From b88b96246d100843004cd7cbb7f642ad982bfb88 Mon Sep 17 00:00:00 2001 From: Fiona Klute Date: Fri, 3 Jul 2026 20:03:54 +0200 Subject: [PATCH 1/6] package/apr: fix build failure with GCC >= 14 The workaround in 3d06661fc1bf0f88356981a44cb93b7b0c76a669 for the broken C23 check was incorrect: When overriding ac_cv_prog_cc_c23 the value must either be "no" (to indicate that C23 is not supported) or contain the command line parameters to enable C23 with the C compiler in use (e.g. "-std=gnu23", may be an empty string if appropriate). The workaround set it to "yes" for host GCC >= 14, making builds fail. However, the original issue was that apr may try to enable C23 in host CC calls if the target CC supports it. So instead of figuring out the correct arguments for GCC >= 14, we can set ac_cv_prog_cc_c23=no only for host GCC <= 13 and leave it unset otherwise, as in that case enabling C23 will do no harm. Fixes: 3d06661fc1bf0f88356981a44cb93b7b0c76a669 Fixes: - https://autobuild.buildroot.net/results/77c/77cd5456169e04c2f92dc328c4b6828513d1195f/ - https://autobuild.buildroot.net/results/7a4/7a4fb2b21027f98df607871d9fe0dd234d44aebb/ - https://autobuild.buildroot.net/results/a6c/a6cef4c5965fdeb40d3b39cbd40941329f4fc1c8/ (and more) Tested-by: Bernd Kuhls Signed-off-by: Fiona Klute Signed-off-by: Romain Naour --- package/apr/apr.mk | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/package/apr/apr.mk b/package/apr/apr.mk index e8cf0f309e9..f7f7553e540 100644 --- a/package/apr/apr.mk +++ b/package/apr/apr.mk @@ -34,7 +34,6 @@ APR_CONF_ENV = \ ac_cv_mmap__dev_zero=yes \ ac_cv_func_setpgrp_void=yes \ apr_cv_process_shared_works=yes \ - ac_cv_prog_cc_c23=$(if $(BR2_HOST_GCC_AT_LEAST_14),yes,no) \ apr_cv_mutex_robust_shared=no \ apr_cv_tcp_nodelay_with_cork=yes \ ac_cv_sizeof_struct_iovec=8 \ @@ -51,6 +50,10 @@ APR_CONF_ENV = \ apr_preload_done=yes APR_CONFIG_SCRIPTS = apr-1-config +ifeq ($(BR2_HOST_GCC_AT_LEAST_14),) +APR_CONF_ENV += ac_cv_prog_cc_c23=no +endif + # Doesn't even try to guess when cross compiling ifeq ($(BR2_TOOLCHAIN_HAS_THREADS),y) APR_CONF_ENV += apr_cv_pthreads_lib="-lpthread" From bff9d7181f53886332df55877eda9507cbda2ec4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Vincent=20Stehl=C3=A9?= Date: Wed, 17 Jun 2026 19:10:41 +0200 Subject: [PATCH 2/6] =?UTF-8?q?DEVELOPERS:=20add=20Vincent=20Stehl=C3=A9?= =?UTF-8?q?=20for=20aarch64-efi=20files?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Vincent Stehlé Cc: Dick Olsson Signed-off-by: Julien Olivain --- DEVELOPERS | 2 ++ 1 file changed, 2 insertions(+) diff --git a/DEVELOPERS b/DEVELOPERS index 1770eeeb436..fdfab8b4899 100644 --- a/DEVELOPERS +++ b/DEVELOPERS @@ -3359,11 +3359,13 @@ F: package/nss-myhostname/ F: package/utp_com/ N: Vincent Stehlé +F: board/aarch64-efi/ F: board/arm/fvp-ebbr/ F: board/compulab/iot-gate-imx8-ebbr/ F: board/pine64/rockpro64-ebbr/ F: board/qemu/aarch64-ebbr/ F: board/qemu/arm-ebbr/ +F: configs/aarch64_efi_defconfig F: configs/arm_fvp_ebbr_defconfig F: configs/iot-gate-imx8_ebbr_defconfig F: configs/qemu_aarch64_ebbr_defconfig From d250f65cf6394adcfdf0d10262374be0dd1e7bf1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Vincent=20Stehl=C3=A9?