Compare commits

..
131 Commits
Author SHA1 Message Date
Arnout Vandecappelle 8143b32cb5 Makefile: update for 2025.08.1
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-10-11 23:31:22 +02:00
Titouan Christophe 8d941a2f55 CHANGES: update for 2025.08.1
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-10-11 23:30:33 +02:00
Titouan Christophe 60305befad {linux, linux-headers}: bump 6.16.x, 6.12.x, 6.6.x, 6.1.x, 5.15.x, 5.10.x, 5.4.x series
Update the latest kernel releases to:
 - 6.16.9 -> 6.16.11
 - 6.12.49 -> 6.12.51
 - 6.6.108 -> 6.6.110
 - 6.1.154 -> 6.1.155
 - 5.15.193 -> 5.15.194
 - 5.10.244 -> 5.10.245
 - 5.4.299 -> 5.4.300

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-10-09 10:06:38 +02:00
Peter Korsgaard 39abeb5c13 configs/beagleboneai: move to Linux 6.12.50
And adjust the dtb path to the new subdir after commit 724ba6751532 ("ARM:
dts: Move .dts files to vendor sub-directories") in v6.5.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e993272b32)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:47:44 +02:00
Peter Korsgaard c158bcd4f8 configs/beagleboneai: move to u-boot 2025.04 to unbreak build with gcc 14
With the change to default to gcc 14.x with commit 1e1fafa1f0
("package/gcc: switch to GCC 14.x as the default"), the old u-boot version
no longer builds:

board/ti/am57xx/board.c:948:17: error: implicit declaration of function 'do_cape_detect'; did you mean 'do_board_detect'? [-Wimplicit-function-declaration]

https://gitlab.com/buildroot.org/buildroot/-/jobs/11570241744

So move to u-boot 2025.04 to fix that.  We still need a small patch as
(early) beagleboneai boards do not have the EEPROM (or eMMC partition)
populated, so include the bb.org patch from

https://github.com/beagleboard/u-boot/commit/0b161f8e89a411fe54059cf1d0ba61354ee1e8a2

The new u-boot version needs both openssl and gnutls on the host, so enable
them.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: remove patch entry in .checkpackageignore to
  fix check-package error
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7ec419fb9c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:45:15 +02:00
Julien Olivain e8394621f7 package/vulkan-headers: needs C++
Since Buildroot commit [1] "package/vulkan-{headers,loader,tools}:
bump to 1.4.317 release", the vulkan-headers package is failing at
configuration time with toolchains without C++ support, with error:

    The C++ compiler
      "/bin/false"
    is not able to compile a simple test program.

This is due to upstream commit [2], which added CXX to the CMake
project file.

This commit fixes the issue by adding the C++ dependency.

Fixes:
https://autobuild.buildroot.org/results/10f63398940d52be9a8ee306daf4203ceca25eb8

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/52664093dee0f280db191c391167848dc5b09745
[2] https://github.com/KhronosGroup/Vulkan-Headers/commit/85256c712ce9ee9755ae74faacc3e6a1d2c5eddf

Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2f6a82b633)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:45:05 +02:00
Waldemar Brodkorb 84f762ef07 package/ruby: update to 3.4.6
See here for changes:
https://github.com/ruby/ruby/releases/tag/v3_4_4
https://github.com/ruby/ruby/releases/tag/v3_4_5
https://github.com/ruby/ruby/releases/tag/v3_4_6

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 38d49568da)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:44:50 +02:00
Peter Korsgaard 10b7de36b2 configs/roseapplepi: remove defconfig, broken
The roseapplepi defconfig fails to build u-boot since the move to GCC 15.x:

https://gitlab.com/buildroot.org/buildroot/-/jobs/11501385206

The issues are mainly related to missing includes, but given that the build
has been broken for a while, there is no mainline u-boot support for the
platform and the minimal kernel support has not seen any updates since it
was added for v5.15, just drop the defconfig.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 56091a5818)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:44:35 +02:00
Dario Binacchi 26c2304ff4 package/fastd: security bump to version 23
This bump includes the security fix for CVE-2025-24356.

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-24356.

The COPYRIGHT file was renamed to LICENSE [1]. The hash file was updated
because a date was removed [2] and the libmnl version was updated [3].

Release notes:
https://fastd.readthedocs.io/en/stable/releases/v23.html

[1] https://github.com/neocturne/fastd/commit/fa88c739b9afe053905bddc7fbb9c252e290c35d
[2] https://github.com/neocturne/fastd/commit/318c944f40c90e048e370b2f75598bfcd79a1790
[3] https://github.com/neocturne/fastd/commit/c08a3d59debddf5f99e442d9529a142f04549b50
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
[Peter: update FASTD_LICENSE_FILES]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2b5bcfd626)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:44:18 +02:00
Bernd Kuhls 757d118cda package/gnupg2: bump to version 2.4.8
Release notes:
https://lists.gnupg.org/pipermail/gnupg-announce/2025q3/000496.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d73458b3a5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:44:00 +02:00
Titouan Christophe a8624259ac package/python-django: security bump to v5.2.7
For release note, see:
https://docs.djangoproject.com/en/5.2/releases/5.2.7/

This fixes the following vulnerabilities:
- CVE-2025-59681:
    An issue was discovered in Django 4.2 before 4.2.25, 5.1 before
    5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(),
    QuerySet.aggregate(), and QuerySet.extra() are subject to SQL
    injection in column aliases, when using a suitably crafted dictionary,
    with dictionary expansion, as the **kwargs passed to these methods (on
    MySQL and MariaDB).
    https://www.cve.org/CVERecord?id=CVE-2025-59681

- CVE-2025-59682:
    An issue was discovered in Django 4.2 before 4.2.25, 5.1 before
    5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract()
    function, used by the "startapp --template" and "startproject
    --template" commands, allows partial directory traversal via an
    archive with file paths sharing a common prefix with the target
    directory.
    https://www.cve.org/CVERecord?id=CVE-2025-59682

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add link to release note]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7bbc66a39e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:41:37 +02:00
Bernd Kuhls 7c75c6fb94 package/intel-microcode: security bump version to 20250812
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20250812

CVE-2025-20109:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01249.html

CVE-2025-22840:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01308.html

CVE-2025-22839:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01310.html

CVE-2025-22889:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01311.html

CVE-2025-20053:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html

CVE-2025-26403:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01367.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0a748cddf6)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:41:16 +02:00
Neal Frager e4ec6da23e board/versal/post-image: remove unnecessary mkdir
The board/versal/post-image.sh script has an unnecessary mkdir command:
mkdir -p "${BINARIES_DIR}"

This directory is created before calling the post image scripts,
in [1].

Just above the command, the script is making a symlink for the Linux DTB in
the ${BINARIES_DIR}, so if the ${BINARIES_DIR} did not already exist with
images inside, the script would fail regardless of whether this mkdir is
executed or not.

For this reason, remove the mkdir call from the script because it is not
necessary.

[1] https://gitlab.com/buildroot.org/buildroot/-/blob/2025.08/Makefile#L829

Signed-off-by: Neal Frager <neal.frager@amd.com>
[Julien: add a link showing where the directory is created]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 018cf24c80)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:40:46 +02:00
Bernd Kuhls 4a32494015 package/fetchmail: security bump version to 6.5.6
Release notes:
https://sourceforge.net/p/fetchmail/mailman/message/59241831/

CVE pending assignment by MITRE:
https://fetchmail.sourceforge.io/fetchmail-SA-2025-01.txt

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7cb507b31c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:35:06 +02:00
Bernd Kuhls 20c44f9b22 package/fetchmail: bump version to 6.5.5
Release notes:
https://sourceforge.net/p/fetchmail/mailman/message/59238340/

The COPYING license file was updated in:
https://sourceforge.net/p/fetchmail/git/ci/e6597cee1e5261e19106f0f47d11636dcf4161ed/
https://sourceforge.net/p/fetchmail/git/ci/a408d51154616e992be6463b2e75c19f6115ec1a/
This commit updates its hash accordingly.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: fix COPYING license file hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8082b26a2b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:34:55 +02:00
Titouan Christophe f43b433360 package/raptor: add patches for CVE-2024-57822, CVE-2024-57823
This fixes the following vulnerabilities:
- CVE-2024-57822:
    In Raptor RDF Syntax Library through 2.0.16, there is a heap-based
    buffer over-read when parsing triples with the nquads parser in
    raptor_ntriples_parse_term_internal().
    https://www.cve.org/CVERecord?id=CVE-2024-57822

- CVE-2024-57823:
    In Raptor RDF Syntax Library through 2.0.16, there is an integer
    underflow when normalizing a URI with the turtle parser in
    raptor_uri_normalize_path().
    https://www.cve.org/CVERecord?id=CVE-2024-57823

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e94cd21e7b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:32:33 +02:00
Titouan Christophe 1e6729bfbc package/ghostscript: security bump to v10.06.0
For release note, see:
https://ghostscript.readthedocs.io/en/gs10.06.0/News.html

This fixes the following vulnerabilities:
- CVE-2025-59798:
    Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow
    in pdf_write_cmap in devices/vector/gdevpdtw.c.
    https://www.cve.org/CVERecord?id=CVE-2025-59798

- CVE-2025-59799:
    Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow
    in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size
    value.
    https://www.cve.org/CVERecord?id=CVE-2025-59799

- CVE-2025-59800:
    In Artifex Ghostscript through 10.05.1, ocr_begin_page in
    devices/gdevpdfocr.c has an integer overflow that leads to a heap-
    based buffer overflow in ocr_line8.
    https://www.cve.org/CVERecord?id=CVE-2025-59800

- CVE-2025-59801:
    In Artifex GhostXPS before 10.06.0, there is a stack-based buffer
    overflow in xps_unpredict_tiff in xpstiff.c because the
    samplesperpixel value is not checked.
    https://www.cve.org/CVERecord?id=CVE-2025-59801

Also remove patch that is now applied upstream, and add new patch from
upstream to fix a compilation issue on 32bits platforms

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien:
 - add link to release note in commit log
 - fix URL in hash file comment
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6f984089c0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:32:22 +02:00
Bernd Kuhls 3755e9b680 package/tor: bump version to 0.4.8.18
Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/alpha-and-stable-release-0-4-8-18-and-0-4-9-3-alpha/20578

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 66ef333884)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:32:04 +02:00
Dario Binacchi 25a2040a04 package/expat: security bump to version 2.7.2
This bump includes the security fix for CVE-2025-59375.

Release notes:
https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-59375

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 130b35ddcf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:31:20 +02:00
Francois Perrad 94ac670d5a package/libopenssl: security bump to version 3.5.4
fixes CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
see https://github.com/openssl/openssl/releases/tag/openssl-3.5.4

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c983f967bd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:30:31 +02:00
Titouan Christophe 3218502509 package/python-pip: security bump to v25.2
This fixes the following vulnerability:
- CVE-2025-8869:
    When extracting a tar archive pip may not check symbolic links point
    into the extraction directory if the tarfile module doesn't implement
    PEP 706. Note that upgrading pip to a "fixed" version for this
    vulnerability doesn't fix all known vulnerabilities that are
    remediated by using a Python version that implements PEP 706.  Note
    that this is a vulnerability in pip's fallback implementation of tar
    extraction for Python versions that don't implement PEP 706 and
    therefore are not secure to all vulnerabilities in the Python
    'tarfile' module. If you're using a Python version that implements PEP
    706 then pip doesn't use the "vulnerable" fallback code.  Mitigations
    include upgrading to a version of pip that includes the fix, upgrading
    to a Python version that implements PEP 706 (Python >=3.9.17,
    >=3.10.12, >=3.11.4, or >=3.12), applying the linked patch, or
    inspecting source distributions (sdists) before installation as is
    already a best-practice.
    https://www.cve.org/CVERecord?id=CVE-2025-8869

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 78d687d2d2)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:30:22 +02:00
Robert Marko cf211a0ba1 package/mdio-tools: enable CONFIG_MDIO_BUS
CONFIG_MDIO_BUS was previously a hidden symbol that was selected by
CONFIG_MDIO_DEVICE, however since kernel 6.16 this changed.

CONFIG_MDIO_DEVICE was dropped and now CONFIG_MDIO_BUS is visible and must
be directly selected[1].

So, enable CONFIG_MDIO_BUS directly as otherwise building mdio-tools can
fail with:
ERROR: modpost: "mdio_find_bus" [mdio-netlink.ko] undefined!
ERROR: modpost: "__mdiobus_write" [mdio-netlink.ko] undefined!
ERROR: modpost: "__mdiobus_read" [mdio-netlink.ko] undefined!
ERROR: modpost: "__mdiobus_c45_read" [mdio-netlink.ko] undefined!
ERROR: modpost: "__mdiobus_c45_write" [mdio-netlink.ko] undefined!

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.16.9&id=31be641d74267d98317ef5a2b90e6200511cabb3
Fixes: https://autobuild.buildroot.org/results/8595997794a2f603fcef95b559f60f83abfe4d83/

Signed-off-by: Robert Marko <robimarko@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d03d19338b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:29:54 +02:00
Francois Perrad d519942192 package/luaossl: bump to version 20250929
diff LICENSE:
-    2015-2019  Daurnimator <quae@daurnimator.com>
+    2015-2025  Daurnimator <quae@daurnimator.com>

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cdb1407c0c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:29:31 +02:00
Nicolas Cavallari bc6d119ba2 package/linux-firmware: fix license file for ath10k firmware
The WHENCE file [1] indicates ath10k's license file is
LICENSE.QualcommAtheros_ath10k license and not LICENCE.atheros_firmware.

[1] https://gitlab.com/kernel-firmware/linux-firmware/-/blob/20250627/WHENCE#L3700

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
[Julien: add link to WHENCE file]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 752fc349a0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:28:25 +02:00
Alex McLain 2aa666522c package/linux-firmware: add support for Intel 6E Ty architecture
Note:
The first file matching the pattern "iwlwifi-ty-a0-gf-a0*" was
introduced in commit [1], first included in version 20201022.

[1] https://gitlab.com/kernel-firmware/linux-firmware/-/commit/4f41e9d6437d03e7ce9279076107dd08f46656f3

Signed-off-by: Alex McLain <alex@alexmclain.com>
[Julien: add the note in commit log when the first
  firmware was introduced
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4a51495d69)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:27:44 +02:00
Dario Binacchi 20b7fe88f7 DEVELOPERS: add Dario Binacchi for empty
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4997495190)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:27:32 +02:00
Neal Frager 14c0238fac board/zynq: correct zed board links
The web link www.zedboard.org is no longer valid as it routes to a generic
avnet.com boards link. Fix this issue by providing direct links to the Avnet
ZedBoard and Tria MicroZed boards.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4e7f03314d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-10-09 08:26:56 +02:00
Titouan Christophe 6fa717f7f1 {linux, linux-headers}: bump 6.16.x, 6.12.x, 6.6.x, 6.1.x series
Update the latest kernel releases to:
 - 6.16.8 -> 6.16.9
 - 6.12.48 -> 6.12.49
 - 6.6.107 -> 6.6.108
 - 6.1.153 -> 6.1.154

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:34:02 +02:00
Neal Frager 50e9fd4abf board/xilinx: migrate board web links to amd.com
As the xilinx.com website will soon be going away, migrate all xilinx board
web links from xilinx.com to amd.com.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 74dcda2544)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:33:43 +02:00
Florian Larysch 132417880e package/linuxptp: update default config
Since upstream commit [1] ("Deprecate the slaveOnly option in favor
of clientOnly."), included in v4.0, ptp4l complains about the
"slaveOnly" option being deprecated on startup.

Update the default config to silence this warning.

[1] https://github.com/richardcochran/linuxptp/commit/fe01cc7c964296321e3c0de2412ef3f1282fa774

Signed-off-by: Florian Larysch <fl@n621.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f70b83914f)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:33:36 +02:00
Thomas Petazzoni da33bc0e7b configs/atmel_sama5d3xek: remove defconfig, broken
This defconfig no longer builds:

  https://gitlab.com/buildroot.org/buildroot/-/jobs/11161167647

It is still based on the 4.9 kernel, which was LTS but is no longer
maintained.

There is no DEVELOPERS entry attached to this configuration as well,
and this defconfig has been broken for at least 2 months, probably
more (our Gitlab CI history is only kept for ~2 months). So let's drop
it, unles someone volunteers to resurrect it.

Cc: Alexandre Belloni <alexandre.belloni@bootlin.com>
Cc: Ludovic Desroches <ludovic.desroches@microchip.com>
Cc: Nicolas Ferre <nicolas.ferre@microchip.com>
Cc: Patrice Vilchez <Patrice.Vilchez@microchip.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8e9e4feae1)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:33:22 +02:00
Thomas Petazzoni 0e7927c8fd configs/at91sam9260eknf: remove defconfig, broken
This defconfig no longer builds:

  https://gitlab.com/buildroot.org/buildroot/-/jobs/11161167596

It is still based on the 4.8.6 kernel, which is not even an LTS
kernel, so we cannot easily update to fix the issues which are most
likely due to the newer gcc/binutils versions we're using now.

There is no DEVELOPERS entry attached to this configuration as well,
and this defconfig has been broken for at least 2 months, probably
more (our Gitlab CI history is only kept for ~2 months). So let's drop
it, unles someone volunteers to resurrect it.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0590ef1a81)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:33:16 +02:00
Raphael Pavlidis 0317555103 package/wlroots: add missing dependency to libgbm
If the render gles2 is enabled then libgbm is required (see [1]).
Therefore, add the dependency to wlroots.

[1]: https://gitlab.freedesktop.org/wlroots/wlroots/-/blob/0.19/render/meson.build?ref_type=heads#L44

Signed-off-by: Raphael Pavlidis <raphael.pavlidis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 00fb3a57cb)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:32:55 +02:00
Adam Duskett fde194f179 package/libxkbcommon: bump to version 1.9.2
Changes:
  - No longer hosted at https://xkbcommon.org/download. The website points to
    the github repository. As such, change the URL accordingly.

  - The sha256sum is not provided in the mailing list archive, so the sha256sum
    is locally calculated.

  - The license file was reworded as of commit e120807b:
    """Update license notices to SDPX short identifiers + update LICENSE"""

See release notes, since version 1.7.0:
- 1.8.0: https://lists.freedesktop.org/archives/wayland-devel/2025-February/043969.html
- 1.8.1: https://lists.freedesktop.org/archives/wayland-devel/2025-March/044021.html
- 1.9.0: https://lists.freedesktop.org/archives/wayland-devel/2025-April/044160.html
- 1.9.1: https://lists.freedesktop.org/archives/wayland-devel/2025-May/044209.html
- 1.9.2: https://lists.freedesktop.org/archives/wayland-devel/2025-May/044211.html

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[Julien: add links to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8abbc307a5)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:32:46 +02:00
Thomas Perale 84c6fa2c69 package/libssh: security bump to v0.11.3
For more details on the version bump, see:
 - https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=301d0e16dfa8a5cac1cff956b6880ca90eb82864

Fixes the following vulnerabilities:

- CVE-2025-8114

    A flaw was found in libssh, a library that implements the SSH
    protocol. When calculating the session ID during the key exchange
    (KEX) process, an allocation failure in cryptographic functions may
    lead to a NULL pointer dereference. This issue can cause the client
    or server to crash.

For more information, see:
 - https://nvd.nist.gov//vuln/detail/CVE-2025-8114
 - https://www.libssh.org/security/advisories/CVE-2025-8114.txt
 - https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=65f363c9e3a22b90af7f74b5c439a133b1047379

- CVE-2025-8277

    A flaw was found in libssh's handling of key exchange (KEX)
    processes when a client repeatedly sends incorrect KEX guesses. The
    library fails to free memory during these rekey operations, which
    can gradually exhaust system memory. This issue can lead to crashes
    on the client side, particularly when using libgcrypt, which impacts
    application stability and availability.

For more infromation, see:
 - https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=87db2659ec608a977a63eea529f17b9168388d73
 - https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=266174a6d36687b65cf90174f06af90b8b27c65f
 - https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=8e4d67aa9eda455bfad9ac610e54b7a548d0aa08
 - https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=1c763e29d138db87665e98983f468d2dd0f286c1

The v0.11.2 already had a fixed for CVE-2025-5318 but the NVD reference
mentionned wrongly the version 0.11.2.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 800dcabe65)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:32:24 +02:00
Thomas Perale 21da53b833 package/tiff: security bump to v4.7.1
For more details on the version bump, see:
  - https://gitlab.com/libtiff/libtiff/-/releases/v4.7.1

This bump includes the security fix for CVE-2025-8176, CVE-2025-8177
that were addressed in commit [1][2].

Also fixes the following vulnerabilities:

- CVE-2024-13978

    A vulnerability was found in LibTIFF up to 4.7.0. It has been
    declared as problematic. Affected by this vulnerability is the
    function t2p_read_tiff_init of the file tools/tiff2pdf.c of the
    component fax2ps. The manipulation leads to null pointer
    dereference. The attack needs to be approached locally. The
    complexity of an attack is rather high. The exploitation appears to
    be difficult. The patch is named
    2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply
    a patch to fix this issue.

For more information, see:
  - https://nvd.nist.gov//vuln/detail/CVE-2024-13978
  - https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4

- CVE-2025-8961

    A weakness has been identified in LibTIFF 4.7.0. This affects the
    function main of the file tiffcrop.c of the component tiffcrop.
    Executing manipulation can lead to memory corruption. The attack can
    only be executed locally. The exploit has been made available to the
    public and could be exploited.

For more information, see:
  - https://nvd.nist.gov//vuln/detail/CVE-2025-8961
  - https://gitlab.com/libtiff/libtiff/-/commit/0ac97aa7a5bffddd88f7cdbe517264e9db3f5bd5

- CVE-2025-9165

    A flaw has been found in LibTIFF 4.7.0. This affects the function
    _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the
    file tools/tiffcmp.c of the component tiffcmp. Executing
    manipulation can lead to memory leak. The attack is restricted to
    local execution. The exploit has been published and may be used.
    This patch is called ed141286a37f6e5ddafb5069347ff5d587e7a4e0. It is
    best practice to apply a patch to resolve this issue.

For more information, see:
  - https://nvd.nist.gov//vuln/detail/CVE-2025-9165
  - https://gitlab.com/libtiff/libtiff/-/commit/ed141286a37f6e5ddafb5069347ff5d587e7a4e0

This commit also updates the LICENSE.md hash file, which was updated
upstream to include a historical license. See:
https://gitlab.com/libtiff/libtiff/-/commit/a0b623c7809ea2aa4978d5d7b7bd10e519294c78

[1] b3974df966 package/tiff: add patches to fix CVE-2025-8176
[2] 3db725d71d package/tiff: add patch to fix CVE-2025-8177

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: fix license hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9e67ae519f)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:32:16 +02:00
Thomas Perale 11f0a5f5e2 package/tiff: ignore CVE-2025-8851
The CVE-2025-8851 [1] has been fixed in upstream commit [2] that is part
of the v4.7.0 release.

Because the NVD reference includes the version '<2024-08-11' most of CVE
checker will fail to compare it against 4.7.0 and report it as a
positive.

[1] https://nvd.nist.gov//vuln/detail/CVE-2025-8851
[2] https://gitlab.com/libtiff/libtiff/-/commit/8a7a48d7a645992ca83062b3a1873c951661e2b3

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 740412aefc)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:32:08 +02:00
Neal Frager d747b7aae1 boot/xilinx-prebuilt: add support for plmfw.elf filename
AMD / Xilinx has made the decision to change the name of plm.elf to plmfw.elf
in the prebuilt binaries repo starting with the next update.

This patch updates the xilinx-prebuilt package to support either the old
plm.elf filename or the new plmfw.elf filename.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6f435187c6)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:31:58 +02:00
Neal Frager 713f7c47f8 boot/uboot: use BR2_TARGET_XILINX_FIRMWARE_ARCH_SUPPORTS
Migrate the BR2_TARGET_UBOOT_ZYNQMP dependency to the new
BR2_TARGET_XILINX_FIRMWARE_ARCH_SUPPORTS symbol. Also, add a cpu dependency
on BR2_cortex_a53 since the zynqmp platform is based on the ARM Cortex-A53
and the BR2_TARGET_UBOOT_ZYNQMP should not be available for other CPUs with
aarch64 architecture.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5986c51219)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:31:52 +02:00
Neal Frager 4f73d98026 boot/xilinx-prebuilt: only allow binaries for device family
Add an architecture cpu dependency to each family to make sure that users can
only install prebuilt firmware which is applicable to their target device
family.

The versal family is based on BR2_cortex_a72.

The kria and zynqmp families are based on BR2_cortex_a53.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 92f76f6c35)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:31:44 +02:00
Neal Frager 6f5a9d7e36 boot/xilinx-embeddedsw: only allow apps for device family
Add an architecture cpu dependency to each application to make sure that users
can only build applications which are applicable to their target device
family.

The versal_plm and versal_psmfw applications are specific to versal devices
which are based on BR2_cortex_a72.

The zynqmp_pmufw application is specific to zynqmp devices which are based on
BR2_cortex_a53.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9e25bcfdab)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:31:38 +02:00
Neal Frager a29eff0860 boot: add BR2_TARGET_XILINX_FIRMWARE_ARCH_SUPPORTS
Currently, the xilinx-embeddedsw and xilinx-prebuilt packages are appearing
for any aarch64 processor. As all Xilinx processors that need these packages
are ARM Cortex-A53 or ARM Cortex-A72, this means that these packages are
often appearing as options for non-Xilinx platforms.

To reduce this occurrence, this patch creates a new symbol
BR2_TARGET_XILINX_FIRMWARE_ARCH_SUPPORTS to limit the appearance of the
xilinx-embeddedsw and xilinx-prebuilt boot packages to only platforms based
on the BR2_cortex_a53 or BR2_cortex_a72 CPU and aarch64 architecture.

Signed-off-by: Neal Frager <neal.frager@amd.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5b1a52aea0)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:31:30 +02:00
Scott Fan fe6a87cb86 package/libopenssl: bump version to 3.5.3
This release incorporates the following bug fixes and mitigations:
- Added FIPS 140-3 PCT on DH key generation.
- Fixed the synthesised OPENSSL_VERSION_NUMBER.

https://github.com/openssl/openssl/releases/tag/openssl-3.5.3

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 92a6b6c108)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:31:13 +02:00
Titouan Christophe d2214afdf2 package/cutekeyboard: fix CUTEKEYBOARD_VERSION
Make CUTEKEYBOARD_VERSION compliant with release-monitoring.org

Fixes: b28ec6f431

(alternative to commit 1488546429)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
(cherry picked from commit 6e2b0dd923)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:30:57 +02:00
Adam Duskett de786cdc70 DEVELOPERS: Remove adam.duskett@amarulasolutions from sway packages
Patches submitted to update these packages have gone ignored for
months without comment, and I no longer wish to recieve daily
emails about them being out of date.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 20f99312c9)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:30:42 +02:00
Scott Fan 1316225788 board/qemu/{x86, x86_64}: fix shellcheck warning in post-build.sh
This removes a warning reported by shellcheck: "Double quote to prevent
globbing and word splitting". As a result, the file can be removed from
.checkpackageignore.

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit e7937c52b6)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:30:30 +02:00
Dario Binacchi dcd616e497 DEVELOPERS: add Dario Binacchi for bc
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d2bd465525)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:30:24 +02:00
Adrian Perez de Castro d2c6b391e7 package/sysprof: unconditionally select elfutils
The elfutils package provides libdw, which is required by sysprof.
It is not an optional dependency.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 194a6e0391)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:30:12 +02:00
Adrian Perez de Castro 13cafab9d1 package/sysprof: disable debuginfod support
This fixes building sysprof when elfutils is also selected (which is
a common setup). The debuginfod client support relies in elfutils
being built with the libdebuginfod option enabled; but Buildroot
unconditionally disables it in the elfutils package. See commit [1].

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/52c5c6050c5359288ca48c85024aebd169fab258

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
[Julien: add link to commit disabling debuginfod]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8d01dfebd3)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:29:25 +02:00
Alexis Lothoré 8143149376 docs/manual: update old git links to proper gitlab location
Some links are still pointing to git.buildroot.org, which is the old URL
for the official Buildroot git repository. The repository is now hosted
at gitlab.com. Update those old links accordingly.

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3ae80441ed)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:29:18 +02:00
Alexis Lothoré ccfd3e3fa5 docs/manual: update links to buildroot.org from http to https
Many links pointing to buildroot.org are still prefixed with HTTP.
Update those to HTTPS.

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6f29c81703)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:29:12 +02:00
Titouan Christophe c50711ddf5 package/syslog-ng: security bump to v4.8.3
See the release notes:
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.2
- https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.8.3

This fixes the following vulnerability:
- CVE-2024-47619:
    syslog-ng is an enhanced log daemo. Prior to version 4.8.2,
    `tls_wildcard_match()` matches on certificates such as `foo.*.bar`
    although that is not allowed. It is also possible to pass partial
    wildcards such as `foo.a*c.bar` which glib matches but should be
    avoided / invalidated. This issue could have an impact on TLS
    connections, such as in man-in-the-middle situations. Version 4.8.2
    contains a fix for the issue.
    https://www.cve.org/CVERecord?id=CVE-2024-47619

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7660818b4b)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:29:05 +02:00
Titouan Christophe 0e9a2ddd00 package/cups: security bump to v2.4.14
See the release notes:

- https://github.com/OpenPrinting/cups/releases/tag/v2.4.13
- https://github.com/OpenPrinting/cups/releases/tag/v2.4.14

This fixes the following vulnerabilities:
- CVE-2025-58060:
    OpenPrinting CUPS is an open source printing system for Linux and
    other Unix-like operating systems. In versions 2.4.12 and earlier,
    when the `AuthType` is set to anything but `Basic`, if the request
    contains an `Authorization: Basic ...` header, the password is not
    checked. This results in authentication bypass. Any configuration that
    allows an `AuthType` that is not `Basic` is affected. Version 2.4.13
    fixes the issue.
    https://www.cve.org/CVERecord?id=CVE-2025-58060

- CVE-2025-58364:
    OpenPrinting CUPS is an open source printing system for Linux and
    other Unix-like operating systems. In versions 2.4.12 and earlier, an
    unsafe deserialization and validation of printer attributes causes
    null dereference in the libcups library. This is a remote DoS
    vulnerability available in local subnet in default configurations. It
    can cause the cups & cups-browsed to crash, on all the machines in
    local network who are listening for printers (so by default for all
    regular linux machines). On systems where the vulnerability
    CVE-2024-47176 (cups-filters 1.x/cups-browsed 2.x vulnerability) was
    not fixed, and the firewall on the machine does not reject incoming
    communication to IPP port, and the machine is set to be available to
    public internet, attack vector "Network" is possible. The current
    versions of CUPS and cups-browsed projects have the attack vector
    "Adjacent" in their default configurations. Version 2.4.13 contains a
    patch for CVE-2025-58364.
    https://www.cve.org/CVERecord?id=CVE-2025-58364

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 89fd61a127)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:57 +02:00
Angelo Compagnucci 808f9b7f9b package/cups: bump to version 2.4.12
Changelog:
https://github.com/OpenPrinting/cups/releases/tag/v2.4.12
https://github.com/OpenPrinting/cups/blob/v2.4.12/CHANGES.md

This commit also updates the NOTICE license file hash, after a year
update in upstream commit:
https://github.com/OpenPrinting/cups/commit/9bf6404b52301ccb3bce48e927195c352ad59ffd

Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
[Julien:
 - add link to CHANGES.md
 - add comment about license hash change in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f6be007591)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:51 +02:00
Dario Binacchi 7524d3c228 DEVELOPERS: add Dario Binacchi for connman
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5f63c441f8)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:42 +02:00
Dario Binacchi 6afb50fe42 package/connman: security bump to version 1.45
This bump includes the security fixes for CVE-2025-32366 and
CVE-2025-32743.

Release notes:
- Fix issue with setting MFP optional for PSK.
- Fix issue with comparison in timezone checking.
- Fix issue with dnsproxy and empty lookup.

See also:
https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog?h=1.45
https://git.kernel.org/pub/scm/network/connman/connman.git/log/?h=1.45

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-32366
https://www.cve.org/CVERecord?id=CVE-2025-32743

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
[Julien: add links to change logs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f0b011e0aa)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:36 +02:00
Scott Fan bed14dbc3e board/loongarch64-efi: fix typo in grub config
Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7f620c7a05)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:27 +02:00
Peter Korsgaard 205eee9a6a package/openjpeg: bump version to 2.5.4
And drop now included security patch. For details, see:

https://github.com/uclouvain/openjpeg/releases/tag/v2.5.4

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4655cfd8f3)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:19 +02:00
Alexis Lothoré 3af6b2fe9b docs/manual/getting: fix dead link
When searching for the official git repository in the documentation,
readers are forwarded to the buildroot website Download page with a link
pointing to buildroot.org/download, which returns a 404.

Fix the dead link by adding the missing .html suffix.

Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8845586fc6)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:12 +02:00
Peter Korsgaard c10902b986 package/rtl_433: do not leak Buildroot git info
The CMake build system has logic to detect the git repo info and include it
in the version output.  This unfortunately gets confused and adds the git
info of the Buildroot repository when building inside the repo:

-- Found Git version: refs/heads/rtl_433-25.02 commit a367362af0                                 from 2025-09-21T20:07:58+0200
-- Using Git version tag: 2025.08-283-ga367362af0 on rtl_433-25.02 at 202509212007

rtl_433 -V
rtl_433 version 2025.08-283-ga367362af0 branch rtl_433-25.02 at 202509212007 inputs file rtl_tcp RTL-SDR

Pass GIT_DIR=.  to the configure step similar to how it is already done for
the build step to disable this.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 817611686a)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-30 11:28:04 +02:00
Yegor Yefremov 164c1f06f2 package/libxmlrpc: add BR2_USE_MMU dependency
Build fails with:
server.c: In function 'ServerDaemonize':
server.c:1590:13: error: implicit declaration of function 'fork'
[-Wimplicit-function-declaration]
 1590 |     switch (fork()) {
      |             ^~~~

Hence, add BR2_USE_MMU to avoid building with toolchains without MMU
support.

