Update for 2022.02-rc3

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/dbus: bump to version 1.12.22
2022-02-28 22:38:26 +01:00 · 2022-02-28 22:18:33 +01:00 · 2022-02-28 22:17:20 +01:00 · 2022-02-28 22:14:00 +01:00 · 2022-02-28 22:11:49 +01:00 · 2022-02-28 22:11:17 +01:00
52 changed files with 625 additions and 184 deletions
@@ -1,3 +1,14 @@
+2022.02-rc3, released February 28th, 2022
+
+	Fixes all over the tree.
+
+	Defconfigs: Xilinx zynqmp zcu102/zcu106: Fix U-Boot DTS config
+
+	Updated/fixed packages: bluez5_utils, bpftool, dbus, exempi,
+	flac, freerdp, frr, gnutls, libpjsip, libxml2, mariadb,
+	openssh, python-twisted, qt5webkit, samba4, vim, weston,
+	wireshark, wolfssl, xdg-dbus-proxy, xterm,
+
 2022.02-rc2, released February 20th, 2022

 	Fixes all over the tree.
@@ -87,6 +98,29 @@
 	#14501: lttng-modules v2.11 package fails to build
 	#14531: Package EFL - build error

+2021.11.2, released February 28th, 2022
+
+	Important / security related fixes.
+
+	Defconfigs: Andes ae3xx, Intel galileo: Fix build with host
+	gcc >= 10, ROC-RK3399-PC: Bump rootfs size to fix build issue.
+
+	Add conditional patching logic to fix build issues for older
+	U-Boot / Linux kernel versions when built with a host gcc >=
+	10.
+
+	Updated/fixed packages: apitrace, binutils, casync, cgilua,
+	connman, expat, gauche, gdb, gensio, glibc, go, gst-omx,
+	gst1-devtools, gst1-libav, gst1-plugins-bad,
+	gst1-plugins-base, gst1-plugins-good, gst1-plugins-ugly,
+	gst1-python, gst1-rtsp-server, gst1-vaapi, gstreamer1,
+	gstreamer1-editing-services, kf5-extra-cmake-modules, kodi,
+	libarchive, linux, lm-sensors, localedef, log4cxx, mpd,
+	nfs-utils, php, pistache, pkcs11-helper, prosody,
+	python-django, python-pyzmq, python-regex,
+	python-sqliteschema, resiprocate, rtl8723bu, thermald, tiff,
+	tor, util-linux, vim, xen
+
 2021.11.1, released January 29th, 2022

 	Important / security related fixes.
@@ -713,6 +747,26 @@
 	#13751: libopenssl (static): huge drop in performance in newer ..
 	#13771: package htop has undeclared dependency on host python

+2021.02.10, released February 28th, 2022
+
+	Important / security related fixes.
+
+	Defconfigs: Andes ae3xx, Intel galileo: Fix build with host
+	gcc >= 10, ROC-RK3399-PC: Bump rootfs size to fix build issue.
+
+	Add conditional patching logic to fix build issues for older
+	U-Boot / Linux kernel versions when built with a host gcc >=
+	10.
+
+	Updated/fixed packages: casync, cgilua, connman, expat,
+	gauche, gensio, go, gst-omx, gst1-devtools, gst1-libav,
+	gst1-plugins-bad, gst1-plugins-base, gst1-plugins-good,
+	gst1-plugins-ugly, gst1-python, gst1-rtsp-server, gst1-vaapi,
+	gstreamer1, gstreamer1-editing-services,
+	kf5-extra-cmake-modules, kodi, libarchive, linux, lm-sensors,
+	log4cxx, mpd, nfs-utils, pistache, prosody, python-django,
+	python-pyzmq, rtl8723bu, thermald, tiff, util-linux, vim, xen
+
 2021.02.9, released January 29th, 2022

 	Important / security related fixes.
@@ -146,6 +146,18 @@ endif

 comment "Legacy options removed in 2022.02"

+config BR2_PACKAGE_WESTON_DEFAULT_FBDEV
+	bool "weston fbdev removed"
+	select BR2_LEGACY
+	help
+	  fbdev was deprecated in weston 10.0.0.
+
+config BR2_PACKAGE_WESTON_FBDEV
+	bool "weston fbdev compositor removed"
+	select BR2_LEGACY
+	help
+	  fbdev compositor was deprecated in weston 10.0.0.
+
 config BR2_PACKAGE_LINUX_TOOLS_BPFTOOL
 	bool "bpftool was moved"
 	select BR2_LEGACY
@@ -92,9 +92,9 @@ all:
 .PHONY: all

 # Set and export the version string
-export BR2_VERSION := 2022.02-rc2
+export BR2_VERSION := 2022.02-rc3
 # Actual time the release is cut (for reproducible builds)
-BR2_VERSION_EPOCH = 1645395000
+BR2_VERSION_EPOCH = 1646083800

 # Save running make version since it's clobbered by the make package
 RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -426,6 +426,7 @@ unexport O
 unexport GCC_COLORS
 unexport PLATFORM
 unexport OS
+unexport DEVICE_TREE

 GNU_HOST_NAME := $(shell support/gnuconfig/config.guess)

@@ -0,0 +1 @@
+CONFIG_DEFAULT_DEVICE_TREE="zynqmp-zcu102-rev1.0"
@@ -0,0 +1 @@
+CONFIG_DEFAULT_DEVICE_TREE="zynqmp-zcu106-revA"
@@ -25,6 +25,7 @@ BR2_TARGET_UBOOT_CUSTOM_GIT=y
 BR2_TARGET_UBOOT_CUSTOM_REPO_URL="git://github.com/Xilinx/u-boot-xlnx.git"
 BR2_TARGET_UBOOT_CUSTOM_REPO_VERSION="v2022.01-165-g667001319cbe511ce6353195fb4910ae5cb041ce"
 BR2_TARGET_UBOOT_BOARD_DEFCONFIG="xilinx_zynqmp_virt"
+BR2_TARGET_UBOOT_CONFIG_FRAGMENT_FILES="board/zynqmp/zcu102/uboot.fragment"
 BR2_TARGET_UBOOT_NEEDS_DTC=y
 BR2_TARGET_UBOOT_NEEDS_OPENSSL=y
 BR2_TARGET_UBOOT_SPL=y
@@ -25,6 +25,7 @@ BR2_TARGET_UBOOT_CUSTOM_GIT=y
 BR2_TARGET_UBOOT_CUSTOM_REPO_URL="git://github.com/Xilinx/u-boot-xlnx.git"
 BR2_TARGET_UBOOT_CUSTOM_REPO_VERSION="v2022.01-165-g667001319cbe511ce6353195fb4910ae5cb041ce"
 BR2_TARGET_UBOOT_BOARD_DEFCONFIG="xilinx_zynqmp_virt"
+BR2_TARGET_UBOOT_CONFIG_FRAGMENT_FILES="board/zynqmp/zcu106/uboot.fragment"
 BR2_TARGET_UBOOT_NEEDS_DTC=y
 BR2_TARGET_UBOOT_NEEDS_OPENSSL=y
 BR2_TARGET_UBOOT_SPL=y
@@ -8,105 +8,105 @@
    <div class="panel-heading">Download</div>
    <div class="panel-body">

-      <h3 style="text-align: center;">Latest long term support release: <b>2021.02.9</b></h3>
+      <h3 style="text-align: center;">Latest long term support release: <b>2021.02.10</b></h3>

      <div class="row mt centered">
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2021.02.9.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.02.10.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2021.02.9.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.02.10.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>
-	  <h3><a href="/downloads/buildroot-2021.02.9.tar.gz">buildroot-2021.02.9.tar.gz</a></h3>
-	  <p><a href="/downloads/buildroot-2021.02.9.tar.gz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2021.02.10.tar.gz">buildroot-2021.02.10.tar.gz</a></h3>
+	  <p><a href="/downloads/buildroot-2021.02.10.tar.gz.sign">PGP signature</a></p>
 	</div>
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2021.02.9.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.02.10.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2021.02.9.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.02.10.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2021.02.9.tar.bz2">buildroot-2021.02.9.tar.bz2</a></h3>
-	  <p><a href="/downloads/buildroot-2021.02.9.tar.bz2.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2021.02.10.tar.bz2">buildroot-2021.02.10.tar.bz2</a></h3>
+	  <p><a href="/downloads/buildroot-2021.02.10.tar.bz2.sign">PGP signature</a></p>
 	</div>
      </div>

-      <h3 style="text-align: center;">Latest stable release: <b>2021.11.1</b></h3>
+      <h3 style="text-align: center;">Latest stable release: <b>2021.11.2</b></h3>

      <div class="row mt centered">
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2021.11.1.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.11.2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2021.11.1.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.11.2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>
-	  <h3><a href="/downloads/buildroot-2021.11.1.tar.gz">buildroot-2021.11.1.tar.gz</a></h3>
-	  <p><a href="/downloads/buildroot-2021.11.1.tar.gz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2021.11.2.tar.gz">buildroot-2021.11.2.tar.gz</a></h3>
+	  <p><a href="/downloads/buildroot-2021.11.2.tar.gz.sign">PGP signature</a></p>
 	</div>
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2021.11.1.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.11.2.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2021.11.1.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2021.11.2.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2021.11.1.tar.xz">buildroot-2021.11.1.tar.xz</a></h3>
-	  <p><a href="/downloads/buildroot-2021.11.1.tar.xz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2021.11.2.tar.xz">buildroot-2021.11.2.tar.xz</a></h3>
+	  <p><a href="/downloads/buildroot-2021.11.2.tar.xz.sign">PGP signature</a></p>
 	</div>
      </div>

