Commit Graph
79318 Commits
Author SHA1 Message Date
Gwenhael Goavec-Merou 514b64d70a package/python-markdown: bump version to 3.9
Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 20:30:24 +01:00
Peter Korsgaard e87154cf3e package/gstd: bump to version 0.15.2
Bugfix release:
https://github.com/RidgeRun/gstd-1.x/releases/tag/v0.15.2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 19:22:13 +01:00
Francois Perrad 7d826e90f1 package/janet: bump to version 1.39.1
For release notes since version 1.35.2, see:
https://github.com/janet-lang/janet/releases

remove upstream patch

diff LICENSE:
    -Copyright (c) 2023 Calvin Rose and contributors
    +Copyright (c) 2025 Calvin Rose and contributors

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 19:15:41 +01:00
Michael Nosthoff 355106eaa4 package/catch2: bump to version 3.11.0
Release Notes: https://github.com/catchorg/Catch2/releases/tag/v3.11.0

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 18:40:48 +01:00
Michael Nosthoff c59b11535b package/spdlog: bump to version 1.16.0
Release Notes: https://github.com/gabime/spdlog/releases/tag/v1.16.0

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 18:39:03 +01:00
Leo Yu-Chi Liang 7504f85c84 configs/andes_ae350_45_defconfig: Fix post-build.sh Shellcheck error
Add quotation mark to fix Shellcheck error.

Signed-off-by: Leo Yu-Chi Liang <ycliang@andestech.com>
Reviewed-by: Vincent Jardin <vjardin@free.fr>
[Julien: remove .checkpackageignore entry to fix check-package error]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 18:24:35 +01:00
Bernd Kuhls 7b79f01e42 package/agentpp: bump version to 4.7.2
Changelog: https://www.agentpp.com//download/changes_agent++.txt

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 17:43:25 +01:00
Bernd Kuhls 801e2c6aa1 package/snmppp: bump to version 3.6.3
Changelog: https://www.agentpp.com//download/changes_snmp++v3.txt

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 17:41:47 +01:00
Bernd Kuhls 5c97337329 package/kodi: bump version to 21.3-Omega
Release notes: https://github.com/xbmc/xbmc/releases/tag/21.3-Omega

Removed patch 0002 which is included in this release:
https://github.com/xbmc/xbmc/commit/957b4faa0b765bc91e64c6d33f07e853decae0d0

Updated Java libraries due to upstream commit:
https://github.com/xbmc/xbmc/commit/7b7e20eaaa831d7740d151bdfe22c3257f5a4102
and refactored their version numbers.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 16:59:14 +01:00
Bernd Kuhls 40ebf4b95f package/fetchmail: bump version to 6.6.0
Release notes:
https://sourceforge.net/p/fetchmail/mailman/message/59252134/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 11:52:48 +01:00
Bernd Kuhls a67cff491a package/libxml2: bump version to 2.15.1
Release notes:
https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.1.news

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 10:36:34 +01:00
Bernd Kuhls 42790e76e5 package/libxml2: fix build of packages detecting libxml2 using libxml2-config.cmake
Fixes build error seen with libiio:

mips64el-buildroot-linux-gnu-gcc: ERROR: unsafe header/library path used
 in cross-compilation: '-I/usr/include/libxml2'

caused by bump of libxml2 to 2.15.0 with buildroot commit
d81922c1ef.

Upstream acknowledged the problem and waits for a fix
https://gitlab.gnome.org/GNOME/libxml2/-/issues/898#note_2453923
so we revert the offending commit for now.

Fixes:
https://autobuild.buildroot.net/results/fde/fde40a3d6ac58f568e49419e5176db5a62a0a4d9/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-01 10:36:26 +01:00
Dario Binacchi 188f556e08 package/bdwgc: bump to version 8.2.10
Release notes:
https://github.com/ivmai/bdwgc/releases/tag/v8.2.10

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 23:23:39 +01:00
Dario Binacchi 6427fb66c4 package/bcm2835: bump version to 1.75
1.74 Timeout in bcm2835_i2c_write() increased by a factor of 10 because
     some users have reported spurious timeouts at slow speeds.

