Makefile: update for 2025.08.3

Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
CHANGES: update for 2025.08.3
2025-12-11 09:20:41 +01:00 · 2025-12-11 09:18:56 +01:00 · 2025-12-08 19:25:02 +01:00 · 2025-12-04 13:23:58 +01:00 · 2025-12-04 13:23:20 +01:00 · 2025-12-04 13:22:35 +01:00
1919 changed files with 15431 additions and 14211 deletions
@@ -1,10 +1,13 @@
 board/amarula/vyasa/post-build.sh Shellcheck
+board/andes/ae350/patches/uboot/0001-mmc-ftsdc010_mci-Support-DTS-of-ftsdc010-driver-for-.patch lib_patch.Upstream
+board/andes/ae350/patches/uboot/0002-spl-Align-device-tree-blob-address-at-8-byte-boundar.patch lib_patch.Upstream
 board/arcturus/aarch64-ucls1012a/post-build.sh Shellcheck
 board/arcturus/aarch64-ucls1012a/post-image.sh Shellcheck
 board/aspeed/common/post-image.sh Shellcheck
 board/asus/tinker/post-build.sh Shellcheck
 board/atmel/flasher.sh Shellcheck
 board/beagleboard/beaglebone-qt5/patches/linux/0001-keep-jtag-clock-alive-for-debugger.patch lib_patch.Upstream
+board/beagleboard/beaglebone/post-build.sh Shellcheck
 board/boundarydevices/common/post-build.sh Shellcheck
 board/boundarydevices/common/post-image.sh Shellcheck
 board/broadcom/northstar/post-image.sh Shellcheck
@@ -74,8 +77,11 @@ boot/syslinux/0014-Fix-build-with-binutils-note-gnu-property-section.patch lib_p
 boot/syslinux/0016-Workaround-multiple-definition-of-symbol-errors.patch lib_patch.Upstream
 boot/syslinux/0017-Replace-builtin-strlen-that-appears-to-get-optimized.patch lib_patch.Upstream
 configs/am574x_idk_defconfig lib_defconfig.ForceCheckHash
+configs/andes_ae350_45_defconfig lib_defconfig.ForceCheckHash
 configs/arcturus_ucls1012a_defconfig lib_defconfig.ForceCheckHash
 configs/arcturus_ucp1020_defconfig lib_defconfig.ForceCheckHash
+configs/aspeed_ast2500evb_defconfig lib_defconfig.ForceCheckHash
+configs/aspeed_ast2600evb_defconfig lib_defconfig.ForceCheckHash
 configs/asus_tinker-s_rk3288_defconfig lib_defconfig.ForceCheckHash
 configs/asus_tinker_rk3288_defconfig lib_defconfig.ForceCheckHash
 configs/atmel_sama5d27_som1_ek_mmc_dev_defconfig lib_defconfig.ForceCheckHash
@@ -113,6 +119,7 @@ configs/imx6ullevk_defconfig lib_defconfig.ForceCheckHash
 configs/imx6ulpico_defconfig lib_defconfig.ForceCheckHash
 configs/imx7dpico_defconfig lib_defconfig.ForceCheckHash
 configs/imx8mqevk_defconfig lib_defconfig.ForceCheckHash
+configs/imxrt1050-evk_defconfig lib_defconfig.ForceCheckHash
 configs/khadas_vim3_defconfig lib_defconfig.ForceCheckHash
 configs/kontron_bl_imx8mm_defconfig lib_defconfig.ForceCheckHash
 configs/kontron_smarc_sal28_defconfig lib_defconfig.ForceCheckHash
@@ -147,8 +154,11 @@ configs/olpc_xo175_defconfig lib_defconfig.ForceCheckHash
 configs/olpc_xo1_defconfig lib_defconfig.ForceCheckHash
 configs/orangepi_pc2_defconfig lib_defconfig.ForceCheckHash
 configs/orangepi_zero_plus_defconfig lib_defconfig.ForceCheckHash
+configs/pc_x86_64_bios_defconfig lib_defconfig.ForceCheckHash
+configs/pc_x86_64_efi_defconfig lib_defconfig.ForceCheckHash
 configs/pine64_defconfig lib_defconfig.ForceCheckHash
 configs/pine64_pinecube_defconfig lib_defconfig.ForceCheckHash
+configs/pine64_star64_defconfig lib_defconfig.ForceCheckHash
 configs/s6lx9_microboard_defconfig lib_defconfig.ForceCheckHash
 configs/sipeed_lichee_rv_defconfig lib_defconfig.ForceCheckHash
 configs/sipeed_lichee_rv_dock_defconfig lib_defconfig.ForceCheckHash
@@ -176,6 +186,7 @@ configs/uevm5432_defconfig lib_defconfig.ForceCheckHash
 configs/visionfive_defconfig lib_defconfig.ForceCheckHash
 configs/wandboard_defconfig lib_defconfig.ForceCheckHash
 configs/warp7_defconfig lib_defconfig.ForceCheckHash
+linux/5.10.162-cip24-rt10/0001-arch-microblaze-mm-init.c-fix-build.patch lib_patch.Upstream
 package/18xx-ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
 package/4th/0001-avoid-regen-during-install.patch lib_patch.Upstream
 package/acl/0001-Build-with-old-GCC-versions.patch lib_patch.Upstream
@@ -200,6 +211,9 @@ package/android-tools/0009-Fix-makefiles-for-out-of-tree-ext4_utils-build.patch
 package/android-tools/0010-adb-added-patch-for-openssl-1.1.0-compatibility.patch lib_patch.Upstream
 package/aoetools/0001-Change-shell-script-interpreter-from-bin-bash-to-bin.patch lib_patch.Upstream
 package/apache/0001-cross-compile.patch lib_patch.Upstream
+package/apache/S50apache Shellcheck lib_sysv.Indent lib_sysv.Variables
+package/apitrace/0001-thirdparty-libbacktrace-backtrace-h-include-config.h.patch lib_patch.Upstream
+package/apitrace/0002-gltrace-Avoid-__libc_dlsym-and-__libc_dlopen_mode-on-GLIBC-2-34.patch lib_patch.Upstream
 package/apr-util/0001-remove-checkapr.patch lib_patch.Upstream
 package/apr/0001-sys-param-h.patch lib_patch.Upstream
 package/apr/0002-Revert-Backport-r1872164.-Fix-the-name-of-libtool-wh.patch lib_patch.Upstream
@@ -213,9 +227,13 @@ package/asterisk/0004-install-samples-need-the-data-files.patch lib_patch.Upstre
 package/at/0001-Makefile.in-fix-make-install-for-non-root-don-t-stri.patch lib_patch.Upstream
 package/at/S99at lib_sysv.Indent lib_sysv.Variables
 package/attr/0001-build-with-older-GCCs.patch lib_patch.Upstream
+package/aufs-util/0001-remove-user-settings.patch lib_patch.Upstream
+package/aufs-util/0002-no-check-ver.patch lib_patch.Upstream
+package/aufs-util/0003-no-strip-lib.patch lib_patch.Upstream
 package/aumix/0001-fix-incorrect-makefile-am.patch lib_patch.Upstream
 package/autoconf/0001-dont-add-dirty-to-version.patch lib_patch.Upstream
 package/automake/0001-noman.patch lib_patch.Upstream
+package/avahi/0001-Fix-NULL-pointer-crashes-from-175.patch lib_patch.Upstream
 package/avahi/S05avahi-setup.sh lib_sysv.Indent lib_sysv.Variables
 package/avahi/S50avahi-daemon lib_sysv.Indent lib_sysv.Variables
 package/babeld/S50babeld Shellcheck lib_sysv.Indent lib_sysv.Variables
@@ -224,6 +242,8 @@ package/bash/0001-input.h-add-missing-include-on-stdio.h.patch lib_patch.Upstrea
 package/bash/0002-parse.y-fix-compilation-for-non-multibyte-builds.patch lib_patch.Upstream
 package/bc/0001-bc-use-MAKEINFO-variable-for-docs.patch lib_patch.Upstream
 package/bc/0002-notice-read-and-write-errors-on-input-and-output.patch lib_patch.Upstream
+package/bc/0003-dc-fix-exit-code-of-q-command.patch lib_patch.Upstream
+package/bc/0004-no-gen-libmath.patch lib_patch.Upstream
 package/bcache-tools/0001-Don-t-inline-crc64-for-gcc-5-compatability.patch lib_patch.Upstream
 package/bcusdk/0002-eibd-fix-endless-recursion-when-using-USB-backends.patch lib_patch.Upstream
 package/bearssl/0001-Fix-missing-objdir-dependency.patch lib_patch.Upstream
@@ -266,6 +286,7 @@ package/cgroupfs-mount/S30cgroupfs Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/chipmunk/0001-Fix-build-failure-on-musl.patch lib_patch.Upstream
 package/chrony/S49chronyd lib_sysv.Variables
 package/cmake/0001-rename-cmake-rootfile.patch lib_patch.Upstream
+package/cmocka/0001-Don-t-redefine-uintptr_t.patch lib_patch.Upstream
 package/collectd/0001-src-netlink.c-remove-REG_NOERROR.patch lib_patch.Upstream
 package/connman/S45connman lib_sysv.Variables
 package/copas/0001-Do-not-load-coxpcall-for-LuaJIT.patch lib_patch.Upstream
@@ -302,6 +323,7 @@ package/davfs2/0001-src-Makefile.am-do-not-hardcode-fstack-protector-str.patch l
 package/dbus-cpp/0001-gcc4.7.patch lib_patch.Upstream
 package/dbus-cpp/0002-cross-compile-tools.patch lib_patch.Upstream
 package/dbus-cpp/0003-src-pipe.c-fix-build-error-with-gcc-7.x.patch lib_patch.Upstream
+package/dbus/S30dbus Shellcheck lib_sysv.Indent lib_sysv.TrailingSpace lib_sysv.Variables
 package/dc3dd/0001-no_man.patch lib_patch.Upstream
 package/dc3dd/0002-fix-autoreconf.patch lib_patch.Upstream
 package/dc3dd/0003-fix-for-glibc-2.28.patch lib_patch.Upstream
@@ -311,6 +333,9 @@ package/dhcp/S80dhcp-relay Shellcheck lib_sysv.Variables
 package/dhcp/S80dhcp-server Shellcheck lib_sysv.Variables
 package/dhcp/dhclient-script Shellcheck lib_shellscript.TrailingSpace
 package/dhcpcd/S41dhcpcd lib_sysv.Indent lib_sysv.Variables
+package/dillo/0001-usr-local-include.patch lib_patch.Upstream
+package/dillo/0002-Fix-openssl-detection.patch lib_patch.Upstream
+package/dillo/0004-fix-build-with-gcc-10.patch lib_patch.Upstream
 package/dmalloc/0001-configure-fix-build-on-mips.patch lib_patch.Upstream
 package/dmalloc/0003-configure-allow-overriding-some-tests.patch lib_patch.Upstream
 package/dmalloc/0004-Makefile-use-the-configure-detected-or-user-supplied.patch lib_patch.Upstream
@@ -328,6 +353,7 @@ package/dt/0002-dt-default-source-define.patch lib_patch.Upstream
 package/dtc/0001-Fix-include-guards-for-older-kernel-u-boot-sources.patch lib_patch.Upstream
 package/dvblast/0001-missing-lm.patch lib_patch.Upstream
 package/dvblast/0002-fix-int-types.patch lib_patch.Upstream
+package/dvbsnoop/0001-musl-types-h.patch lib_patch.Upstream
 package/dvdrw-tools/0001-limits.h.patch lib_patch.Upstream
 package/dvdrw-tools/0002-Include-sysmacros.h-to-compile-with-newer-gcc.patch lib_patch.Upstream
 package/earlyoom/0001-main.c-fix-build-with-kernel-4.3.patch lib_patch.Upstream
@@ -336,7 +362,9 @@ package/ebtables/0001-replace-ebtables-save-perl-script-with-bash.patch lib_patc
 package/ecryptfs-utils/0001-musl.patch lib_patch.Upstream
 package/ecryptfs-utils/0002-openssl110.patch lib_patch.Upstream
 package/ecryptfs-utils/0003-fix-parallel-build-issue.patch lib_patch.Upstream
-package/efl/0001-ecore_fb-fix-build-with-tslib.patch lib_patch.Upstream
+package/efl/0001-ecore_evas-engines-drm-meson.build-use-gl_deps-as-en.patch lib_patch.Upstream
+package/efl/0002-ecore_evas-engines-drm-meson.build-fix-gl_drm-includ.patch lib_patch.Upstream
+package/efl/0003-ecore_fb-fix-build-with-tslib.patch lib_patch.Upstream
 package/eigen/0001-Adds-new-CMake-Options-for-controlling-build-compone.patch lib_patch.Upstream
 package/elftosb/0001-fixes-includes.patch lib_patch.Upstream
 package/elftosb/0002-force-cxx-compiler.patch lib_patch.Upstream
@@ -353,6 +381,8 @@ package/exim/0001-Build-buildconfig-for-the-host.patch lib_patch.Upstream
 package/exim/0002-Don-t-make-backup-copies-of-installed-files.patch lib_patch.Upstream
 package/exim/0003-Skip-version-check-and-symlink-installation.patch lib_patch.Upstream
 package/exim/S86exim lib_sysv.Indent lib_sysv.Variables
+package/expect/0001-enable-cross-compilation.patch lib_patch.Upstream
+package/expect/0002-allow-tcl-build-directory.patch lib_patch.Upstream
 package/fail2ban/S60fail2ban Shellcheck lib_sysv.Variables
 package/fakedate/fakedate Shellcheck
 package/falcosecurity-libs/0001-cmake-Permit-setting-GRPC_CPP_PLUGIN.patch lib_patch.Upstream
@@ -444,6 +474,7 @@ package/grpc/0003-disable-unconditionally-downloading-api-repos.patch lib_patch.
 package/gstreamer1/gstd/0001-Don-t-require-gstd-check-user-xenv.sh-for-systemd-se.patch lib_patch.Upstream
 package/guile/0001-calculate-csqrt_manually.patch lib_patch.Upstream
 package/guile/0002-Makefile.am-fix-build-without-makeinfo.patch lib_patch.Upstream
+package/gumbo-parser/0001-configure.ac-fix-build-without-C.patch lib_patch.Upstream
 package/gutenprint/0001-use-pregen-xmli18n-header.patch lib_patch.Upstream
 package/gutenprint/0002-cups-support-replaces-static-with-static-libtool-lib.patch lib_patch.Upstream
 package/harfbuzz/0001-meson.build-check-for-pthread.h.patch lib_patch.Upstream
@@ -459,8 +490,9 @@ package/ibrcommon/0001-ibrcommon-data-File.cpp-support-POSIX-basename-call.patch
 package/ibrcommon/0002-ibrcommon-added-openssl-1.1-compatibility-264.patch lib_patch.Upstream
 package/ibrcommon/0003-ibrcommon-ssl-gcm-fix-static-build-with-openssl.patch lib_patch.Upstream
 package/icu/0001-dont-build-static-dynamic-twice.patch lib_patch.Upstream
-package/icu/0002-link-icudata-as-data-only.patch lib_patch.Upstream
-package/icu/0003-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
+package/icu/0002-workaround-toolchain-bugs.patch lib_patch.Upstream
+package/icu/0003-link-icudata-as-data-only.patch lib_patch.Upstream
+package/icu/0004-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
 package/ifmetric/0001-Fix-issue-NETLINK-Packet-too-small-or-truncated-92-1.patch lib_patch.Upstream
 package/ifplugd/0001-cross.patch lib_patch.Sob lib_patch.Upstream
 package/ifplugd/0002-fix-headers.patch lib_patch.Sob lib_patch.Upstream
@@ -498,6 +530,7 @@ package/irqbalance/S13irqbalance Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/irrlicht/0001-override-CPPFLAGS-CXXFLAGS-and-CFLAGS-in-Makefile.patch lib_patch.Upstream
 package/irrlicht/0002-makefile-override-LDFLAGS-and-remove-obsolete-X11R6-.patch lib_patch.Upstream
 package/iucode-tool/S00iucode-tool lib_sysv.Variables
+package/iwd/S40iwd Shellcheck
 package/janus-gateway/0001-disable-ssp.patch lib_patch.Upstream
 package/kexec-lite/0001-clean-restart.patch lib_patch.Upstream
 package/keyutils/0001-fix-install-rule.patch lib_patch.Upstream
@@ -525,6 +558,7 @@ package/libb64/0002-Initialize-C++-objects.patch lib_patch.Upstream
 package/libcdaudio/0001-libcdaudio-enable-autoreconf.patch lib_patch.Upstream
 package/libcgi/0001-CMakeLists.txt-honour-BUILD_TESTING.patch lib_patch.Upstream
 package/libcgicc/0001-disable-documentation-option.patch lib_patch.Sob lib_patch.Upstream
+package/libconfuse/0001-Fix-163-unterminated-username-used-with-getpwnam.patch lib_patch.Upstream
 package/libcorrect/0002-CMakeLists.txt-conditionally-use-fsanitize-address.patch lib_patch.Upstream
 package/libcuefile/0001-fix-static-link.patch lib_patch.Upstream
 package/libdaemon/0001-testd-use-unistd-h-instead-of-sys-unistd-h.patch lib_patch.Upstream
@@ -547,6 +581,7 @@ package/libfuse/0002-util-ulockmgr_server-c-conditionally-define-closefrom-fix-g
 package/libgcrypt/0001-configure.ac-add-an-option-to-disable-tests.patch lib_patch.Upstream
 package/libgpiod/0001-build-add-a-configure-switch-for-building-examples.patch lib_patch.Upstream
 package/libgsm/0001-Misc-fixes-from-Archlinux.patch lib_patch.Upstream
+package/libgtk2/0001-reduce-dependencies.patch lib_patch.Upstream
 package/libgtk3/0001-Remove-Gdk-dependency-from-gtk-encode-symbolic-svg.patch lib_patch.Upstream
 package/libhdhomerun/0001-dont-strip.patch lib_patch.Upstream
 package/libiio/S99iiod Shellcheck lib_sysv.Variables
@@ -590,6 +625,7 @@ package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch lib_patch.Upstream
 package/librsvg/0001-gdk-pixbuf-loader-Makefile.am-set-GDK_PIXBUF_MODULED.patch lib_patch.Upstream
 package/librtlsdr/0001-Makefile.am-respect-DESTDIR-with-install-udev-rules.patch lib_patch.Upstream
 package/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch lib_patch.Upstream
+package/libsepol/0001-support-static-only.patch lib_patch.Upstream
 package/libserial/0001-SerialPort.cpp-fix-build-when-size_t-is-an-unsigned-.patch lib_patch.Upstream
 package/libserial/0002-SerialPort.cpp-don-t-use-high-baudrates-when-not-ava.patch lib_patch.Upstream
 package/libshdata/0001-backend-Add-missing-include-files.patch lib_patch.Upstream
@@ -608,6 +644,7 @@ package/libsvg/0001-fix-expat-static-declaration.patch lib_patch.Upstream
 package/libsvg/0002-Fix-undefined-symbol-png_set_gray_1_2_4_to_8.patch lib_patch.Upstream
 package/libtalloc/0001-buildtools-wafsamba-add-disable-stack-protector-opti.patch lib_patch.Upstream
 package/libtelnet/0001-fix-compilation-without-zlib.patch lib_patch.Upstream
+package/libtheora/0001-link-libtheoradec.patch lib_patch.Upstream
 package/libtomcrypt/0001-fix-CVE-2019-17362.patch lib_patch.Upstream
 package/libtommath/0001-Build-test-bn_mp_set_double-c-on-more-platforms.patch lib_patch.Upstream
 package/libtorrent/0001-libtorrent.pc.in-add-Libs.Private.patch lib_patch.Upstream