= Date: Wed, 17 Jun 2026 19:10:42 +0200 Subject: [PATCH 3/6] configs/aarch64_efi: support net boot with devicetree MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit UEFI platforms with a Devicetree have recently gained support for some form of network booting. [1][2] On those platforms, the UEFI firmware downloads the disk image over the network and presents it to UEFI applications using the simple filesystem protocol. This is sufficient for OS loaders such as e.g. GRUB to find their configuration and load the kernel image. The firmware must also describe the ramdisk to the OS, so that it finds its root filesystem. On ACPI based platforms this is done with an NVDIMM Firmware Interface Table (NFIT). On Devicetree based platforms, this can be done with a pmem node. [3] Add a kernel config fragment to add pmem support, which enables network boot on UEFI platforms with Devicetree. Also, briefly mention that we support this scenario in the readme. This can be tested on Qemu, with the following procedure: Build aarch64_efi_defconfig in a folder, to obtain output/images/disk.img, and serve the image over HTTP with python: $ python -m http.server -d output/images/ In another terminal and another folder, configure a U-Boot based firmware starting from qemu_aarch64_ebbr_defconfig, and with the following additional configurations: BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2026.04" BR2_TARGET_UBOOT_NEEDS_DTC=y Add the following U-Boot configurations to board/qemu/aarch64-ebbr/u-boot.fragment: CONFIG_EFI_HTTP_BOOT=y CONFIG_NET_LWIP=y Build everything; you should obtain output/images/flash.bin. Start Qemu as per board/qemu/aarch64-ebbr/readme.txt, but omitting the hd0 -device and -drive stanzas. U-Boot should start; interrupt it with enter. At U-Boot prompt, type the following commands: => setenv loadaddr 0x43000000 => efidebug boot rm 0 => efidebug boot add -u 0 net http://10.0.2.2:8000/disk.img => efidebug boot order 0 => bootefi bootmgr U-Boot should download the disk image over HTTP and boot Linux with UEFI. Look for the following message in Linux boot log, to confirm that it did indeed mount its rootfs from the downloaded image: EXT4-fs (pmem0p2): mounted filesystem ... Link: https://www.linaro.org/blog/installing-fedora-with-uefi-http-boot/ [1] Link: https://docs.u-boot-project.org/en/latest/develop/uefi/uefi.html#uefi-http-boot-using-the-legacy-tcp-stack [2] Link: https://github.com/ARM-software/edge-iot-arch-guide/blob/main/source/http-boot/pmem_node.md [3] Signed-off-by: Vincent Stehlé Cc: Dick Olsson Signed-off-by: Julien Olivain --- board/aarch64-efi/linux-pmem-netboot.fragment | 3 +++ board/aarch64-efi/readme.txt | 11 +++++++++++ configs/aarch64_efi_defconfig | 1 + 3 files changed, 15 insertions(+) create mode 100644 board/aarch64-efi/linux-pmem-netboot.fragment diff --git a/board/aarch64-efi/linux-pmem-netboot.fragment b/board/aarch64-efi/linux-pmem-netboot.fragment new file mode 100644 index 00000000000..8c3e9109197 --- /dev/null +++ b/board/aarch64-efi/linux-pmem-netboot.fragment @@ -0,0 +1,3 @@ +CONFIG_BLK_DEV_PMEM=y +CONFIG_LIBNVDIMM=y +CONFIG_OF_PMEM=y diff --git a/board/aarch64-efi/readme.txt b/board/aarch64-efi/readme.txt index 0e7ea0b5dd7..259eb5b8c9d 100644 --- a/board/aarch64-efi/readme.txt +++ b/board/aarch64-efi/readme.txt @@ -48,6 +48,17 @@ alternative to QEMU_EFI.fd. You will also need to change the machine specification to "-M virt,secure=on" on qemu command line, to enable TrustZone support, and you will