-      <h3 style="text-align: center;">Latest release candidate: <b>2022.02-rc2</b></h3>
+      <h3 style="text-align: center;">Latest release candidate: <b>2022.02-rc3</b></h3>
      <div class="row mt centered">
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2022.02-rc2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2022.02-rc3.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2022.02-rc2.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2022.02-rc3.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2022.02-rc2.tar.gz">buildroot-2022.02-rc2.tar.gz</a></h3>
-	  <p><a href="/downloads/buildroot-2022.02-rc2.tar.gz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2022.02-rc3.tar.gz">buildroot-2022.02-rc3.tar.gz</a></h3>
+	  <p><a href="/downloads/buildroot-2022.02-rc3.tar.gz.sign">PGP signature</a></p>
 	</div>
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2022.02-rc2.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2022.02-rc3.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2022.02-rc2.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2022.02-rc3.tar.bz2"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2022.02-rc2.tar.bz2">buildroot-2022.02-rc2.tar.bz2</a></h3>
-	  <p><a href="/downloads/buildroot-2022.02-rc2.tar.bz2.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2022.02-rc3.tar.bz2">buildroot-2022.02-rc3.tar.bz2</a></h3>
+	  <p><a href="/downloads/buildroot-2022.02-rc3.tar.bz2.sign">PGP signature</a></p>
 	</div>
      </div>