@@ -641,6 +678,7 @@ package/lockfile-progs/0001-sus3v-legacy.patch lib_patch.Sob lib_patch.Upstream
 package/lshw/0001-solve-Compile-error-when-g-version-is-less-than-5.patch lib_patch.Upstream
 package/ltrace/0001-arm-plt.patch lib_patch.Upstream
 package/ltrace/0002-sparc-add-missing-library.h-include.patch lib_patch.Upstream
+package/ltrace/0003-configure.ac-fix-autoreconf-with-autoconf-2.70.patch lib_patch.Upstream
 package/lttng-babeltrace/0001-tests-lib-Makefile.am-remove-unneeded-static-flag.patch lib_patch.Upstream
 package/lttng-babeltrace/0002-configure.ac-fix-popt-static-build.patch lib_patch.Upstream
 package/lttng-libust/0001-configure.ac-add-disable-tests.patch lib_patch.Upstream
@@ -682,6 +720,9 @@ package/mesa3d-demos/0001-demos-makes-opengl-an-optional-component.patch lib_pat
 package/meson-tools/0001-amlbootenc-gxl-remove-non-std-C-convention-in-for.patch lib_patch.Upstream
 package/meson/0001-Prefer-ext-static-libs-when-default-library-static.patch lib_patch.Upstream
 package/meson/0002-mesonbuild-dependencies-base.py-add-pkg_config_stati.patch lib_patch.Upstream
+package/metacity/0001-add-libm-reference.patch lib_patch.Upstream
+package/metacity/0002-gconf.patch lib_patch.Upstream
+package/metacity/0003-mag-add-libm-reference.patch lib_patch.Upstream
 package/mfgtools/0001-lnx_def.h-fix-conflicting-declaration-of-__time64_t.patch lib_patch.Upstream
 package/mii-diag/0001-strchr.patch lib_patch.Sob lib_patch.Upstream
 package/mini-snmpd/0001-linux.c-fix-musl-build.patch lib_patch.Upstream
@@ -755,6 +796,7 @@ package/nuttcp/0001-susv3-legacy.patch lib_patch.Upstream
 package/nvidia-driver/0001-use-LDFLAGS.patch lib_patch.Upstream
 package/octave/0001-Fix-BLAS-library-integer-size-detection.patch lib_patch.Upstream
 package/ofono/S46ofono lib_sysv.Variables
+package/ola/0001-ola-fix-compilation-with-musl-1-2-3.patch lib_patch.Upstream
 package/olsr/0001-olsrd-migrate-to-using-bison-3.7.1.patch lib_patch.Upstream
 package/olsr/0002-lib-pud-Makefile-fix-parallel-build.patch lib_patch.Upstream
 package/olsr/0003-pud-adapt-to-API-changes-in-gpsd-3-20.patch lib_patch.Upstream
@@ -763,8 +805,8 @@ package/olsr/0006-build-patch-for-gpsd-3-25.patch lib_patch.Upstream
 package/olsr/S50olsr Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/open-plc-utils/0001-Remove-OWNER-and-GROUPS-parameters-to-install.patch lib_patch.Upstream
 package/open2300/0001-fix-makefile.patch lib_patch.Upstream
-package/openjdk/17.0.12+7/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
-package/openjdk/21.0.4+7/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
+package/openjdk/17.0.9+9/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
+package/openjdk/21.0.1+12/0001-Add-ARCv2-ISA-processors-support-to-Zero.patch lib_patch.Upstream
 package/openldap/0001-fix-bignum.patch lib_patch.Upstream
 package/openldap/0002-disable-docs.patch lib_patch.Upstream
 package/openntpd/S49ntp Shellcheck lib_sysv.Variables
@@ -800,7 +842,11 @@ package/opusfile/0001-Propagate-allocation-failure-from-ogg_sync_buffer.patch li
 package/owfs/S55owserver Shellcheck lib_sysv.Variables
 package/owfs/S60owfs Shellcheck lib_sysv.Variables
 package/owl-linux/0001-fix-for-linux-3.3.x.patch lib_patch.Upstream
+package/patch/0001-Fix-segfault-with-mangled-rename-patch.patch lib_patch.Upstream
 package/patch/0002-Allow-input-files-to-be-missing-for-ed-style-patches.patch lib_patch.Upstream
+package/patch/0003-Fix-arbitrary-command-execution-in-ed-style-patches-.patch lib_patch.Upstream
+package/patch/0004-Invoke-ed-directly-instead-of-using-the-shell.patch lib_patch.Upstream
+package/patch/0005-Don-t-follow-symlinks-unless--follow-symlinks-is-given.patch lib_patch.Upstream
 package/patchelf/0001-Add-option-to-make-the-rpath-relative-under-a-specif.patch lib_patch.Upstream
 package/paxtest/0001-genpaxtest-move-log-location.patch lib_patch.Upstream
 package/paxtest/0002-paxtest-page-alignment-ARM-and-NIOS2-arch.patch lib_patch.Upstream
@@ -949,6 +995,7 @@ package/shadowsocks-libev/0003-lib-Makefile.am-remove-static-from-LDFLAGS.patch
 package/shairport-sync/S99shairport-sync Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/shared-mime-info/0001-Remove-incorrect-dependency-from-install-data-hook.patch lib_patch.Upstream
 package/shellinabox/0001-Makefile-disable-always-building-statically.patch lib_patch.Upstream
+package/shellinabox/0002-CVE-2018-16789-fix-for-broken-multipart-form-data.patch lib_patch.Upstream
 package/skeleton-init-systemd/fakeroot_tmpfiles.sh Shellcheck
 package/slang/0001-slsh-libs.patch lib_patch.Upstream
 package/smcroute/S41smcroute NotExecutable lib_sysv.Indent lib_sysv.Variables
@@ -996,6 +1043,7 @@ package/supervisor/S99supervisord lib_sysv.Variables
 package/suricata/0001-configure.ac-allow-the-user-to-override-RUST_TARGET.patch lib_patch.Upstream
 package/suricata/S99suricata Shellcheck
 package/swupdate/swupdate.sh Shellcheck
+package/sylpheed/0001-harden-link-checker-before-accepting-click.patch lib_patch.Upstream
 package/sysvinit/0001-Makefile-disable-stack-protector-strong.patch lib_patch.Upstream
 package/tar/0001-lib-getrandom.c-fix-build-with-uclibc-1.0.35.patch lib_patch.Upstream
 package/targetcli-fb/S50target Shellcheck lib_sysv.Variables
@@ -1013,10 +1061,17 @@ package/ti-sgx-um/0001-Makefile-do-not-install-init-script.patch lib_patch.Upstr
 package/ti-sgx-um/S80ti-sgx lib_sysv.Variables
 package/ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
 package/tinyalsa/0001-include-time.h-before-asound.h.patch lib_patch.Upstream
+package/tinycbor/0001-Makefile-add-DISABLE_WERROR.patch lib_patch.Upstream
 package/tinycompress/0001-wave-add-time.h-missing-header-inclusion.patch lib_patch.Upstream
 package/tinydtls/0001-sha2-sha2.c-fix-build-on-big-endian.patch lib_patch.Upstream
+package/tinyxml/0001-In-stamp-always-advance-the-pointer-if-p-0xef.patch lib_patch.Upstream
+package/tpm2-tss/0001-Temporary-fix-for-build-without-C.patch lib_patch.Upstream
 package/transmission/S92transmission Shellcheck lib_sysv.ConsecutiveEmptyLines lib_sysv.Indent lib_sysv.Variables
 package/triggerhappy/S10triggerhappy Shellcheck lib_sysv.Indent lib_sysv.Variables
+package/trinity/0001-Fix-build-with-GCC-10.patch lib_patch.Upstream
+package/trinity/0002-net-proto-ip-raw.c-fix-build-with-kernel-5.13.patch lib_patch.Upstream
+package/trinity/0003-Use-fcntl-h-for-dev_t-mode_t.patch lib_patch.Upstream
+package/trinity/0004-drop-decnet.patch lib_patch.Upstream
 package/trousers/0001-Check-if-the-compiler-understands-pie-and-relro-options.patch lib_patch.Upstream
 package/trousers/0002-Check-that-getpwent_r-is-available-before-using-it.patch lib_patch.Upstream
 package/trousers/0003-Fix-build-with-LibreSSL-2-7.patch lib_patch.Upstream
@@ -1024,7 +1079,8 @@ package/tstools/0001-build-get-along-with-buildroot.patch lib_patch.Upstream
 package/tvheadend/0001-no-check_config.patch lib_patch.Upstream
 package/tvheadend/S99tvheadend Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/uboot-tools/0001-drop-configh-from-tools.patch lib_patch.Upstream
-package/uboot-tools/0002-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
+package/uboot-tools/0002-tools-only-in-no-dot-config-targets.patch lib_patch.Upstream
+package/uboot-tools/0003-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
 package/ubus/0001-Install-server-and-client-examples.patch lib_patch.Upstream
 package/uemacs/01-clear-ixon-termios-flag.patch lib_patch.Upstream
 package/uhd/0001-host-CMakeLists-add-boost-unit_test_framework-requir.patch lib_patch.Upstream
@@ -1080,6 +1136,9 @@ package/vte/0002-build-Fix-check-for-fstack-protector-compiler-support.patch lib
 package/vtun/0001-fix-installation.patch lib_patch.Upstream
 package/vtun/0002-fix-ssl-headers-checks.patch lib_patch.Upstream
 package/vtun/0003-openssl11.patch lib_patch.Upstream
+package/waffle/0001-cmake-forward-cflags-from-.pc-files-to-waffle-cflags.patch lib_patch.Upstream
+package/waffle/0002-wayland-fix-build-against-version-1-20.patch lib_patch.Upstream
+package/waffle/0003-drop-C-dependency.patch lib_patch.Upstream
 package/wampcc/0001-Add-RISC-V-endian-detection.patch lib_patch.Upstream
 package/wampcc/0002-include-wampcc-platform.h-fix-build-with-musl-1.2.0.patch lib_patch.Upstream
 package/wampcc/0003-Broken-build-on-Windows.patch lib_patch.Upstream
@@ -1121,6 +1180,11 @@ package/xen/0001-9pfs-include-linux-limits.h-for-XATTR_SIZE_MAX.patch lib_patch.
 package/xen/0002-Fix-build-with-64-bits-time_t.patch lib_patch.Upstream
 package/xen/0003-libs-light-fix-tv_sec-printf-format.patch lib_patch.Upstream
 package/xen/0004-libs-light-fix-tv_sec-fprintf-format.patch lib_patch.Upstream
+package/xinetd/0001-ar.patch lib_patch.Upstream
+package/xinetd/0002-destdir.patch lib_patch.Upstream
+package/xinetd/0003-rpc-fix.patch lib_patch.Upstream
+package/xinetd/0004-configure-rlim_t.patch lib_patch.Upstream
+package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch lib_patch.Upstream
 package/xl2tp/xl2tpd lib_shellscript.TrailingSpace
 package/xml-security-c/0001-fix-build-with-libressl-3.5.0.patch lib_patch.Upstream
 package/yajl/0001-Let-the-shared-and-the-static-library-have-the-same-.patch lib_patch.Upstream
@@ -13,4 +13,3 @@
 *.rej
 *~
 *.pyc
-/br.log
@@ -1,153 +1,3 @@
-2025.11.1, released January 20, 2026
-
-	Important / security related fixes:
-
-	apache: CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082,
-	  CVE-2025-66200
-	cryptsetup
-	dropbear: CVE-2025-14282, CVE-2019-6111
-	exim: CVE-2025-67896
-	gnupg2
-	imagemagick: CVE-2025-66628
-	libarchive
-	libcoap: CVE-2025-59391, CVE-2025-65493, CVE-2025-65494
-	  CVE-2025-65495, CVE-2025-65496, CVE-2025-65497, CVE-2025-65498,
-	  CVE-2025-65499, CVE-2025-65500, CVE-2025-65501
-	libcurl: CVE-2025-13034, CVE-2025-14017, CVE-2025-14524,
-	  CVE-2025-14819, CVE-2025-15079, CVE-2025-15224
-	libfcgi: CVE-2025-23016.
-	libfreeimage: CVE-2019-12211, CVE-2019-12213, CVE-2020-24292,
-	  CVE-2020-24293, CVE-2020-24295, CVE-2021-33367, CVE-2021-40263,
-	  CVE-2021-40266, CVE-2023-47995, CVE-2023-47997
-	libpng: CVE-2025-66293
-	liburiparser: CVE-2025-67899
-	libxslt: CVE-2025-7424, CVE-2025-9714, CVE-2025-11731
-	linenoise: CVE-2025-9810
-	perl: CVE-2025-40909
-	php: CVE-2025-14177, CVE-2025-14178, CVE-2025-14180
-	python-django: CVE-2025-13372, CVE-2025-64460
-	python-filelock: CVE-2025-68146
-	python-fonttools: CVE-2025-66034
-	python-urllib3: CVE-2025-66471, CVE-2025-66418
-	unbound: CVE-2025-11411
-	vlc
-	xserver_xorg-server: CVE-2025-62229, CVE-2025-62230,
-	  CVE-2025-62231
-	xwayland: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231
-
-	Infrastructure updates/fixes:
-
-	- pkg-stats use HEAD request & unique HTTP user-agent
-	- cve-check: don't fail with unknown CVE
-	- generate-cyclonedx: support 'resolved_with_pedigree'
-	- testing: add host bin dir to PATH
-	- testing: add tests for FIT hash support in package/uboot-tools
-	- testing: add libiio python bindings runtime test
-	- testing: ddrescue: use dmsetup from lvm2
-	- testing: ddrescue: use f-string for test config
-	- testing: add tio runtime test
-	- add 'CVE:' trailer in various patches
-	- add md5 hash and update tarball url to various python packages
-	- testing: ltp-testsuite: replace runltp by kirk
-	- testing: new kvmtool runtime test
-	- gitignore: ignore utils/brmake log output named `br.log`
-	- testing: add opus-tools runtime test
-	- testing: add flac runtime test
-	- testing: test_xen: add block
-
-	Updated / fixed packages: apache, arm-trusted-firmware, atf, audit,
-	bitcoin, boost, busybox, cage, cmake, collectl, cppcms, cpulimit,
-	cryptsetup, dbus, dmraid, dropbear, efl, embiggen-disk, evilwm, exim,
-	ficl, fio, fluent-bit, fontconfig, glibc, gnupg2, grpc, gvfs, icu,
-	imagemagick, irqbalance, iwd, kvmtool, ledmon, libarchive, libcoap,
-	libconfig, libcpprestsdk, libcurl, libdill, libdnet, libfcgi, libfreeimage,
-	libgit2, libgtk3, libgtk4, libiio, libmbus, libpng, libselinux, libtirpc,
-	libupnp, liburiparser, libvncserver, libxslt, linenoise, linux-tools,
-	lttng-modules, lugaru, matchbox-fakekey, matchbox-keyboard, matchbox-lib,
-	matchbox-panel, mender-update-modules, mesa3d, mosh, nfs-utils, open-lldp,
-	opencv4, opencv4-contrib, openjdk, perl, perl-dbd-mysql, perl-mozilla-ca,
-	php, pigz, pixman, python-brotli, python-can, python-certifi, python-django,
-	python-filelock, python-fonttools, python-pyqt5, python-urllib3, python3,
-	qt5enginio, qt5webkit, qt6base, racehound, rdesktop, rpcbind, rpi-firmware,
-	rtl8192eu, rtl8723bu, rtl8723ds, rtl8821au, rtl8821cu, rtl8822cs, samba4,
-	skopeo, softether, softhsm2, spice, ssdp-responder, sway, tio, trinity,
-	tzdata, uboot, uboot-tools, uclibc, unbound, utfcpp, v4l2loopback, vim, vlc,
-	xdriver_xf86-video-intel, xen, xinetd, xlib_libxshmfence,
-	xserver_xorg-server, xvkbd, xwayland, zic, zxing-cpp
-
-	Removed packages: opencv3 'protobuf', opencv3 'ffmpeg',
-	   libdnet 'python', rpi-firmware 'vcdbg'
-
-2025.11, released December 11th, 2025
-
-	Fixes all over the tree.
-
-	linux: Default to 6.18 for runtime kernel and kernel headers,
-	drop the now EOL 5.4.x series.
-
-	Updated/fixed packages: apache, audit, cryptodev-linux,
-	dmraid, ficl, glibc, go, intel-mediadriver, intel-vpl-gpu-rt,
-	kbd, libcap, libdbi, libgit2, libpng, libtirpc, libxslt,
-	lugaru, mosh, pigz, podman, python-fonttools, python-urllib3,
-	python3, racehound, rdesktop, rtl8188eu, softhsm, sqlite,
-	strace, unbound, unzip, xapp_xkbutils,
-	xdriver_xf86-video-intel, xl2tp, xserver_xorg-server, xwayland
-
-2025.11-rc2, released November 30th, 2025
-
-	Fixes all over the tree.
-
-	Infrastructure: support/scripts/check-merged (introduced in
-	2025.11-rc1) no longer relies on getopt from util-linux
-
-	Defconfigs: pine64 star: Update U-Boot and Linux kernel to fix
-	builds with GCC 14.x
-
-	Updated/fixed packages: 18xx-ti-utils, depot-tools, e2fsprogs,
-	enscript, fio, gnutls, intel-mediadriver, intel-vpl-gpu-rt,
-	ledmon, libpng, libteam, lmbench, mongoose, netsnmp,
-	nss-pam-ldapd, open-plc-utils, oprofile, pdmenu, php-apcu,
-	php-pecl-dbus, php-xdebug, php-yaml, python-flask-restx,
-	python-pysocks, python-starlette, sane-backends, sbc, sdl,
-	stress-ng, swipl, syslinux, time, tmux, tor, uboot-tools,
-	woff2, xfsprogs, yaml-cpp
-
-	Removed packages: libargtable2, starfive-spltool
-
-2025.11-rc1, released November 20th, 2025
-
-	Fixes all over the tree and new features.
-
-	Infrastructure:
-
-	- Support merged /usr/sbin/ (E.G. sbin a symlink to bin rather
-	  than separate directories), which is required by systemd
-	  256+
-
-	- support/scripts/cve-check can now be used to enrich a SBOM
-	  in CycloneDX format (as generated by
-	  utils/generate-cyclonedx) with vulnerability analysis from
-	  the NVD database.
-
-	Dropped a number of old and unmaintained packages and external
-	toolchains.
-
-	New defconfigs: Compulab IOT-GATE-iMX8 EBBR, QEMU x86-64 EFI
-
-	Removed defconfigs: at91sam9260eknf, atmel_sama5d3xek,
-	roseapplepi
-
-	New packages: broot, bvi, go-bootstrap-stage4, libpam-pkcs11,
-	llama-cpp, nnn, python-crccheck, python-fs, python-patch-ng,
-	python-pyfatfs, python-scp, python-whitenoise, snapboot, wmenu
-
-	Removed packages: aufs, aufs-util, axfsutils, bctoolbox,
-	belle-sip, belr, dmenu-wayland, dvbsnoop,
-	ev3dev-linux-drivers, expect, fbtft, gtk2-engines, gtkperf,
-	leafpad, lesstif, libbson, libglade, libgtk2, libjwt, libsexy,
-	linphone, logsurfer, mediastreamer, metacity, mongrel2, ola,
-	ortp, procrank_linux, ramspeed, sylpheed
-
 2025.08.3, released December 11, 2025

