultisample", NULL);
#ifdef GL_GLES
-#define FINDSYMN(dst, sym, ext, typ) do { \
+#define FINDSYMN(dst, sym, ext) do { \
if (!dst) { \
if (_ckext(extsn, ext) && GetProcAddress) \
- dst = (typ) GetProcAddress(sym); \
+ dst = GetProcAddress(sym); \
if (!dst) \
- dst = (typ) dlsym(RTLD_DEFAULT, sym); \
+ dst = dlsym(RTLD_DEFAULT, sym); \
}} while (0)
// yes - gl core looking for egl stuff. i know it's odd. a reverse-layer thing
@@ -374,22 +362,22 @@ evas_gl_symbols(void *(*GetProcAddress)(const char *name), const char *extsn)
{
eglsym_eglCreateImage = NULL;
eglsym_eglDestroyImage = NULL;
- FINDSYMN(eglsym_eglCreateImageKHR, "eglCreateImageKHR", "EGL_KHR_image_base", secsym_func_void_ptr);
- FINDSYMN(eglsym_eglDestroyImage, "eglDestroyImageKHR", "EGL_KHR_image_base", secsym_func_uint);
+ FINDSYMN(eglsym_eglCreateImageKHR, "eglCreateImageKHR", "EGL_KHR_image_base");
+ FINDSYMN(eglsym_eglDestroyImage, "eglDestroyImageKHR", "EGL_KHR_image_base");
}
}
- FINDSYM(glsym_glProgramParameteri, "glProgramParameteri", NULL, glsym_func_void);
- FINDSYM(glsym_glProgramParameteri, "glProgramParameteriEXT", "GL_EXT_geometry_shader4", glsym_func_void);
- FINDSYM(glsym_glProgramParameteri, "glProgramParameteriARB", "GL_ARB_geometry_shader4", glsym_func_void);
+ FINDSYM(glsym_glProgramParameteri, "glProgramParameteri", NULL);
+ FINDSYM(glsym_glProgramParameteri, "glProgramParameteriEXT", "GL_EXT_geometry_shader4");
+ FINDSYM(glsym_glProgramParameteri, "glProgramParameteriARB", "GL_ARB_geometry_shader4");
- FINDSYM(secsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image_external", glsym_func_void);
- FINDSYM(secsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image", glsym_func_void);
+ FINDSYM(secsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image_external");
+ FINDSYM(secsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image");
// Old SEC extensions
- FINDSYMN(secsym_eglMapImageSEC, "eglMapImageSEC", NULL, secsym_func_void_ptr);
- FINDSYMN(secsym_eglUnmapImageSEC, "eglUnmapImageSEC", NULL, secsym_func_uint);
- FINDSYMN(secsym_eglGetImageAttribSEC, "eglGetImageAttribSEC", NULL, secsym_func_uint);
+ FINDSYMN(secsym_eglMapImageSEC, "eglMapImageSEC", NULL);
+ FINDSYMN(secsym_eglUnmapImageSEC, "eglUnmapImageSEC", NULL);
+ FINDSYMN(secsym_eglGetImageAttribSEC, "eglGetImageAttribSEC", NULL);
#undef FINDSYMN
@@ -421,19 +409,19 @@ tbm_symbols(void)
return;
}
-#define FINDSYM(dst, sym, typ) \
- if (!dst) dst = (typ)dlsym(tbm_lib_handle, sym); \
+#define FINDSYM(dst, sym) \
+ if (!dst) dst = dlsym(tbm_lib_handle, sym); \
if (!dst) \
{ \
ERR("Symbol not found %s\n", sym); \
return; \
}
- FINDSYM(secsym_tbm_surface_create, "tbm_surface_create", secsym_func_void_ptr);
- FINDSYM(secsym_tbm_surface_destroy, "tbm_surface_destroy", secsym_func_int);
- FINDSYM(secsym_tbm_surface_map, "tbm_surface_map", secsym_func_int);
- FINDSYM(secsym_tbm_surface_unmap, "tbm_surface_unmap", secsym_func_int);
- FINDSYM(secsym_tbm_surface_get_info, "tbm_surface_get_info", secsym_func_int);
+ FINDSYM(secsym_tbm_surface_create, "tbm_surface_create");
+ FINDSYM(secsym_tbm_surface_destroy, "tbm_surface_destroy");
+ FINDSYM(secsym_tbm_surface_map, "tbm_surface_map");
+ FINDSYM(secsym_tbm_surface_unmap, "tbm_surface_unmap");
+ FINDSYM(secsym_tbm_surface_get_info, "tbm_surface_get_info");
#undef FINDSYM
#endif
diff --git a/src/modules/evas/engines/gl_common/evas_gl_core.c b/src/modules/evas/engines/gl_common/evas_gl_core.c
index c7d453ffbd..40518b5cd9 100644
--- a/src/modules/evas/engines/gl_common/evas_gl_core.c
+++ b/src/modules/evas/engines/gl_common/evas_gl_core.c
@@ -21,7 +21,7 @@ EVGL_Engine *evgl_engine = NULL;
int _evas_gl_log_dom = -1;
int _evas_gl_log_level = -1;
-typedef void *(*glsym_func_void_ptr) ();
+typedef void *(*glsym_func_void_ptr) (void *);
glsym_func_void_ptr glsym_evas_gl_native_context_get = NULL;
glsym_func_void_ptr glsym_evas_gl_engine_data_get = NULL;
diff --git a/src/modules/evas/engines/gl_drm/evas_engine.c b/src/modules/evas/engines/gl_drm/evas_engine.c
index d59f762160..1d57b69f4b 100644
--- a/src/modules/evas/engines/gl_drm/evas_engine.c
+++ b/src/modules/evas/engines/gl_drm/evas_engine.c
@@ -74,11 +74,7 @@ static struct gbm_device *gbm_dev = NULL;
static int gbm_dev_refs = 0;
/* local function prototype types */
-typedef void (*glsym_func_void)();
-typedef void *(*glsym_func_void_ptr)();
-typedef int (*glsym_func_int)();
-typedef unsigned int (*glsym_func_uint)();
-typedef const char *(*glsym_func_const_char_ptr)();
+typedef void *(*glsym_func_void_ptr)(void);
/* external dynamic loaded Evas_GL function pointers */
