Commit Graph

77358 Commits

Author SHA1 Message Date
Thomas Petazzoni
32df543fa3 package/ffmpeg: bump to latest commit in 6.1.x branch
Version 6.1.2 of ffmpeg fails to build with GCC 14.x due to the V4L2
ioctl code:

libavdevice/v4l2.c:137:17: error: assignment to ‘int (*)(int,  long unsigned int, ...)’ from incompatible pointer type ‘int (*)(int,  int, ...)’ [-W
incompatible-pointer-types]
  137 |     s->ioctl_f  = prefix ## ioctl;      \
      |                 ^
libavdevice/v4l2.c:151:9: note: in expansion of macro ‘SET_WRAPPERS’
  151 |         SET_WRAPPERS();
      |         ^~~~~~~~~~~~

This has been fixed upstream in the release/6.1 branch, which has 27
fixes on top of 6.1.2. The commits necessary to fix our issue are:

f71076c009f84917e7a0f2f1ece86b718de2d8d3 configure: improve check for POSIX ioctl
60593d6c06c9b610359bd6af26a268feff1293eb configure: restore autodetection of v4l2 and fbdev

However, since all other commits are fixes, we believe bumping to the
latest commit in the release/6.1 branch is a better idea.

This allows to drop
0008-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch, which
is upstream as of:

4c688845a50f7dce3af9afebe60f0f7a493c4f07 libavcodec/arm/mlpdsp_armv5te: fix label format to work with binutils 2.43

Note that we set FFMPEG_CPE_ID_VERSION to get proper CVE matching even
with FFMPEG_VERSION being set to n6.1.2-27-ge16ff06adb. One who have
ideally set FFMPEG_VERSION to n$(FFMPEG_CPE_ID_VERSION)-ge16ff06adb,
but that makes check-package unhappy with:

WARNING: package/ffmpeg/ffmpeg.mk:7: expecting package version to be set before CPE_ID_VERSION

Fixes:

  https://autobuild.buildroot.net/results/fe1574443acd50ca7e576bb4beb24467be1713e3/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 11:38:19 +02:00
Thomas Petazzoni
fe783b16b3 package/qt6/qt6multimedia: ffmpeg support needs headers >= 5.2
The V4L2 code in the ffmpeg plugin uses V4L2_PIX_FMT_BGRA32 which was
only introduced in kernel headers 5.2, in upstream kernel commit
e25ec9141114c7124eeba09385e272dd76fbe617.

Fixes:

/home/thomas/buildroot/buildroot/outputs/qt/build/qt6multimedia-6.8.1/src/plugins/multimedia/ffmpeg/qv4l2camera.cpp:36:43: error: ‘V4L2_PIX_FMT_BGRA
32’ was not declared in this scope; did you mean ‘V4L2_PIX_FMT_BGR32’?
   36 |     { QVideoFrameFormat::Format_BGRA8888, V4L2_PIX_FMT_BGRA32  },
      |                                           ^~~~~~~~~~~~~~~~~~~
      |                                           V4L2_PIX_FMT_BGR32

when building:

 BR2_arm=y
 BR2_cortex_a9=y
 BR2_ARM_ENABLE_VFP=y
 BR2_TOOLCHAIN_EXTERNAL=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_ARMV7_EABIHF_MUSL_STABLE=y
 BR2_PACKAGE_QT6=y
 BR2_PACKAGE_QT6BASE_XCB=y
 BR2_PACKAGE_QT6MULTIMEDIA=y
 BR2_PACKAGE_QT6MULTIMEDIA_FFMPEG=y
 BR2_PACKAGE_XORG7=y

at a time when the Bootlin stable toolchain was using Linux 4.19
headers.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 11:38:17 +02:00
Roy Kollen Svendsen
04d1ee0105 package/qt6/qt6multimedia: fix ffmpeg plugin build for x11
The following defconfig:

BR2_arm=y
BR2_cortex_a9=y
BR2_ARM_ENABLE_VFP=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_ARMV7_EABIHF_MUSL_STABLE=y
BR2_PACKAGE_QT6=y
BR2_PACKAGE_QT6BASE_XCB=y
BR2_PACKAGE_QT6MULTIMEDIA=y
BR2_PACKAGE_QT6MULTIMEDIA_FFMPEG=y
BR2_PACKAGE_XORG7=y

would fail to build, due to <X11/extensions/Xext.h> being not found,
and then <X11/extensions/Xrandr.h> being not found. Fix that up by
introducing the necessary dependencies.

