Giulio Benetti
175dbdf3fc
package/libblockdev: bump to version 3.2.1
...
For change log, see:
https://github.com/storaged-project/libblockdev/blob/3.2.1/NEWS.rst
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com >
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr >
2024-11-21 23:42:47 +01:00
Bernd Kuhls
96d73b3091
package/php: security bump version to 8.3.14
...
Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3
Release notes: https://news-web.php.net/php.announce/444
Fixes CVE-2024-8929, CVE-2024-8932, CVE-2024-11233, CVE-2024-11234 &
CVE-2024-11236.
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Julien Olivain <ju.o@free.fr >
2024-11-21 21:59:27 +01:00
Bernd Kuhls
257c1de7e9
package/postgresql: security bump version to 16.5
...
Release notes:
https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/
Fixes CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 & CVE-2024-10979.
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-20 22:31:35 +01:00
Yann E. MORIN
575d971820
package/go: ensure there is a host-go provider, take 2
...
Commit 7b2a164b74 (package/go/go-bin: new host-go provider) broke the
case for prompt-less, host-only go packages, as the main host-go symbol
would not be selected.
This very same use-case was initially broken when the first go-src
provider was introduced with fa2536ec94 (package/go: make host package
a virtual package), and subsequently fixed in 99a5d51c6e (package/go:
ensure there is a host-go provider), so 7b2a164b74 is causing a
regression of a fixed regression.
Fix that the very same way it was originally fixed.
Signed-off-by: Yann E. MORIN <yann.morin@orange.com >
Cc: Yann E. MORIN <yann.morin.1998@free.fr >
Cc: Thomas Perale <thomas.perale@mind.be >
Signed-off-by: Julien Olivain <ju.o@free.fr >
2024-11-19 22:13:40 +01:00
Julien Olivain
f3b82925a9
package/skopeo: select BR2_PACKAGE_HOST_GO
...
host-skopeo fail to build, using the commands:
echo BR2_PACKAGE_HOST_SKOPEO=y >.config
make olddefconfig
make host-skopeo
This commit fixes the issue by selecting BR2_PACKAGE_HOST_GO
in the Config.in file.
Fixes:
make: *** No rule to make target 'host-', needed by '/buildroot/output/build/host-go-1.23.2/.stamp_configured'. Stop.
Reviewed-by: Yann E. MORIN <yann.morin@orange.com >
Signed-off-by: Julien Olivain <ju.o@free.fr >
2024-11-19 22:05:18 +01:00
Giulio Benetti
7e2515a5ad
package/libnvme: bump to version 1.11.1
...
For release note, see:
https://github.com/linux-nvme/libnvme/releases/tag/v1.11.1
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com >
Reviewed-by: Vincent Jardin <vjardin@free.fr >
Signed-off-by: Julien Olivain <ju.o@free.fr >
2024-11-18 23:42:41 +01:00
Bernd Kuhls
54cfff355c
package/libpng: fix arm build with NEON
...
Fixes:
http://autobuild.buildroot.net/results/52c/52c974e70f922e9d7efea4c538e4438a22faa846/
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Co-authored-by: Peter Korsgaard <peter@korsgaard.com >
[https://lists.buildroot.org/pipermail/buildroot/2024-November/767661.html ]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-16 10:48:18 +01:00
Julien Olivain
0416ae0ed5
package/libkrb5: security bump to version 1.21.3
...
For the change log, see [1].
The license hash file changed, due to the year update. See [2]. This
commit also adds a comment in the hash file about the pgp signature file
source and key id used for the verification.
Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2024-37370
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371
[1] https://web.mit.edu/kerberos/www/krb5-1.21/
[2] https://github.com/krb5/krb5/commit/fec2c44ee93bfd3282bed99509a941d56a6e2c21
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-16 10:47:41 +01:00
Bernd Kuhls
649b31fc6d
package/intel-microcode: security bump version to 20241112
...