need to increase the memory with "-m 1024". +HTTP boot +--------- + +Some U-Boot and Devicetree based firmwares are capable of booting with UEFI from +HTTP(s). [4] + +The aarch64_efi_defconfig has appropriate persistent memory support compiled in +the Linux kernel to support this scenario. [5] + [1]: https://github.com/ARM-software/ebbr [2]: https://developer.arm.com/architectures/system-architectures/arm-systemready [3]: https://github.com/glikely/u-boot-tfa-build +[4]: https://docs.u-boot-project.org/en/latest/develop/uefi/uefi.html#uefi-http-boot-using-the-legacy-tcp-stack +[5]: https://github.com/ARM-software/edge-iot-arch-guide/blob/main/source/http-boot/pmem_node.md diff --git a/configs/aarch64_efi_defconfig b/configs/aarch64_efi_defconfig index 390f3fc6ac7..78292c0cc43 100644 --- a/configs/aarch64_efi_defconfig +++ b/configs/aarch64_efi_defconfig @@ -11,6 +11,7 @@ BR2_LINUX_KERNEL=y BR2_LINUX_KERNEL_CUSTOM_VERSION=y BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.18.14" BR2_LINUX_KERNEL_USE_ARCH_DEFAULT_CONFIG=y +BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="board/aarch64-efi/linux-pmem-netboot.fragment" BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y BR2_LINUX_KERNEL_NEEDS_HOST_PYTHON3=y BR2_TARGET_ROOTFS_EXT2=y From 6021eda8a7532c6cbe71b7a7523fbf82a403f6b7 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 5 Jul 2026 13:55:19 +0200 Subject: [PATCH 4/6] package/{rust, rust-bin}: security bump to version 1.96.1 https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/ Fixes CVE-2025-15661, CVE-2026-55199 & CVE-2026-55200. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/rust-bin/rust-bin.hash | 132 ++++++++++++++++----------------- package/rust-bin/rust-bin.mk | 2 +- package/rust/rust.hash | 4 +- package/rust/rust.mk | 2 +- 4 files changed, 70 insertions(+), 70 deletions(-) diff --git a/package/rust-bin/rust-bin.hash b/package/rust-bin/rust-bin.hash index a957d756e8b..2196ba3a742 100644 --- a/package/rust-bin/rust-bin.hash +++ b/package/rust-bin/rust-bin.hash @@ -1,72 +1,72 @@ # Generated with utils/update-rust # Do not edit manually -# From https://static.rust-lang.org/dist/rust-1.96.0-aarch64-unknown-linux-gnu.tar.xz.sha256 -sha256 371eadcca97062219cbd8593628eb5d2802bc370515d085fedce1b56b2baed57 rust-1.96.0-aarch64-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-1.96.0-i686-unknown-linux-gnu.tar.xz.sha256 -sha256 9f1f65f624e4c5e41b45be61d1c7e6cd595b77001f66cb9b830ac0e502d2d301 rust-1.96.0-i686-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-1.96.0-powerpc-unknown-linux-gnu.tar.xz.sha256 -sha256 491ad70cce1b874420ed93724871e968a03406433fee971a64bc5d253406f8bd rust-1.96.0-powerpc-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-1.96.0-powerpc64-unknown-linux-gnu.tar.xz.sha256 -sha256 d356154ab4d25693c652e34ce14ddd0ca6d5df5ce9c97bab5077928837ad2c58 rust-1.96.0-powerpc64-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-1.96.0-powerpc64le-unknown-linux-gnu.tar.xz.sha256 -sha256 fea8e9155c69740415f1c96fa8879e61b16238e26cfee62d15f4f93aa83cb8d5 rust-1.96.0-powerpc64le-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-1.96.0-riscv64gc-unknown-linux-gnu.tar.xz.sha256 -sha256 74902bc33de609a6ac89782fa987f0e35b08bf32cc5e838eb7c542a18c7ec554 rust-1.96.0-riscv64gc-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-1.96.0-s390x-unknown-linux-gnu.tar.xz.sha256 -sha256 fba86103d04611dcf342d84abc8b5ad31fc80c24fb80ca79a1584c0f52ed1324 rust-1.96.0-s390x-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-1.96.0-x86_64-unknown-linux-gnu.tar.xz.sha256 -sha256 c295047583a56238ea06b43f849f4b877fa12bfd4c7103f8d9a74c94c9c4e108 rust-1.96.0-x86_64-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-aarch64-unknown-linux-gnu.tar.xz.sha256 -sha256 538e85452709687797d990579a491ff9b02f8bffba4a5d54cfa945e28868053e rust-std-1.96.0-aarch64-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-aarch64-unknown-linux-musl.tar.xz.sha256 -sha256 e7d89a29abcc2cf2f31cfe3d898c1713fb12f395e788809d3b01b23fdd5813b4 rust-std-1.96.0-aarch64-unknown-linux-musl.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-arm-unknown-linux-gnueabi.tar.xz.sha256 -sha256 2e4bca102be6c39e1a0bc3efe2cd5807eb66aa92ad994cc8e9f3a4ce53c8310c rust-std-1.96.0-arm-unknown-linux-gnueabi.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-arm-unknown-linux-gnueabihf.tar.xz.sha256 -sha256 8921e7ce73fdaf42e277def64f87c37e22ed5b8059db63dc77a38f8143792138 rust-std-1.96.0-arm-unknown-linux-gnueabihf.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-arm-unknown-linux-musleabi.tar.xz.sha256 -sha256 3a09829f19860e3fa85e8324e0349826f2f5243e7febeea15d44a08320f8ba7a rust-std-1.96.0-arm-unknown-linux-musleabi.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-arm-unknown-linux-musleabihf.tar.xz.sha256 -sha256 c69514c229fa42cd05ad145e1338b77c4c941b39585fad14268667cfe6ce8f33 rust-std-1.96.0-arm-unknown-linux-musleabihf.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-armv5te-unknown-linux-gnueabi.tar.xz.sha256 -sha256 680de9708dde0f626e06725b2f2e4c798fff36f51facdc077f725e4736fe26b2 rust-std-1.96.0-armv5te-unknown-linux-gnueabi.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-armv5te-unknown-linux-musleabi.tar.xz.sha256 -sha256 258e9e6f41d583036e4b48a03a98eab2054437303ad18bc408ef1dbc7292c9c2 rust-std-1.96.0-armv5te-unknown-linux-musleabi.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-armv7-unknown-linux-gnueabi.tar.xz.sha256 -sha256 ee3afa3fc218741abe8d1c02359eabcf3b1ec1b808d2598856d9bbeb139e3e9c rust-std-1.96.0-armv7-unknown-linux-gnueabi.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-armv7-unknown-linux-gnueabihf.tar.xz.sha256 -sha256 460140e9be152e2b5a125d45a8cd11d9d956cb0e6cf8bc30c45ac009b4bfc896 rust-std-1.96.0-armv7-unknown-linux-gnueabihf.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-armv7-unknown-linux-musleabi.tar.xz.sha256 -sha256 45b2fb049f37495eb3669936923b694720534d46f14ac1ad940ffcff5d65d428 rust-std-1.96.0-armv7-unknown-linux-musleabi.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-armv7-unknown-linux-musleabihf.tar.xz.sha256 -sha256 18a10d9a1a78d91eca8e378ed87e4d754704ec2f7d5a5bcaa878b629c0e426f8 rust-std-1.96.0-armv7-unknown-linux-musleabihf.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-i586-unknown-linux-gnu.tar.xz.sha256 -sha256 3f42faca55ac0df4e94aa5ac3c6b86c4a4d5a623cfc084bb41b76674a7705d35 rust-std-1.96.0-i586-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-i586-unknown-linux-musl.tar.xz.sha256 -sha256 6eea0bd0b88ce657b91ff3a710a7040d042d93194504fba78d1baf9fe0f9a62f rust-std-1.96.0-i586-unknown-linux-musl.