Update for 2025.02

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libopenssl do not build in parallel
2025-03-17 18:54:20 +01:00 · 2025-03-17 18:32:11 +01:00 · 2025-03-17 18:23:29 +01:00 · 2025-03-16 20:44:34 +01:00 · 2025-03-14 20:58:04 +01:00 · 2025-03-14 19:15:42 +01:00
16 changed files with 305 additions and 214 deletions
@@ -1,3 +1,10 @@
+2025.02, released March 17th, 2025
+
+	Various fixes.
+
+	Updated/fixed packages: expat, fio, libopenssl, php, rauc,
+	rt-tests
+
 2025.02-rc2, released March 13th 28th, 2025

 	Fixes all over the tree.
@@ -92,9 +92,9 @@ all:
 .PHONY: all

 # Set and export the version string
-export BR2_VERSION := 2025.02-rc2
+export BR2_VERSION := 2025.02
 # Actual time the release is cut (for reproducible builds)
-BR2_VERSION_EPOCH = 1741860000
+BR2_VERSION_EPOCH = 1742234000

 # Save running make version since it's clobbered by the make package
 RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -8,40 +8,40 @@
    <div class="panel-heading">Download</div>
    <div class="panel-body">

-      <h3 style="text-align: center;">Latest long term support release: <b>2024.02.11</b></h3>
+      <h3 style="text-align: center;">Latest stable / long term support release: <b>2025.02</b></h3>

      <div class="row mt centered">
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.02.11.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2025.02.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.02.11.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2025.02.tar.gz"><img src="images/zip.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>
-	  <h3><a href="/downloads/buildroot-2024.02.11.tar.gz">buildroot-2024.02.11.tar.gz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.02.11.tar.gz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2025.02.tar.gz">buildroot-2025.02.tar.gz</a></h3>
+	  <p><a href="/downloads/buildroot-2025.02.tar.gz.sign">PGP signature</a></p>
 	</div>
 	<div class="col-sm-6">
 	  <div class="flip-container center-block" ontouchstart="this.classList.toggle('hover');">
 	    <div class="flipper">
 	      <div class="front">
-		<a href="/downloads/buildroot-2024.02.11.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2025.02.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	      <div class="back">
-		<a href="/downloads/buildroot-2024.02.11.tar.xz"><img src="images/package.png" width="180" alt=""></a>
+		<a href="/downloads/buildroot-2025.02.tar.xz"><img src="images/package.png" width="180" alt=""></a>
 	      </div>
 	    </div>
 	  </div>

-	  <h3><a href="/downloads/buildroot-2024.02.11.tar.xz">buildroot-2024.02.11.tar.xz</a></h3>
-	  <p><a href="/downloads/buildroot-2024.02.11.tar.xz.sign">PGP signature</a></p>
+	  <h3><a href="/downloads/buildroot-2025.02.tar.xz">buildroot-2025.02.tar.xz</a></h3>
+	  <p><a href="/downloads/buildroot-2025.02.tar.xz.sign">PGP signature</a></p>
 	</div>
      </div>
-
+<!--
      <h3 style="text-align: center;">Latest stable release: <b>2024.11.2</b></h3>

      <div class="row mt centered">
@@ -109,7 +109,7 @@
 	  <p><a href="/downloads/buildroot-2025.02-rc2.tar.xz.sign">PGP signature</a></p>
 	</div>
      </div>
-
+-->
      This and earlier releases (and their PGP signatures) can always be downloaded from
      <a href="/downloads/">http://buildroot.net/downloads/</a>.
    </div>
@@ -137,7 +137,7 @@ config BR2_LINUX_KERNEL_CUSTOM_REPO_GIT_SUBMODULES