@@ -9,6 +9,65 @@
 <h2>News</h2>
 <ul class="timeline">

+  <li class="timeline-inverted">
+    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
+    <div class="timeline-panel">
+      <div class="timeline-heading">
+	<h4 class="timeline-title">2022.02-rc3 released</h4>
+	<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>28 February 2022</small></p>
+      </div>
+      <div class="timeline-body">
+        <p>2022.02-rc3 has been released with more cleanups and build fixes. See the
+	  <a href="http://git.buildroot.net/buildroot/plain/CHANGES?id=2022.02-rc3">CHANGES</a>
+	  file for details.</p>
+
+	<p>Head to the <a href="/downloads/">downloads page</a> to pick up the
+	  <a href="/downloads/buildroot-2022.02-rc3.tar.bz2">2022.02-rc3
+	  release candidate</a>, and report any problems found to the
+	  <a href="support.html">mailing list</a> or
+	  <a href="https://bugs.buildroot.org">bug tracker</a>.</p>
+      </div>
+    </div>
+  </li>
+
+  <li>
+    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
+    <div class="timeline-panel">
+      <div class="timeline-heading">
+	<h4 class="timeline-title">2021.02.10 released</h4>
+	<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>28 February 2022</small></p>
+      </div>
+      <div class="timeline-body">
+	<p>The 2021.02.10 bugfix release is out, fixing a number of important /
+	  security related issues discovered since the 2021.02.9 release. See the
+	  <a href="http://git.buildroot.net/buildroot/plain/CHANGES?id=2021.02.10">CHANGES</a>
+	  file for more details, read the
+	  <a href="http://lists.busybox.net/pipermail/buildroot/2022-February/637878.html">announcement</a>
+	  and go to the <a href="/downloads/">downloads page</a> to pick up the
+	  <a href="/downloads/buildroot-2021.02.10.tar.bz2">2021.02.10 release</a>.</p>
+      </div>
+    </div>
+  </li>
+
+  <li class="timeline-inverted">
+    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
+    <div class="timeline-panel">
+      <div class="timeline-heading">
+	<h4 class="timeline-title">2021.11.2 released</h4>
+	<p><small class="text-muted"><i class="glyphicon glyphicon-time"></i>28 February 2022</small></p>
+      </div>
+      <div class="timeline-body">
+	<p>The 2021.11.2 bugfix release is out, fixing a number of important /
+	  security related issues discovered since the 2021.11.1 release. See the
+	  <a href="http://git.buildroot.net/buildroot/plain/CHANGES?id=2021.11.2">CHANGES</a>
+	  file for more details, read the
+	  <a href="http://lists.busybox.net/pipermail/buildroot/2022-February/637876.html">announcement</a>
+	  and go to the <a href="/downloads/">downloads page</a> to pick up the
+	  <a href="/downloads/buildroot-2021.11.2.tar.xz">2021.11.2 release</a>.</p>
+      </div>
+    </div>
+  </li>
+
  <li>
    <div class="timeline-badge"><i class="glyphicon glyphicon-thumbs-up"></i></div>
    <div class="timeline-panel">
@@ -0,0 +1,312 @@
+From fb57ad9b9d107856e5f1c8135da04ffa2f7a11ac Mon Sep 17 00:00:00 2001
+From: Fabrice Fontaine <fontaine.fabrice@gmail.com>
+Date: Mon, 14 Feb 2022 21:17:39 +0100
+Subject: build: Fix errors with glibc < 2.25
+
+getrandom and sys/random.h are only available since glibc 2.25:
+https://www.gnu.org/software/gnulib/manual/html_node/sys_002frandom_002eh.html
+resulting in the following build failures since version 5.63 and
+https://git.kernel.org/pub/scm/bluetooth/bluez.git/log/?qt=grep&q=getrandom:
+
+plugins/autopair.c:20:24: fatal error: sys/random.h: No such file or directory
+ #include <sys/random.h>
+                        ^
+
+To fix this build failure, add util_getrandom and a fallback (borrowed
+from pipewire and licensed under MIT):
+https://gitlab.freedesktop.org/pipewire/pipewire/-/blob/master/src/pipewire/utils.c
+
+Fixes:
+ - http://autobuild.buildroot.org/results/6b8870d12e0804d6154230a7322c49416c1dc0e2
+
+[Retrieved from:
+https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=fb57ad9b9d107856e5f1c8135da04ffa2f7a11ac]
+Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
+---
+ configure.ac           |  4 +++-
+ emulator/le.c          |  3 +--
+ emulator/phy.c         |  3 +--
+ peripheral/main.c      |  4 ++--
+ plugins/autopair.c     |  4 ++--
+ profiles/health/hdp.c  |  4 ++--
+ profiles/health/mcap.c |  6 +++---
+ src/shared/util.c      | 25 +++++++++++++++++++++++++
+ src/shared/util.h      |  2 ++
+ tools/btgatt-server.c  |  3 +--
+ 10 files changed, 42 insertions(+), 16 deletions(-)
+
+diff --git a/configure.ac b/configure.ac
+index 07d068a4d..441bd5f29 100644
+--- a/configure.ac
+++ b/configure.ac
+@@ -54,6 +54,8 @@ AC_ARG_ENABLE(threads, AS_HELP_STRING([--enable-threads],
+ 
+ AC_CHECK_FUNCS(explicit_bzero)
+ 
+AC_CHECK_FUNCS(getrandom)
+
+ AC_CHECK_FUNCS(rawmemchr)
+ 
+ AC_CHECK_FUNC(signalfd, dummy=yes,
+@@ -68,7 +70,7 @@ AC_CHECK_LIB(pthread, pthread_create, dummy=yes,
+ AC_CHECK_LIB(dl, dlopen, dummy=yes,
+ 			AC_MSG_ERROR(dynamic linking loader is required))
+ 
+-AC_CHECK_HEADERS(linux/types.h linux/if_alg.h linux/uinput.h linux/uhid.h)
+AC_CHECK_HEADERS(linux/types.h linux/if_alg.h linux/uinput.h linux/uhid.h sys/random.h)
+ 
+ PKG_CHECK_MODULES(GLIB, glib-2.0 >= 2.28, dummy=yes,
+ 				AC_MSG_ERROR(GLib >= 2.28 is required))
+diff --git a/emulator/le.c b/emulator/le.c
+index f8f313f2c..7656a657c 100644
+--- a/emulator/le.c
+++ b/emulator/le.c
+@@ -20,7 +20,6 @@
+ #include <sys/socket.h>
+ #include <sys/un.h>
+ #include <sys/uio.h>
+-#include <sys/random.h>
+ #include <time.h>
+ 
+ #include "lib/bluetooth.h"
+@@ -509,7 +508,7 @@ static unsigned int get_adv_delay(void)
+ 	/* The advertising delay is a pseudo-random value with a range
+ 	 * of 0 ms to 10 ms generated for each advertising event.
+ 	 */
+-	if (getrandom(&val, sizeof(val), 0) < 0) {
+	if (util_getrandom(&val, sizeof(val), 0) < 0) {
+ 		/* If it fails to get the random number, use a static value */
+ 		val = 5;
+ 	}
+diff --git a/emulator/phy.c b/emulator/phy.c
+index 44cace438..7de85fb05 100644
+--- a/emulator/phy.c
+++ b/emulator/phy.c
+@@ -19,7 +19,6 @@
+ #include <stdlib.h>
+ #include <string.h>
+ #include <sys/socket.h>
+-#include <sys/random.h>
+ #include <netinet/in.h>
+ #include <netinet/ip.h>
+ #include <time.h>
+@@ -174,7 +173,7 @@ struct bt_phy *bt_phy_new(void)
+ 	mainloop_add_fd(phy->rx_fd, EPOLLIN, phy_rx_callback, phy, NULL);
+ 
+ 	if (!get_random_bytes(&phy->id, sizeof(phy->id))) {
+-		if (getrandom(&phy->id, sizeof(phy->id), 0) < 0) {
+		if (util_getrandom(&phy->id, sizeof(phy->id), 0) < 0) {
+ 			mainloop_remove_fd(phy->rx_fd);
+ 			close(phy->tx_fd);
+ 			close(phy->rx_fd);
+diff --git a/peripheral/main.c b/peripheral/main.c
+index 91adb45fc..b82d7caf6 100644
+--- a/peripheral/main.c
+++ b/peripheral/main.c
+@@ -25,13 +25,13 @@
+ #include <sys/stat.h>
+ #include <sys/types.h>
+ #include <sys/mount.h>
+-#include <sys/random.h>
+ 
+ #ifndef WAIT_ANY
+ #define WAIT_ANY (-1)
+ #endif
+ 
+ #include "src/shared/mainloop.h"
+#include "src/shared/util.h"
+ #include "peripheral/efivars.h"
+ #include "peripheral/attach.h"
+ #include "peripheral/gap.h"
+@@ -192,7 +192,7 @@ int main(int argc, char *argv[])
+ 							addr, 6) < 0) {
+ 			printf("Generating new persistent static address\n");
+ 
+-			if (getrandom(addr, sizeof(addr), 0) < 0) {
+			if (util_getrandom(addr, sizeof(addr), 0) < 0) {
+ 				perror("Failed to get random static address");
+ 				return EXIT_FAILURE;
+ 			}
+diff --git a/plugins/autopair.c b/plugins/autopair.c
+index a75ecebe4..0b09e893f 100644
+--- a/plugins/autopair.c
+++ b/plugins/autopair.c
+@@ -17,7 +17,6 @@
+ #include <fcntl.h>
+ #include <unistd.h>
+ #include <errno.h>
+-#include <sys/random.h>
+ 
+ #include <glib.h>
+ 
+@@ -29,6 +28,7 @@
+ #include "src/device.h"
+ #include "src/log.h"
+ #include "src/storage.h"
+#include "src/shared/util.h"
+ 
+ /*
+  * Plugin to handle automatic pairing of devices with reduced user
+@@ -131,7 +131,7 @@ static ssize_t autopair_pincb(struct btd_adapter *adapter,
+ 			if (attempt >= 4)
+ 				return 0;
+ 
+-			if (getrandom(&val, sizeof(val), 0) < 0) {
+			if (util_getrandom(&val, sizeof(val), 0) < 0) {
+ 				error("Failed to get a random pincode");
+ 				return 0;
+ 			}
+diff --git a/profiles/health/hdp.c b/profiles/health/hdp.c
+index 9d9d1e824..b6590cd3a 100644
+--- a/profiles/health/hdp.c
+++ b/profiles/health/hdp.c
+@@ -16,7 +16,6 @@
+ #include <stdint.h>
+ #include <stdbool.h>
+ #include <unistd.h>
+-#include <sys/random.h>
+ 
+ #include <glib.h>
+ 
+@@ -33,6 +32,7 @@
+ #include "src/device.h"
+ #include "src/sdpd.h"
+ #include "src/shared/timeout.h"
+#include "src/shared/util.h"
+ #include "btio/btio.h"
+ 
+ #include "hdp_types.h"
+@@ -1490,7 +1490,7 @@ static void *generate_echo_packet(void)
+ 	if (!buf)
+ 		return NULL;
+ 
+-	if (getrandom(buf, HDP_ECHO_LEN, 0) < 0) {
+	if (util_getrandom(buf, HDP_ECHO_LEN, 0) < 0) {
+ 		g_free(buf);
+ 		return NULL;
+ 	}
+diff --git a/profiles/health/mcap.c b/profiles/health/mcap.c
+index aad0a08a3..5d2bac3d9 100644
+--- a/profiles/health/mcap.c
+++ b/profiles/health/mcap.c
+@@ -19,7 +19,6 @@
+ #include <errno.h>
+ #include <unistd.h>
+ #include <time.h>
+-#include <sys/random.h>
+ 
+ #include <glib.h>
+ 
+@@ -28,6 +27,7 @@
+ #include "btio/btio.h"
+ #include "src/log.h"
+ #include "src/shared/timeout.h"
+#include "src/shared/util.h"
+ 
+ #include "mcap.h"
+ 
+@@ -1905,7 +1905,7 @@ gboolean mcap_create_mcl(struct mcap_instance *mi,
+ 		mcl->state = MCL_IDLE;
+ 		bacpy(&mcl->addr, addr);
+ 		set_default_cb(mcl);
+-		if (getrandom(&val, sizeof(val), 0) < 0) {
+		if (util_getrandom(&val, sizeof(val), 0) < 0) {
+ 			mcap_instance_unref(mcl->mi);
+ 			g_free(mcl);
+ 			return FALSE;
+@@ -2049,7 +2049,7 @@ static void connect_mcl_event_cb(GIOChannel *chan, GError *gerr,
+ 		mcl->mi = mcap_instance_ref(mi);
+ 		bacpy(&mcl->addr, &dst);
+ 		set_default_cb(mcl);
+-		if (getrandom(&val, sizeof(val), 0) < 0) {
+		if (util_getrandom(&val, sizeof(val), 0) < 0) {
+ 			mcap_instance_unref(mcl->mi);
+ 			g_free(mcl);
+ 			goto drop;
+diff --git a/src/shared/util.c b/src/shared/util.c
+index 6e1c83057..33196bf8b 100644
+--- a/src/shared/util.c
+++ b/src/shared/util.c
+@@ -13,6 +13,7 @@
+ #endif
+ 
+ #define _GNU_SOURCE
+#include <fcntl.h>
+ #include <stdio.h>
+ #include <ctype.h>
+ #include <stdbool.h>
+@@ -23,6 +24,10 @@
+ #include <limits.h>
+ #include <string.h>
+ 
+#ifdef HAVE_SYS_RANDOM_H
+#include <sys/random.h>
+#endif
+
+ #include "src/shared/util.h"
+ 
+ void *util_malloc(size_t size)
+@@ -138,6 +143,26 @@ unsigned char util_get_dt(const char *parent, const char *name)
+ 	return DT_UNKNOWN;
+ }
+ 
+/* Helper for getting a random in case getrandom unavailable (glibc < 2.25) */
+ssize_t util_getrandom(void *buf, size_t buflen, unsigned int flags)
+{
+#ifdef HAVE_GETRANDOM
+	return getrandom(buf, buflen, flags);
+#else
+	int fd;
+	ssize_t bytes;
+
+	fd = open("/dev/urandom", O_CLOEXEC);
+	if (fd < 0)
+		return -1;
+
+	bytes = read(fd, buf, buflen);
+	close(fd);
+
+	return bytes;
+#endif
+}
+
+ /* Helpers for bitfield operations */
+ 
+ /* Find unique id in range from 1 to max but no bigger than 64. */
+diff --git a/src/shared/util.h b/src/shared/util.h
+index 8ef6132c4..c01eccf8a 100644
+--- a/src/shared/util.h
+++ b/src/shared/util.h
+@@ -103,6 +103,8 @@ void util_hexdump(const char dir, const unsigned char *buf, size_t len,
+ 
+ unsigned char util_get_dt(const char *parent, const char *name);
+ 
+ssize_t util_getrandom(void *buf, size_t buflen, unsigned int flags);
+
+ uint8_t util_get_uid(uint64_t *bitmap, uint8_t max);
+ void util_clear_uid(uint64_t *bitmap, uint8_t id);
+ 
+diff --git a/tools/btgatt-server.c b/tools/btgatt-server.c
+index 15d49a464..4a5d2b720 100644
+--- a/tools/btgatt-server.c
+++ b/tools/btgatt-server.c
+@@ -20,7 +20,6 @@
+ #include <getopt.h>
+ #include <unistd.h>
+ #include <errno.h>
+-#include <sys/random.h>
+ 
+ #include "lib/bluetooth.h"
+ #include "lib/hci.h"
+@@ -287,7 +286,7 @@ static bool hr_msrmt_cb(void *user_data)
+ 	uint32_t cur_ee;
+ 	uint32_t val;
+ 
+-	if (getrandom(&val, sizeof(val), 0) < 0)
+	if (util_getrandom(&val, sizeof(val), 0) < 0)
+ 		return false;
+ 
+ 	pdu[0] = 0x06;
+-- 
+cgit 
+
@@ -13,7 +13,7 @@ BLUEZ5_UTILS_LICENSE = GPL-2.0+, LGPL-2.1+
 BLUEZ5_UTILS_LICENSE_FILES = COPYING COPYING.LIB
 BLUEZ5_UTILS_CPE_ID_VENDOR = bluez
 BLUEZ5_UTILS_CPE_ID_PRODUCT = bluez
-# We're patching Makefile.am
+# We're patching Makefile.am and configure.ac
 BLUEZ5_UTILS_AUTORECONF = YES

 BLUEZ5_UTILS_DEPENDENCIES = \
@@ -1,5 +1,5 @@
 # Locally calculated
-sha256  c868cb85bf44195ec6cd20649c3db4f7aff64a38d950a1c2911d981fb2d7042c  bpftool-a7f0e7f057283ae8af3de4578bcb8b7ee80b7144-br1.tar.gz
+sha256  e4ce219d3b87dd70d8dbfb8f02bd356f70c010f739f17baca1c8912199a8a72b  bpftool-v6.7.0-br1.tar.gz
 sha256  7c588754d5e81e92e2a12e47cf78949d485c9c22b4850f12d21b3835c85947d1  LICENSE
 sha256  6313108c23efffa36948f8b2cff1560a5935373b527b0e1a837cc77e6ed1bacd  LICENSE.BSD-2-Clause
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  LICENSE.GPL-2.0
@@ -4,7 +4,7 @@
 #
 ################################################################################

