…OABI

When python performs a cross compile, it uses a host interpreter to run
steps on behalf of the foreign architecture to finalize the build.

When performing these steps, foreign modules may be loaded if the SOABI
matches that of the host. This can lead to issues if the modules are
linked against a libc not available on the host or if the binaries
include instructions unsupported by the host.

For now, patch the foreign libraries out of PYTHONPATH and explicitly
define the path to sysconfigdata so builds can complete without error.

This method currently passes all upstream CI pipelines [0] and should
also work (with some modifications) for the migration to 3.12 [1].

Fixes: http://autobuild.buildroot.net/results/c854080e003e9a7d525325073190b472a8f982aa/
[0]: python/cpython#116294
[1]: https://lists.buildroot.org/pipermail/buildroot/2024-February/685369.html

Signed-off-by: Vincent Fazio <[email protected]>
Tested-by: Yann E. MORIN <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit d01e13c)
Signed-off-by: Peter Korsgaard <[email protected]>

zlib is an optional dependency dependency (enabled by default) since the
addition of the package in commit
8aaa7ec

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>
(cherry picked from commit 05f5e5b)
Signed-off-by: Peter Korsgaard <[email protected]>

… linux headers

Add BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_6 to prevent error:
Incorrect selection of kernel headers: expected 6.8.x, got 6.6.x

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6498278078

Signed-off-by: Giulio Benetti <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c245b37)
Signed-off-by: Peter Korsgaard <[email protected]>

--with-xdebug is not recognized since the addition of the package in
commit 7b7dffd:

configure: WARNING: unrecognized options: --disable-gtk-doc, --disable-gtk-doc-html, --disable-doc, --disable-docs, --disable-documentation, --with-xmlto, --with-fop, --disable-dependency-tracking, --enable-ipv6, --disable-nls, --with-xdebug

Fixes: 7b7dffd

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 98ee9f8)
Signed-off-by: Peter Korsgaard <[email protected]>

zlib is an optional dependency (enabled by default) since bump to
version 3.2.0 in commit 8280400 and
xdebug/xdebug@3954e5c

Fixes: 8280400

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 4b7aeee)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Giulio Benetti <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit dd79b8d)
Signed-off-by: Peter Korsgaard <[email protected]>

Since the toolchain Bootlin update to 2023.11-1 [1], the arm Linux
kernel build is broken with binutils >= 2.41 with:

  arch/arm/mm/proc-v7.S: Assembler messages:
  arch/arm/mm/proc-v7.S:640: Error: junk at end of line, first unrecognized character is `#'

A similar issue has already be fixed for qemu m68k [2].

Bump to the latest kernel 4.19 that already include the backport
of 790756c7e022 ("ARM: 8933/1: replace Sun/Solaris style flag on section directive")

[1] 7e0e6e3
[2] a1ce947

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6414160106 (TestFileCapabilities)

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 07ef00d)
Signed-off-by: Peter Korsgaard <[email protected]>

The last version bump removed python-setuptools runtime dependency
but doing so also removed the python3-pyexpat and python3-zlib
runtime depdencies [1] that are actually direct runtime
dependencies.

[1] 0811625

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656982 (TestPythonPy3Segno)

Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit d4833cc)
Signed-off-by: Peter Korsgaard <[email protected]>

…ndency

The last version bump removed python-pyopenssl runtime dependency but
doing so also removed the python-cryptography runtime depdency [1] that
is actually a direct runtime dependency.

While at it, update BR2_PACKAGE_HOST_RUSTC_TARGET_ARCH_SUPPORTS
dependency comment.

[1] 6008f2b

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656983 (TestPythonPy3ServiceIdentity)

Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit ee074dd)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Laurent Vivier <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 5652306)
Signed-off-by: Peter Korsgaard <[email protected]>

…nfig

u-boot-2021.04 seems to be broken when pylibfdt support is enabled
and the latest python3/setuptools are used.

Since the TestATFAllwinner is using bananapi_m64 as u-boot defconfig
but the Buildroot defconfig of this board was removed in 2022.11 [1]
update TestATFAllwinner to use a newer BSP. Use the one provided
by orangepi_zero_plus2_defconfig.

[1] daf3c66

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656317 (TestATFAllwinner)

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit eb16148)
Signed-off-by: Peter Korsgaard <[email protected]>

TestATFVexpress is using vexpress_aemv8a_juno as as u-boot defconfig
but the Buildroot defconfig of this board was removed in 2022.11 [1]

Since both TestATFVexpress and TestATFAllwinner are now using mainline
ATF, we don't really need several ATF test anymore. Initially [2],
several runtime test were added to test ATF/U-Boot combinations when
ATF was provided by a vendor: vexpress (mainline), Allwinner and
Marvell.