 config BR2_LINUX_KERNEL_VERSION
 	string
-	default "6.12.18" if BR2_LINUX_KERNEL_LATEST_VERSION
+	default "6.12.19" if BR2_LINUX_KERNEL_LATEST_VERSION
 	default "5.10.162-cip24" if BR2_LINUX_KERNEL_LATEST_CIP_VERSION
 	default "5.10.162-cip24-rt10" if BR2_LINUX_KERNEL_LATEST_CIP_RT_VERSION
 	default BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE \
@@ -1,11 +1,11 @@
 # From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  beb902a5f69d9e57710112203db38111dad6d30556ea8ce389284c8077fe944d  linux-6.12.18.tar.xz
-sha256  af483828e67f1b9918bc438d789cdbb06c13a4d43a41d5f35d44c9a6d620318f  linux-6.6.81.tar.xz
-sha256  9416b2c2d448ec7f54bb0ce5713fb34c32dae4a4edf1abd8cf7a8995cbac66fd  linux-6.1.130.tar.xz
+sha256  d73bf057bec04434b169d1b61641936f7d0c97ceb923a281f32e35dd4dcc6531  linux-6.12.19.tar.xz
+sha256  894bbbe63b7484a0bc576a1e11a8dbc090fbd476d6424431bdc8435e03c2c208  linux-6.6.83.tar.xz
+sha256  44caf510603b4cbbe78ef828620099d200536d666e909ddb73bb2938c7de5b16  linux-6.1.131.tar.xz
 # From https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc
-sha256  efe9f7eb5ea4d26cec6290689343e1804eb3b4a88ff5a60497a696fc08157c42  linux-5.15.178.tar.xz
-sha256  9597c4fee2f1ce452acfec516f4325ad342155872052fd5f0d9ce2ddcc26ebe5  linux-5.10.234.tar.xz
-sha256  6cc73cf2a7f50580f7d8c7e99d2f2e8ada8b7d2f4e76f5896f0daf691cc2a456  linux-5.4.290.tar.xz
+sha256  9319a47b1e9b5d344ff6015431856d0c9640e4faedc527c87f9129061a27136f  linux-5.15.179.tar.xz
+sha256  953be3931101a94a93a644c1283ca41a7e567447ca87d3069ed4dd712dc1f1cc  linux-5.10.235.tar.xz
+sha256  b3ad64a4476a7c5450b92eab9a888b84ecb64dc613fcb0128f653f58e958ef6e  linux-5.4.291.tar.xz
 # Locally computed
 sha256  fb0edc3c18e47d2b6974cb0880a0afb5c3fa08f50ee87dfdf24349405ea5f8ae  linux-cip-5.10.162-cip24.tar.gz
 sha256  b5539243f187e3d478d76d44ae13aab83952c94b885ad889df6fa9997e16a441  linux-cip-5.10.162-cip24-rt10.tar.gz
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  a695629dae047055b37d50a0ff4776d1d45d0a4c842cf4ccee158441f55ff7ee  expat-2.6.4.tar.xz
+sha256  25df13dd2819e85fb27a1ce0431772b7047d72af81ae78dc26b4c6e0805f48d1  expat-2.7.0.tar.xz
 sha256  122f2c27000472a201d337b9b31f7eb2b52d091b02857061a8880371612d9534  COPYING
@@ -4,7 +4,7 @@
 #
 ################################################################################

-EXPAT_VERSION = 2.6.4
+EXPAT_VERSION = 2.7.0
 EXPAT_SITE = https://github.com/libexpat/libexpat/releases/download/R_$(subst .,_,$(EXPAT_VERSION))
 EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
 EXPAT_INSTALL_STAGING = YES
@@ -16,7 +16,10 @@ FIO_DEPENDENCIES += libaio
 endif

 ifeq ($(BR2_PACKAGE_LIBNFS),y)
-FIO_DEPENDENCIES += libnfs
+FIO_OPTS += --enable-libnfs
+FIO_DEPENDENCIES += host-pkgconf libnfs
+else
+FIO_OPTS += --disable-libnfs
 endif

 ifeq ($(BR2_PACKAGE_LIBISCSI),y)
@@ -132,24 +132,26 @@ endef
 LIBOPENSSL_POST_CONFIGURE_HOOKS += LIBOPENSSL_FIXUP_STATIC_MAKEFILE
 endif

+# Parallel build broken: https://github.com/openssl/openssl/issues/27074
 define HOST_LIBOPENSSL_BUILD_CMDS
-	$(HOST_MAKE_ENV) $(MAKE) -C $(@D)
+	$(HOST_MAKE_ENV) $(MAKE1) -C $(@D)
 endef