-BPFTOOL_VERSION = a7f0e7f057283ae8af3de4578bcb8b7ee80b7144
+BPFTOOL_VERSION = v6.7.0
 BPFTOOL_SITE = https://github.com/libbpf/bpftool
 BPFTOOL_SITE_METHOD = git
 BPFTOOL_GIT_SUBMODULES = YES
@@ -1,7 +1,7 @@
 # Locally calculated after checking pgp signature
-# https://dbus.freedesktop.org/releases/dbus/dbus-1.12.20.tar.gz.asc
+# https://dbus.freedesktop.org/releases/dbus/dbus-1.12.22.tar.gz.asc
 # using key 36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F
-sha256  f77620140ecb4cdc67f37fb444f8a6bea70b5b6461f12f1cbe2cec60fa7de5fe  dbus-1.12.20.tar.gz
+sha256  8d25785c798ec4f892e6f9d177fb0ceeb8b29867b119798f9d5228561d3ad474  dbus-1.12.22.tar.gz

 # Locally calculated
 sha256  0e46f54efb12d04ab5c33713bacd0e140c9a35b57ae29e03c853203266e8f3a1  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-DBUS_VERSION = 1.12.20
+DBUS_VERSION = 1.12.22
 DBUS_SITE = https://dbus.freedesktop.org/releases/dbus
 DBUS_LICENSE = AFL-2.1 or GPL-2.0+ (library, tools), GPL-2.0+ (tools)
 DBUS_LICENSE_FILES = COPYING
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  52f54314aefd45945d47a6ecf4bd21f362e6467fa5d0538b0d45a06bc6eaaed5  exempi-2.5.2.tar.bz2
+sha256  072451ac1e0dc97ed69a2e5bfc235fd94fe093d837f65584d0e3581af5db18cd  exempi-2.6.1.tar.bz2
 sha256  3d3c3593c15e0d35bdae0df7c642106250f6be3adc61477419413900f23ae607  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-EXEMPI_VERSION = 2.5.2
+EXEMPI_VERSION = 2.6.1
 EXEMPI_SOURCE = exempi-$(EXEMPI_VERSION).tar.bz2
 EXEMPI_SITE = https://libopenraw.freedesktop.org/download
 EXEMPI_INSTALL_STAGING = YES
@@ -0,0 +1,81 @@
+From 4c62082f64132bfcbcb6569aa914c5ec283303f9 Mon Sep 17 00:00:00 2001
+From: Fabrice Fontaine <fontaine.fabrice@gmail.com>
+Date: Mon, 21 Feb 2022 18:21:11 +0100
+Subject: [PATCH] Fix uclibc build
+
+Commit 4fbb6d4f2ecf2a96c17ea9880108409f852c08a9 reverted commit
+44036c9a9b45d03373fe90e9c112852bfc054c51 and so broke again the build on
+uclibc
+
+So put back the sys/auxv.h check as well as a getauxval check in a way
+that doesn't break iOS
+
+Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
+[Upstream status: https://github.com/xiph/flac/pull/292]
+---
+ configure.ac      | 5 ++++-
+ src/libFLAC/cpu.c | 9 ++++-----
+ 2 files changed, 8 insertions(+), 6 deletions(-)
+
+diff --git a/configure.ac b/configure.ac
+index 4d7dc2e4..6f32fa45 100644
+--- a/configure.ac
+++ b/configure.ac
+@@ -69,7 +69,7 @@ AC_C_INLINE
+ AC_C_VARARRAYS
+ AC_C_TYPEOF
+ 
+-AC_CHECK_HEADERS([stdint.h inttypes.h byteswap.h sys/param.h sys/ioctl.h termios.h x86intrin.h cpuid.h])
+AC_CHECK_HEADERS([stdint.h inttypes.h byteswap.h sys/auxv.h sys/param.h sys/ioctl.h termios.h x86intrin.h cpuid.h])
+ 
+ XIPH_C_BSWAP32
+ XIPH_C_BSWAP16
+@@ -101,6 +101,9 @@ fi
+ # For the XMMS plugin.
+ AC_CHECK_TYPES(socklen_t, [], [])
+ 
+dnl check for getauxval in standard library
+AC_CHECK_FUNCS(getauxval)
+
+ dnl check for getopt in standard library
+ dnl AC_CHECK_FUNCS(getopt_long , , [LIBOBJS="$LIBOBJS getopt.o getopt1.o"] )
+ AC_CHECK_FUNCS(getopt_long, [], [])
+diff --git a/src/libFLAC/cpu.c b/src/libFLAC/cpu.c
+index 8b92f4c7..64c6acad 100644
+--- a/src/libFLAC/cpu.c
+++ b/src/libFLAC/cpu.c
+@@ -53,11 +53,9 @@
+ #define dfprintf(file, format, ...)
+ #endif
+ 
+-#if defined FLAC__CPU_PPC
+-#if defined(__linux__) || (defined(__FreeBSD__) && (__FreeBSD__ >= 12))
+#if defined(HAVE_SYS_AUXV_H)
+ #include <sys/auxv.h>
+ #endif
+-#endif
+ 
+ #if (defined FLAC__CPU_IA32 || defined FLAC__CPU_X86_64) && (defined FLAC__HAS_NASM || FLAC__HAS_X86INTRIN) && !defined FLAC__NO_ASM
+ 
+@@ -247,7 +245,7 @@ ppc_cpu_info (FLAC__CPUInfo *info)
+ #define PPC_FEATURE2_ARCH_2_07		0x80000000
+ #endif
+ 
+-#ifdef __linux__
+#if defined (__linux__) && defined(HAVE_GETAUXVAL)
+ 	if (getauxval(AT_HWCAP2) & PPC_FEATURE2_ARCH_3_00) {
+ 		info->ppc.arch_3_00 = true;
+ 	} else if (getauxval(AT_HWCAP2) & PPC_FEATURE2_ARCH_2_07) {
+@@ -267,7 +265,8 @@ ppc_cpu_info (FLAC__CPUInfo *info)
+ 	info->ppc.arch_2_07 = false;
+ 	info->ppc.arch_3_00 = false;
+ #else
+-#error Unsupported platform! Please add support for reading ppc hwcaps.
+	info->ppc.arch_2_07 = false;
+	info->ppc.arch_3_00 = false;
+ #endif
+ 
+ #else
+-- 
+2.34.1
+
@@ -1,36 +0,0 @@
-From 14a0713389fbfef59225d027ea466ebb478a8c6b Mon Sep 17 00:00:00 2001
-From: Peter Seiderer <ps.report@gmx.net>
-Date: Thu, 19 Sep 2019 21:18:04 +0200
-Subject: [PATCH] configure.ac: check for sys/auxv.h before defining FLAC__CPU_PPC
-
-Upstream: https://github.com/xiph/flac/pull/142
-Signed-off-by: Peter Seiderer <ps.report@gmx.net>
---
- configure.ac | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/configure.ac b/configure.ac
-index 0228a12..64cb3f2 100644
--- a/configure.ac
-+++ b/configure.ac
-@@ -144,7 +144,7 @@ case "$host_cpu" in
- 	powerpc64|powerpc64le)
- 		cpu_ppc64=true
- 		cpu_ppc=true
-		AC_DEFINE(FLAC__CPU_PPC)
-+		AC_CHECK_HEADER(sys/auxv.h, AC_DEFINE(FLAC__CPU_PPC))
- 		AH_TEMPLATE(FLAC__CPU_PPC, [define if building for PowerPC])
- 		AC_DEFINE(FLAC__CPU_PPC64)
- 		AH_TEMPLATE(FLAC__CPU_PPC64, [define if building for PowerPC64])
-@@ -152,7 +152,7 @@ case "$host_cpu" in
- 		;;
- 	powerpc|powerpcle)
- 		cpu_ppc=true
-		AC_DEFINE(FLAC__CPU_PPC)
-+		AC_CHECK_HEADER(sys/auxv.h, AC_DEFINE(FLAC__CPU_PPC))
- 		AH_TEMPLATE(FLAC__CPU_PPC, [define if building for PowerPC])
- 		asm_optimisation=$asm_opt
- 		;;
--
-2.23.0
-
@@ -1,10 +1,8 @@
-# From https://ftp.osuosl.org/pub/xiph/releases/flac/MD5SUMS
-md5 26703ed2858c1fc9ffc05136d13daa69  flac-1.3.3.tar.xz
 # From https://ftp.osuosl.org/pub/xiph/releases/flac/SHA1SUMS
-sha1 6ac2e8f1dd18c9b0214c4d81bd70cdc1e943cffe  flac-1.3.3.tar.xz
+sha1  99c28482a8b2d81deaf740639e4cb55658427420  flac-1.3.4.tar.xz
 # From http://downloads.xiph.org/releases/flac/SHA256SUMS.txt
-sha256 213e82bd716c9de6db2f98bcadbc4c24c7e2efe8c75939a1a84e28539c4e1748  flac-1.3.3.tar.xz
+sha256  8ff0607e75a322dd7cd6ec48f4f225471404ae2730d0ea945127b1355155e737  flac-1.3.4.tar.xz
 # Locally computed
-sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING.GPL
-sha256 5df07007198989c622f5d41de8d703e7bef3d0e79d62e24332ee739a452af62a  COPYING.LGPL
-sha256 fa27cb11f13f97b0c5f3ff363b1e2610c6efe87ed175779cb2a78e44eb19d34c  COPYING.Xiph
+sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING.GPL
+sha256  5df07007198989c622f5d41de8d703e7bef3d0e79d62e24332ee739a452af62a  COPYING.LGPL
+sha256  fa27cb11f13f97b0c5f3ff363b1e2610c6efe87ed175779cb2a78e44eb19d34c  COPYING.Xiph
@@ -4,7 +4,7 @@
 #
 ################################################################################