Keep TestATFAllwinner as ATF mainline test.

[1] 347c108
[2] 8cf3ce0

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 107bcd5)
Signed-off-by: Peter Korsgaard <[email protected]>

png.py import zlib [1] so python3-zlib needs to be installed at
runtime.

[1] https://gitlab.com/drj11/pypng/-/blob/pypng-0.20220715.0/code/png.py?ref_type=tags#L185

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6477656971 (TestPythonPy3Qrcode)

Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 15381b5)
Signed-off-by: Peter Korsgaard <[email protected]>

/dev/shm is a world-writable directory, like /tmp, and should also
have the sticky bit set.  Without this, any user can delete and
replace another user's files in /dev/shm.

This bug has been present since /dev/shm was added to the skeleton
/etc/fstab, but appears to have been fixed for systems using systemd
by commit 76fc927 "system: separate sysv and systemd parts of the
skeleton" which went into Buildroot 2017.08.

Signed-off-by: Ben Hutchings <[email protected]>
Fixes: 22fde22
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 0b2967e)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Peter Korsgaard <[email protected]>

cpe:2.3:a:ttyd_project:ttyd is a valid CPE identifier for this package:

    https://nvd.nist.gov/products/cpe/detail/DBEDA75E-4E19-48C1-92D7-43E4035BC048

Signed-off-by: TIAN Yuanhao <[email protected]>
[[email protected]: Move to its own patch]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 7d4ba7e)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6655119961

Signed-off-by: Waldemar Brodkorb <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 8d366db)
Signed-off-by: Peter Korsgaard <[email protected]>

…rkflow

Signed-off-by: Thomas Devoogdt <[email protected]>
Reviewed-by: J. Neuschäfer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 32753c6)
Signed-off-by: Peter Korsgaard <[email protected]>

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because
strcpy is used instead of strncpy.

Signed-off-by: Angelo Compagnucci <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit dfaa34d)
Signed-off-by: Peter Korsgaard <[email protected]>

Commit dfaa34d forgot to update hash of
LICENSE file:

ERROR: LICENSE has wrong sha256 hash:
ERROR: expected: e706384c6f299d1b6fa782ae657740b372b4bd7938a1a318bf94ac249114758a
ERROR: got     : cf234c27a3f275f5a050f4df3946f8855704226fe4e7ca8b33928cbcecbced37

LICENSE file has been updated to clean up authors and contributors:
python-pillow/Pillow@4197263

Fixes: dfaa34d
 - http://autobuild.buildroot.org/results/5a35d83c73367e1b20534b1bc7f2f564cf653a38

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit b8a86f5)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes CVE-2024-1874, CVE-2024-2756 & CVE-2024-3096.

Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2
Release notes: https://news-web.php.net/php.announce/423

Signed-off-by: Peter Korsgaard <[email protected]>

To ensure the correct prefix is used in the generated tinycbor.pc instead of
/usr/local:

>>> tinycbor 0.6.0 Building
..
sed > tinycbor.pc < tinycbor.pc.in \
        -e 's,@Prefix@,/usr/local,' \
        -e 's,@exec_prefix@,/usr/local,' \
        -e 's,@libdir@,/usr/local/lib,' \
        -e 's,@includedir@,/usr/local/include,' \
        -e 's,@Version@,0.6.0,'
>>> tinycbor 0.6.0 Installing to staging directory
..
install -m 644 tinycbor.pc /path/to/buildroot/output/host/aarch64-buildroot-linux-gnu/sysroot/usr/lib/pkgconfig/tinycbor.pc

Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit b059e08)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following CVEs:

- CVE-2024-32041 [Low[ OutOfBound Read in zgfx_decompress_segment
- CVE-2024-32039 [Moderate] Integer overflow & OutOfBound Write in
  clear_decompress_residual_data
- CVE-2024-32040 [Low] integer underflow in nsc_rle_decode
- CVE-2024-32458 [Low] OutOfBound Read in planar_skip_plane_rle
- CVE-2024-32459 [Low] OutOfBound Read in ncrush_decompress
- CVE-2024-32460 [Low] OutOfBound Read in interleaved_decompress

https://github.com/FreeRDP/FreeRDP/releases/tag/2.11.6

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit 1126be7)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following security issues:

CVE-2021-3575: A heap-based buffer overflow was found in openjpeg in
color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file.  An
attacker could use this to execute arbitrary code with the permissions of
the application compiled against openjpeg.

