Repository navigation
Feature package updates - #33
Merged
Merged
Conversation
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Update the license hash for the copyright year change: python-validators/validators@d3f0048 Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Changelog available at jbardin/scp.py@21308b8 Signed-off-by: Alexis Lothoré <alexis.lothore@bootlin.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Add the mypy-extensions runtime dependency for both target and host packages. The vecs module now imports mypy_extensions unconditionally, rather than only when the experimental vector support is enabled. Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Refresh the libudev loading workaround for the removal of an upstream import-sorting comment. Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Drop --skip-dependency-check now that upstream restricts the setuptools-rust build requirement to Windows and macOS. Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
nettest depends, through rustls, quinn and rcgen, on the ring crate,
which refuses to build for 32-bit x86 targets without SSE and SSE2:
error[E0080]: evaluation panicked: assertion failed: cfg!(target_feature = "sse") && cfg!(target_feature = "sse2")
--> .../VENDOR/ring/src/cpu/intel.rs:26:9
This affects i586 and i686-class CPUs that lack SSE2
Make nettest depend on SSE2 support when building for i386.
Fixes: https://autobuild.buildroot.org/results/d04f770538412bee77851142ee007f2ff107e0ec
Fixes: 36fa003 ("package/nettest: new package")
Signed-off-by: Bogdan Radulescu <bogdan@nimblex.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Since kernel v7.0, perf uses `rustc --version` to know whether or not rust is available. If rust is installed on the host, this `rustc --version` works fine but then the perf build fails with following error (on aarch64) if host-rust isn't selected: rustc /home/bastien/embedded-linux-imx93-frdm-labs/integration/buildroot/output/build/linux-7.1.3/tools/perf/tests/workloads/code_with_type.a error[E0463]: can't find crate for `std` | = note: the `aarch64-unknown-linux-gnu` target may not be installed = help: consider downloading the target with `rustup target add aarch64-unknown-linux-gnu` error: aborting due to 1 previous error In perf, rust is only used by one file of the test suite (tools/perf/tests/workloads/code_with_type.rs) so we can safely disable it. Always use the NO_RUST flag to build perf. Signed-off-by: Bastien Curutchet <bastien.curutchet@bootlin.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This is the version required by pydantic 2.14.1. Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Switch to hatchling with hatch-vcs and use the PyPI source distribution, which includes the version metadata needed by hatch-vcs. Restore the compatibility symlink omitted from the PyPI archive so the wheel continues to provide the configshell_fb module. Drop the obsolete six and urwid runtime dependencies. Select curses explicitly, since it was previously pulled in by urwid. Update the license hash for the removal of a trailing blank line: open-iscsi/configshell-fb@36306fd Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Switch to hatchling with hatch-vcs and use the PyPI source distribution, which includes the version metadata needed by hatch-vcs. Restore the compatibility symlink omitted from the PyPI archive so the wheel continues to provide the rtslib_fb module. Replace the six runtime dependency with pyudev and propagate its libudev requirement to targetcli-fb. Update the license hash for the removal of a trailing blank line: open-iscsi/rtslib-fb@c446575 Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Switch to hatchling with hatch-vcs and use the PyPI source distribution, which includes the version metadata needed by hatch-vcs. Drop the obsolete six dependency and keep the remaining Python dependencies as runtime selections. Update the license hash for the removal of a trailing blank line: open-iscsi/targetcli-fb@f9d97a8 Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This fixes the following vulnerability: - CVE-2026-85091: zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary. For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-85091 - https://security-tracker.debian.org/tracker/CVE-2026-85091 - https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148.patch Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Fixes the following vulnerabilities: - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification https://curl.se/docs/CVE-2026-86410.html - CVE-2026-86412: server-set cookie erases cookie jar https://curl.se/docs/CVE-2026-86412.html - CVE-2026-86413: Negotiate credentials sent to redirected origin https://curl.se/docs/CVE-2026-86413.html - CVE-2026-86414: leaking host credentials to HTTP proxy https://curl.se/docs/CVE-2026-86414.html - CVE-2026-86415: auto client cert connection reuse mixup https://curl.se/docs/CVE-2026-86415.html - CVE-2026-87861: cross-origin reuse of a Negotiate connection https://curl.se/docs/CVE-2026-87861.html - CVE-2026-87862: HSTS cache import drops longer-lived child