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-i686-unknown-linux-gnu.tar.xz.sha256 -sha256 2d13b8c801c9ad1ff55dceacaf1d1777601e328bc56cd390c4209a2f61d76ce2 rust-std-1.96.0-i686-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-i686-unknown-linux-musl.tar.xz.sha256 -sha256 c9b71e301ce9fc34fee2cb373924423472450497942e676ad7ef232ebefafc04 rust-std-1.96.0-i686-unknown-linux-musl.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-powerpc-unknown-linux-gnu.tar.xz.sha256 -sha256 d434927909a92ec1298bd9ea51a3d251c1d5ef44c7ed334353cb832a7e124a7b rust-std-1.96.0-powerpc-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-powerpc64-unknown-linux-gnu.tar.xz.sha256 -sha256 cf273029a7a8dba56fe4fd517ae4c8bd862a3e27c56369a8b9d6411c8d74085d rust-std-1.96.0-powerpc64-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-powerpc64le-unknown-linux-gnu.tar.xz.sha256 -sha256 347ff4e5dd463849f21391b9db90093dee33578d98f30b42bbb78b4777921747 rust-std-1.96.0-powerpc64le-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-riscv64gc-unknown-linux-gnu.tar.xz.sha256 -sha256 595e4a980dccb7571441f330782cad6cd23d64f331ed453de57dd386665f5615 rust-std-1.96.0-riscv64gc-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-riscv64gc-unknown-linux-musl.tar.xz.sha256 -sha256 c65e85287b948cd5f3a2c8a18f51d44a9768829d9ee13d99e81953eee440f500 rust-std-1.96.0-riscv64gc-unknown-linux-musl.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-s390x-unknown-linux-gnu.tar.xz.sha256 -sha256 92e5a9dcd09892d399963ab0e8de121e0027f2213168f32e13014641c0bfb13b rust-std-1.96.0-s390x-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-sparc64-unknown-linux-gnu.tar.xz.sha256 -sha256 687a80cee4631d02b820e7a652bd4e30661772a684fa0ce2f936cdd932f31d51 rust-std-1.96.0-sparc64-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-x86_64-unknown-linux-gnu.tar.xz.sha256 -sha256 c09c7c646248f14f473f5f7a029af15ee57c3a9f9bc93dfa72d9621938586b82 rust-std-1.96.0-x86_64-unknown-linux-gnu.tar.xz -# From https://static.rust-lang.org/dist/rust-std-1.96.0-x86_64-unknown-linux-musl.tar.xz.sha256 -sha256 4db24564076c243b377585bec0b938388638301ea5003d6245c4cbf9d86b11d0 rust-std-1.96.0-x86_64-unknown-linux-musl.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-aarch64-unknown-linux-gnu.tar.xz.sha256 +sha256 3abcb9489d001d95f30e8cfe68118be85afb0adbf0a9b21438909719689c08fb rust-1.96.1-aarch64-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-i686-unknown-linux-gnu.tar.xz.sha256 +sha256 68d2281feea295d94c41f4b1eaa379b7c2484e4a7f8e818e15cea54077db6dd7 rust-1.96.1-i686-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-powerpc-unknown-linux-gnu.tar.xz.sha256 +sha256 fb946ba296309d1a12a05fc1ed546aa0bed1c91a1e9db08204dfcd4c78462e57 rust-1.96.1-powerpc-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-powerpc64-unknown-linux-gnu.tar.xz.sha256 +sha256 ca11fd1b7a18cae49e07f700c01290bbe94dcb0ce17ec15142a474487fc7764a rust-1.96.1-powerpc64-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-powerpc64le-unknown-linux-gnu.tar.xz.sha256 +sha256 0b67fc803e028110a98387da5b66323afb98a0e4f58a0fb09b05a180083f13d9 rust-1.96.1-powerpc64le-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-riscv64gc-unknown-linux-gnu.tar.xz.sha256 +sha256 107ebdaac6512820b1fdf55920317687a5ff0255602db23a006a982f90880cf6 rust-1.96.1-riscv64gc-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-s390x-unknown-linux-gnu.tar.xz.sha256 +sha256 