-FLAC_VERSION = 1.3.3
+FLAC_VERSION = 1.3.4
 FLAC_SITE = http://downloads.xiph.org/releases/flac
 FLAC_SOURCE = flac-$(FLAC_VERSION).tar.xz
 FLAC_INSTALL_STAGING = YES
@@ -19,7 +19,8 @@ FLAC_AUTORECONF = YES
 FLAC_CONF_OPTS = \
 	$(if $(BR2_INSTALL_LIBSTDCPP),--enable-cpplibs,--disable-cpplibs) \
 	--disable-xmms-plugin \
-	--disable-altivec
+	--disable-altivec \
+	--disable-stack-smash-protection

 ifeq ($(BR2_PACKAGE_LIBOGG),y)
 FLAC_CONF_OPTS += --with-ogg=$(STAGING_DIR)/usr
@@ -43,6 +43,11 @@ else
 FREERDP_CONF_OPTS += -DWITH_ALSA=OFF
 endif

+ifeq ($(BR2_PACKAGE_LIBEXECINFO),y)
+FREERDP_CONF_OPTS += -DCMAKE_EXE_LINKER_FLAGS=-lexecinfo
+FREERDP_DEPENDENCIES += libexecinfo
+endif
+
 ifeq ($(BR2_PACKAGE_LIBUSB),y)
 FREERDP_CONF_OPTS += -DCHANNEL_URBDRC=ON
 FREERDP_DEPENDENCIES += libusb
@@ -17,7 +17,9 @@ FRR_DEPENDENCIES = host-frr readline json-c libyang libnl \

 HOST_FRR_DEPENDENCIES = host-flex host-bison host-elfutils host-python3

-FRR_CONF_ENV = ac_cv_lib_cunit_CU_initialize_registry=no
+FRR_CONF_ENV = \
+	ac_cv_lib_cunit_CU_initialize_registry=no \
+	CFLAGS="$(TARGET_CFLAGS) -DFRR_XREF_NO_NOTE"

 FRR_CONF_OPTS = --with-clippy=$(HOST_DIR)/bin/clippy \
 	--sysconfdir=/etc/frr \
@@ -1,6 +1,6 @@
 # Locally calculated after checking pgp signature
-# https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.2.tar.xz.sig
-sha256  646e6c5a9a185faa4cea796d378a1ba8e1148dbb197ca6605f95986a25af2752  gnutls-3.7.2.tar.xz
+# https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.3.tar.xz.sig
+sha256  fc59c43bc31ab20a6977ff083029277a31935b8355ce387b634fa433f8f6c49a  gnutls-3.7.3.tar.xz
 # Locally calculated
 sha256  e79e9c8a0c85d735ff98185918ec94ed7d175efc377012787aebcf3b80f0d90b  doc/COPYING
 sha256  6095e9ffa777dd22839f7801aa845b31c9ed07f3d6bf8a26dc5d2dec8ccc0ef3  doc/COPYING.LESSER
@@ -5,7 +5,7 @@
 ################################################################################

 GNUTLS_VERSION_MAJOR = 3.7
-GNUTLS_VERSION = $(GNUTLS_VERSION_MAJOR).2
+GNUTLS_VERSION = $(GNUTLS_VERSION_MAJOR).3
 GNUTLS_SOURCE = gnutls-$(GNUTLS_VERSION).tar.xz
 GNUTLS_SITE = https://www.gnupg.org/ftp/gcrypt/gnutls/v$(GNUTLS_VERSION_MAJOR)
 GNUTLS_LICENSE = LGPL-2.1+ (core library)
@@ -1,3 +1,3 @@
 # Locally computed
-sha256  45f6604372df3f49293749cd7c0b42cb21c4fb666c66f8ed9765de004d1eae38  pjproject-2.11.1.tar.gz
+sha256  b3b94d9be4aba8f6d2d1cb164603e81b0a6ee17352f9e2ba5b58e325e610ca5a  pjproject-2.12.tar.gz
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
@@ -4,10 +4,10 @@
 #
 ################################################################################

-LIBPJSIP_VERSION = 2.11.1
+LIBPJSIP_VERSION = 2.12
 LIBPJSIP_SOURCE = pjproject-$(LIBPJSIP_VERSION).tar.gz
 LIBPJSIP_SITE = $(call github,pjsip,pjproject,$(LIBPJSIP_VERSION))
-# https://github.com/pjsip/pjproject/archive/2.11.1.tar.gz
+# https://github.com/pjsip/pjproject/archive/2.12.tar.gz

 LIBPJSIP_DEPENDENCIES = libsrtp
 LIBPJSIP_LICENSE = GPL-2.0+
@@ -1,4 +1,4 @@
-# Locally calculated after checking pgp signature
-sha256  c8d6681e38c56f172892c85ddc0852e1fd4b53b4209e7f4ebf17f7e2eae71d92  libxml2-2.9.12.tar.gz
+# From http://ftp.acc.umu.se/pub/gnome/sources/libxml2/2.9/libxml2-2.9.13.sha256sum
+sha256  276130602d12fe484ecc03447ee5e759d0465558fbc9d6bd144e3745306ebf0e  libxml2-2.9.13.tar.xz
 # License files, locally calculated
 sha256  c5c63674f8a83c4d2e385d96d1c670a03cb871ba2927755467017317878574bd  COPYING
@@ -4,8 +4,11 @@
 #
 ################################################################################

-LIBXML2_VERSION = 2.9.12
-LIBXML2_SITE = http://xmlsoft.org/sources
+LIBXML2_VERSION_MAJOR = 2.9
+LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).13
+LIBXML2_SOURCE = libxml2-$(LIBXML2_VERSION).tar.xz
+LIBXML2_SITE = \
+	http://ftp.gnome.org/pub/gnome/sources/libxml2/$(LIBXML2_VERSION_MAJOR)
 LIBXML2_INSTALL_STAGING = YES
 LIBXML2_LICENSE = MIT
 LIBXML2_LICENSE_FILES = COPYING
@@ -1,7 +1,6 @@
-# From https://downloads.mariadb.org/mariadb/10.3.30
-sha256  bd8735c65bdb7ebcd5d779fb9d3de3f2fcd319ad6482278d73dfe7301ad4ae1b  mariadb-10.3.30.tar.gz
-sha512  742c30b3ebc0b6d36b98d4e7a7fb511098142e72d8f42cbfa73a0bdea2059be17e790fbda4732329bbd99e4b50b13cf18e8122964a473e0b62170ab869eca8fc  mariadb-10.3.30.tar.gz
+# From https://dlm.mariadb.com/2117287/MariaDB/mariadb-10.3.34/source/sha512sums.txt
+sha512  46d4575ec1afb68510652a4bb31ca5ce83a2f5f61048a6e9c1487b0ba58f079465a8b72518d44043cd42c631b19ff50b5498584676ac6473705b138fe3300741  mariadb-10.3.34.tar.gz

 # Hash for license files
-sha256  a4665c1189fe31e0bbc27e9b55439df7dad6e99805407fe58d78da7aabe678f8  README.md
+sha256  084aa0007efac6dda6aafffb3f3ef8b66b105862dad7ee23f6a4b52813f84464  README.md
 sha256  240a15a1d0f34d3abca462cdb7e5fb89470967563f16b0e71169e51c1e74cf2b  COPYING
@@ -4,8 +4,8 @@
 #
 ################################################################################

-MARIADB_VERSION = 10.3.30
-MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source
+MARIADB_VERSION = 10.3.34
+MARIADB_SITE = https://dlm.mariadb.com/2117285/MariaDB/mariadb-$(MARIADB_VERSION)/source
 MARIADB_LICENSE = GPL-2.0 (server), GPL-2.0 with FLOSS exception (GPL client library), LGPL-2.0 (LGPL client library)
 # Tarball no longer contains LGPL license text
 # https://jira.mariadb.org/browse/MDEV-12297
@@ -1,4 +1,4 @@
-# From https://www.openssh.com/txt/release-8.8 (base64 encoded)
-sha256  4590890ea9bb9ace4f71ae331785a3a5823232435161960ed5fc86588f331fe9  openssh-8.8p1.tar.gz
+# From https://www.openssh.com/txt/release-8.9 (base64 encoded)
+sha256  fd497654b7ab1686dac672fb83dfb4ba4096e8b5ffcdaccd262380ae58bec5e7  openssh-8.9p1.tar.gz
 # Locally calculated
-sha256  432abf7480fb31473a6706627212913fc70032e3fb71b90fecb28ae26a2d741d  LICENCE
+sha256  d6807e99f3d159145c659060f57c3fa74e109faa39326dbfc38674cb550fd104  LICENCE
@@ -4,13 +4,13 @@
 #
 ################################################################################