There are no build failures reported for qt6multimedia in the
autobuilders, so there is no reference to a build failure.

Signed-off-by: Roy Kollen Svendsen <roykollensvendsen@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 11:38:16 +02:00
Roy Kollen Svendsen
adff0d37ba package/qt6/qt6base: fix build when xcb support is enabled
Fixes:
ERROR: Feature "xcb": Forcing to "ON" breaks its condition:
QT_FEATURE_thread AND TARGET XCB::XCB AND TEST_xcb_syslibs AND QT_FEATURE_xkbcommon_x11
Condition values dump:
QT_FEATURE_thread = "ON"
TARGET XCB::XCB found
TEST_xcb_syslibs = "FALSE"
QT_FEATURE_xkbcommon_x11 not evaluated

The xcb feature is defined in [2].

According to [1] XCB::CURSOR is needed for xcb support.

[1] https://code.qt.io/cgit/qt/qtbase.git/tree/src/gui/configure.cmake?h=6.9.0#n522
[2] https://code.qt.io/cgit/qt/qtbase.git/tree/src/gui/configure.cmake?h=6.9.0#n1016

This bug was introduced in e634be8906,
and fixes the build with the following defconfig:

 BR2_arm=y
 BR2_cortex_a9=y
 BR2_ARM_ENABLE_VFP=y
 BR2_TOOLCHAIN_EXTERNAL=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
 BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_ARMV7_EABIHF_MUSL_STABLE=y
 BR2_PACKAGE_QT6=y
 BR2_PACKAGE_QT6BASE_GUI=y
 BR2_PACKAGE_QT6BASE_XCB=y
 BR2_PACKAGE_XORG7=y

Signed-off-by: Roy Kollen Svendsen <roykollensvendsen@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 11:38:14 +02:00
Peter Korsgaard
4cca0f30f2 package/pkg-autotools.mk: LIBTOOL_PATCH_HOOK: also handle libtool 2.5.x
Fixes:
https://autobuild.buildroot.org/results/ac60d29fbcd9fb8ddb21b76b3b185e45e580c006/

Libtool 2.5.x has been released and is starting to be used by upstreams when
generating release tarballs (E.G. openvpn-2.6.14).

https://lists.gnu.org/archive/html/autotools-announce/2024-09/msg00000.html

It needs to be patched similar to earlier versions, and the existing v2.4.4
patch luckily still applies, so extend LIBTOOL_PATCH_HOOK to also patch
2.5.x versions with that.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Tested-by: Bernd Kuhls <bernd@kuhls.net>
[fixes build of openvpn-2.6.14]
2025-05-17 11:33:28 +02:00
Arnout Vandecappelle
1026abbcf9 docs/manual/adding-packages-tips.adoc: add section about private repositories
Buildroot packaging pretty much assumes that the sources it downloads
are publicly available. In general, however, Buildroot is also used to
download sources from private repositories. Nowadays, that mostly means
from a github or gitlab instance.

Although git-over-ssh can be used for that, this poses a problem for CI,
because the CI runners integrated with github and gitlab only have
access to the repository itself, not to other private repositories. And
creating ssh key pairs for CI runners is tricky.

Therefore, document how standard tools can be used to make private
repositories available both to developers and to CI. There are quite a
few alternative approaches possible, but they're more complicated or
less generically applicable.

Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
[Peter: Fix insteadOf example, capitalize SSH/HTTPS]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-17 11:31:40 +02:00
Thomas Petazzoni
3502bfe7a5 package/netopeer2: bump to version 2.4.1
This is needed following the bump of libyang (3.12.2),
sysrepo (3.6.11) and libnetconf2 (3.7.1), as netopeer2 2.4.1 is the
version designed to work with those other components.