2696047c1f80a544283bee9f8bfb9cab2cbd2290501c21cf568943e0e3870dab rust-1.96.1-s390x-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-1.96.1-x86_64-unknown-linux-gnu.tar.xz.sha256 +sha256 d29ccb1559a177c4e72291f6e5f629de7fe8885e7521ca47802627544b121e95 rust-1.96.1-x86_64-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-aarch64-unknown-linux-gnu.tar.xz.sha256 +sha256 24bd362ff484421cae8be8c4d326fde143a086782e59e21fc7f353a5d04cd630 rust-std-1.96.1-aarch64-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-aarch64-unknown-linux-musl.tar.xz.sha256 +sha256 47de864655e5c7b0843787828b52d24fa0aedf253cfa7ce9b02e7c812b53bf83 rust-std-1.96.1-aarch64-unknown-linux-musl.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-arm-unknown-linux-gnueabi.tar.xz.sha256 +sha256 7d3ddc5703df16d05e108c21e8c663e2b2b6c0fb9d6bc2e6e8ffd9910e0b3e3f rust-std-1.96.1-arm-unknown-linux-gnueabi.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-arm-unknown-linux-gnueabihf.tar.xz.sha256 +sha256 37dc4e8f833b592470282d3524e49cad5c88df24e0f5652c46a32bc33ab5a4a7 rust-std-1.96.1-arm-unknown-linux-gnueabihf.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-arm-unknown-linux-musleabi.tar.xz.sha256 +sha256 13d159102bb770b80bde31315e3ecf99234cde718edc941c15b6e42e5e1f621d rust-std-1.96.1-arm-unknown-linux-musleabi.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-arm-unknown-linux-musleabihf.tar.xz.sha256 +sha256 e2aa342bf2f4f61ee41e8c1546585e0f630a0ca8bb26dd8ade51f23e07ee66ea rust-std-1.96.1-arm-unknown-linux-musleabihf.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-armv5te-unknown-linux-gnueabi.tar.xz.sha256 +sha256 df04af58135fcb014fb2fe5d133afffe1ff2442cb96fb0570c8b78939a1732e9 rust-std-1.96.1-armv5te-unknown-linux-gnueabi.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-armv5te-unknown-linux-musleabi.tar.xz.sha256 +sha256 b82c8d3a369da6a7dbf3ad6e6a57d39ef1bb68709044ea86de7562b4681dbb97 rust-std-1.96.1-armv5te-unknown-linux-musleabi.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-armv7-unknown-linux-gnueabi.tar.xz.sha256 +sha256 903f359e8b54786333d8ea0b9d35a21e9e1e8c1336737ea3a90c2f63e8a973a7 rust-std-1.96.1-armv7-unknown-linux-gnueabi.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-armv7-unknown-linux-gnueabihf.tar.xz.sha256 +sha256 9e0a9663eb6a1856c46ff919056570277763d76153a08e042cc9e25a0c9092bf rust-std-1.96.1-armv7-unknown-linux-gnueabihf.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-armv7-unknown-linux-musleabi.tar.xz.sha256 +sha256 bbc71f1f726c26154fb64315b6a4a56a82f798f13711375210a93712ba449113 rust-std-1.96.1-armv7-unknown-linux-musleabi.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-armv7-unknown-linux-musleabihf.tar.xz.sha256 +sha256 9bb2f220ea42ec12e8934963084e46faa01aacc8cafd54716fcd9d08197c0186 rust-std-1.96.1-armv7-unknown-linux-musleabihf.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-i586-unknown-linux-gnu.tar.xz.sha256 +sha256 5bd590947da28173b7410064b08dc826c69ac9a517b8763683cfa64f93fdadc1 rust-std-1.96.1-i586-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-i586-unknown-linux-musl.tar.xz.sha256 +sha256 2b7c6fc7d4868959d69487333c2a2a73e4e7ecff78d7ff9028217e1a4e4c2063 rust-std-1.96.1-i586-unknown-linux-musl.