Signed-off-by: Angelo Compagnucci <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>
(cherry picked from commit ff36bc6)
Signed-off-by: Peter Korsgaard <[email protected]>

… series

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Arnout Vandecappelle <[email protected]>
(cherry picked from commit 9c592ec)
[Peter: drop 6.8.x bump]
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following security issues:

CVE-2024-32473: Ensure IPv6 is disabled on interfaces only allocated an IPv4
address by the engine

GHSA-x84c-p2g9-rqv9

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 8e37a88)
Signed-off-by: Peter Korsgaard <[email protected]>

https://github.com/moby/moby/releases/tag/v26.0.2

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 49c8154)
Signed-off-by: Peter Korsgaard <[email protected]>

- set CPE_ID_VENDOR to silence mismatched CVE-2001-0956 ([1], [2]) warning
  clearly aiming some other product/version ("speechd 0.54 with Festival or
  rsynth speech synthesis package")

[1] https://security-tracker.debian.org/tracker/CVE-2001-0956
[2] GHSA-67cw-4jhh-3jm7

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 2065273)
Signed-off-by: Peter Korsgaard <[email protected]>

GCC14 now treats implicit int types as error so when check() from
check-lxdialog.sh is called to check whether we can link against ncurses
it will fail silently and the help text indicating to install ncurses is
printed.

However, this is not due to missing ncurses but once the stderr redirect
to /dev/null is removed we can see the root cause:
<stdin>:2:1: error: return type defaults to ‘int’ [-Wimplicit-int]

So, in order for menuconfig to work with GCC14 lets just specify the
return type of main() as int.

Npte that the upstream kconfig in the linux kernel source tree no longer
carries or uses the check-lxdialog.sh script since commit 1c5af5cf9308
(kconfig: refactor ncurses package checks for building mconf and nconf),
so there is no commit we can backport to our kconfig copy.

Signed-off-by: Robert Marko <[email protected]>
Reviewed-by: Petr Vorel <[email protected]>
Tested-by: Petr Vorel <[email protected]>
[[email protected]: add note about upstream kernel]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit a6210d2)
Signed-off-by: Peter Korsgaard <[email protected]>

The commit [1] updated the u-boot version with the one used by
orangepi_zero_plus2_defconfig but the dependency on openssl
was forgotten.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6703221868

[1] eb16148

Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit bc75b09)
Signed-off-by: Peter Korsgaard <[email protected]>

Since the toolchain Bootlin update to 2023.11-1 [1], the arm Linux
kernel build is broken with binutils >= 2.41 with:

  arch/arm/mm/proc-v7.S: Assembler messages:
  arch/arm/mm/proc-v7.S:640: Error: junk at end of line, first unrecognized character is `#'

A similar issue has already be fixed for qemu m68k [2].

Bump to the latest kernel 4.19 that already include the backport
of 790756c7e022 ("ARM: 8933/1: replace Sun/Solaris style flag on section directive")

[1] 7e0e6e3
[2] a1ce947

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6703222383

Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 7e126bd)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6609466641

Signed-off-by: Julien Olivain <[email protected]>
Reviewed-by: Fabio Estevam <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit ffe920b)
Signed-off-by: Peter Korsgaard <[email protected]>

The build failed with:

  Incorrect selection of kernel headers: expected 6.8.x, got 6.5.x

Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/6498278078

Signed-off-by: Gero Schwäricke <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit f5aac04)
Signed-off-by: Peter Korsgaard <[email protected]>

The build for this defconfig fails with:

  Incorrect selection of kernel headers: expected 6.8.x, got 6.1.x

Found with the following command while trying to find boards that have
missing custom headers series:

  grep --null --recursive --files-without-match "BR2_TOOLCHAIN_EXTERNAL=y" ./configs \
    | xargs --null grep --null --files-with-matches "BR2_LINUX_KERNEL_CUSTOM_.*=y" \
    | xargs --null grep --null --files-without-match "BR2_KERNEL_HEADERS_[0-9]\+_[0-9]\+=y"\
    | xargs --null grep --files-without-match "BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_[0-9]\+_[0-9]\+=y"
  ./configs/mangopi_mq1rdw2_defconfig  # patch pending
  ./configs/raspberrypizero2w_defconfig
  ./configs/sipeed_licheepi_nano_defconfig  # patch pending

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6712162631

Signed-off-by: Gero Schwäricke <[email protected]>
[Romain: add gitlab-ci link]
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit dc18b63)
Signed-off-by: Peter Korsgaard <[email protected]>

Wireless regulatory database lists the allowed radio frequencies for
each local jurisdiction. Since linux-4.15 the kernel supports loading
the files regulatory.db/regulatory.db.p7s directly from the
/lib/firmware directory. Currently this package is not enabled and
kernel complains with the following message on every boot:
"""
platform regulatory.0: Direct firmware load for regulatory.db failed
with error -2
cfg80211: failed to load regulatory.db
"""
Add wireless regulatory database package to fix the issue.