Fixes:
https://autobuild.buildroot.org/results/10464159f2a9ff41ea0921a45ce12ecd0fa50ae7/

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
[Julien: move BR2_USE_MMU up to fix check-package error]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 059138326e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:44:55 +02:00
Romain Naour 20ec76e60d support/testing: GitTestBase: remove git daemon due to Gitlab-CI security settings
TestGitHash and TestGitRefs are failing on Gitlab-CI since 2025-08-18
(first runtime-test failures report for master) [1] due a new Gitlab-CI
security settings that prevents the any use of localhost (127.0.0.1) on
the Gitlab-CI runner [2]:

"To prevent exploitation of insecure internal web services, all webhook
 and integration requests to the following local network addresses are
 not allowed:

 Private network addresses, including 127.0.0.1, ::1, 0.0.0.0,
 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, and IPv6 site-local
 (ffc0::/10) addresses."

Gitlab suggest using a second container as a Services [3] since each
containers have access to one another and can communicate when running
the job. But this is really not practical to run git daemon since the
service is started before the Buildroot git tree is fetched and git
daemon needs git-remote directory content.

See [4]:
"If you have your service that tries to write to CI_PROJECT_DIR
 immediately after it's started - it will not work and fail with an
 error like '/builds/nknapp/gitlab-ci-test/': No such file or directory
 error. Because that directory is most probably not there yet, as the
 job step that creates it is yet to be executed!"

Also, using Gitlab-CI services requires to handle GitTestBase setUp
differently on Gitlab-CI than local use of run-tests.
So Gitlab-CI services is not an option.

We could move support/testing/tests/download/git-remote to our Gitlab
group (https://gitlab.com/buildroot.org) but since it's only intended
for testing the git download backend, we don't really want to do that.

So the only remaining choice to clone the repository from the Buildroot
git tree (local machine).

To do so, we have to do the following changes:

- Replace all "git://localhost:$(GITREMOTE_PORT_NUMBER)" by
  "$(GITREMOTE_DIR)". GITREMOTE_DIR will contain the absolute path to
  tests/download/git-remote directory.

- Force to use git download backend using "SITE_METHOD = git" otherwise
  the download infra will fall back using wget download backend.

- Cloning a git repository with submodules using the "file://" protocol
  needs to be allowed from git config. It's disabled by default:
  "fatal: transport 'file' not allowed"
  Use a local gitconfig file generated by GitTestBase before starting
  TestGitHash and TestGitRefs with:

  [protocol "file"]
    allow = always

  This is considered safe since we are using a git repository from the
  Buildroot git tree.

- Running TestGitHash and TestGitRefs on Gitlab-CI requires additional
  git config settings to disable ownership check of the git tree [5].

Thanks to Arnout for advices about GIT_CONFIG_GLOBAL.

Runtime tested:
https://gitlab.com/kubu93/buildroot/-/jobs/11428504450 (TestGitHash)
https://gitlab.com/kubu93/buildroot/-/jobs/11428490035 (TestGitRefs)

[1] https://lore.kernel.org/buildroot/68a3ee65.500a0220.397724.30db@mx.google.com/
[2] https://docs.gitlab.com/security/webhooks/#allow-requests-to-the-local-network-from-webhooks-and-integrations
[3] https://docs.gitlab.com/ci/services/
[4] https://gitlab.com/gitlab-org/gitlab-runner/-/issues/25982#note_2139685797
[5] https://gitlab.com/buildroot.org/buildroot/-/commit/a016b693f7830f3c8ae815851d3204b8b6e99821

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/11271124174 (TestGitHash)
https://gitlab.com/buildroot.org/buildroot/-/jobs/11271124173 (TestGitRefs)

Cc: Arnout Vandecappelle <arnout@rnout.be>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a367362af0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:44:40 +02:00
Romain Naour 5ceb38f692 support/testing: TestZfsUclibc: use internal backend for uClibc-ng toolchain
As reported on the mailing list [1] while investigating the
TestZfsUclibc Gitlab-CI failure, the python 3.13 interpreter itsef
segfault at runtime:

  Fatal Python error: _PyThreadState_Attach: non-NULL old thread state
  Python runtime state: preinitialized
  Thread 0xSegmentation fault

This issue is related to the python 3.13 version bump [2] were several
internal changes were added [3] to support PEP 703 [4].
PEP 793 is about CPython’s global interpreter lock (“GIL”) removal
for multi-threads support that requires a working C11 "thread_local"
for thread-local storage [5].

The new uclibc-ng 1.0.55 release contains a fix for this issue [6].
This version is included in Buildroot commit [7].

Since the prebuilt Bootling aarch64 uclibc stable 2025.08-1 is based
on previous uClibc-ng release (1.0.54) we have to use the internal
toolchain backend to build a new uClibc-ng toolchain using uclibc-ng
1.0.55. Note: the toolchain config defined in this commit reflects
the options enabled in the Bootling aarch64 uclibc external
toolchains.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/11271124859 (TestZfsUclibc)

[1] https://lore.kernel.org/buildroot/7a4d245d-1556-43c9-8997-6b1f791afbfe@gmail.com/ (TestZfsUclibc)
[2] https://gitlab.com/buildroot.org/buildroot/-/commit/d63e207eb869063f82c867658676c2903beb08cb
[3] https://github.com/python/cpython/commit/6e97a9647ae028facb392d12fc24973503693bd6
[4] https://peps.python.org/pep-0703/
[5] https://gcc.gnu.org/onlinedocs/gcc-15.1.0/gcc/Thread-Local.html
[6] https://github.com/wbx-github/uclibc-ng/commit/94c1297d52263e20cd9715601afa37f49d008d93
[7] https://gitlab.com/buildroot.org/buildroot/-/commit/5250bba8e5b1aaeb58977baf1d91e2be66656476

Cc: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Tested-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Cc: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
[Julien:
 - add link to buildroot commit updating uclibc-ng to 1.0.55
 - add a note in the commit log about the toolchain config
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5208b7a1bd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:44:29 +02:00
Dario Binacchi b25b1e2a05 package/atop: security bump to version 2.11.1
This bump includes the security fix for CVE-2025-31160.

Release notes:
https://www.atoptool.nl/downloadatop.php

Fixes:
https://www.cve.org/CVERecord?id=CVE-2025-31160

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
[Julien:
 - add "security" in commit log title
 - add link to CVE
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 45e7fe2811)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:44:17 +02:00
Waldemar Brodkorb a663637bea package/uclibc: bump to 1.0.55
Finally the aarch64 tls bug is fixed. (python 3.13 segfault)
Unfortunately it is not covered by any testcase of uClibc-ng-test.

Here is the git shortlog for the release:

Marius Melzer (1):
      malloc-standard: Fix truncation problem in malloc

Waldemar Brodkorb (5):
      Fix Sysvipc for ARM, AARCH64, RISCV64, KVX and m68k
      remove uClibc specific gettext_printf
      aarch64: do not force tls-model in CPU_CFLAGS, this isn't required
      aarch64: respect r_addend for TLSDESC relocations
      bump version for 1.0.55 release

yliu (5):
      mips32: Preventing FORCE_FRAME_POINTER from being optimized away
      mips32: Define __IPC_64 according to kernel version
      time64: fixed msgctl/semctl/shmctl result errors for for MIPS32/RISCV32
      time64: fix *ctl functions in mips32eb/mips64
      time64: fix *ctl functions in mips32eb

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Tested-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5250bba8e5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:44:06 +02:00
Dario Binacchi 341f786325 DEVELOPERS: add Dario Binacchi for cmocka
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 190c482335)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:43:56 +02:00
Dario Binacchi 15a92cb7b4 DEVELOPERS: add Dario Binacchi for atf
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 713fbb1f39)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:43:43 +02:00
Thomas Perale 1fefe3eed0 package/poco: add patch for CVE-2025-6375
This fixes the following vulnerability:

- CVE-2025-6375:

A vulnerability was found in poco up to 1.14.1. It has been rated as
problematic. Affected by this issue is the function MultipartInputStream
of the file Net/src/MultipartReader.cpp. The manipulation leads to null
pointer dereference. The attack needs to be approached locally. The
exploit has been disclosed to the public and may be used. Upgrading to
version 1.14.2 is able to address this issue. The patch is identified as
6f2f85913c191ab9ddfb8fae781f5d66afccf3bf. It is recommended to upgrade
the affected component.

For more information see:
  - https://nvd.nist.gov//vuln/detail/CVE-2025-6375
  - https://github.com/pocoproject/poco/commit/6f2f85913c191ab9ddfb8fae781f5d66afccf3bf

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 36357247d5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:43:28 +02:00
Maxim Kochetkov 0205d06c6a package/postgresql: security bump to version 17.6
Fixes the following security issue:

CVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data
within a view, partition, or child table

PostgreSQL optimizer statistics allow a user to read sampled data within
a view that the user cannot access. Separately, statistics allow a user
to read sampled data that a row security policy intended to hide.
PostgreSQL maintains statistics for tables by sampling data available in
columns; this data is consulted during the query planning process. Prior
to this release, a user could craft a leaky operator that bypassed view
access control lists (ACLs) and bypassed row security policies in
partitioning or table inheritance hierarchies. Reachable statistics data
notably included histograms and most- common-values lists. CVE-2017-7484
and CVE-2019-10130 intended to close this class of vulnerability, but
this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19,
and 13.22 are affected.

CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute
arbitrary code in psql client

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious
superuser of the origin server to inject arbitrary code for restore-time
execution as the client operating system account running psql to restore
the dump, via psql meta-commands. pg_dumpall is also affected. pg_restore
is affected when used to generate a plain-format dump. This is similar to
MySQL CVE-2024-21096. Versions before PostgreSQL 17.6, 16.10, 15.14,
14.19, and 13.22 are affected.

CVE-2025-8715: PostgreSQL pg_dump newline in object name executes
arbitrary code in psql client and in restore target server

Improper neutralization of newlines in pg_dump in PostgreSQL allows a user
of the origin server to inject arbitrary code for restore-time execution
as the client operating system account running psql to restore the dump,
via psql meta-commands inside a purpose-crafted object name. The same
attacks can achieve SQL injection as a superuser of the restore target
server. pg_dumpall, pg_restore, and pg_upgrade are also affected.
Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.
Versions before 11.20 are unaffected. CVE-2012-0868 had fixed this class
of problem, but version 11.20 reintroduced it.

https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/

Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4f0a9596e3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:43:16 +02:00
Scott Fan b787fbf039 configs/qemu: update defconfigs to Linux 6.12.47
Update all qemu defconfigs to the latest Kernel LTS version.

Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit f83cb153a5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:43:00 +02:00
Waldemar Brodkorb 87ef302232 package/x11r7/xapp_xdm: bump to 1.1.17
See here for Changes:
https://lists.x.org/archives/xorg/2025-March/061902.html

Fixes a compile error with gcc 14.x.

COPYRIGHT was updated:
-Copyright (c) 2002, 2006, 2009, 2010, Oracle and/or its affiliates.
-All rights reserved.
+Copyright (c) 2002, 2006, 2009, 2010, 2025, Oracle and/or its affiliates.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Julien: fix COPYING license hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c878e08839)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:42:28 +02:00
Waldemar Brodkorb efe65b09b4 package/x11r7/xapp_xdm: needs libxcrypt
While doing a per-package build the package is failing to
compile with this error (gcc 13.x glibc toochain):
make[3]: Entering directory
'/home/wbx/buildroot-2025.02.3/output/build/xapp_xdm-1.1.14/xdm'   CC
session.o session.c:146:11: fatal error: crypt.h: No such file or
directory   146 | # include <crypt.h>       |           ^~~~~~~~~
compilation terminated.

Fix this error by providing the needed glibc dependencies.

Fixes:
 https://autobuild.buildroot.org/results/b75/b75ad8f1159613656dce482992c800545d60ae69/

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2d076a1b76)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:42:18 +02:00
Thomas Perale bcdd49dceb package/civetweb: add patch for CVE-2025-55763
This fixes the following vulnerability:

- CVE-2025-55763

Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest)
allows a remote attacker to achieve remote code execution via a crafted
HTTP request. This vulnerability is triggered during request processing
and may allow an attacker to corrupt heap memory, potentially leading to
denial of service or arbitrary code execution.

For more information, see:
  - https://nvd.nist.gov//vuln/detail/CVE-2025-55763
  - https://github.com/civetweb/civetweb/commit/76e222bcb77ba8452e5da4e82ae6cecd499c25e0

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 426d7635c7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:42:02 +02:00
Thomas Petazzoni f5d88700ec package/c-icap-modules: fix build with GCC 15.x
Add a patch fixing prototype issues with GCC 15.x. The patch cannot be
submitted upstream because the problematic code has completely changed
in newer releases.

No autobuilder failures because they were hidden by 'c-icap' not
building with GCC 15.x.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2febca71f7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:41:47 +02:00
Thomas Petazzoni 9cd0b8a4f8 package/c-icap: add patches to fix GCC 15.x build issues
Patches 0003 and 0004 are upstream backport. Patch 0005 isn't because
the code has completely changed upstream in newer releases.

Fixes:

  https://autobuild.buildroot.net/results/e9b4d9033f0283b133b58049a03b5f0b595e30db/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b832fce891)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:41:37 +02:00
Thomas Petazzoni 3dc5ad8ced package/libfreeimage: fix build with GCC 14.x
Take two patches from the Debian jxrlib package, and integrate them to
fix the build of the bundled jxrlib library found in the libfreeimage
package.

libfreeimage isn't exactly well maintained: its last version 3.18.0 is
quite old (July 2018), there's a fairly large number of tickets in the
bug tracker claiming to be CVE
reports (https://sourceforge.net/p/freeimage/bugs/), it is still using
SVN as the version control system.

However, it is used as an optional dependency for CEGUI, and a
mandatory dependency for Ogre. However, it no longer seems to be a
dependency for more recent versions of Ogre. But in any case it cannot
simply be dropped.

Fixes:

  https://autobuild.buildroot.net/results/452462285bf93b13f092fb41696952f415e75b2f/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 21ea33c764)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:41:27 +02:00
Thomas Petazzoni 232718e303 package/chocolate-doom: bump to 3.1.1 to fix GCC 15.x issues
Changes in 3.1.0:

  https://github.com/chocolate-doom/chocolate-doom/releases/tag/chocolate-doom-3.1.0

Changes in 3.1.1:

  https://github.com/chocolate-doom/chocolate-doom/releases/tag/chocolate-doom-3.1.1

The SDL2_mixer and SDL2_net dependencies are now optional since 3.1.0,
so adjust the packaging accordingly.

Also, the license file was renamed upstream in commit:
https://github.com/chocolate-doom/chocolate-doom/commit/91a66a7ecba5e0dea87c8d98237d6a224f13347a
So _LICENSE_FILES and the .hash file are also updated to reflect
that change.

Fixes:

  https://autobuild.buildroot.net/results/90a01c5925e7f5f50b3ea06d6ea7b0da66814a15/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
[Julien: fix license file and hash]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit be466c265b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:41:12 +02:00
Thomas Perale 2a81f91839 package/jasper: add patch for CVE-2025-8835
This fixes the following vulnerability:

- CVE-2025-8835:

A vulnerability was found in JasPer up to 4.2.5. Affected by this
vulnerability is the function jas_image_chclrspc of the file
src/libjasper/base/jas_image.c of the component Image Color Space
Conversion Handler. The manipulation leads to null pointer dereference.
It is possible to launch the attack on the local host. The exploit has
been disclosed to the public and may be used. The identifier of the
patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to
apply a patch to fix this issue.

For more information see:
  - https://nvd.nist.gov//vuln/detail/CVE-2025-8835
  - https://github.com/jasper-software/jasper/commit/bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6e81b51f68)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:41:02 +02:00
Thomas Perale 8b0e1b7a98 package/jasper: add patch for CVE-2023-51257
This fixes the following vulnerability:

- CVE-2023-51257:

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and
before allows a local attacker to execute arbitrary code.

For more information see:
  - https://nvd.nist.gov//vuln/detail/CVE-2023-51257
  - https://github.com/jasper-software/jasper/commit/aeef5293c978158255ad4f127089644745602f2a

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 860c35d1ac)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:40:51 +02:00
Thomas Perale 6726e03471 package/lua/5.1.5: add patch for CVE-2014-5461
This CVE is specific for the version 5.1.5 still present in Buildroot.
It has been fixed in 5.2.3 and thereby doesn't affects the other
versions available in Buildroot.

- CVE-2014-5461

Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through
5.2.x before 5.2.3 allows context-dependent attackers to cause a denial
of service (crash) via a small number of arguments to a function with a
large number of fixed arguments.

For more information see:
  - https://security-tracker.debian.org/tracker/CVE-2014-5461
  - https://udd.debian.org/patches.cgi?src=lua5.1&version=5.1.5-11

A patch present in Debian is used to address this vulnerability.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a2c906ee3b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:40:36 +02:00
Titouan Christophe ede4af8c58 package/opencv4 (-contrib): security bump to v4.12.0
This fixes the following vulnerability:
- CVE-2025-53644:
    OpenCV is an Open Source Computer Vision Library. Versions prior to
    4.12.0 have an uninitialized pointer variable on stack that may lead
    to arbitrary heap buffer write when reading crafted JPEG images.
    Version 4.12.0 fixes the vulnerability.
    https://www.cve.org/CVERecord?id=CVE-2025-53644

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9c365fee97)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:39:55 +02:00
Thomas Perale 93f886ae79 package/zziplib: fix deprecated CPE
The CPE 'zziplib_project:zziplib' is deprecated in favour of
'gdraheim:zziplib'.

See https://nvd.nist.gov/products/cpe/detail/FB4124F9-087E-454D-B5D4-642FF08B23A8

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c9d185e182)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:37:34 +02:00
Thomas Perale 2dc5d2cc70 package/x11r7/xserver_xorg-server: fix deprecated CPE
The CPE 'x.org:xorg-server' is deprecated in favour of
'x.org:x_server'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/F6729083-29EE-4772-9DFF-80B43980D6BE
  - https://nvd.nist.gov/vuln/detail/CVE-2025-26601

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: fix "xorg-server:x_server" to "x.org:x_server" in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 85c71fee3f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:37:24 +02:00
Thomas Perale a21dde67e9 package/python-aiohttp-session: fix deprecated CPE
The CPE 'aiohttp-session_project:aiohttp-session' has been deprecated in
favour of 'aiohttp-session:aiohttp-session'.

See https://nvd.nist.gov/products/cpe/detail/667389BF-3561-49F9-A61A-6C86C7B82922

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
[Julien: add https:// prefix to url in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fdb540a00e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:37:15 +02:00
Thomas Perale 76aae2522e package/modsecurity2: fix deprecated CPE
The CPE 'trustwave:modsecurity' has been deprecated in favour of
'owasp:modsecurity'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/B305D665-44EC-44A6-8C46-C68BFDAD7C38
  - https://nvd.nist.gov/vuln/detail/CVE-2025-48866

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 843707ba1e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:37:05 +02:00
Thomas Perale 533b690c9a package/iputils: fix deprecated CPE
The CPE 'iputils_project:iputils' has been deprecated in favour of
'iputils:iputils'.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 4ac3c1de56)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:36:54 +02:00
Thomas Perale 6eddb6ec8b package/upx: fix deprecated CPE
The CPE 'upx_project:upx' has been deprecated in favour of 'upx:upx'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/36CA8E94-4A35-4373-8D69-22313060322B
  - https://nvd.nist.gov/vuln/detail/CVE-2020-24119

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit ff492a2c87)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:36:38 +02:00
Thomas Perale f82e6b2aa0 package/python-cryptography: fix deprecated CPE
The CPE 'cryptography_project:cryptography' has been deprecated in
favour of 'cryptography.io:cryptography'.

See the following:
 - https://nvd.nist.gov/products/cpe/detail/2EBA50FC-F3F9-40D5-82BD-EFB67F761153
 - https://nvd.nist.gov/vuln/detail/cve-2023-49083

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2f993d55e8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:36:28 +02:00
Thomas Perale e336b24533 package/pango: fix deprecated CPE
The CPE 'pango:pango' has been deprecated in favour of 'gnome:pango'.

See https://nvd.nist.gov/products/cpe/detail/19B77822-6C34-41C8-8160-367D56AD1569

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6c5f1b6414)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:36:17 +02:00
Thomas Perale b20a5a4469 package/gnuplot: fix deprecated CPE
The CPE 'gnuplot_project:gnuplot' has been deprecated in favour of
'gnuplot:gnuplot'.

See the following:
  - https://nvd.nist.gov/products/cpe/detail/DB68C9F5-3330-4749-A6F5-61FF041037CC
  - https://nvd.nist.gov/vuln/detail/cve-2025-31178

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0bbefd60f7)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:36:08 +02:00
Thomas Perale 5a38071dc4 package/cpp-httplib: fix deprecated CPE
The CPE 'cpp_httplib_project:cpp-httplib' has been deprecated in favour
of 'yhirose:cpp-httplib'.

See https://nvd.nist.gov/products/cpe/detail/5D557BEA-8246-464C-AB90-EA9495A0732A

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cf480bda61)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:35:57 +02:00
Thomas Perale b7c93d1b5d package/boinc: fix deprecated CPE
The CPE 'rom_walton:boinc' has been deprecated in favour of
'universityofcalifornia:boinc_client'.

See https://nvd.nist.gov/products/cpe/detail/DAC161C5-2154-44BF-916A-EACB524E8B8F

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 143bb15d6e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:35:46 +02:00
Thomas Perale 34377d3ca5 package/asterisk: fix deprecated CPE ID
The CPE 'asterisk:open_source' has been deprecated in favour of
'sangoma:asterisk'.

See the following for more information:
 - https://nvd.nist.gov/products/cpe/detail/7FC01D7D-5AE9-42A8-B31E-A99E745E5BE5
 - https://github.com/asterisk/asterisk/security
 - https://nvd.nist.gov/vuln/detail/CVE-2024-42491

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 505cd0d367)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:35:35 +02:00
James Hilliard 4b9bfdf08e utils/scanpypi: remove python six module
We dropped support for python2 a while back in [1], as such we
can remove the python six module which was only needed for
backwards comaptibility with python2.

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/2743ce00ca61fde1537b64a165a69d497052be58

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Julien: add commit ref removing python2 support]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 53eb75ef53)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:35:18 +02:00
James Hilliard c53e310b23 package/python-typing-extensions: bump to version 4.15.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6ea8e60e49)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:34:00 +02:00
James Hilliard ee056ed2ea package/python-pytz: bump to version 2025.2
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a54553b85)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:31:01 +02:00
Fiona Klute (WIWA) c8055b92f0 package/python-trove-classifiers: bump to version 2025.9.11.17
package/python-cffi 2.0.0 (bumped in commit
07903d2b27) fails to build due to an
unknown trove-classifier:

* Getting build dependencies for wheel...
configuration error: `project.classifiers[8]` must be trove-classifier
DESCRIPTION:
    `PyPI classifier <https://pypi.org/classifiers/>`_.

GIVEN VALUE:
    "Programming Language :: Python :: Free Threading :: 2 - Beta"

OFFENDING RULE: 'format'

DEFINITION:
    {
        "type": "string",
        "format": "trove-classifier"
    }

For more details about `format` see
https://validate-pyproject.readthedocs.io/en/latest/api/validate_pyproject.formats.html

The list of trove classifiers Setuptools checks against is provided by
package/python-trove-classifiers. Upstream has added the classifier as
of version 2025.5.8.15 [1], as well as a bunch of others [2], so
update to fix the problem.

[1] https://github.com/pypa/trove-classifiers/commit/331838aaea0eea6374e4e51e8fe05e13bf7e4957
[2] https://github.com/pypa/trove-classifiers/compare/2025.1.15.22...2025.9.11.17

Fixes:
- 07903d2b27
- https://autobuild.buildroot.org/results/45b57a919182ae3f9ea0db9b0fa430a72e1e3cdf/

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
[Julien: add link to autobuilder failure]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 44e0ba2bd2)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:30:35 +02:00
James Hilliard 61ec739c2a package/python-certifi: bump to version 2025.8.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b3809dfaf3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:30:13 +02:00
Julien Olivain 79e39a7ced boot/boot-wrapper-aarch64: add hash file
Since boot-wrapper-aarch64 introduction in commit [1]
"boot-wrapper-aarch64: new package", the package never received a hash
file. This commit adds it, including the source archive and license
hashes.

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/7689b72e00fd4d8c017880004e83a1c79144ab7b

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4b14018a38)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:29:41 +02:00
Julien Olivain afda443c99 boot/boot-wrapper-aarch64/Config.in: switch homepage URL to https
Buildroot commit [1] ("package: replace git:// URLs with https://
URLs where possible") switched _SITE URL from git to https, but did
not updated the package homepage in Config.in.

This commit updates it to match the package _SITE URL.

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/6626bf7c5fc1f5f47fcade03090de212a6121db3

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit afff65c340)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:29:21 +02:00
Thomas Devoogdt a801534ff5 package/webkitgtk: security bump to version 2.48.6
Fixes a number of crashes. Release notes:

 - https://webkitgtk.org/2025/07/30/webkitgtk2.48.4-released.html
 - https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html
 - https://webkitgtk.org/2025/09/03/webkitgtk2.48.6-released.html

And brings some security fixes. Security advisory:

 - https://webkitgtk.org/security/WSA-2025-0005.html

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Acked-By: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit dd68f4edd2)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:29:11 +02:00
Peter Korsgaard 87514cc0ae package/cjson: security bump to version 1.7.19
Fixes the following security issue:

CVE-2025-57052: cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via
the decode_array_index_from_pointer function in cJSON_Utils.c, allowing
remote attackers to bypass array bounds checking and access restricted data
via malformed JSON pointer strings containing alphanumeric characters

https://nvd.nist.gov/vuln/detail/CVE-2025-57052
https://x-0r.com/posts/cJSON-Array-Index-Parsing-Vulnerability
https://github.com/DaveGamble/cJSON/commit/74e1ff4994aa4139126967f6d289b675b4b36fef
https://github.com/DaveGamble/cJSON/releases/tag/v1.7.19

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a93602c00b)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:28:45 +02:00
Thomas Perale 38eb67b787 package/cjson: update deprecated CPE
The CPE 'cpe:2.3:a:cjson_project:cjson:0.0.0:*:*:*:*:*:*:*' has been
deprecated in favour of 'cpe:2.3:a:davegamble:cjson:0.0.0:*:*:*:*:*:*:*''

See https://nvd.nist.gov/products/cpe/detail/70BC45DA-D915-4A1D-96AF-84A6CECEE148

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d6c05d06d0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:26:23 +02:00
Titouan Christophe 1f1c903183 package/python-flask-cors: fix PKG_SITE
python-flask-cors was security bumped in commit 04cd135b26 [1], however this
commit did not update the _SITE url; which changes with each new release on
pypi. Therefore, downloading python-flask-cors would always fail.

Fixes:
https://autobuild.buildroot.org/results/eeadcb2e416cddaa5d059b31ea5dcc9f766a3cff

[1] https://gitlab.com/buildroot.org/buildroot/-/commit/04cd135b26406dcc31cb66af1480d53fffe81e59

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add "Fixes" in commit log, from Yegor Yefremov comment]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit cbc3cb2c8d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-25 16:26:05 +02:00
Titouan Christophe 758e9121a0 {linux, linux-headers}: bump 6.16.x, 6.12.x, 6.6.x, 6.1.x series
Update the latest kernel releases to:
 - 6.16.7 -> 6.16.8
 - 6.12.47 -> 6.12.48
 - 6.6.106 -> 6.6.107
 - 6.1.152 -> 6.1.153

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-23 14:56:14 +02:00
Thomas Petazzoni efdc54b834 package/policycoreutils: fix build with musl due to getpass()
policycoreutils uses getpass(), which with musl is only defined with
some feature macro defined, such as _GNU_SOURCE. So let's pick-up an
upstream fix to address this issue.

There are no autobuilder failures, the issue was most likely hidden by
other failures with musl affecting the SELinux stack.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit fc472cc8c7)
[thomas: fix patch]
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 11:41:09 +02:00
Thomas Petazzoni 71b95f9be6 package/libsemanage: fix build issue due to basename()
The build of libsemanage on musl configurations fails with:

direct_api.c: In function 'semanage_direct_install_file':
direct_api.c:1746:20: error: implicit declaration of function 'basename' [-Wimplicit-function-declaration]
 1746 |         filename = basename(path);
      |                    ^~~~~~~~

This fails to build even with a GCC 14.x toolchain, even with
libsemanage 3.7, which is the version we have in our LTS branch.

Let's backport an upstream patch fixing this issue.

Fixes:

  https://autobuild.buildroot.net/results/913852e35c925888ced37e15be3731b9d3963019/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 79031b79c2)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:49:11 +02:00
Thomas Petazzoni 349fe10e5b package/libselinux: fix build issues caused by 3.8.1 bump
Since the bump to version 3.8.1 in commit
1ae3ad4e87, libselinux fails to build
with at least

- Musl configurations
- RISC-V 32-bit configurations
- OpenRISC configurations

These build failures are due to additional checks on the size of some
data structures:

matchpathcon.c:270:47: error: '__ino_t' undeclared here (not in a function); did you mean 'ino_t'?
  270 | static_assert(sizeof(unsigned long) == sizeof(__ino_t), "inode size mismatch");
      |                                               ^~~~~~~
      |                                               ino_t
matchpathcon.c:270:15: error: expression in static assertion is not an integer
  270 | static_assert(sizeof(unsigned long) == sizeof(__ino_t), "inode size mismatch");
      |               ^~~~~~

These issues have been fixed in follow-up upstream commits, which we
backport.

Fixes:

  https://autobuild.buildroot.net/results/00a1ab30cc6b7af503aa96384ba4c4444c217401/ (musl)
  https://autobuild.buildroot.net/results/c8321be687201937bd5eb48b31dfabac12f4e9ea/ (glibc or1k)
  https://autobuild.buildroot.net/results/7b94f44282582d5994f40a741cc0c38bd68b53bd/ (risc-v 32-bit)

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit d5aab5289c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:48:52 +02:00
Romain Naour f74ebcf5c4 package/luvi: bump to version 2.15.0
Luvi 2.14.0 fails to build with GCC 14.x for several reasons due to
too old lua-openssl 0.8.2-0 submodule:

TestLuvi/build/luvi-2.14.0/deps/lua-openssl/src/ocsp.c: In function 'openssl_ocsp_request_read':
TestLuvi/build/luvi-2.14.0/deps/lua-openssl/src/ocsp.c:124:29: error: passing argument 1 of 'PEM_ASN1_read_bio' from incompatible pointer type [-Wincompatible-pointer-types]
  124 |   OCSP_REQUEST *req = pem ? PEM_read_bio_OCSP_REQUEST(bio, NULL, NULL)
      |                             ^~~~~~~~~~~~~~~~~~~~~~~~~
      |                             |
      |                             char * (*)()

Fixed in lua-openssl by [1].

TestLuvi/build/luvi-2.14.0/deps/lua-openssl/src/x509.c: In function 'openssl_push_general_name':
TestLuvi/build/luvi-2.14.0/deps/lua-openssl/src/x509.c:377:45: error: passing argument 2 of 'openssl_push_asn1type' from incompatible pointer type [-Wincompatible-pointer-types]
  377 |     openssl_push_asn1type(L, general_name->d.x400Address);
      |                              ~~~~~~~~~~~~~~~^~~~~~~~~~~~
      |                                             |
      |                                             ASN1_STRING * {aka struct asn1_string_st *}

Fixed in lua-openssl by [2].

TestLuvi/build/luvi-2.14.0/deps/lua-openssl/src/openssl.c: In function 'luaclose_openssl':
TestLuvi/build/luvi-2.14.0/deps/lua-openssl/src/stdatomic.h:387:9: error: implicit declaration of function '__c11_atomic_fetch_sub'; did you mean '__atomic_fetch_sub'? [-Wimplicit-function-declaration]
  387 |         __c11_atomic_fetch_sub(object, operand, order)

Fixed in lua-openssl by [3].

Instead of fixing one by one each issues, update to the latest release
that include lua-openssl 0.9.0-0. Luvi v2.15.0 still have some GCC 14.x
issues, backport two additional patches.

Download luvi sources using git method since the release archive
no longer include the release version in its name [4].

Luvi switched to PCRE2 [5], update the optional dependency.

Update TestLuvi to select PCR2 package.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/11271124430 (TestLuvi)

[1] https://github.com/zhaozg/lua-openssl/commit/bfeedbe8c06d8b4400fa670edecd452a433ddac4
[2] https://github.com/zhaozg/lua-openssl/commit/e5b5420cc506c7507d1d0e7302ea3f1979a6b2ed
[3] https://github.com/zhaozg/lua-openssl/commit/cfcaa16d1acaab17f4f0178e61ea77ebc2c8f24c
[4] https://github.com/luvit/luvi/releases/download/v2.15.0/luvi-source.tar.gz
[5] https://github.com/luvit/luvi/releases/tag/v2.15.0

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 00317f0aff)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:48:22 +02:00
Peter Korsgaard de58e2ebee package/pcre2: security bump to version 10.46
Fixes the following security issue:

- CVE-2025-58050: PCRE2: heap-buffer-overflow read in match_ref due to
  missing boundary restoration in SCS

Compared to 10.45, this release has only a minimal code change to prevent a
read-past-the-end memory error, of arbitrary length.  An attacker-controlled
regex pattern is required, and it cannot be triggered by providing crafted
subject (match) text.  The (*ACCEPT) and (*scs:) pattern features must be
used together.

Release 10.44 and earlier are not affected.

https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-c2gv-xgf5-5cc2
https://www.cve.org/CVERecord?id=CVE-2025-58050

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to CVE in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9fd06f212a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:43:35 +02:00
Bernd Kuhls dd46a24e70 package/samba4: bump version to 4.22.4
Release notes:
https://www.samba.org/samba/history/samba-4.22.4.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 96601a650d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:42:49 +02:00
Romain Naour 112da41bed package/mariadb: workaround cmake < 3.30 check TRY_RUN issue
The last mariadb version bump [1] added -DHAVE_SYSTEM_LIBFMT_EXITCODE=0
to workaround cross-compiling issue during libfmt cmake check.
But it actually requies at least cmake >= 3.30 to work.
Indeed, our docker image used by Gitlab-CI uses cmake 3.25.1 and
segfault while testing for libfmt.

  -- Performing Test HAVE_SYSTEM_LIBFMT
  /bin/bash: line 1: 163369 Segmentation fault

  $ cmake --version
  cmake version 3.25.1

Using the same TestPerlDBDmysql configuration locally with
cmake 3.30.8 installed build fine.