-OPENSSH_VERSION_MAJOR = 8.8
+OPENSSH_VERSION_MAJOR = 8.9
 OPENSSH_VERSION_MINOR = p1
 OPENSSH_VERSION = $(OPENSSH_VERSION_MAJOR)$(OPENSSH_VERSION_MINOR)
 OPENSSH_CPE_ID_VERSION = $(OPENSSH_VERSION_MAJOR)
 OPENSSH_CPE_ID_UPDATE = $(OPENSSH_VERSION_MINOR)
 OPENSSH_SITE = http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable
-OPENSSH_LICENSE = BSD-4-Clause, BSD-3-Clause, BSD-2-Clause, Public Domain
+OPENSSH_LICENSE = BSD-3-Clause, BSD-2-Clause, Public Domain
 OPENSSH_LICENSE_FILES = LICENCE
 OPENSSH_CONF_ENV = \
 	LD="$(TARGET_CC)" \
@@ -7,6 +7,7 @@ config BR2_PACKAGE_PYTHON_TWISTED
 	select BR2_PACKAGE_PYTHON_HYPERLINK # runtime
 	select BR2_PACKAGE_PYTHON_PYHAMCREST # runtime
 	select BR2_PACKAGE_PYTHON_ZOPE_INTERFACE # runtime
+	select BR2_PACKAGE_PYTHON_TYPING_EXTENSIONS # runtime
 	help
 	  Twisted is an event-driven networking engine written in
 	  Python.
@@ -42,6 +42,10 @@ ifeq ($(BR2_PACKAGE_LIBEXECINFO),y)
 QT5WEBKIT_DEPENDENCIES += libexecinfo
 endif

+ifeq ($(BR2_TOOLCHAIN_USES_MUSL),y)
+QT5WEBKIT_CONF_OPTS += -DENABLE_SAMPLING_PROFILER=OFF
+endif
+
 QT5WEBKIT_CONF_OPTS += \
 	-DENABLE_TOOLS=OFF \
 	-DPORT=Qt \
@@ -1,4 +1,4 @@
 # Locally calculated after checking pgp signature
-# https://download.samba.org/pub/samba/stable/samba-4.15.4.tar.asc
-sha256  499065a589b7b9ffb8e3eb6efa8575985919a2999972afc469520a47322aec11  samba-4.15.4.tar.gz
+# https://download.samba.org/pub/samba/stable/samba-4.15.5.tar.asc
+sha256  69115e33831937ba5151be0247943147765aece658ba743f44741672ad68d17f  samba-4.15.5.tar.gz
 sha256  8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-SAMBA4_VERSION = 4.15.4
+SAMBA4_VERSION = 4.15.5
 SAMBA4_SITE = https://download.samba.org/pub/samba/stable
 SAMBA4_SOURCE = samba-$(SAMBA4_VERSION).tar.gz
 SAMBA4_INSTALL_STAGING = YES
@@ -1,4 +1,4 @@
 # Locally computed
-sha256  b40b4e341de6b65cdeacd4c816dea8fe5e3b385ee5e17af73fc69c00bd7c440b  vim-8.2.4301.tar.gz
+sha256  b0a5acbe83bbdd4b1412abd9dc2ae2e3593c6cff8ff11c551fda3e6e2a87ec81  vim-8.2.4450.tar.gz
 sha256  0bcab3b635dd39208c42b496568d1e8171dad247cf3da5bab3d750c9d5883499  LICENSE
 sha256  96970b67f9cb38b0e759946cff22562a3c4b11ce78f62f2117d5e7ecded9ab4d  README.txt
@@ -4,7 +4,7 @@
 #
 ################################################################################

-VIM_VERSION = 8.2.4301
+VIM_VERSION = 8.2.4450
 VIM_SITE = $(call github,vim,vim,v$(VIM_VERSION))
 VIM_DEPENDENCIES = ncurses $(TARGET_NLS_DEPENDENCIES)
 VIM_SUBDIR = src
@@ -34,18 +34,10 @@ if BR2_PACKAGE_WESTON
 choice
 	prompt "default compositor"

-config BR2_PACKAGE_WESTON_DEFAULT_FBDEV
-	bool "fbdev (deprecated)"
-	select BR2_PACKAGE_WESTON_FBDEV
-
 config BR2_PACKAGE_WESTON_DEFAULT_DRM
 	bool "drm"
-	depends on BR2_PACKAGE_MESA3D_OPENGL_EGL || BR2_PACKAGE_IMX_GPU_VIV_OUTPUT_WL
 	select BR2_PACKAGE_WESTON_DRM

-comment "drm backend needs mesa3d w/ EGL driver"
-	depends on !BR2_PACKAGE_MESA3D_OPENGL_EGL && !BR2_PACKAGE_IMX_GPU_VIV_OUTPUT_WL
-
 config BR2_PACKAGE_WESTON_DEFAULT_HEADLESS
 	bool "headless"
 	select BR2_PACKAGE_WESTON_HEADLESS
@@ -66,7 +58,6 @@ endchoice

 config BR2_PACKAGE_WESTON_DEFAULT_COMPOSITOR
 	string
-	default "fbdev"    if BR2_PACKAGE_WESTON_DEFAULT_FBDEV
 	default "drm"      if BR2_PACKAGE_WESTON_DEFAULT_DRM
 	default "headless" if BR2_PACKAGE_WESTON_DEFAULT_HEADLESS
 	default "wayland"  if BR2_PACKAGE_WESTON_DEFAULT_WAYLAND
@@ -74,14 +65,6 @@ config BR2_PACKAGE_WESTON_DEFAULT_COMPOSITOR

 config BR2_PACKAGE_WESTON_DRM
 	bool "DRM compositor"
-	depends on BR2_PACKAGE_MESA3D_OPENGL_EGL || BR2_PACKAGE_IMX_GPU_VIV_OUTPUT_WL
-
-# Uses libgbm from mesa3d
-comment "DRM compositor needs an OpenGL EGL backend provided by mesa3d"
-	depends on !BR2_PACKAGE_MESA3D_OPENGL_EGL && !BR2_PACKAGE_IMX_GPU_VIV_OUTPUT_WL
-
-config BR2_PACKAGE_WESTON_FBDEV
-	bool "fbdev compositor (deprecated)"

 # FreeRDP needs threads and !static, already the case for weston
 config BR2_PACKAGE_WESTON_RDP
@@ -85,12 +85,6 @@ else
 WESTON_CONF_OPTS += -Dbackend-rdp=false
 endif

-ifeq ($(BR2_PACKAGE_WESTON_FBDEV),y)
-WESTON_CONF_OPTS += -Ddeprecated-backend-fbdev=true
-else
-WESTON_CONF_OPTS += -Ddeprecated-backend-fbdev=false
-endif
-
 ifeq ($(BR2_PACKAGE_WESTON_DRM),y)
 WESTON_CONF_OPTS += -Dbackend-drm=true
 else
@@ -1,6 +1,6 @@
-# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-3.4.11.txt
-sha1  b656d8709b8b0b3d2a94665af6bec88495ad994c  wireshark-3.4.11.tar.xz
-sha256  a0e227bce2cc3a51ef3301891a0243231990b52a39b68a84a6e32f69c4e75279  wireshark-3.4.11.tar.xz
+# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-3.4.12.txt
+sha1  91ca69b0029e58b9c824266237ab392a62f0a248  wireshark-3.4.12.tar.xz
+sha256  881a13303e263b7dc7fe337534c8a541d4914552287879bed30bbe76c5bf68ca  wireshark-3.4.12.tar.xz

 # Locally calculated
 sha256  7cdbed2b697efaa45576a033f1ac0e73cd045644a91c79bbf41d4a7d81dac7bf  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-WIRESHARK_VERSION = 3.4.11
+WIRESHARK_VERSION = 3.4.12
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license
@@ -1,5 +1,5 @@
 # Locally computed:
-sha256  50db45f348f47e00c93dd244c24108220120cb3cc9d01434789229c32937c444  wolfssl-4.8.1-stable.tar.gz
+sha256  409b4646c5f54f642de0e9f3544c3b83de7238134f5b1ff93fb44527bf119d05  wolfssl-5.2.0.tar.gz

 # Hash for license files:
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
@@ -4,8 +4,8 @@
 #
 ################################################################################

-WOLFSSL_VERSION = 4.8.1-stable
-WOLFSSL_SITE = $(call github,wolfSSL,wolfssl,v$(WOLFSSL_VERSION))
+WOLFSSL_VERSION = 5.2.0
+WOLFSSL_SITE = $(call github,wolfSSL,wolfssl,v$(WOLFSSL_VERSION)-stable)
 WOLFSSL_INSTALL_STAGING = YES

 WOLFSSL_LICENSE = GPL-2.0+
@@ -1,36 +0,0 @@
-From 645c45f0334bb1d6e31b5927cece5e446f129cbb Mon Sep 17 00:00:00 2001
-From: Danilo Spinella <danyspin97@protonmail.com>
-Date: Sat, 7 Dec 2019 00:05:21 +0100
-Subject: [PATCH] Fix musl compilation by adding TEMP_FAILURE_RETRY
-
-Fetch from: https://github.com/flatpak/xdg-dbus-proxy/pull/13
-Upstream-Status: Accepted
-Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
-
---
- dbus-proxy.c | 9 +++++++++
- 1 file changed, 9 insertions(+)
-
-diff --git a/dbus-proxy.c b/dbus-proxy.c
-index 163df21..4b07931 100644
--- a/dbus-proxy.c
-+++ b/dbus-proxy.c
-@@ -30,6 +30,15 @@
- #include <errno.h>
- 
- #include "flatpak-proxy.h"
-+// Taken from glibc unistd.h
-+#ifndef TEMP_FAILURE_RETRY
-+# define TEMP_FAILURE_RETRY(expression) \
-+  (__extension__                                                              \
-+    ({ long int __result;                                                     \
-+       do __result = (long int) (expression);                                 \
-+       while (__result == -1L && errno == EINTR);                             \
-+       __result; }))
-+#endif
- 
- static const char *argv0;
- static GList *proxies;
-- 
-2.24.1
-
@@ -1,5 +1,5 @@
-# From https://github.com/flatpak/xdg-dbus-proxy/releases/tag/0.1.2
-sha256 1749d6f9f46dcc9edc87725641cf56cf91dcad1b01707891ea0850c1000c520f xdg-dbus-proxy-0.1.2.tar.xz
+# From https://github.com/flatpak/xdg-dbus-proxy/releases/tag/0.1.3
+sha256  03b5d28ca879253ddbbce31098909becca1495ea811a6377a492e28f16c09b9b  xdg-dbus-proxy-0.1.3.tar.xz