Signed-off-by: Konstantin Aladyshev <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 16e9f51)
Signed-off-by: Peter Korsgaard <[email protected]>

For change log since v2.3.4, see:
- https://github.com/FluidSynth/fluidsynth/releases/tag/v2.3.5

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 0215a6d)
Signed-off-by: Peter Korsgaard <[email protected]>

Set ac_cv_path_SHUTDOWN to /sbin/shutdown to avoid the following build
failure when shutdown is not available on host raised since the addition
of the package in commit d12b63b:

configure: error: Missing required tool; need any one of: shutdown shutdown.bsd

Fixes: d12b63b
 - http://autobuild.buildroot.org/results/a8bbb5ced8343e08070361f260050de422144710

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 640a790)
Signed-off-by: Peter Korsgaard <[email protected]>

libgmp is included in coreutils (through bootstrap.conf) since bump to
version 9.0 in commit 2ee43ba and
https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=13046444888a7e96f48d28fdd5a6ffe03d4ab036:

configure: WARNING: unrecognized options: --disable-gtk-doc, --disable-gtk-doc-html, --disable-doc, --disable-docs, --disable-documentation, --with-xmlto, --with-fop, --enable-ipv6, --enable-static, --enable-shared, --without-gmp

Fixes: 2ee43ba

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 16463a0)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 6317f6c)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 7c1faf9)
Signed-off-by: Peter Korsgaard <[email protected]>

The http URL redirects to https. This commit updates this URL to
directly use https.

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 2aa3a23)
Signed-off-by: Peter Korsgaard <[email protected]>

Bump to latest version, fixing couple of bugs. Remove patch already
included in this release.

https://github.com/linux-pam/linux-pam/releases/tag/v1.6.1

Signed-off-by: Jan Čermák <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 0d394c3)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Sébastien Szymanski <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 74c0cf2)
Signed-off-by: Peter Korsgaard <[email protected]>

Sebastian email address at Smile is bouncing, so drop it
from the DEVELOPERS file.

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 7b973da)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Francois Perrad <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 566eb38)
Signed-off-by: Peter Korsgaard <[email protected]>

Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/stable-release-0-4-8-11/12265

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit f1723c9)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit d476d2e)
Signed-off-by: Peter Korsgaard <[email protected]>

Buildroot commit 38d0734 forgot to
add the corresponding BR2_HOST_CMAKE_AT_LEAST_X_Y option.

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
(cherry picked from commit 81d7103)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Michael Nosthoff <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 30a88f4)
Signed-off-by: Peter Korsgaard <[email protected]>

Release notes:
https://sourceforge.net/p/png-mng/mailman/message/58741099/

Signed-off-by: Bernd Kuhls <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit ce3ce43)
Signed-off-by: Peter Korsgaard <[email protected]>

Correctly fix atomic handling to avoid the following build failure with
all users of libglib2 (e.g. gdk-pixbuf) raised since bump to version
2.76.1 in commit 3f9622f:

/usr/lib/libglib-2.0.a(gthread-posix.c.o): in function `g_mutex_trylock':
gthread-posix.c:(.text+0xda8): undefined reference to `__atomic_compare_exchange_4'

Fixes:
 - http://autobuild.buildroot.org/results/24a358869b98d83ab374c7c3a185ced450064d35

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 929bffb)
Signed-off-by: Peter Korsgaard <[email protected]>

Commit 929bffb forgot to update patch
number
Moreover, replace it with a new iteration to follow upstream request [1]
and avoid the following build host build failure with br-autobuild-1:

/usr/bin/ld: cannot find /usr/lib64/libatomic.so.1.2.0: No such file or directory

Fixes: 929bffb
 - http://autobuild.buildroot.org/results/a12b9c4436594818f4ce128595b429adf7d90e31

[1]: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/3606

Signed-off-by: Fabrice Fontaine <[email protected]>
[[email protected]: mention upstream commit now it's merged]
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit f525778)
Signed-off-by: Peter Korsgaard <[email protected]>

NPTL is mandatory since bump to version 9.3.0 in commit
57aba03 and
OSGeo/PROJ@ce08025:

/home/buildroot/instance-0/output-1/build/proj-9.3.0/src/iso19111/factory.cpp: In member function 'std::shared_ptr<osgeo::proj::io::SQLiteHandle> osgeo::proj::io::SQLiteHandleCache::getHandle(const std::string&, PJ_CONTEXT*)':
/home/buildroot/instance-0/output-1/build/proj-9.3.0/src/iso19111/factory.cpp:622:9: error: 'pthread_atfork' was not declared in this scope; did you mean 'pthread_attr_t'?
  622 |         pthread_atfork(nullptr, nullptr,
      |         ^~~~~~~~~~~~~~
      |         pthread_attr_t