Looking at cmake cmTryRunCommand.cxx history from 3.30.x show that
several fixes about cross-compiling isses were applied to cmake 3.26.x
[2] probably solving the issue. Requires BR2_HOST_CMAKE_AT_LEAST_3_30
for now, since only cmake 3.30.8 installed locally was tested.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/11271124486 (TestPerlDBDmysql)
https://gitlab.com/buildroot.org/buildroot/-/jobs/11271124439 (TestMariaDB)

[1] 6cd8f95346 ("package/mariadb: bump version to 10.11.11")
[2] https://gitlab.kitware.com/cmake/cmake/-/commits/v3.30.9/Source/cmTryRunCommand.cxx?ref_type=tags

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit de9c0f971c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:42:30 +02:00
Waldemar Brodkorb 376785362f package/xlib_xtrans: bump to 1.6.0
xlib_xtrans clients (for example xserver_xorg-server) are failing to
compile with gcc 15.1.0.

The issue can be reproduced with the commands:

    cat >.config <<EOF
    BR2_aarch64=y
    BR2_TOOLCHAIN_EXTERNAL=y
    BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
    BR2_PACKAGE_XORG7=y
    BR2_PACKAGE_XSERVER_XORG_SERVER=y
    EOF
    make olddefconfig
    make xserver_xorg-server

which outputs the compilation error:

auth.c: In function 'GenerateRandomData': auth.c:320:5: warning:
ignoring return value of 'read' declared with attribute
'warn_unused_result' [-Wunused-result]   320 |     read(fd, buf, len);
|     ^~~~~~~~~~~~~~~~~~ In file included from
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/string.h:548,
from
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/X11/Xos.h:62,
from
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/X11/Xtrans/Xtrans.h:54,
from
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/X11/Xtrans/Xtransint.h:79,
from
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/X11/Xtrans/transport.c:55,
from xstrans.c:17: In function 'strncpy',     inlined from
'_XSERVTransGetHostname' at
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/X11/Xtrans/Xtrans.c:1351:5,
inlined from '_XSERVTransConvertAddress' at
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/X11/Xtrans/Xtransutil.c:188:12:
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/bits/string_fortified.h:100:10:
error: '__builtin_strncpy' offset [130, 319] from the object at 'name'
is out of the bounds of referenced subobject 'nodename' with type
'char[65]' at offset 65 [-Werror=array-bounds=]   100 |   return
__builtin___strncpy_chk (__dest, __src, __len,       |
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   101 |
__glibc_objsize (__dest));       |
~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/X11/Xtrans/Xtransint.h:105:
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/sys/utsname.h:
In function '_XSERVTransConvertAddress':
/home/wbx/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/include/sys/utsname.h:54:10:
note: subobject 'nodename' declared here    54 |     char
nodename[_UTSNAME_NODENAME_LENGTH];       |          ^~~~~~~~ cc1: some
warnings being treated as errors make[2]: *** [Makefile:696: xstrans.lo]
Error 1 make[2]: *** Waiting for unfinished jobs.... make[2]: Leaving
directory
'/home/wbx/buildroot/output/build/xserver_xorg-server-21.1.18/os'
make[1]: *** [Makefile:796: all-recursive] Error 1 make[1]: Leaving
directory '/home/wbx/buildroot/output/build/xserver_xorg-server-21.1.18'
make: *** [package/pkg-generic.mk:273:
/home/wbx/buildroot/output/build/xserver_xorg-server-21.1.18/.stamp_built]
Error 2

The update fixes the compile error.

See here for changes:
https://lists.x.org/archives/xorg/2025-March/061900.html

The COPYRIGHT was updated from 2005 to 2025.

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Julien: add commands to reproduce the issue]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8c539854dd)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:42:12 +02:00
Angelo Compagnucci 02ba72ee84 package/htpdate: fix shellcheck SC1090
Using /dev/null as file source because the package doesn't provide a default
systemv service configuration file.

Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
[Julien: remove S43htpdate .checkpackageignore entry
  to fix check-package error
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 1f2b459b56)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:41:38 +02:00
Thomas Devoogdt adaed18a7c package/fluent-bit: bump to 4.0.9
News:
 - https://fluentbit.io/announcements/v4.0.4/
 - https://fluentbit.io/announcements/v4.0.5/
 - https://fluentbit.io/announcements/v4.0.6/
 - https://fluentbit.io/announcements/v4.0.7/
 - https://fluentbit.io/announcements/v4.0.8/
 - https://fluentbit.io/announcements/v4.0.9/

Fixes:
 - https://autobuild.buildroot.org/results/770/770e9106a0c92f02e0f699505e69b35ac0e6cd41/build-end.log

   /home/buildroot/instance-0/output-1/build/fluent-bit-4.0.3/plugins/out_cloudwatch_logs/cloudwatch_api.c:1540:66: error: implicit declaration of function 'strcasestr'; did you mean 'strcasecmp'? [-Wimplicit-function-declaration]

   Fix commit: https://github.com/fluent/fluent-bit/pull/10452

Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 39afca752d)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:41:04 +02:00
Viacheslav Bocharov b2e212c91c package/rtl8822cs bump driver version to latest with support kernel 6.16
- Update driver for kernel 6.16+
- Update repository link

Signed-off-by: Viacheslav Bocharov <adeep@lexina.in>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 718b6ff826)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:40:54 +02:00
Giulio Benetti ded88f2810 package/xr819-xradio: bump to version 2025-08-08
With this patch package builds with Linux up to version 6.16

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c28daa7422)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:40:47 +02:00
Giulio Benetti 6890826a10 package/wilc-driver: fix build failure with Linux 6.16
Add a local patch pending upstream to fix build failure with Linux 6.16

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit df7d287c81)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:40:39 +02:00
Giulio Benetti 49fd9c44bf package/rtl8821cu: fix build failure with Linux 6.16
Add local patch pending upstream to fix build failure with Linux 6.16

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7c5f7bf89f)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:40:30 +02:00
Giulio Benetti 3fde9b525b package/rtl8723ds: bump to 2025-09-08 version
This version allows to build with Linux 6.16

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 09bc236707)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:40:21 +02:00
Giulio Benetti a788bace25 package/rtl8723bu: bump to 2025-09-08 version
This version allows to build with Linux 6.16

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit a89c248f79)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:40:14 +02:00
Bernd Kuhls 2672939650 package/libcurl: security bump version to 8.16.0
Changelog: https://curl.se/ch/8.16.0.html

Fixed CVEs:
CVE-2025-9086: https://curl.se/docs/CVE-2025-9086.html
CVE-2025-10148: https://curl.se/docs/CVE-2025-10148.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit fb5fb06ee5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:39:54 +02:00
Bernd Kuhls 5e23b2a785 package/kodi: Fix build with curl 8.16.0
curl 8.16.0 bumped the enums to long, see
https://github.com/curl/curl/pull/18054

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 3ed6c8e727)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:36:16 +02:00
Peter Korsgaard 5491014782 package/fatcat: add upstream patch to fix CMake 4 compatibility
Add upstream patch fixing cmake 4 compatibility:

CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
  Compatibility with CMake < 3.5 has been removed from CMake.

Fixes:

 https://autobuild.buildroot.org/results/548e662429e7cf91bd48e447345374c6734f1de7/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 013565ecfc)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:35:28 +02:00
Titouan Christophe ee07983cc2 package/python-django: security bump to v5.2.6
See the release notes:
- https://docs.djangoproject.com/en/5.2/releases/5.2.6/
- https://docs.djangoproject.com/en/5.2/releases/5.2.5/

This fixes the following vulnerability:
- CVE-2025-57833:
    An issue was discovered in Django 4.2 before 4.2.24, 5.1 before
    5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL
    injection in column aliases, using a suitably crafted dictionary, with
    dictionary expansion, as the **kwargs passed QuerySet.annotate() or
    QuerySet.alias().
    https://www.cve.org/CVERecord?id=CVE-2025-57833

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a0797adf40)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:34:45 +02:00
Victor Krawiec 5ebf95bfa3 package/llvm-project/lld: fix broken symlink in SDK
The symlink bin/lld -> $(GNU_TARGET_NAME)/bin/lld is broken inside a
SDK containing host-lld package. The symlink still points to the
location of lld inside the build's host folder instead of the location
of lld inside the SDK. In consequence GCC is not able to find lld
linker. Changing the symlink to be relative during host-lld
installation fixes the problem.

Signed-off-by: Victor Krawiec <victor.krawiec@arturia.com>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit 289dd6bd76)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:31:30 +02:00
Fiona Klute (WIWA) d142844ce3 package/docker-engine: depend on cgroup v2 and kernel >=5.2 without systemd
Without systemd package/docker-engine requires another way to mount
/sys/fs/cgroup, so far provided by BR2_PACKAGE_CGROUPFS_MOUNT for
cgroup v1. Replace this with BR2_PACKAGE_CGROUPFS_V2_MOUNT for cgroup
v2 support. 5.2 is the minimum recommended version for cgroup v2
support according to the Docker documentation: "v4.15 or later (v5.2
or later is recommended)" [1].

Depending on the selected container runtime users may need to adjust
kernel configurations to enable options required by that runtime with
cgroup v2 (e.g. CONFIG_CGROUP_BPF for runc).

Propagate dependencies accordingly: The Docker btrfs filesystem driver
does not need a separate and lower minimum headers version,
package/mender-update-modules needs to apply the new "depends on".

[1] https://docs.docker.com/engine/containers/runmetrics/#running-docker-on-cgroup-v2

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit b07b0bb456)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:30:57 +02:00
Fiona Klute (WIWA) eb399a6825 support/testing/tests/package/test_docker_compose.py: update kernel & VM CPU
Since commit 947dbc92a2 the Bootlin
stable toolchain uses headers 5.4, which can lead to build outputs
incompatible with older kernels. Update to the latest 5.4 kernel to
avoid this. The kernel config is updated according to the requirements
of current Docker, runc, and crun.

Additionally switch the CPU of the test VM to Haswell, to avoid
dockerd failing to start with a "This program can only be run on AMD64
processors with v3 microarchitecture support" error.

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit efe00fb3fb)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:25:11 +02:00
Alexis Lothoré e11497dacb package/php-lua: fix build with lua < 5.2
php-lua fails to build in buildroot 2025.08-rc3 on the following error:

in file included from [...]/usr/include/php/Zend/zend.h:32,
                 from [...]/usr/include/php/main/php.h:31,
                 from [...]/build/php-lua-2.0.7/lua.c:24:
[...]/build/php-lua-2.0.7/lua.c: In function ‘php_lua_write_property’:
[...]/build/php-lua-2.0.7/lua.c:247:37:
error: ‘val’ undeclared (first use in this function); did you mean
‘zval’?
  247 |         lua_pushlstring(L, ZSTR_VAL(val), ZSTR_LEN(val));
      |                                     ^~~
[...]/usr/include/php/Zend/zend_string.h:66:26:
note: in definition of macro ‘ZSTR_VAL’
   66 | #define ZSTR_VAL(zstr)  (zstr)->val
      |                          ^~~~
[...]/build/php-lua-2.0.7/lua.c:247:37:
note: each undeclared identifier is reported only once for each function
it appears in
  247 |         lua_pushlstring(L, ZSTR_VAL(val), ZSTR_LEN(val));
      |                                     ^~~
[...]/usr/include/php/Zend/zend_string.h:66:26:
note: in definition of macro ‘ZSTR_VAL’
   66 | #define ZSTR_VAL(zstr)  (zstr)->val
      |                          ^~~~
make[2]: *** [Makefile:214: lua.lo] Error 1

The issue triggers only if lua interpreter version is lower than 5.2. In
this case,  php_lua_write_property calls ZSTR_VAL on the wrong variable.

Fix php-lua build by calling ZSTR_VAL on the correct variable.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/11271124501 (TestPhpLuaLuajit)

Suggested-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com>
[Romain: add link to failing TestPhpLuaLuajit]
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit a1daf153bf)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:22:13 +02:00
Bryan Brattlof 7129e735be boot/ti-k3-boot-firmware: switch to github mirror
The git.ti.com cgit server continues to be plagued with reliability
issues which are reportedly from heavy bot traffic. To combat this the
system administrators have removed the archived downloads feature from
this server.

Switch to TI's Github mirror so new downloads continue to be possible.

Signed-off-by: Bryan Brattlof <bb@ti.com>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
(cherry picked from commit ebf0131e3e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-09-18 10:19:03 +02:00
Titouan Christophe 88c3dac5dd {linux, linux-headers}: bump 6.16.x, 6.12.x, 6.6.x, 6.1.x, 5.15.x, 5.10.x, 5.4.x series
Update the latest kernel releases to:
 - 6.16.5 -> 6.16.7
 - 6.12.45 -> 6.12.47
 - 6.6.104 -> 6.6.106
 - 6.1.150 -> 6.1.152
 - 5.15.191 -> 5.15.193
 - 5.10.242 -> 5.10.244
 - 5.4.298 -> 5.4.299