Evas_GL_Common_Image_Call glsym_evas_gl_common_image_ref = NULL;
@@ -255,26 +251,20 @@ eng_egl_symbols(EGLDisplay edsp)
if (done) return;
-#define FINDSYM(dst, sym, typ) \
- if (!dst) dst = (typ)glsym_eglGetProcAddress(sym);
+#define FINDSYM(dst, sym) \
+ if (!dst) dst = glsym_eglGetProcAddress(sym)
exts = eglQueryString(edsp, EGL_EXTENSIONS);
- FINDSYM(glsym_glEGLImageTargetTexture2DOES,
- "glEGLImageTargetTexture2DOES", glsym_func_void);
+ FINDSYM(glsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES");
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageEXT",
- glsym_func_uint);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageINTEL",
- glsym_func_uint);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamage",
- glsym_func_uint);
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageEXT");
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageINTEL");
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamage");
- FINDSYM(glsym_eglSetDamageRegionKHR, "eglSetDamageRegionKHR",
- glsym_func_uint);
+ FINDSYM(glsym_eglSetDamageRegionKHR, "eglSetDamageRegionKHR");
- FINDSYM(glsym_eglQueryWaylandBufferWL, "eglQueryWaylandBufferWL",
- glsym_func_uint);
+ FINDSYM(glsym_eglQueryWaylandBufferWL, "eglQueryWaylandBufferWL");
if (_ckext(exts, "EGL_IMG_context_priority"))
_extn_have_context_priority = 1;
diff --git a/src/modules/evas/engines/gl_x11/evas_engine.c b/src/modules/evas/engines/gl_x11/evas_engine.c
index 72edcbf50e..86f5064cf3 100644
--- a/src/modules/evas/engines/gl_x11/evas_engine.c
+++ b/src/modules/evas/engines/gl_x11/evas_engine.c
@@ -33,13 +33,11 @@ static int gl_wins = 0;
static int extn_have_y_inverted = 1;
#endif
-typedef void (*_eng_fn) (void);
-typedef _eng_fn (*glsym_func_eng_fn) ();
-typedef void (*glsym_func_void) ();
-typedef void *(*glsym_func_void_ptr) ();
-typedef int (*glsym_func_int) ();
-typedef unsigned int (*glsym_func_uint) ();
-typedef const char *(*glsym_func_const_char_ptr) ();
+typedef void *(*glsym_func_void_ptr) (void);
+
+typedef void (*glsym_func_void_in_voidp) (void *);
+typedef void (*glsym_func_void_in_int) (int);
+typedef int (*glsym_func_int_in_voidp) (void *);
Evas_GL_Common_Image_Call glsym_evas_gl_common_image_ref = NULL;
Evas_GL_Common_Image_Call glsym_evas_gl_common_image_unref = NULL;
@@ -68,14 +66,14 @@ Evas_GL_Preload_Render_Call glsym_evas_gl_preload_render_lock = NULL;
Evas_GL_Preload_Render_Call glsym_evas_gl_preload_render_unlock = NULL;
Evas_GL_Preload_Render_Call glsym_evas_gl_preload_render_relax = NULL;
-glsym_func_void glsym_evas_gl_common_shaders_flush = NULL;
-glsym_func_void glsym_evas_gl_common_error_set = NULL;
-glsym_func_int glsym_evas_gl_common_error_get = NULL;
-glsym_func_void_ptr glsym_evas_gl_common_current_context_get = NULL;
+glsym_func_void_in_voidp glsym_evas_gl_common_shaders_flush = NULL;
+glsym_func_void_in_int glsym_evas_gl_common_error_set = NULL;
+glsym_func_int_in_voidp glsym_evas_gl_common_error_get = NULL;
+glsym_func_void_ptr glsym_evas_gl_common_current_context_get = NULL;
#ifdef GL_GLES
-_eng_fn (*glsym_eglGetProcAddress) (const char *a) = NULL;
+void *(*glsym_eglGetProcAddress) (const char *a) = NULL;
EGLImageKHR (*glsym_evas_gl_common_eglCreateImage)(EGLDisplay a, EGLContext b, EGLenum c, EGLClientBuffer d, const EGLAttrib *e) = NULL;
int (*glsym_evas_gl_common_eglDestroyImage) (EGLDisplay a, void *b) = NULL;
void (*glsym_glEGLImageTargetTexture2DOES) (int a, void *b) = NULL;
@@ -87,7 +85,7 @@ unsigned int (*glsym_eglQueryWaylandBufferWL)(EGLDisplay a, /*struct wl_resource
typedef XID (*glsym_func_xid) ();
-_eng_fn (*glsym_glXGetProcAddress) (const char *a) = NULL;
+void *(*glsym_glXGetProcAddress) (const char *a) = NULL;
void (*glsym_glXBindTexImage) (Display *a, GLXDrawable b, int c, int *d) = NULL;
void (*glsym_glXReleaseTexImage) (Display *a, GLXDrawable b, int c) = NULL;
int (*glsym_glXGetVideoSync) (unsigned int *a) = NULL;
@@ -1310,19 +1308,19 @@ gl_symbols(void)
LINK2GENERIC(evas_gl_common_current_context_get);
LINK2GENERIC(evas_gl_common_shaders_flush);
-#define FINDSYM(dst, sym, typ) if (!dst) dst = (typ)dlsym(RTLD_DEFAULT, sym);
+#define FINDSYM(dst, sym) if (!dst) dst = dlsym(RTLD_DEFAULT, sym)
#ifdef GL_GLES
- FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddressKHR", glsym_func_eng_fn);
- FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddressEXT", glsym_func_eng_fn);
- FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddressARB", glsym_func_eng_fn);
- FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddress", glsym_func_eng_fn);
+ FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddressKHR");
+ FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddressEXT");
+ FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddressARB");
+ FINDSYM(glsym_eglGetProcAddress, "eglGetProcAddress");
#else
- FINDSYM(glsym_glXGetProcAddress, "glXGetProcAddressEXT", glsym_func_eng_fn);
- FINDSYM(glsym_glXGetProcAddress, "glXGetProcAddressARB", glsym_func_eng_fn);
- FINDSYM(glsym_glXGetProcAddress, "glXGetProcAddress", glsym_func_eng_fn);
+ FINDSYM(glsym_glXGetProcAddress, "glXGetProcAddressEXT");
+ FINDSYM(glsym_glXGetProcAddress, "glXGetProcAddressARB");
+ FINDSYM(glsym_glXGetProcAddress, "glXGetProcAddress");
#endif
#undef FINDSYM
@@ -1348,12 +1346,12 @@ eng_gl_symbols(Outbuf *ob)
*/
#ifdef GL_GLES
-#define FINDSYM(dst, sym, ext, typ) do { \
+#define FINDSYM(dst, sym, ext) do { \
if (!dst) { \
if (_has_ext(exts, ext) && glsym_eglGetProcAddress) \
- dst = (typ) glsym_eglGetProcAddress(sym); \
+ dst = glsym_eglGetProcAddress(sym); \
if (!dst) \
- dst = (typ) dlsym(RTLD_DEFAULT, sym); \
+ dst = dlsym(RTLD_DEFAULT, sym); \
}} while (0)
// Find EGL extensions
@@ -1365,23 +1363,23 @@ eng_gl_symbols(Outbuf *ob)
LINK2GENERIC(evas_gl_common_eglCreateImage);
LINK2GENERIC(evas_gl_common_eglDestroyImage);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamage", NULL, glsym_func_uint);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageEXT", "EGL_EXT_swap_buffers_with_damage", glsym_func_uint);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageKHR", "EGL_KHR_swap_buffers_with_damage", glsym_func_uint);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageINTEL", "EGL_INTEL_swap_buffers_with_damage", glsym_func_uint);
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamage", NULL);
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageEXT", "EGL_EXT_swap_buffers_with_damage");
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageKHR", "EGL_KHR_swap_buffers_with_damage");
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageINTEL", "EGL_INTEL_swap_buffers_with_damage");
- FINDSYM(glsym_eglSetDamageRegionKHR, "eglSetDamageRegionKHR", "EGL_KHR_partial_update", glsym_func_uint);
+ FINDSYM(glsym_eglSetDamageRegionKHR, "eglSetDamageRegionKHR", "EGL_KHR_partial_update");
- FINDSYM(glsym_eglQueryWaylandBufferWL, "eglQueryWaylandBufferWL", "EGL_WL_bind_wayland_display", glsym_func_uint);
+ FINDSYM(glsym_eglQueryWaylandBufferWL, "eglQueryWaylandBufferWL", "EGL_WL_bind_wayland_display");
// This is a GL extension
exts = (const char *) glGetString(GL_EXTENSIONS);
- FINDSYM(glsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image_external", glsym_func_void);
- FINDSYM(glsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image", glsym_func_void);
+ FINDSYM(glsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image_external");
+ FINDSYM(glsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES", "GL_OES_EGL_image");
#else
-#define FINDSYM(dst, sym, ext, typ) do { \
+#define FINDSYM(dst, sym, ext) do { \
if (!dst) { \
if (_has_ext(exts, ext) && glsym_glXGetProcAddress) \
dst = (typ) glsym_glXGetProcAddress(sym); \
@@ -1395,30 +1393,30 @@ eng_gl_symbols(Outbuf *ob)
// Find GL extensions
glsym_evas_gl_symbols((void*)glsym_glXGetProcAddress, exts);
- FINDSYM(glsym_glXBindTexImage, "glXBindTexImage", NULL, glsym_func_void);
- FINDSYM(glsym_glXBindTexImage, "glXBindTexImageEXT", "GLX_EXT_texture_from_pixmap", glsym_func_void);
- FINDSYM(glsym_glXBindTexImage, "glXBindTexImageARB", "GLX_ARB_render_texture", glsym_func_void);
+ FINDSYM(glsym_glXBindTexImage, "glXBindTexImage", NULL);
+ FINDSYM(glsym_glXBindTexImage, "glXBindTexImageEXT", "GLX_EXT_texture_from_pixmap");
+ FINDSYM(glsym_glXBindTexImage, "glXBindTexImageARB", "GLX_ARB_render_texture");
- FINDSYM(glsym_glXReleaseTexImage, "glXReleaseTexImage", NULL, glsym_func_void);
- FINDSYM(glsym_glXReleaseTexImage, "glXReleaseTexImageEXT", "GLX_EXT_texture_from_pixmap", glsym_func_void);
- FINDSYM(glsym_glXReleaseTexImage, "glXReleaseTexImageARB", "GLX_ARB_render_texture", glsym_func_void);
+ FINDSYM(glsym_glXReleaseTexImage, "glXReleaseTexImage", NULL);
+ FINDSYM(glsym_glXReleaseTexImage, "glXReleaseTexImageEXT", "GLX_EXT_texture_from_pixmap");
+ FINDSYM(glsym_glXReleaseTexImage, "glXReleaseTexImageARB", "GLX_ARB_render_texture");
- FINDSYM(glsym_glXGetVideoSync, "glXGetVideoSyncSGI", "GLX_SGI_video_sync", glsym_func_int);
- FINDSYM(glsym_glXWaitVideoSync, "glXWaitVideoSyncSGI", "GLX_SGI_video_sync", glsym_func_int);
+ FINDSYM(glsym_glXGetVideoSync, "glXGetVideoSyncSGI", "GLX_SGI_video_sync");