Fixes: 57aba03
 - http://autobuild.buildroot.org/results/392664375c5bc5f047d39bff31534a226e8ea526

Signed-off-by: Fabrice Fontaine <[email protected]>
Reviewed-by: Maxim Kochetkov <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 4eeb69c)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Brandon Maier <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a8c7a53)
Signed-off-by: Peter Korsgaard <[email protected]>

ti-sgx-km raises the following build failure without BR2_ARM_EABIHF:

eurasiacon/build/linux2/toplevel.mk:230: eurasiacon/build/linux2/moduledefs/target_armel.mk: No such file or directory

Fixes:
 - http://autobuild.buildroot.org/results/17e4da346d062570b9a84ab8eb1ce93c6d7384be
 - http://autobuild.buildroot.org/results/04fd659472f1928c2621354bb0ea3b60c5dfadec

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 5924a5c)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes CVE-2024-32002, CVE-2024-32004, CVE-2024-32020 and CVE-2024-32021
(for details see [1]).

[1] https://lore.kernel.org/lkml/[email protected]/

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following x86_64 build failure with binutils 2.41:

purgatory/arch/i386/entry32-16.S:23: Error: 64bit mode not supported on `i386'.

Fixes:
 - http://autobuild.buildroot.org/results/60f2f163b491879a8ea7f2d56a6b0d38b3cf439c

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit a2be156)
Signed-off-by: Peter Korsgaard <[email protected]>

With the bump to version 8.1.1, the patch that disabled the compilation
of the fp-bench test is no longer applicable, even though the package
compilation process does not report any errors in applying the patch
itself. The new patch does not disable the test by default but only if
the file fenv.h is not missing, with the hope that this approach will be
considered acceptable by the maintainer and merged upstream.

The patch is an adaptation of the one sent upstream.

Link: https://lists.nongnu.org/archive/html/qemu-devel/2021-03/msg00492.html
Signed-off-by: Dario Binacchi <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit 2bb0c57)
Signed-off-by: Peter Korsgaard <[email protected]>

Commit 3fa1ae0 ("package/qemu: add option to enable tracing")
added a patch with a wrong number.

Signed-off-by: Dario Binacchi <[email protected]>
Signed-off-by: Yann E. MORIN <[email protected]>
(cherry picked from commit bf8e4c2)
Signed-off-by: Peter Korsgaard <[email protected]>

And enable BR2_DOWNLOAD_FORCE_CHECK_HASHES.

Signed-off-by: Edgar Bonet <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 7f5cd99)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Edgar Bonet <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 74787fd)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  boot/barebox/Config.in:79: syntax error
  boot/barebox/Config.in:79:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:79:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:79:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:79:warning: ignoring unsupported character '.'
  boot/barebox/Config.in:79: invalid statement
  boot/barebox/Config.in:93: syntax error
  boot/barebox/Config.in:93:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:93:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:93:warning: ignoring unsupported character '/'
  boot/barebox/Config.in:93:warning: ignoring unsupported character '.'
  boot/barebox/Config.in:93: invalid statement

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit e86aec1)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/cmocka/Config.in:2: syntax error
  package/cmocka/Config.in:2: invalid statement
  package/cmocka/Config.in:3: invalid statement
  package/cmocka/Config.in:4: invalid statement
  [...]

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 4abda65)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/dovecot/Config.in:36: syntax error
  package/dovecot/Config.in:36:warning: ignoring unsupported character '/'
  package/dovecot/Config.in:36:warning: ignoring unsupported character '/'
  package/dovecot/Config.in:36:warning: ignoring unsupported character '.'
  package/dovecot/Config.in:36: invalid statement

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit ff70f9e)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/python-pydal/Config.in:2: syntax error
  package/python-pydal/Config.in:2: invalid statement
  package/python-pydal/Config.in:3: invalid statement
  [...]

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 9f8d3f4)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following error/warnings with kconfig from linux-6.9-rc5:

  package/x11r7/Config.in:14: syntax error
  package/x11r7/Config.in:14:warning: ignoring unsupported character '/'
  package/x11r7/Config.in:14:warning: ignoring unsupported character '/'
  package/x11r7/Config.in:14:warning: ignoring unsupported character '/'
  package/x11r7/Config.in:14:warning: ignoring unsupported character '.'
  package/x11r7/Config.in:14: invalid statement
  [...]