1.75 Patches to bcm2835_aux_spi_transfernb() from Sean Goff to deal with
     the case where the process is interrupted between filling the TX
     FIFO and reading the RX FIFO.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 23:23:39 +01:00
Dario Binacchi 821551a171 configs/imx8mn_bsh_smm_s2[_pro]: bump Linux to 6.12.56 and U-Boot to 2025.10
The patch bumps the Linux kernel to version 6.12.56 and U-Boot to
version 2025.10.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 21:40:29 +01:00
Bernd Kuhls f27a99010f package/bind: security bump version to 9.18.41
Release notes:
https://ftp.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html

Changelog:
https://ftp.isc.org/isc/bind9/9.18.41/doc/arm/html/changelog.html

Fixes CVE-2025-8677, CVE-2025-40778 & CVE-2025-40780.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 19:21:25 +01:00
Bernd Kuhls 4a2202244b package/bind: add optional dependency to jemalloc
Added upstream in version 9.18.0:
https://gitlab.isc.org/isc-projects/bind9/-/commit/7f1c525625675e7e5e0953a78adefe9e21fc1462

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 19:21:25 +01:00
Bernd Kuhls 6a20a930fd package/bind: enable parallel builds
Buildroot commit e4749b826c disabled
parallel builds back in 2016. Nearly 10 years and a "Complete rewrite
[of] the BIND 9 build system" later

https://gitlab.isc.org/isc-projects/bind9/-/commit/978c7b2e89aa37a7ddfe2f6b6ba12ce73dd04528

we enable parallel builds again, make -j1000 finished without problems.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 19:21:25 +01:00
Bernd Kuhls 9c0f6d2379 package/bind: drop unrecognized options
Buildroot commit c9515c8b63 bumped bind to
9.18.28 which removed dnssec-keymgr:
https://gitlab.isc.org/isc-projects/bind9/-/blob/v9.18.28/doc/notes/notes-9.18.0.rst?ref_type=tags&plain=1#L187

but forgot to remove the configure option --with-python
https://gitlab.isc.org/isc-projects/bind9/-/commit/98b3b93791777218c04a67ddaef22619162249f7
https://gitlab.isc.org/isc-projects/bind9/-/commit/305ca032a0d3afd779b2b97bb36971e1072f0453

Configure option --enable-epoll was also removed upstream in 9.18.16:
https://gitlab.isc.org/isc-projects/bind9/-/commit/6b6076c882a00028197b04a827f6cf8e7a5369de

Configure option --enable-backtrace was also removed upstream in 9.18.0:
https://gitlab.isc.org/isc-projects/bind9/-/commit/e847591867cfe542c9e52d6176e0a2bb6e2ca875

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 19:21:25 +01:00
Bernd Kuhls 636b2a8503 package/bind: drop unrecognized option
Buildroot commits 7b43e24818 and
8adeaec8af removed the possibility for
static builds but forgot to remove some related _CONF_OPTS.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-31 19:21:25 +01:00
Thomas Petazzoni bf4e1ec19f package/snagboot: new package
This commit adds a package for Snagboot, the open-source
vendor-neutral recover and reflashing tool for embedded targets. We
install the dependencies needed for snagrecover and snagflash, but we
don't bother installing the dependencies of the GUI-based snagfactory,
as that would require Kivy on the host, which is Qt based.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:16:47 +01:00
Thomas Petazzoni 49a81c77d7 package/python-pyfatfs: new package
This commit adds a new host package for python-pyfatfs, which is
needed by Snagboot.

Homepage: https://pypi.org/project/pyfatfs/

A small test doing some minimal verification that pyfatfs works is
also added.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:16:39 +01:00
Thomas Petazzoni f3ce010e98 package/python-fs: new package
This commit adds a host package for the Python 'fs' module, needed as
a dependency of pyfatfs, itself needed by Snagboot.

Homepage: https://pypi.org/project/fs/

In addition, a very simple test case is adding to check that
host-python-fs is minimally working.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:16:31 +01:00
Thomas Petazzoni baa5543e58 package/python-appdirs: add host variant
The host variant will be needed by the host-python-fs package, soon to
be added.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:59 +01:00
Thomas Petazzoni 7cac4201f3 package/python-xmodem: add host variant
The host variant of python-xmodem will be needed by Snagboot, so this
commit enables it. We also add a very simple test case that simply
makes sure we can import the module. Testing xmodem more extensively
is difficult without an actual serial port to open.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:56 +01:00
Thomas Petazzoni 20afa3be7c package/python-pyusb: enable host variant
The host variant of python-pyusb will be neded for Snagboot, so it is
enabled with this commit. In addition, we're adding a very simple test
case to validate that host-python-pyusb minimally works.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:52 +01:00
Thomas Petazzoni b2a657297d package/python-tftpy: add host variant
A host variant of python-tftpy will be needed for Snagboot, so enable
it, and add a very simple test for the host package. We considered
adding a test that actually starts a TFTP server with tftpy and then
downloads from that server with the client-side of tftpy, but
allocating an available UDP port reliably is tricky, so we kept the
test case very simple for now.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Reviewed-by: Colin Foster <colin.foster@in-advantage.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:49 +01:00
Thomas Petazzoni 875b4f204c support/testing/tests/package/test_python_serial.py: new test case
This quickly tests that the host-python-serial package at least
minimally works.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:44 +01:00
Thomas Petazzoni d03cfe515b package/python-crccheck: new package
This commit adds a new host only package for the crccheck Python
module, which is a dependency of Snagboot.