 	Important / security related fixes:
@@ -245,6 +95,7 @@

 	- Capture output of failing commands on host.

+
 2025.08.1, released October 11, 2025

    Important / security related fixes:
@@ -402,162 +253,6 @@
 	Removed packages: libebur128, libolm, libwebsock,
 	python-dunamai, python-poetry-dynamic-versioning

-2025.05.3, released October 11, 2025
-
-    This is the final release on the 2025.05.x branch.
-
-    Important / security related fixes:
-
-    - atop: CVE-2025-31160
-    - civetweb: CVE-2025-55763
-    - cjson: CVE-2025-57052
-    - connman: CVE-2025-32366, CVE-2025-32743
-    - cups: CVE-2025-58060, CVE-2025-58364
-    - exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
-             CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
-    - expat: CVE-2025-59375
-    - fastd: CVE-2025-24356
-    - fetchmail: CVE number pending
-    - ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800,
-                   CVE-2025-59801
-    - imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005,
-                   CVE-2025-55160
-    - intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
-                       CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
-    - jasper: CVE-2023-51257, CVE-2025-8835
-    - libcurl: CVE-2025-10148, CVE-2025-9086
-    - libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
-    - libssh: CVE-2025-8114, CVE-2025-8277
-    - lua: CVE-2014-5461
-    - opencv4: CVE-2025-53644
-    - pcre2: CVE-2025-58050
-    - poco: CVE-2025-6375
-    - postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
-    - python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
-    - python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
-    - python-pip: CVE-2025-8869
-    - raptor: CVE-2024-57822, CVE-2024-57823
-    - sqlite: CVE-2025-6965
-    - syslog-ng: CVE-2024-47619
-    - tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
-    - udisks: CVE-2025-8067
-    - wireshark: CVE-2025-5601
-
-    Updated / fixed packages: asterisk, avrdude, boinc, boot-wrapper-aarch64,
-    cjson, cpp-httplib, cutekeyboard, docker-engine, ecryptfs-utils, fatcat,
-    fetchmail, firewalld, gnupg2, gnuplot, htpdate, iputils, jose, kodi,
-    libfreeimage, libopenssl, libselinux, libsemanage, libxkbcommon,
-    libxmlrpc, linux-firmware, linuxptp, llvm, lua-utf8, luaossl, luvi,
-    mariadb, mbpfan, micropython, modsecurity2, mosquitto, opencv4, openjpeg,
-    pango, php-lua, policycoreutils, python-aiohttp-session, python-certifi,
-    python-cryptography, python-flask-cors, python-pytz, python3, rtl_433,
-    ruby, samba4, sysprof, ti-k3-boot-firmware, tiff, tor, uclibc, upx,
-    webkitgtk, wlroots, x11r7, xilinx-embeddedsw, xilinx-prebuilt, zziplib
-
-    Removed package: netstat-nat
-
-    Boards updated / fixed: versal, ti_am62x_sk, qemu/{x86, x86_64},
-    zedboard, beagleboneai
-
-    Boards removed: roseapplepi, at91sam9260eknf, atmel_sama5d3xek
-
-    Test Improvements:
-
-    - TestSWIPL: increase timeout value
-    - TestOpenJdk: remove stime() function call
-    - test_hardening: update toolchain to aarch64 for checksec tests
-    - test_docker_compose: update kernel & VM CPU
-    - TestZfsUclibc: use internal backend for uClibc-ng toolchain
-    - GitTestBase: remove git daemon due to Gitlab-CI security settings
-
-2025.05.2, released September 09, 2025
-
-	Important / security related fixes:
-
-	- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
-	    CVE-2025-5449, CVE-2025-5987
-	- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
-	- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
-	- python3: CVE-2025-8194
-	- libhtp: CVE-2025-53537
-	- tiff: CVE-2025-8176, CVE-2025-8177
-	- libglib2: CVE-2025-6052
-	- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
-	    CVE-2024-7541, CVE-2024-7542
-	- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
-	    CVE-2025-1376, CVE-2025-1377
-	- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
-	    CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
-	    CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
-	    CVE-2025-0689, CVE-2025-1125
-	- openjpeg: CVE-2025-54874
-	- go: CVE-2025-4674, CVE-2025-47907
-	- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
-	- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
-	- vorbis-tools: CVE-2023-43361
-	- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
-	    CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
-	    CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
-	- ffmpeg: CVE-2023-6602
-	- lighttpd: CVE-2025-8671
-	- python-h2: CPE-2025-57804
-	- cpp-httplib: CVE-2025-46728
-
-	Removed packages: liboauth, thttpd
-
-	Removed defconfigs: at91sam9g20dfc, at91sam9g45m10ek,
-	at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
-	odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
-	pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
-	toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m,
-	imx6ulz_bsh_smm_m2,
-
-	Test Improvements:
-
-	- test_gstreamer1: raise tesseract-ocr timeout to 15s
-	- test_wine: fix test after bootlin toolchains update
-	- test_numactl: fix test after bootlin toolchains update
-	- test_dpdk: fix test after bootlin toolchains update
-	- test_msr_tools: fix test after bootlin toolchains update
-	- test_dmidecode: fix test after bootlin toolchains update
-	- test_iso9660: use a more recent toolchain
-	- test_grub: use glibc toolchain
-	- test_wget: replace thttpd by Busybox's httpd server
-	- test_libcurl: replace thttpd by Busybox's httpd server
-	- test_systemd_selinux: fix test after bootlin toolchains update
-
-	Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
-	libssh, glibc, libhtp, libapparmor, libopenssl, rpi-firmware,
-	brcmfmac_sdio-firmware-rpi, grout, php-pecl-dbus, tini, snooze, ngrep,
-	libzenoh-pico, janet, cjson, flatcc, nanocom, rtl8189es, gcc, ofono,
-	python-numpy, elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk,
-	prboom, setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
-	gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
-	gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
-	gstreamer1-editing-services, vorbis-tools, jq, lbijwt, vim, ffmpeg,
-	libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay, libsvgtiny,
-	libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2, squid, ipmitool,
-	ell, proftpd, liblog4c-localtime, wpewebkit, weston, cpp-httplib,
-	ipset, python3, python-aexpect, libftdi1
-
-	Infrastructure updates/fixes:
-	- Various tweaks to utils/generate-cyclonedx for better SBOM
-	  compatibility and project name/version customization
-	- go: make pre-built compiler provide target support too
-	- test-pkg: add new option -T/--toolchain-name
-	- pkg-utils.mk: include package directory in show-info output
-	- bump-stable-kernel-versions: new tool
-
-	Boards updated / fixed:
-
-	- qemu_sh4*: switch back to disk emulation
-	- acmesystems_acqua_a5_*: update linux
-	- sipeed_licheepi_zero: update linux & uboot
-	- zynqmp: increase vfat partition to 64M
-	- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
-	- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
-	- ci20: U-Boot needs host-openssl
-
 2025.05.1, released August 11th, 2025

 	Important / security related fixes:
@@ -759,257 +454,6 @@
 	- netsnmp: unexpected header length in /proc/net/snmp...
 	  https://gitlab.com/buildroot.org/buildroot/-/issues/110