Signed-off-by: Peter Seiderer <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a214c45)
Signed-off-by: Peter Korsgaard <[email protected]>

NLS is an optional dependency since the addition of the package in
commit f78c5cb:

/home/autobuild/autobuild/instance-0/output-1/host/lib/gcc/arm-buildroot-linux-musleabi/12.3.0/../../../../arm-buildroot-linux-musleabi/bin/ld: ../lib/.libs/libshadow.a(libshadow_la-alloc.o): in function `xcalloc':
alloc.c:(.text+0x7c): undefined reference to `libintl_gettext'

Fixes: f78c5cb
 - http://autobuild.buildroot.org/results/9f604d09745ffa1f4db3bdcfe0326c236effac0c

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit f823846)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following build failure with kernel < 4.7 raised since bump to
version 2.5.0 in commit 0c15169 and
ppp-project/ppp@81ad945:

sys-linux.c: In function 'get_ppp_stats_rtnetlink':
sys-linux.c:1783:29: error: field 'ifsm' has incomplete type
 1783 |         struct if_stats_msg ifsm;
      |                             ^~~~

Fixes:
 - http://autobuild.buildroot.org/results/82392df447f650f241f23e59e65131fb4a930010

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 45c1def)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6761770801

The Linux kernel fails to build since commit e88225e (package/binutils:
make 2.41 the default version):

arch/arm/mm/proc-feroceon.S: Assembler messages:
arch/arm/mm/proc-feroceon.S:587: Error: junk at end of line, first unrecognized character is `#'
make[3]: *** [scripts/Makefile.build:430: arch/arm/mm/proc-feroceon.o] Error 1
make[3]: *** Waiting for unfinished jobs....

Fix the build by bumping the kernel to 4.14.336, which includes commit
3ab03df64f77 (ARM: 8933/1: replace Sun/Solaris style flag on section
directive):

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=3ab03df64f7754728a2257c47775a70a88428331

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c0dc1b3)
Signed-off-by: Peter Korsgaard <[email protected]>

And enable BR2_DOWNLOAD_FORCE_CHECK_HASHES.

Generated by utils/add-custom-hashes, with the (redundant)
linux-headers.hash replaced by a symlink.

Signed-off-by: Peter Korsgaard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 56ce35d)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix CVE-2024-23837 and CVE-2024-28871

GHSA-f9wf-rrjj-qx8m
GHSA-ffr2-45w9-7wmg
https://github.com/OISF/libhtp/blob/0.5.48/ChangeLog

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit babb39c)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes:
 - CVE-2024-23839 - Critical severity
 - CVE-2024-23836 - Critical severity
 - CVE-2024-23835 - High severity
 - CVE-2024-24568 - Moderate severity
 - CVE-2024-28870 - HIGH
 - CVE-2024-32663 CRITICAL (HIGH for 6.0.x)
 - CVE-2024-32664 CRITICAL (HIGH for 7.0.x)
 - CVE-2024-32867 MODERATE

https://forum.suricata.io/t/suricata-7-0-3-and-6-0-16-released/4468
https://forum.suricata.io/t/suricata-7-0-4-and-6-0-17-released/4534
https://forum.suricata.io/t/suricata-6-0-18-released/4539
https://forum.suricata.io/t/suricata-7-0-5-and-6-0-19-released/4617

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a8e60c4)
Signed-off-by: Peter Korsgaard <[email protected]>

sframe library was added by binutils 2.40 and
bminor/binutils-gdb@19e559f
resulting in the following static build failure:

/home/buildroot/autobuild/run/instance-1/output-1/build/binutils-2.41/bfd/elf-sframe.c:220: undefined reference to `sframe_decode'

[...]

configure: error: bfd library not found

Fixes:
 - http://autobuild.buildroot.org/results/a9f3e09e6543b3773440c011e93bd41e357691e4

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 5272c6b)
Signed-off-by: Peter Korsgaard <[email protected]>

- Fixed: [CVE-2024-34402]
    Protect against integer overflow in ComposeQueryEngine
- Fixed: [CVE-2024-34403]
    Protect against integer overflow in ComposeQueryMallocExMm

https://github.com/uriparser/uriparser/blob/uriparser-0.9.8/ChangeLog

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 6fe29e4)
Signed-off-by: Peter Korsgaard <[email protected]>

PIE will be set by buildroot if the user wants it so set
{COMPILE,LINK}_PIE to an empty value to fix the following build failure
raised since the addition of the package in commit
02c818b:

/home/buildroot/autobuild/run/instance-3/output-1/host/bin/m68k-linux-gcc -W -Wall -Waggregate-return -Wcast-align -Wconversion -Wdisabled-optimization -Wmissing-declarations -Wmissing-format-attribute -Wmissing-noreturn -Wmissing-prototypes -Wpointer-arith -Wredundant-decls -Wshadow -Wstrict-prototypes -Wwrite-strings -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -O2 -g0   -std=gnu99  -DLIBEXECDIR=\"/usr/lib\" -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Wl,-z,relro -Wl,-stats   -fPIE -pie -Wl,-z,now  utempter.c -o utempter

[...]