+# Parallel build broken: https://github.com/openssl/openssl/issues/27074
 define LIBOPENSSL_BUILD_CMDS
-	$(TARGET_MAKE_ENV) $(MAKE) -C $(@D)
+	$(TARGET_MAKE_ENV) $(MAKE1) -C $(@D)
 endef

 define LIBOPENSSL_INSTALL_STAGING_CMDS
-	$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR=$(STAGING_DIR) install
+	$(TARGET_MAKE_ENV) $(MAKE1) -C $(@D) DESTDIR=$(STAGING_DIR) install
 endef

 define HOST_LIBOPENSSL_INSTALL_CMDS
-	$(HOST_MAKE_ENV) $(MAKE) -C $(@D) install
+	$(HOST_MAKE_ENV) $(MAKE1) -C $(@D) install
 endef

 define LIBOPENSSL_INSTALL_TARGET_CMDS
-	$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR=$(TARGET_DIR) install
+	$(TARGET_MAKE_ENV) $(MAKE1) -C $(@D) DESTDIR=$(TARGET_DIR) install
 	$(RM) -rf $(TARGET_DIR)/usr/lib/ssl
 	$(RM) -f $(TARGET_DIR)/usr/bin/c_rehash
 endef
@@ -428,12 +428,12 @@ endchoice

 config BR2_DEFAULT_KERNEL_HEADERS
 	string
-	default "5.4.290"	if BR2_KERNEL_HEADERS_5_4
-	default "5.10.234"	if BR2_KERNEL_HEADERS_5_10
-	default "5.15.178"	if BR2_KERNEL_HEADERS_5_15
-	default "6.1.130"	if BR2_KERNEL_HEADERS_6_1
-	default "6.6.81"	if BR2_KERNEL_HEADERS_6_6
-	default "6.12.18"	if BR2_KERNEL_HEADERS_6_12
+	default "5.4.291"	if BR2_KERNEL_HEADERS_5_4
+	default "5.10.235"	if BR2_KERNEL_HEADERS_5_10
+	default "5.15.179"	if BR2_KERNEL_HEADERS_5_15
+	default "6.1.131"	if BR2_KERNEL_HEADERS_6_1
+	default "6.6.83"	if BR2_KERNEL_HEADERS_6_6
+	default "6.12.19"	if BR2_KERNEL_HEADERS_6_12
 	default BR2_DEFAULT_KERNEL_VERSION if BR2_KERNEL_HEADERS_VERSION
 	default "custom"	if BR2_KERNEL_HEADERS_CUSTOM_TARBALL
 	default BR2_KERNEL_HEADERS_CUSTOM_REPO_VERSION \
@@ -1,5 +1,5 @@
 # From https://www.php.net/downloads.php
-sha256  6158ee678e698395da13d72c7679a406d2b7554323432f14d37b60ed87d8ccfb  php-8.3.17.tar.xz
+sha256  976e4077dd25bec96b5dfe8938052d243bbd838f95368a204896eff12756545f  php-8.3.19.tar.xz

 # License file
 sha256  b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a  LICENSE
@@ -4,7 +4,7 @@
 #
 ################################################################################