Release notes:
https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases
CVE-2024-21853
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01101.html
CVE-2024-23918
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01079.html
CVE-2024-24968
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01097.html
CVE-2024-23984
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01103.html
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Julien Olivain <ju.o@free.fr >
2024-11-15 23:25:53 +01:00
Julien Olivain
d571951c67
package/tiff: security bump to version 4.7.0
...
For the release note, see:
http://www.simplesystems.org/libtiff/releases/v4.7.0.html
This commit also adds the _SOURCE variable, to switch to the xz
archive, which saves ~1.5MB. The _SITE url is also updated to switch
to the https protocol.
This commit also adds a comment in the hash file about pgp signature
veritication.
Fixes:
- https://nvd.nist.gov/vuln/detail/CVE-2023-6277
- https://nvd.nist.gov/vuln/detail/CVE-2023-52356
- https://nvd.nist.gov/vuln/detail/CVE-2024-7006
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-14 19:52:43 +01:00
Bernd Kuhls
ed4348d1c5
package/libcurl: security bump version to 8.11.0
...
Changelog: https://curl.se/ch/8.11.0.html
Fixes CVE-2024-9681: https://curl.se/docs/CVE-2024-9681.html
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-14 19:52:31 +01:00
Michel Alex
e53014bcc8
package/libzenoh-pico: bump to version 1.0.2
...
https://github.com/eclipse-zenoh/zenoh-pico/releases/tag/1.0.2
Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-13 18:55:44 +01:00
Michel Alex
ee157845d3
package/libzenoh-c: bump to version 1.0.2
...
https://github.com/eclipse-zenoh/zenoh-c/releases/tag/1.0.2
Signed-off-by: Alex Michel <alex.michel@wiedemann-group.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-13 18:55:44 +01:00
Scott Fan
00f370c0ff
package/timescaledb: bump version to 2.17.2
...
Release notes: https://github.com/timescale/timescaledb/blob/2.17.2/CHANGELOG.md
Signed-off-by: Scott Fan <fancp2007@gmail.com >
Reviewed-by: Maxim Kochetkov <fido_max@inbox.ru >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-13 18:55:43 +01:00
Nicolas Cavallari
268d5145c8
package/libgit2: bump version to 1.8.4
...
upstream mistakenly based 1.8.3 on 1.8.1 so it didn't include the
1.8.2 fixes. 1.8.4 includes fixes from 1.8.2 and 1.8.3.
Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-13 18:55:42 +01:00
Francois Perrad
856a7e96d5
package/expat: security bump to version 2.6.4
...
fix CVE-2024-50602
Signed-off-by: Francois Perrad <francois.perrad@gadz.org >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2024-11-13 18:55:41 +01:00
Romain Naour
1a9f5eac98
package/xenomai: fix latest version
...
The last xenomai version bump [1] forgot to update the
BR2_PACKAGE_XENOMAI_LATEST_VERSION option string.
[1] 44fafcc41a
Reported-by: Pierre Ficheux <pierre.ficheux@smile.fr >
Signed-off-by: Romain Naour <romain.naour@smile.fr >
2024-11-13 17:26:46 +01:00
James Hilliard
66f66bbdb5
package/python-pillow: set new build options
...
Explicitly set new imagequant, raqm and zlib build options.
Fixes: baa3db0c34
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Arnout Vandecappelle <arnout@mind.be >
2024-11-12 20:53:16 +01:00
James Hilliard
a97a592a73
package/python-pillow: fix webp DependencyException
...
As of baa3db0c34 webp mux/demux are no
longer optional for webp support in python-pillow. The
-Cwebpmux=enable/disable option no longer exists.
Fixes:
DependencyException:
The headers or library files could not be found for webp,
which was requested by the option flag --enable-webp
Fixes: baa3db0c34
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Arnout Vandecappelle <arnout@mind.be >
2024-11-12 20:52:48 +01:00
Fiona Klute (WIWA)
012bbb70c2
package/raspberrypi-usbboot: bump version to 20240926-102326
...