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2025-09-17 16:26:12 +02:00
4043 changed files with 36930 additions and 29871 deletions
+169 -5
View File
@@ -1,10 +1,15 @@
board/amarula/vyasa/post-build.sh Shellcheck
board/andes/ae350/patches/uboot/0001-mmc-ftsdc010_mci-Support-DTS-of-ftsdc010-driver-for-.patch lib_patch.Upstream
board/andes/ae350/patches/uboot/0002-spl-Align-device-tree-blob-address-at-8-byte-boundar.patch lib_patch.Upstream
board/andes/ae350/post-build.sh Shellcheck
board/arcturus/aarch64-ucls1012a/post-build.sh Shellcheck
board/arcturus/aarch64-ucls1012a/post-image.sh Shellcheck
board/aspeed/common/post-image.sh Shellcheck
board/asus/tinker/post-build.sh Shellcheck
board/atmel/flasher.sh Shellcheck
board/beagleboard/beaglebone-qt5/patches/linux/0001-keep-jtag-clock-alive-for-debugger.patch lib_patch.Upstream
board/beagleboard/beaglebone/post-build.sh Shellcheck
board/beagleboard/beagleboneai/post-build.sh Shellcheck
board/boundarydevices/common/post-build.sh Shellcheck
board/boundarydevices/common/post-image.sh Shellcheck
board/broadcom/northstar/post-image.sh Shellcheck
@@ -32,6 +37,9 @@ board/octavo/osd32mp1-brk/patches/uboot/0001-Add-OSD32MP1-BRK-device-tree-suppor
board/octavo/osd32mp1-brk/patches/uboot/0002-Add-OSD32MP1-BRK-build-config.patch lib_patch.NumberedSubject lib_patch.Upstream
board/octavo/osd32mp1-red/patches/uboot/0001-Add-OSD32MP1-RED-Device-Tree-support.patch lib_patch.NumberedSubject lib_patch.Upstream
board/octavo/osd32mp1-red/patches/uboot/0002-configs-stm32mp15_trusted_defconfig-disable-environm.patch lib_patch.NumberedSubject lib_patch.Upstream
board/olimex/a13_olinuxino/post-build.sh Shellcheck
board/olimex/a20_olinuxino/post-build.sh Shellcheck
board/olimex/a33_olinuxino/post-build.sh Shellcheck
board/olpc/post-build.sh Shellcheck
board/orangepi/common/post-build.sh Shellcheck
board/orangepi/orangepi-zero/patches/linux/0001-ARM-dts-orange-pi-zero-interrupt-triggering-xr819.patch lib_patch.Upstream
@@ -71,9 +79,13 @@ boot/syslinux/0014-Fix-build-with-binutils-note-gnu-property-section.patch lib_p
boot/syslinux/0016-Workaround-multiple-definition-of-symbol-errors.patch lib_patch.Upstream
boot/syslinux/0017-Replace-builtin-strlen-that-appears-to-get-optimized.patch lib_patch.Upstream
configs/am574x_idk_defconfig lib_defconfig.ForceCheckHash
configs/andes_ae350_45_defconfig lib_defconfig.ForceCheckHash
configs/arcturus_ucls1012a_defconfig lib_defconfig.ForceCheckHash
configs/arcturus_ucp1020_defconfig lib_defconfig.ForceCheckHash
configs/aspeed_ast2500evb_defconfig lib_defconfig.ForceCheckHash
configs/aspeed_ast2600evb_defconfig lib_defconfig.ForceCheckHash
configs/asus_tinker-s_rk3288_defconfig lib_defconfig.ForceCheckHash
configs/asus_tinker_rk3288_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d27_som1_ek_mmc_dev_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d2_xplained_mmc_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d2_xplained_mmc_dev_defconfig lib_defconfig.ForceCheckHash
@@ -87,6 +99,8 @@ configs/atmel_sama5d4_xplained_mmc_defconfig lib_defconfig.ForceCheckHash
configs/atmel_sama5d4_xplained_mmc_dev_defconfig lib_defconfig.ForceCheckHash
configs/avenger96_defconfig lib_defconfig.ForceCheckHash
configs/avnet_rzboard_v2l_defconfig lib_defconfig.ForceCheckHash
configs/bananapi_m2_berry_defconfig lib_defconfig.ForceCheckHash
configs/bananapi_m2_ultra_defconfig lib_defconfig.ForceCheckHash
configs/bananapi_m2_zero_defconfig lib_defconfig.ForceCheckHash
configs/broadcom_northstar_defconfig lib_defconfig.ForceCheckHash
configs/canaan_kd233_defconfig lib_defconfig.ForceCheckHash
@@ -107,9 +121,11 @@ configs/imx6ullevk_defconfig lib_defconfig.ForceCheckHash
configs/imx6ulpico_defconfig lib_defconfig.ForceCheckHash
configs/imx7dpico_defconfig lib_defconfig.ForceCheckHash
configs/imx8mqevk_defconfig lib_defconfig.ForceCheckHash
configs/imxrt1050-evk_defconfig lib_defconfig.ForceCheckHash
configs/khadas_vim3_defconfig lib_defconfig.ForceCheckHash
configs/kontron_bl_imx8mm_defconfig lib_defconfig.ForceCheckHash
configs/kontron_smarc_sal28_defconfig lib_defconfig.ForceCheckHash
configs/mangopi_mq1rdw2_defconfig lib_defconfig.ForceCheckHash
configs/mender_x86_64_efi_defconfig lib_defconfig.ForceCheckHash
configs/microchip_sam9x60ek_mmc_defconfig lib_defconfig.ForceCheckHash
configs/microchip_sam9x60ek_mmc_dev_defconfig lib_defconfig.ForceCheckHash
@@ -131,12 +147,20 @@ configs/nitrogen8mm_defconfig lib_defconfig.ForceCheckHash
configs/nitrogen8mn_defconfig lib_defconfig.ForceCheckHash
configs/nitrogen8mp_defconfig lib_defconfig.ForceCheckHash
configs/odroidc2_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a10_olinuxino_lime_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a13_olinuxino_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a20_olinuxino_micro_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a33_olinuxino_defconfig lib_defconfig.ForceCheckHash
configs/olimex_a64_olinuxino_defconfig lib_defconfig.ForceCheckHash
configs/olpc_xo175_defconfig lib_defconfig.ForceCheckHash
configs/olpc_xo1_defconfig lib_defconfig.ForceCheckHash
configs/orangepi_pc2_defconfig lib_defconfig.ForceCheckHash
configs/orangepi_zero_plus_defconfig lib_defconfig.ForceCheckHash
configs/pc_x86_64_bios_defconfig lib_defconfig.ForceCheckHash
configs/pc_x86_64_efi_defconfig lib_defconfig.ForceCheckHash
configs/pine64_defconfig lib_defconfig.ForceCheckHash
configs/pine64_pinecube_defconfig lib_defconfig.ForceCheckHash
configs/pine64_star64_defconfig lib_defconfig.ForceCheckHash
configs/s6lx9_microboard_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_lichee_rv_defconfig lib_defconfig.ForceCheckHash
configs/sipeed_lichee_rv_dock_defconfig lib_defconfig.ForceCheckHash
@@ -164,6 +188,7 @@ configs/uevm5432_defconfig lib_defconfig.ForceCheckHash
configs/visionfive_defconfig lib_defconfig.ForceCheckHash
configs/wandboard_defconfig lib_defconfig.ForceCheckHash
configs/warp7_defconfig lib_defconfig.ForceCheckHash
linux/5.10.162-cip24-rt10/0001-arch-microblaze-mm-init.c-fix-build.patch lib_patch.Upstream
package/18xx-ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
package/4th/0001-avoid-regen-during-install.patch lib_patch.Upstream
package/acl/0001-Build-with-old-GCC-versions.patch lib_patch.Upstream
@@ -172,6 +197,11 @@ package/alchemy/0001-toolchains-remove-hash-style-management.patch lib_patch.Ups
package/alsamixergui/0001-misc-fixes.patch lib_patch.Sob lib_patch.Upstream
package/alsamixergui/0002-configure-fix-detection-of-fltk-libs.patch lib_patch.Upstream
package/am335x-pru-package/0001-install-does-not-build.patch lib_patch.Upstream
package/am33x-cm3/0001-fix-makefile.patch lib_patch.Upstream
package/am33x-cm3/0002-Makefile-unconditionally-disable-SSP.patch lib_patch.Upstream
package/am33x-cm3/0003-Makefile-unconditionally-disable-PIE.patch lib_patch.Upstream
package/am33x-cm3/0004-Makefile-add-fno-builtin.patch lib_patch.Upstream
package/am33x-cm3/S93-am335x-pm-firmware-load lib_sysv.Variables
package/android-tools/0001-Fix-makefiles-for-out-of-tree-build.patch lib_patch.Upstream
package/android-tools/0002-Fix-adbd-for-non-Ubuntu-systems.patch lib_patch.Upstream
package/android-tools/0004-Fix-build-issue-with-musl.patch lib_patch.Upstream
@@ -183,6 +213,9 @@ package/android-tools/0009-Fix-makefiles-for-out-of-tree-ext4_utils-build.patch
package/android-tools/0010-adb-added-patch-for-openssl-1.1.0-compatibility.patch lib_patch.Upstream
package/aoetools/0001-Change-shell-script-interpreter-from-bin-bash-to-bin.patch lib_patch.Upstream
package/apache/0001-cross-compile.patch lib_patch.Upstream
package/apache/S50apache Shellcheck lib_sysv.Indent lib_sysv.Variables
package/apitrace/0001-thirdparty-libbacktrace-backtrace-h-include-config.h.patch lib_patch.Upstream
package/apitrace/0002-gltrace-Avoid-__libc_dlsym-and-__libc_dlopen_mode-on-GLIBC-2-34.patch lib_patch.Upstream
package/apr-util/0001-remove-checkapr.patch lib_patch.Upstream
package/apr/0001-sys-param-h.patch lib_patch.Upstream
package/apr/0002-Revert-Backport-r1872164.-Fix-the-name-of-libtool-wh.patch lib_patch.Upstream
@@ -196,17 +229,25 @@ package/asterisk/0004-install-samples-need-the-data-files.patch lib_patch.Upstre
package/at/0001-Makefile.in-fix-make-install-for-non-root-don-t-stri.patch lib_patch.Upstream
package/at/S99at lib_sysv.Indent lib_sysv.Variables
package/attr/0001-build-with-older-GCCs.patch lib_patch.Upstream
package/aufs-util/0001-remove-user-settings.patch lib_patch.Upstream
package/aufs-util/0002-no-check-ver.patch lib_patch.Upstream
package/aufs-util/0003-no-strip-lib.patch lib_patch.Upstream
package/aumix/0001-fix-incorrect-makefile-am.patch lib_patch.Upstream
package/autoconf/0001-dont-add-dirty-to-version.patch lib_patch.Upstream
package/automake/0001-noman.patch lib_patch.Upstream
package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch lib_patch.Upstream
package/avahi/S05avahi-setup.sh lib_sysv.Indent lib_sysv.Variables
package/avahi/S50avahi-daemon lib_sysv.Indent lib_sysv.Variables
package/babeld/S50babeld Shellcheck lib_sysv.Indent lib_sysv.Variables
package/babeltrace2/0001-configure-simplify-warning-flags-detection.patch lib_patch.Upstream
package/bash/0001-input.h-add-missing-include-on-stdio.h.patch lib_patch.Upstream
package/bash/0002-parse.y-fix-compilation-for-non-multibyte-builds.patch lib_patch.Upstream
package/bc/0001-bc-use-MAKEINFO-variable-for-docs.patch lib_patch.Upstream
package/bc/0002-notice-read-and-write-errors-on-input-and-output.patch lib_patch.Upstream
package/bc/0003-dc-fix-exit-code-of-q-command.patch lib_patch.Upstream
package/bc/0004-no-gen-libmath.patch lib_patch.Upstream
package/bcache-tools/0001-Don-t-inline-crc64-for-gcc-5-compatability.patch lib_patch.Upstream
package/bctoolbox/0001-Fix-Libs.private-flags-for-mbedtls.patch lib_patch.Upstream
package/bcusdk/0002-eibd-fix-endless-recursion-when-using-USB-backends.patch lib_patch.Upstream
package/bearssl/0001-Fix-missing-objdir-dependency.patch lib_patch.Upstream
package/benejson/0001-c-std.patch lib_patch.Upstream
@@ -248,10 +289,12 @@ package/cgroupfs-mount/S30cgroupfs Shellcheck lib_sysv.Indent lib_sysv.Variables
package/chipmunk/0001-Fix-build-failure-on-musl.patch lib_patch.Upstream
package/chrony/S49chronyd lib_sysv.Variables
package/cmake/0001-rename-cmake-rootfile.patch lib_patch.Upstream
package/cmocka/0001-Don-t-redefine-uintptr_t.patch lib_patch.Upstream
package/collectd/0001-src-netlink.c-remove-REG_NOERROR.patch lib_patch.Upstream
package/connman/S45connman lib_sysv.Variables
package/copas/0001-Do-not-load-coxpcall-for-LuaJIT.patch lib_patch.Upstream
package/coremark-pro/coremark-pro.sh.in Shellcheck
package/cppdb/0001-mysql-library-suffix.patch lib_patch.Upstream
package/cpulimit/0001-Fix-crash-and-compiler-warnings.patch lib_patch.Upstream
package/cpulimit/0002-Remove-sys-sysctl.h-and-add-missing-libgen.h-include.patch lib_patch.Upstream
package/cpulimit/0003-Fix-an-infrequent-crash.patch lib_patch.Upstream
@@ -268,6 +311,7 @@ package/curlftpfs/0001-fix-CURLOPT_INFILESIZE.patch lib_patch.Sob lib_patch.Upst
package/curlftpfs/0002-free_ftpfs_file-memleak-fix.patch lib_patch.Sob lib_patch.Upstream
package/curlftpfs/0003-nocache-memleak-fix.patch lib_patch.Sob lib_patch.Upstream
package/curlftpfs/0004-fix-musl-build-off-t.patch lib_patch.Upstream
package/cutelyst/0001-server-CMakeLists.txt-don-t-override-CMAKE_EXE_LINKE.patch lib_patch.Upstream
package/cwiid/0001-wmdemo-fix-linking-by-adding-the-missing-lbluetooth-.patch lib_patch.Upstream
package/cwiid/0002-configure-make-wmgui-build-optional.patch lib_patch.Upstream
package/dahdi-tools/0001-no-build-docs.patch lib_patch.Upstream
@@ -282,6 +326,7 @@ package/davfs2/0001-src-Makefile.am-do-not-hardcode-fstack-protector-str.patch l
package/dbus-cpp/0001-gcc4.7.patch lib_patch.Upstream
package/dbus-cpp/0002-cross-compile-tools.patch lib_patch.Upstream
package/dbus-cpp/0003-src-pipe.c-fix-build-error-with-gcc-7.x.patch lib_patch.Upstream
package/dbus/S30dbus Shellcheck lib_sysv.Indent lib_sysv.TrailingSpace lib_sysv.Variables
package/dc3dd/0001-no_man.patch lib_patch.Upstream
package/dc3dd/0002-fix-autoreconf.patch lib_patch.Upstream
package/dc3dd/0003-fix-for-glibc-2.28.patch lib_patch.Upstream
@@ -291,10 +336,15 @@ package/dhcp/S80dhcp-relay Shellcheck lib_sysv.Variables
package/dhcp/S80dhcp-server Shellcheck lib_sysv.Variables
package/dhcp/dhclient-script Shellcheck lib_shellscript.TrailingSpace
package/dhcpcd/S41dhcpcd lib_sysv.Indent lib_sysv.Variables
package/dillo/0001-usr-local-include.patch lib_patch.Upstream
package/dillo/0002-Fix-openssl-detection.patch lib_patch.Upstream
package/dillo/0004-fix-build-with-gcc-10.patch lib_patch.Upstream
package/dmalloc/0001-configure-fix-build-on-mips.patch lib_patch.Upstream
package/dmalloc/0003-configure-allow-overriding-some-tests.patch lib_patch.Upstream
package/dmalloc/0004-Makefile-use-the-configure-detected-or-user-supplied.patch lib_patch.Upstream
package/dmalloc/0005-configure-use-LD-instead-of-hard-coding-ld.patch lib_patch.Upstream
package/dmraid/0001-fix-compilation-under-musl.patch lib_patch.Upstream
package/dmraid/S20dmraid lib_sysv.Variables
package/docopt-cpp/0001-only-build-one-target-use-BUILD_SHARED_LIBS-where-appropriate.patch lib_patch.Upstream
package/domoticz/S99domoticz Shellcheck
package/dovecot/0001-auth-Fix-handling-passdbs-with-identical-driver-args.patch lib_patch.Upstream
@@ -306,12 +356,18 @@ package/dt/0002-dt-default-source-define.patch lib_patch.Upstream
package/dtc/0001-Fix-include-guards-for-older-kernel-u-boot-sources.patch lib_patch.Upstream
package/dvblast/0001-missing-lm.patch lib_patch.Upstream
package/dvblast/0002-fix-int-types.patch lib_patch.Upstream
package/dvbsnoop/0001-musl-types-h.patch lib_patch.Upstream
package/dvdrw-tools/0001-limits.h.patch lib_patch.Upstream
package/dvdrw-tools/0002-Include-sysmacros.h-to-compile-with-newer-gcc.patch lib_patch.Upstream
package/earlyoom/0001-main.c-fix-build-with-kernel-4.3.patch lib_patch.Upstream
package/earlyoom/S02earlyoom Shellcheck lib_sysv.Indent
package/ebtables/0001-replace-ebtables-save-perl-script-with-bash.patch lib_patch.Upstream
package/ecryptfs-utils/0001-musl.patch lib_patch.Upstream
package/ecryptfs-utils/0002-openssl110.patch lib_patch.Upstream
package/ecryptfs-utils/0003-fix-parallel-build-issue.patch lib_patch.Upstream
package/efl/0001-ecore_evas-engines-drm-meson.build-use-gl_deps-as-en.patch lib_patch.Upstream
package/efl/0002-ecore_evas-engines-drm-meson.build-fix-gl_drm-includ.patch lib_patch.Upstream
package/efl/0003-ecore_fb-fix-build-with-tslib.patch lib_patch.Upstream
package/eigen/0001-Adds-new-CMake-Options-for-controlling-build-compone.patch lib_patch.Upstream
package/elftosb/0001-fixes-includes.patch lib_patch.Upstream
package/elftosb/0002-force-cxx-compiler.patch lib_patch.Upstream
@@ -328,6 +384,8 @@ package/exim/0001-Build-buildconfig-for-the-host.patch lib_patch.Upstream
package/exim/0002-Don-t-make-backup-copies-of-installed-files.patch lib_patch.Upstream
package/exim/0003-Skip-version-check-and-symlink-installation.patch lib_patch.Upstream
package/exim/S86exim lib_sysv.Indent lib_sysv.Variables
package/expect/0001-enable-cross-compilation.patch lib_patch.Upstream
package/expect/0002-allow-tcl-build-directory.patch lib_patch.Upstream
package/fail2ban/S60fail2ban Shellcheck lib_sysv.Variables
package/fakedate/fakedate Shellcheck
package/falcosecurity-libs/0001-cmake-Permit-setting-GRPC_CPP_PLUGIN.patch lib_patch.Upstream
@@ -372,6 +430,7 @@ package/gcc/8.4.0/0001-xtensa-fix-PR-target-91880.patch lib_patch.Upstream
package/gcc/8.4.0/0002-Revert-re-PR-target-92095-internal-error-with-O1-mcp.patch lib_patch.Upstream
package/gcc/8.4.0/0003-libsanitizer-Remove-cyclades-from-libsanitizer.patch lib_patch.Upstream
package/gcc/8.4.0/0004-disable-split-stack-for-non-thread-builds.patch lib_patch.Upstream
package/gcr/0001-meson-Fix-unknown-kw-argument-in-gnome.generate_gir.patch lib_patch.Upstream
package/gdb/14.2/0001-ppc-ptrace-Define-pt_regs-uapi_pt_regs-on-GLIBC-syst.patch lib_patch.Upstream
package/gdb/14.2/0002-sh-ptrace-Define-pt_-dsp-regs-uapi_pt_-dsp-regs-on-G.patch lib_patch.Upstream
package/gdb/14.2/0003-use-asm-sgidefs.h.patch lib_patch.Upstream
@@ -413,9 +472,12 @@ package/gob2/0001-dont-include-from-prefix.patch lib_patch.Upstream
package/gobject-introspection/0001-Add-rpath-links-to-ccompiler.patch lib_patch.Upstream
package/gpsd/S50gpsd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/gptfdisk/0001-gptcurses-partially-revert-Tweaks-for-building-on-th.patch lib_patch.Upstream
package/graphite2/0001-don-t-install-a-libtool-file-with-static-library.patch lib_patch.Upstream
package/grpc/0003-disable-unconditionally-downloading-api-repos.patch lib_patch.Upstream
package/gstreamer1/gstd/0001-Don-t-require-gstd-check-user-xenv.sh-for-systemd-se.patch lib_patch.Upstream
package/guile/0001-calculate-csqrt_manually.patch lib_patch.Upstream
package/guile/0002-Makefile.am-fix-build-without-makeinfo.patch lib_patch.Upstream
package/gumbo-parser/0001-configure.ac-fix-build-without-C.patch lib_patch.Upstream
package/gutenprint/0001-use-pregen-xmli18n-header.patch lib_patch.Upstream
package/gutenprint/0002-cups-support-replaces-static-with-static-libtool-lib.patch lib_patch.Upstream
package/harfbuzz/0001-meson.build-check-for-pthread.h.patch lib_patch.Upstream
@@ -431,8 +493,9 @@ package/ibrcommon/0001-ibrcommon-data-File.cpp-support-POSIX-basename-call.patch
package/ibrcommon/0002-ibrcommon-added-openssl-1.1-compatibility-264.patch lib_patch.Upstream
package/ibrcommon/0003-ibrcommon-ssl-gcm-fix-static-build-with-openssl.patch lib_patch.Upstream
package/icu/0001-dont-build-static-dynamic-twice.patch lib_patch.Upstream
package/icu/0002-link-icudata-as-data-only.patch lib_patch.Upstream
package/icu/0003-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
package/icu/0002-workaround-toolchain-bugs.patch lib_patch.Upstream
package/icu/0003-link-icudata-as-data-only.patch lib_patch.Upstream
package/icu/0004-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
package/ifmetric/0001-Fix-issue-NETLINK-Packet-too-small-or-truncated-92-1.patch lib_patch.Upstream
package/ifplugd/0001-cross.patch lib_patch.Sob lib_patch.Upstream
package/ifplugd/0002-fix-headers.patch lib_patch.Sob lib_patch.Upstream
@@ -470,6 +533,7 @@ package/irqbalance/S13irqbalance Shellcheck lib_sysv.Indent lib_sysv.Variables
package/irrlicht/0001-override-CPPFLAGS-CXXFLAGS-and-CFLAGS-in-Makefile.patch lib_patch.Upstream
package/irrlicht/0002-makefile-override-LDFLAGS-and-remove-obsolete-X11R6-.patch lib_patch.Upstream
package/iucode-tool/S00iucode-tool lib_sysv.Variables
package/iwd/S40iwd Shellcheck
package/janus-gateway/0001-disable-ssp.patch lib_patch.Upstream
package/kexec-lite/0001-clean-restart.patch lib_patch.Upstream
package/keyutils/0001-fix-install-rule.patch lib_patch.Upstream
@@ -481,6 +545,7 @@ package/lcdproc/0001-LCDd.conf.patch lib_patch.Upstream
package/lcdproc/0002-Add-missing-ioctl-header.patch lib_patch.Upstream
package/lcdproc/0003-Fixcompilation-with-GCC-10-x.patch lib_patch.Upstream
package/leafnode2/0001-cross_makefile.patch lib_patch.Upstream
package/let-me-create/0001-fix-build-with-musl-C-library.patch lib_patch.Upstream
package/leveldb/0001-Fix-compilation-with-g-4.8.2.patch lib_patch.Upstream
package/leveldb/0002-CMake-install-libmemenv.a.patch lib_patch.Upstream
package/leveldb/0003-CMakeLists.txt-check-for-atomic-library.patch lib_patch.Upstream
@@ -494,7 +559,11 @@ package/libavl/0001-fix-makefile.patch lib_patch.Upstream
package/libb64/0001-Integer-overflows.patch lib_patch.Upstream
package/libb64/0002-Initialize-C++-objects.patch lib_patch.Upstream
package/libcdaudio/0001-libcdaudio-enable-autoreconf.patch lib_patch.Upstream
package/libcgi/0001-CMakeLists.txt-honour-BUILD_TESTING.patch lib_patch.Upstream
package/libcgicc/0001-disable-documentation-option.patch lib_patch.Sob lib_patch.Upstream
package/libconfuse/0001-Fix-163-unterminated-username-used-with-getpwnam.patch lib_patch.Upstream
package/libcorrect/0002-CMakeLists.txt-conditionally-use-fsanitize-address.patch lib_patch.Upstream
package/libcuefile/0001-fix-static-link.patch lib_patch.Upstream
package/libdaemon/0001-testd-use-unistd-h-instead-of-sys-unistd-h.patch lib_patch.Upstream
package/libdnet/0001-python-makefile.patch lib_patch.Upstream
package/libdrm/0001-tests-meson.build-disable-nouveau-tests-for-static-b.patch lib_patch.Upstream
@@ -504,6 +573,10 @@ package/libedit/0001-check-bsd-functions-in-libbsd.patch lib_patch.Upstream
package/libevent/0001-Don-t-define-BIO_get_init-for-LibreSSL-3-5.patch lib_patch.Upstream
package/libffi/0001-Fix-use-of-compact-eh-frames-on-MIPS.patch lib_patch.Upstream
package/libfm/0001-modules-fix-cross-compilation.patch lib_patch.Upstream
package/libfreeimage/0001-no-root-install.patch lib_patch.Upstream
package/libfreeimage/0002-fix-cpuid-x86.patch lib_patch.Upstream
package/libfreeimage/0003-fix-big-endian-os.patch lib_patch.Upstream
package/libfreeimage/0004-fixed-C-11-warnings.patch lib_patch.Upstream
package/libftdi/0001-pkgconfig_libusb.patch lib_patch.Sob lib_patch.Upstream
package/libftdi/0002-libftdi.pc-requires-libusb-fix-static-build.patch lib_patch.Sob lib_patch.Upstream
package/libfuse/0001-fix-aarch64-build.patch lib_patch.Upstream
@@ -511,8 +584,12 @@ package/libfuse/0002-util-ulockmgr_server-c-conditionally-define-closefrom-fix-g
package/libgcrypt/0001-configure.ac-add-an-option-to-disable-tests.patch lib_patch.Upstream
package/libgpiod/0001-build-add-a-configure-switch-for-building-examples.patch lib_patch.Upstream
package/libgsm/0001-Misc-fixes-from-Archlinux.patch lib_patch.Upstream
package/libgtk2/0001-reduce-dependencies.patch lib_patch.Upstream
package/libgtk3/0001-Remove-Gdk-dependency-from-gtk-encode-symbolic-svg.patch lib_patch.Upstream
package/libhdhomerun/0001-dont-strip.patch lib_patch.Upstream
package/libiio/S99iiod Shellcheck lib_sysv.Variables
package/libiqrf/0001-cmake-handle-static-library-and-find-required-thread.patch lib_patch.Upstream
package/libiqrf/0002-use-only-c-language.patch lib_patch.Upstream
package/libjson/0001-fix-broken-makefile.patch lib_patch.Upstream
package/libks/0001-CMakeLists.txt-honour-BUILD_TESTING.patch lib_patch.Upstream
package/liblinear/0001-build-static-lib.patch lib_patch.Upstream
@@ -534,6 +611,7 @@ package/libmpeg2/0003-fix-arm-detection.patch lib_patch.Upstream
package/libmpeg2/0004-fix-sparc.patch lib_patch.Upstream
package/libnetfilter_conntrack/0001-conntrack-fix-build-with-kernel-5-15-and-musl.patch lib_patch.Upstream
package/libnfc/0001-autotools-make-example-build-optional.patch lib_patch.Upstream
package/libnids/0001-libpcap-use-pkg-config.patch lib_patch.Upstream
package/libnss/0001-Bug-1801182-Allow-overriding-OS_ARCH-OS_TEST-and-OS_.patch lib_patch.Upstream
package/libodb-mysql/0001-fix-syntax-issue-while-checking-ldflags.patch lib_patch.Upstream
package/libodb-mysql/0002-mariadb-FTBFS-fix.patch lib_patch.Upstream
@@ -547,9 +625,11 @@ package/liboping/0005-src-oping.c-always-use-s-style-format-for-printf-sty.patch
package/libp11/0001-src-p11_attr.c-fix-build-with-gcc-4.8.patch lib_patch.Upstream
package/libpthsem/0001-fix-build-on-linux-3.x-host.patch lib_patch.Upstream
package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch lib_patch.Upstream
package/libroxml/0001-src-roxml_mem.h-add-missing-extern.patch lib_patch.Upstream
package/librsvg/0001-gdk-pixbuf-loader-Makefile.am-set-GDK_PIXBUF_MODULED.patch lib_patch.Upstream
package/librtlsdr/0001-Makefile.am-respect-DESTDIR-with-install-udev-rules.patch lib_patch.Upstream
package/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch lib_patch.Upstream
package/libsepol/0001-support-static-only.patch lib_patch.Upstream
package/libserial/0001-SerialPort.cpp-fix-build-when-size_t-is-an-unsigned-.patch lib_patch.Upstream
package/libserial/0002-SerialPort.cpp-don-t-use-high-baudrates-when-not-ava.patch lib_patch.Upstream
package/libshdata/0001-backend-Add-missing-include-files.patch lib_patch.Upstream
@@ -564,10 +644,14 @@ package/libsigrokdecode/0003-configure-ac-Use-python3-embed-pc-as-a-fallback.pat
package/libspatialindex/0001-allow-building-static-libs.patch lib_patch.Upstream
package/libspatialindex/0002-CMakeLists.txt-fix-CMAKE_BUILD_TYPE.patch lib_patch.Upstream
package/libsquish/0001-Makefile-add-f-option-for-ln-to-remove-existing-dest.patch lib_patch.Upstream
package/libsvg/0001-fix-expat-static-declaration.patch lib_patch.Upstream
package/libsvg/0002-Fix-undefined-symbol-png_set_gray_1_2_4_to_8.patch lib_patch.Upstream
package/libtalloc/0001-buildtools-wafsamba-add-disable-stack-protector-opti.patch lib_patch.Upstream
package/libtelnet/0001-fix-compilation-without-zlib.patch lib_patch.Upstream
package/libtheora/0001-link-libtheoradec.patch lib_patch.Upstream
package/libtomcrypt/0001-fix-CVE-2019-17362.patch lib_patch.Upstream
package/libtommath/0001-Build-test-bn_mp_set_double-c-on-more-platforms.patch lib_patch.Upstream
package/libtorrent/0001-libtorrent.pc.in-add-Libs.Private.patch lib_patch.Upstream
package/libubootenv/0001-src-CMakeLists.txt-do-not-force-the-build-of-a-share.patch lib_patch.Upstream
package/libuio/0001-configure.ac-set-automake-strictness-to-foreign.patch lib_patch.Upstream
package/liburcu/0001-Only-blacklist-ARM-gcc-4.8.0-and-4.8.1.patch lib_patch.Upstream
@@ -575,6 +659,9 @@ package/libvpx/0001-vpx_mem-vpx_mem.h-Fix-compilation-with-uClibc.patch lib_patc
package/libyuv/0001-i386-sse2.patch lib_patch.Upstream
package/lighttpd/0001-Modify-the-default-lighttpd-configuration-file-to-ha.patch lib_patch.Upstream
package/lighttpd/S50lighttpd Shellcheck lib_sysv.EmptyLastLine lib_sysv.Indent lib_sysv.Variables
package/linknx/0001-configure-ac-tweak-CPPUNIT-conditional.patch lib_patch.Upstream
package/linknx/0002-src-Makefile.am-fix-linking-with-log4cpp.patch lib_patch.Upstream
package/linphone/0001-src-core-paths-paths.cpp-fix-powerpc-build.patch lib_patch.Upstream
package/linux-zigbee/0001-test-serial-Remove-test-serial.patch lib_patch.Upstream
package/linux-zigbee/0002-addrdb-coord-config-parse.y-add-missing-time.h-inclu.patch lib_patch.Upstream
package/linuxptp/S65ptp4l Shellcheck lib_sysv.Indent
@@ -589,11 +676,14 @@ package/lm-sensors/0002-no-host-ldconfig.patch lib_patch.Upstream
package/lmbench/0001-scripts-build-use-bin-bash-as-shell.patch lib_patch.Upstream
package/lmbench/0002-src-Makefile-add-lmbench-to-list-of-executables.patch lib_patch.Upstream
package/lmbench/0003-TOO_LONG-100-usec-to-prevent-memsize-from-timingout-.patch lib_patch.Upstream
package/lmbench/0004-Fix-garbage-pointer-for-lat_rpc-S-localhost.patch lib_patch.Upstream
package/localedef/0002-relax-dependency-on-GCC-to-4.8-and-binutils-to-2.24.patch lib_patch.Upstream
package/lockdev/0001-Makefile-install-static-library-and-headers-separate.patch lib_patch.Upstream
package/lockfile-progs/0001-sus3v-legacy.patch lib_patch.Sob lib_patch.Upstream
package/lshw/0001-solve-Compile-error-when-g-version-is-less-than-5.patch lib_patch.Upstream
package/ltrace/0001-arm-plt.patch lib_patch.Upstream
package/ltrace/0002-sparc-add-missing-library.h-include.patch lib_patch.Upstream
package/ltrace/0003-configure.ac-fix-autoreconf-with-autoconf-2.70.patch lib_patch.Upstream
package/lttng-babeltrace/0001-tests-lib-Makefile.am-remove-unneeded-static-flag.patch lib_patch.Upstream
package/lttng-babeltrace/0002-configure.ac-fix-popt-static-build.patch lib_patch.Upstream
package/lttng-libust/0001-configure.ac-add-disable-tests.patch lib_patch.Upstream
@@ -628,6 +718,8 @@ package/matchbox-panel/0003-mb-applet-battery.patch lib_patch.Upstream
package/matchbox-startup-monitor/0001-true-false.patch lib_patch.Upstream
package/matchbox/0001-defaulttheme.patch lib_patch.Upstream
package/matchbox/0002-src-Fix-build-with-gcc-10.patch lib_patch.Upstream
package/mediastreamer/0001-src-videofilters-nowebcam.c-fix-build-without-ffmpeg.patch lib_patch.Upstream
package/mediastreamer/0002-Use-AV_INPUT_BUFFER_PADDING_SIZE-to-determine-paddin.patch lib_patch.Upstream
package/memstat/0001-PATH_MAX.patch lib_patch.Upstream
package/mender-connect/S43mender-connect Shellcheck
package/menu-cache/0001-Support-gcc10-compilation.patch lib_patch.Upstream
@@ -635,12 +727,17 @@ package/mesa3d-demos/0001-demos-makes-opengl-an-optional-component.patch lib_pat
package/meson-tools/0001-amlbootenc-gxl-remove-non-std-C-convention-in-for.patch lib_patch.Upstream
package/meson/0001-Prefer-ext-static-libs-when-default-library-static.patch lib_patch.Upstream
package/meson/0002-mesonbuild-dependencies-base.py-add-pkg_config_stati.patch lib_patch.Upstream
package/metacity/0001-add-libm-reference.patch lib_patch.Upstream
package/metacity/0002-gconf.patch lib_patch.Upstream
package/metacity/0003-mag-add-libm-reference.patch lib_patch.Upstream
package/mfgtools/0001-lnx_def.h-fix-conflicting-declaration-of-__time64_t.patch lib_patch.Upstream
package/mii-diag/0001-strchr.patch lib_patch.Sob lib_patch.Upstream
package/mini-snmpd/0001-linux.c-fix-musl-build.patch lib_patch.Upstream
package/minidlna/S60minidlnad Shellcheck lib_sysv.Indent lib_sysv.Variables
package/minissdpd/S50minissdpd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/modem-manager/S44modem-manager Shellcheck lib_sysv.Variables
package/mongrel2/0001-Do-not-run-tests.patch lib_patch.Upstream
package/mongrel2/0002-Fix-Makefiles-for-cross-compilation.patch lib_patch.Upstream
package/monit/0001-Do-not-force-building-a-statically-linked-binary.patch lib_patch.Upstream
package/mono-gtksharp3/0001-Fixes-MONO_PROFILE_ENTER_LEAVE-undeclared.patch lib_patch.Upstream
package/mono-gtksharp3/0002-Mono-compilation-error-branch.patch lib_patch.Upstream
@@ -653,6 +750,11 @@ package/mrouted/S41mrouted NotExecutable
package/mrp/S65mrp lib_sysv.Indent lib_sysv.Variables
package/mstpd/0001-bridge-stp.in-support-different-versions-of-pidof-13.patch lib_patch.Upstream
package/multipath-tools/S60multipathd Shellcheck
package/musepack/0001-shared.patch lib_patch.Upstream
package/musepack/0002-cmake-use-the-standard-CMake-flag-to-drive-the-share.patch lib_patch.Upstream
package/musepack/0003-include-fpu-control-with-glibc-only.patch lib_patch.Upstream
package/musepack/0004-missing-sys-select.patch lib_patch.Upstream
package/musepack/0005-fix-build-with-gcc-10.patch lib_patch.Upstream
package/musl/0001-avoid-kernel-if_ether.h.patch lib_patch.Upstream
package/musl/0002-package-musl-Make-scheduler-functions-Linux-compatib.patch lib_patch.Upstream
package/nano/0001-lib-getrandom.c-fix-build-with-uclibc-1.0.35.patch lib_patch.Upstream
@@ -703,6 +805,7 @@ package/nuttcp/0001-susv3-legacy.patch lib_patch.Upstream
package/nvidia-driver/0001-use-LDFLAGS.patch lib_patch.Upstream
package/octave/0001-Fix-BLAS-library-integer-size-detection.patch lib_patch.Upstream
package/ofono/S46ofono lib_sysv.Variables
package/ola/0001-ola-fix-compilation-with-musl-1-2-3.patch lib_patch.Upstream
package/olsr/0001-olsrd-migrate-to-using-bison-3.7.1.patch lib_patch.Upstream
package/olsr/0002-lib-pud-Makefile-fix-parallel-build.patch lib_patch.Upstream
package/olsr/0003-pud-adapt-to-API-changes-in-gpsd-3-20.patch lib_patch.Upstream
@@ -711,8 +814,8 @@ package/olsr/0006-build-patch-for-gpsd-3-25.patch lib_patch.Upstream
package/olsr/S50olsr Shellcheck lib_sysv.Indent lib_sysv.Variables
package/open-plc-utils/0001-Remove-OWNER-and-GROUPS-parameters-to-install.patch lib_patch.Upstream
package/open2300/0001-fix-makefile.patch lib_patch.Upstream
package/openjdk/17.0.12+7/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openjdk/21.0.4+7/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openjdk/17.0.9+9/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openjdk/21.0.1+12/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
package/openldap/0001-fix-bignum.patch lib_patch.Upstream
package/openldap/0002-disable-docs.patch lib_patch.Upstream
package/openntpd/S49ntp Shellcheck lib_sysv.Variables
@@ -720,6 +823,9 @@ package/openocd/0001-configure-enable-build-on-uclinux.patch lib_patch.Upstream
package/openpgm/0001-Rename-openpgm-5.2.pc.in.patch lib_patch.Upstream
package/openpgm/0002-openpgm-pgm-checksum.c-fix-build-with-32-bits-MMX.patch lib_patch.Upstream
package/openpgm/0003-fix-build-on-macOS-ARM.patch lib_patch.Upstream
package/openpowerlink/0001-install-the-stack-libraries-to-lib-subdirectory.patch lib_patch.Upstream
package/openpowerlink/0002-cmake-install-oplk-headers-files.patch lib_patch.Upstream
package/openpowerlink/0003-Add-top-level-CMakeLists.txt.patch lib_patch.Upstream
package/openrc/0001-init.d-sysctl.in-add-support-for-busybox-sysctl.patch lib_patch.Upstream