+ FINDSYM(glsym_glXWaitVideoSync, "glXWaitVideoSyncSGI", "GLX_SGI_video_sync");
// GLX 1.3
- FINDSYM(glsym_glXCreatePixmap, "glXCreatePixmap", NULL, glsym_func_xid);
- FINDSYM(glsym_glXDestroyPixmap, "glXDestroyPixmap", NULL, glsym_func_void);
- FINDSYM(glsym_glXQueryDrawable, "glXQueryDrawable", NULL, glsym_func_void);
+ FINDSYM(glsym_glXCreatePixmap, "glXCreatePixmap", NULL);
+ FINDSYM(glsym_glXDestroyPixmap, "glXDestroyPixmap", NULL);
+ FINDSYM(glsym_glXQueryDrawable, "glXQueryDrawable", NULL);
// swap interval: MESA and SGI take (interval)
- FINDSYM(glsym_glXSwapIntervalSGI, "glXSwapIntervalMESA", "GLX_MESA_swap_control", glsym_func_int);
- FINDSYM(glsym_glXSwapIntervalSGI, "glXSwapIntervalSGI", "GLX_SGI_swap_control", glsym_func_int);
+ FINDSYM(glsym_glXSwapIntervalSGI, "glXSwapIntervalMESA", "GLX_MESA_swap_control");
+ FINDSYM(glsym_glXSwapIntervalSGI, "glXSwapIntervalSGI", "GLX_SGI_swap_control");
// swap interval: EXT takes (dpy, drawable, interval)
- FINDSYM(glsym_glXSwapIntervalEXT, "glXSwapIntervalEXT", "GLX_EXT_swap_control", glsym_func_void);
+ FINDSYM(glsym_glXSwapIntervalEXT, "glXSwapIntervalEXT", "GLX_EXT_swap_control");
- FINDSYM(glsym_glXReleaseBuffersMESA, "glXReleaseBuffersMESA", "GLX_MESA_release_buffers", glsym_func_void);
+ FINDSYM(glsym_glXReleaseBuffersMESA, "glXReleaseBuffersMESA", "GLX_MESA_release_buffers");
#endif
#undef FINDSYM
diff --git a/src/modules/evas/engines/gl_x11/evas_x_main.c b/src/modules/evas/engines/gl_x11/evas_x_main.c
index 3bc2b0b6e5..06e05f8e4d 100644
--- a/src/modules/evas/engines/gl_x11/evas_x_main.c
+++ b/src/modules/evas/engines/gl_x11/evas_x_main.c
@@ -7,8 +7,8 @@
static Eina_TLS _outbuf_key = 0;
static Eina_TLS _context_key = 0;
-typedef void (*glsym_func_void) ();
-glsym_func_void glsym_evas_gl_common_context_restore_set = NULL;
+typedef void (*glsym_func_void_in_bool) (Eina_Bool);
+glsym_func_void_in_bool glsym_evas_gl_common_context_restore_set = NULL;
Eina_Bool gles3_supported = EINA_FALSE;
diff --git a/src/modules/evas/engines/wayland_egl/evas_engine.c b/src/modules/evas/engines/wayland_egl/evas_engine.c
index 58eb54a467..3d1b106ecf 100644
--- a/src/modules/evas/engines/wayland_egl/evas_engine.c
+++ b/src/modules/evas/engines/wayland_egl/evas_engine.c
@@ -27,13 +27,6 @@ struct _Render_Engine
Render_Output_GL_Generic generic;
};
-/* local function prototypes */
-typedef void (*glsym_func_void) ();
-typedef void *(*glsym_func_void_ptr) ();
-typedef int (*glsym_func_int) ();
-typedef unsigned int (*glsym_func_uint) ();
-typedef const char *(*glsym_func_const_char_ptr) ();
-
Evas_GL_Common_Image_Call glsym_evas_gl_common_image_ref = NULL;
Evas_GL_Common_Image_Call glsym_evas_gl_common_image_unref = NULL;
Evas_GL_Common_Image_Call glsym_evas_gl_common_image_free = NULL;
@@ -142,11 +135,11 @@ eng_gl_symbols(EGLDisplay edsp)
const char *exts = NULL;
if (done) return;
-#define FINDSYM(dst, sym, typ) \
+#define FINDSYM(dst, sym) \
if (glsym_eglGetProcAddress) { \
- if (!dst) dst = (typ)glsym_eglGetProcAddress(sym); \
+ if (!dst) dst = glsym_eglGetProcAddress(sym); \
} else { \
- if (!dst) dst = (typ)dlsym(RTLD_DEFAULT, sym); \
+ if (!dst) dst = dlsym(RTLD_DEFAULT, sym); \
}
// Find EGL extensions
@@ -155,20 +148,14 @@ eng_gl_symbols(EGLDisplay edsp)
// Find GL extensions
glsym_evas_gl_symbols(glsym_eglGetProcAddress, exts);
- FINDSYM(glsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES",
- glsym_func_void);
+ FINDSYM(glsym_glEGLImageTargetTexture2DOES, "glEGLImageTargetTexture2DOES");
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageEXT",
- glsym_func_uint);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageINTEL",
- glsym_func_uint);
- FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamage",
- glsym_func_uint);
- FINDSYM(glsym_eglSetDamageRegionKHR, "eglSetDamageRegionKHR",
- glsym_func_uint);
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageEXT");
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamageINTEL");
+ FINDSYM(glsym_eglSwapBuffersWithDamage, "eglSwapBuffersWithDamage");
+ FINDSYM(glsym_eglSetDamageRegionKHR, "eglSetDamageRegionKHR");
- FINDSYM(glsym_eglQueryWaylandBufferWL, "eglQueryWaylandBufferWL",
- glsym_func_uint);
+ FINDSYM(glsym_eglQueryWaylandBufferWL, "eglQueryWaylandBufferWL");
done = EINA_TRUE;
}
--
2.47.3
@@ -0,0 +1,40 @@
From 6e63309b26c25cc1c09228b9d06fd47bd6b13884 Mon Sep 17 00:00:00 2001
From: "Carsten Haitzler (Rasterman)" <raster@rasterman.com>
Date: Mon, 28 Apr 2025 18:27:37 +0100
Subject: [PATCH] ecore-file: silence gcc 15 warnings
no bug here - just warnings for perfectly ok code and people using -Werror ...