This version adds the -i flag to select the device to boot by serial
number [1], which is important when working with multiple RPi
devices. Otherwise mostly firmware updates, see [2] for all changes.
Also switch to the git download method for reproducible archives.
[1] https://github.com/raspberrypi/usbboot/commit/481c5e8a77d7bbf81060deb0f3efe463ec97243f
[2] https://github.com/raspberrypi/usbboot/compare/20221215-105525...20240926-102326
Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 22:31:35 +01:00
Bernd Kuhls
323567552b
{linux, linux-headers}: bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 6, 11}.x series
...
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:52:28 +01:00
Julien Olivain
9b40127534
package/usbredir: bump version to 0.14.0
...
For change log, see [1].
This commit also updates the _SITE to the URL published on the
homepage [2]. The main motivation is to use HTTPS.
This commit also adds a comment in the hash file about the pgp
signature verification.
[1] https://gitlab.freedesktop.org/spice/usbredir/-/blob/usbredir-0.14.0/ChangeLog.md
[2] https://www.spice-space.org/usbredir.html
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:41:29 +01:00
Julien Olivain
122a5e2529
package/usbredir: fix package homepage URL
...
The current homepage URL [1] redirects to its https and ends up to
a HTTP 404 not found error. This commit fixes the issue by replacing
it with the new URL [2].
[1] http://www.spice-space.org/page/UsbRedir
[2] https://www.spice-space.org/usbredir.html
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:41:21 +01:00
Julien Olivain
77fcce23c6
package/findutils: bump version to 4.10.0
...
For release announce, see:
https://lists.gnu.org/archive/html/info-gnu/2024-07/msg00002.html
This commit also updates the hash file comment, to use the sha256 hash
published in the release announce, to provide the signature URL and the
pgp key id used for the signature verification.
See the gnulib documentation for details [1]. Contrary to what the
option name might suggest, it doesn't really disable Y2038 support,
but only the check that the system is Y2038 compliant. So even with
--disable-year2038, if the system is Y2038 compliant (uses a 64-bit
arch, uses the musl C library, or uses the glibc C library with
BR2_TIME_BITS_64=y), findutils will be Y2038 compliant.
[1] https://www.gnu.org/software/gnulib/manual/html_node/Avoiding-the-year-2038-problem.html
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:25:26 +01:00
Julien Olivain
5456830db9
package/iperf: bump to version 2.2.1
...
For release note, see after the file list at:
https://sourceforge.net/projects/iperf2/files/
This commit also adds a package patch to fix the build with musl
libc toolchains.
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:25:07 +01:00
Michael Nosthoff
7d358fe180
package/spdlog: bump to version 1.15.0
...
Signed-off-by: Michael Nosthoff <buildroot@heine.tech >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:22:55 +01:00
Julien Olivain
799d43ae05
package/blake3: bump version to 1.5.4
...
For change log since 1.5.1, see: [1] [2] [3].
Also, v1.5.2 added the new license "Apache-2.0 with (LLVM)
exceptions". The initial LICENSE file was split in three
different files (one file per license). See [4] [5].
This commit updates _LICENSE, _LICENSE_FILES and the hash
file accordingly.
[1] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.2
[2] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.3
[3] https://github.com/BLAKE3-team/BLAKE3/releases/tag/1.5.4
[4] https://github.com/BLAKE3-team/BLAKE3/commit/bb8761256a6a6144f330907b74c80f0ed0ecab4a
[5] https://github.com/BLAKE3-team/BLAKE3/commit/0b2c630cc5c59ac76a184cdc9540092a97d33e7f
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:22:49 +01:00
Julien Olivain
6febbd6f1e
package/motion: bump version to 4.7.0
...
For the change log, see:
https://github.com/Motion-Project/motion/releases/tag/release-4.7.0
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:22:29 +01:00
Michael Nosthoff
8d4a9afdd5
package/boost: update download url
...
boost moved its package hosting from jfrog to their own url
provided by the C++ Alliance. According to [0] the old urls
might cease to exist after December 2024.