-PHP_VERSION = 8.3.17
+PHP_VERSION = 8.3.19
 PHP_SITE = https://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES
@@ -5,8 +5,9 @@ config BR2_PACKAGE_RAUC
 	depends on BR2_USE_WCHAR # glib2
 	select BR2_PACKAGE_LIBGLIB2
 	select BR2_PACKAGE_OPENSSL
+	select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL # uses X509_PURPOSE_get_by_id
 	# uses ENGINE_* API
-	select BR2_PACKAGE_LIBOPENSSL_ENGINES if BR2_PACKAGE_LIBOPENSSL
+	select BR2_PACKAGE_LIBOPENSSL_ENGINES
 	select BR2_PACKAGE_SQUASHFS # run-time dependency
 	select BR2_PACKAGE_UBOOT_TOOLS if BR2_TARGET_UBOOT # run-time dependency
 	select BR2_PACKAGE_UBOOT_TOOLS_FWPRINTENV if BR2_TARGET_UBOOT
@@ -0,0 +1,57 @@
+From 280e198c39d1b17d0491d7c4e7afda97ae6c8e6f Mon Sep 17 00:00:00 2001
+From: Yaakov Selkowitz <yselkowi@redhat.com>
+Date: Wed, 29 Jan 2025 16:46:11 -0500
+Subject: [PATCH] Fix rt-tests build with glibc-2.41
+
+The sched_*attr APIs were added to glibc
+https://sourceware.org/git/?p=glibc.git;a=commit;h=21571ca0d70302909cf72707b2a7736cf12190a0
+
+This fixes the build conflict in rt-tests with glibc-2.4
+
+Signed-off-by: Yaakov Selkowitz <yselkowi@redhat.com>
+Signed-off-by: John Kacur <jkacur@redhat.com>
+Upstream: https://web.git.kernel.org/pub/scm/utils/rt-tests/rt-tests.git/commit/?id=d3a23a0cc76789c3083df3bad78982cd49bc4c5e
+Signed-off-by: Brandon Lumbra <brandon.lumbra@sense.com>
+---
+ src/include/rt-sched.h | 2 ++
+ src/lib/rt-sched.c     | 2 ++
+ 2 files changed, 4 insertions(+)
+
+diff --git a/src/include/rt-sched.h b/src/include/rt-sched.h
+index 80171c76e0ee..dfd7f45f51cc 100644
+--- a/src/include/rt-sched.h
+++ b/src/include/rt-sched.h
+@@ -42,6 +42,7 @@
+ #define __NR_sched_getattr		275
+ #endif
+ 
+#if ! __GLIBC_PREREQ(2, 41)
+ struct sched_attr {
+ 	uint32_t size;
+ 	uint32_t sched_policy;
+@@ -67,5 +68,6 @@ int sched_getattr(pid_t pid,
+ 		  struct sched_attr *attr,
+ 		  unsigned int size,
+ 		  unsigned int flags);
+#endif
+ 
+ #endif /* __RT_SCHED_H__ */
+diff --git a/src/lib/rt-sched.c b/src/lib/rt-sched.c
+index 8023bc70c473..2500abde26e4 100644
+--- a/src/lib/rt-sched.c
+++ b/src/lib/rt-sched.c
+@@ -14,6 +14,7 @@
+ 
+ #include "rt-sched.h"
+ 
+#if ! __GLIBC_PREREQ(2, 41)
+ int sched_setattr(pid_t pid,
+ 		  const struct sched_attr *attr,
+ 		  unsigned int flags)
+@@ -28,3 +29,4 @@ int sched_getattr(pid_t pid,
+ {
+ 	return syscall(__NR_sched_getattr, pid, attr, size, flags);
+ }
+#endif
+-- 
+2.47.1
@@ -5,7 +5,7 @@
 ################################################################################