fixes #85
Upstream: https://git.enlightenment.org/enlightenment/efl/commit/6e63309b26c25cc1c09228b9d06fd47bd6b13884
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
---
src/lib/ecore_file/ecore_file_monitor_inotify.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/lib/ecore_file/ecore_file_monitor_inotify.c b/src/lib/ecore_file/ecore_file_monitor_inotify.c
index 988893de4f..b187fbc2c1 100644
--- a/src/lib/ecore_file/ecore_file_monitor_inotify.c
+++ b/src/lib/ecore_file/ecore_file_monitor_inotify.c
@@ -51,7 +51,7 @@ static Eina_Bool reseting;
static Eina_Hash *monitor_hash;
static void
-_ecore_file_monitor_inotify_reset()
+_ecore_file_monitor_inotify_reset(void *data EINA_UNUSED)
{
Eina_Iterator *it;
Ecore_File_Monitor *em;
@@ -132,7 +132,7 @@ ecore_file_monitor_backend_add(const char *path,
if (_inotify_fd_pid == -1) return NULL;
if (_inotify_fd_pid != getpid())
- _ecore_file_monitor_inotify_reset();
+ _ecore_file_monitor_inotify_reset(NULL);
em = (Ecore_File_Monitor *)calloc(1, sizeof(Ecore_File_Monitor_Inotify));
if (!em) return NULL;
--
2.47.3
@@ -0,0 +1,75 @@
From 628c40cce2de0a18818b40615d3351b0c9e9b889 Mon Sep 17 00:00:00 2001
From: "Carsten Haitzler (Rasterman)" <raster@rasterman.com>
Date: Sat, 3 May 2025 15:04:54 +0100
Subject: [PATCH] edje - edit - gcc15 break - adapt to new keywords in c23
gcc 15 default policy of breaking existing code. adapt.
Upstream: https://git.enlightenment.org/enlightenment/efl/commit/628c40cce2de0a18818b40615d3351b0c9e9b889
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
---
src/lib/edje/edje_edit.c | 16 ++++++++--------
1 file changed, 8 insertions(+), 8 deletions(-)
diff --git a/src/lib/edje/edje_edit.c b/src/lib/edje/edje_edit.c
index 70294fd824..e4a5b4a1da 100644
--- a/src/lib/edje/edje_edit.c
+++ b/src/lib/edje/edje_edit.c
@@ -7757,11 +7757,11 @@ edje_edit_state_map_backface_cull_get(Evas_Object *obj, const char *part, const
}
EAPI Eina_Bool
-edje_edit_state_map_backface_cull_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool bool)
+edje_edit_state_map_backface_cull_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool b)
{
GET_PD_OR_RETURN(EINA_FALSE);
- pd->map.backcull = bool;
+ pd->map.backcull = b;
edje_object_calc_force(obj);
return EINA_TRUE;
@@ -7776,11 +7776,11 @@ edje_edit_state_map_perspective_on_get(Evas_Object *obj, const char *part, const
}
EAPI Eina_Bool
-edje_edit_state_map_perspective_on_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool bool)
+edje_edit_state_map_perspective_on_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool b)
{
GET_PD_OR_RETURN(EINA_FALSE);
- pd->map.persp_on = bool;
+ pd->map.persp_on = b;
edje_object_calc_force(obj);
return EINA_TRUE;
@@ -7795,22 +7795,22 @@ edje_edit_state_map_alpha_get(Evas_Object *obj, const char *part, const char *st
}
EAPI Eina_Bool
-edje_edit_state_map_alpha_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool bool)
+edje_edit_state_map_alpha_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool b)
{
GET_PD_OR_RETURN(EINA_FALSE);
- pd->map.alpha = bool;
+ pd->map.alpha = b;
edje_object_calc_force(obj);
return EINA_TRUE;
}
EAPI Eina_Bool
-edje_edit_state_map_smooth_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool bool)
+edje_edit_state_map_smooth_set(Evas_Object *obj, const char *part, const char *state, double value, Eina_Bool b)
{
GET_PD_OR_RETURN(EINA_FALSE);
- pd->map.smooth = bool;
+ pd->map.smooth = b;
edje_object_calc_force(obj);
return EINA_TRUE;
--
2.47.3
@@ -0,0 +1,30 @@
From c7ff646ed8b62e60159bdf0ff77132c3a242d919 Mon Sep 17 00:00:00 2001
From: "Carsten Haitzler (Rasterman)" <raster@rasterman.com>
Date: Sun, 4 May 2025 09:29:41 +0100
Subject: [PATCH] evas - gl - fix evas gl full builds after gcc 15 changes
Upstream: https://git.enlightenment.org/enlightenment/efl/commit/c7ff646ed8b62e60159bdf0ff77132c3a242d919
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
---
src/modules/evas/engines/gl_x11/evas_engine.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/modules/evas/engines/gl_x11/evas_engine.c b/src/modules/evas/engines/gl_x11/evas_engine.c
index 86f5064cf3..8926c6afea 100644
--- a/src/modules/evas/engines/gl_x11/evas_engine.c
+++ b/src/modules/evas/engines/gl_x11/evas_engine.c
@@ -1382,9 +1382,9 @@ eng_gl_symbols(Outbuf *ob)
#define FINDSYM(dst, sym, ext) do { \
if (!dst) { \
if (_has_ext(exts, ext) && glsym_glXGetProcAddress) \
- dst = (typ) glsym_glXGetProcAddress(sym); \
+ dst = glsym_glXGetProcAddress(sym); \
if (!dst) \
- dst = (typ) dlsym(RTLD_DEFAULT, sym); \
+ dst = dlsym(RTLD_DEFAULT, sym); \
}} while (0)
// Find GLX extensions
--
2.47.3
@@ -0,0 +1,155 @@
From fc4c5ec8afc3d1d145eff9807e5235ae6bfeea83 Mon Sep 17 00:00:00 2001
From: "Carsten Haitzler (Rasterman)" <raster@rasterman.com>
Date: Sat, 3 May 2025 15:02:45 +0100
Subject: [PATCH] emrbyo - new gcc 15 breaks builds - new keyword constexpr
gcc 15 default policy of breaking existing code. adapt.