/home/buildroot/autobuild/run/instance-3/output-1/host/opt/ext-toolchain/bin/../lib/gcc/m68k-buildroot-linux-uclibc/12.3.0/../../../../m68k-buildroot-linux-uclibc/bin/ld: /home/buildroot/autobuild/run/instance-3/output-1/host/m68k-buildroot-linux-uclibc/sysroot/usr/lib/Scrt1.o: in function `lib_main':
(.text+0x4): undefined reference to `__shared_flat_add_library'

Fixes: 02c818b
 - http://autobuild.buildroot.org/results/3a5581fd4edf56bbdc48ab111a2351fc70f1c703

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 36b0692)
Signed-off-by: Peter Korsgaard <[email protected]>

linux-pam is an optional dependency which is enbled by default since
bump to version 2.5.0 in commit 0c15169
and
ppp-project/ppp@2883dd0

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit bbcf02c)
Signed-off-by: Peter Korsgaard <[email protected]>

The CPIO filesystem generated by TestPerlDBDmysql is too large, and
doesn't fit as an initramfs in the 256MB of RAM available in the
versatilepb machine. This causes a failure while running a basic
test "perl -MDBI -e '1'" since "/usr/lib/perl5", and many files
being missing from the root filesystem, ultimately causing the test
to fail.

Can't locate DBI.pm in @inc (you may need to install the DBI module)
(@inc entries checked: /usr/lib/perl5/site_perl/5.38.2/arm-linux
/usr/lib/perl5/site_perl/5.38.2 /usr/lib/perl5/5.38.2/arm-linux
/usr/lib/perl5/5.38.2).

It would make sense to switch all test cases to use ext2 + a
hard-drive, but for now, let's fix the few test cases that are causing
problems.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6735654506

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 8937cd0)
Signed-off-by: Peter Korsgaard <[email protected]>

Now that the TestPerlDBDmysql can be run normally, a new runtime issue
appear due to switch from oracle-mysql to MariaDB:

  # perl -MDBI -e '1'
  # echo $?
  0

  # perl -MDBD::mysql -e '1'
  Can't load '/usr/lib/perl5/site_perl/5.38.2/arm-linux/auto/DBD/mysql/mysql.so'
  for module DBD::mysql: /usr/lib/perl5/site_perl/5.38.2/arm-linux/auto/DBD/mysql/mysql.so:
  undefined symbol: net_buffer_length at /usr/lib/perl5/5.38.2/arm-linux/DynaLoader.pm line 206.

This is fixed by an upstream commit [1] from 4.046_01 release.

[1] perl5-dbi/DBD-mysql@0f0cebe

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6735654506

Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit cefcd5b)
Signed-off-by: Peter Korsgaard <[email protected]>

cpe:2.3:a:bencollins:jwt_c_library is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/detail/6335E595-6F38-4837-83BB-C78B687BB75B

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 1a2564e)
Signed-off-by: Peter Korsgaard <[email protected]>

Fix the following static build failure raised since bump to version
version 6.0.14 in commit ce17f93 and
OISF/suricata@31ba4fd:

configure:22378: checking for pcap_open_dead in -lpcap
configure:22407: /home/buildroot/autobuild/run/instance-3/output-1/host/bin/x86_64-linux-gcc -o conftest -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -O2 -g0  -static -std=c11 -march=native -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -static -rdynamic conftest.c -lpcap  -ljansson -lpthread -lyaml -lpcre -latomic -lz >&5
/home/buildroot/autobuild/run/instance-3/output-1/host/opt/ext-toolchain/bin/../lib/gcc/x86_64-buildroot-linux-musl/12.3.0/../../../../x86_64-buildroot-linux-musl/bin/ld: /home/buildroot/autobuild/run/instance-3/output-1/host/x86_64-buildroot-linux-musl/sysroot/usr/lib/../lib64/libpcap.a(pcap-linux.o): in function `nl80211_init':
pcap-linux.c:(.text+0xc34): undefined reference to `nl_socket_alloc'

[...]

checking for pcap_open_dead in -lpcap... no

Fixes: ce17f93
 - http://autobuild.buildroot.org/results/9e25c2508bd4100d2d1d3180e79060d762361213