package/openrc/0002-sh-init.sh.Linux.in-change-run-lock-from-root-uucp-t.patch lib_patch.Upstream
package/openrc/0003-init.d-agetty-replace-sbin-agetty-by-sbin-getty.patch lib_patch.Upstream
@@ -745,7 +851,11 @@ package/opusfile/0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch li
package/owfs/S55owserver Shellcheck lib_sysv.Variables
package/owfs/S60owfs Shellcheck lib_sysv.Variables
package/owl-linux/0001-fix-for-linux-3.3.x.patch lib_patch.Upstream
package/patch/0001-Fix-segfault-with-mangled-rename-patch.patch lib_patch.Upstream
package/patch/0002-Allow-input-files-to-be-missing-for-ed-style-patches.patch lib_patch.Upstream
package/patch/0003-Fix-arbitrary-command-execution-in-ed-style-patches-.patch lib_patch.Upstream
package/patch/0004-Invoke-ed-directly-instead-of-using-the-shell.patch lib_patch.Upstream
package/patch/0005-Don-t-follow-symlinks-unless--follow-symlinks-is-given.patch lib_patch.Upstream
package/patchelf/0001-Add-option-to-make-the-rpath-relative-under-a-specif.patch lib_patch.Upstream
package/paxtest/0001-genpaxtest-move-log-location.patch lib_patch.Upstream
package/paxtest/0002-paxtest-page-alignment-ARM-and-NIOS2-arch.patch lib_patch.Upstream
@@ -761,14 +871,20 @@ package/perl-xml-libxml/0001-Makefile-PL.patch lib_patch.Upstream
package/php-geoip/0001-add-build-support-for-php8.patch lib_patch.Upstream
package/php-lua/0001-ZEND_ACC_ALLOW_STATIC-ZEND_ACC_STATIC-for-static-met.patch lib_patch.Upstream
package/php-lua/0002-php8-explicitly-declare-arginfo.patch lib_patch.Upstream
package/php-zmq/0001-updates-for-php7.4-and-php8.0.patch lib_patch.Upstream
package/php-zmq/0002-fix-for-php-7.3.patch lib_patch.Upstream
package/php-zmq/0003-fix-for-php-8.0.0beta2.patch lib_patch.Upstream
package/php/0001-acinclude.m4-don-t-unset-variables.patch lib_patch.Upstream
package/php/0002-iconv-tweak-iconv-detection.patch lib_patch.Upstream
package/php/0003-configure-disable-the-phar-tool.patch lib_patch.Upstream
package/php/0004-Call-apxs-with-correct-prefix.patch lib_patch.Upstream
package/php/0005-allow-opcache-cross-compiling.patch lib_patch.Upstream
package/pifmrds/0001-Makefile-cross-compile-friendly.patch lib_patch.Upstream
package/pifmrds/0002-Makefile-use-LDFLAGS.patch lib_patch.Upstream
package/pifmrds/0003-Makefile-fix-static-link.patch lib_patch.Upstream
package/pigpio/S50pigpio Shellcheck lib_sysv.Variables
package/pistache/0001-src-common-transport.cc-fallback-value-for-RUSAGE_TH.patch lib_patch.Upstream
package/pistache/0002-src-server-listener.cc-fix-libressl-build.patch lib_patch.Upstream
package/pkgconf/0001-Only-prefix-with-the-sysroot-a-subset-of-variables.patch lib_patch.Upstream
package/pkgconf/pkg-config.in Shellcheck
package/poke/0001-configure.ac-HELP2MAN-replace-by-true-when-cross-com.patch lib_patch.Upstream
@@ -831,6 +947,7 @@ package/qt5/qt5webkit/0004-Remove-invalid-g_object-declarations-to-fix-build-wi.
package/qt5/qt5webkit/0005-Add-support-for-ARC-processors.patch lib_patch.Upstream
package/qt5/qt5webkit/0006-Warnings-due-to-AppSinkCallbacks-struct-growth-https.patch lib_patch.Upstream
package/qt5cinex/0001-Fix-execution-problem-with-Qt5.3.patch lib_patch.Upstream
package/racehound/0001-Fix-module-install-path-lib-instead-of-usr-lib-prefi.patch lib_patch.Upstream
package/rapidxml/0001-ensure-internal-print-operations-are-declared-before.patch lib_patch.Upstream
package/read-edid/0001-Fix-install-file-list.patch lib_patch.Upstream
package/read-edid/0002-Fix-compiler-check.patch lib_patch.Upstream
@@ -846,11 +963,20 @@ package/rng-tools/S21rngd Shellcheck lib_sysv.Variables
package/rocksdb/0001-build_tools-build_detect_platform-fix-C-tests.patch lib_patch.Upstream
package/rpcbind/0001-Remove-yellow-pages-support.patch lib_patch.Upstream
package/rpcbind/S30rpcbind lib_sysv.EmptyLastLine lib_sysv.Indent lib_sysv.Variables
package/rpi-userland/0001-Add-.pc-files-for-the-OpenGLESv2-EGL-and-bcm_host-li.patch lib_patch.Upstream
package/rpi-userland/0002-interface-remove-faulty-assert-to-make-weston-happy-.patch lib_patch.Upstream
package/rpi-userland/0003-Disable-Werror-everywhere.patch lib_patch.Upstream
package/rpi-userland/0004-host-applications-disable-missing-applications.patch lib_patch.Upstream
package/rpi-userland/0005-dtmerge-add-missing-include-for-va_list.patch lib_patch.Upstream
package/rpi-userland/0006-interface-vcos-pthreads-CMakeLists.txt-fix-build-wit.patch lib_patch.Upstream
package/rpi-userland/0007-GLES2-gl2ext.h-add-GLint64-GLuint64-and-GLsync-typed.patch lib_patch.Upstream
package/rt-tests/0001-Fix-a-build-issue-with-uClibc-ng.patch lib_patch.Upstream
package/rtorrent/0001-Added--disable-execinfo-option-to-configure.patch lib_patch.Upstream
package/rubix/0001-dont-use-legacy-functions.patch lib_patch.Upstream
package/rubix/0002-misc-fixes.patch lib_patch.Sob lib_patch.Upstream
package/rygel/S99rygel Shellcheck lib_sysv.Indent lib_sysv.Variables
package/s6-linux-init/0001-configure-add-D_GNU_SOURCE.patch lib_patch.Upstream
package/safeclib/0001-fix-armv7-asm-inline-error-GH-115.patch lib_patch.Upstream
package/samba4/0001-build-find-pre-built-heimdal-build-tools-in-case-of-.patch lib_patch.Upstream
package/samba4/0002-ldap_message_test.c-include-stdint.h-before-cmoka.h.patch lib_patch.Upstream
package/samba4/S91smb Shellcheck lib_sysv.Indent lib_sysv.Variables
@@ -878,6 +1004,7 @@ package/shadowsocks-libev/0003-lib-Makefile.am-remove-static-from-LDFLAGS.patch
package/shairport-sync/S99shairport-sync Shellcheck lib_sysv.Indent lib_sysv.Variables
package/shared-mime-info/0001-Remove-incorrect-dependency-from-install-data-hook.patch lib_patch.Upstream
package/shellinabox/0001-Makefile-disable-always-building-statically.patch lib_patch.Upstream
package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch lib_patch.Upstream
package/skeleton-init-systemd/fakeroot_tmpfiles.sh Shellcheck
package/slang/0001-slsh-libs.patch lib_patch.Upstream
package/smcroute/S41smcroute NotExecutable lib_sysv.Indent lib_sysv.Variables
@@ -892,6 +1019,15 @@ package/snort/0005-fix-sparc.patch lib_patch.Upstream
package/snort/0006-Fix-compile-error-when-building-against-uclibc-or-mu.patch lib_patch.Upstream
package/snort/0007-Fix-error-when-building-on-a-Fedora-host-machine.patch lib_patch.Upstream
package/snort/0008-Fix-NO-OPTIMIZE.patch lib_patch.Upstream
package/softether/0001-Create-autotools-plumbing-for-SoftEther.patch lib_patch.Upstream
package/softether/0002-Create-libsoftether.so-and-dynamically-link.patch lib_patch.Upstream
package/softether/0003-use-fhs-install-directories.patch lib_patch.Upstream
package/softether/0004-create-non-forking-softetherd-for-upstart-and-systemd.patch lib_patch.Upstream
package/softether/0005-change-GetExeDir-to-GetStateDir-in-Cedar-and-Mayaqua.patch lib_patch.Upstream
package/softether/0006-cross-compile.patch lib_patch.Upstream
package/softether/0007-iconv.patch lib_patch.Upstream
package/softether/0008-librt.patch lib_patch.Upstream
package/softether/0009-uclibc-ai-addrconfig.patch lib_patch.Upstream
package/solarus/0001-cmake-remove-Werror.patch lib_patch.Upstream
package/solarus/0002-Add-a-basic-FindOpenGLES2.cmake.patch lib_patch.Sob lib_patch.Upstream
package/sox/0001-Make-SoX-support-uclibc-based-toolchains.patch lib_patch.Upstream
@@ -916,9 +1052,13 @@ package/supervisor/S99supervisord lib_sysv.Variables
package/suricata/0001-configure.ac-allow-the-user-to-override-RUST_TARGET.patch lib_patch.Upstream
package/suricata/S99suricata Shellcheck
package/swupdate/swupdate.sh Shellcheck
package/sylpheed/0001-harden-link-checker-before-accepting-click.patch lib_patch.Upstream
package/sysvinit/0001-Makefile-disable-stack-protector-strong.patch lib_patch.Upstream
package/tar/0001-lib-getrandom.c-fix-build-with-uclibc-1.0.35.patch lib_patch.Upstream
package/targetcli-fb/S50target Shellcheck lib_sysv.Variables
package/taskd/0001-Fix-missing-cmakedefine-HAVE_GET_CURRENT_DIR_NAME.patch lib_patch.Upstream
package/taskd/0002-Use-correct-variables-for-GnuTLS-detection.patch lib_patch.Upstream
package/taskd/0003-CMakeLists-use-pkg-config-uuid-detection.patch lib_patch.Upstream
package/tcf-agent/S55tcf-agent Shellcheck lib_sysv.Variables
package/tftpd/S80tftpd-hpa Shellcheck lib_sysv.Indent lib_sysv.Variables
package/ti-gfx/0001-newclkapi.patch lib_patch.Upstream
@@ -930,10 +1070,17 @@ package/ti-sgx-um/0001-Makefile-do-not-install-init-script.patch lib_patch.Upstr
package/ti-sgx-um/S80ti-sgx lib_sysv.Variables
package/ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
package/tinyalsa/0001-include-time.h-before-asound.h.patch lib_patch.Upstream
package/tinycbor/0001-Makefile-add-DISABLE_WERROR.patch lib_patch.Upstream
package/tinycompress/0001-wave-add-time.h-missing-header-inclusion.patch lib_patch.Upstream
package/tinydtls/0001-sha2-sha2.c-fix-build-on-big-endian.patch lib_patch.Upstream
package/tinyxml/0001-In-stamp-always-advance-the-pointer-if-p-0xef.patch lib_patch.Upstream
package/tpm2-tss/0001-Temporary-fix-for-build-without-C.patch lib_patch.Upstream
package/transmission/S92transmission Shellcheck lib_sysv.ConsecutiveEmptyLines lib_sysv.Indent lib_sysv.Variables
package/triggerhappy/S10triggerhappy Shellcheck lib_sysv.Indent lib_sysv.Variables
package/trinity/0001-Fix-build-with-GCC-10.patch lib_patch.Upstream
package/trinity/0002-net-proto-ip-raw.c-fix-build-with-kernel-5.13.patch lib_patch.Upstream
package/trinity/0003-Use-fcntl-h-for-dev_t-mode_t.patch lib_patch.Upstream
package/trinity/0004-drop-decnet.patch lib_patch.Upstream
package/trousers/0001-Check-if-the-compiler-understands-pie-and-relro-options.patch lib_patch.Upstream
package/trousers/0002-Check-that-getpwent_r-is-available-before-using-it.patch lib_patch.Upstream
package/trousers/0003-Fix-build-with-LibreSSL-2-7.patch lib_patch.Upstream
@@ -941,7 +1088,8 @@ package/tstools/0001-build-get-along-with-buildroot.patch lib_patch.Upstream
package/tvheadend/0001-no-check_config.patch lib_patch.Upstream
package/tvheadend/S99tvheadend Shellcheck lib_sysv.Indent lib_sysv.Variables
package/uboot-tools/0001-drop-configh-from-tools.patch lib_patch.Upstream
package/uboot-tools/0002-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
package/uboot-tools/0002-tools-only-in-no-dot-config-targets.patch lib_patch.Upstream
package/uboot-tools/0003-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
package/ubus/0001-Install-server-and-client-examples.patch lib_patch.Upstream
package/uemacs/01-clear-ixon-termios-flag.patch lib_patch.Upstream
package/uhd/0001-host-CMakeLists-add-boost-unit_test_framework-requir.patch lib_patch.Upstream
@@ -952,6 +1100,7 @@ package/unifdef/0001-Makefile-fix-error-on-install.patch lib_patch.Upstream
package/unscd/S46unscd Shellcheck lib_sysv.Indent lib_sysv.Variables
package/unzip/0001-Add-a-CMakeFile.txt-to-ease-cross-compilation.patch lib_patch.Upstream
package/upmpdcli/S99upmpdcli Shellcheck lib_sysv.Indent lib_sysv.Variables
package/uqmi/0001-uqmi-avoid-gcc-12.x-false-error-reporting-storing-th.patch lib_patch.Upstream
package/urg/0001-select-h.patch lib_patch.Upstream
package/urg/0002-urg-gcc6-fix-narrowing-conversion.patch lib_patch.Upstream
package/usb_modeswitch/0001-fix-systemd-detection.patch lib_patch.Upstream
@@ -996,10 +1145,18 @@ package/vte/0002-build-Fix-check-for-fstack-protector-compiler-support.patch lib
package/vtun/0001-fix-installation.patch lib_patch.Upstream
package/vtun/0002-fix-ssl-headers-checks.patch lib_patch.Upstream
package/vtun/0003-openssl11.patch lib_patch.Upstream
package/waffle/0001-cmake-forward-cflags-from-.pc-files-to-waffle-cflags.patch lib_patch.Upstream
package/waffle/0002-wayland-fix-build-against-version-1-20.patch lib_patch.Upstream
package/waffle/0003-drop-C-dependency.patch lib_patch.Upstream
package/wampcc/0001-Add-RISC-V-endian-detection.patch lib_patch.Upstream
package/wampcc/0002-include-wampcc-platform.h-fix-build-with-musl-1.2.0.patch lib_patch.Upstream
package/wampcc/0003-Broken-build-on-Windows.patch lib_patch.Upstream
package/wget/0001-lib-getrandom.c-fix-build-with-uclibc-1.0.35.patch lib_patch.Upstream
package/wilc-driver/0001-cfg80211.c-fix-missing-prandom_u32-with-Linux-6.1.0.patch lib_patch.Upstream
package/wilc-driver/0002-spi.c-fix-build-failure-on-remove-callback.patch lib_patch.Upstream
package/wilc-driver/0003-cfg80211.c-fix-build-failure-with-Linux-5.19-and-6.1.patch lib_patch.Upstream
package/wilc-driver/0004-Fix-struct-station_parameters-Linux-6.1-build-failur.patch lib_patch.Upstream
package/wilc-driver/0005-Fix-cast-warnings.patch lib_patch.Upstream
package/wipe/0001-musl.patch lib_patch.Upstream
package/wireless_tools/0001-remove-bzero.patch lib_patch.Upstream
package/woff2/0001-CMake-Handle-multiple-libraries-being-returned-for-B.patch lib_patch.Upstream
@@ -1010,6 +1167,7 @@ package/x11r7/xcursor-transparent-theme/0001-fix-symlink.patch lib_patch.Upstrea
package/x11r7/xdriver_xf86-input-evdev/0001-build-get-rid-of-sdkdir.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-input-joystick/0001-build-get-rid-of-sdkdir.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-input-libinput/0001-build-get-rid-of-sdkdir.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-input-mouse/0001-build-get-rid-of-sdkdir.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-input-synaptics/0001-build-get-rid-of-sdkdir.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-video-fbturbo/0001-sunxi_x_g2d-drop-unused-dri2-include.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-video-fbturbo/0002-Use-own-thunk-functions-instead-of-fbdevHW-Weak.patch lib_patch.Upstream
@@ -1023,6 +1181,7 @@ package/x11r7/xdriver_xf86-video-imx/0004-Make-video-API-forward-and-backward-co
package/x11r7/xdriver_xf86-video-imx/0005-xf86-video-imxfb-fix-m4-hardcodded-paths.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-video-imx/0006-xserver-1.14-compat.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-video-mach64/0001-cross-compile.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-video-nouveau/0001-nouveau-fixup-driver-for-new-X-server-ABI.patch lib_patch.Upstream
package/x11r7/xdriver_xf86-video-tdfx/0001-cross.patch lib_patch.Upstream
package/x11r7/xserver_xorg-server/0001-include-misc.h-fix-uClibc-build.patch lib_patch.Upstream
package/x11r7/xserver_xorg-server/S40xorg Shellcheck lib_sysv.Variables
@@ -1030,6 +1189,11 @@ package/xen/0001-9pfs-include-linux-limits.h-for-XATTR_SIZE_MAX.patch lib_patch.
package/xen/0002-Fix-build-with-64-bits-time_t.patch lib_patch.Upstream
package/xen/0003-libs-light-fix-tv_sec-printf-format.patch lib_patch.Upstream
package/xen/0004-libs-light-fix-tv_sec-fprintf-format.patch lib_patch.Upstream
package/xinetd/0001-ar.patch lib_patch.Upstream
package/xinetd/0002-destdir.patch lib_patch.Upstream
package/xinetd/0003-rpc-fix.patch lib_patch.Upstream
package/xinetd/0004-configure-rlim_t.patch lib_patch.Upstream
package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch lib_patch.Upstream
package/xl2tp/xl2tpd lib_shellscript.TrailingSpace
package/xml-security-c/0001-fix-build-with-libressl-3.5.0.patch lib_patch.Upstream
package/yajl/0001-Let-the-shared-and-the-static-library-have-the-same-.patch lib_patch.Upstream
-1
View File
@@ -13,4 +13,3 @@
*.rej
*~
*.pyc
/br.log
-801
View File
@@ -1,323 +1,3 @@
2026.02-rc1, released February 17th, 2026
Fixes all over the tree and new features.
Arch:
- Add HPPA architecture support
- Drop ARC big-endian support
Toolchain:
- Kernel headers: use 6.19.x by default, removed 6.17.x, added
6.19.x support.
- Binutils: use 2.44 by default, removed 2.42.x, added 2.45.x series.
Misc:
- Various tweaks to utils/generate-cyclonedx for better SBOM
compatibility and more detailed annotations for CVEs fixed
by patches in Buildroot.
New defconfigs: AMD Versal2 VEK385, HP-9000, QEMU HPPA B160L,
STM32h747i-disco
Removed defconfigs: Raspberrypi3 qt5we
New packages: adsp-ldr, aichat, k3conf, kibi, libplacebo,
libxmlsec1, libyang-cpp, nqptp, openscap,
python-annotated-doc, python-base58, python-coherent-licensed,
python-diskcache, python-gpiod,
python-ipython-pygments-lexers, python-librt,
python-markdown-it-py, python-mdit-py-plugins, python-mdurl,
python-memray, python-platformdirs, python-rich,
python-sdbus-systemd, python-textual, python-varlink,
qoriq-restool, rasdaemon, sigsum-go, sysrepo-cpp, yq, zellij
Removed packages: alure, bootstrap, chartjs, connman-gtk,
cppdb, criu, cvs, datatables-buttons, datatables-fixedcolumns,
datatables-responsive, datatables, dbus-triggerd, dmraid,
dvdrw-tools, explorercanvas, flot, forge, gconf, hawktracer,
jquery-datetimepicker, jquery-keyboard, jquery-mobile,
jquery-sidebar, jquery-sparkline, jquery-ui-themes, jquery-ui,
jquery-validation, jquery, jsmin, json-javascript, jszip,
let-me-create, libcgi, libcuefile, libfreeimage, libiqrf,
libmhash, libnids, libsvg-cairo, libsvg, libuwsc, lockdev,
musepack, opencv3, openlayers, openpowerlink, opentracing-cpp,
php-zmq, python-aioredis, qjson, racehound, rpi-userland,
sconeserver, softether, taskd, vis-network, vuejs-router,
vuejs, xdriver_xf86-input-mouse
Issues resolved:
- GNU GRUB (BIOS) with f2fs filesystem failed
https://gitlab.com/buildroot.org/buildroot/-/issues/61
- The shadow package does not correctly configure the ENCRYPT_METHOD..
https://gitlab.com/buildroot.org/buildroot/-/issues/134
- EGL not found when building libWPE from buildroot base folder
https://gitlab.com/buildroot.org/buildroot/-/issues/144
- Awkward error message: "Fix you path"
https://gitlab.com/buildroot.org/buildroot/-/issues/151
- Detected presence of version control tool artifacts
https://gitlab.com/buildroot.org/buildroot/-/issues/154
- run-tests tool broken with Python 3.14
https://gitlab.com/buildroot.org/buildroot/-/issues/156
- Moving away from bminor Github mirrors
https://gitlab.com/buildroot.org/buildroot/-/issues/160
- How can I make the 'en_US' locale by default?
https://gitlab.com/buildroot.org/buildroot/-/issues/161
2025.11.1, released January 20, 2026
Important / security related fixes:
apache: CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082,
CVE-2025-66200
cryptsetup
dropbear: CVE-2025-14282, CVE-2019-6111
exim: CVE-2025-67896
gnupg2
imagemagick: CVE-2025-66628
libarchive
libcoap: CVE-2025-59391, CVE-2025-65493, CVE-2025-65494
CVE-2025-65495, CVE-2025-65496, CVE-2025-65497, CVE-2025-65498,
CVE-2025-65499, CVE-2025-65500, CVE-2025-65501
libcurl: CVE-2025-13034, CVE-2025-14017, CVE-2025-14524,
CVE-2025-14819, CVE-2025-15079, CVE-2025-15224
libfcgi: CVE-2025-23016.
libfreeimage: CVE-2019-12211, CVE-2019-12213, CVE-2020-24292,
CVE-2020-24293, CVE-2020-24295, CVE-2021-33367, CVE-2021-40263,
CVE-2021-40266, CVE-2023-47995, CVE-2023-47997
libpng: CVE-2025-66293
liburiparser: CVE-2025-67899
libxslt: CVE-2025-7424, CVE-2025-9714, CVE-2025-11731
linenoise: CVE-2025-9810
perl: CVE-2025-40909
php: CVE-2025-14177, CVE-2025-14178, CVE-2025-14180
python-django: CVE-2025-13372, CVE-2025-64460
python-filelock: CVE-2025-68146
python-fonttools: CVE-2025-66034
python-urllib3: CVE-2025-66471, CVE-2025-66418
unbound: CVE-2025-11411
vlc
xserver_xorg-server: CVE-2025-62229, CVE-2025-62230,
CVE-2025-62231
xwayland: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231
Infrastructure updates/fixes:
- pkg-stats use HEAD request & unique HTTP user-agent
- cve-check: don't fail with unknown CVE
- generate-cyclonedx: support 'resolved_with_pedigree'
- testing: add host bin dir to PATH
- testing: add tests for FIT hash support in package/uboot-tools
- testing: add libiio python bindings runtime test
- testing: ddrescue: use dmsetup from lvm2
- testing: ddrescue: use f-string for test config
- testing: add tio runtime test
- add 'CVE:' trailer in various patches
- add md5 hash and update tarball url to various python packages
- testing: ltp-testsuite: replace runltp by kirk
- testing: new kvmtool runtime test
- gitignore: ignore utils/brmake log output named `br.log`
- testing: add opus-tools runtime test
- testing: add flac runtime test
- testing: test_xen: add block
Updated / fixed packages: apache, arm-trusted-firmware, atf, audit,
bitcoin, boost, busybox, cage, cmake, collectl, cppcms, cpulimit,
cryptsetup, dbus, dmraid, dropbear, efl, embiggen-disk, evilwm, exim,
ficl, fio, fluent-bit, fontconfig, glibc, gnupg2, grpc, gvfs, icu,
imagemagick, irqbalance, iwd, kvmtool, ledmon, libarchive, libcoap,
libconfig, libcpprestsdk, libcurl, libdill, libdnet, libfcgi, libfreeimage,
libgit2, libgtk3, libgtk4, libiio, libmbus, libpng, libselinux, libtirpc,
libupnp, liburiparser, libvncserver, libxslt, linenoise, linux-tools,
lttng-modules, lugaru, matchbox-fakekey, matchbox-keyboard, matchbox-lib,
matchbox-panel, mender-update-modules, mesa3d, mosh, nfs-utils, open-lldp,
opencv4, opencv4-contrib, openjdk, perl, perl-dbd-mysql, perl-mozilla-ca,
php, pigz, pixman, python-brotli, python-can, python-certifi, python-django,
python-filelock, python-fonttools, python-pyqt5, python-urllib3, python3,
qt5enginio, qt5webkit, qt6base, racehound, rdesktop, rpcbind, rpi-firmware,
rtl8192eu, rtl8723bu, rtl8723ds, rtl8821au, rtl8821cu, rtl8822cs, samba4,
skopeo, softether, softhsm2, spice, ssdp-responder, sway, tio, trinity,
tzdata, uboot, uboot-tools, uclibc, unbound, utfcpp, v4l2loopback, vim, vlc,
xdriver_xf86-video-intel, xen, xinetd, xlib_libxshmfence,
xserver_xorg-server, xvkbd, xwayland, zic, zxing-cpp
Removed packages: opencv3 'protobuf', opencv3 'ffmpeg',
libdnet 'python', rpi-firmware 'vcdbg'
2025.11, released December 11th, 2025
Fixes all over the tree.
linux: Default to 6.18 for runtime kernel and kernel headers,
drop the now EOL 5.4.x series.
Updated/fixed packages: apache, audit, cryptodev-linux,
dmraid, ficl, glibc, go, intel-mediadriver, intel-vpl-gpu-rt,
kbd, libcap, libdbi, libgit2, libpng, libtirpc, libxslt,
lugaru, mosh, pigz, podman, python-fonttools, python-urllib3,
python3, racehound, rdesktop, rtl8188eu, softhsm, sqlite,
strace, unbound, unzip, xapp_xkbutils,
xdriver_xf86-video-intel, xl2tp, xserver_xorg-server, xwayland
2025.11-rc2, released November 30th, 2025
Fixes all over the tree.
Infrastructure: support/scripts/check-merged (introduced in
2025.11-rc1) no longer relies on getopt from util-linux
Defconfigs: pine64 star: Update U-Boot and Linux kernel to fix
builds with GCC 14.x
Updated/fixed packages: 18xx-ti-utils, depot-tools, e2fsprogs,
enscript, fio, gnutls, intel-mediadriver, intel-vpl-gpu-rt,
ledmon, libpng, libteam, lmbench, mongoose, netsnmp,
nss-pam-ldapd, open-plc-utils, oprofile, pdmenu, php-apcu,
php-pecl-dbus, php-xdebug, php-yaml, python-flask-restx,
python-pysocks, python-starlette, sane-backends, sbc, sdl,
stress-ng, swipl, syslinux, time, tmux, tor, uboot-tools,
woff2, xfsprogs, yaml-cpp
Removed packages: libargtable2, starfive-spltool
2025.11-rc1, released November 20th, 2025
Fixes all over the tree and new features.
Infrastructure:
- Support merged /usr/sbin/ (E.G. sbin a symlink to bin rather
than separate directories), which is required by systemd
256+
- support/scripts/cve-check can now be used to enrich a SBOM
in CycloneDX format (as generated by
utils/generate-cyclonedx) with vulnerability analysis from
the NVD database.
Dropped a number of old and unmaintained packages and external
toolchains.
New defconfigs: Compulab IOT-GATE-iMX8 EBBR, QEMU x86-64 EFI
Removed defconfigs: at91sam9260eknf, atmel_sama5d3xek,
roseapplepi
New packages: broot, bvi, go-bootstrap-stage4, libpam-pkcs11,
llama-cpp, nnn, python-crccheck, python-fs, python-patch-ng,
python-pyfatfs, python-scp, python-whitenoise, snapboot, wmenu
Removed packages: aufs, aufs-util, axfsutils, bctoolbox,
belle-sip, belr, dmenu-wayland, dvbsnoop,
ev3dev-linux-drivers, expect, fbtft, gtk2-engines, gtkperf,
leafpad, lesstif, libbson, libglade, libgtk2, libjwt, libsexy,
linphone, logsurfer, mediastreamer, metacity, mongrel2, ola,
ortp, procrank_linux, ramspeed, sylpheed
2025.08.3, released December 11, 2025
Important / security related fixes:
- asterisk: CVE-2025-1131, CVE-2025-57767, CVE-2025-49832,
CVE-2025-47780, CVE-2025-47779
- gnutls: CVE-2025-9820
- libpng: CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018
- luksmeta: CVE-2025-11568
- mariadb: CVE-2025-30693, CVE-2025-30722, CVE-2023-52969,
CVE-2023-52970, CVE-2023-52971
- openvpn: CVE-2025-13086
- postgresql: CVE-2025-12817, CVE-2025-12818
- python-django: CVE-2025-64458, CVE-2025-64459
- python-startlette: GHSA-7f5h-v6xp-fcq8
Infrastructure updates/fixes:
- New script support/scripts/cve-check to enricht CycloneDX SBoM with
CVE information from NVD database.
Updated / fixed packages: 18xx-ti-utils, asterisk, enscript, gnutls,
libpng, libroxml, libteam, linux-headers, luksmeta, mariadb, nbd, neard,
nss-pam-ldapd, open-plc-utils, openjdk, openjdk-bin, openvpn, oprofile,
pdmenu, perl-net-ssleay, postgresql, python-django, python-starlette,
redis, sane-bacends, sbc, sdbusplus, sdl, swipl, tailscale, thermald,
tmux, tor
Removed packages: bctoolbox, belle-sip, belr, linphone, mediastreamer,
mongrel2, ortp
2025.08.2, released November 20, 2025
Important / security related fixes:
- bind: CVE-2025-8677, CVE-2025-40778, CVE-2025-40780
- dante: CVE-2024-54662
- erlang: CVE-2024-53846, CVE-2025-4748, CVE-2025-26618, CVE-2025-30211,
CVE-2025-32433, CVE-2025-46712, CVE-2025-48038,
CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
- hostapd: CVE-2025-24912
- imagemagick: CVE-2025-62171
- iptraf-ng: CVE-2024-52949
- libarchive: CVE-2025-25724
- libglib2: CVE-2024-54662
- libvips: CVE-2025-29769, CVE-2025-59933
- libvpx: CVE-2025-5283
- libxslt: CVE-2025-24855, CVE-2024-55549
- mbedtls: CVE-2025-54764, CVE-2025-59438
- modsecurity2: CVE-2025-52891, CVE-2025-54571
- netdata: CVE-2023-22496, CVE-2023-22497
- podman: CVE-2025-9566
- poppler: CVE-2024-6239, CVE-2024-56378, CVE-2025-32364,
CVE-2025-32365, CVE-2025-43903, CVE-2025-50420,
CVE-2025-52886
- python3: gh-139312, gh-139700, gh-139400, gh-135661, gh-135661,
gh-102555, gh-135462, gh-118350, gh-86155
- python-webpy: CVE-2025-3818
- redis: CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844
- samba: CVE-2025-3818, CVE-2025-10230
- shairport-sync: Upstream security fixes without CVE
- squid: CVE-2025-59362
- suricata: CVE-2024-37151, CVE-2024-38535
- tpm2-tss: CVE-2024-29040
- xerces: CVE-2024-23807
- zabbix: CVE-2025-27231, CVE-2025-27236, CVE-2025-27238, CVE-2025-49641
- zip: CVE-2018-13410
Infrastructure updates/fixes:
- Improved matching of CPE ID with NVD database, resulting in more accurate
identification of CVEs.
- brmake: avoid garbled output with top-level parallel build
Updated / fixed packages: 4th, audit, bind, cmake, crun, dante,
ebtables, erlang, freeradius-server, freerdp, gpsd, gstd, hostapd,
imagemagick, iptraf-ng, ledmon, libarchive, libcurl, libdbi-drivers,
libdisplay-info, libglib2, libgphoto2, libgtk3, libheif, libiconv,
libsemanage, libshout, libsolv, libtpms, libvips, libvpx, libwpe,
libxslt, linux, linux-headers, live555, mbedtls, micropython,
mjpg-streamer, modsecurity2, netdata, podman, poppler, python3,
python-flask-cors, python-webpy, quota, qt6multimedia, redis, refpolicy,
samba4, shairport-sync, selinux-python, sexpect, siproxd, sqlite, squid,
suricata, tor, tpm2-tss, waffle, webkitgtk, wireless-regdb, wpewebkit,
xerces, zabbix, zip
Removed package: ramspeed
Boards updated / fixed: andes_ae350_45, beaglebone, beagleboneai,
cubieboard1, cubieboard2, imx6ulz_bsh_smm_m2, imx8mn_bsh_smm_s2,
imx8mn_bsh_smm_s2_pro, olimex_a20_olinuxino_lime*, stm32f429_disco_xip,
stm32f746_disco_sd, stm32f769_disco_sd, stm32mp1*_dk*, ti_am62x_sk
Test Improvements:
- Capture output of failing commands on host.
2025.08.1, released October 11, 2025
Important / security related fixes:
@@ -475,162 +155,6 @@
Removed packages: libebur128, libolm, libwebsock,
python-dunamai, python-poetry-dynamic-versioning
2025.05.3, released October 11, 2025
This is the final release on the 2025.05.x branch.
Important / security related fixes:
- atop: CVE-2025-31160
- civetweb: CVE-2025-55763
- cjson: CVE-2025-57052
- connman: CVE-2025-32366, CVE-2025-32743
- cups: CVE-2025-58060, CVE-2025-58364
- exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
- expat: CVE-2025-59375
- fastd: CVE-2025-24356
- fetchmail: CVE number pending
- ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800,
CVE-2025-59801
- imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005,
CVE-2025-55160
- intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
- jasper: CVE-2023-51257, CVE-2025-8835
- libcurl: CVE-2025-10148, CVE-2025-9086
- libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
- libssh: CVE-2025-8114, CVE-2025-8277
- lua: CVE-2014-5461
- opencv4: CVE-2025-53644
- pcre2: CVE-2025-58050
- poco: CVE-2025-6375
- postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
- python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
- python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
- python-pip: CVE-2025-8869
- raptor: CVE-2024-57822, CVE-2024-57823
- sqlite: CVE-2025-6965
- syslog-ng: CVE-2024-47619
- tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
- udisks: CVE-2025-8067
- wireshark: CVE-2025-5601
Updated / fixed packages: asterisk, avrdude, boinc, boot-wrapper-aarch64,
cjson, cpp-httplib, cutekeyboard, docker-engine, ecryptfs-utils, fatcat,
fetchmail, firewalld, gnupg2, gnuplot, htpdate, iputils, jose, kodi,
libfreeimage, libopenssl, libselinux, libsemanage, libxkbcommon,
libxmlrpc, linux-firmware, linuxptp, llvm, lua-utf8, luaossl, luvi,
mariadb, mbpfan, micropython, modsecurity2, mosquitto, opencv4, openjpeg,
pango, php-lua, policycoreutils, python-aiohttp-session, python-certifi,
python-cryptography, python-flask-cors, python-pytz, python3, rtl_433,
ruby, samba4, sysprof, ti-k3-boot-firmware, tiff, tor, uclibc, upx,
webkitgtk, wlroots, x11r7, xilinx-embeddedsw, xilinx-prebuilt, zziplib
Removed package: netstat-nat
Boards updated / fixed: versal, ti_am62x_sk, qemu/{x86, x86_64},
zedboard, beagleboneai
Boards removed: roseapplepi, at91sam9260eknf, atmel_sama5d3xek
Test Improvements:
- TestSWIPL: increase timeout value
- TestOpenJdk: remove stime() function call
- test_hardening: update toolchain to aarch64 for checksec tests
- test_docker_compose: update kernel & VM CPU
- TestZfsUclibc: use internal backend for uClibc-ng toolchain
- GitTestBase: remove git daemon due to Gitlab-CI security settings
2025.05.2, released September 09, 2025
Important / security related fixes:
- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
CVE-2025-5449, CVE-2025-5987
- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
- python3: CVE-2025-8194
- libhtp: CVE-2025-53537
- tiff: CVE-2025-8176, CVE-2025-8177
- libglib2: CVE-2025-6052
- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
CVE-2024-7541, CVE-2024-7542
- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
CVE-2025-1376, CVE-2025-1377
- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
CVE-2025-0689, CVE-2025-1125
- openjpeg: CVE-2025-54874
- go: CVE-2025-4674, CVE-2025-47907
- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
- vorbis-tools: CVE-2023-43361
- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
- ffmpeg: CVE-2023-6602
- lighttpd: CVE-2025-8671
- python-h2: CPE-2025-57804
- cpp-httplib: CVE-2025-46728
Removed packages: liboauth, thttpd
Removed defconfigs: at91sam9g20dfc, at91sam9g45m10ek,
at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m,
imx6ulz_bsh_smm_m2,
Test Improvements:
- test_gstreamer1: raise tesseract-ocr timeout to 15s
- test_wine: fix test after bootlin toolchains update
- test_numactl: fix test after bootlin toolchains update
- test_dpdk: fix test after bootlin toolchains update
- test_msr_tools: fix test after bootlin toolchains update
- test_dmidecode: fix test after bootlin toolchains update
- test_iso9660: use a more recent toolchain
- test_grub: use glibc toolchain
- test_wget: replace thttpd by Busybox's httpd server
- test_libcurl: replace thttpd by Busybox's httpd server
- test_systemd_selinux: fix test after bootlin toolchains update
Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
libssh, glibc, libhtp, libapparmor, libopenssl, rpi-firmware,
brcmfmac_sdio-firmware-rpi, grout, php-pecl-dbus, tini, snooze, ngrep,
libzenoh-pico, janet, cjson, flatcc, nanocom, rtl8189es, gcc, ofono,
python-numpy, elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk,
prboom, setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
gstreamer1-editing-services, vorbis-tools, jq, lbijwt, vim, ffmpeg,
libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay, libsvgtiny,
libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2, squid, ipmitool,