See https://github.com/CESNET/netopeer2/releases for the changes.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-17 11:30:16 +02:00
Mattias Walström
eeb49a1f1f package/libnetconf2: bump to version 3.7.1
Changelog:
  error-path data node
  now using proper format so in rpc-reply uses XML XPath format instead of JSON
  several bugfixes and improvements

Depends on libyang v3.12.2:

  https://github.com/CESNET/libyang/releases/tag/v3.12.2

As part of this version bump, the ENABLE_SSH and ENABLE_TLS options
have been dropped by upstream in favor of a single ENABLE_SSH_TLS
option, which requires openssl or mbedtls, libcurl and libssh. Since
this is getting quite complicated to handle as an implicit optional
dependency, we make this explicit with a new sub-option
BR2_PACKAGE_LIBNETCONF2_SSH_TLS that ensures everything needed is
enabled.

In theory, libnetconf2 can use either mbedtls or openssl for crypto,
but netopeer2 will only work if OpenSSL is used, so we only allow
using OpenSSL until that gets fixed upstream.

The netopeer2 package, which needs SSH/TLS support in libnetconf2 is
updated accordingly (and actually becomes simpler).

Signed-off-by: Mattias Walström <lazzer@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-17 11:30:16 +02:00
Mattias Walström
2ad082971a package/libyang: bump to version 3.12.2
Changelog:
 optional xxhash faster hasing function
 support for metadata in diff
 lots of optimizations and fixes

License file changed due to copyright year change:

-Copyright (c) 2015-2021, CESNET
+Copyright (c) 2015-2024, CESNET

Signed-off-by: Mattias Walström <lazzer@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-17 11:30:15 +02:00
Mattias Walström
a073431b3a package/sysrepo: bump to version 3.6.11
Changelog:
 several moderate optimizations (@irfanHaslanded)
 session push oper data cache
 lots of minor bugfixes and improvements

Depends on libyang v3.12.2 https://github.com/CESNET/libyang/releases/tag/v3.12.2

Signed-off-by: Mattias Walström <lazzer@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-17 11:30:14 +02:00
Adam Duskett
5cfe10ffb2 package/refpolicy: bump to version 2.20250213
Add a patch (found in an upstream PR) to avoid the following error when
the dbus module is not enabled:

   ```
   policy/modules/system/selinuxutil.te:102:ERROR 'attribute
   dbusd_system_bus_client is not within scope' at token ';'
   on line 155976:
   ```

Remove the patch 0001-policy-modules-services-smartmon.te-make-fstools-opt.patch
(upstream commit 65eed16b58015b08f43a096c202dae6cba2f0a37).

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[Arnout:
 - Add patch to fix dbus issue.
 - Remove dbus from default modules again.
 - Remove the existing patch which is applied upstream.
]
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 11:07:23 +02:00
Adam Duskett
f93e0ec585 package/selinux-python: bump to verson 3.8.1
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:15:38 +02:00
Adam Duskett
0683e7d65b package/semodule-utils: bump to version 3.8.1
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:15:17 +02:00
Adam Duskett
d0e1181b16 package/restorecond: bump to version 3.8.1
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:14:58 +02:00
Adam Duskett
ebf1217a7b package/checkpolicy: bump to version 3.8.1
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:13:23 +02:00
Adam Duskett
9cd495b871 package/policycoreutils: bump to version 3.8.1
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:12:16 +02:00
Adam Duskett
1ae3ad4e87 package/libselinux: bump to version 3.8.1
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:11:32 +02:00
Adam Duskett
2a7823a7fe package/libsemanage: bump to version 3.8.1
License sha change is due to white space cleanup on commit 5969e99.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:08:49 +02:00
Adam Duskett
992b678393 package/libsepol: bump to version 3.8.1
Changes:
    - SELinux policy version 34 is available starting with kernel 6.14.
    - Updated 0001-support-static-only.patch to apply cleanly and changed
      the email address from aduskett@gmail.com to
      adam.duskett@amarulasolutions.com

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:08:35 +02:00
Adam Duskett
cbabeb5077 package/audit/S02auditd: fix shellcheck and check-package warnings
Fixup S20audit to pass shellcheck -oall and check-package. The file now
closely resembles package/busybox/S01syslogd.

Tested with qemu_x86_64_defconfig. start, stop, restart, reload, and rotate
all work with busybox ash shell.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
[Arnout: remove it from .checkpackageignore]
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 10:04:02 +02:00
Vincent Fazio
d9aabc1af3 package/m4: bump to 1.4.20
The new version bundles an updated gnulib that includes support for
-std=c23 which is the default for gcc 15.

Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-17 09:28:58 +02:00
Brandon Maier
cc93da91ac package/mtd: revert update to 2.3.0
The mtd package fails to compile when BR2_PACKAGE_MTD_TESTS=y is enabled
with the following error.

> make[1]: *** No rule to make target
> 'tests/ubifs_tools-tests/images/good.gz', needed by 'all-am'.  Stop.

This issue was reported upstream and a patch submitted. However we can't
apply the patch to fix the problem. The issue is that a file is missing
from the released tarball, so only a new MTD release can fix it.

This reverts commit 0c230eef90.

Upstream: https://lore.kernel.org/linux-mtd/20250220112554.2150046-1-m.olbrich@pengutronix.de/
Reported-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-17 09:07:31 +02:00
Peter Korsgaard
359908d33c package/ibm-sw-tpm2: add upstream patch to fix builds against libopenssl 3.5.x
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-17 09:07:10 +02:00
Roy Kollen Svendsen
6cd8f95346 package/mariadb: bump version to 10.11.11
Fixes:
Build with gcc-15 was fixed upstream in 10.11.11:

https://github.com/MariaDB/server/commit/1d6f857

Remove patch, since the problem was fixed upstream:

https://github.com/MariaDB/server/commit/4375245

After bumping the version to 10.11.11 the configuration step failed for target:

CMake Error: try_run() invoked in cross-compiling mode, please set the following cache variables appropriately:
   HAVE_SYSTEM_LIBFMT_EXITCODE (advanced)

To fx this problem we set HAVE_SYSTEM_LIBFMT_EXITCODE=0.

Fix legal-info after changes to README.md.

Signed-off-by: Roy Kollen Svendsen <roykollensvendsen@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 23:31:00 +02:00
Cherniaev Andrei
a480ae9ffe boot/grub2/readme.txt: fix loopback mount notes
Commit 7dd56b6cd9 ("boot/grub2/readme.txt: don't specify /dev/loop0")
changed the description of the loopback mounting to use losetup -f <img>,
but forgot to add the --show option, causing losetup to not print the
loopback device name.

Fix that by adding the --show option.

Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
[Peter: Reword commit message]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 21:55:41 +02:00
Francois Perrad
c5c7c44fa5 package/quickjs: bump to version 2025-04-26
diff LICENSE: removed trailing space

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 21:53:45 +02:00
Michael Nosthoff
4bf58850ea package/catch2: bump version to 3.8.1
- Fixed bug where catch_discover_tests fails when no TEST_CASEs are present

release notes: https://github.com/catchorg/Catch2/releases/tag/v3.8.1

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
[Peter: reword commit message]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 21:50:33 +02:00
Juan Pablo MONTERO CASTRO
4e954bf4bf configs/freescale_imx91evk: new defconfig
This commit adds support for the i.MX 91 EVK board
https://www.nxp.com/imx93evk

Tested on board revision SCH-91080 REV A1.

Signed-off-by: Juan Pablo MONTERO CASTRO <juanpablo.monterocastro@nxp.com>
[Julien:
 - split original commit 3/3
 - fix check-package errors
 - add link to board page in readme.txt
 - reflow readme.txt
]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-05-16 21:24:27 +02:00
Juan Pablo MONTERO CASTRO
1ce2484a8b package/freescale-imx/firmware-ele-imx: add support for i.MX 91 A0
Buildroot commit [1] introduced the firmware-ele-imx package and was
using the "mx93a1-ahab-container.img" firmware image for i.MX91.

For i.MX91, it is in fact the firmware file "mx91a0-ahab-container.img"
which needs to be used.

This commit adds this special case.

[1] 69d127fe29

Signed-off-by: Juan Pablo MONTERO CASTRO <juanpablo.monterocastro@nxp.com>
[Julien: split original commit 2/3]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-05-16 21:24:27 +02:00
Juan Pablo MONTERO CASTRO
0645c83cd6 package/freescale-imx/Config.in: introduce i.MX91 silicon revision
This commit introduces the silicon revision number configuration.
This value will be used by packages for specific configurations
(such as security firmware).