Upstream: https://git.enlightenment.org/enlightenment/efl/commit/fc4c5ec8afc3d1d145eff9807e5235ae6bfeea83
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
---
src/bin/embryo/embryo_cc_sc.h | 2 +-
src/bin/embryo/embryo_cc_sc1.c | 28 ++++++++++++++--------------
src/bin/embryo/embryo_cc_sc2.c | 2 +-
3 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/src/bin/embryo/embryo_cc_sc.h b/src/bin/embryo/embryo_cc_sc.h
index f6271afec0..19fc084501 100644
--- a/src/bin/embryo/embryo_cc_sc.h
+++ b/src/bin/embryo/embryo_cc_sc.h
@@ -432,7 +432,7 @@ symbol *fetchfunc(char *name, int tag);
char *operator_symname(char *symname, char *opername, int tag1,
int tag2, int numtags, int resulttag);
char *funcdisplayname(char *dest, char *funcname);
-int constexpr(cell * val, int *tag);
+int constexpress(cell * val, int *tag);
constvalue *append_constval(constvalue * table, char *name, cell val,
short index);
constvalue *find_constval(constvalue * table, char *name, short index);
diff --git a/src/bin/embryo/embryo_cc_sc1.c b/src/bin/embryo/embryo_cc_sc1.c
index 9fbeb4dcf0..4cc0da293f 100644
--- a/src/bin/embryo/embryo_cc_sc1.c
+++ b/src/bin/embryo/embryo_cc_sc1.c
@@ -1513,7 +1513,7 @@ init(int ident, int *tag)
} /* if */
*tag = 0;
}
- else if (constexpr(&i, tag))
+ else if (constexpress(&i, tag))
{
stowlit(i); /* store expression result in literal table */
} /* if */
@@ -1532,7 +1532,7 @@ needsub(int *tag)
*tag = 0;
if (matchtoken(']')) /* we've already seen "[" */
return 0; /* null size (like "char msg[]") */
- constexpr(&val, tag); /* get value (must be constant expression) */
+ constexpress(&val, tag); /* get value (must be constant expression) */
if (val < 0)
{
error(9); /* negative array size is invalid; assumed zero */
@@ -1561,7 +1561,7 @@ decl_const(int vclass)
strncpy(constname, str, sizeof(constname) - 1); /* save symbol name */
constname[sizeof(constname) - 1] = 0;
needtoken('=');
- constexpr(&val, &exprtag); /* get value */
+ constexpress(&val, &exprtag); /* get value */
needtoken(tTERM);
/* add_constant() checks for duplicate definitions */
if (!matchtag(tag, exprtag, FALSE))
@@ -1627,15 +1627,15 @@ decl_enum(int vclass)
{
if (matchtoken(taADD))
{
- constexpr(&increment, NULL);
+ constexpress(&increment, NULL);
}
else if (matchtoken(taMULT))
{
- constexpr(&multiplier, NULL);
+ constexpress(&multiplier, NULL);
}
else if (matchtoken(taSHL))
{
- constexpr(&lexval, NULL);
+ constexpress(&lexval, NULL);
while (lexval-- > 0)
multiplier *= 2;
} /* if */
@@ -1659,9 +1659,9 @@ decl_enum(int vclass)
constname[sNAMEMAX] = 0;
size = increment; /* default increment of 'val' */
if (tok == tLABEL || matchtoken(':'))
- constexpr(&size, NULL); /* get size */
+ constexpress(&size, NULL); /* get size */
if (matchtoken('='))
- constexpr(&enumvalue, NULL); /* get value */
+ constexpress(&enumvalue, NULL); /* get value */
/* add_constant() checks whether a variable (global or local) or
* a constant with the same name already exists */
add_constant(constname, enumvalue, vclass, tag);
@@ -2137,7 +2137,7 @@ funcstub(int native)
}
else
{
- constexpr(&val, NULL);
+ constexpress(&val, NULL);
sym->addr = val;
/*
* ?? Must mark this address, so that it won't be generated again
@@ -2758,7 +2758,7 @@ doarg(char *name, int ident, int offset, int tags[], int numtags,
}
else
{
- constexpr(&arg->defvalue.val, &arg->defvalue_tag);
+ constexpress(&arg->defvalue.val, &arg->defvalue_tag);
assert(numtags > 0);
if (!matchtag(tags[0], arg->defvalue_tag, TRUE))
error(213); /* tagname mismatch */
@@ -3391,10 +3391,10 @@ doexpr(int comma, int chkeffect, int allowarray, int mark_endexpr,
} /* if */
}
-/* constexpr
+/* constexpress
*/
int
-constexpr(cell * val, int *tag)
+constexpress(cell * val, int *tag)
{
int constant, idx;
cell cidx;
@@ -3728,7 +3728,7 @@ doswitch(void)
* parse all expressions until that special token.