ell, proftpd, liblog4c-localtime, wpewebkit, weston, cpp-httplib,
ipset, python3, python-aexpect, libftdi1
Infrastructure updates/fixes:
- Various tweaks to utils/generate-cyclonedx for better SBOM
compatibility and project name/version customization
- go: make pre-built compiler provide target support too
- test-pkg: add new option -T/--toolchain-name
- pkg-utils.mk: include package directory in show-info output
- bump-stable-kernel-versions: new tool
Boards updated / fixed:
- qemu_sh4*: switch back to disk emulation
- acmesystems_acqua_a5_*: update linux
- sipeed_licheepi_zero: update linux & uboot
- zynqmp: increase vfat partition to 64M
- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
- ci20: U-Boot needs host-openssl
2025.05.1, released August 11th, 2025
Important / security related fixes:
@@ -832,331 +356,6 @@
- netsnmp: unexpected header length in /proc/net/snmp...
https://gitlab.com/buildroot.org/buildroot/-/issues/110
2025.02.10, released January 20, 2026
Important / security related fixes:
apache: CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082,
CVE-2025-66200
cryptsetup
dropbear: CVE-2025-14282, CVE-2019-6111
exim: CVE-2025-67896
gnupg2
imagemagick: CVE-2025-66628
libarchive
libcoap: CVE-2025-59391, CVE-2025-65493, CVE-2025-65494
CVE-2025-65495, CVE-2025-65496, CVE-2025-65497, CVE-2025-65498,
CVE-2025-65499, CVE-2025-65500, CVE-2025-65501
libcurl: CVE-2025-13034, CVE-2025-14017, CVE-2025-14524,
CVE-2025-14819, CVE-2025-15079, CVE-2025-15224
libfcgi: CVE-2025-23016.
libfreeimage: CVE-2019-12211, CVE-2019-12213, CVE-2020-24292,
CVE-2020-24293, CVE-2020-24295, CVE-2021-33367, CVE-2021-40263,
CVE-2021-40266, CVE-2023-47995, CVE-2023-47997
libpng: CVE-2025-66293
liburiparser: CVE-2025-67899
libxslt: CVE-2025-7424, CVE-2025-9714, CVE-2025-11731
linenoise: CVE-2025-9810
perl: CVE-2025-40909
php: CVE-2025-14177, CVE-2025-14178, CVE-2025-14180
python-django: CVE-2025-13372, CVE-2025-64460
python-filelock: CVE-2025-68146
python-fonttools: CVE-2025-66034
python-urllib3: CVE-2025-66471, CVE-2025-66418
unbound: CVE-2025-11411
vlc
xserver_xorg-server: CVE-2025-62229, CVE-2025-62230,
CVE-2025-62231
xwayland: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231
Infrastructure updates/fixes:
- pkg-stats use HEAD request & unique HTTP user-agent
- cve-check: don't fail with unknown CVE
- generate-cyclonedx: support 'resolved_with_pedigree'
- testing: add host bin dir to PATH
- testing: add libiio python bindings runtime test
- testing: ddrescue: use dmsetup from lvm2
- testing: ddrescue: use f-string for test config
- testing: add tio runtime test
- add 'CVE:' trailer in various patches
- add md5 hash and update tarball url to various python packages
- testing: ltp-testsuite: replace runltp by kirk
- testing: new kvmtool runtime test
- gitignore: ignore utils/brmake log output named `br.log`
- testing: add opus-tools runtime test
- testing: add flac runtime test
Updated / fixed packages: apache, arm-trusted-firmware, atf, audit,
bitcoin, boost, busybox, cage, cmake, collectl, cppcms, cpulimit,
cryptsetup, dbus, dmraid, dropbear, embiggen-disk, evilwm, exim, ficl,
fontconfig, glibc, gnupg2, grpc, gvfs, imagemagick, kvmtool, ledmon,
libarchive, libcoap, libcpprestsdk, libcurl, libdill, libfcgi,
libfreeimage, libgit2, libgtk3, libgtk4, libiio, libmbus, libpng,
libselinux, libtirpc, libupnp, liburiparser, libxml2, libxslt, linenoise,
linux-tools, lttng-modules, lugaru, matchbox-fakekey, matchbox-keyboard,
matchbox-lib, matchbox-panel, mosh, nfs-utils, open-lldp, opencv4,
opencv4-contrib, openjdk, perl, perl-dbd-mysql, perl-mozilla-ca, php, pigz,
pixman, python-brotli, python-certifi, python-django, python-filelock,
python-fonttools, python-pyqt5, python-urllib3, qt5enginio, qt5webkit,
qt6base, racehound, rdesktop, rpcbind, rpi-firmware, softether, softhsm2,
spice, ssdp-responder, sway, sysprof, tio, trinity, tzdata, uboot, uclibc,
unbound, vim, vlc, xdriver_xf86-video-intel, xen, xinetd,
xlib_libxshmfence, xserver_xorg-server, xvkbd, xwayland, zic, zxing-cpp
Removed packages: opencv3 'protobuf', opencv3 'ffmpeg'
2025.02.9, released December 11, 2025
Important / security related fixes:
- asterisk: CVE-2025-1131, CVE-2025-57767, CVE-2025-49832,
CVE-2025-47780, CVE-2025-47779
- gnutls: CVE-2025-9820
- libpng: CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018
- luksmeta: CVE-2025-11568
- mariadb: CVE-2025-30693, CVE-2025-30722, CVE-2023-52969,
CVE-2023-52970, CVE-2023-52971
- openvpn: CVE-2025-13086
- postgresql: CVE-2025-12817, CVE-2025-12818
- python-django: CVE-2025-64458, CVE-2025-64459
- python-startlette: GHSA-7f5h-v6xp-fcq8
Infrastructure updates/fixes:
- New script support/scripts/cve-check to enricht CycloneDX SBoM with
CVE information from NVD database.
Updated / fixed packages: 18xx-ti-utils, asterisk, gnutls, libpng,
libroxml, libteam, linux-headers, luksmeta, mariadb, nbd, neard,
openjdk, openjdk-bin, openvpn, oprofile, perl-net-ssleay, postgresql,
python-django, python-starlette, redis, sdbusplus, sdl, swipl,
tailscale, thermald, tmux, tor
Removed packages: bctoolbox, belle-sip, belr, linphone, mediastreamer,
mongrel2, ortp
2025.02.8, released November 20, 2025
Important / security related fixes:
- bind: CVE-2025-8677, CVE-2025-40778, CVE-2025-40780
- dante: CVE-2024-54662
- erlang: CVE-2024-53846, CVE-2025-4748, CVE-2025-26618, CVE-2025-30211,
CVE-2025-32433, CVE-2025-46712, CVE-2025-48038,
CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
- hostapd: CVE-2025-24912
- imagemagick: CVE-2025-62171
- iptraf-ng: CVE-2024-52949
- libarchive: CVE-2025-25724
- libglib2: CVE-2024-54662
- libvips: CVE-2025-29769, CVE-2025-59933
- libvpx: CVE-2025-5283
- libxslt: CVE-2025-24855, CVE-2024-55549
- mbedtls: CVE-2025-54764, CVE-2025-59438
- modsecurity2: CVE-2025-52891, CVE-2025-54571
- netdata: CVE-2023-22496, CVE-2023-22497
- poppler: CVE-2024-6239, CVE-2024-56378, CVE-2025-32364,
CVE-2025-32365, CVE-2025-43903, CVE-2025-50420,
CVE-2025-52886
- python3: gh-139312, gh-139700, gh-139400, gh-135661, gh-135661,
gh-102555, gh-135462, gh-118350, gh-86155
- python-webpy: CVE-2025-3818
- redis: CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844
- samba: CVE-2025-3818, CVE-2025-10230
- shairport-sync: Upstream security fixes without CVE
- squid: CVE-2025-59362
- suricata: CVE-2024-37151, CVE-2024-38535
- tpm2-tss: CVE-2024-29040
- xerces: CVE-2024-23807
- zabbix: CVE-2025-27231, CVE-2025-27236, CVE-2025-27238, CVE-2025-49641
- zip: CVE-2018-13410
Infrastructure updates/fixes:
- Improved matching of CPE ID with NVD database, resulting in more
accurate identification of CVEs.
- brmake: avoid garbled output with top-level parallel build
Updated / fixed packages: 4th, audit, bind, cmake, crun, dante,
ebtables, erlang, freeradius-server, gpsd, gstd, hostapd, imagemagick,
iptraf-ng, iozone, ledmon, libarchive, libcurl, libdbi-drivers,
libdisplay-info, libglib2, libgphoto2, libgtk3, libheif, libsemanage,
libshout, libsolv, libtpms, libvips, libvpx, libwpe, libxslt, linux,
linux-headers, live555, mbedtls, micropython, mjpg-streamer,
modsecurity2, netdata, netsnmp, poppler, python3, python-flask-cors,
python-webpy, quota, qt6multimedia, redis, refpolicy, samba4,
selinux-python, sexpect, shairport-sync, siproxd, sqlite, squid,
suricata, tor, tpm2-tss, waffle, webkitgtk, wireless-regdb, wpewebkit,
xerces, zabbix, zip
Removed package: ramspeed
Boards updated / fixed: beagleboneai, cubieboard1, cubieboard2,
stm32f429_disco_xip, stm32f746_disco_sd, stm32f769_disco_sd,
Test Improvements:
- Capture output of failing commands on host.
2025.02.7, released October 11, 2025
Important / security related fixes:
- asterisk: CVE-2024-42491
- atop: CVE-2025-31160
- civetweb: CVE-2025-55763
- cjson: CVE-2025-57052
- connman: CVE-2025-32366, CVE-2025-32743
- cups: CVE-2025-58060, CVE-2025-58364
- exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
- expat: CVE-2025-59375
- fastd: CVE-2025-24356
- fetchmail: CVE-2025-61962
- ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800, CVE-2025-59801
- imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005, CVE-2025-55160
- intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
- jasper: CVE-2023-51257, CVE-2025-8835
- libcurl: CVE-2025-10148, CVE-2025-9086
- libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
- libssh: CVE-2025-8114, CVE-2025-8277
- lua: CVE-2014-5461
- opencv4: CVE-2025-53644
- pcre2: CVE-2025-58050
- poco: CVE-2025-6375
- postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
- python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
- python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
- python-pip: CVE-2025-8869
- raptor: CVE-2024-57822, CVE-2024-57823
- sqlite: CVE-2025-6965
- syslog-ng: CVE-2024-47619
- tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
- udisks: CVE-2025-8067
- webkitgtk: CVE-2025-24189, CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
CVE-2025-43240, CVE-2025-43265, CVE-2025-6558
- wireshark: CVE-2025-5601
Updated / fixed packages: asterisk, atop, boinc, civetweb, cjson,
connman, cpp-httplib, cups, cutekeyboard, ecryptfs-utils, exiv2, expat,
fastd, fetchmail, ghostscript, gnupg2, gnuplot, htpdate, imagemagick,
intel-microcode, iputils, jasper, jose, kodi, libcurl, libopenssl,
libssh, libxkbcommon, libxmlrpc, linux-firmware, linux-headers,
linuxptp, llvm-project, lua, luaossl, luvi, mariadb, micropython,
modsecurity2, opencv4, opencv4-contrib, openjpeg, pango, pcre2, poco,
postgresql, python-certifi, python-cryptography, python-django,
python-flask-cors, python-pip, python-pyopenssl, python-pytz, raptor,
rtl_433, ruby, samba4, sqlite, syslog-ng, sysprof, tiff, tor, uclibc,
udisks, upx, webkitgtk, wireshark, wlroots, x11r7, zziplib
Removed package: netstat-nat
Boards updated / fixed: beagleboneai, qemu/{x86, x86_64}, ti_am62x_sk
versal, zedboard
Boards removed: roseapplepi, atmel_sama5d3xek, at91sam9260eknf
Test Improvements:
- TestSWIPL: increase timeout value
- TestOpenJdk: remove stime() function call
- test_hardening: update toolchain to aarch64 for checksec tests
- test_docker_compose: update kernel & VM CPU
- TestZfsUclibc: use internal backend for uClibc-ng toolchain
- GitTestBase: remove git daemon due to Gitlab-CI security settings
2025.02.6, released September 09, 2025
Important / security related fixes:
- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
CVE-2025-5449, CVE-2025-5987
- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
- python3: CVE-2025-8194
- libhtp: CVE-2025-53537
- tiff: CVE-2025-8176, CVE-2025-8177
- libglib2: CVE-2025-6052
- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
CVE-2024-7541, CVE-2024-7542
- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
CVE-2025-1376, CVE-2025-1377
- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
CVE-2025-0689, CVE-2025-1125
- openjpeg: CVE-2025-54874
- go: CVE-2025-4674, CVE-2025-47907
- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
- vorbis-tools: CVE-2023-43361
- quickjs: CVE-2025-46688
- libde265: CVE-2024-38949, CVE-2024-38950
- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
- ffmpeg: CVE-2023-6602
- lighttpd: CVE-2025-8671
- python-h2: CPE-2025-57804
- cpp-httplib: CVE-2025-46728
- iperf3: CVE-2025-54349, CVE-2025-54350
Removed package: liboauth, thttpd
Removed defconfig: at91sam9g20dfc, at91sam9g45m10ek,
at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m, imx6ulz_bsh_smm_m2,
Test Improvements:
- test_gstreamer1: raise tesseract-ocr timeout to 15s
- test_wine: fix test after bootlin toolchains update
- test_numactl: fix test after bootlin toolchains update
- test_dpdk: fix test after bootlin toolchains update
- test_msr_tools: fix test after bootlin toolchains update
- test_dmidecode: fix test after bootlin toolchains update
- test_iso9660: use a more recent toolchain
- test_gruby: use glibc toolchain
- test_wget: replace thttpd by Busybox's httpd server
- test_libcurl: replace thttpd by Busybox's httpd server
- test_systemd_selinux: fix test after bootlin toolchains update
Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
libssh, glibc, libhtp, libapparmor, php-pecl-dbus, tini, snooze, ngrep,
libzenoh-pico, janet, nanocom, rtl8189es, gcc, ofono, python-numpy,
elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk, prboom,
setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
gstreamer1-editing-services, vorbis-tools, quickjs, libde265, vim,
ffmpeg, libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay,
libsvgtiny, libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2,
squid, ipmitool, ell, proftpd, liblog4c-localtime, wpewebkit, weston,
cpp-httplib, ipset, iperf3
Infrastructure updates/fixes:
- Various tweaks to utils/generate-cyclonedx for better SBOM
compatibility and project name/version customization
- go: make pre-built compiler provide target support too
- test-pkg: add new option -T/--toolchain-name
- pkg-utils.mk: include package directory in show-info output
- bump-stable-kernel-versions: new tool
Boards updated / fixed:
- qemu_sh4*: switch back to disk emulation
- acmesystems_acqua_a5_*: update linux
- sipeed_licheepi_zero: update linux & uboot
- zynqmp: increase vfat partition to 64M
- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
- ci20: U-Boot needs host-openssl
2025.02.5, released August 11, 2025
Important / security related fixes:
+4 -810
View File
@@ -144,816 +144,6 @@ endif
###############################################################################
comment "Legacy options removed in 2026.02"
config BR2_PACKAGE_DVDRW_TOOLS
bool "dvdrw-tools removed"
select BR2_LEGACY
help
dvdrw-tools was no longer maintained upstream, so it has
been dropped.
config BR2_PACKAGE_PHP_ZMQ
bool "php-zmq removed"
select BR2_LEGACY
help
php-zmq was no longer maintained upstream, broken with php
8.5, so it has been dropped.
config BR2_PACKAGE_LOCKDEV
bool "lockdev removed"
select BR2_LEGACY
help
lockdev was no longer maintained upstream, so it has been
dropped.
config BR2_PACKAGE_DBUS_TRIGGERD
bool "dbus-triggerd removed"
select BR2_LEGACY
help
dbus-triggerd was no longer maintained upstream, so it has
been dropped.
config BR2_PACKAGE_CVS
bool "cvs has been removed"
select BR2_LEGACY
help
The cvs project was no longer maintained upstream, broken
with GCC 14.x, so it was removed.
config BR2_PACKAGE_CRIU
bool "criu has been removed"
select BR2_LEGACY
help
criu was removed from Buildroot as it was insufficiently
maintained. It can be re-added if someone volunteers to
maintain it.
config BR2_PACKAGE_GCONF
bool "gconf package removed"
select BR2_LEGACY
help
gconf was no longer maintained upstream, so it has been
dropped.
config BR2_PACKAGE_LIBSVG
bool "libsvg package removed"
select BR2_LEGACY
help
The libsvg package has been removed. Its latest upstream
release was from 2005, it was incompatible with recent
libxml2 versions, and it wasn't used by any other Buildroot
package except libsvg-cairo, also removed.
config BR2_PACKAGE_LIBSVG_CAIRO
bool "libsvg-cairo package removed"
select BR2_LEGACY
help
The libsvg-cairo package has been removed. Its latest
upstream release was from 2005, and it wasn't used by any
other Buildroot package.
config BR2_PACKAGE_XDRIVER_XF86_INPUT_MOUSE
bool "xf86-input-mouse removed"
select BR2_LEGACY
help
Linux support was removed upstream in version
2.0.0. Upstream recommends to switch to xf86-input-evdev or
xf86-input-libinput.
config BR2_PACKAGE_HOST_JSMIN
bool "host-jsmin has been removed"
select BR2_LEGACY
help
JSMin is no longer maintained and better alternative
exists since then.
config BR2_PACKAGE_JSMIN
bool "jsmin has been removed"
select BR2_LEGACY
help
JSMin is no longer maintained and better alternative
exists since then.
config BR2_PACKAGE_VUEJS_ROUTER
bool "vuejs-router has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_VUEJS
bool "vuejs has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_VIS_NETWORK
bool "vis-network has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_OPENLAYERS
bool "openlayers has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JSZIP
bool "jszip has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JSON_JAVASCRIPT
bool "json-javascript has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_VALIDATION
bool "jquery-validation has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_UI_THEMES
bool "jquery-ui-themes has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_UI
bool "jquery-ui has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_SPARK
bool "jquery-spark has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_SIDEBAR
bool "jquery-sidebar has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_MOBILE
bool "jquery-mobile has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_KEYBOARD
bool "jquery-keyboard has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY_DATETIMEPICKER
bool "jquery-datetimepicker has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_JQUERY
bool "jquery has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_FORGE
bool "forge has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_FLOT
bool "flot has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_EXPLORERCANVAS
bool "explorercanvas has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_DATATABLES_RESPONSIVE
bool "datatables-responsive has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_DATATABLES_FIXEDCOLUMNS
bool "datatables-fixedcolumns has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_DATATABLES_BUTTONS
bool "datatables-buttons has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_DATATABLES
bool "datatables has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_CHARTJS
bool "chartjs has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_BOOTSTRAP
bool "bootstrap has been removed"
select BR2_LEGACY
help
JS libraries are no longer part of Buildroot packages.
config BR2_PACKAGE_SOFTETHER
bool "softether has been removed"
select BR2_LEGACY
help
The version packaged in Buildroot version was outdated
compared to upstream and no longer maintained by anyone
listed in the DEVELOPERS file.
config BR2_PACKAGE_RPI_USERLAND
bool "rpi-userland has been removed"
select BR2_LEGACY
help
According to https://github.com/raspberrypi/userland, "This
repo is ancient and deprecated. [...] If you are using code
from here you should rethink your solution.".
config BR2_PACKAGE_GST1_PLUGINS_BASE_LIB_OPENGL_DISPMANX
bool "gst1-plugins-base dispmanx option removed"
select BR2_LEGACY
help
Due to the removal of the rpi-userland package, the dispmanx
OpenGL plug-in from GStreamer plugin base has been removed.
config BR2_PACKAGE_RPI_FIRMWARE_INSTALL_VCDBG
bool "rpi-firmware vcdbg option removed"
select BR2_LEGACY
help
rpi-firmware upstream has dropped the vcdbg tool
config BR2_PACKAGE_LIBDNET_PYTHON
bool "libdnet python module removed"
select BR2_LEGACY
help
The libdnet Python module is no longer compatible with
Python >= 3.13, so it had to be removed.
config BR2_PACKAGE_LIBFREEIMAGE
bool "libfreeimage"
select BR2_LEGACY
help
libfreeimage is unmaintained and has been removed
config BR2_PACKAGE_OPENCV3
bool "opencv3"
select BR2_LEGACY
help
opencv3 is unmaintained and has been removed
config BR2_PACKAGE_VLC_OPENCV3_BACKEND
bool "opencv3 support in vlc has been removed"
select BR2_LEGACY
help
OpenCV3 support in VLC has been reported, as OpenCV has been
removed.
config BR2_PACKAGE_CPPDB
bool "cppdb has been removed"
select BR2_LEGACY
help
cppdb was no longer maintained upstream, and therefore was
removed.
config BR2_PACKAGE_PYTHON_AIOREDIS
bool "python-aioredis has been removed"
select BR2_LEGACY
select BR2_PACKAGE_PYTHON_REDIS
help
python-aioredis was abandoned upstream and replaced by
python-redis
config BR2_PACKAGE_LIBCUEFILE
bool "libcuefile has been removed"
select BR2_LEGACY
help
libcuefile is unmaintained and has been removed
config BR2_PACKAGE_MPD_MUSEPACK
bool "musepack support in mpd has been removed"
select BR2_LEGACY
help
musepack package is unmaintained and has been removed
config BR2_PACKAGE_GST1_PLUGINS_BAD_PLUGIN_MUSEPACK
bool "musepack support in gst1-plugins-bad has been removed"
select BR2_LEGACY
help
musepack package is unmaintained and has been removed
config BR2_PACKAGE_MUSEPACK
bool "musepack has been removed"
select BR2_LEGACY
help
musepack is unmaintained and has been removed
config BR2_PACKAGE_RACEHOUND
bool "racehound has been removed"
select BR2_LEGACY
help
racehound is unmaintained and has been removed
config BR2_PACKAGE_TASKD
bool "taskd has been removed"
select BR2_LEGACY
help
taskd was deprecated upstream and has been removed
config BR2_PACKAGE_SCONESERVER
bool "sconeserver has been removed"
select BR2_LEGACY
help
sconeserver is unmaintained and has been removed
config BR2_PACKAGE_QJSON
bool "qjson has been removed"
select BR2_LEGACY
help
qjson was deprecated upstream and has been removed
config BR2_PACKAGE_OPENTRACING_CPP
bool "opentracing-cpp has been removed"
select BR2_LEGACY
help
opentracing-cpp was deprecated upstream and has been removed
config BR2_PACKAGE_OPENPOWERLINK
bool "openpowerlink has been removed"
select BR2_LEGACY
help
openpowerlink is unmaintained and has been removed
config BR2_PACKAGE_ALURE
bool "alure has been removed"
select BR2_LEGACY
help
alure is unmaintained and has been removed
config BR2_PACKAGE_LIBUWSC
bool "libuwsc has been removed"
select BR2_LEGACY
help
libuwsc is unmaintained and has been removed
config BR2_PACKAGE_LIBIQRF
bool "libiqrf has been removed"
select BR2_LEGACY
help
libiqrf is unmaintained and has been removed
config BR2_PACKAGE_LIBCGI
bool "libcgi has been removed"
select BR2_LEGACY
help
libcgi is unmaintained and has been removed
config BR2_PACKAGE_LET_ME_CREATE
bool "let-me-create has been removed"
select BR2_LEGACY
help
let-me-create is unmaintained and has been removed
config BR2_PACKAGE_HAWKTRACER
bool "hawktracer has been removed"
select BR2_LEGACY
help
hawktracer is unmaintained and has been removed
config BR2_PACKAGE_CONNMAN_GTK
bool "connman-gtk has been removed"
select BR2_LEGACY
help
connman-gtk is unmaintained and has been removed
config BR2_PACKAGE_LIBMHASH
bool "libmhash has been removed"
select BR2_LEGACY
help
libmhash is unmaintained and has been removed
config BR2_PACKAGE_DMRAID
bool "dmraid has been removed"
select BR2_LEGACY
help
dmraid is unmaintained and has been removed
config BR2_PACKAGE_LIBNIDS
bool "libnids has been removed"
select BR2_LEGACY
help
libnids is unmaintained and has been removed
config BR2_TARGET_S500_BOOTLOADER
bool "s500-bootloader"
select BR2_LEGACY
help
s500-bootloader package has been removed
config BR2_PACKAGE_OPENCV3_WITH_FFMPEG
bool "opencv3 ffmpeg support removed"
select BR2_LEGACY
help
Support for OpenCV 3 ffmpeg support has been removed as it
was no longer compatible with recent versions of ffmpeg.
config BR2_PACKAGE_OPENCV3_WITH_PROTOBUF
bool "opencv3 protobuf support removed"
select BR2_LEGACY
help
Support for OpenCV 3 protobuf support has been removed as it
was no longer compatible with recent versions of protobuf.
config BR2_PACKAGE_RESIPROCATE_APPS
bool "resiprocate apps support option removed"
select BR2_LEGACY
help
The build system does not contain an apps-specific option
anymore.
config BR2_PACKAGE_WATCHDOGD_TEST_SUITE
bool "The watchdogd test mode option has been removed."
select BR2_LEGACY
help
watchdogd v4.1 removes the test mode and test suite.
config BR2_KERNEL_HEADERS_6_17
bool "kernel headers version 6.17.x are no longer supported"
select BR2_LEGACY
help
Version 6.17.x of the Linux kernel headers are no longer
maintained upstream and are now removed.
config BR2_PACKAGE_MESA3D_VDPAU
bool "mesa3d Gallium VDPAU state tracker support removed"
select BR2_LEGACY
help
Mesa3d removed the Gallium VDPAU state tracker.
config BR2_BINUTILS_VERSION_2_42_X
bool "binutils 2.42 has been removed"
select BR2_LEGACY
help
binutils 2.42 has been removed, select a newer version
instead.
config BR2_arceb
bool "ARC big endian support removed"
select BR2_LEGACY
help
Synopsys' DesignWare ARC Processor Cores are a family of
32-bit CPUs that can be used from deeply embedded to high
performance host applications. The big endian support was
not used nor maintained, so it was removed.
comment "Legacy options removed in 2025.11"
config BR2_KERNEL_HEADERS_5_4
bool "kernel headers version 5.4.x are no longer supported"
select BR2_LEGACY
help
Version 5.4.x of the Linux kernel headers are no longer
maintained upstream and are now removed.
config BR2_PACKAGE_LIBARGTABLE2
bool "libargtable2 has been removed"
select BR2_LEGACY
help
libargtable2 is unmaintained and has been removed
config BR2_PACKAGE_OLA
bool "ola has been removed"
select BR2_LEGACY
help
ola is incompatible with current versions of protobuf
config BR2_PACKAGE_BATMAN_ADV_NC
bool "batman-adv removed network coding"
select BR2_LEGACY
help
batman-adv removed B.A.T.M.A.N. network coding
config BR2_PACKAGE_DVBSNOOP
bool "dvbsnoop has been removed"
select BR2_LEGACY
help
dvbsnoop is unmaintained and has been removed
config BR2_PACKAGE_PROCRANK_LINUX
bool "procrank_linux has been removed"
select BR2_LEGACY
help
procrank_linux is unmaintained and has been removed
config BR2_PACKAGE_MONGREL2
bool "mongrel2 has been removed"
select BR2_LEGACY
help
mongrel2 is incompatible with MbedTLS 3.6 and has been removed
config BR2_PACKAGE_EXPECT
bool "expect has been removed"
select BR2_LEGACY
help
expect is unmaintained and has been removed
config BR2_PACKAGE_BCTOOLBOX
bool "bctoolbox has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle bctoolbox making a separate package unnecessary.
config BR2_PACKAGE_ORTP
bool "ortp has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle ortp making a separate package unnecessary.
config BR2_PACKAGE_MEDIASTREAMER
bool "mediastreamer has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle mediastreamer making a separate package unnecessary.
config BR2_PACKAGE_BELR
bool "belr has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle belr making a separate package unnecessary.
config BR2_PACKAGE_BELLE_SIP
bool "belle-sip has been removed"
select BR2_LEGACY
help
This package has been removed as part of the linphone
removal. In addition, newer version of linphone directly
bundle belle-sip making a separate package unnecessary.
config BR2_PACKAGE_LINPHONE
bool "linphone has been removed"
select BR2_LEGACY
help
This package was no longer maintained in Buildroot and was
no longer building. It can be re-added if someone volunteers
to fix the issues, update the package and maintain it.
config BR2_PACKAGE_LIBJWT
bool "libjwt has been removed"
select BR2_LEGACY
help
The only dependee of libjwt, asterisk, is incompatible with
version 3 so the version bundled with asterisk is used and
this package has been removed.
config BR2_PACKAGE_RAMSPEED
bool "ramspeed has been removed"
select BR2_LEGACY
help
The ramspeed package was removed as it is not maintained
anymore and the upstream repo is gone.
config BR2_PACKAGE_LESSTIF
bool "lesstif has been removed"
select BR2_LEGACY
help
lesstif is unmaintained and has been removed
config BR2_KERNEL_HEADERS_6_16
bool "kernel headers version 6.16.x are no longer supported"
select BR2_LEGACY
help
Version 6.16.x of the Linux kernel headers are no longer
maintained upstream and are now removed.
config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_1CK
bool "This firmware has been removed"
select BR2_LEGACY
help
This firmware has been removed from Murata package
config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP
bool "BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP has been renamed"
select BR2_LEGACY
select BR2_PACKAGE_MURATA_CYW_FW_CYW4339
help
The option has been renamed to
BR2_PACKAGE_MURATA_CYW_FW_CYW4339
config BR2_PACKAGE_LIBBSON
bool "libbson has been removed"
select BR2_LEGACY
help
libbson is officially deprecated upstream and has been removed
config BR2_TARGET_ROOTFS_AXFS
bool "AXFS root filesystem has been removed"
select BR2_LEGACY
help
AXFS root filesystem support has been removed.
config BR2_PACKAGE_LOGSURFER
bool "logsurfer has been removed"
select BR2_LEGACY
help
Logsurfer last updates was on 2011 and fails to build with
GCC14.
config BR2_LINUX_KERNEL_EXT_FBTFT
bool "FB TFT drivers are deprecated"
select BR2_LEGACY
help
FB TFT drivers were only needed for linux kernels until v3.19,
since v4.0 the drivers are included in the staging area.
config BR2_PACKAGE_DMENU_WAYLAND
bool "dmenu-wayland has been removed"
select BR2_LEGACY
help
The package has been abandoned for several years.
The only package that previously relied on dmenu-wayland
was sway, and that now relies on wmenu. Please select
wmenu instead.
config BR2_PACKAGE_SYLPHEED
bool "sylpheed has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the sylpheed package has been
removed.
config BR2_PACKAGE_PINENTRY_GTK2
bool "gtk2 backend of pinentry has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk2 backend of pinentry
has been removed.
config BR2_PACKAGE_OPENCV4_WITH_GTK
bool "opencv4 gtk support has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk support of opencv4
has been removed. gtk3 support is still available.
config BR2_PACKAGE_OPENCV3_WITH_GTK
bool "opencv3 gtk support has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk support of opencv3
has been removed. gtk3 support is still available.
config BR2_PACKAGE_NETSURF_GTK
bool "gtk frontend of netsurf has been removed"
select BR2_LEGACY
help
Due to the removal of libgtk2, the gtk frontend of netsurf
has been removed. The gtk3 frontend can be used instead for
example.
config BR2_PACKAGE_METACITY
bool "metacity has been removed"
select BR2_LEGACY
help
The metacity package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_LIBSEXY
bool "libsexy has been removed"
select BR2_LEGACY
help
The libsexy package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_LIBGLADE
bool "libglade has been removed"
select BR2_LEGACY
help
The libglade package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_LEAFPAD
bool "leafpad has been removed"
select BR2_LEGACY
help
The leafpad package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_GTKPERF
bool "gtkperf has been removed"
select BR2_LEGACY
help
The gtkperf package has been removed, as libgtk2 has been
removed as well.
config BR2_PACKAGE_GTK2_ENGINES
bool "gtk2-engines has been removed"
select BR2_LEGACY
help
The gtk2-engines package has been removed, as libgtk2 has
been removed as well.
config BR2_PACKAGE_GKRELLM_CLIENT
bool "gkrellm client has been removed"
select BR2_LEGACY
help
The gkrellm client option has been removed, as it required
libgtk2, which was removed from Buildroot.
config BR2_PACKAGE_CWIID_WMGUI
bool "cwiid wmgui has been removed"
select BR2_LEGACY
help
The wmgui part of cwiid required libgtk2, which has been
removed from Buildroot.
config BR2_LINUX_KERNEL_EXT_AUFS
bool "Aufs Filesystem Module patch has been removed"
select BR2_LEGACY
help
aufs kernel module patch is unmaintained and has been
removed.
config BR2_PACKAGE_AUFS_UTIL
bool "aufs-util has been removed"
select BR2_LEGACY
help
aufs-util package is unmaintained and has been removed.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARMEB
bool "Linaro armeb 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro armeb 2018.05 is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARM
bool "Linaro ARM 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro ARM 2018.05 is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64_BE
bool "Linaro AArch64 BE 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro AArch64 2018.05 BE is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64
bool "Linaro AArch64 2018.05 external toolchain is deprecated"
select BR2_LEGACY
help
Linaro AArch64 2018.05 is no longer maintained and has been
removed from Buildroot.
config BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS
bool "Sourcery CodeBench MIPS external toolchain is deprecated"
select BR2_LEGACY
help
Sourcery CodeBench MIPS 2016.05 is no longer maintained
and has been removed from Buildroot.
config BR2_LINUX_KERNEL_EXT_EV3DEV_LINUX_DRIVERS
bool "ev3dev Linux drivers have been removed"
select BR2_LEGACY
help
Linux drivers for LEGO MINDSTORMS EV3 from the ev3dev project
are targeting an outdated kernel which is no longer supported.
comment "Legacy options removed in 2025.08"
config BR2_PACKAGE_NETSTAT_NAT
@@ -6379,6 +5569,8 @@ config BR2_PACKAGE_OPENPOWERLINK_KERNEL_MODULE
help
openpowerlink kernel modules are built if the
kernel stack library is selected.
# Note: BR2_PACKAGE_OPENPOWERLINK_KERNEL_MODULE is still referenced from
# package/openpowerlink/Config.in
config BR2_PACKAGE_OPENPOWERLINK_LIBPCAP