Homepage on PyPi: https://pypi.org/project/crccheck/

This commit also adds a very basic test case that allows to verify
that the Python module can be imported and that some minimal
functionality works.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:41 +01:00
Thomas Petazzoni 9468f1c099 support/testing/infra/basetest.py: add BRHostPkgTest class
Runtime test cases are currently mostly used to test target packages,
and the BRTest class is perfect for that as we can easily feed a
Buildroot configuration, boot it under Qemu and run commands inside
the emulator.

A few tests use the more basic BRConfigTest when they have special
needs that don't match with BRTest.

However, as we are going to add a number of tests to verify the proper
functionality of some host only packages, which have no visible
menuconfig option, it makes sense to add another BRHostPkgTest class
that allows to easily trigger the build of "make host-<foo>
host-<bar>", and then run some commands on the host machine. Such
tests could be done by using BRConfigTest, but that would require a
bit of duplicated boilerplate, which BRHostPkgTest allows to remove.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:37 +01:00
Thomas Petazzoni 01dc13adfb support/testing/infra: improve run_cmd_on_host() to show stdout/stderr
When run_cmd_on_host() runs a command that fails, we only get an
exception with no details to debug what happened. Let's improve that
by catching the exception, and printing the command output. This
requires redirecting stderr to stdout (instead of /dev/null) and
asking to get the output in text format.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:10:33 +01:00
Bernd Kuhls 8913d7c810 package/{mesa3d, mesa3d-headers}: bump version to 25.2.6
Release notes:
https://lists.freedesktop.org/archives/mesa-announce/2025-October/000826.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:03:39 +01:00
Julien Olivain 0704df0476 support/testing: llama-cpp: new runtime test
Cc: Joseph Kogut <joseph.kogut@gmail.com>
Reviewed-by: Joseph Kogut <joseph.kogut@gmail.com>
Tested-by: Joseph Kogut <joseph.kogut@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-30 21:01:22 +01:00
Bernd Kuhls a6942ce78c {linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12, 17}.x series
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 23:08:02 +01:00
Jarkko Sakkinen 2b449935c2 package/swtpm: bump version to 0.10.1
Release notes:
https://github.com/stefanberger/swtpm/releases/tag/v0.10.1

Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
[Julien: remove old hash entry]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 22:48:32 +01:00
Jarkko Sakkinen b4c9596dbf package/libtpms: bump version to 0.10.1
Release notes:
https://github.com/stefanberger/libtpms/releases/tag/v0.10.1

Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
[Julien:
 - remove old hash entry
 - fix release note url in commit log
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 22:48:00 +01:00
Bernd Kuhls 789d1952d2 package/ntpsec: bump version to 1.2.4
Release notes:
https://gitlab.com/NTPsec/ntpsec/-/blob/NTPsec_1_2_4/NEWS.adoc?ref_type=tags

Buildroot commit a532772468 added patch
0003 although it should have been 0002 => renumbered.

Added upstream commit as 0003 for partial build fix with gcc 14.x

Added another patch to fix build with gcc >= 14.x for
BR2_PACKAGE_NTPSEC_REFCLOCK_ALL=y

Move env variable declarations from _CONF_OPTS to _CONF_ENV to fix a
configure error caused by updated waf scripts included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 21:47:58 +01:00
Dario Binacchi 46afb8763d package/bat: bump to version 0.26.0
Changelog:
https://github.com/sharkdp/bat/blob/v0.26.0/CHANGELOG.md

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 21:47:46 +01:00
Dario Binacchi 029b672ebe package/avrdude: bump to version 8.1
Release notes:
https://github.com/avrdudes/avrdude/blob/v8.1/NEWS

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 21:47:39 +01:00
James Hilliard f12ba4580a package/python-meson-python: bump to version 0.18.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 21:46:11 +01:00
Andreas Ziegler 164d3a5575 package/mpd: update to version 0.24.6
Version 0.24.6 change log:

* decoder
  - ffmpeg: handle "*.opus" files
  - mpg123: another workaround for libmpg123 ID3 corruption bug
  - opus: fix seeking in files with large OpusTags
  - opus, vorbis: remove METADATA_BLOCK_PICTURE size limit

Signed-off-by: Andreas Ziegler <br025@umbiko.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 21:41:54 +01:00
Dario Binacchi 5864141279 package/bcc: bump version to 0.35.0
Release notes:
https://github.com/iovisor/bcc/blob/v0.35.0/debian/changelog

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-29 21:31:32 +01:00
Joseph Kogut 03f35bc63b package/llama-cpp: new package
Add a package for llama.cpp, a C/C++ LLM inference library, used in
popular projects like Ollama, RamaLama, and more.

Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
[Julien:
 - add a Config.in comment justifying the dynamic libraries for uclibc
 - add missing conditions in Config.in toolchain dependencies
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-28 19:14:38 +01:00
Francois Perrad 154f6694f6 package/lynis: bump to version 3.1.6
For release notes, see:
https://github.com/CISOfy/lynis/releases/tag/3.1.6

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
[Julien: add link to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-27 23:25:00 +01:00
Thomas Perale 3b3b2d1b72 package/imagemagick: security bump to v7.1.2-8
For more details on the version bump, see:
  - https://github.com/ImageMagick/ImageMagick/compare/7.1.2-3...7.1.2-8

Fixes the following vulnerability:

- CVE-2025-62171

    ImageMagick is an open source software suite for displaying,
    converting, and editing raster image files. In ImageMagick versions
    prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability
    exists in the BMP decoder on 32-bit systems. The vulnerability
    occurs in coders/bmp.c when calculating the extent value by
    multiplying image columns by bits per pixel. On 32-bit systems with
    size_t of 4 bytes, a malicious BMP file with specific dimensions can
    cause this multiplication to overflow and wrap to zero. The overflow
    check added to address CVE-2025-57803 is placed after the overflow
    occurs, making it ineffective. A specially crafted 58-byte BMP file
    with width set to 536,870,912 and 32 bits per pixel can trigger this
    overflow, causing the bytes_per_line calculation to become zero.
    This vulnerability only affects 32-bit builds of ImageMagick where
    default resource limits for width, height, and area have been
    manually increased beyond their defaults. 64-bit systems with size_t
    of 8 bytes are not vulnerable, and systems using default ImageMagick
    resource limits are not vulnerable. The vulnerability is fixed in
    versions 7.1.2-7 and 6.9.13-32.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-62171
  - https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm
  - https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-27 22:57:13 +01:00
Thomas Perale 1a25f0c372 package/mbedtls: security bump to v3.6.5
For more details on the version bump, see:
 - https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.5

Fixes the following vulnerabilities:

- CVE-2025-54764

    Mbed TLS before 3.6.5 allows a local timing attack against certain
    RSA operations, and direct calls to mbedtls_mpi_mod_inv or
    mbedtls_mpi_gcd.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-54764
  - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-ssbleed-mstep/

- CVE-2025-59438

    Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-59438
  - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-invalid-padding-error/

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-27 22:57:09 +01:00
Scott Fan 8448784798 configs/cubieboard2: bump Linux to 6.12.52 and U-Boot to 2025.10
Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-27 22:20:09 +01:00
Scott Fan 0515f1e783 configs/cubieboard1: bump Linux to 6.12.52 and U-Boot to 2025.10
Signed-off-by: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-27 22:20:09 +01:00
Titouan Christophe 8282aaf094 package/hostapd: add patches for CVE-2025-24912
See https://jvn.jp/en/jp/JVN19358384/

This fixes the following vulnerability:
- CVE-2025-24912:
    hostapd fails to process crafted RADIUS packets properly. When hostapd
    authenticates wi-fi devices with RADIUS authentication, an attacker in
    the position between the hostapd and the RADIUS server may inject
    crafted RADIUS packets and force RADIUS authentications to fail.
    https://www.cve.org/CVERecord?id=CVE-2025-24912

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-27 22:10:39 +01:00
Bernd Kuhls 50954cc5e0 package/libxslt: security bump version to 1.1.43
Release notes:
https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.43.news

Fixes CVE-2025-24855 & CVE-2024-55549.

Switched _LICENSE_FILES to Copyright due to upstream commit
https://gitlab.gnome.org/GNOME/libxslt/-/commit/29938a64f6449aceb3e97a9e8da10abe2e27a314
in version 1.1.36 and the removal of COPYING in the 1.1.43 tarball,
although COPYING did still exist in the 1.1.42 tarball.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-10-27 21:44:37 +01:00