*/
- constexpr(&val, NULL);
+ constexpress(&val, NULL);
/* Search the insertion point (the table is kept in sorted
* order, so that advanced abstract machines can sift the
* case table with a binary search). Check for duplicate
@@ -3753,7 +3753,7 @@ doswitch(void)
{
cell end;
- constexpr(&end, NULL);
+ constexpress(&end, NULL);
if (end <= val)
error(50); /* invalid range */
while (++val <= end)
diff --git a/src/bin/embryo/embryo_cc_sc2.c b/src/bin/embryo/embryo_cc_sc2.c
index 5a51655a54..f0416e86c9 100644
--- a/src/bin/embryo/embryo_cc_sc2.c
+++ b/src/bin/embryo/embryo_cc_sc2.c
@@ -742,7 +742,7 @@ preproc_expr(cell * val, int *tag)
term = strchr(pline, '\0');
assert(term != NULL);
chrcat(pline, PREPROC_TERM); /* the "DEL" code (see SC.H) */
- result = constexpr(val, tag); /* get value (or 0 on error) */
+ result = constexpress(val, tag); /* get value (or 0 on error) */
*term = '\0'; /* erase the token (if still present) */
lexclr(FALSE); /* clear any "pushed" tokens */
return result;
--
2.47.3
+2 -3
View File
@@ -1,9 +1,8 @@
# From https://www.enlightenment.org/news/2022-09-16-efl-1.26.3
sha256 d9f83aa0fd9334f44deeb4e4952dc0e5144683afac786feebce6030951617d15 efl-1.26.3.tar.xz
# From https://www.enlightenment.org/news/2025-03-17-efl-1.28.1
sha256 84cf6145f9cc82bfff690005be24392c8f3c52f8e00ff04d8eea371429c09424 efl-1.28.1.tar.xz
sha256 d666b6b2df9f5b791f85c299c65516cb55528b02a807603de246f65f4918ae22 COMPLIANCE
sha256 5bceb52d65debe420bc520f2992807740dc928b7fdc3c2e9a74b5889177ddf4c COPYING
sha256 e5133b4034a4749a781e2220ffb230b60a282b88861f1124d69a58abd5143994 COPYING.images
sha256 c95bae1d1ce0235ecccd3560b772ec1efb97f348a79f0fbe0a634f0c2ccefe2c licenses/COPYING.ASL
sha256 af4ffe7ed1795a6e9cd3b3ce8747fdc45da449ff58cf35b8027c0699a66fd5cf licenses/COPYING.BSD
sha256 e60d07dfb2c5264f9f405fa52bf0d4f85429dd9ae1bc2ffcff8af1924ef720d1 licenses/COPYING.FTL
+3 -4
View File
@@ -4,14 +4,13 @@
#
################################################################################
EFL_VERSION = 1.26.3
EFL_VERSION = 1.28.1
EFL_SOURCE = efl-$(EFL_VERSION).tar.xz
EFL_SITE = https://download.enlightenment.org/rel/libs/efl
EFL_LICENSE = BSD-2-Clause, LGPL-2.1+, GPL-2.0+, FTL, MIT
EFL_LICENSE_FILES = \
COMPLIANCE \
COPYING \
COPYING.images \
licenses/COPYING.ASL \
licenses/COPYING.BSD \
licenses/COPYING.FTL \
@@ -214,7 +213,7 @@ endif
# json evas loader is disabled by default by upstream.
# Disable libspectre (ps).
# Keep all other evas loader enabled or handled below.
EFL_EVAS_LOADERS_DISABLER = avif gst heif json ps
EFL_EVAS_LOADERS_DISABLER = avif gst heif json ps jxl
# efl already depends on jpeg.
ifeq ($(BR2_PACKAGE_EFL_JPEG),y)
@@ -348,7 +347,7 @@ HOST_EFL_CONF_OPTS += \
# List of modular image/vector loaders to disable in efl
HOST_EFL_EVAS_LOADERS_DISABLER = avif bmp dds eet generic gst heif ico json \
jp2k pdf pmaps ps psd raw rsvg tga tgv tiff wbmp webp xcf xpm
jp2k jxl pdf pmaps ps psd raw rsvg tga tgv tiff wbmp webp xcf xpm
HOST_EFL_CONF_OPTS += -Devas-loaders-disabler=$(subst $(space),$(comma),$(HOST_EFL_EVAS_LOADERS_DISABLER))
+1 -1
View File
@@ -1,3 +1,3 @@
# Locally computed
sha256 25e536bd58969077554927a456cd3cb79e21f126e47545ba511abe64a0f3ba5e embiggen-disk-v20240521-go2.tar.gz
sha256 67ab51d13c85c5e3f1805f1e7b1e2db92edf8472007cd859c5919692eb0c0cbc embiggen-disk-20240521-go2.tar.gz
sha256 063aedec1652c5a05c2d04c40e032b932453142ee8ef7fd53c04a9acc127fc95 LICENSE
+2 -2
View File
@@ -4,8 +4,8 @@
#
################################################################################
EMBIGGEN_DISK_VERSION = v20240521
EMBIGGEN_DISK_SITE = $(call github,skiffos,embiggen-disk,$(EMBIGGEN_DISK_VERSION))
EMBIGGEN_DISK_VERSION = 20240521
EMBIGGEN_DISK_SITE = $(call github,skiffos,embiggen-disk,v$(EMBIGGEN_DISK_VERSION))
EMBIGGEN_DISK_LICENSE = Apache-2.0
EMBIGGEN_DISK_LICENSE_FILES = LICENSE
+23 -1
View File
@@ -18,4 +18,26 @@ endef
EVILWM_POST_INSTALL_TARGET_HOOKS += EVILWM_INSTALL_XSESSION_FILE
$(eval $(autotools-package))
EVILWM_TOOLS_PREFIX += $(patsubst %-,%,$(TARGET_CROSS))