bool "openpowerlink package has been updated"
@@ -6387,6 +5579,8 @@ config BR2_PACKAGE_OPENPOWERLINK_LIBPCAP
The user space support has been split in two part:
- a monolithic user space library
- a user space daemon driver
# Note: BR2_PACKAGE_OPENPOWERLINK_LIBPCAP is still referenced from
# package/openpowerlink/Config.in
config BR2_LINUX_KERNEL_SAME_AS_HEADERS
bool "using the linux headers version for the kernel has been removed"
+80 -114
View File
@@ -86,12 +86,6 @@ F: package/modem-manager/
N: Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
F: package/cpp-httplib/
N: Alexander Shirokov <shirokovalexs@gmail.com>
F: package/broot/
F: package/kibi/
F: package/nnn/
F: package/zellij/
N: Alessandro Partesotti <a.partesotti@gmail.com>
F: package/oatpp/
@@ -131,9 +125,6 @@ F: package/openpgm/
N: Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
F: package/libest/
N: Alexander Shirokov <shirokovalexs@gmail.com>
F: package/aichat/
N: Alexander Sverdlin <alexander.sverdlin@gmail.com>
F: package/mini-snmpd/
@@ -154,11 +145,6 @@ F: configs/cubieboard2_defconfig
N: Alexey Lukyanchuk <skif@skif-web.ru>
F: package/zabbix/
N: Alexis Lothoré <alexis.lothore@bootlin.com>
F: package/libxmlsec1/
F: package/openscap/
F: package/python-scp/
N: Alistair Francis <alistair@alistair23.me>
F: board/sifive/
F: boot/opensbi/
@@ -184,9 +170,6 @@ F: package/libkrb5/
F: package/p7zip/
F: package/wine/
N: Andrea Ricchi <andrea.ricchi@amarulasolutions.com>
F: package/cutekeyboard/
N: Andreas Klinger <ak@it-klinger.de>
F: package/ply/
@@ -348,13 +331,12 @@ F: package/tcpdump/
F: package/ti-uim/
F: package/uhubctl/
N: Bastien Curutchet <bastien.curutchet@bootlin.com>
F: package/rasdaemon/
F: support/testing/tests/package/test_rasdaemon.py
N: Baxiche Su <baxiche@gmail.com>
F: package/qt6/qt6multimedia/
N: Ben Boeckel <mathstuf@gmail.com>
F: package/taskd/
N: Benjamin Kamath <kamath.ben@gmail.com>
F: package/lapack/
@@ -415,6 +397,7 @@ F: package/libcec/
F: package/libcodec2/
F: package/libcrossguid/
F: package/libde265/
F: package/libdecor/
F: package/libdeflate/
F: package/libdisplay-info/
F: package/libdrm/
@@ -422,13 +405,13 @@ F: package/libdvbcsa/
F: package/libdvdcss/
F: package/libdvdnav/
F: package/libdvdread/
F: package/libfreeglut/
F: package/libfribidi/
F: package/libg7221/
F: package/libglew/
F: package/libglu/
F: package/libhdhomerun/
F: package/libheif/
F: package/libid3tag/
F: package/libilbc/
F: package/libldns/
F: package/libmicrohttpd/
@@ -439,7 +422,6 @@ F: package/libnpth/
F: package/libogg/
F: package/libopenh264/
F: package/libpciaccess/
F: package/libplacebo/
F: package/libplatform/
F: package/libpng/
F: package/libsidplay2/
@@ -496,7 +478,6 @@ F: package/perl-uri/
F: package/perl-www-robotrules/
F: package/php/
F: package/pngquant/
F: package/postgresql/
F: package/pppd/
F: package/privoxy/
F: package/pure-ftpd/
@@ -592,7 +573,10 @@ F: package/jailhouse/
F: package/sunxi-boards/
N: Carsten Schoenert <c.schoenert@gmail.com>
F: package/dvbsnoop/
F: package/libdvbsi/
F: package/libsvg/
F: package/libsvg-cairo/
N: Cédric Chépied <cedric.chepied@gmail.com>
F: package/znc/
@@ -802,14 +786,12 @@ N: Dario Binacchi <dario.binacchi@amarulasolutions.com>
F: board/bsh/
F: board/stmicroelectronics/stm32f746-disco/
F: board/stmicroelectronics/stm32f769-disco/
F: board/stmicroelectronics/stm32h747-disco/
F: boot/ti-k3-boot-firmware/
F: configs/imx6ulz_bsh_smm_m2_defconfig
F: configs/imx8mn_bsh_smm_s2_defconfig
F: configs/imx8mn_bsh_smm_s2_pro_defconfig
F: configs/stm32f746_disco_sd_defconfig
F: configs/stm32f769_disco_sd_defconfig
F: configs/stm32h747_disco_sd_defconfig
F: package/aespipe/
F: package/armadillo/
F: package/atf/
@@ -820,8 +802,6 @@ F: package/connman/
F: package/empty/
F: package/iana-assignments/
F: package/inih/
F: package/less/
F: package/libgphoto2/
F: package/pocketpy/
F: package/sscep/
F: package/tinyinit/
@@ -848,7 +828,9 @@ F: package/libtalloc/
N: David Lechner <david@lechnology.com>
F: board/lego/ev3/
F: configs/lego_ev3_defconfig
F: linux/linux-ext-ev3dev-linux-drivers.mk
F: package/brickd/
F: package/ev3dev-linux-drivers/
N: David Pierret <david.pierret@smile.fr>
F: package/bat/
@@ -888,7 +870,6 @@ N: Dimitar Tomov <dimi@tpm.dev>
F: package/wolftpm/
N: Dimitrios Siganos <dimitris@siganos.org>
F: package/bvi/
F: package/wireless-regdb/
N: Dmitry Chestnykh <dm.chestnykh@gmail.com>
@@ -896,6 +877,9 @@ F: board/qemu/sparc-ss10/
F: configs/qemu_sparc_ss10_defconfig
F: package/uclibc-ng-test/
N: Dominik Faessler <faessler@was.ch>
F: package/logsurfer/
N: Dominik Michael Rauh <dmrauh@posteo.de>
F: package/gdal/
@@ -1028,6 +1012,8 @@ F: package/openzwave/
N: Fabrice Fontaine <fontaine.fabrice@gmail.com>
F: package/bearssl/
F: package/belle-sip/
F: package/belr/
F: package/boinc/
F: package/cairo/
F: package/daq3/
@@ -1058,6 +1044,7 @@ F: package/libcue/
F: package/libebml/
F: package/libgee/
F: package/libglib2/
F: package/libgtk2/
F: package/libgtk3/
F: package/libhtp/
F: package/libidn/
@@ -1122,18 +1109,11 @@ N: Fiona Klute <fiona.klute@gmx.de>
F: package/*/S*
F: package/panel-mipi-dbi-firmware/
F: package/python-aiomqtt/
F: package/python-markdown-it-py/
F: package/python-mdurl/
F: package/python-platformdirs/
F: package/python-pyasynchat/
F: package/python-pyasyncore/
F: package/python-rich/
F: package/python-textual/
F: support/testing/tests/package/sample_python_networkmanager_goi.py
F: support/testing/tests/package/sample_python_pyroute2.py
F: support/testing/tests/package/test_nftables.py
F: support/testing/tests/package/test_python_networkmanager_goi.py
F: support/testing/tests/package/test_python_pyroute2.py
N: Flávio Tapajós <flavio.tapajos@newtesc.com.br>
F: configs/asus_tinker-s_rk3288_defconfig
@@ -1147,7 +1127,6 @@ F: package/cpulimit/
N: Florian Larysch <fl@n621.de>
F: package/casync-nano/
F: package/sigsum-go/
N: Floris Bos <bos@je-eigen-domein.nl>
F: package/ipmitool/
@@ -1169,25 +1148,33 @@ F: configs/sipeed_licheepi_nano_defconfig
F: configs/visionfive2_defconfig
N: Francois Perrad <francois.perrad@gadz.org>
F: board/freescale/ls1028ardb/
F: board/olimex/a20_olinuxino
F: board/olimex/imx233_olinuxino/
F: board/olimex/stmp1_olinuxino/
F: configs/ls1028ardb_defconfig
F: configs/olimex_a20_olinuxino_*
F: configs/olimex_imx233_olinuxino_defconfig
F: configs/olimex_stmp157_olinuxino_lime_defconfig
F: package/4th/
F: package/cgilua/
F: package/chipmunk/
F: package/cog/
F: package/collectl/
F: package/copas/
F: package/coxpcall/
F: package/dado/
F: package/ficl/
F: package/graphene/
F: package/janet/
F: package/libgtk4/
F: package/libtomcrypt/
F: package/libtommath/
F: package/libwpe/
F: package/linenoise/
F: package/ljlinenoise/
F: package/lua-inotify/
F: package/lmdb/
F: package/lpeg/
F: package/lpty/
F: package/lrandom/
@@ -1196,11 +1183,16 @@ F: package/lua*
F: package/lynis/
F: package/lzlib/
F: package/moarvm/
F: package/mstpd/
F: package/netsurf/
F: package/perl*
F: package/pkg-perl.mk
F: package/pkg-luarocks.mk
F: package/quickjs/
F: package/rings/
F: package/tekui/
F: package/wpebackend-fdo/
F: package/wpewebkit/
F: package/wsapi/
F: package/wsapi-fcgi/
F: package/wsapi-xavante/
@@ -1220,7 +1212,7 @@ F: package/sane-backends/
F: package/upx/
F: package/zxing-cpp/
N: Frank Vanbever <fvb@funkworks.be>
N: Frank Vanbever <frank.vanbever@mind.be>
F: package/libmodsecurity/
F: package/nginx-modsecurity/
@@ -1260,6 +1252,7 @@ F: package/cctz/
F: package/clpeak/
F: package/faad2/
F: package/fdk-aac/
F: package/hawktracer/
F: package/httping/
F: package/iozone/
F: package/leptonica/
@@ -1291,10 +1284,8 @@ F: configs/mangopi_mq1rdw2_defconfig
F: configs/olimex_a*
F: configs/rockpro64_defconfig
F: package/at/
F: package/bind/
F: package/binutils/
F: package/cryptsetup/
F: package/dash/
F: package/erlang-jiffy/
F: package/esp-hosted/
F: package/gcc/
@@ -1305,7 +1296,6 @@ F: package/liblo/
F: package/libnspr/
F: package/libnss/
F: package/libnvme/
F: package/libtirpc/
F: package/libtraceevent/
F: package/libtracefs
F: package/linux-tools/linux-tool-rtla.mk.in
@@ -1314,12 +1304,10 @@ F: package/minicom/
F: package/mongoose/
F: package/mmc-utils/
F: package/nfs-utils/
F: package/putty/
F: package/python-libconf/
F: package/python-uvloop/
F: package/qt5/
F: package/rockchip-mali/
F: package/rpcbind/
F: package/rtl8188eu/
F: package/rtl8189es/
F: package/rtl8192eu/
@@ -1333,13 +1321,9 @@ F: package/sunxi-mali-utgard-driver/
F: package/sunxi-tools/
F: package/swugenerator/
F: package/swupdate/
F: package/tmux/
F: package/trace-cmd/
F: package/udisks/
F: package/util-linux/
F: package/vim/
F: package/wilc-driver/
F: package/zlib-ng/
F: toolchain/
N: Graeme Smecher <gsmecher@threespeedlogic.com>
@@ -1377,6 +1361,7 @@ N: Guillaume Chaye <guillaume.chaye@zeetim.com>
F: package/sane-airscan/
N: Guillaume William Brs <guillaume.bressaix@gmail.com>
F: package/libnids/
F: package/libxcrypt/
F: package/liquid-dsp/
F: package/mbw/
@@ -1564,6 +1549,9 @@ N: Jan Havran <havran.jan@email.cz>
F: board/pine64/pinecube/
F: configs/pine64_pinecube_defconfig
N: Jan Heylen <jan.heylen@nokia.com>
F: package/opentracing-cpp/
N: Jan Kraval <jan.kraval@gmail.com>
F: board/orangepi/orangepi-lite
F: configs/orangepi_lite_defconfig
@@ -1630,6 +1618,7 @@ F: package/qt6/
N: Jianhui Zhao <zhaojh329@gmail.com>
F: package/libuhttpd/
F: package/libuwsc/
F: package/rtty/
N: Jiaxun Yang <jiaxun.yang@flygoat.com>
@@ -1708,7 +1697,10 @@ F: package/erlang-p1-yconf/
F: package/erlang-p1-zlib/
F: package/erlang-stun/
F: package/erlang-xmpp/
F: package/forge/
F: package/nginx-dav-ext/
F: package/vis-network/
F: package/vuejs/
N: John Stile <johns@msli.com>
F: package/dhcpcd/
@@ -1751,8 +1743,8 @@ F: support/testing/tests/package/test_zfs.py
N: Joseph Kogut <joseph.kogut@gmail.com>
F: package/at-spi2-core/
F: package/earlyoom/
F: package/gconf/
F: package/libnss/
F: package/llama-cpp/
F: package/llvm-project/clang/
F: package/llvm-project/lld/
F: package/llvm-project/llvm/
@@ -1791,6 +1783,9 @@ F: package/libmodbus/
F: package/ltris/
F: package/opentyrian/
N: Julien Corjon <corjon.j@ecagroup.com>
F: package/qt5/
N: Julien Grossholtz <julien.grossholtz@openest.io>
F: board/raspberrypi/
F: configs/raspberrypizero2w_defconfig
@@ -1817,6 +1812,7 @@ F: package/libopenmpt/
F: package/mokutil/
F: package/oath-toolkit/
F: package/octave/
F: package/ola/
F: package/openblas/
F: package/opencsd/
F: package/openmpi/
@@ -1859,8 +1855,6 @@ F: support/testing/tests/package/test_4th.py
F: support/testing/tests/package/test_acl.py
F: support/testing/tests/package/test_acpica.py
F: support/testing/tests/package/test_acpica/
F: support/testing/tests/package/test_aichat.py
F: support/testing/tests/package/test_aichat/
F: support/testing/tests/package/test_apache.py
F: support/testing/tests/package/test_attr.py
F: support/testing/tests/package/test_audio_codec_base.py
@@ -1877,6 +1871,8 @@ F: support/testing/tests/package/test_compressor_base.py
F: support/testing/tests/package/test_coremark.py
F: support/testing/tests/package/test_cryptsetup.py
F: support/testing/tests/package/test_cryptsetup/
F: support/testing/tests/package/test_ddrescue.py
F: support/testing/tests/package/test_ddrescue/
F: support/testing/tests/package/test_dieharder.py
F: support/testing/tests/package/test_dmidecode.py
F: support/testing/tests/package/test_dos2unix.py
@@ -1890,7 +1886,6 @@ F: support/testing/tests/package/test_exfatprogs.py
F: support/testing/tests/package/test_exfatprogs/
F: support/testing/tests/package/test_file.py
F: support/testing/tests/package/test_file/
F: support/testing/tests/package/test_flac.py
F: support/testing/tests/package/test_fluidsynth.py
F: support/testing/tests/package/test_fluidsynth/
F: support/testing/tests/package/test_fping.py
@@ -1928,8 +1923,6 @@ F: support/testing/tests/package/test_kmod.py
F: support/testing/tests/package/test_kmod/
F: support/testing/tests/package/test_kmscube.py
F: support/testing/tests/package/test_kmscube/
F: support/testing/tests/package/test_kvmtool.py
F: support/testing/tests/package/test_kvmtool/
F: support/testing/tests/package/test_lame.py
F: support/testing/tests/package/test_less.py
F: support/testing/tests/package/test_libcamera.py
@@ -1940,7 +1933,6 @@ F: support/testing/tests/package/test_libjxl.py
F: support/testing/tests/package/test_lighttpd.py
F: support/testing/tests/package/test_links.py
F: support/testing/tests/package/test_links/
F: support/testing/tests/package/test_llama_cpp.py
F: support/testing/tests/package/test_lrzip.py
F: support/testing/tests/package/test_lrzsz.py
F: support/testing/tests/package/test_ltp_testsuite.py
@@ -1975,9 +1967,10 @@ F: support/testing/tests/package/test_numactl.py
F: support/testing/tests/package/test_numactl/
F: support/testing/tests/package/test_oath_toolkit.py
F: support/testing/tests/package/test_octave.py
F: support/testing/tests/package/test_ola.py
F: support/testing/tests/package/test_ola/
F: support/testing/tests/package/test_openblas.py
F: support/testing/tests/package/test_openocd.py
F: support/testing/tests/package/test_opus_tools.py
F: support/testing/tests/package/test_parted.py
F: support/testing/tests/package/test_patch.py
F: support/testing/tests/package/test_patch/
@@ -2019,7 +2012,6 @@ F: support/testing/tests/package/test_tcl.py
F: support/testing/tests/package/test_tcl/
F: support/testing/tests/package/test_tcpdump.py
F: support/testing/tests/package/test_tesseract_ocr.py
F: support/testing/tests/package/test_tio.py
F: support/testing/tests/package/test_trace_cmd.py
F: support/testing/tests/package/test_trace_cmd/
F: support/testing/tests/package/test_tree.py
@@ -2135,6 +2127,9 @@ F: package/python-gunicorn/
F: support/testing/tests/package/sample_python_flask.py
F: support/testing/tests/package/test_python_flask.py
N: Lionel Orry <lionel.orry@gmail.com>
F: package/mongrel2/
N: Lothar Felten <lothar.felten@gmail.com>
F: board/bananapi/bananapi-m2-ultra/
F: board/beagleboard/beaglebone/
@@ -2203,6 +2198,7 @@ N: Mahyar Koshkouei <mahyar.koshkouei@gmail.com>
F: package/ffmpeg/
F: package/mpv/
F: package/rpi-firmware/
F: package/rpi-userland/
N: Marcin Bis <marcin@bis.org.pl>
F: package/bluez5_utils/
@@ -2249,6 +2245,7 @@ F: support/testing/tests/package/test_python_pytest.py
F: support/testing/tests/package/test_python_pytest_asyncio.py
N: Marcus Folkesson <marcus.folkesson@gmail.com>
F: package/criu/
F: package/libcamera/
F: package/libcamera-apps/
F: package/libostree/
@@ -2265,12 +2262,9 @@ N: Marcus Hoffmann <bubu@bubu1.eu>
F: package/nethogs/
F: package/pico-sdk/
F: package/picotool/
F: package/python-annotated-doc/
F: package/python-apscheduler/
F: package/python-crc/
F: package/python-diskcache/
F: package/python-django/
F: package/python-gpiod/
F: package/python-immutabledict/
F: package/python-jc/
F: package/python-log-rate-limit/
@@ -2281,37 +2275,25 @@ F: package/python-ruamel-yaml-clib/
F: package/python-typing-inspection/
F: package/python-tzlocal/
F: package/python-sdbus-modemmanager/
F: package/python-sdbus-systemd/
F: package/python-varlink/
F: package/python-waitress/
F: package/python-whitenoise/
F: support/testing/tests/package/test_python_apscheduler.py
F: support/testing/tests/package/test_python_crc.py
F: support/testing/tests/package/test_python_diskcache.py
F: support/testing/tests/package/test_python_django.py
F: support/testing/tests/package/test_python_fastapi.py
F: support/testing/tests/package/test_python_pydantic.py
F: support/testing/tests/package/test_python_pydantic_settings.py
F: support/testing/tests/package/test_python_requests.py
F: support/testing/tests/package/test_python_ruamel_yaml.py
F: support/testing/tests/package/test_python_sdbus_modemmanager.py
F: support/testing/tests/package/test_python_sdbus_systemd.py
F: support/testing/tests/package/test_python_tzlocal.py
F: support/testing/tests/package/test_python_varlink.py
F: support/testing/tests/package/test_python_varlink/
F: support/testing/tests/package/test_python_waitress.py
F: support/testing/tests/package/test_python_whitenoise.py
F: support/testing/tests/package/sample_python_apscheduler.py
F: support/testing/tests/package/sample_python_crc.py
F: support/testing/tests/package/sample_python_diskcache.py
F: support/testing/tests/package/sample_python_django.py
F: support/testing/tests/package/sample_python_fastapi.py
F: support/testing/tests/package/sample_python_pydantic.py
F: support/testing/tests/package/sample_python_pydantic_settings.py
F: support/testing/tests/package/sample_python_requests.py
F: support/testing/tests/package/sample_python_ruamel_yaml.py
F: support/testing/tests/package/sample_python_sdbus_modemmanager.py
F: support/testing/tests/package/sample_python_sdbus_systemd.py
N: Marek Belisko <marek.belisko@open-nandra.com>
F: package/libatasmart/
@@ -2438,13 +2420,13 @@ N: Michael Nosthoff <buildroot@heine.tech>
F: package/boost/
F: package/catch2/
F: package/fmt/
F: package/grpc/
F: package/gtest/
F: package/json-for-modern-cpp/
F: package/libabseil-cpp/
F: package/libgpiod2/
F: package/networkd-dispatcher/
F: package/protobuf/
F: package/sdbus-cpp/
F: package/re2/
F: package/spdlog/
F: package/sqlitecpp/
@@ -2486,9 +2468,6 @@ F: package/libfribidi/
N: Mircea Gliga <gliga.mircea@gmail.com>
F: package/mbuffer/
N: Mohammed Sadik Shaik <s-sadik@ti.com>
F: package/k3conf/
N: Murat Demirten <mdemirten@yh.com.tr>
F: package/jpeg-turbo/
F: package/libgeotiff/
@@ -2502,7 +2481,6 @@ F: package/libgudev/
N: Neal Frager <neal.frager@amd.com>
F: board/versal/
F: board/versal2/
F: board/xilinx/
F: board/zynq/
F: board/zynqmp/
@@ -2511,7 +2489,6 @@ F: boot/xilinx-prebuilt/
F: configs/versal_vck190_defconfig
F: configs/versal_vek280_defconfig
F: configs/versal_vpk180_defconfig
F: configs/versal2_vek385_defconfig
F: configs/zynq_zc702_defconfig
F: configs/zynq_zc706_defconfig
F: configs/zynqmp_kria_kd240_defconfig
@@ -2744,9 +2721,6 @@ F: package/psplash/
F: package/sispmctl/
F: package/zsh/
N: Philip Molloy <philip@philipmolloy.com>
F: package/adsp-ldr/
N: Philipp Richter <richterphilipp.pops@gmail.com>
F: package/libtorrent-rasterbar/
@@ -2795,6 +2769,9 @@ F: package/libdvbpsi/
F: package/mraa/
F: package/synergy/
N: Prabhu Sannachi <prabhu.sannachi@collins.com>
F: package/redis-plus-plus/
N: Qais Yousef <qais.yousef@arm.com>
F: package/bpftrace/
@@ -2814,6 +2791,7 @@ F: package/glog/
F: package/gssdp/
F: package/gupnp/
F: package/gupnp-av/
F: package/let-me-create/
F: package/nanomsg/
N: Ralf Dragon <hypnotoad@lindra.de>
@@ -2862,6 +2840,9 @@ N: Refik Tuzakli <tuzakli.refik@gmail.com>
F: package/freescale-imx/
F: package/paho-mqtt-cpp/
N: Rémi Rérolle <remi.rerolle@gmail.com>
F: package/libfreeimage/
N: Renaud Aubin <root@renaud.io>
F: package/libhttpparser/
@@ -2912,6 +2893,7 @@ F: configs/qemu_*
F: configs/am574x_idk_defconfig
F: configs/beagleboneai64_defconfig
F: configs/beagley_ai_defconfig
F: package/alure/
F: package/aubio/
F: package/bcc/
F: package/binutils/
@@ -2943,6 +2925,7 @@ F: package/mesa3d/
F: package/minetest/
F: package/minetest-game/
F: package/ogre/
F: package/openpowerlink/
F: package/physfs/
F: package/piglit/
F: package/python-libevdev/
@@ -3005,6 +2988,7 @@ F: package/wlr-randr/
N: Semyon Kolganov <semenak94@mail.ru>
F: package/fmt/
F: package/libbson/
F: package/lua-resty-http/
F: package/mpir/
@@ -3062,6 +3046,9 @@ F: package/czmq/
F: package/filemq/
F: package/googlefontdirectory/
F: package/jansson/
F: package/jquery-ui/
F: package/jquery-ui-themes/
F: package/json-javascript/
F: package/lcdapi/
F: package/libfreefare/
F: package/libjson/
@@ -3077,6 +3064,7 @@ F: package/neard/
F: package/neardal/
F: package/owl-linux/
F: package/rapidjson/
F: package/sconeserver/
F: package/sound-theme-borealis/
F: package/sound-theme-freedesktop/
F: package/vlc/
@@ -3142,6 +3130,7 @@ F: package/libcli/
N: Steve Kenton <skenton@ou.edu>
F: package/dvdauthor/
F: package/dvdrw-tools/
F: package/memtest86/
F: package/mjpegtools/
F: package/udftools/
@@ -3184,14 +3173,17 @@ F: package/x265/
N: Thomas Bonnefille <thomas.bonnefille@bootlin.com>
F: board/pine64/star64
F: configs/pine64_star64_defconfig
F: package/starfive-spltool/
N: Thomas Claveirole <thomas.claveirole@green-communications.fr>
F: package/fcgiwrap/
F: package/openlayers/
F: package/vuejs/
F: package/vuejs-router/
N: Thomas Devoogdt <thomas@devoogdt.com>
F: package/fluent-bit/
F: package/libsoup3/
F: package/yq/
N: Thomas Huth <th.huth+br@posteo.eu>
F: package/ascii-invaders/
@@ -3201,8 +3193,6 @@ F: package/xorcurses/
N: Thomas Perale <thomas.perale@mind.be>
F: package/go/
F: utils/generate-cyclonedx
F: support/scripts/cve-check
F: support/scripts/cve.py
N: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
F: arch/Config.in.arm
@@ -3253,11 +3243,8 @@ F: package/pkg-autotools.mk
F: package/pkg-generic.mk
F: package/python3/
F: package/python-augeas/
F: package/python-crccheck/
F: package/python-flask-expects-json/
F: package/python-fs/
F: package/python-git/
F: package/python-pyfatfs/
F: package/python-qrcode/
F: package/python-serial/
F: package/python-unittest-xml-reporting/
@@ -3269,7 +3256,6 @@ F: package/rt-tests/
F: package/rtc-tools/
F: package/sam-ba/
F: package/scons/
F: package/snagboot/
F: package/squashfs/
F: package/tinifier/
F: package/wayland/
@@ -3286,17 +3272,10 @@ F: support/testing/tests/package/sample_python_git.py
F: support/testing/tests/package/sample_python_unittest_xml_reporting.py
F: support/testing/tests/package/test_nodejs.py
F: support/testing/tests/package/test_python_augeas.py
F: support/testing/tests/package/test_python_crccheck.py
F: support/testing/tests/package/test_python_flask.py
F: support/testing/tests/package/test_python_flask_expects_json.py
F: support/testing/tests/package/test_python_fs.py
F: support/testing/tests/package/test_python_git.py
F: support/testing/tests/package/test_python_pyfatfs.py
F: support/testing/tests/package/test_python_pyusb.py
F: support/testing/tests/package/test_python_serial.py
F: support/testing/tests/package/test_snagboot.py
F: support/testing/tests/package/test_python_unittest_xml_reporting.py
F: support/testing/tests/package/test_python_xmodem.py
F: support/testing/tests/toolchain/test_external_arm.py
F: toolchain/
@@ -3318,9 +3297,6 @@ F: package/kmemd/
N: Torben Voltmer <mail@t-voltmer.net>
F: package/espflash/
N: Trammell Hudson <hudson@trmm.net>
F: package/nqptp/
N: Tudor Holton <buildroot@tudorholton.com>
F: package/openjdk/
@@ -3358,8 +3334,6 @@ F: configs/nvidia_bf3_defconfig
F: package/bfscripts/
F: package/dpdk/
F: package/libecoli/
F: package/libyang-cpp/
F: package/sysrepo-cpp/
N: Vincent Prince <vincent.prince.fr@gmail.com>
F: package/nss-myhostname/
@@ -3367,12 +3341,10 @@ F: package/utp_com/
N: Vincent Stehlé <vincent.stehle@arm.com>
F: board/arm/fvp-ebbr/
F: board/compulab/iot-gate-imx8-ebbr/
F: board/pine64/rockpro64-ebbr/
F: board/qemu/aarch64-ebbr/
F: board/qemu/arm-ebbr/
F: configs/arm_fvp_ebbr_defconfig
F: configs/iot-gate-imx8_ebbr_defconfig
F: configs/qemu_aarch64_ebbr_defconfig
F: configs/qemu_arm_ebbr_defconfig
F: configs/rockpro64_ebbr_defconfig
@@ -3380,17 +3352,10 @@ F: package/edk2-non-osi/
F: support/testing/tests/boot/test_edk2.py
N: Vincent Stehlé <vincent.stehle@laposte.net>
F: arch/Config.in.hppa
F: arch/arch.mk.hppa
F: board/arm/foundation-v8/
F: board/bananapi/bananapi-m2-zero/
F: board/hp/9000/
F: board/qemu/hppa-b160l/
F: boot/palo/
F: configs/arm_foundationv8_defconfig
F: configs/bananapi_m2_zero_defconfig
F: configs/hp_9000_defconfig
F: configs/qemu_hppa_b160l_defconfig
F: configs/uevm5432_defconfig
F: package/i7z/
F: package/msr-tools/
@@ -3414,7 +3379,6 @@ F: package/qoriq-ddr-phy-binary/
F: package/qoriq-firmware-inphi/
F: package/qoriq-mc-binary/
F: package/qoriq-mc-utils/
F: package/qoriq-restool/
N: Volkov Viacheslav <sv99@inbox.ru>
F: package/v4l2grab/
@@ -3431,7 +3395,7 @@ F: configs/stm32f746_disco_sd_defconfig
F: package/asterisk/
F: package/evilwm/
F: package/fbv/
F: package/libpam-pkcs11/
F: package/libjwt/
F: package/mksh/
F: package/ruby/
F: package/uclibc/
@@ -3483,7 +3447,6 @@ F: package/tpm2-pkcs11/
N: Yann E. MORIN <yann.morin@orange.com>
F: .editorconfig
F: package/gpsd/
F: package/mosquitto/
F: package/skopeo/
N: Yegor Yefremov <yegorslists@googlemail.com>
@@ -3493,6 +3456,7 @@ F: package/acl/
F: package/attr/
F: package/avrdude/
F: package/boost/
F: package/bootstrap/
F: package/cannelloni/
F: package/can-utils/
F: package/circus/
@@ -3500,6 +3464,8 @@ F: package/dhcpcd/
F: package/feh/
F: package/hostapd/
F: package/imlib2/
F: package/jquery-datetimepicker/
F: package/jquery-sidebar/
F: package/kmod/
F: package/libftdi1/
F: package/libical/
@@ -3550,16 +3516,16 @@ F: utils/scanpypi
N: Yunhao Tian <t123yh.xyz@gmail.com>
F: package/libopenaptx/
N: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
N: Zoltan Gyarmati <zgyarmati@zgyarmati.de>
F: package/crudini/
F: package/grantlee/
F: package/libusb/
F: package/libusb-compat/
F: package/proj/
F: package/python-iniparse/
F: package/qjson/
F: package/qt6/qt6core5compat/
F: package/quazip/
F: package/shapelib/
F: package/simple-mail/
F: package/tinc/
F: support/testing/tests/package/test_quazip.py
+16 -39
View File
@@ -92,9 +92,9 @@ all:
.PHONY: all
# Set and export the version string
export BR2_VERSION := 2026.02-rc1
export BR2_VERSION := 2025.08.1
# Actual time the release is cut (for reproducible builds)
BR2_VERSION_EPOCH = 1771320000
BR2_VERSION_EPOCH = 1760218300
# Save running make version since it's clobbered by the make package
RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -125,8 +125,7 @@ endif
noconfig_targets := menuconfig nconfig gconfig xconfig config oldconfig randconfig \
defconfig %_defconfig allyesconfig allnoconfig alldefconfig syncconfig release \
randpackageconfig allyespackageconfig allnopackageconfig \
print-version olddefconfig distclean manual manual-% check-package \
check-package-external
print-version olddefconfig distclean manual manual-% check-package
# Some global targets do not trigger a build, but are used to collect
# metadata, or do various checks. When such targets are triggered,
@@ -602,16 +601,6 @@ prepare-sdk: world
@$(call MESSAGE,"Preparing the SDK")
$(INSTALL) -m 755 $(TOPDIR)/support/misc/relocate-sdk.sh $(HOST_DIR)/relocate-sdk.sh
mkdir -p $(HOST_DIR)/share/buildroot
(\
export LC_ALL=C; \
grep -lr '$(HOST_DIR)' '$(HOST_DIR)' | while read -r FILE; do \
if file -b --mime-type "$$FILE" | grep -q '^text/' && \
[ "$$FILE" != '$(HOST_DIR)/share/buildroot/sdk-location' ] && \
[ "$$FILE" != '$(HOST_DIR)/share/buildroot/sdk-relocs' ]; then \
echo "$$FILE"; \
fi; \
done \
) | sed -e 's|^$(HOST_DIR)|.|g' > $(HOST_DIR)/share/buildroot/sdk-relocs
echo $(HOST_DIR) > $(HOST_DIR)/share/buildroot/sdk-location
BR2_SDK_PREFIX ?= $(GNU_TARGET_NAME)_sdk-buildroot
@@ -792,12 +781,19 @@ endif
# For a merged /usr, ensure that /lib, /bin and /sbin and their /usr
# counterparts are appropriately setup as symlinks ones to the others.
@$(call MESSAGE,"Sanity check in overlays $(call qstrip,$(BR2_ROOTFS_OVERLAY))")
support/scripts/check-merged \
-t overlay \
$(if $(BR2_ROOTFS_MERGED_USR),-u) \
$(if $(BR2_ROOTFS_MERGED_BIN),-b) \
$(call qstrip,$(BR2_ROOTFS_OVERLAY))
ifeq ($(BR2_ROOTFS_MERGED_USR),y)
$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
@$(call MESSAGE,"Sanity check in overlay $(d)")$(sep) \
$(Q)not_merged_dirs="$$(support/scripts/check-merged-usr.sh $(d))"; \
test -n "$$not_merged_dirs" && { \
echo "ERROR: The overlay in $(d) is not" \
"using a merged /usr for the following directories:" \
$$not_merged_dirs; \
exit 1; \
} || true$(sep))
endif # merged /usr
$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
@$(call MESSAGE,"Copying overlay $(d)")$(sep) \
@@ -1266,29 +1262,10 @@ release:
print-version:
@echo $(BR2_VERSION_FULL)
# $(1): br2-external path
# $(2): br2-external description
define check-package-external
@$(call MESSAGE,"Checking packages in $(2)")
$(Q)if [ -r "$(1)/.checkpackageignore" ]; then \
ignore="--ignore-list=$(1)/.checkpackageignore" ; \
else \
ignore=""; \
fi ; \
$(TOPDIR)/utils/check-package \
--br2-external $${ignore} \
`git -C $(1) ls-tree -r --format='$(1)/%(path)' HEAD`
endef
check-package:
$(Q)./utils/check-package `git ls-tree -r --name-only HEAD` \
--ignore-list=$(TOPDIR)/.checkpackageignore
check-package-external:
$(foreach name,$(BR2_EXTERNAL_NAMES),\
$(call check-package-external,$(BR2_EXTERNAL_$(name)_PATH),\
$(BR2_EXTERNAL_$(name)_DESC))$(sep))
.PHONY: .checkpackageignore
.checkpackageignore:
$(Q)./utils/check-package --failed-only `git ls-tree -r --name-only HEAD` \
+1 -1
View File
@@ -3,7 +3,7 @@ Linux systems through cross-compilation.
The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at https://buildroot.org/docs.html
Online documentation can be found at http://buildroot.org/docs.html
To build and use the buildroot stuff, do the following:
+9 -13
View File
@@ -29,6 +29,14 @@ config BR2_arcle
32-bit CPUs that can be used from deeply embedded to high
performance host applications. Little endian.
config BR2_arceb
bool "ARC (big endian)"
select BR2_USE_MMU
help
Synopsys' DesignWare ARC Processor Cores are a family of
32-bit CPUs that can be used from deeply embedded to high
performance host applications. Big endian.
config BR2_arm
bool "ARM (little endian)"
# MMU support is set by the subarchitecture file, arch/Config.in.arm
@@ -65,14 +73,6 @@ config BR2_aarch64_be
http://www.arm.com/products/processors/instruction-set-architectures/armv8-architecture.php
http://en.wikipedia.org/wiki/ARM
config BR2_hppa
bool "HPPA"
select BR2_USE_MMU
help
Precision Architecture (a.k.a. PA-RISC) is a 32-bit
(big endian) architecture developed by Hewlett Packard.
https://en.wikipedia.org/wiki/PA-RISC
config BR2_i386
bool "i386"
select BR2_USE_MMU
@@ -385,7 +385,7 @@ config BR2_BINFMT_SUPPORTS_SHARED
config BR2_READELF_ARCH_NAME
string
if BR2_arcle
if BR2_arcle || BR2_arceb
source "arch/Config.in.arc"
endif
@@ -393,10 +393,6 @@ if BR2_arm || BR2_armeb || BR2_aarch64 || BR2_aarch64_be
source "arch/Config.in.arm"
endif
if BR2_hppa
source "arch/Config.in.hppa"
endif
if BR2_loongarch64
source "arch/Config.in.loongarch"
endif
+6 -4
View File
@@ -31,7 +31,7 @@ config BR2_archs38_full
bool "ARC HS38 with Quad MAC & FPU"
help
Fully featured ARC HS with additional support for
- Dual- and quad multiply and MC operations
- Dual- and quad multiply and MC oprations
- Double-precision FPU
It corresponds to "hs38_slc_full" ARC HS template in
@@ -59,17 +59,19 @@ config BR2_ARC_ATOMIC_EXT
default y if BR2_archs4x_rel31 || BR2_archs4x
config BR2_ARCH
default "arc"
default "arc" if BR2_arcle
default "arceb" if BR2_arceb
config BR2_NORMALIZED_ARCH
default "arc"
config BR2_arc
bool
default y
default y if BR2_arcle || BR2_arceb
config BR2_ENDIAN
default "LITTLE"
default "LITTLE" if BR2_arcle
default "BIG" if BR2_arceb
config BR2_GCC_TARGET_CPU
default "arc700" if BR2_arc750d
-22
View File
@@ -1,22 +0,0 @@
choice
prompt "Target Architecture Type"
help
Architecture type (or version) to use.
config BR2_parisc10
bool "PA-RISC 1.0"
config BR2_parisc11
bool "PA-RISC 1.1"
endchoice
config BR2_ARCH
default "hppa"
config BR2_NORMALIZED_ARCH
default "parisc"
config BR2_ENDIAN
default "BIG"
config BR2_READELF_ARCH_NAME
default "HPPA"
-7
View File
@@ -45,13 +45,6 @@ config BR2_RISCV_ISA_RVV
bool "Vector Instructions (V)"
select BR2_ARCH_NEEDS_GCC_AT_LEAST_12
config BR2_RISCV_ISA_EXTRA
string "Append extra RISC-V ISA extensions"
help
Extra ISA extensions to append to the ISA extensions string.
They are underscore-separated. For example,
"zba_zbb_zvl256b".
choice
prompt "Target Architecture Size"
default BR2_RISCV_64
-13
View File
@@ -1,13 +0,0 @@
#
# Configure the GCC_TARGET_ARCH variable.
#
ifeq ($(BR2_hppa),y)
ifeq ($(BR2_parisc10),y)
GCC_TARGET_ARCH := 1.0
else ifeq ($(BR2_parisc11),y)
GCC_TARGET_ARCH := 1.1
endif
endif
-5
View File
@@ -39,9 +39,4 @@ ifeq ($(BR2_TOOLCHAIN_GCC_AT_LEAST_12),y)
GCC_TARGET_ARCH := $(GCC_TARGET_ARCH)_zicsr_zifencei
endif
ARCH_RISV_ISA_EXTRA = $(call qstrip, $(BR2_RISCV_ISA_EXTRA))
ifneq ($(ARCH_RISV_ISA_EXTRA),)
GCC_TARGET_ARCH := $(GCC_TARGET_ARCH)_$(ARCH_RISV_ISA_EXTRA)
endif
endif
@@ -281,11 +281,11 @@
status = "disabled";
};
usb1: usb@600000 {
usb1: ohci@600000 {
status = "okay";
};
usb2: usb@700000 {
usb2: ehci@700000 {
status = "okay";
};
@@ -1,2 +1,2 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 37f0c5d5c242c1d604e87d48f08795e861a5a85f725b4ca11d0a538f12ff8cff linux-6.18.8.tar.xz
# Locally calculated
sha256 6b19a3ae99423de2416964d67251d745910277af258b4c4c63e88fd87dbf0e27 linux-6.12.41.tar.xz
+2 -2