https://curl.se/docs/CVE-2026-87862.html - CVE-2026-87863: HSTS response erases persisted entries https://curl.se/docs/CVE-2026-87863.html - CVE-2026-87865: knownhost callback mismatches key as missing https://curl.se/docs/CVE-2026-87865.html - CVE-2026-87866: wolfSSL public-key pinning bypass https://curl.se/docs/CVE-2026-87866.html - CVE-2026-92386: server-set cookie aborts cookie jar load https://curl.se/docs/CVE-2026-92386.html - CVE-2026-92387: never-ending loop via server response omission https://curl.se/docs/CVE-2026-92387.html - CVE-2026-92388: FTP wildcard write callback mixup https://curl.se/docs/CVE-2026-92388.html - CVE-2026-92389: TFTP direction confusion https://curl.se/docs/CVE-2026-92389.html - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints https://curl.se/docs/CVE-2026-92390.html - CVE-2026-92391: curl_mime_free stack overflow by recursion https://curl.se/docs/CVE-2026-92391.html - CVE-2026-92392: HTTP/2 upload Use-After-Free https://curl.se/docs/CVE-2026-92392.html - CVE-2026-94265: Authorization: Negotiate sent to foreign origin https://curl.se/docs/CVE-2026-94265.html - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL https://curl.se/docs/CVE-2026-94266.html - CVE-2026-107928: info leak uploading over WebSockets with GnuTLS https://curl.se/docs/CVE-2026-107928.html - CVE-2026-107929: local interface connection reuse mixup https://curl.se/docs/CVE-2026-107929.html - bump to version 8.23.0 (for details see [1], [2]) - drop '--enable-smb'/'--disable-smb' as smb support is gone (see [1]) [1] https://curl.se/changes.html [2] https://daniel.haxx.se/blog/2026/10/14/curl-8-23-0/ Signed-off-by: Peter Seiderer <ps.report@gmx.net> [Peter: add CVE info] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Add microblaze signal-frame unwinding fix back port to gcc 14.4.0. Upstream: https://gcc.gnu.org/cgit/gcc/commit/?id=4ef64ad1aa9bbbe9471610e2de6ef0c8afed8b1f Signed-off-by: Neal Frager <neal.frager@amd.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
No CVEs specified, but NEWS states: !5394 Backport various security fixes to glib-2-88 https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5394 And a number of other bugfixes: * Bugs fixed: - #4011 gio/tests/services: Installed service file contains build path after !5259 (Jaipaul Cheernam) - #4020 ‘TLS callback not invoked’ error on msys2-clang64 CI job (Luca Bacci) - !5262 Backport !5261 “gio/tests/services: Fix installed service file containing build path” to glib-2-88 - !5273 Backport !5266 “docs: Fix gio gi-docgen docs_url” to glib-2-88 - !5285 Backport !5283 “gconstructor: Reference _tls_used also on GCC, CLang” to glib-2-88 - !5323 Backport !5311 “fix: handle long filenames in trash by truncating from front” to glib-2-88 - !5379 Update Norwegian Nynorsk translation - !5394 Backport various security fixes to glib-2-88 * Translation updates: - Norwegian Nynorsk (Roy-Magne Mo) https://gitlab.gnome.org/GNOME/glib/-/blob/2.88.4/NEWS?ref_type=tags Signed-off-by: Peter Korsgaard <peter@korsgaard.com> [Fiona: fix typo in upstream NEWS link] Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
They have sponsored again the Buildroot Association for 2026. Thanks a lot Armadeus! Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
The patch bumps the Linux kernel to version 6.12.112 and U-Boot to version 2026.10. Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
The change history is available in the header of nuttcp.c. Drop 0001-susv3-legacy.patch: it replaced bzero()/bcopy() for uClibc configurations without SUSv3 legacy support, but Buildroot's uClibc-ng configuration enables UCLIBC_SUSV3_LEGACY, and 8.2.2 uses these functions in many more places, so the patch is no longer needed. The tarball hash is now locally computed, as the FreeBSD reference only covered 6.1.2. Assisted-by: Claude:claude-opus-5-5 Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
https://stellarium.org/release/2026/09/28/stellarium-26.3.html Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
The 64 bit division helpers of libgcc (__divdi3 and friends) are
compiled with -fexceptions -fnon-call-exceptions. Buildroot passes
TARGET_CFLAGS to gcc through CFLAGS_FOR_TARGET, so with BR2_OPTIMIZE_0
libgcc itself is built with -O0. GCC then keeps the (empty) exception
landing pads in those objects, which therefore reference
_Unwind_Resume() and __gcc_personality_v0(), normally provided by
libgcc_eh.a. Valgrind links its tools with -nodefaultlibs, so that
library is not available and the link fails on 32 bit targets:
ld: libgcc.a(_divdi3.o): in function `__divdi3':
libgcc2.c:1226: undefined reference to `_Unwind_Resume'
ld: libgcc.a(_divdi3.o):(.data.rel.local.DW.ref.__gcc_personality_v0[DW.ref.__gcc_personality_v0]+0x0):
undefined reference to `__gcc_personality_v0'
collect2: error: ld returned 1 exit status
make[4]: *** [Makefile:1180: memcheck-x86-linux] Error 1
Backport the upstream commit providing dummy definitions of both
symbols in libgcc-sup-<platform>.a, which is linked after -lgcc, so
toolchains providing the real symbols are unaffected. They can never be
reached, as Valgrind's core is plain C and never raises an exception.