# the configure script is not generated by autoconf
define EVILWM_CONFIGURE_CMDS
(cd $(@D); $(TARGET_CONFIGURE_OPTS) \
CFLAGS="$(TARGET_CFLAGS)" \
LDFLAGS="$(TARGET_LDFLAGS)" \
./configure \
--prefix=/usr \
--mandir=/usr/share/man \
--host=$(EVILWM_TOOLS_PREFIX) \
)
endef
define EVILWM_BUILD_CMDS
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D)
endef
define EVILWM_INSTALL_TARGET_CMDS
$(TARGET_MAKE_ENV) $(MAKE) DESTDIR="$(TARGET_DIR)" -C $(@D) install
endef
$(eval $(generic-package))
+2 -2
View File
@@ -1,6 +1,6 @@
# From https://ftp.exim.org/pub/exim/exim4/00-sha256sums.txt
sha256 5df38b042ffa9a9c8d31b20bc8481558070e361b06f657608622a62a327adcba exim-4.99.tar.xz
sha256 eae967bd49a5f879933b8c6ec88c30475a1c6646232135f37f05b55dbc4e3447 exim-4.99.1.tar.xz
# From https://ftp.exim.org/pub/exim/exim4/00-sha512sums.txt
sha512 06521aff437dfe99c015606d2cdde76eaf6e4d2f03779b07fbc0e7d06fe0584366cae9c3fa7d73a86c348f0d25336acd06c42bd5b8f18e5a969de9849088e3aa exim-4.99.tar.xz
sha512 41a280673b23a79684124dba9ba1db4da57047eefd7bac8560fab3e399659698160386c5369deb4aabdbcba1ba9278fb0a61fc1667dc2745c280b3004d02f45d exim-4.99.1.tar.xz
# Locally calculated
sha256 49240db527b7e55b312a46fc59794fde5dd006422e422257f4f057bfd27b3c8f LICENCE
+1 -1
View File
@@ -4,7 +4,7 @@
#
################################################################################
EXIM_VERSION = 4.99
EXIM_VERSION = 4.99.1
EXIM_SOURCE = exim-$(EXIM_VERSION).tar.xz
EXIM_SITE = https://ftp.exim.org/pub/exim/exim4
EXIM_LICENSE = GPL-2.0+
+3 -3
View File
@@ -297,11 +297,11 @@ else
FFMPEG_CONF_OPTS += --disable-mmal --disable-omx --disable-omx-rpi
endif
# To avoid a circular dependency only use opencv if opencv itself does
# not depend on ffmpeg.
ifeq ($(BR2_PACKAGE_OPENCV3_LIB_IMGPROC)x$(BR2_PACKAGE_OPENCV3_WITH_FFMPEG),yx)
ifeq ($(BR2_PACKAGE_OPENCV3_LIB_IMGPROC),y)
FFMPEG_CONF_OPTS += --enable-libopencv
FFMPEG_DEPENDENCIES += opencv3
# To avoid a circular dependency only use opencv if opencv itself does
# not depend on ffmpeg.
else ifeq ($(BR2_PACKAGE_OPENCV4_LIB_IMGPROC)x$(BR2_PACKAGE_OPENCV4_WITH_FFMPEG),yx)
FFMPEG_CONF_OPTS += --enable-libopencv \
--extra-cflags=-I$(STAGING_DIR)/usr/include/opencv4
+1 -1
View File
@@ -6,7 +6,7 @@
FICL_VERSION_MAJOR = 4.1
FICL_VERSION = $(FICL_VERSION_MAJOR).0
FICL_SITE = http://downloads.sourceforge.net/project/ficl/ficl-all/ficl$(FICL_VERSION_MAJOR)
FICL_SITE = https://sourceforge.net/projects/ficl/files/OldFiles/Ficl4%20%28retired%29
FICL_LICENSE = BSD-2-Clause
FICL_LICENSE_FILES = ReadMe.txt
FICL_INSTALL_STAGING = YES
+38
View File
@@ -0,0 +1,38 @@
From ccce76d2850d6e52da3d7986c950af068fbfe0fd Mon Sep 17 00:00:00 2001
From: Arthur Gautier <arthur.gautier@arista.com>
Date: Sat, 13 Dec 2025 20:07:11 -0800
Subject: [PATCH] fix musl builds
This commit fixes the build on musl which fails with the following
error:
```
oslib/linux-blkzoned.c: In function 'blkzoned_move_zone_wp':
oslib/linux-blkzoned.c:389:37: error: 'FALLOC_FL_ZERO_RANGE' undeclared (first use in this function)
389 | ret = fallocate(fd, FALLOC_FL_ZERO_RANGE, z->wp, length);
| ^~~~~~~~~~~~~~~~~~~~
oslib/linux-blkzoned.c:389:37: note: each undeclared identifier is reported only once for each function it appears in
make: *** [Makefile:501: oslib/linux-blkzoned.o] Error 1
make: *** Waiting for unfinished jobs....
```
Signed-off-by: Arthur Gautier <arthur.gautier@arista.com>
Upstream: https://github.com/axboe/fio/commit/ccce76d2850d6e52da3d7986c950af068fbfe0fd
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
oslib/linux-blkzoned.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/oslib/linux-blkzoned.c b/oslib/linux-blkzoned.c
index 78e25fca91..c45ef623de 100644
--- a/oslib/linux-blkzoned.c
+++ b/oslib/linux-blkzoned.c
@@ -25,6 +25,7 @@
#ifndef BLKFINISHZONE
#define BLKFINISHZONE _IOW(0x12, 136, struct blk_zone_range)
#endif
+#include <linux/falloc.h>
/*
* If the uapi headers installed on the system lacks zone capacity support,

Some files were not shown because too many files have changed in this diff Show More