View File
@@ -1,2 +1,2 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 37f0c5d5c242c1d604e87d48f08795e861a5a85f725b4ca11d0a538f12ff8cff linux-6.18.8.tar.xz
# Locally calculated
sha256 880ace63ca2291b8b639e9bd862cc828649d3e1e00ccfee5861473debd2e4dec linux-6.1.91.tar.xz
+1 -1
View File
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
sha256 50b4482a505bc281ba8470c399a3c26e145e29b23500bc35c50debd7fa46bdf8 u-boot-2022.10.tar.bz2
@@ -1,2 +0,0 @@
# Locally calculated
sha256 c71af3d2c86c0a0deca4f54b51d1c35217082b030052cc3513dc42e852652733 linux-v6.0.y-andes.tar.gz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 d11702103f177a2914e94eec57ce5ed820296d874f6b6525c4482e55d71a3667 opensbi-1.6.tar.gz
@@ -0,0 +1,38 @@
From 16aad5594e08550295ea3c12c1c9ed6f64774748 Mon Sep 17 00:00:00 2001
From: Rick Chen <rick@andestech.com>
Date: Tue, 29 Mar 2022 13:41:10 +0800
Subject: [PATCH] mmc: ftsdc010_mci: Support DTS of ftsdc010 driver for
generic dma
The ftsdc010 driver has been implemented for generic dma in Linux
kernel. And its compatible is andestech,atfsdc010g to distinguish
the legacy andestech,atfsdc010 which is not for generic dma.
Althought the ftsdc010_mci driver in U-Boot does not use dma, but
it still can work well with the mmc node for generic dma. So add
the compatible string to support it.
Signed-off-by: Rick Chen <rick@andestech.com>
Upstream-Status: Pending
Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
---
drivers/mmc/ftsdc010_mci.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/mmc/ftsdc010_mci.c b/drivers/mmc/ftsdc010_mci.c
index 570d54cf9d..65b1d447a8 100644
--- a/drivers/mmc/ftsdc010_mci.c
+++ b/drivers/mmc/ftsdc010_mci.c
@@ -460,6 +460,7 @@ int ftsdc010_mmc_bind(struct udevice *dev)
static const struct udevice_id ftsdc010_mmc_ids[] = {
{ .compatible = "andestech,atfsdc010" },
+ { .compatible = "andestech,atfsdc010g" },
{ }
};
--
2.34.1
@@ -0,0 +1,42 @@
From 933ad8a59f7fd9b2088badc3e97167d750a40b5a Mon Sep 17 00:00:00 2001
From: Bin Meng <bmeng.cn@gmail.com>
Date: Mon, 12 Jul 2021 11:52:31 +0800
Subject: [PATCH] spl: Align device tree blob address at 8-byte boundary
Since libfdt v1.6.1, a new requirement on the device tree address via:
commit 5e735860c478 ("libfdt: Check for 8-byte address alignment in fdt_ro_probe_()")
must be met that the device tree must be loaded in to memory at an
8-byte aligned address.
Signed-off-by: Bin Meng <bmeng.cn@gmail.com>
This patch was imported from U-boot patchwork:
https://patchwork.ozlabs.org/project/uboot/patch/20210712035231.26475-1-bmeng.cn@gmail.com/
Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
---
common/spl/spl_fit.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/common/spl/spl_fit.c b/common/spl/spl_fit.c
index a35be529..a76ad14a 100644
--- a/common/spl/spl_fit.c
+++ b/common/spl/spl_fit.c
@@ -382,6 +382,12 @@ static int spl_fit_append_fdt(struct spl_image_info *spl_image,
*/
image_info.load_addr = spl_image->load_addr + spl_image->size;
+ /*
+ * Since libfdt v1.6.1, the device tree must be loaded in to memory
+ * at an 8-byte aligned address.
+ */
+ image_info.load_addr = roundup(image_info.load_addr, 8);
+
/* Figure out which device tree the board wants to use */
node = spl_fit_get_image_node(ctx, FIT_FDT_PROP, index++);
if (node < 0) {
--
2.34.1
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
+2 -2
View File
@@ -1,3 +1,3 @@
#!/bin/sh
cp "$BINARIES_DIR"/Image "$TARGET_DIR"/boot
cp "$BINARIES_DIR"/ae350_ax45mp.dtb "$TARGET_DIR"/boot
cp $BINARIES_DIR/Image $TARGET_DIR/boot
cp $BINARIES_DIR/ae350_ax45mp.dtb $TARGET_DIR/boot
-4
View File
@@ -1,10 +1,6 @@
# Arm A-Profile Base RevC AEM FVP config
bp.secure_memory=1
bp.terminal_1.start_telnet=0
bp.ve_sysregs.exit_on_shutdown=1
bp.virtio_net.enabled=1
bp.virtio_net.hostbridge.userNetworking=1
bp.vis.rate_limit-enable=1
cache_state_modelled=0
cluster0.NUM_CORES=4
cluster0.cpu0.enable_crc32=1
@@ -1,2 +1,2 @@
# Locally calculated
sha256 a899100d9d92ceb1290fd4d61f5dd3b8af6b0e937cebc3c711cb514ac5acfaed arm-trusted-firmware-v2.14.0-git4.tar.gz
sha256 c0f23ccc71c49989e9ad238acf334473c17b7c88f79a20c829c3d443e3794a22 arm-trusted-firmware-v2.11-git4.tar.gz
+2 -2
View File
@@ -1,2 +1,2 @@
# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 9106a4605da9e31ff17659d958782b815f9591ab308d03b0ee21aad6c7dced4b linux-6.18.tar.xz
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 524858852f5869a9ef17de8b1e6e7faf05bcb2c462bc96b3c24dbf82ede373cf linux-6.10.12.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 464b3bf5bc4a61830357dbf81a0e5b89414d3bca1c2a752570cb0e40d2f1e637 optee-client-4.8.0.tar.gz
@@ -1,34 +0,0 @@
From 1debd0c8bd46255f8c22b128ec16586ef9154869 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vincent=20Stehl=C3=A9?= <vincent.stehle@arm.com>
Date: Tue, 2 Dec 2025 15:53:23 +0100
Subject: [PATCH] plat-vexpress: redirect console to uart0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
For consistency with TF-A, U-Boot and Linux.
Upstream: Not applicable. Buildroot specific.
Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
---
core/arch/arm/plat-vexpress/platform_config.h | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/core/arch/arm/plat-vexpress/platform_config.h b/core/arch/arm/plat-vexpress/platform_config.h
index 9231f3048..76c7fdb36 100644
--- a/core/arch/arm/plat-vexpress/platform_config.h
+++ b/core/arch/arm/plat-vexpress/platform_config.h
@@ -23,8 +23,8 @@
#define IT_UART1 38
-#define CONSOLE_UART_BASE UART1_BASE
-#define IT_CONSOLE_UART IT_UART1
+#define CONSOLE_UART_BASE UART0_BASE
+#undef IT_CONSOLE_UART
#elif defined(PLATFORM_FLAVOR_juno)
--
2.51.0
@@ -1,2 +0,0 @@
# Locally calculated
sha256 5222cd553f5edb69ae4ec7cb99b2bfec2c47a47c0be1865b49744701918e8b4d optee-os-4.8.0.tar.gz
+1 -1
View File
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 f591da9ab90ef3d6b3d173766d0ddff90c4ed7330680897486117df390d83c8f u-boot-2024.07.tar.bz2
+14 -51
View File
@@ -2,7 +2,7 @@ Introduction
============
The arm_fvp_ebbr_defconfig is meant to illustrate some aspects of the Arm EBBR
specification[1] and the Arm SystemReady Devicetree band[2].
specification[1] and the Arm SystemReady IR[2] compliance program.
It allows building an AArch64 U-Boot based firmware implementing the subset of
UEFI defined by EBBR, as well as a Linux OS disk image booting with UEFI, to run
on the Arm A-Profile Base RevC AEM FVP.
@@ -26,8 +26,8 @@ Running on the FVP
Download the FVP from one of the following sources, corresponding to your host
computer:
- https://developer.arm.com/-/cdn-downloads/permalink/FVPs-Architecture/FM-11.30/FVP_Base_RevC-2xAEMvA_11.30_27_Linux64.tgz
- https://developer.arm.com/-/cdn-downloads/permalink/FVPs-Architecture/FM-11.30/FVP_Base_RevC-2xAEMvA_11.30_27_Linux64_armv8l.tgz
- https://developer.arm.com/-/cdn-downloads/permalink/Fixed-Virtual-Platforms/FM-11.27/FVP_Base_RevC-2xAEMvA_11.27_19_Linux64.tgz
- https://developer.arm.com/-/cdn-downloads/permalink/Fixed-Virtual-Platforms/FM-11.27/FVP_Base_RevC-2xAEMvA_11.27_19_Linux64_armv8l.tgz
The FVP will be located under one of the corresponding folders:
@@ -53,58 +53,21 @@ supporting the EBBR specification.
To run another OS on simulation using a live or pre-installed image, use the
same FVP command line as for the generated OS but adapt the OS image path in the
virtioblockdevice stanza.
The image generated by the aarch64_efi_defconfig or the Arm ACS Devicetree
images[3] are examples of pre-installed OS images.
Linux distributions such as Debian, Fedora, openSUSE or Ubuntu, or FreeBSD
provide live or pre-installed OS image.
Firmware details
================
Noteworthy firmware features:
- TF-A, OP-TEE & U-Boot
- UEFI, with EFI variables stored on disk in the ESP
- Support for ethernet, RTC and LCD
Architecture diagram:
Non-Secure : Secure
:
+---------------------------+ :
EL0 | Busybox | :
+---------------------------+ : +--------+
EL1 | Linux | : | OP-TEE | S-EL1
+---------------------------+ : +--------+
EL2 | U-Boot, GRUB, Linux (kvm) | :
+---------------------------+ :
...................................:
+----------------------------------------+
| TF-A | EL3
+----------------------------------------+
Boot flow:
TF-A -+-> OP-TEE
`-> U-Boot -> GRUB -> Linux -> Busybox
TF-A BL1 loads the fit image with the remaining pieces of TF-A, OP-TEE and
U-Boot.
OP-TEE boots, calls back TF-A to go to normal world.
U-Boot loads GRUB with UEFI, boots Linux at EL2.
In this configuration, the Devicetree is static and fully contained in TF-A.
The image generated by the aarch64_efi_defconfig or the Arm ACS-IR images[3] are
examples of pre-installed OS images.
Linux distributions such as Debian, Fedora, openSUSE or Ubuntu provide a
pre-installed OS image.
Miscellaneous
=============
This configuration is inspired by the arm_foundationv8_defconfig, the
qemu_aarch64_virt_defconfig and the Arm SystemReady Devicetree Band Integration
and Testing Guide[4].
qemu_aarch64_virt_defconfig and the Arm SystemReady IR IoT Integration, Test,
and Certification Guide[4].
Firmware update, GOP, MMC and RNG are currently not supported.
Firmware update, MMC and network are currently not supported.
[1] https://github.com/ARM-software/ebbr
[2] https://www.arm.com/architecture/system-architectures/systemready-compliance-program/systemready-devicetree-band
[3] https://github.com/ARM-software/arm-systemready/tree/main/SystemReady-devicetree-band/prebuilt_images
[4] https://developer.arm.com/documentation/DUI1101/latest/
[1]: https://github.com/ARM-software/ebbr
[2]: https://developer.arm.com/Architectures/Arm%20SystemReady%20IR
[3]: https://github.com/ARM-software/arm-systemready/tree/main/IR/prebuilt_images
[4]: https://developer.arm.com/documentation/DUI1101/latest/
+1 -4
View File
@@ -1,4 +1,4 @@
CONFIG_ARM_SMCCC_FEATURES=y
# CONFIG_USE_BOOTCOMMAND is not set
CONFIG_BOOTCOMMAND="bootflow scan -lb"
CONFIG_BOOTMETH_DISTRO=y
CONFIG_BOOTM_EFI=y
@@ -17,10 +17,8 @@ CONFIG_CMD_EFI_VARIABLE_FILE_STORE=y
CONFIG_CMD_GETTIME=y
CONFIG_CMD_GPT=y
CONFIG_CMD_NVEDIT_EFI=y
CONFIG_CMD_POWEROFF=y
CONFIG_CMD_RNG=y
CONFIG_CMD_RTC=y
CONFIG_CMD_SMC=y
CONFIG_CMD_TIME=y
CONFIG_DM_RNG=y
CONFIG_DM_RTC=y
@@ -31,7 +29,6 @@ CONFIG_EFI_LOADER=y
CONFIG_EFI_LOADER_HII=y
CONFIG_EFI_MM_COMM_TEE=y
CONFIG_EFI_PARTITION=y
CONFIG_EFI_RUNTIME_UPDATE_CAPSULE=y
CONFIG_EFI_SECURE_BOOT=y
CONFIG_EFI_SET_TIME=y
CONFIG_EFI_UNICODE_CAPITALIZATION=y
+3 -3
View File
@@ -30,11 +30,11 @@ image flash.img {
partition fitimage {
image = "image.itb"
offset = 512K
size = 7000K
size = 4352K
}
partition spare {
offset = 7512K
size = 25256K
offset = 4864K
size = 27904K
}
}
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81 linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81 linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 16da36d1832f058cf1a6673b6a2eedeef1260576c15e76c4998e30d0fb13d339 uboot-66672e5af36fe294df56f8e7942069e3909f3790-git4.tar.gz
+2 -2
View File
@@ -3,8 +3,8 @@
BOARD_DIR="$(dirname $0)"
mkimage=$HOST_DIR/bin/mkimage
BOARD_DT=$(sed -nr \
-e 's|^BR2_LINUX_KERNEL_INTREE_DTS_NAME="(aspeed/)?([a-z0-9\-]*).*"$|\2|p' \
BOARD_DT=$(sed -n \
's/^BR2_LINUX_KERNEL_INTREE_DTS_NAME="\([a-z0-9\-]*\).*"$/\1/p' \
${BR2_CONFIG})
sed -e "s/%BOARD_DTB%/${BOARD_DT}.dtb/" \
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 37f0c5d5c242c1d604e87d48f08795e861a5a85f725b4ca11d0a538f12ff8cff linux-6.18.8.tar.xz
@@ -1,2 +0,0 @@
# Locally computed
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
@@ -1 +0,0 @@
../linux/linux.hash
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 37f0c5d5c242c1d604e87d48f08795e861a5a85f725b4ca11d0a538f12ff8cff linux-6.18.8.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
@@ -1 +0,0 @@
../linux/linux.hash
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 37f0c5d5c242c1d604e87d48f08795e861a5a85f725b4ca11d0a538f12ff8cff linux-6.18.8.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
@@ -12,7 +12,6 @@ image boot.vfat {
"am335x-bonegreen.dtb",
"am335x-boneblack-wireless.dtb",
"am335x-bonegreen-wireless.dtb",
"am335x-bonegreen-eco.dtb",
"extlinux"
}
}
@@ -1,2 +1,2 @@
# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 d0a78bf3f0d12aaa10af3b5adcaed5bc767b5b78705e5ef885d5e930b72e25d5 linux-6.18.1.tar.xz
# Locally calculated
sha256 3654ca31003d90d20b195b23f8d60b78fcffbf0fd7fed6116c22719e20ac933d linux-6.12.23-ti-arm32-r11.tar.gz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
+3 -5
View File
@@ -1,8 +1,6 @@
#!/bin/sh
set -eu
BOARD_DIR="$(dirname $0)"
BOARD_DIR="$(dirname "$0")"
cp $BOARD_DIR/uEnv.txt $BINARIES_DIR/uEnv.txt
cp "${BOARD_DIR}/uEnv.txt" "${BINARIES_DIR}/uEnv.txt"
install -m 0644 -D "${BOARD_DIR}/extlinux.conf" "${BINARIES_DIR}/extlinux/extlinux.conf"
install -m 0644 -D $BOARD_DIR/extlinux.conf $BINARIES_DIR/extlinux/extlinux.conf
-1
View File
@@ -31,7 +31,6 @@ output/images/
+-- am335x-boneblack-wireless.dtb
+-- am335x-boneblue.dtb
+-- am335x-bonegreen.dtb
+-- am335x-bonegreen-eco.dtb
+-- am335x-bonegreen-wireless.dtb
+-- am335x-bone.dtb
+-- am335x-evm.dtb
+1 -1
View File
@@ -19,7 +19,7 @@ image sdcard.img {
partition u-boot {
partition-type = 0xC
bootable = "true"
image = "boot.vfat"
image = "boot.vfat"
}
partition rootfs {
+2 -1
View File
@@ -1,3 +1,4 @@
#!/bin/sh
BOARD_DIR="$(dirname $0)"
cp board/beagleboard/beagleboneai/uEnv.txt "$BINARIES_DIR/uEnv.txt"
cp board/beagleboard/beagleboneai/uEnv.txt $BINARIES_DIR/uEnv.txt
@@ -1,2 +1,2 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 9b4ccec7d8ceff4824f149e476ec06e83c86546ae8af82582871647809a62ef0 linux-6.12.70.tar.xz
# Locally calculated
sha256 b66a5b863b0f8669448b74ca83bd641a856f164b29956e539bbcb5fdeeab9cc6 linux-6.6.30.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
sha256 18a853fe39fad7ad03a90cc2d4275aeaed6da69735defac3492b80508843dd4a u-boot-2024.04.tar.bz2
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
sha256 18a853fe39fad7ad03a90cc2d4275aeaed6da69735defac3492b80508843dd4a u-boot-2024.04.tar.bz2
+1
View File
@@ -11,5 +11,6 @@ bootm loados ${scriptaddr};
# Try to load a ramdisk if available inside fitImage
bootm ramdisk;
bootm prep;
fdt set /soc/ethernet@20110000 mac-address ${beaglevfire_mac_addr0};
run design_overlays;
bootm go;
@@ -1,2 +1,2 @@
# Locally calculated
sha256 37191994758d521dc7223cb5010a67ef83bd061bf70194ea522abc9ef2b17391 linux-linux4microchip+fpga-2025.10.tar.gz
sha256 7bd234a93bc6351d6a830f9ef18e9e780d70c478d280a6513a30bc2f945fb050 linux-linux4microchip+fpga-2024.09.1.tar.gz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 591c80f7e16d6f43192deb7ab7587ae81b31ba7c7de1a668c14b9997b6c976c8 uboot-linux4microchip+fpga-2025.10.tar.gz
sha256 a2fad7fe7f933fa4679b070e952e1e7a21dbd8b586d7a9a11bfcb99e75ae7ad6 uboot-linux4microchip+fpga-2024.09.tar.gz
@@ -1,2 +1,2 @@
# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 d1ad94a33681148efe884f4028970d69e332f2b003f0e8be53a1d25de38e49a2 linux-6.12.64.tar.xz
sha256 6e562502a8fd11639f558e43b74f0df0d85fa85e60f5332acb275a75a35f5345 linux-6.12.39.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,2 +1,2 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 d1ad94a33681148efe884f4028970d69e332f2b003f0e8be53a1d25de38e49a2 linux-6.12.64.tar.xz
sha256 4a168aed2de5a81aadd90ba2b153860a98d99bfc34651936e17f18e54f01ba8c linux-6.12.36.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b60d5865cefdbc75da8da4156c56c458e00de75a49b80c1a2e58a96e30ad0d54 u-boot-2026.01.tar.bz2
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,6 +1,4 @@
#!/bin/sh
set -eu
BOARD_DIR="$(dirname "$0")"
cp "${BOARD_DIR}/nand-full.lst" "${BINARIES_DIR}"
@@ -1,6 +1,4 @@
#!/bin/sh
set -eu
BOARD_DIR="$(dirname $0)"
PARTUUID="$($HOST_DIR/bin/uuidgen)"
@@ -1,6 +1,4 @@
#!/bin/sh
set -eu
BOARD_DIR="$(dirname $0)"
cp ${BOARD_DIR}/nand-full.lst ${BINARIES_DIR}
@@ -1,45 +0,0 @@
image efi-part.vfat {
vfat {
file EFI {
image = "efi-part/EFI"
}
file Image {
image = "Image"
}
}
size = 64M
}
image disk.img {
hdimage {
partition-table-type = "gpt"
}
# When in eMMC user data, this protects U-Boot environment
partition env {
partition-type-uuid = u-boot-env
offset = 17K
size = 16K
}
# This allows to boot from recovery SD card
partition firmware {
image = "flash.bin"
# Linux reserved
partition-type-uuid = 8DA63339-0007-60C0-C436-083AC8230908
offset = 33K
}
partition boot {
image = "efi-part.vfat"
partition-type-uuid = esp
bootable = true
}
partition root {
partition-type-uuid = root-arm64
image = "rootfs.ext2"
}
}
@@ -1,6 +0,0 @@
set default="0"
set timeout="5"
menuentry "Buildroot" {
linux /Image root=PARTLABEL=root rootwait
}
@@ -1,2 +0,0 @@
# Locally calculated
sha256 e11880bf39dabfcb5945b58e848ddba661a1cd92425a997c626dec62b2dac6a9 arm-trusted-firmware-v2.13-git4.tar.gz
@@ -1 +0,0 @@
../linux/linux.hash
@@ -1,2 +0,0 @@
# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 231311bd7084dc3129944d26bb43be6ff837da82fb2104a67704aebca8bfa69f linux-6.16.8.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 e6c6b93e2be417df57ceb05a2eb6505744e3fbdd3b2ae5e5bf79bf6028b6f84d optee-client-4.7.0.tar.gz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 976b9c184678516038d4e79766608e81d10bf136f76fd0db2dc48f90f994fbd9 optee-os-4.7.0.tar.gz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,69 +0,0 @@
#!/bin/sh
set -eux
BOARD_DIR=$(dirname "$0")
# Override the default GRUB configuration file with our own.
cp -vf "${BOARD_DIR}/grub.cfg" "${BINARIES_DIR}/efi-part/EFI/BOOT/grub.cfg"
BINMAN_DIR="$BINARIES_DIR/binman"
BINMAN_DTB="$BINMAN_DIR/u-boot.dtb"
UBOOT_DIR=$(find "$BUILD_DIR" -maxdepth 1 -type d -name 'uboot-*')
# Adjust binman dtb.
rm -fr "$BINMAN_DIR"
mkdir -v "$BINMAN_DIR"
cp -v "$UBOOT_DIR/u-boot.dtb" "$BINMAN_DTB"
# Add the fip image to the list of loadables.
fdtput -t s "$BINMAN_DTB" /binman/section/fit/configurations/@config-SEQ loadables atf fip
# Remove the tee node to avoid duplicate, as it is in the FIP image.
fdtput --remove "$BINMAN_DTB" /binman/section/fit/images/tee
# Generate flash image with binman.
# We do this here to break the build dependency loop involving tf-a, op-tee, and
# u-boot.
# We use BL2 instead of BL31 in this configuration.
(cd "${UBOOT_DIR}" && \
./tools/binman/binman \
--toolpath ./tools \
-v5 \
build \
-u \
-d "$BINMAN_DTB" \
-O . \
-m \
--allow-missing \
--fake-ext-blobs \
-I "$BINMAN_DIR" \
-I . \
-I ./board/compulab/imx8mm-cl-iot-gate \
-I arch/arm/dts \
-a of-list="imx8mm-cl-iot-gate-optee" \
-I "$BINARIES_DIR" \
-a atf-bl31-path=bl2.bin \
-a tee-os-path= \
-a ti-dm-path= \
-a opensbi-path= \
-a default-dt="imx8mm-cl-iot-gate-optee" \
-a scp-path= \
-a rockchip-tpl-path= \
-a spl-bss-pad= \
-a tpl-bss-pad=1 \
-a vpl-bss-pad=1 \
-a spl-dtb=y \
-a tpl-dtb= \
-a vpl-dtb= \
-a pre-load-key-path= \
-a of-spl-remove-props="interrupt-parent interrupts" \
)
# Copy the flash image.
cp -v "$UBOOT_DIR/flash.bin" "$BINARIES_DIR/"
# Verify that it will fit in the eMMC boot partition.
size=$(du -b "$BINARIES_DIR/flash.bin" |cut -f 1)
if [ "$size" -gt 4160512 ]; then
echo "Flash image is too big! (${size} bytes)" >&2
exit 1
fi
@@ -1,131 +0,0 @@
Introduction
============
The iot-gate-imx8_ebbr_defconfig is meant to illustrate some aspects of the Arm
EBBR specification[1] and the Arm SystemReady Devicetree band[2].
It allows building an AArch64 disk image with a U-Boot based firmware
implementing the subset of UEFI defined by EBBR, as well as a Linux OS booting
with UEFI, to run on the Compulab IOT-GATE-iMX8. [3]
This configuration is not related with the official BSP from Compulab. [4]
Building
========
$ make iot-gate-imx8_ebbr_defconfig
$ make
Generated files under output/images/:
* disk.img: An eMMC or USB key disk image comprising TF-A, OP-TEE, the U-Boot
bootloader, the GRUB bootloader, the Linux kernel and the root filesystem.
* flash.bin: A firmware image suitable for flashing in eMMC boot partition
comprising TF-A, OP-TEE and the U-Boot bootloader.
Running
=======
Before flashing the firmware to eMMC, make sure that you have the IOTG-ACC-M2SD
M.2 to SD adapter for recovery and prepare a recovery SD card. [5]
Insert the SD card and the M.2 adapter.
Prepare a USB key on a PC:
# dd if=output/images/disk.img of=<USB key device> ; sync
Insert the USB key, close jumper E1 on the board to select recovery boot,
connect to the UART console on the micro USB connector (a Silicon Labs CP2104
UART bridge) with baudrate 115200, power on the board and break to U-Boot
prompt.
Flash the firmware from the USB key to the eMMC boot partition:
u-boot=> usb start
u-boot=> usb dev 0
u-boot=> usb read ${loadaddr} 0x42 0x1fbe
u-boot=> mmc dev 2 1
u-boot=> mmc write ${loadaddr} 0x42 0x1fbe
u-boot=> mmc partconf 2 0 1 0
Power off the board, remove jumper E1 and the M.2 SD card adapter, then restart
the board; it should boot to Linux, with the root filesystem on the USB key.
Other setups are also possible, with the firmware and/or the root filesystem in
the eMMC user data. The firmware binary is also available as flash.bin for
convenience, to allow network download for example.
With the firmware in the eMMC boot partition, it is possible to install or run
another OS supporting the EBBR specification.
The image generated by the aarch64_efi_defconfig, the images from Linux
distributions such as Debian, Fedora, openSUSE, Ubuntu, OpenWrt and Yocto, and
the Arm ACS Devicetree images[6] are examples of compatible OS images.
When installing other OSes to eMMC, it is recommended to protect the first 32KB
of the user data with a partition, as this is where the U-Boot environment can
be saved.
Firmware details
================
Noteworthy firmware features:
- TF-A, OP-TEE & U-Boot
- UEFI, with EFI variables stored on disk in the ESP
- Support for ethernet, USB and RTC
- U-Boot environment in eMMC user data (starting from byte 0x4400)
Architecture diagram:
Non-Secure : Secure
:
+---------------------------+ :
EL0 | Busybox | :
+---------------------------+ : +--------+
EL1 | Linux | : | OP-TEE | S-EL1
+---------------------------+ : +--------+
EL2 | U-Boot, GRUB, Linux (kvm) | :
+---------------------------+ :
...................................:
+----------------------------------------+
| ROM, U-Boot SPL, TF-A | EL3
+----------------------------------------+
Boot flow:
ROM -+-> SPL -> TF-A -+-> OP-TEE
`-> U-Boot -> GRUB -> Linux -> Busybox
The ROM loads U-Boot SPL.
U-Boot SPL does the DRAM setup, loads the fit image with TF-A, OP-TEE, U-Boot
and the Devicetree.
In this configuration TF-A is booting with BL2 and BL31.
OP-TEE amends the Devicetree, calls back TF-A to go to normal world.
U-Boot loads GRUB with UEFI, boots Linux at EL2.
Miscellaneous
=============
This configuration is based on the work of Paul Liu[7] and is inspired by the
other configurations related with EBBR, and the Arm SystemReady Devicetree Band
Integration and Testing Guide[8].
To avoid a circular build dependency, we skip the binman step during U-Boot
build:
BR2_TARGET_UBOOT_CUSTOM_MAKEOPTS="cmd_binman=:"
Then we run binman manually in the post-image script.
Firmware update and UEFI Secure Boot are currently not supported.
The disk image cannot be used for SD card recovery at this point.
[1] https://github.com/ARM-software/ebbr
[2] https://www.arm.com/architecture/system-architectures/systemready-compliance-program/systemready-devicetree-band
[3] https://www.compulab.com/products/iot-gateways/iot-gate-imx8-industrial-arm-iot-gateway/
[4] https://mediawiki.compulab.com/w/index.php?title=Building_IOT-GATE-iMX8_and_SBC-IOT-iMX8_Yocto_Linux_images
[5] https://mediawiki.compulab.com/w/index.php?title=IOT-GATE-iMX8_and_SBC-IOT-iMX8:_U-Boot:_Recovery
[6] https://github.com/ARM-software/arm-systemready/tree/main/SystemReady-devicetree-band/prebuilt_images
[7] https://git.linaro.org/plugins/gitiles/people/paul.liu/systemready/build-scripts
[8] https://developer.arm.com/documentation/DUI1101/latest/
@@ -1,6 +0,0 @@
CONFIG_ARCH_MISC_INIT=y
CONFIG_CMD_RNG=y
CONFIG_DM_REGULATOR_ANATOP=y
CONFIG_DM_RNG=y
CONFIG_FSL_CAAM=y
CONFIG_PHY_ANEG_TIMEOUT=5000
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4850cf670a032c70f38b713a27d62046c5f747caf028c5f50b18f98606a9eb1 linux-6.12.52.tar.xz
sha256 643142c1b5991560dd12f950825cc19e4497b95b82641918ecff1177f4130c1d linux-6.12.24.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4850cf670a032c70f38b713a27d62046c5f747caf028c5f50b18f98606a9eb1 linux-6.12.52.tar.xz
sha256 643142c1b5991560dd12f950825cc19e4497b95b82641918ecff1177f4130c1d linux-6.12.24.tar.xz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a u-boot-2025.10.tar.bz2
sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
@@ -20,7 +20,7 @@ main ()
"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
-ap "${BINARIES_DIR}/bl31.bin" a55 ${ATF_LOAD_ADDR} \
-ap "${BINARIES_DIR}/u-boot-hash.bin" a55 0x80200000 \
-ap "${BINARIES_DIR}/tee-raw.bin" a55 0x96000000 \
-ap "${BINARIES_DIR}/tee.bin" a55 0x96000000 \
-out "${BINARIES_DIR}/u-boot-atf-container.img"
else
"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
@@ -1,2 +1,2 @@
# Locally calculated
sha256 2166d92e5631ee11bd249d492a1f4009c7635ee36b835fa55384b4ce41e8a63f linux-imx-lf-6.12.49-2.2.0.tar.gz
sha256 4c1147a9bbe4bf36fbcbd8b1e6b0d73ec0da3c454821c58a61d32d3879afc146 linux-imx-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
# Locally calculated
sha256 212ea4d8d442153ab732ab724282fef64450e9dab5cfe9565eec4f618e305a80 uboot-imx-lf-6.12.49-2.2.0.tar.gz
sha256 18a32d6c79538e4f90746674873b196f9c48be24caef0ab5c1bec920a1816825 uboot-imx-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 4b685080a094cb0f0489b8114ae8b73c37ec13eda9f5618c8b6311ff1f472f57 imx-optee-os-lf-6.12.3-1.0.0.tar.gz
@@ -1 +0,0 @@
../linux/linux.hash
@@ -1,2 +0,0 @@
# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256 0fcbbbbcd456e87bbbfc8bf37af541fda62ccfcce76903503424fd101ef7bdee linux-6.12.43.tar.xz
@@ -1,2 +0,0 @@
# Locally calculated
sha256 0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7 u-boot-2025.07.tar.bz2
@@ -1,2 +1,2 @@
# Locally calculated
sha256 2d3f9c52e16766c290bdc0bc130d634e4c326a5b236dfb2f2ca3f0fa457e82d4 atf-lf-6.12.34-2.1.0.tar.gz
sha256 2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13 atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
# Locally computed
sha256 27a1987ca0a5802d3ebb296b8134ec66d813ad86cf2a60779b45092735bbb23b linux-lf-6.12.34-2.1.0.tar.gz
sha256 9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0 linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
# Locally computed
sha256 2f25cde388b2f83ff7a8e3afe25aafb1db48dafb0fa3bf1e4f9fef603f3b4785 u-boot-lf-6.12.34-2.1.0.tar.gz
sha256 8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac u-boot-lf-6.12.3-1.0.0.tar.gz
+8 -9
View File
@@ -10,22 +10,21 @@ For more details about the board and the QorIQ Layerscape SoC, see the following
Layerscape platforms are officially supported by NXP under the Layerscape
Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
common with i.MX), but has a slower release cadence than LF. The currently used
tag is lf-6.12.34-2.1.0, which is in line with the latest LF tag. Generally, in
Buildroot, the latest Linux Factory release tag is always used, which may be
considered pre-release software, as it may contain features which are not yet
documented, and it generally undergoes less testing.
common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
latest lf-6.12.3-1.0.0. In Buildroot, the latest Linux Factory release tag
is used, which may be considered pre-release software, as it may contain
features which are not yet documented, and it generally undergoes less testing.
For the software Layerscape Debian Linux SDK User Guide, see:
- https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
- https://www.nxp.com/docs/en/user-guide/UG10143.pdf
The components from NXP are:
- rcw, lf-6.12.34-2.1.0
- atf (fork), lf-6.12.34-2.1.0
- uboot (fork), lf-6.12.34-2.1.0
- rcw, lf-6.12.3-1.0.0
- atf (fork), lf-6.12.3-1.0.0
- uboot (fork), lf-6.12.3-1.0.0
- cadence-dp-firmware (blob), 8.16
- linux (fork), lf-6.12.34-2.1.0
- linux (fork), lf-6.12.3-1.0.0
Build
=====
@@ -1,2 +1,2 @@
# Locally calculated
sha256 2d3f9c52e16766c290bdc0bc130d634e4c326a5b236dfb2f2ca3f0fa457e82d4 atf-lf-6.12.34-2.1.0.tar.gz
sha256 2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13 atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
# Locally computed
sha256 27a1987ca0a5802d3ebb296b8134ec66d813ad86cf2a60779b45092735bbb23b linux-lf-6.12.34-2.1.0.tar.gz
sha256 9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0 linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
# Locally computed
sha256 2f25cde388b2f83ff7a8e3afe25aafb1db48dafb0fa3bf1e4f9fef603f3b4785 u-boot-lf-6.12.34-2.1.0.tar.gz
sha256 8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac u-boot-lf-6.12.3-1.0.0.tar.gz
+11 -12
View File
@@ -10,24 +10,23 @@ for more details about the board and the QorIQ Layerscape SoC, see the following
Layerscape platforms are officially supported by NXP under the Layerscape
Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
common with i.MX), but has a slower release cadence than LF. The currently used
tag is lf-6.12.34-2.1.0, which is in line with the latest LF tag. Generally, in
Buildroot, the latest Linux Factory release tag is always used, which may be
considered pre-release software, as it may contain features which are not yet
documented, and it generally undergoes less testing.
common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
latest lf-6.12.3-1.0.0. In Buildroot, the latest Linux Factory release tag
is used, which may be considered pre-release software, as it may contain
features which are not yet documented, and it generally undergoes less testing.
For the software Layerscape Debian Linux SDK User Guide, see:
- https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
- https://www.nxp.com/docs/en/user-guide/UG10143.pdf
The components from NXP are:
- rcw, lf-6.12.34-2.1.0
- atf (fork), lf-6.12.34-2.1.0
- uboot (fork), lf-6.12.34-2.1.0
- qoriq-fm-ucode (blob), lf-6.12.34-2.1.0
- linux (fork), lf-6.12.34-2.1.0
- fmlib, lf-6.12.34-2.1.0
- fmc, lf-6.12.34-2.1.0
- rcw, lf-6.12.3-1.0.0
- atf (fork), lf-6.12.3-1.0.0
- uboot (fork), lf-6.12.3-1.0.0
- qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
- linux (fork), lf-6.12.3-1.0.0
- fmlib, lf-6.12.3-1.0.0
- fmc, lf-6.12.3-1.0.0
Build
=====
@@ -1,2 +1,2 @@
# Locally calculated
sha256 2d3f9c52e16766c290bdc0bc130d634e4c326a5b236dfb2f2ca3f0fa457e82d4 atf-lf-6.12.34-2.1.0.tar.gz
sha256 2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13 atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
# Locally computed
sha256 27a1987ca0a5802d3ebb296b8134ec66d813ad86cf2a60779b45092735bbb23b linux-lf-6.12.34-2.1.0.tar.gz
sha256 9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0 linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
# Locally computed
sha256 2f25cde388b2f83ff7a8e3afe25aafb1db48dafb0fa3bf1e4f9fef603f3b4785 u-boot-lf-6.12.34-2.1.0.tar.gz
sha256 8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac u-boot-lf-6.12.3-1.0.0.tar.gz
+11 -12
View File
@@ -11,24 +11,23 @@ For more details about the board and the QorIQ Layerscape SoC, see the following
Layerscape platforms are officially supported by NXP under the Layerscape
Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
common with i.MX), but has a slower release cadence than LF. The currently used
tag is lf-6.12.34-2.1.0, which is in line with the latest LF tag. Generally, in
Buildroot, the latest Linux Factory release tag is always used, which may be
considered pre-release software, as it may contain features which are not yet
documented, and it generally undergoes less testing.
common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
latest lf-6.12.3-1.0.0. In Buildroot, the latest Linux Factory release tag
is used, which may be considered pre-release software, as it may contain
features which are not yet documented, and it generally undergoes less testing.
For the software Layerscape Debian Linux SDK User Guide, see:
- https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
- https://www.nxp.com/docs/en/user-guide/UG10143.pdf
The components from NXP are:
- rcw, lf-6.12.34-2.1.0
- atf (fork), lf-6.12.34-2.1.0
- uboot (fork), lf-6.12.34-2.1.0
- qoriq-fm-ucode (blob), lf-6.12.34-2.1.0
- linux (fork), lf-6.12.34-2.1.0
- fmlib, lf-6.12.34-2.1.0
- fmc, lf-6.12.34-2.1.0
- rcw, lf-6.12.3-1.0.0
- atf (fork), lf-6.12.3-1.0.0
- uboot (fork), lf-6.12.3-1.0.0
- qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
- linux (fork), lf-6.12.3-1.0.0
- fmlib, lf-6.12.3-1.0.0
- fmc, lf-6.12.3-1.0.0
Build
=====

Some files were not shown because too many files have changed in this diff Show More