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-i686-unknown-linux-gnu.tar.xz.sha256 +sha256 bc1f062cc2b3db1cb7314360ad5bd77c8b6d1719ce3199384fa8b6c2a28b20e1 rust-std-1.96.1-i686-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-i686-unknown-linux-musl.tar.xz.sha256 +sha256 648c5c6021add04d498d960412c154eafe85f17cfec30032968140f1881499b0 rust-std-1.96.1-i686-unknown-linux-musl.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-powerpc-unknown-linux-gnu.tar.xz.sha256 +sha256 7e3ba910c711b79a26858bb742b56cff721d0265c60f333b75229be458e1f71a rust-std-1.96.1-powerpc-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-powerpc64-unknown-linux-gnu.tar.xz.sha256 +sha256 46a36ac40163a47b12b28e1b0e02fc8b391b7de47119723497f0fa1e39d8719f rust-std-1.96.1-powerpc64-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-powerpc64le-unknown-linux-gnu.tar.xz.sha256 +sha256 d102ecb4fefd0e0d9ee1ad7d8e6eaed0d95006c9a752cdecab452f4991868ab5 rust-std-1.96.1-powerpc64le-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-riscv64gc-unknown-linux-gnu.tar.xz.sha256 +sha256 e8a42534bc507e2ea4094f04516462bc2f2e21a2a14d227b728310b3bebad601 rust-std-1.96.1-riscv64gc-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-riscv64gc-unknown-linux-musl.tar.xz.sha256 +sha256 7be3628e9cc73eec5e6d4ddfad5773d64a5c4707915ba0a045f28eb6cdadee52 rust-std-1.96.1-riscv64gc-unknown-linux-musl.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-s390x-unknown-linux-gnu.tar.xz.sha256 +sha256 00025930698ec4cafaa8ea4da59be13f3f6ff9b18ff2d8b9f8ebc458c3293845 rust-std-1.96.1-s390x-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-sparc64-unknown-linux-gnu.tar.xz.sha256 +sha256 ffb43d2cd2dd4baf9206a9f7a33941c72e285b0a46c3816ae4e161113c1962a3 rust-std-1.96.1-sparc64-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-x86_64-unknown-linux-gnu.tar.xz.sha256 +sha256 1bf4fde5048cca33e6ea00c7471281ed96d792f6923141e3db45072743a1afae rust-std-1.96.1-x86_64-unknown-linux-gnu.tar.xz +# From https://static.rust-lang.org/dist/rust-std-1.96.1-x86_64-unknown-linux-musl.tar.xz.sha256 +sha256 94192fe7e10f11e8595f2a29ebda182da0f786797fe908f44fbf80213cd845ac rust-std-1.96.1-x86_64-unknown-linux-musl.tar.xz # Locally generated sha256 62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a LICENSE-APACHE sha256 b71bd43a069ca0641a9ecfe585ca7b3c53b5cc1608f8b68321168698e28b5ea1 LICENSE-MIT diff --git a/package/rust-bin/rust-bin.mk b/package/rust-bin/rust-bin.mk index 8549d293d60..851a507dd3b 100644 --- a/package/rust-bin/rust-bin.mk +++ b/package/rust-bin/rust-bin.mk @@ -6,7 +6,7 @@ # When updating this version, check whether support/download/cargo-post-process # still generates the same archives. -RUST_BIN_VERSION = 1.96.0 +RUST_BIN_VERSION = 1.96.1 RUST_BIN_SITE = https://static.rust-lang.org/dist RUST_BIN_LICENSE = Apache-2.0 or MIT RUST_BIN_LICENSE_FILES = LICENSE-APACHE LICENSE-MIT diff --git a/package/rust/rust.hash b/package/rust/rust.hash index fc505b93376..7c5cd9494fb 100644 --- a/package/rust/rust.hash +++ b/package/rust/rust.hash @@ -1,8 +1,8 @@ # Generated with utils/update-rust # Do not edit manually -# From https://static.rust-lang.org/dist/rustc-1.96.0-src.tar.xz.sha256 -sha256 b99ce16cdf0ecfc761b585ac84d131b46733465a02f8ecd0ff2de9713c62ee09 rustc-1.96.0-src.tar.xz +# From https://static.rust-lang.org/dist/rustc-1.96.1-src.tar.xz.sha256 +sha256 77a6ff3003a4ad0cb00697b043c879e3e1a15d945b1a1f63818903bfc3fa8b98 rustc-1.96.1-src.tar.xz # Locally generated sha256 62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a