Signed-off-by: Juan Pablo MONTERO CASTRO <juanpablo.monterocastro@nxp.com>
[Julien: split original commit 1/3]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-05-16 21:24:27 +02:00
Peter Korsgaard
585eeb4640 fs/erofs: unbreak custom compression handling
Fixes:
https://autobuild.buildroot.net/results/0f856def945b9a863f45f7a58553b62f6875720b/

Commit a02e437417 ("fs/erofs: add custom compression option with optional
compress-hints file") added logic for custom compression, but in fact it did
not work.

BR2_TARGET_ROOTFS_EROFS_COMPRESSION_{ALGORITHMS,HINTS} are kconfig string
variables, so we need to use qstrip rather than strip.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 20:01:25 +02:00
Thomas Petazzoni
b0a62a9654 docs/migrating.adoc: document the tarball suffix update for Cargo-fetch packages
We changed the suffix of tarballs for Cargo-fetched packages, which
affects out-of-tree packages, so it makes sense to document that in
the migration guide.

Reported-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 20:00:38 +02:00
Thomas Petazzoni
e0beecec56 package: update cargo suffix to -cargo4 and fix hashes
Following the "support/download: replace deprecated .cargo/config"
change, the hashes of all Cargo-fetched packages need to be
updated. This commit therefore changes the suffix of Cargo packages
from -cargo3 to -cargo4, and updates all hashes.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 20:00:37 +02:00
Fiona Klute (WIWA)
3776f7c11f support/download: replace deprecated .cargo/config
With the current vendoring process, any Cargo build emits the
following warning:

warning: `.../.cargo/config` is deprecated in favor of `config.toml`

.cargo/config.toml was introduced in 1.39 [1], so there shouldn't be
backwards compatibility issues in Buildroot. However, because the
generated config file becomes part of the vendored archive, this
changes the hashes of all Cargo-based packages.

[1] https://doc.rust-lang.org/cargo/reference/config.html#hierarchical-structure

Signed-off-by: Fiona Klute (WIWA) <fiona.klute@gmx.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 20:00:36 +02:00
Adrian Perez de Castro
e743759a52 package/sysprof: bump to version 48.0
This new release includes a number of improvements. Release notes:

  https://gitlab.gnome.org/GNOME/sysprof/-/blob/48.0/NEWS

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-16 19:57:59 +02:00
Adrian Perez de Castro
10720c036e package/libdex: bump to version 0.10.0
On top of a few small features, this release has a few build system
improvements, and in particular improves checking for libatomic and
libucontext.

https://gitlab.gnome.org/GNOME/libdex/-/blob/0.10.0/NEWS

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-16 19:57:59 +02:00
Thomas Perale
6541717ef9 package/python-h11: security bump to version 0.16.0
Fixes the following security issue:

- CVE-2025-43859: A leniency in h11's parsing of line terminators in
    chunked-coding message bodies can lead to request smuggling
    vulnerabilities under certain conditions.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-43859
  - 114803a29c

For more details on the version bump, see:
  - https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 19:54:54 +02:00
Yann E. MORIN
5009fd2436 Makefile: include defconfigs in sub-directories in list-defconfigs
Currently, list-defconfigs only lists the defconfigs that live
 live in the top-level configs/ directory. For the in-tree defconfigs
this is indeed the case, but it is possible to manage the configs in a
br2-external tree with sub-directories.

A few examples:
  - for a given board, a first defconfig is the full system, and a
    second is the rescue system;
  - for a given board, two defconfigs implement an A/B feature set;
  - a set of configurations targetting various famillies of systems each
    running on different hardware, sorted per familly.

Extend list-defconfigs to look for and report defconfigs in
sub-directories of the top-level configs/.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 19:45:35 +02:00
James Hilliard
3481a9643f package/mbedtls: bump to version 3.6.3.1
As specified in the 2.28.10 release notes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10

Mbed TLS 2.28.10 is the last release of the 2.28 LTS and won't receive bug
fixes or security fixes anymore.  Users are advised to upgrade to a
maintained version.

So move to 3.6.x, which is the new LTS version:

Mbed TLS 3.6 is a long-term support (LTS) branch.  It will be supported with
bug-fixes and security fixes until at least March 2027.