This issue has been present since commit 0fe633c ("gcc: explicitly
use C{XX}FLAGS_FOR_TARGET instead of --enable-target-optspace"), which
started building the gcc target libraries with TARGET_CFLAGS, and thus
with -O0 when BR2_OPTIMIZE_0 is enabled, instead of -Os. This is not a
gcc regression: both gcc 11 and gcc 15 emit these landing pads at -O0.
It therefore affects 2015.08 and later, including 2025.02.x and
2026.02.x.
Fixes:
https://autobuild.buildroot.org/results/4a58c34308095e4d8ae91e0a779c94123ee497f6
Fixes: 0fe633c ("gcc: explicitly use C{XX}FLAGS_FOR_TARGET instead of --enable-target-optspace")
Assisted-by: Claude:claude-opus-5-5
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This invalidates the compromised eMudhra intermediates by blacklisting the roots that signed them[1][2]. Changelog: https://salsa.debian.org/debian/ca-certificates/-/blob/5bee010adca85eb867534f6445735ad5cc0dc6f3/debian/changelog Hash of the license file changed due to: --- output/build/ca-certificates-20260223/debian/copyright 2026-02-23 16:32:21.000000000 +0100 +++ output/build/ca-certificates-20260816+nmu1/debian/copyright 2026-10-20 16:31:42.000000000 +0200 @@ -2,7 +2,6 @@ Source: http://ftp.debian.org/debian/pool/main/c/ca-certificates/ Files: debian/* - examples/* Makefile mozilla/* sbin/* [1] https://emudhra.we-have-a-problem.com/ [2] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE Signed-off-by: Florian Larysch <fl@n621.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
The i.MX93 FRDM board is quite nicely supported in mainline, so add a defconfig using the latest mainline U-Boot/TF-A/Linux releases as an alternative to the vendor BSP used by freescale_imx93frdm_defconfig. Mainline U-Boot uses binman to assemble the flash.bin boot image, so we do not need the imx9-bootloader-prepare.sh post-image script. The existing imx93frdm readme.txt applies to this as well, so add a note about the choice of defconfig. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Update Eigen from 3.4.0 to 5.0.1. Remove the downstream CMake patch because the BLAS, LAPACK and CMake package toggles are now provided upstream in 5.0.1. Refresh the source and license hashes to match the new release and update the package license metadata to reflect the current upstream licensing files. Add a gcc >= 6 dependency in Config.in because Eigen 5.x requires C++14 support. Update the project homepage to the current upstream GitLab URL. Signed-off-by: Shubham Chakraborty <chakrabortyshubham66@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
host-gauche fails to build on build machines that have mbedtls 4.x
installed, e.g. Arch Linux:
checking for mbedtls/version.h... yes
...
tls/ssl: mbedtls
...
./tls-mbed.c:41:10: fatal error: mbedtls/ctr_drbg.h: No such file or directory
41 | #include <mbedtls/ctr_drbg.h>
| ^~~~~~~~~~~~~~~~~~~~
Since version 0.9.6, Gauche's configure enables mbedtls support by
default whenever it finds mbedtls on the system. For host-gauche, this
means the mbedtls of the build machine is used, and mbedtls 4.x no
longer provides mbedtls/ctr_drbg.h, which Gauche 0.9.12 needs.
host-gauche only provides the gosh interpreter used to build the target
gauche, so it doesn't need TLS support at all. Pass --with-tls=no to
not depend on whatever mbedtls the build machine has.
This issue has been present since commit 73e836e ("package/gauche:
bump to version 0.9.8"), which bumped Gauche from 0.9.5 (no mbedtls
support) and thereby made host-gauche auto-detect the build machine's
mbedtls. It therefore affects 2019.11 and later, including all
maintained branches.
Fixes:
https://autobuild.buildroot.org/results/14af1c847c09fd8df35c8923194c75931d8a568d
Fixes: 73e836e ("package/gauche: bump to version 0.9.8")
Assisted-by: Claude:claude-opus-5-5
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be> (cherry picked from commit 0e800f3)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.