 # Hash for license files:
-sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING
+sha256  dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-XDG_DBUS_PROXY_VERSION = 0.1.2
+XDG_DBUS_PROXY_VERSION = 0.1.3
 XDG_DBUS_PROXY_SITE = https://github.com/flatpak/xdg-dbus-proxy/releases/download/$(XDG_DBUS_PROXY_VERSION)
 XDG_DBUS_PROXY_SOURCE = xdg-dbus-proxy-$(XDG_DBUS_PROXY_VERSION).tar.xz
 XDG_DBUS_PROXY_DEPENDENCIES = host-pkgconf libglib2
@@ -1,4 +1,4 @@
 # Locally calculated after checking pgp signature
-sha256  27f1a8b1c756e269fd5684e60802b545f0be9b36b8b5d6bdbc840c6b000dc51f  xterm-367.tgz
+sha256  32f888277b19e28ebc0a3112bff000607c07bed0679caa0beebb36f9cad484f5  xterm-371.tgz
 # Locally calculated
-sha256  dfb668cc977e24649500f3cc54de3e2b793928d210715a445ab1227930b07ba6  COPYING
+sha256  9521ef761474cd31ea406f56a751646a7b42a9287cdc6f2f8e52ed4c4d2a73e7  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-XTERM_VERSION = 367
+XTERM_VERSION = 371
 XTERM_SOURCE = xterm-$(XTERM_VERSION).tgz
 XTERM_SITE = http://invisible-mirror.net/archives/xterm
 XTERM_DEPENDENCIES = ncurses xlib_libXaw host-pkgconf
@@ -5,7 +5,7 @@
 ################################################################################