-2025.02.9, released December 11, 2025
-
-	Important / security related fixes:
-
-	- asterisk: CVE-2025-1131, CVE-2025-57767, CVE-2025-49832,
-	            CVE-2025-47780, CVE-2025-47779
-	- gnutls: CVE-2025-9820
-	- libpng: CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018
-	- luksmeta: CVE-2025-11568
-	- mariadb: CVE-2025-30693, CVE-2025-30722, CVE-2023-52969,
-	           CVE-2023-52970, CVE-2023-52971
-	- openvpn: CVE-2025-13086
-	- postgresql: CVE-2025-12817, CVE-2025-12818
-	- python-django: CVE-2025-64458, CVE-2025-64459
-	- python-startlette: GHSA-7f5h-v6xp-fcq8
-
-	Infrastructure updates/fixes:
-
-	- New script support/scripts/cve-check to enricht CycloneDX SBoM with
-	  CVE information from NVD database.
-
-	Updated / fixed packages: 18xx-ti-utils, asterisk, gnutls, libpng,
-	libroxml, libteam, linux-headers, luksmeta, mariadb, nbd, neard,
-	openjdk, openjdk-bin, openvpn, oprofile, perl-net-ssleay, postgresql,
-	python-django, python-starlette, redis, sdbusplus, sdl, swipl,
-	tailscale, thermald, tmux, tor
-
-	Removed packages: bctoolbox, belle-sip, belr, linphone, mediastreamer,
-	mongrel2, ortp
-
-2025.02.8, released November 20, 2025
-
-    Important / security related fixes:
-
-	- bind: CVE-2025-8677, CVE-2025-40778, CVE-2025-40780
-	- dante: CVE-2024-54662
-	- erlang: CVE-2024-53846, CVE-2025-4748, CVE-2025-26618, CVE-2025-30211,
-	          CVE-2025-32433, CVE-2025-46712, CVE-2025-48038,
-	          CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
-	- hostapd: CVE-2025-24912
-	- imagemagick: CVE-2025-62171
-	- iptraf-ng: CVE-2024-52949
-	- libarchive: CVE-2025-25724
-	- libglib2: CVE-2024-54662
-	- libvips: CVE-2025-29769, CVE-2025-59933
-	- libvpx: CVE-2025-5283
-	- libxslt: CVE-2025-24855, CVE-2024-55549
-	- mbedtls: CVE-2025-54764, CVE-2025-59438
-	- modsecurity2: CVE-2025-52891, CVE-2025-54571
-	- netdata: CVE-2023-22496, CVE-2023-22497
-	- poppler: CVE-2024-6239, CVE-2024-56378, CVE-2025-32364,
-	           CVE-2025-32365, CVE-2025-43903, CVE-2025-50420,
-	           CVE-2025-52886
-	- python3: gh-139312, gh-139700, gh-139400, gh-135661, gh-135661,
-	           gh-102555, gh-135462, gh-118350, gh-86155
-	- python-webpy: CVE-2025-3818
-	- redis: CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844
-	- samba: CVE-2025-3818, CVE-2025-10230
-	- shairport-sync: Upstream security fixes without CVE
-	- squid: CVE-2025-59362
-	- suricata: CVE-2024-37151, CVE-2024-38535
-	- tpm2-tss: CVE-2024-29040
-	- xerces: CVE-2024-23807
-	- zabbix: CVE-2025-27231, CVE-2025-27236, CVE-2025-27238, CVE-2025-49641
-	- zip: CVE-2018-13410
-
-	Infrastructure updates/fixes:
-
-	- Improved matching of CPE ID with NVD database, resulting in more
-	  accurate identification of CVEs.
-	- brmake: avoid garbled output with top-level parallel build
-
-	Updated / fixed packages: 4th, audit, bind, cmake, crun, dante,
-	ebtables, erlang, freeradius-server, gpsd, gstd, hostapd, imagemagick,
-	iptraf-ng, iozone, ledmon, libarchive, libcurl, libdbi-drivers,
-	libdisplay-info, libglib2, libgphoto2, libgtk3, libheif, libsemanage,
-	libshout, libsolv, libtpms, libvips, libvpx, libwpe, libxslt, linux,
-	linux-headers, live555, mbedtls, micropython, mjpg-streamer,
-	modsecurity2, netdata, netsnmp, poppler, python3, python-flask-cors,
-	python-webpy, quota, qt6multimedia, redis, refpolicy, samba4,
-	selinux-python, sexpect, shairport-sync, siproxd, sqlite, squid,
-	suricata, tor, tpm2-tss, waffle, webkitgtk, wireless-regdb, wpewebkit,
-	xerces, zabbix, zip
-
-	Removed package: ramspeed
-
-	Boards updated / fixed: beagleboneai, cubieboard1, cubieboard2,
-	stm32f429_disco_xip, stm32f746_disco_sd, stm32f769_disco_sd,
-
-	Test Improvements:
-
-	- Capture output of failing commands on host.
-
-2025.02.7, released October 11, 2025
-
-    Important / security related fixes:
-
-    - asterisk: CVE-2024-42491
-    - atop: CVE-2025-31160
-    - civetweb: CVE-2025-55763
-    - cjson: CVE-2025-57052
-    - connman: CVE-2025-32366, CVE-2025-32743
-    - cups: CVE-2025-58060, CVE-2025-58364
-    - exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
-             CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
-    - expat: CVE-2025-59375
-    - fastd: CVE-2025-24356
-    - fetchmail: CVE-2025-61962
-    - ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800, CVE-2025-59801
-    - imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005, CVE-2025-55160
-    - intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
-                       CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
-    - jasper: CVE-2023-51257, CVE-2025-8835
-    - libcurl: CVE-2025-10148, CVE-2025-9086
-    - libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
-    - libssh: CVE-2025-8114, CVE-2025-8277
-    - lua: CVE-2014-5461
-    - opencv4: CVE-2025-53644
-    - pcre2: CVE-2025-58050
-    - poco: CVE-2025-6375
-    - postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
-    - python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
-    - python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
-    - python-pip: CVE-2025-8869
-    - raptor: CVE-2024-57822, CVE-2024-57823
-    - sqlite: CVE-2025-6965
-    - syslog-ng: CVE-2024-47619
-    - tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
-    - udisks: CVE-2025-8067
-    - webkitgtk: CVE-2025-24189, CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
-      CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
-      CVE-2025-43240, CVE-2025-43265, CVE-2025-6558
-    - wireshark: CVE-2025-5601
-
-    Updated / fixed packages: asterisk, atop, boinc, civetweb, cjson,
-    connman, cpp-httplib, cups, cutekeyboard, ecryptfs-utils, exiv2, expat,
-    fastd, fetchmail, ghostscript, gnupg2, gnuplot, htpdate, imagemagick,
-    intel-microcode, iputils, jasper, jose, kodi, libcurl, libopenssl,
-    libssh, libxkbcommon, libxmlrpc, linux-firmware, linux-headers,
-    linuxptp, llvm-project, lua, luaossl, luvi, mariadb, micropython,
-    modsecurity2, opencv4, opencv4-contrib, openjpeg, pango, pcre2, poco,
-    postgresql, python-certifi, python-cryptography, python-django,
-    python-flask-cors, python-pip, python-pyopenssl, python-pytz, raptor,
-    rtl_433, ruby, samba4, sqlite, syslog-ng, sysprof, tiff, tor, uclibc,
-    udisks, upx, webkitgtk, wireshark, wlroots, x11r7, zziplib
-
-    Removed package: netstat-nat
-
-    Boards updated / fixed: beagleboneai, qemu/{x86, x86_64}, ti_am62x_sk
-    versal, zedboard
-
-    Boards removed: roseapplepi, atmel_sama5d3xek, at91sam9260eknf
-
-    Test Improvements:
-
-    - TestSWIPL: increase timeout value
-    - TestOpenJdk: remove stime() function call
-    - test_hardening: update toolchain to aarch64 for checksec tests
-    - test_docker_compose: update kernel & VM CPU
-    - TestZfsUclibc: use internal backend for uClibc-ng toolchain
-    - GitTestBase: remove git daemon due to Gitlab-CI security settings
-
-2025.02.6, released September 09, 2025
-
-	Important / security related fixes:
-
-	- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
-	    CVE-2025-5449, CVE-2025-5987
-	- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
-	- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
-	- python3: CVE-2025-8194
-	- libhtp: CVE-2025-53537
-	- tiff: CVE-2025-8176, CVE-2025-8177
-	- libglib2: CVE-2025-6052
-	- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
-	    CVE-2024-7541, CVE-2024-7542
-	- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
-	    CVE-2025-1376, CVE-2025-1377
-	- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
-	    CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
-	    CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
-	    CVE-2025-0689, CVE-2025-1125
-	- openjpeg: CVE-2025-54874
-	- go: CVE-2025-4674, CVE-2025-47907
-	- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
-	- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
-	- vorbis-tools: CVE-2023-43361
-	- quickjs: CVE-2025-46688
-	- libde265: CVE-2024-38949, CVE-2024-38950
-	- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
-	    CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
-	    CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
-	- ffmpeg: CVE-2023-6602
-	- lighttpd: CVE-2025-8671
-	- python-h2: CPE-2025-57804
-	- cpp-httplib: CVE-2025-46728
-	- iperf3: CVE-2025-54349, CVE-2025-54350
-
-	Removed package: liboauth, thttpd
-
-	Removed defconfig: at91sam9g20dfc, at91sam9g45m10ek,
-	at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
-	odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
-	pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
-	toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m, imx6ulz_bsh_smm_m2,
-
-	Test Improvements:
-
-	- test_gstreamer1: raise tesseract-ocr timeout to 15s
-	- test_wine: fix test after bootlin toolchains update
-	- test_numactl: fix test after bootlin toolchains update
-	- test_dpdk: fix test after bootlin toolchains update
-	- test_msr_tools: fix test after bootlin toolchains update
-	- test_dmidecode: fix test after bootlin toolchains update
-	- test_iso9660: use a more recent toolchain
-	- test_gruby: use glibc toolchain
-	- test_wget: replace thttpd by Busybox's httpd server
-	- test_libcurl: replace thttpd by Busybox's httpd server
-	- test_systemd_selinux: fix test after bootlin toolchains update
-
-	Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
-	libssh, glibc, libhtp, libapparmor, php-pecl-dbus, tini, snooze, ngrep,
-	libzenoh-pico, janet, nanocom, rtl8189es, gcc, ofono, python-numpy,
-	elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk, prboom,
-	setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
-	gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
-	gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
-	gstreamer1-editing-services, vorbis-tools, quickjs, libde265, vim,
-	ffmpeg, libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay,
-	libsvgtiny, libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2,
-	squid, ipmitool, ell, proftpd, liblog4c-localtime, wpewebkit, weston,
-	cpp-httplib, ipset, iperf3
-
-	Infrastructure updates/fixes:
-	- Various tweaks to utils/generate-cyclonedx for better SBOM
-	  compatibility and project name/version customization
-	- go: make pre-built compiler provide target support too
-	- test-pkg: add new option -T/--toolchain-name
-	- pkg-utils.mk: include package directory in show-info output
-	- bump-stable-kernel-versions: new tool
-
-	Boards updated / fixed:
-
-	- qemu_sh4*: switch back to disk emulation
-	- acmesystems_acqua_a5_*: update linux
-	- sipeed_licheepi_zero: update linux & uboot
-	- zynqmp: increase vfat partition to 64M
-	- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
-	- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
-	- ci20: U-Boot needs host-openssl
-
 2025.02.5, released August 11, 2025

    Important / security related fixes:
@@ -144,73 +144,7 @@ endif

 ###############################################################################

-comment "Legacy options removed in 2025.11.1"
-
-config BR2_PACKAGE_RPI_FIRMWARE_INSTALL_VCDBG
-	bool "rpi-firmware vcdbg option removed"
-	select BR2_LEGACY
-	help
-	  rpi-firmware upstream has dropped the vcdbg tool
-
-config BR2_PACKAGE_LIBDNET_PYTHON
-	bool "libdnet python module removed"
-	select BR2_LEGACY
-	help
-	  The libdnet Python module is no longer compatible with
-	  Python >= 3.13, so it had to be removed.
-
-config BR2_PACKAGE_OPENCV3_WITH_FFMPEG
-	bool "opencv3 ffmpeg support removed"
-	select BR2_LEGACY
-	help
-	  Support for OpenCV 3 ffmpeg support has been removed as it
-	  was no longer compatible with recent versions of ffmpeg.
-
-config BR2_PACKAGE_OPENCV3_WITH_PROTOBUF
-	bool "opencv3 protobuf support removed"
-	select BR2_LEGACY
-	help
-	  Support for OpenCV 3 protobuf support has been removed as it
-	  was no longer compatible with recent versions of protobuf.
-
-comment "Legacy options removed in 2025.11"
-
-config BR2_KERNEL_HEADERS_5_4
-	bool "kernel headers version 5.4.x are no longer supported"
-	select BR2_LEGACY
-	help
-	  Version 5.4.x of the Linux kernel headers are no longer
-	  maintained upstream and are now removed.
-
-config BR2_PACKAGE_LIBARGTABLE2
-	bool "libargtable2 has been removed"
-	select BR2_LEGACY
-	help
-	  libargtable2 is unmaintained and has been removed
-
-config BR2_PACKAGE_OLA
-	bool "ola has been removed"
-	select BR2_LEGACY
-	help
-	  ola is incompatible with current versions of protobuf
-
-config BR2_PACKAGE_BATMAN_ADV_NC
-	bool "batman-adv removed network coding"
-	select BR2_LEGACY
-	help
-	  batman-adv removed B.A.T.M.A.N. network coding
-
-config BR2_PACKAGE_DVBSNOOP
-	bool "dvbsnoop has been removed"
-	select BR2_LEGACY
-	help
-	  dvbsnoop is unmaintained and has been removed
-
-config BR2_PACKAGE_PROCRANK_LINUX
-	bool "procrank_linux has been removed"
-	select BR2_LEGACY
-	help
-	  procrank_linux is unmaintained and has been removed
+comment "Legacy options removed in 2025.08.3"

 config BR2_PACKAGE_MONGREL2
 	bool "mongrel2 has been removed"
@@ -218,12 +152,6 @@ config BR2_PACKAGE_MONGREL2
 	help
 	  mongrel2 is incompatible with MbedTLS 3.6 and has been removed

-config BR2_PACKAGE_EXPECT
-	bool "expect has been removed"
-	select BR2_LEGACY
-	help
-	  expect is unmaintained and has been removed
-
 config BR2_PACKAGE_BCTOOLBOX
 	bool "bctoolbox has been removed"
 	select BR2_LEGACY
@@ -272,13 +200,7 @@ config BR2_PACKAGE_LINPHONE
 	  no longer building. It can be re-added if someone volunteers
 	  to fix the issues, update the package and maintain it.

-config BR2_PACKAGE_LIBJWT
-	bool "libjwt has been removed"
-	select BR2_LEGACY
-	help
-	  The only dependee of libjwt, asterisk, is incompatible with
-	  version 3 so the version bundled with asterisk is used and
-	  this package has been removed.
+comment "Legacy options removed in 2025.08.2"

 config BR2_PACKAGE_RAMSPEED
 	bool "ramspeed has been removed"
@@ -287,215 +209,6 @@ config BR2_PACKAGE_RAMSPEED
 	  The ramspeed package was removed as it is not maintained
 	  anymore and the upstream repo is gone.