[0] https://lists.boost.org/Archives/boost/2024/05/256914.php
Signed-off-by: Michael Nosthoff <buildroot@heine.tech >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 21:20:17 +01:00
Julien Olivain
d7deecbce2
package/uhubctl: bump to version 2.6.0
...
For the release note, see:
https://github.com/mvp/uhubctl/releases/tag/v2.6.0
This commit also updates the LICENSE hash, due to a year update. See:
https://github.com/mvp/uhubctl/commit/4deae1731c337d087e554999bd3dc74199387c1f
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-11 16:18:29 +01:00
Vincent Jardin
dc4a5acfde
package/bfscripts: new package
...
Bootstrap the installation of Mellanox/NVIDIA Bluefield scripts
that can be run either on the host CPU or on the onboard ARM64 CPU.
Signed-off-by: Vincent Jardin <vjardin@free.fr >
Reviewed-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Julien Olivain <ju.o@free.fr >
2024-11-10 19:33:08 +01:00
Julien Olivain
a842df6348
package/fluidsynth: bump to version 2.4.0
...
For change log since v2.3.7, see:
https://github.com/FluidSynth/fluidsynth/releases/tag/v2.4.0
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 18:14:00 +01:00
Julien Olivain
525c1369bc
package/irssi: bump version to 1.4.5
...
For change log, see:
https://irssi.org/NEWS/#news-v1-4-5
This commit also adds the pgp key id used for the signature
verification.
Signed-off-by: Julien Olivain <ju.o@free.fr >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 18:13:54 +01:00
Bernd Kuhls
9101aad327
package/kodi-pvr-vuplus: bump version to 21.3.0-Omega
...
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:53:49 +01:00
Bernd Kuhls
b2786de37b
package/kodi-pvr-iptvsimple: bump version to 21.10.0-Omega
...
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:53:45 +01:00
Bernd Kuhls
39dde9efc1
package/kodi-inputstream-adaptive: bump version to 21.5.6-Omega
...
Signed-off-by: Bernd Kuhls <bernd@kuhls.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:53:41 +01:00
Cherniaev Andrei
d2f5678f42
package/picotool: fix Config.in comment dependencies
...
Due to a bug in the Config.in comment dependencies, the comment "***
picotool needs a toolchain w/ C++, threads, gcc >= 4.9 ***" is always
shown even if all features are enabled.
Fixes: d30c1e3c58 ("package/picotool: fix libusb dependencies")
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:52:01 +01:00
James Hilliard
80e6f23d4d
package/python-wheel: bump to version 0.45.0
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:35 +01:00
James Hilliard
7aad46406a
package/python-werkzeug: bump to version 3.1.3
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:31 +01:00
James Hilliard
fe4207ee79
package/python-tqdm: bump to version 4.67.0
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:29 +01:00
James Hilliard
8d740a7910
package/python-scapy: bump to version 2.6.1
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:28 +01:00
James Hilliard
6974f782bb
package/python-rpds-py: bump to version 0.21.0
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:26 +01:00
James Hilliard
b449ad4aad
package/python-regex: bump to version 2024.11.6
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:24 +01:00
James Hilliard
62b2ac7a8e
package/python-pysnmp: bump to version 7.1.13
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:22 +01:00
James Hilliard
650a7f0245
package/python-pysmi: bump to version 1.5.9
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:20 +01:00
James Hilliard
8f61db37b1
package/python-pylibfdt: bump to version 1.7.2
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:18 +01:00
James Hilliard
9793094ff2
package/python-pip: bump to version 24.3.1
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:16 +01:00
James Hilliard
21ceefad6d
package/python-packaging: bump to version 24.2
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:14 +01:00
James Hilliard
a3540f26d4
package/python-meson-python: bump to version 0.17.1
...
Add new host-python-packaging build dependency.
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:12 +01:00
James Hilliard
7879dfa024
package/python-google-auth: bump to version 2.36.0
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2024-11-10 17:44:10 +01:00