Drop BR2_PACKAGE_MBEDTLS_COMPRESSION and all related references
as native zlib support has been entirely removed from mbedtls.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[Peter: add note about 2.28.x / 3.6.x, add Config.in.legacy]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 18:49:54 +02:00
Thomas Petazzoni
432aef053e package/{rust,rust-bin}: fix license
The bump of rust and rust-bin from 1.82 to 1.86 in commit
072f3bc8c6 forgot to update the hash of
the license files. The LICENSE-MIT file has changed with the following
diff:

+Copyright (c) The Rust Project Contributors
+

So no change to the license terms.

Fixes:

  https://autobuild.buildroot.net/results/382489b3f5c931451bead7e232af07b70c3e29bb/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2025-05-16 18:46:24 +02:00
Julien Olivain
e9498b4faa support/testing: new dieharder runtime test
Note: this test was not working in Buildroot test infrastructure
before commit [1] was merged, because dieharder has the string "# "
in its output.

[1] 0cad947b96

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 18:44:56 +02:00
Juan Pablo MONTERO CASTRO
a0b51dd088 board/freescale: imx9-bootloader-prepare.sh: fix cpu name
This commit replaces "a35" occurrences with "a55" in imx9 bootloader
preparation script. i.MX9 families have Cortex-A55 processors. See [1].

This change is purely cosmetic and only for correctness, as the
mkimage_imx8 tool currently uses internally the "a55" identifier as
an alias for "a35". See [2].

[1] https://www.nxp.com/products/processors-and-microcontrollers/arm-processors/i-mx-applications-processors/i-mx-9-processors:IMX9-PROCESSORS
[2] https://github.com/nxp-imx/imx-mkimage/blob/lf-6.6.23-2.0.0/src/mkimage_imx8.c#L773

Signed-off-by: Juan Pablo MONTERO CASTRO <juanpablo.monterocastro@nxp.com>
[Julien: reword a bit and add info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-05-16 18:40:22 +02:00
Nikita Kiryushin
f777c79912 package/dbus: set session-socket-dir to /tmp
dbus has a session socket directory configuration setting,
that, if not set, will be autodeducted based on env vars
like TMPDIR during configuration time.

Becuse of that, the builder's environment variables will
lead to an image with a broken session bus while
leaking builder's details to the image.

Add an explicit setting of session-socket-dir to /tmp dir.

Fixes: https://gitlab.com/buildroot.org/buildroot/-/issues/67

Signed-off-by: Nikita Kiryushin <kiryushin@ancud.ru>
Reviewed-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 18:33:11 +02:00
Peter Korsgaard
82575b3e52 package/sdl2: allow wayland support to be enabled without X11
Commit 4662553088 ("package/sdl2: add wayland support") added an option to
enable wayland support but accidentally put the .mk logic inside the
BR2_PACKAGE_SDL2_X11, so it would only trigger if the X11 driver was
enabled.

Fix that by moving it outside the conditional.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 18:00:58 +02:00
Thomas Devoogdt
4662553088 package/sdl2: add wayland support
This adds a configuration option to enable the Wayland
video driver support in SDL2.

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
[Peter: move after KMS/DRM]
Tested-by: Alexander Shiyan <eagle.alexander923@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2025-05-16 17:17:56 +02:00
Giulio Benetti
b0a703a974 package/rtl8188eu: fix building with Linux 6.14
Add local patch pending upstream to fix build failure with Linux 6.14.

Fixes:
https://autobuild.buildroot.org/results/065b9afc1c6f9f5561547b12171269adc8c12275

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Reviewed-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-05-16 17:15:08 +02:00
James Hilliard
d0841c007b package/python-charset-normalizer: bump to version 3.4.1
Add new host-python-mypy and host-python-setuptools-scm build
dependencies.

Set --skip-dependency-check due to unnecessarily strict mypy
version limit.

Set CHARSET_NORMALIZER_USE_MYPYC=1 in env so that mypyc optimizations
are enabled.

License hash changed due to year update:
deed20577b

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 16:56:37 +02:00
James Hilliard
218a17dbc4 package/python-mypy: new package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 16:55:03 +02:00
James Hilliard
c6924b2331 package/python-mypy-extensions: enable host package
This will be required for the upcoming python-mypy package.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 16:54:43 +02:00
James Hilliard
253f53a155 package/python-types-setuptools: new host package
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2025-05-16 16:51:09 +02:00