-config BR2_PACKAGE_LESSTIF
-	bool "lesstif has been removed"
-	select BR2_LEGACY
-	help
-	  lesstif is unmaintained and has been removed
-
-config BR2_KERNEL_HEADERS_6_16
-	bool "kernel headers version 6.16.x are no longer supported"
-	select BR2_LEGACY
-	help
-	  Version 6.16.x of the Linux kernel headers are no longer
-	  maintained upstream and are now removed.
-
-config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_1CK
-	bool "This firmware has been removed"
-	select BR2_LEGACY
-	help
-	  This firmware has been removed from Murata package
-
-config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP
-	bool "BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP has been renamed"
-	select BR2_LEGACY
-	select BR2_PACKAGE_MURATA_CYW_FW_CYW4339
-	help
-	  The option has been renamed to
-	  BR2_PACKAGE_MURATA_CYW_FW_CYW4339
-
-config BR2_PACKAGE_LIBBSON
-	bool "libbson has been removed"
-	select BR2_LEGACY
-	help
-	  libbson is officially deprecated upstream and has been removed
-
-config BR2_TARGET_ROOTFS_AXFS
-	bool "AXFS root filesystem has been removed"
-	select BR2_LEGACY
-	help
-	  AXFS root filesystem support has been removed.
-
-config BR2_PACKAGE_LOGSURFER
-	bool "logsurfer has been removed"
-	select BR2_LEGACY
-	help
-	  Logsurfer last updates was on 2011 and fails to build with
-	  GCC14.
-
-config BR2_LINUX_KERNEL_EXT_FBTFT
-	bool "FB TFT drivers are deprecated"
-	select BR2_LEGACY
-	help
-	  FB TFT drivers were only needed for linux kernels until v3.19,
-	  since v4.0 the drivers are included in the staging area.
-
-config BR2_PACKAGE_DMENU_WAYLAND
-	bool "dmenu-wayland has been removed"
-	select BR2_LEGACY
-	help
-	  The package has been abandoned for several years.
-	  The only package that previously relied on dmenu-wayland
-	  was sway, and that now relies on wmenu. Please select
-	  wmenu instead.
-
-config BR2_PACKAGE_SYLPHEED
-	bool "sylpheed has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the sylpheed package has been
-	  removed.
-
-config BR2_PACKAGE_PINENTRY_GTK2
-	bool "gtk2 backend of pinentry has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk2 backend of pinentry
-	  has been removed.
-
-config BR2_PACKAGE_OPENCV4_WITH_GTK
-	bool "opencv4 gtk support has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk support of opencv4
-	  has been removed. gtk3 support is still available.
-
-config BR2_PACKAGE_OPENCV3_WITH_GTK
-	bool "opencv3 gtk support has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk support of opencv3
-	  has been removed. gtk3 support is still available.
-
-config BR2_PACKAGE_NETSURF_GTK
-	bool "gtk frontend of netsurf has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk frontend of netsurf
-	  has been removed. The gtk3 frontend can be used instead for
-	  example.
-
-config BR2_PACKAGE_METACITY
-	bool "metacity has been removed"
-	select BR2_LEGACY
-	help
-	  The metacity package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_LIBSEXY
-	bool "libsexy has been removed"
-	select BR2_LEGACY
-	help
-	  The libsexy package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_LIBGLADE
-	bool "libglade has been removed"
-	select BR2_LEGACY
-	help
-	  The libglade package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_LEAFPAD
-	bool "leafpad has been removed"
-	select BR2_LEGACY
-	help
-	  The leafpad package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_GTKPERF
-	bool "gtkperf has been removed"
-	select BR2_LEGACY
-	help
-	  The gtkperf package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_GTK2_ENGINES
-	bool "gtk2-engines has been removed"
-	select BR2_LEGACY
-	help
-	  The gtk2-engines package has been removed, as libgtk2 has
-	  been removed as well.
-
-config BR2_PACKAGE_GKRELLM_CLIENT
-	bool "gkrellm client has been removed"
-	select BR2_LEGACY
-	help
-	  The gkrellm client option has been removed, as it required
-	  libgtk2, which was removed from Buildroot.
-
-config BR2_PACKAGE_CWIID_WMGUI
-	bool "cwiid wmgui has been removed"
-	select BR2_LEGACY
-	help
-	  The wmgui part of cwiid required libgtk2, which has been
-	  removed from Buildroot.
-
-config BR2_LINUX_KERNEL_EXT_AUFS
-	bool "Aufs Filesystem Module patch has been removed"
-	select BR2_LEGACY
-	help
-	  aufs kernel module patch is unmaintained and has been
-	  removed.
-
-config BR2_PACKAGE_AUFS_UTIL
-	bool "aufs-util has been removed"
-	select BR2_LEGACY
-	help
-	  aufs-util package is unmaintained and has been removed.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARMEB
-	bool "Linaro armeb 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro armeb 2018.05 is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARM
-	bool "Linaro ARM 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro ARM 2018.05 is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64_BE
-	bool "Linaro AArch64 BE 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro AArch64 2018.05 BE is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64
-	bool "Linaro AArch64 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro AArch64 2018.05 is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS
-	bool "Sourcery CodeBench MIPS external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Sourcery CodeBench MIPS 2016.05 is no longer maintained
-	  and has been removed from Buildroot.
-
-config BR2_LINUX_KERNEL_EXT_EV3DEV_LINUX_DRIVERS
-	bool "ev3dev Linux drivers have been removed"
-	select BR2_LEGACY
-	help
-	  Linux drivers for LEGO MINDSTORMS EV3 from the ev3dev project
-	  are targeting an outdated kernel which is no longer supported.
-
 comment "Legacy options removed in 2025.08"

 config BR2_PACKAGE_NETSTAT_NAT
@@ -86,10 +86,6 @@ F:	package/modem-manager/
 N:	Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
 F:	package/cpp-httplib/

-N:	Alexander Shirokov <shirokovalexs@gmail.com>
-F:	package/broot/
-F:	package/nnn/
-
 N:	Alessandro Partesotti <a.partesotti@gmail.com>
 F:	package/oatpp/

@@ -149,9 +145,6 @@ F:	configs/cubieboard2_defconfig
 N:	Alexey Lukyanchuk <skif@skif-web.ru>
 F:	package/zabbix/

-N: 	Alexis Lothoré <alexis.lothore@bootlin.com>
-F: 	package/python-scp
-
 N:	Alistair Francis <alistair@alistair23.me>
 F:	board/sifive/
 F:	boot/opensbi/
@@ -177,9 +170,6 @@ F:	package/libkrb5/
 F:	package/p7zip/
 F:	package/wine/

-N:	Andrea Ricchi <andrea.ricchi@amarulasolutions.com>
-F:	package/cutekeyboard/
-
 N:	Andreas Klinger <ak@it-klinger.de>
 F:	package/ply/

@@ -420,7 +410,6 @@ F:	package/libglew/
 F:	package/libglu/
 F:	package/libhdhomerun/
 F:	package/libheif/
-F:	package/libid3tag/
 F:	package/libilbc/
 F:	package/libldns/
 F:	package/libmicrohttpd/
@@ -583,6 +572,7 @@ F:	package/jailhouse/
 F:	package/sunxi-boards/

 N:	Carsten Schoenert <c.schoenert@gmail.com>
+F:	package/dvbsnoop/
 F:	package/libdvbsi/
 F:	package/libsvg/
 F:	package/libsvg-cairo/
@@ -839,7 +829,9 @@ F:	package/libtalloc/
 N:	David Lechner <david@lechnology.com>
 F:	board/lego/ev3/
 F:	configs/lego_ev3_defconfig
+F:	linux/linux-ext-ev3dev-linux-drivers.mk
 F:	package/brickd/
+F:	package/ev3dev-linux-drivers/

 N:	David Pierret <david.pierret@smile.fr>
 F:	package/bat/
@@ -879,7 +871,6 @@ N:	Dimitar Tomov <dimi@tpm.dev>
 F:	package/wolftpm/

 N:	Dimitrios Siganos <dimitris@siganos.org>
-F:	package/bvi/
 F:	package/wireless-regdb/

 N:	Dmitry Chestnykh <dm.chestnykh@gmail.com>
@@ -887,6 +878,9 @@ F:	board/qemu/sparc-ss10/
 F:	configs/qemu_sparc_ss10_defconfig
 F:	package/uclibc-ng-test/

+N:	Dominik Faessler <faessler@was.ch>
+F:	package/logsurfer/
+
 N:	Dominik Michael Rauh <dmrauh@posteo.de>
 F:	package/gdal/

@@ -1049,6 +1043,7 @@ F:	package/libcue/
 F:	package/libebml/
 F:	package/libgee/
 F:	package/libglib2/
+F:	package/libgtk2/
 F:	package/libgtk3/
 F:	package/libhtp/
 F:	package/libidn/
@@ -1116,10 +1111,8 @@ F:	package/python-aiomqtt/
 F:	package/python-pyasynchat/
 F:	package/python-pyasyncore/
 F:	support/testing/tests/package/sample_python_networkmanager_goi.py
-F:	support/testing/tests/package/sample_python_pyroute2.py
 F:	support/testing/tests/package/test_nftables.py
 F:	support/testing/tests/package/test_python_networkmanager_goi.py
-F:	support/testing/tests/package/test_python_pyroute2.py

 N:	Flávio Tapajós <flavio.tapajos@newtesc.com.br>
 F:	configs/asus_tinker-s_rk3288_defconfig
@@ -1154,25 +1147,33 @@ F:	configs/sipeed_licheepi_nano_defconfig
 F:	configs/visionfive2_defconfig

 N:	Francois Perrad <francois.perrad@gadz.org>
+F:	board/freescale/ls1028ardb/
 F:	board/olimex/a20_olinuxino
 F:	board/olimex/imx233_olinuxino/
 F:	board/olimex/stmp1_olinuxino/
+F:	configs/ls1028ardb_defconfig
 F:	configs/olimex_a20_olinuxino_*
 F:	configs/olimex_imx233_olinuxino_defconfig
 F:	configs/olimex_stmp157_olinuxino_lime_defconfig
 F:	package/4th/
 F:	package/cgilua/
+F:	package/chipmunk/
+F:	package/cog/
 F:	package/collectl/
 F:	package/copas/
 F:	package/coxpcall/
 F:	package/dado/
 F:	package/ficl/
+F:	package/graphene/
 F:	package/janet/
+F:	package/libgtk4/
 F:	package/libtomcrypt/
 F:	package/libtommath/
+F:	package/libwpe/
 F:	package/linenoise/
 F:	package/ljlinenoise/
 F:	package/lua-inotify/
+F:	package/lmdb/
 F:	package/lpeg/
 F:	package/lpty/
 F:	package/lrandom/
@@ -1181,11 +1182,16 @@ F:	package/lua*
 F:	package/lynis/
 F:	package/lzlib/
 F:	package/moarvm/
+F:	package/mstpd/
+F:	package/netsurf/
 F:	package/perl*
 F:	package/pkg-perl.mk
 F:	package/pkg-luarocks.mk
 F:	package/quickjs/
 F:	package/rings/
+F:	package/tekui/
+F:	package/wpebackend-fdo/
+F:	package/wpewebkit/
 F:	package/wsapi/
 F:	package/wsapi-fcgi/
 F:	package/wsapi-xavante/
@@ -1279,7 +1285,6 @@ F:	configs/rockpro64_defconfig
 F:	package/at/
 F:	package/binutils/
 F:	package/cryptsetup/
-F:	package/dash/
 F:	package/erlang-jiffy/
 F:	package/esp-hosted/
 F:	package/gcc/
@@ -1290,7 +1295,6 @@ F:	package/liblo/
 F:	package/libnspr/
 F:	package/libnss/
 F:	package/libnvme/
-F:	package/libtirpc/
 F:	package/libtraceevent/
 F:	package/libtracefs
 F:	package/linux-tools/linux-tool-rtla.mk.in
@@ -1299,12 +1303,10 @@ F:	package/minicom/
 F:	package/mongoose/
 F:	package/mmc-utils/
 F:	package/nfs-utils/
-F:	package/putty/
 F:	package/python-libconf/
 F:	package/python-uvloop/
 F:	package/qt5/
 F:	package/rockchip-mali/
-F:	package/rpcbind/
 F:	package/rtl8188eu/
 F:	package/rtl8189es/
 F:	package/rtl8192eu/
@@ -1318,13 +1320,9 @@ F:	package/sunxi-mali-utgard-driver/
 F:	package/sunxi-tools/
 F:	package/swugenerator/
 F:	package/swupdate/
-F:	package/tmux/
 F:	package/trace-cmd/
 F:	package/udisks/
-F:	package/util-linux/
-F:	package/vim/
 F:	package/wilc-driver/
-F:	package/zlib-ng/
 F:	toolchain/

 N:	Graeme Smecher <gsmecher@threespeedlogic.com>
@@ -1746,7 +1744,6 @@ F:	package/at-spi2-core/
 F:	package/earlyoom/
 F:	package/gconf/
 F:	package/libnss/
-F:	package/llama-cpp/
 F:	package/llvm-project/clang/
 F:	package/llvm-project/lld/
 F:	package/llvm-project/llvm/
@@ -1811,6 +1808,7 @@ F:	package/libopenmpt/
 F:	package/mokutil/
 F:	package/oath-toolkit/
 F:	package/octave/
+F:	package/ola/
 F:	package/openblas/
 F:	package/opencsd/
 F:	package/openmpi/
@@ -1884,7 +1882,6 @@ F:	support/testing/tests/package/test_exfatprogs.py
 F:	support/testing/tests/package/test_exfatprogs/
 F:	support/testing/tests/package/test_file.py
 F:	support/testing/tests/package/test_file/
-F:	support/testing/tests/package/test_flac.py
 F:	support/testing/tests/package/test_fluidsynth.py
 F:	support/testing/tests/package/test_fluidsynth/
 F:	support/testing/tests/package/test_fping.py
@@ -1922,8 +1919,6 @@ F:	support/testing/tests/package/test_kmod.py
 F:	support/testing/tests/package/test_kmod/
 F:	support/testing/tests/package/test_kmscube.py
 F:	support/testing/tests/package/test_kmscube/
-F:	support/testing/tests/package/test_kvmtool.py
-F:	support/testing/tests/package/test_kvmtool/
 F:	support/testing/tests/package/test_lame.py
 F:	support/testing/tests/package/test_less.py
 F:	support/testing/tests/package/test_libcamera.py
@@ -1934,7 +1929,6 @@ F:	support/testing/tests/package/test_libjxl.py
 F:	support/testing/tests/package/test_lighttpd.py
 F:	support/testing/tests/package/test_links.py
 F:	support/testing/tests/package/test_links/
-F:	support/testing/tests/package/test_llama_cpp.py
 F:	support/testing/tests/package/test_lrzip.py
 F:	support/testing/tests/package/test_lrzsz.py
 F:	support/testing/tests/package/test_ltp_testsuite.py
@@ -1969,9 +1963,10 @@ F:	support/testing/tests/package/test_numactl.py
 F:	support/testing/tests/package/test_numactl/
 F:	support/testing/tests/package/test_oath_toolkit.py
 F:	support/testing/tests/package/test_octave.py
+F:	support/testing/tests/package/test_ola.py
+F:	support/testing/tests/package/test_ola/
 F:	support/testing/tests/package/test_openblas.py
 F:	support/testing/tests/package/test_openocd.py
-F:	support/testing/tests/package/test_opus_tools.py
 F:	support/testing/tests/package/test_parted.py
 F:	support/testing/tests/package/test_patch.py
 F:	support/testing/tests/package/test_patch/
@@ -2013,7 +2008,6 @@ F:	support/testing/tests/package/test_tcl.py
 F:	support/testing/tests/package/test_tcl/
 F:	support/testing/tests/package/test_tcpdump.py
 F:	support/testing/tests/package/test_tesseract_ocr.py
-F:	support/testing/tests/package/test_tio.py
 F:	support/testing/tests/package/test_trace_cmd.py
 F:	support/testing/tests/package/test_trace_cmd/
 F:	support/testing/tests/package/test_tree.py
@@ -2275,7 +2269,6 @@ F:	package/python-typing-inspection/
 F:	package/python-tzlocal/
 F:	package/python-sdbus-modemmanager/
 F:	package/python-waitress/
-F:	package/python-whitenoise/
 F:	support/testing/tests/package/test_python_apscheduler.py
 F:	support/testing/tests/package/test_python_crc.py
 F:	support/testing/tests/package/test_python_django.py
@@ -2286,7 +2279,6 @@ F:	support/testing/tests/package/test_python_ruamel_yaml.py
 F:	support/testing/tests/package/test_python_sdbus_modemmanager.py
 F:	support/testing/tests/package/test_python_tzlocal.py
 F:	support/testing/tests/package/test_python_waitress.py
-F:	support/testing/tests/package/test_python_whitenoise.py
 F:	support/testing/tests/package/sample_python_apscheduler.py
 F:	support/testing/tests/package/sample_python_crc.py
 F:	support/testing/tests/package/sample_python_django.py
@@ -2770,6 +2762,9 @@ F:	package/libdvbpsi/
 F:	package/mraa/
 F:	package/synergy/