 # Buildroot version to use
-RELEASE='2021.11.1'
+RELEASE='2021.11.2'

 ### Change here for more memory/cores ###
 VM_MEMORY=2048
@@ -2,7 +2,7 @@ import yaml

 with open("/tmp/data.yml", "rb") as f:
    serialized = f.read()
-data = yaml.load(serialized)
+data = yaml.safe_load(serialized)
 print(data)
 assert(data["name"] == "python-pyyaml")
 assert(data["versions"] == ["1", "2"])
Author	SHA1	Message	Date
Peter Korsgaard	5b6e2ee8b7	Update for 2022.02-rc3 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 22:38:26 +01:00
Fabrice Fontaine	7af7acabe0	package/dbus: bump to version 1.12.22 https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.12.22/NEWS Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 22:18:33 +01:00
Peter Korsgaard	0c4d496bf1	docs/website: update for 2021.02.10 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 22:17:20 +01:00
Peter Korsgaard	526da6145f	Update for 2021.02.10 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit `f1d3b87d3d`) [Peter: drop Makefile/Vagrantfile change] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 22:14:00 +01:00
Peter Korsgaard	746d00ef9f	docs/website: update for 2021.11.2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 22:11:49 +01:00
Peter Korsgaard	67b160c3e3	Update for 2021.11.2 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit `eeb8c004da`) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 22:11:17 +01:00
Fabrice Fontaine	9597d5ec8e	package/openssh: security bump to version 8.9p1 Security Near Miss ================== * sshd(8): fix an integer overflow in the user authentication path that, in conjunction with other logic errors, could have yielded unauthenticated access under difficult to exploit conditions. This situation is not exploitable because of independent checks in the privilege separation monitor. Privilege separation has been enabled by default in since openssh-3.2.2 (released in 2002) and has been mandatory since openssh-7.5 (released in 2017). Moreover, portable OpenSSH has used toolchain features available in most modern compilers to abort on signed integer overflow since openssh-6.5 (released in 2014). Update license (md5crypt removed, bcrypt relicensed to BSD-3-Clause: https://github.com/openssh/openssh-portable/commit/a5ab4882348d26addc9830a44e053238dfa2cb58 https://github.com/openssh/openssh-portable/commit/158bf854e2a22cf09064305f4a4e442670562685 https://github.com/openssh/openssh-portable/commit/c0459588b8d00b73e506c6095958ecfe62a4a7ba) https://www.openssh.com/txt/release-8.9 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:55:20 +01:00
Francois Perrad	212b020bb4	package/gnutls: security bump to version 3.7.3 see https://www.gnutls.org/security-new.html#GNUTLS-SA-2022-01-17 Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:52:49 +01:00
Fabrice Fontaine	28c9cb5ff3	package/vim: security bump to version 8.2.4450 Fix CVE-2022-0554: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:52:18 +01:00
Bernd Kuhls	266318937a	package/samba4: security bump version to 4.15.5 Release notes: https://www.samba.org/samba/history/samba-4.15.5.html Fixes CVE-2021-44141, CVE-2021-44142 & CVE-2022-0336. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:51:53 +01:00
Fabrice Fontaine	e7a9a1bce4	package/mariadb: security bump to version 10.3.34 Fix CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668, CVE-2021-46663, CVE-2022-24052, CVE-2022-24051, CVE-2022-24050, CVE-2022-24048, CVE-2021-46659, CVE-2021-35604, CVE-2021-46667, CVE-2021-46662, CVE-2021-2372, CVE-2021-2389 and CVE-2021-46658 Update hash of README.md (changes not related to license: https://github.com/MariaDB/server/commit/773a07b65517327add6348c045cee14bdf489fe0) https://mariadb.com/kb/en/mariadb-10334-release-notes/ https://mariadb.com/kb/en/mariadb-10333-release-notes/ https://mariadb.com/kb/en/mariadb-10332-release-notes/ https://mariadb.com/kb/en/mariadb-10331-release-notes/ Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:48:32 +01:00
Fabrice Fontaine	5ed26bb378	package/libpjsip: security bump to version 2.12 Fix the following security issues (i.e. CVE-2021-37706, CVE-2021-41141, CVE-2021-43804, CVE-2021-43845, CVE-2022-21722 and CVE-2022-21723): - Potential integer underflow upon receiving STUN message (GHSA-2qpg-f6wf-w984) - Use after free of dialog set (GHSA-ffff-m5fm-qm62) - Missing unreleased of locks in failure cases (GHSA-8fmx-hqw7-6gmc) - Potential out-of-bounds read when parsing RTCP BYE message (GHSA-3qx3-cg72-wrh9) - Prevent OOB read for RTCP XR block (GHSA-r374-qrwv-86hh) - Potential buffer overflow in pjsua_player_create(), pjsua_recorder_create(), pjmedia_wav_player_create(), and pjsua_call_dump() (GHSA-qcvw-h34v-c7r9) - Potential out-of-bound read during RTP/RTCP parsing (GHSA-m66q-q64c-hv36) - Prevent OOB read in multipart parsing (GHSA-7fw8-54cv-r7pm) - Use after free of dialog set (GHSA-ffff-m5fm-qm62) https://github.com/pjsip/pjproject/releases/tag/2.12 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:45:24 +01:00
Fabrice Fontaine	4b67038473	package/libxml2: security bump to version 2.9.13 Fix the following security issues: - [CVE-2022-23308] Use-after-free of ID and IDREF attributes - Use-after-free in xmlXIncludeCopyRange - Fix Null-deref-in-xmlSchemaGetComponentTargetNs - Fix memory leak in xmlXPathCompNodeTest - Fix null pointer deref in xmlStringGetNodeList - Fix several memory leaks found by Coverity https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.13 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:43:53 +01:00
Fabrice Fontaine	96cb2d5c0c	package/freerdp: fix build with libexecinfo Fix the following build failure raised on uclibc and musl since the addition of libexecinfo package in commit `eea8ba446c`: /home/buildroot/autobuild/instance-0/output-1/host/lib/gcc/riscv64-buildroot-linux-uclibc/10.3.0/../../../../riscv64-buildroot-linux-uclibc/bin/ld: ../../libwinpr/libwinpr2.so.2.5.0: undefined reference to `backtrace_symbols_fd' Fixes: - http://autobuild.buildroot.org/results/095c33098a6e59ff664080e03baf1a3c92b4265f Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:43:17 +01:00
Fabrice Fontaine	14e0c4de71	package/wolfssl: security bump to version 5.2.0 Fix CVE-2021-44718, CVE-2022-23408, CVE-2022-25638 and CVE-2022-25640 https://www.wolfssl.com/docs/security-vulnerabilities https://github.com/wolfSSL/wolfssl/blob/v5.2.0-stable/ChangeLog.md Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:41:42 +01:00
Fabrice Fontaine	55f1d0a359	package/exempi: security bump to version 2.6.1 Extract from NEWS: - Changes in v2021.08 - Security Fixes - Changes in v2021.07 - Security Fixes https://gitlab.freedesktop.org/libopenraw/exempi/-/blob/2.6.1/NEWS Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:39:01 +01:00
Fabrice Fontaine	2de5cd8542	package/xterm: security bump to version 371 Fix CVE-2022-24130: xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text. Update hash of COPYING (update in year) https://invisible-island.net/xterm/xterm.log.html#xterm_371 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:36:50 +01:00
Fabrice Fontaine	db0f8006c1	package/wireshark: security bump to version 3.4.12 Fix CVE-2021-4190, CVE-2022-0581, CVE-2022-0582, CVE-2022-0583, CVE-2022-0585 and CVE-2022-0586 https://www.wireshark.org/security/wnpa-sec-2021-22.html https://www.wireshark.org/security/wnpa-sec-2022-01.html https://www.wireshark.org/security/wnpa-sec-2022-02.html https://www.wireshark.org/security/wnpa-sec-2022-03.html https://www.wireshark.org/security/wnpa-sec-2022-04.html https://www.wireshark.org/security/wnpa-sec-2022-05.html Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-28 19:36:37 +01:00
James Hilliard	a14268d138	package/bpftool: bump to version 6.7.0 Fixes: http://autobuild.buildroot.net/results/8bf/8bfc2abe3ab7a0b53aa717c800a4c7a3c964f426 Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>	2022-02-23 21:31:33 +01:00
Fabrice Fontaine	a7062df327	package/frr: set FRR_XREF_NO_NOTE Set FRR_XREF_NO_NOTE to avoid the following build failures with microblazeel, nds32 and xtensa raised since bump to version 8.1 in commit `ca2753fd47`: _clippy.ELFAccessError: virtual address (538157256) not found in program headers [...] /tmp/ccFGv94v.s:13: Error: can't resolve `__start_xref_array' {UND section} - `L0' {.note.FRR section} /tmp/ccFGv94v.s:14: Error: can't resolve `__stop_xref_array' {UND section} - `L0' {.note.FRR section} Here is an extract of https://github.com/FRRouting/frr/blob/7347a4859d4b984cea0aef769a16622d3f02e44f/lib/xref.h: "the following blurb emits an ELF note indicating start and end of the xref array in the binary. This is technically the "correct" entry point for external tools reading xrefs out of an ELF shared library or executable. ... FRR itself does not need this note to operate correctly, so if you have some build issue with it just add -DFRR_XREF_NO_NOTE to your build flags to disable it." In other words, this is only possibly needed for another package that wants to extracts the xrefs. We currently don't have anything that depends on frr in-tree, and it's not even installed in staging, so it's hard to check, but it seems pretty unlikely that this is really needed. Fixes: - http://autobuild.buildroot.org/results/3cdb50f5e5a1b3f37a6edcd4276fcbf015e28828 - http://autobuild.buildroot.org/results/a3cc0b5090a1faa2bca9c8dfe0fec9b6a918ba4d - http://autobuild.buildroot.org/results/694cc65478a82ec93d2074252892036855cdc49d Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>	2022-02-23 21:20:29 +01:00
Fabrice Fontaine	6fc5c8e92c	package/bluez5_utils: fix build with glibc < 2.25 Fix the following build failure with glibc < 2.25 raised since bump to version 5.63 in commit `d4c6cf4b1f`: plugins/autopair.c:20:24: fatal error: sys/random.h: No such file or directory #include <sys/random.h> ^ Fixes: - http://autobuild.buildroot.org/results/6b8870d12e0804d6154230a7322c49416c1dc0e2 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>	2022-02-23 21:12:40 +01:00
Fabrice Fontaine	1636f604bd	package/qt5/qt5webkit: disable sampling profiler on musl Disable sampling profiler on musl to avoid the following build falure raised since bump to version 5.212.0-alpha4 in commit `df0b0fe691`: /home/buildroot/autobuild/instance-0/output-1/build/qt5webkit-5.212.0-alpha4/Source/JavaScriptCore/heap/MachineStackMarker.cpp:686:2: error: #error Need a way to get the frame pointer for another thread on this platform 686 \| #error Need a way to get the frame pointer for another thread on this platform \| ^~~~~ Fixes: - http://autobuild.buildroot.org/results/87f52db7f8ebefa4c1ae3dd70d4a7a460f9aca35 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>	2022-02-23 21:09:59 +01:00
Neal Frager	14b9a100ef	configs/zynqmp_zcu10x: fix U-Boot dts config Add a U-Boot config fragment to set the correct control device tree file for each board, rather than using the default (zcu100). Signed-off-by: Neal Frager <neal.frager@xilinx.com> Tested-by: Peter Korsgaard <peter@korsgaard.com> [Peter: reword commit message, rename fragment files] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-23 21:07:20 +01:00
Fabrice Fontaine	7202174257	package/weston: drop fbdev fbdev raises the following build failure since bump to version 10.0.0 in commit `f67a6e9b7a` and https://gitlab.freedesktop.org/wayland/weston/-/commit/6338dbd5816689b2f08f48b359a972e16ff038d8: ../output-1/build/weston-10.0.0/meson.build:133:7: ERROR: Tried to access unknown option 'backend-fbdev'. Drop fbdev to avoid this build failure as upstream is reluctant to properly fix this issue by renaming the fbdev option in stable release: https://gitlab.freedesktop.org/wayland/weston/-/merge_requests/791 Fixes: - http://autobuild.buildroot.org/results/e669a6237c19783c627169c819d7372e20daaf54 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>	2022-02-23 20:59:59 +01:00
Fabrice Fontaine	833f79fdef	package/weston: drop GBM dependency from DRM option upstream advocated that DRM backend can be built without GBM: https://gitlab.freedesktop.org/wayland/weston/-/merge_requests/791 so drop dependencies on BR2_PACKAGE_MESA3D_OPENGL_EGL \|\| BR2_PACKAGE_IMX_GPU_VIV_OUTPUT_WL to allow DRM to be the default backend when fbdev will be removed in the follow-up patch Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>	2022-02-23 20:59:05 +01:00
Peter Korsgaard	d3910057c6	Makefile: unexport 'DEVICE_TREE' environment variable U-Boot looks for the environment variable DEVICE_TREE and uses its value if set instead of the CONFIG_DEFAULT_DEVICE_TREE configuration option since v2021.01, more specifically commit c0f1ebe9c1b9745e (binman: Allow selecting default FIT configuration) - So unexport it like we do for other "troublesome" environment variables to ensure consistent behaviour. Reported-by: Neal Frager <nealf@xilinx.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>	2022-02-23 15:03:18 +01:00
Adrian Perez de Castro	1a0d90d8ab	package/xdg-dbus-proxy: bump to version 0.1.3 This is a minor maintenance release. The release incorporates "0001-Fix-musl-compilation-by-adding-TEMP_FAILURE_RETRY.patch", which can now be removed. Release notes: https://github.com/flatpak/xdg-dbus-proxy/releases/tag/0.1.3 Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-22 11:36:42 +01:00
Fabrice Fontaine	4c7e250c69	package/flac: security bump to version 1.3.4 This release mostly fixes (security related) bugs including: - Fix 12 decoder bugs found by oss-fuzz, including CVE-2020-0499 - Fix encoder bug CVE-2021-0561 Also: - Replace first patch which was reverted by https://github.com/xiph/flac/commit/4fbb6d4f2ecf2a96c17ea9880108409f852c08a9 - Disable stack protection (enabled by default since https://github.com/xiph/flac/commit/f706f2832270a0b7851cdffe62ad37acda9423fe) - Drop md5 which is not provided anymore - Update indentation in hash file (two spaces) https://github.com/xiph/flac/releases/tag/1.3.4 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-22 11:10:28 +01:00
Romain Naour	b43ba475cf	package/python-twisted: add missing python typing extensions runtime dependency # python sample_python_txtorcon.py Traceback (most recent call last): File "/root/sample_python_txtorcon.py", line 1, in <module> import txtorcon # noqa File "/usr/lib/python3.10/site-packages/txtorcon/__init__.py", line 11, in <module> File "/usr/lib/python3.10/site-packages/txtorcon/router.py", line 10, in <module> File "/usr/lib/python3.10/site-packages/txtorcon/util.py", line 17, in <module> File "/usr/lib/python3.10/site-packages/twisted/internet/defer.py", line 42, in <module> ModuleNotFoundError: No module named 'typing_extensions' python typing_extensions is required since python-twisted 22.1.0 [1] Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/2116202537 [1] https://github.com/twisted/twisted/commit/6e768da0a10c8ab42a57a1c0fa505ebe2d8bfb30 Signed-off-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-22 11:10:03 +01:00
Peter Korsgaard	a83177aac6	support/testing/../sample_python_pyyaml_dec.py: unbreak after move to pyaml 6.0 Fixes https://gitlab.com/buildroot.org/buildroot/-/jobs/2088684091 python sample_python_pyyaml_dec.py Traceback (most recent call last): File "/root/sample_python_pyyaml_dec.py", line 5, in <module> data = yaml.load(serialized) TypeError: load() missing 1 required positional argument: 'Loader' yaml.load() requires a loader argument since the move to version 6.0: https://github.com/yaml/pyyaml/pull/561 The test does not need the extra functionality of load(), so instead move to the recommended safe_load(). Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Tested-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2022-02-21 21:56:34 +01:00
				`@@ -0,0 +1 @@`
				`CONFIG_DEFAULT_DEVICE_TREE="zynqmp-zcu102-rev1.0"`