 # Buildroot version to use
-RELEASE='2024.11.2'
+RELEASE='2025.02'

 ### Change here for more memory/cores ###
 VM_MEMORY=2048
Author	SHA1	Message	Date
Peter Korsgaard	aa2d7ca53f	Update for 2025.02 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2025-03-17 18:54:20 +01:00
Yann E. MORIN	27ab880ebb	package/libopenssl do not build in parallel With highly parallel builds on a heavily loaded machine, the libopenssl build often (about half of the time) fails with spurious missing rules in its Makefile: >>> host-libopenssl 3.4.1 Installing to host directory [...] /usr/bin/make -C [...]/build/host-libopenssl-3.4.1 install "/usr/bin/make" depend && "/usr/bin/make" _build_libs "/usr/bin/make" depend && "/usr/bin/make" _build_modules "/usr/bin/make" depend && "/usr/bin/make" _build_programs [...] make[3]: * No rule to make target '_build_modules'. Stop. make[2]: * [Makefile:3159: build_modules] Error 2 make[2]: * Waiting for unfinished jobs.... make[3]: Nothing to be done for '_build_programs'. make[3]: Nothing to be done for '_build_libs'. make[1]: * [package/pkg-generic.mk:283: [...]/build/host-libopenssl-3.4.1/.stamp_host_installed] Error 2 make[1]: * Waiting for unfinished jobs.... [...] make: * [Makefile:23: _all] Error 2 Ideally, we'd like to fix the issue. However, the Nakefile is generated by the Configure script, written in perl, from the template in Configurations/unix-Makefile.tmpl, which also uses some kind of special (perl-related, probably) templating language. That makes it pretty difficult to see what is going on, though, and nigh impossible to fix without a deep understanding of the openssl buildsystem. So, we can only disable parallel builds until the issue is fixed upstream [0]. Add a comment to both build commands (host and target) to reference the upstream issue report. Note that the issue has mostly been observed in the build of the host variant so far, but there is no reason why it can't happen in the build of the target variant. [0] https://github.com/openssl/openssl/issues/27074 Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2025-03-17 18:32:11 +01:00
Waldemar Brodkorb	dcd6bea6ae	package/expat: security update to 2.7.0 Fixes CVE-2024-8176. For more details, see: https://blog.hartwork.org/posts/expat-2-7-0-released/ Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2025-03-17 18:23:29 +01:00
Peter Korsgaard	9679ddbcd0	package/rauc: needs libopenssl, not libressl Fixes http://autobuild.buildroot.net/results/6efc1275d3aac9f0a4c000f3d0911b5a880e495d/ Rauc uses X509_PURPOSE_get_by_id() since rauc-1.3 with commit 375dbb16dd94 ("src/signature: add support for codesigning certificate purpose"): ../src/signature.c: In function 'signature_init': ../src/signature.c:97:13: warning: implicit declaration of function 'X509_PURPOSE_get_by_id'; did you mean 'X509_PURPOSE_get_id'? [-Wimplicit-function-declaration] 97 \| if (X509_PURPOSE_get_by_id(id) >= 0) { Which is not provided by LibreSSL: nm -D target/usr/lib/libcrypto.so \| grep X509_PURPOSE_ 00000000001377b0 T X509_PURPOSE_get0 0000000000137850 T X509_PURPOSE_get0_name 0000000000137860 T X509_PURPOSE_get0_sname 00000000001377d0 T X509_PURPOSE_get_by_sname 00000000001377a0 T X509_PURPOSE_get_count 0000000000137840 T X509_PURPOSE_get_id So force the use of libopenssl. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2025-03-16 20:44:34 +01:00
Alex Bennée	fc690631ca	package/fio: explicitly control libnfs dependency The upstream uses pkg-config to detect and enable libnfs usage if it is found [1]. This can get confused by the host configuration so at the least we should disable detection if we are not planning to build with it. Note: the fio configure script accept both --enable-libnfs and --disable-libnfs since upstream commit [2], first included in fio v3.31. In Buildroot, this is supported since [3]. [1] https://github.com/axboe/fio/blob/fio-3.38/configure#L2360 [2] https://github.com/axboe/fio/commit/98ab12629c6a98fb53e28a4a70f53ce594cca858 [3] https://gitlab.com/buildroot.org/buildroot/-/commit/256395d8e5e7258df830dc19b47dc9ef19e48535 Signed-off-by: Alex Bennée <alex.bennee@linaro.org> [Julien: add extra info in commit log] Signed-off-by: Julien Olivain <ju.o@free.fr>	2025-03-14 20:58:04 +01:00
Bernd Kuhls	a79c862fa1	{linux, linux-headers}: bump 5.{4, 10, 15}.x / 6.{1, 6, 12}.x series Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>	2025-03-14 19:15:42 +01:00
Brandon Lumbra	9f60aa973d	package/rt-tests: fix build with glibc 2.41+ Since glibc bump to 2.41 in Buildroot commit [1], rt-tests is failing to build with error: In file included from src/lib/rt-utils.c:28: src/include/rt-sched.h:45:8: error: redefinition of 'struct sched_attr' 45 \| struct sched_attr { \| ^~~~~~~~~~ glibc 2.41 adds sched_*attr, conflicting with rt-sched.h in the rt-tests package. This commit resolves the conflict by applying a patch from upstream which excludes the conflicting code when using glibc >= 2.41. Fixes: https://autobuild.buildroot.org/results/30308c74291004c328d6c3603ce68d600c5ef281/ [1] https://gitlab.com/buildroot.org/buildroot/-/commit/6ecab31fad12a494ec0d2a3767c736a55c80a769 Signed-off-by: Brandon Lumbra <brandon.lumbra@sense.com> [Julien: - add extra info in commit log - add missing Signed-off-by line in commit log - add missing Signed-off-by in patch ] Signed-off-by: Julien Olivain <ju.o@free.fr>	2025-03-14 19:01:50 +01:00
Bernd Kuhls	befd90b765	package/php: security bump version to 8.3.19 Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_3 Release notes: https://news-web.php.net/php.announce/455 "(The 8.3.18 release was skipped due to the erroneous omission of a non-security related patch.)" Fixes CVE-2024-11235, CVE-2025-1219, CVE-2025-1736, CVE-2025-1861, CVE-2025-1734, and CVE-2025-1217. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>	2025-03-14 18:47:25 +01:00
Peter Korsgaard	873407b46c	docs/website/news.html: refer to gitlab bug tracker We moved the issue tracking to gitlab some time ago. Adjust the bug tracker references in news.html to point to there instead of bugzilla for clarity. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2025-03-13 11:40:10 +01:00