+N:	Prabhu Sannachi <prabhu.sannachi@collins.com>
+F:	package/redis-plus-plus/
+
 N:	Qais Yousef <qais.yousef@arm.com>
 F:	package/bpftrace/

@@ -2986,6 +2981,7 @@ F:	package/wlr-randr/

 N:	Semyon Kolganov <semenak94@mail.ru>
 F:	package/fmt/
+F:	package/libbson/
 F:	package/lua-resty-http/
 F:	package/mpir/

@@ -3170,6 +3166,7 @@ F:	package/x265/
 N:	Thomas Bonnefille <thomas.bonnefille@bootlin.com>
 F:	board/pine64/star64
 F:	configs/pine64_star64_defconfig
+F:	package/starfive-spltool/

 N:	Thomas Claveirole <thomas.claveirole@green-communications.fr>
 F:	package/fcgiwrap/
@@ -3241,11 +3238,8 @@ F:	package/pkg-autotools.mk
 F:	package/pkg-generic.mk
 F:	package/python3/
 F:	package/python-augeas/
-F:	package/python-crccheck/
 F:	package/python-flask-expects-json/
-F:	package/python-fs/
 F:	package/python-git/
-F:	package/python-pyfatfs/
 F:	package/python-qrcode/
 F:	package/python-serial/
 F:	package/python-unittest-xml-reporting/
@@ -3257,7 +3251,6 @@ F:	package/rt-tests/
 F:	package/rtc-tools/
 F:	package/sam-ba/
 F:	package/scons/
-F:	package/snagboot/
 F:	package/squashfs/
 F:	package/tinifier/
 F:	package/wayland/
@@ -3274,17 +3267,10 @@ F:	support/testing/tests/package/sample_python_git.py
 F:	support/testing/tests/package/sample_python_unittest_xml_reporting.py
 F:	support/testing/tests/package/test_nodejs.py
 F:	support/testing/tests/package/test_python_augeas.py
-F:	support/testing/tests/package/test_python_crccheck.py
 F:	support/testing/tests/package/test_python_flask.py
 F:	support/testing/tests/package/test_python_flask_expects_json.py
-F:	support/testing/tests/package/test_python_fs.py
 F:	support/testing/tests/package/test_python_git.py
-F:	support/testing/tests/package/test_python_pyfatfs.py
-F:	support/testing/tests/package/test_python_pyusb.py
-F:	support/testing/tests/package/test_python_serial.py
-F:	support/testing/tests/package/test_snagboot.py
 F:	support/testing/tests/package/test_python_unittest_xml_reporting.py
-F:	support/testing/tests/package/test_python_xmodem.py
 F:	support/testing/tests/toolchain/test_external_arm.py
 F:	toolchain/

@@ -3350,12 +3336,10 @@ F:	package/utp_com/

 N:	Vincent Stehlé <vincent.stehle@arm.com>
 F:	board/arm/fvp-ebbr/
-F:	board/compulab/iot-gate-imx8-ebbr/
 F:	board/pine64/rockpro64-ebbr/
 F:	board/qemu/aarch64-ebbr/
 F:	board/qemu/arm-ebbr/
 F:	configs/arm_fvp_ebbr_defconfig
-F:	configs/iot-gate-imx8_ebbr_defconfig
 F:	configs/qemu_aarch64_ebbr_defconfig
 F:	configs/qemu_arm_ebbr_defconfig
 F:	configs/rockpro64_ebbr_defconfig
@@ -3406,7 +3390,7 @@ F:	configs/stm32f746_disco_sd_defconfig
 F:	package/asterisk/
 F:	package/evilwm/
 F:	package/fbv/
-F:	package/libpam-pkcs11/
+F:	package/libjwt/
 F:	package/mksh/
 F:	package/ruby/
 F:	package/uclibc/
@@ -92,9 +92,9 @@ all:
 .PHONY: all

 # Set and export the version string
-export BR2_VERSION := 2025.11.1
+export BR2_VERSION := 2025.08.3
 # Actual time the release is cut (for reproducible builds)
-BR2_VERSION_EPOCH = 1768938600
+BR2_VERSION_EPOCH = 1765441500

 # Save running make version since it's clobbered by the make package
 RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -781,12 +781,19 @@ endif

 # For a merged /usr, ensure that /lib, /bin and /sbin and their /usr
 # counterparts are appropriately setup as symlinks ones to the others.
-	@$(call MESSAGE,"Sanity check in overlays $(call qstrip,$(BR2_ROOTFS_OVERLAY))")
-	support/scripts/check-merged \
-		-t overlay \
-		$(if $(BR2_ROOTFS_MERGED_USR),-u) \
-		$(if $(BR2_ROOTFS_MERGED_BIN),-b) \
-		$(call qstrip,$(BR2_ROOTFS_OVERLAY))
+ifeq ($(BR2_ROOTFS_MERGED_USR),y)
+
+	$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
+		@$(call MESSAGE,"Sanity check in overlay $(d)")$(sep) \
+		$(Q)not_merged_dirs="$$(support/scripts/check-merged-usr.sh $(d))"; \
+		test -n "$$not_merged_dirs" && { \
+			echo "ERROR: The overlay in $(d) is not" \
+				"using a merged /usr for the following directories:" \
+				$$not_merged_dirs; \
+			exit 1; \
+		} || true$(sep))
+
+endif # merged /usr

 	$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
 		@$(call MESSAGE,"Copying overlay $(d)")$(sep) \
@@ -3,7 +3,7 @@ Linux systems through cross-compilation.

 The documentation can be found in docs/manual. You can generate a text
 document with 'make manual-text' and read output/docs/manual/manual.text.
-Online documentation can be found at https://buildroot.org/docs.html
+Online documentation can be found at http://buildroot.org/docs.html

 To build and use the buildroot stuff, do the following:

@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  c71af3d2c86c0a0deca4f54b51d1c35217082b030052cc3513dc42e852652733  linux-v6.0.y-andes.tar.gz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  d11702103f177a2914e94eec57ce5ed820296d874f6b6525c4482e55d71a3667  opensbi-1.6.tar.gz
@@ -0,0 +1,38 @@
+From 16aad5594e08550295ea3c12c1c9ed6f64774748 Mon Sep 17 00:00:00 2001
+From: Rick Chen <rick@andestech.com>
+Date: Tue, 29 Mar 2022 13:41:10 +0800
+Subject: [PATCH] mmc: ftsdc010_mci: Support DTS of ftsdc010 driver for
+ generic dma
+
+The ftsdc010 driver has been implemented for generic dma in Linux
+kernel. And its compatible is andestech,atfsdc010g to distinguish
+the legacy andestech,atfsdc010 which is not for generic dma.
+
+Althought the ftsdc010_mci driver in U-Boot does not use dma, but
+it still can work well with the mmc node for generic dma. So add
+the compatible string to support it.
+
+Signed-off-by: Rick Chen <rick@andestech.com>
+
+Upstream-Status: Pending
+
+Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
+---
+ drivers/mmc/ftsdc010_mci.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/drivers/mmc/ftsdc010_mci.c b/drivers/mmc/ftsdc010_mci.c
+index 570d54cf9d..65b1d447a8 100644
+--- a/drivers/mmc/ftsdc010_mci.c
+++ b/drivers/mmc/ftsdc010_mci.c
+@@ -460,6 +460,7 @@ int ftsdc010_mmc_bind(struct udevice *dev)
+ 
+ static const struct udevice_id ftsdc010_mmc_ids[] = {
+ 	{ .compatible = "andestech,atfsdc010" },
+	{ .compatible = "andestech,atfsdc010g" },
+ 	{ }
+ };
+ 
+-- 
+2.34.1
+
@@ -0,0 +1,42 @@
+From 933ad8a59f7fd9b2088badc3e97167d750a40b5a Mon Sep 17 00:00:00 2001
+From: Bin Meng <bmeng.cn@gmail.com>
+Date: Mon, 12 Jul 2021 11:52:31 +0800
+Subject: [PATCH] spl: Align device tree blob address at 8-byte boundary
+
+Since libfdt v1.6.1, a new requirement on the device tree address via:
+
+  commit 5e735860c478 ("libfdt: Check for 8-byte address alignment in fdt_ro_probe_()")
+
+must be met that the device tree must be loaded in to memory at an
+8-byte aligned address.
+
+Signed-off-by: Bin Meng <bmeng.cn@gmail.com>
+
+This patch was imported from U-boot patchwork:
+https://patchwork.ozlabs.org/project/uboot/patch/20210712035231.26475-1-bmeng.cn@gmail.com/
+
+Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
+---
+ common/spl/spl_fit.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/common/spl/spl_fit.c b/common/spl/spl_fit.c
+index a35be529..a76ad14a 100644
+--- a/common/spl/spl_fit.c
+++ b/common/spl/spl_fit.c
+@@ -382,6 +382,12 @@ static int spl_fit_append_fdt(struct spl_image_info *spl_image,
+ 	 */
+ 	image_info.load_addr = spl_image->load_addr + spl_image->size;
+ 
+	/*
+	 * Since libfdt v1.6.1, the device tree must be loaded in to memory
+	 * at an 8-byte aligned address.
+	 */
+	image_info.load_addr = roundup(image_info.load_addr, 8);
+
+ 	/* Figure out which device tree the board wants to use */
+ 	node = spl_fit_get_image_node(ctx, FIT_FDT_PROP, index++);
+ 	if (node < 0) {
+-- 
+2.34.1
+
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -30,11 +30,11 @@ image flash.img {
 	partition fitimage {
 		image = "image.itb"
 		offset = 512K
-		size = 7000K
+		size = 4352K
 	}

 	partition spare {
-		offset = 7512K
-		size =  25256K
+		offset = 4864K
+		size = 27904K
 	}
 }
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81  linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81  linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  16da36d1832f058cf1a6673b6a2eedeef1260576c15e76c4998e30d0fb13d339  uboot-66672e5af36fe294df56f8e7942069e3909f3790-git4.tar.gz
@@ -3,8 +3,8 @@
 BOARD_DIR="$(dirname $0)"
 mkimage=$HOST_DIR/bin/mkimage

-BOARD_DT=$(sed -nr \
-           -e 's|^BR2_LINUX_KERNEL_INTREE_DTS_NAME="(aspeed/)?([a-z0-9\-]*).*"$|\2|p' \
+BOARD_DT=$(sed -n \
+           's/^BR2_LINUX_KERNEL_INTREE_DTS_NAME="\([a-z0-9\-]*\).*"$/\1/p' \
           ${BR2_CONFIG})

 sed -e "s/%BOARD_DTB%/${BOARD_DT}.dtb/" \
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,6 +1,6 @@
 #!/bin/sh
-BOARD_DIR="$(dirname "$0")"
+BOARD_DIR="$(dirname $0)"

-cp "${BOARD_DIR}/uEnv.txt" "${BINARIES_DIR}/uEnv.txt"
+cp $BOARD_DIR/uEnv.txt $BINARIES_DIR/uEnv.txt

-install -m 0644 -D "${BOARD_DIR}/extlinux.conf" "${BINARIES_DIR}/extlinux/extlinux.conf"
+install -m 0644 -D $BOARD_DIR/extlinux.conf $BINARIES_DIR/extlinux/extlinux.conf
@@ -19,7 +19,7 @@ image sdcard.img {
 	partition u-boot {
 		partition-type = 0xC
 		bootable = "true"
-		image = "boot.vfat"
+                image = "boot.vfat"
 	}