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit a3ee47e)
Signed-off-by: Peter Korsgaard <[email protected]>

openocd is not compatible with libgpiod2 resulting in the following
build failure since the addition of libgpiod2 in commit
57391fa:

src/jtag/drivers/linuxgpiod.c: In function 'helper_get_line':
src/jtag/drivers/linuxgpiod.c:283:19: error: 'GPIOD_LINE_REQUEST_DIRECTION_INPUT' undeclared (first use in this function); did you mean 'GPIOD_LINE_DIRECTION_INPUT'?
  283 |         int dir = GPIOD_LINE_REQUEST_DIRECTION_INPUT, flags = 0, val = 0, retval;
      |                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |                   GPIOD_LINE_DIRECTION_INPUT

Fixes: 57391fa
 - http://autobuild.buildroot.org/results/7195e8b76350f26ab3b963702d88b254512e6928

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit be3252f)
Signed-off-by: Peter Korsgaard <[email protected]>

As reported by Antoine Coutant on the Buildroot mailing list [1]:

rpds depends on the crate pyo3. This crate uses

  "std::sync::atomic::AtomicI64"

which doesn't exist for 32 bits targets.
That leads to an error as reported by Buildroot Gitlab-ci.

An issue have been opened on pyo3's github [2].
A fix have been accepted by pyo3 [3] and merged in pyo3 0.20.3 release
[4]. This pyo3 0.20.3 uses crate portable-atomic [5] to provide atomic
types and compare and swap operations for all targets that can use std.

python-rpds-py 0.18.1 is the first release that use pyo3 0.20.3.

Before python-rpds-py 0.18.1 release fixing this issue would require
that we be able to patch a package during the Cargo vendoring step [6].

[1] http://lists.busybox.net/pipermail/buildroot/2024-February/684867.html
[2]: PyO3/pyo3#3614
[3]: PyO3/pyo3#3619
[4]: https://github.com/PyO3/pyo3/blob/v0.20.3/CHANGELOG.md
[5]: https://github.com/taiki-e/portable-atomic
[6]: http://lists.busybox.net/pipermail/buildroot/2024-February/684886.html

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/6783811842 (TestPythonPy3Dtschema)
https://gitlab.com/buildroot.org/buildroot/-/jobs/6783811860 (TestPythonPy3FlaskExpectsJson)

Reported-by: Antoine Coutant <[email protected]>
Cc: James Hilliard <[email protected]>
Signed-off-by: Romain Naour <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 26b0540)
Signed-off-by: Peter Korsgaard <[email protected]>

Disable performance measurement tools which are enabled by default since
bump to version 4.2.5 in commit d3a8177

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 8b1b438)
Signed-off-by: Peter Korsgaard <[email protected]>

This is irrelevant as of 402ad9f (package/network-manager: bump
to version 1.22.10).

Details: https://lore.kernel.org/all/ZgXKrtfSjahxswtP@landeda/

Signed-off-by: James Hilliard <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit dc21afe)
Signed-off-by: Peter Korsgaard <[email protected]>

Fixes the following security issue:

CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin

Signed-off-by: Peter Korsgaard <[email protected]>

- Use official tarball and so drop autoreconf
- Update hash of LICENSE file, verbatim copy of the current MPL 2.0 with
  benmcollins/libjwt@ebebb50
- Fix CVE-2024-25189: libjwt 1.15.3 uses strcmp (which is not constant
  time) to verify authentication, which makes it easier to bypass
  authentication via a timing side channel.

benmcollins/libjwt@v1.15.3...v1.17.0

Signed-off-by: Fabrice Fontaine <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c65639e)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 0623c53)
Signed-off-by: Peter Korsgaard <[email protected]>

Signed-off-by: Julien Olivain <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit 639f507)
Signed-off-by: Peter Korsgaard <[email protected]>

pppd fails to start on a systems with buildroot 2024.02.x because of
missing pppd directory in /var/run. There are some logs hinting at this
issue:
Warning: couldn't open ppp database /var/run/pppd/pppd2.tdb
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory
Can't create lock file /var/run/pppd/lock/LCK..ppp-tty-fifo1: No such file or directory

The issue has already been detected and fixed upstream (see [1]) and is
expected to be released on a v2.5.1, but this release seems to be stalled
for now (see [2]). Bump on current master, which currently reflects what
will likely be the 2.5.1.

[1] ppp-project/ppp#419
[2] ppp-project/ppp#460

Signed-off-by: Alexis Lothoré <[email protected]>
Signed-off-by: Thomas Petazzoni <[email protected]>
(cherry picked from commit c1b04a3)
Signed-off-by: Peter Korsgaard <[email protected]>