 	partition rootfs {
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,45 +0,0 @@
-image efi-part.vfat {
-	vfat {
-		file EFI {
-			image = "efi-part/EFI"
-		}
-
-		file Image {
-			image = "Image"
-		}
-	}
-
-	size = 64M
-}
-
-image disk.img {
-	hdimage {
-		partition-table-type = "gpt"
-	}
-
-	# When in eMMC user data, this protects U-Boot environment
-	partition env {
-		partition-type-uuid = u-boot-env
-		offset = 17K
-		size = 16K
-	}
-
-	# This allows to boot from recovery SD card
-	partition firmware {
-		image = "flash.bin"
-		# Linux reserved
-		partition-type-uuid = 8DA63339-0007-60C0-C436-083AC8230908
-		offset = 33K
-	}
-
-	partition boot {
-		image = "efi-part.vfat"
-		partition-type-uuid = esp
-		bootable = true
-	}
-
-	partition root {
-		partition-type-uuid = root-arm64
-		image = "rootfs.ext2"
-	}
-}
@@ -1,6 +0,0 @@
-set default="0"
-set timeout="5"
-
-menuentry "Buildroot" {
-	linux /Image root=PARTLABEL=root rootwait
-}
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  e11880bf39dabfcb5945b58e848ddba661a1cd92425a997c626dec62b2dac6a9  arm-trusted-firmware-v2.13-git4.tar.gz
@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  231311bd7084dc3129944d26bb43be6ff837da82fb2104a67704aebca8bfa69f  linux-6.16.8.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  e6c6b93e2be417df57ceb05a2eb6505744e3fbdd3b2ae5e5bf79bf6028b6f84d  optee-client-4.7.0.tar.gz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  976b9c184678516038d4e79766608e81d10bf136f76fd0db2dc48f90f994fbd9  optee-os-4.7.0.tar.gz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,69 +0,0 @@
-#!/bin/sh
-set -eux
-
-BOARD_DIR=$(dirname "$0")
-
-# Override the default GRUB configuration file with our own.
-cp -vf "${BOARD_DIR}/grub.cfg" "${BINARIES_DIR}/efi-part/EFI/BOOT/grub.cfg"
-
-BINMAN_DIR="$BINARIES_DIR/binman"
-BINMAN_DTB="$BINMAN_DIR/u-boot.dtb"
-UBOOT_DIR=$(find "$BUILD_DIR" -maxdepth 1 -type d -name 'uboot-*')
-
-# Adjust binman dtb.
-rm -fr "$BINMAN_DIR"
-mkdir -v "$BINMAN_DIR"
-cp -v "$UBOOT_DIR/u-boot.dtb" "$BINMAN_DTB"
-# Add the fip image to the list of loadables.
-fdtput -t s "$BINMAN_DTB" /binman/section/fit/configurations/@config-SEQ loadables atf fip
-# Remove the tee node to avoid duplicate, as it is in the FIP image.
-fdtput --remove "$BINMAN_DTB" /binman/section/fit/images/tee
-
-# Generate flash image with binman.
-# We do this here to break the build dependency loop involving tf-a, op-tee, and
-# u-boot.
-# We use BL2 instead of BL31 in this configuration.
-(cd "${UBOOT_DIR}" && \
-./tools/binman/binman \
-	--toolpath ./tools \
-	-v5 \
-	build \
-	-u \
-	-d "$BINMAN_DTB" \
-	-O . \
-	-m \
-	--allow-missing \
-	--fake-ext-blobs \
-	-I "$BINMAN_DIR" \
-	-I . \
-	-I ./board/compulab/imx8mm-cl-iot-gate \
-	-I arch/arm/dts \
-	-a of-list="imx8mm-cl-iot-gate-optee" \
-	-I "$BINARIES_DIR" \
-	-a atf-bl31-path=bl2.bin \
-	-a tee-os-path= \
-	-a ti-dm-path= \
-	-a opensbi-path= \
-	-a default-dt="imx8mm-cl-iot-gate-optee" \
-	-a scp-path= \
-	-a rockchip-tpl-path= \
-	-a spl-bss-pad= \
-	-a tpl-bss-pad=1 \
-	-a vpl-bss-pad=1 \
-	-a spl-dtb=y \
-	-a tpl-dtb= \
-	-a vpl-dtb= \
-	-a pre-load-key-path= \
-	-a of-spl-remove-props="interrupt-parent interrupts" \
-	)
-
-# Copy the flash image.
-cp -v "$UBOOT_DIR/flash.bin" "$BINARIES_DIR/"
-
-# Verify that it will fit in the eMMC boot partition.
-size=$(du -b "$BINARIES_DIR/flash.bin" |cut -f 1)
-
-if [ "$size" -gt 4160512 ]; then
-	echo "Flash image is too big! (${size} bytes)" >&2
-	exit 1
-fi
@@ -1,131 +0,0 @@
-Introduction
-============
-
-The iot-gate-imx8_ebbr_defconfig is meant to illustrate some aspects of the Arm
-EBBR specification[1] and the Arm SystemReady Devicetree band[2].
-It allows building an AArch64 disk image with a U-Boot based firmware
-implementing the subset of UEFI defined by EBBR, as well as a Linux OS booting
-with UEFI, to run on the Compulab IOT-GATE-iMX8. [3]
-
-This configuration is not related with the official BSP from Compulab. [4]
-
-Building
-========
-
-  $ make iot-gate-imx8_ebbr_defconfig
-  $ make
-
-Generated files under output/images/:
-
-* disk.img: An eMMC or USB key disk image comprising TF-A, OP-TEE, the U-Boot
-  bootloader, the GRUB bootloader, the Linux kernel and the root filesystem.
-
-* flash.bin: A firmware image suitable for flashing in eMMC boot partition
-  comprising TF-A, OP-TEE and the U-Boot bootloader.
-
-Running
-=======
-
-Before flashing the firmware to eMMC, make sure that you have the IOTG-ACC-M2SD
-M.2 to SD adapter for recovery and prepare a recovery SD card. [5]
-Insert the SD card and the M.2 adapter.
-
-Prepare a USB key on a PC:
-
-  # dd if=output/images/disk.img of=<USB key device> ; sync
-
-Insert the USB key, close jumper E1 on the board to select recovery boot,
-connect to the UART console on the micro USB connector (a Silicon Labs CP2104
-UART bridge) with baudrate 115200, power on the board and break to U-Boot
-prompt.
-
-Flash the firmware from the USB key to the eMMC boot partition:
-
-  u-boot=> usb start
-  u-boot=> usb dev 0
-  u-boot=> usb read ${loadaddr} 0x42 0x1fbe
-  u-boot=> mmc dev 2 1
-  u-boot=> mmc write ${loadaddr} 0x42 0x1fbe
-  u-boot=> mmc partconf 2 0 1 0
-
-Power off the board, remove jumper E1 and the M.2 SD card adapter, then restart
-the board; it should boot to Linux, with the root filesystem on the USB key.
-
-Other setups are also possible, with the firmware and/or the root filesystem in
-the eMMC user data. The firmware binary is also available as flash.bin for
-convenience, to allow network download for example.
-
-With the firmware in the eMMC boot partition, it is possible to install or run
-another OS supporting the EBBR specification.
-
-The image generated by the aarch64_efi_defconfig, the images from Linux
-distributions such as Debian, Fedora, openSUSE, Ubuntu, OpenWrt and Yocto, and
-the Arm ACS Devicetree images[6] are examples of compatible OS images.
-
-When installing other OSes to eMMC, it is recommended to protect the first 32KB
-of the user data with a partition, as this is where the U-Boot environment can
-be saved.
-
-Firmware details
-================
-
-Noteworthy firmware features:
-
- TF-A, OP-TEE & U-Boot
- UEFI, with EFI variables stored on disk in the ESP
- Support for ethernet, USB and RTC
- U-Boot environment in eMMC user data (starting from byte 0x4400)
-
-Architecture diagram:
-
-                 Non-Secure          :   Secure
-                                     :
-       +---------------------------+ :
-  EL0  |          Busybox          | :
-       +---------------------------+ : +--------+
-  EL1  |           Linux           | : | OP-TEE |  S-EL1
-       +---------------------------+ : +--------+
-  EL2  | U-Boot, GRUB, Linux (kvm) | :
-       +---------------------------+ :
-  ...................................:
-       +----------------------------------------+
-       |          ROM, U-Boot SPL, TF-A         |  EL3
-       +----------------------------------------+
-
-Boot flow:
-
-  ROM -+-> SPL -> TF-A -+-> OP-TEE
-                        `-> U-Boot -> GRUB -> Linux -> Busybox
-
-The ROM loads U-Boot SPL.
-U-Boot SPL does the DRAM setup, loads the fit image with TF-A, OP-TEE, U-Boot
-and the Devicetree.
-In this configuration TF-A is booting with BL2 and BL31.
-OP-TEE amends the Devicetree, calls back TF-A to go to normal world.
-U-Boot loads GRUB with UEFI, boots Linux at EL2.
-
-Miscellaneous
-=============
-
-This configuration is based on the work of Paul Liu[7] and is inspired by the
-other configurations related with EBBR, and the Arm SystemReady Devicetree Band
-Integration and Testing Guide[8].
-
-To avoid a circular build dependency, we skip the binman step during U-Boot
-build:
-
-  BR2_TARGET_UBOOT_CUSTOM_MAKEOPTS="cmd_binman=:"
-
-Then we run binman manually in the post-image script.
-
-Firmware update and UEFI Secure Boot are currently not supported.
-The disk image cannot be used for SD card recovery at this point.
-
-[1] https://github.com/ARM-software/ebbr
-[2] https://www.arm.com/architecture/system-architectures/systemready-compliance-program/systemready-devicetree-band
-[3] https://www.compulab.com/products/iot-gateways/iot-gate-imx8-industrial-arm-iot-gateway/
-[4] https://mediawiki.compulab.com/w/index.php?title=Building_IOT-GATE-iMX8_and_SBC-IOT-iMX8_Yocto_Linux_images
-[5] https://mediawiki.compulab.com/w/index.php?title=IOT-GATE-iMX8_and_SBC-IOT-iMX8:_U-Boot:_Recovery
-[6] https://github.com/ARM-software/arm-systemready/tree/main/SystemReady-devicetree-band/prebuilt_images
-[7] https://git.linaro.org/plugins/gitiles/people/paul.liu/systemready/build-scripts
-[8] https://developer.arm.com/documentation/DUI1101/latest/
@@ -1,6 +0,0 @@
-CONFIG_ARCH_MISC_INIT=y
-CONFIG_CMD_RNG=y
-CONFIG_DM_REGULATOR_ANATOP=y
-CONFIG_DM_RNG=y
-CONFIG_FSL_CAAM=y
-CONFIG_PHY_ANEG_TIMEOUT=5000
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -20,7 +20,7 @@ main ()
 		"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
 			-ap "${BINARIES_DIR}/bl31.bin" a55 ${ATF_LOAD_ADDR} \
 			-ap "${BINARIES_DIR}/u-boot-hash.bin" a55 0x80200000 \
-			-ap "${BINARIES_DIR}/tee-raw.bin" a55 0x96000000 \
+			-ap "${BINARIES_DIR}/tee.bin" a55 0x96000000 \
 			-out "${BINARIES_DIR}/u-boot-atf-container.img"
 	else
 		"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  4b685080a094cb0f0489b8114ae8b73c37ec13eda9f5618c8b6311ff1f472f57  imx-optee-os-lf-6.12.3-1.0.0.tar.gz
@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  0fcbbbbcd456e87bbbfc8bf37af541fda62ccfcce76903503424fd101ef7bdee  linux-6.12.43.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -10,22 +10,21 @@ For more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
  - cadence-dp-firmware (blob), 8.16
-  - linux (fork), lf-6.12.20-2.0.0
+  - linux (fork), lf-6.12.3-1.0.0

 Build
 =====
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -10,24 +10,23 @@ for more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
-  - qoriq-fm-ucode (blob), lf-6.12.20-2.0.0
-  - linux (fork), lf-6.12.20-2.0.0
-  - fmlib, lf-6.12.20-2.0.0
-  - fmc, lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
+  - qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
+  - linux (fork), lf-6.12.3-1.0.0
+  - fmlib, lf-6.12.3-1.0.0
+  - fmc, lf-6.12.3-1.0.0

 Build
 =====
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -11,24 +11,23 @@ For more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
-  - qoriq-fm-ucode (blob), lf-6.12.20-2.0.0
-  - linux (fork), lf-6.12.20-2.0.0
-  - fmlib, lf-6.12.20-2.0.0
-  - fmc, lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
+  - qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
+  - linux (fork), lf-6.12.3-1.0.0
+  - fmlib, lf-6.12.3-1.0.0
+  - fmc, lf-6.12.3-1.0.0

 Build
 =====
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -10,24 +10,23 @@ for more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
-  - qoriq-fm-ucode (blob), lf-6.12.20-2.0.0
-  - linux (fork), lf-6.12.20-2.0.0
-  - fmlib, lf-6.12.20-2.0.0
-  - fmc, lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
+  - qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
+  - linux (fork), lf-6.12.3-1.0.0
+  - fmlib, lf-6.12.3-1.0.0
+  - fmc, lf-6.12.3-1.0.0

 Build
 =====
@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  e82fe40871743048226987bd349ef107168b15aab90140e872ca4ed470922e25  linux-6.12.47.tar.xz
@@ -12,8 +12,8 @@ image sdcard.img {
        }

        partition uboot {
-                image = "u-boot.itb"
-                partition-type-uuid = xbootldr
+                image = "opensbi_uboot_payload.img"
+                partition-type-uuid = 5B193300-FC78-40CD-8002-E86C45580B47
                offset = 4M
        }

@@ -1,4 +1,4 @@
 label star64
  kernel /boot/Image
  devicetree /boot/jh7110-pine64-star64.dtb
-  append root=/dev/mmcblk1p3 rootwait earlycon=sbi
+  append root=/dev/mmcblk1p3 earlycon=sbi
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  165ca1c37c4607b90e731996b7c1e3311285167d13deeedf08f3f1f0b9d2541a  linux-6.12.57.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
@@ -0,0 +1,9 @@
+#!/bin/bash
+BOARD_DIR="$CONFIG_DIR"/board/pine64/star64
+
+# Add header to the SPL
+"$HOST_DIR"/bin/spl_tool -c -f "$BINARIES_DIR"/u-boot-spl.bin
+
+# Create the u-boot FIT image
+cp "$BOARD_DIR"/star64-uboot-fit-image.its "$BINARIES_DIR"
+mkimage -f "$BINARIES_DIR"/star64-uboot-fit-image.its -A riscv -O u-boot -T firmware "$BINARIES_DIR"/opensbi_uboot_payload.img
@@ -0,0 +1,29 @@
+/dts-v1/;
+
+/ {
+	description = "U-boot-spl FIT image for JH7110 Pine64 Star64";
+	#address-cells = <2>;
+
+	images {
+		firmware {
+			description = "u-boot";
+			data = /incbin/("fw_payload.bin");
+			type = "firmware";
+			arch = "riscv";
+			os = "u-boot";
+			load = <0x0 0x40000000>;
+			entry = <0x0 0x40000000>;
+			compression = "none";
+		};
+	};
+
+	configurations {
+		default = "config-1";
+
+		config-1 {
+			description = "U-boot-spl FIT config for JH7110 Pine64 Star64";
+			firmware = "firmware";
+		};
+	};
+};
+
@@ -17,7 +17,7 @@ Run the emulation with:

  qemu-system-aarch64 \
    -M sbsa-ref \
-    -cpu neoverse-n2 \
+    -cpu neoverse-n1 \
    -smp 4 \
    -m 1024 \
    -nographic \
@@ -1,32 +0,0 @@
-image efi-part.vfat {
-	vfat {
-		file EFI {
-			image = "efi-part/EFI"
-		}
-
-		file bzImage {
-			image = "bzImage"
-		}
-	}
-
-	size = 16352K # 16MB - 32KB
-}
-
-image disk.img {
-	hdimage {
-		partition-table-type = "gpt"
-	}
-
-	partition boot {
-		image = "efi-part.vfat"
-		partition-type-uuid = U
-		offset = 32K
-		bootable = true
-	}
-
-	partition root {
-		partition-type-uuid = root-x86-64
-		partition-uuid = %PARTUUID%
-		image = "rootfs.ext2"
-	}
-}
@@ -1,6 +0,0 @@
-set default="0"
-set timeout="5"
-
-menuentry "Buildroot" {
-	linux /bzImage root=PARTUUID=%PARTUUID% rootwait console=tty1 console=ttyS0
-}
@@ -1,59 +0,0 @@
-CONFIG_SYSVIPC=y
-CONFIG_SMP=y
-CONFIG_HYPERVISOR_GUEST=y
-CONFIG_PARAVIRT=y
-CONFIG_EFI=y
-# CONFIG_GCC_PLUGINS is not set
-CONFIG_MODULES=y
-CONFIG_MODULE_UNLOAD=y
-CONFIG_NET=y
-CONFIG_PACKET=y
-CONFIG_UNIX=y
-CONFIG_INET=y
-# CONFIG_WIRELESS is not set
-CONFIG_PCI=y
-CONFIG_DEVTMPFS=y
-CONFIG_DEVTMPFS_MOUNT=y
-CONFIG_VIRTIO_BLK=y
-CONFIG_BLK_DEV_SD=y
-CONFIG_SCSI_VIRTIO=y
-CONFIG_ATA=y
-CONFIG_ATA_PIIX=y
-CONFIG_NETDEVICES=y
-CONFIG_VIRTIO_NET=y
-CONFIG_NE2K_PCI=y
-CONFIG_8139CP=y
-# CONFIG_WLAN is not set
-CONFIG_INPUT_EVDEV=y
-CONFIG_SERIAL_8250=y
-CONFIG_SERIAL_8250_CONSOLE=y
-CONFIG_VIRTIO_CONSOLE=y
-CONFIG_HW_RANDOM_VIRTIO=m
-CONFIG_DRM=y
-CONFIG_DRM_I915=y
-CONFIG_DRM_QXL=y
-CONFIG_DRM_VIRTIO_GPU=y
-CONFIG_DRM_BOCHS=y
-CONFIG_FB=y
-CONFIG_FB_VESA=y
-CONFIG_FB_EFI=y
-CONFIG_FIRMWARE_EDID=y
-CONFIG_SOUND=y
-CONFIG_SND=y
-CONFIG_SND_HDA_INTEL=y
-CONFIG_SND_HDA_GENERIC=y
-CONFIG_USB=y
-CONFIG_USB_XHCI_HCD=y
-CONFIG_USB_EHCI_HCD=y
-CONFIG_USB_UHCI_HCD=y
-CONFIG_USB_STORAGE=y
-CONFIG_VIRTIO_PCI=y
-CONFIG_VIRTIO_BALLOON=y
-CONFIG_VIRTIO_INPUT=y
-CONFIG_VIRTIO_MMIO=y
-CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
-CONFIG_EXT4_FS=y
-CONFIG_FUSE_FS=y
-CONFIG_TMPFS_POSIX_ACL=y
-CONFIG_SQUASHFS=y
-CONFIG_UNWINDER_FRAME_POINTER=y
@@ -1,11 +0,0 @@
-#!/bin/sh
-
-set -u
-set -e
-
-# Add a console on tty1
-if [ -e "${TARGET_DIR}/etc/inittab" ]; then
-    grep -qE '^tty1::' "${TARGET_DIR}/etc/inittab" || \
-	sed -i '/GENERIC_SERIAL/a\
-tty1::respawn:/sbin/getty -L  tty1 0 vt100 # QEMU graphical window' "${TARGET_DIR}/etc/inittab"
-fi
@@ -1,8 +0,0 @@
-#!/bin/sh
-
-BOARD_DIR="$(dirname "$0")"
-
-PARTUUID=$(dumpe2fs "${BINARIES_DIR}/rootfs.ext2" 2>/dev/null | sed -n 's/^Filesystem UUID: *\(.*\)/\1/p')
-sed "s/%PARTUUID%/$PARTUUID/g" "${BOARD_DIR}/grub.cfg.in" > "${BINARIES_DIR}/efi-part/EFI/BOOT/grub.cfg"
-sed "s/%PARTUUID%/$PARTUUID/g" "${BOARD_DIR}/genimage.cfg.in" > "${BINARIES_DIR}/genimage.cfg"
-support/scripts/genimage.sh -c "${BINARIES_DIR}/genimage.cfg"
@@ -1,28 +0,0 @@
-Intro
-=====
-
-This is a x86_64 UEFI Linux boot demo in QEMU virt machine.
-
-Build
-=====
-
-    make qemu_x86_64_efi_defconfig
-    make
-
-Emulation
-=========
-
-Run the emulation with:
-
-    qemu-system-x86_64 \
-        -M pc \
-        -m 1024 \
-        -serial stdio \
-        -bios output/images/OVMF.fd \
-        -drive file=output/images/disk.img,format=raw \
-        -netdev user,id=net0 \
-        -device virtio-net-pci,netdev=net0 # qemu_x86_64_efi_defconfig
-
-Optionally add -smp N to emulate a SMP system with N CPUs.
-
-The login prompt will appear in the graphical window.
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  7c31df8061aae748a6e72417bfe743a54198fb5bdc96e229ecc605dc621d32ef  linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz
+sha256  afc44e2899a3c32a1b968272a5816e5c90bea346341153807553396621e65dde  linux-ac69f097e1fba94502cbd36278db204120a37943.tar.gz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  9c4efdd7ee550d524c017b5dae27725374526311e983661850cd880af671cb2a  linux-5.15.186.tar.xz
+sha256  9319a47b1e9b5d344ff6015431856d0c9640e4faedc527c87f9129061a27136f  linux-5.15.179.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -0,0 +1,50 @@
+From e79a96ff89b11fea03680633ab830894288ee9f0 Mon Sep 17 00:00:00 2001
+From: Neal Frager <neal.frager@amd.com>
+Date: Thu, 28 Nov 2024 07:50:28 +0000
+Subject: [PATCH] arm64: versal: vek280 prebuilt pdi is incorrect
+
+The prebuilt vpl_gen_fixed.pdi for the vek280 is incorrect and does not define
+the DDR memory region for address 0x8 0000 0000 - 0x8 8000 0000.  For this
+reason, the intree Linux dts memory node for the vek280 will not boot.
+
+This patch works around the issue until the prebuilt pdi file is changed.
+
+https://github.com/Xilinx/soc-prebuilt-firmware/blob/xilinx_v2024.2/vek280-versal/vpl_gen_fixed.pdi
+
+Upstream: n/a
+
+Signed-off-by: Neal Frager <neal.frager@amd.com>
+---
+ arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts | 2 +-
+ arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts b/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts
+index ad5d590318e6..a306eacca5b3 100644
+--- a/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts
+++ b/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts
+@@ -19,7 +19,7 @@ / {
+ 
+ 	memory: memory@0 {
+ 		device_type = "memory";
+-		reg = <0 0 0 0x80000000>, <0x8 0x0 0x1 0x80000000>; /* 2GB + 6GB */
+		reg = <0 0 0 0x80000000>, <0x8 0x80000000 0x1 0x80000000>; /* 2GB + 6GB */
+ 	};
+ 
+ 	chosen {
+diff --git a/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts b/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts
+index a5ee80a373e2..ba54a5ef0c73 100644
+--- a/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts
+++ b/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts
+@@ -19,7 +19,7 @@ / {
+ 
+ 	memory: memory@0 {
+ 		device_type = "memory";
+-		reg = <0 0 0 0x80000000>, <0x8 0x00000000 0x1 0x80000000>; /* 2GB + 6GB */
+		reg = <0 0 0 0x80000000>, <0x8 0x80000000 0x1 0x80000000>; /* 2GB + 6GB */
+ 	};
+ 
+ 	chosen {
+-- 
+2.25.1
+
@@ -73,18 +73,17 @@ you need to add them by yourself.
 1) Start with a defconfig supported by Buildroot (e.g. Zedboard)
    make zynq_zed_defconfig

-2) make menuconfig
-    Visit the following menu to enable BR2_TARGET_UBOOT_ZYNQ
+2) make uboot-menuconfig
+    Visit the following menu and enable CONFIG_XILINX_PS_INIT_FILE

-    Bootloaders  --->
-       U-Boot  --->
-           [*]   Boot on the Xilinx Zynq SoCs
+    ARM architecture  --->
+       [*] Zynq/ZynqMP PS init file(s) location

-3) make menuconfig
-    In the same menu, configure BR2_TARGET_UBOOT_ZYNQ_PS7_INIT_FILE
-
-    Bootloaders  --->
-       U-Boot  --->
-          (<Path to ps7_init_gpl.c>) Custom ps7_init_gpl file
+3) Copy ps7_init_gpl.c/h generated by the Xilinx Vivado tools into
+   output/build/uboot-custom/board/xilinx/zynq/custom_hw_platform/

 4) make
+
+Note: The files in step 3 will need to be re-copied after cleaning the
+output directory and at this time, there is no way to save them as
+part of the buildroot configuration, except as a U-Boot patch.
@@ -162,8 +162,6 @@ endif

 ifeq ($(BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL31),y)
 ARM_TRUSTED_FIRMWARE_MAKE_TARGETS += bl31
-# Avoid BL31 environment variable from polluting the build
-ARM_TRUSTED_FIRMWARE_MAKE_OPTS += BL31=
 endif

 ifeq ($(BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL31_UBOOT),y)
@@ -1,5 +1,5 @@
 # Locally computed:
-sha256  c9fcac5e28e1501bcffb3b36d56487cbefcf7cb708e00f48fe6360ef82fb3847  boot-wrapper-aarch64-b621b157b42f1fe398520cf499db88aa654c78e2-git4.tar.gz
+sha256  faa2843eaa3bc219da5ba9f69c02b45081a7634038faef5cba216d5e927ca2be  boot-wrapper-aarch64-ac6742520ded1da30d500f74e8affe86e27cabd5-git4.tar.gz

 # Hash for license files:
 sha256  bdaa479b497358151fc1166dc75a613e68321320b945e92ea07a4b6dc9a63271  LICENSE.txt
@@ -4,7 +4,7 @@
 #
 ################################################################################

-BOOT_WRAPPER_AARCH64_VERSION = b621b157b42f1fe398520cf499db88aa654c78e2
+BOOT_WRAPPER_AARCH64_VERSION = ac6742520ded1da30d500f74e8affe86e27cabd5
 BOOT_WRAPPER_AARCH64_SITE = https://git.kernel.org/pub/scm/linux/kernel/git/mark/boot-wrapper-aarch64.git
 BOOT_WRAPPER_AARCH64_SITE_METHOD = git
 BOOT_WRAPPER_AARCH64_LICENSE = BSD-3-Clause
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  1e675a98f6bcf81fbae1141779b9e72ec28773d0e5ec77bdcc890f14502615a4  edk2-edk2-stable202508-git4.tar.gz
+sha256  e05130e107d476cdec0846f55f22e00fb2cc0030b60fafce464a6cf10134d18d  edk2-edk2-stable202505-git4.tar.gz
 sha256  50ce20c9cfdb0e19ee34fe0a51fc0afe961f743697b068359ab2f862b494df80  License.txt
@@ -4,7 +4,7 @@
 #
 ################################################################################

-EDK2_VERSION = edk2-stable202508
+EDK2_VERSION = edk2-stable202505
 EDK2_SITE = https://github.com/tianocore/edk2
 EDK2_SITE_METHOD = git
 EDK2_LICENSE = BSD-2-Clause-Patent
@@ -5,8 +5,8 @@ Subject: [PATCH] fs/hfs: Fix stack OOB write with grub_strcpy()

 Replaced with grub_strlcpy().

-CVE: CVE-2024-45782
-CVE: CVE-2024-56737
+Fixes: CVE-2024-45782
+Fixes: CVE-2024-56737
 Fixes: https://savannah.gnu.org/bugs/?66599

 Reported-by: B Horn <b@horn.uk>
@@ -9,7 +9,7 @@ number parsed by read_number(). Later direct arithmetic calculation like
 grub_size_t leading to heap OOB write. This patch fixes the issue by
 using grub_add() and checking for an overflow.

-CVE: CVE-2024-45780
+Fixes: CVE-2024-45780

 Reported-by: Nils Langius <nils@langius.de>
 Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
@@ -9,7 +9,7 @@ to 0 leading to heap OOB write. This patch fixes
 the issue by using grub_add() and checking for
 an overflow.

-CVE: CVE-2024-45777
+Fixes: CVE-2024-45777

 Reported-by: Nils Langius <nils@langius.de>
 Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
@@ -6,8 +6,8 @@ Subject: [PATCH] fs/bfs: Disable under lockdown
 The BFS is not fuzz-clean. Don't allow it to be loaded under lockdown.
 This will also disable the AFS.

-CVE: CVE-2024-45778
-CVE: CVE-2024-45779
+Fixes: CVE-2024-45778
+Fixes: CVE-2024-45779

 Reported-by: Nils Langius <nils@langius.de>
 Signed-off-by: Daniel Axtens <dja@axtens.net>
@@ -9,11 +9,11 @@ hfsplus, iso9660, squash4, tar, xfs and zfs.
 The JFS, ReiserFS, romfs, UDF and UFS security vulnerabilities were
 reported by Jonathan Bar Or <jonathanbaror@gmail.com>.

-CVE: CVE-2025-0677
-CVE: CVE-2025-0684
-CVE: CVE-2025-0685
-CVE: CVE-2025-0686
-CVE: CVE-2025-0689
+Fixes: CVE-2025-0677
+Fixes: CVE-2025-0684
+Fixes: CVE-2025-0685
+Fixes: CVE-2025-0686
+Fixes: CVE-2025-0689

 Suggested-by: Daniel Axtens <dja@axtens.net>
 Signed-off-by: Daniel Axtens <dja@axtens.net>
@@ -9,8 +9,8 @@ overflow checks are in place.
 The HFS+ and squash4 security vulnerabilities were reported by
 Jonathan Bar Or <jonathanbaror@gmail.com>.

-CVE: CVE-2025-0678
-CVE: CVE-2025-1125
+Fixes: CVE-2025-0678
+Fixes: CVE-2025-1125

 Signed-off-by: Lidong Chen <lidong.chen@oracle.com>
 Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
@@ -9,7 +9,6 @@ The code is extracted from the upstream commit:

 Fix: bsc#1234959

-CVE: CVE-2024-56738
 Signed-off-by: Gary Lin <glin@suse.com>
 Upstream: not submitted upstream, as upstream has switched to gcrypt
 Taken-from: https://build.opensuse.org/projects/SUSE:SLE-15-SP5:Update/packages/grub2.39923/files/grub2-constant-time-grub_crypto_memcmp.patch?expand=0
@@ -15,6 +15,17 @@ HOST_GRUB2_DEPENDENCIES = host-bison host-flex host-gawk \
 	$(BR2_PYTHON3_HOST_DEPENDENCY)
 GRUB2_INSTALL_IMAGES = YES

+# CVE-2019-14865 is about a flaw in the grub2-set-bootflag tool, which
+# doesn't exist upstream, but is added by the Redhat/Fedora
+# packaging. Not applicable to Buildroot.
+GRUB2_IGNORE_CVES += CVE-2019-14865
+# vulnerability is specific to the Redhat distribution, affects a
+# downstream change from Redhat related to password authentication
+GRUB2_IGNORE_CVES += CVE-2023-4001
+# vulnerability is specific to the Redhat distribution, affects the
+# grub2-set-bootflag tool, which doesn't exist upstream
+GRUB2_IGNORE_CVES += CVE-2024-1048
+
 # 0004-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch (yes, two
 # CVEs are fixed by this patch)
 GRUB2_IGNORE_CVES += CVE-2024-45782
@@ -167,7 +167,7 @@ config BR2_TARGET_OPTEE_OS_ADDITIONAL_VARIABLES

 config BR2_TARGET_OPTEE_OS_CORE_IMAGES
 	string "Binary boot images"
-	default "tee.bin tee-raw.bin tee-*_v2.bin"
+	default "tee.bin tee-*_v2.bin"
 	help
 	  Names of generated image files that are installed in the
 	  output images/ directory.
@@ -1,3 +1,3 @@
 # locally computed hash
-sha256  46319cd228d8f2c06c744241c0f342412329a7c630436fce7f82cf6936b1d603  shim-16.1.tar.bz2
+sha256  d503f778dc75895d3130da07e2ff23d2393862f95b6cd3d24b10cbd4af847217  shim-16.0.tar.bz2
 sha256  15edf527919ddcb2f514ab9d16ad07ef219e4bb490e0b79560be510f0c159cc2  COPYRIGHT
@@ -4,7 +4,7 @@
 #
 ################################################################################

-SHIM_VERSION = 16.1
+SHIM_VERSION = 16.0
 SHIM_SITE = https://github.com/rhboot/shim/releases/download/$(SHIM_VERSION)
 SHIM_SOURCE = shim-$(SHIM_VERSION).tar.bz2
 SHIM_LICENSE = BSD-2-Clause
@@ -56,9 +56,6 @@ SYSLINUX_POST_PATCH_HOOKS += SYSLINUX_CLEANUP
 # syslinux build system has no convenient way to pass CFLAGS,
 # and the internal zlib should take precedence so -I shouldn't
 # be used.
-# gcc-15 defaults to -std=gnu23 which introduces build failures.
-# We force "-std=gnu17" for gcc version supporting it. Earlier gcc
-# versions will work, since they are using the older standard.
 # Install in a temporary location that eases final install into
 # images/ (see corresponding command, below).
 # Repeat the target, otherwise syslinux will try to build everything
@@ -68,7 +65,7 @@ define SYSLINUX_BUILD_CMDS
 	$(TARGET_MAKE_ENV) $(MAKE1) \
 		ASCIIDOC_OK=-1 \
 		A2X_XML_OK=-1 \
-		CC="$(TARGET_CC) $(if $(BR2_TOOLCHAIN_GCC_AT_LEAST_8),-std=gnu17)" \
+		CC="$(TARGET_CC) -std=gnu17" \
 		LD="$(TARGET_LD)" \
 		OBJCOPY="$(TARGET_OBJCOPY)" \
 		AS="$(TARGET_AS)" \
@@ -1,3 +1,3 @@
 # Locally calculated
 sha256  ab20ffbe7bba7e94be246b3417d33a914b3f07c16c47ef5a7f7602349a666a61  LICENSE.ti
-sha256  eda8af01e1c142e3ebe766877585ac4f37e4f1dc4ad5fe29ad15c120c18ccece  ti-k3-boot-firmware-11.01.12.tar.gz
+sha256  e98ae3350964100b6137d32d4874c16229a97b1cc7f8f4f23f8da59a386520c8  ti-k3-boot-firmware-11.00.11.tar.gz
--- a/Show More
+++ b/Show More