LICENSE-APACHE sha256 b71bd43a069ca0641a9ecfe585ca7b3c53b5cc1608f8b68321168698e28b5ea1 LICENSE-MIT diff --git a/package/rust/rust.mk b/package/rust/rust.mk index c9129c26801..aa23da6ff20 100644 --- a/package/rust/rust.mk +++ b/package/rust/rust.mk @@ -6,7 +6,7 @@ # When updating this version, check whether support/download/cargo-post-process # still generates the same archives. -RUST_VERSION = 1.96.0 +RUST_VERSION = 1.96.1 RUST_SOURCE = rustc-$(RUST_VERSION)-src.tar.xz RUST_SITE = https://static.rust-lang.org/dist RUST_LICENSE = Apache-2.0 or MIT From 82fcd634ac81fb7e0f6fc32cc600a42528912d42 Mon Sep 17 00:00:00 2001 From: Yegor Yefremov Date: Fri, 3 Jul 2026 15:08:02 +0200 Subject: [PATCH 5/6] package/libxmlrpc: bump to version 3341 This version fixes boolean usage for musl toolchains: Use whenever possible to work around musl libc incorrectly defining __bool_true_false_are_defined. Fixes: https://autobuild.buildroot.org/results/5719bb7f5bd709cebc8012341c0b448a8fec3aba/ Signed-off-by: Yegor Yefremov Signed-off-by: Julien Olivain --- package/libxmlrpc/libxmlrpc.hash | 2 +- package/libxmlrpc/libxmlrpc.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libxmlrpc/libxmlrpc.hash b/package/libxmlrpc/libxmlrpc.hash index 00cef19b775..d7555c3be86 100644 --- a/package/libxmlrpc/libxmlrpc.hash +++ b/package/libxmlrpc/libxmlrpc.hash @@ -1,3 +1,3 @@ # Locally computed -sha256 4a071da3204132585a40313e17e01699d428e0fc9b58d30fcd7e538037254668 libxmlrpc-r3335-svn5.tar.gz +sha256 b7fbe0fe9f6393c59c31f85c0ca7d050db83bb630fceef75ca7cabfd2fc3fc3a libxmlrpc-r3341-svn5.tar.gz sha256 db7a6d3f187b218c3534010a83424c6bcdef88e6a0b6b1aa3a8762238bd642e6 doc/COPYING diff --git a/package/libxmlrpc/libxmlrpc.mk b/package/libxmlrpc/libxmlrpc.mk index 283914ca81d..c2ccfe80abf 100644 --- a/package/libxmlrpc/libxmlrpc.mk +++ b/package/libxmlrpc/libxmlrpc.mk @@ -5,7 +5,7 @@ ################################################################################ # 1.67.00 (code/advanced@r3335) -LIBXMLRPC_VERSION = r3335 +LIBXMLRPC_VERSION = r3341 LIBXMLRPC_SITE = https://svn.code.sf.net/p/xmlrpc-c/code/advanced LIBXMLRPC_SITE_METHOD = svn LIBXMLRPC_LICENSE = BSD-3-Clause (xml-rpc main code and abyss web server), BSD like (lib/expat), Python 1.5.2 license (parts of xmlrpc_base64.c) From 013612b4962332ef528682a037a91c7a420f5bab Mon Sep 17 00:00:00 2001 From: Thomas Devoogdt Date: Wed, 24 Jun 2026 20:21:17 +0200 Subject: [PATCH 6/6] package/webkitgtk: security bump to version 2.52.4 Release notes: https://webkitgtk.org/2026/06/02/webkitgtk2.52.4-released.html Fixes the following security issues: https://webkitgtk.org/security/WSA-2026-0003.html Includes fixes (among others) for CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902, CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, and CVE-2026-43660. Also added 0001-REGRESSION-313606-main-Fails-to-build-with-system-ma.patch, to get webkitgtk compiled when -DUSE_SYSTEM_MALLOC=ON is in use. Signed-off-by: Thomas Devoogdt [Julien: add "security" in commit log title] Signed-off-by: Julien Olivain --- ...6-main-Fails-to-build-with-system-ma.patch | 52 +++++++++++++++++++ package/webkitgtk/webkitgtk.hash | 6 +-- package/webkitgtk/webkitgtk.mk | 2 +- 3 files changed, 56 insertions(+), 4 deletions(-) create mode 100644 package/webkitgtk/0001-REGRESSION-313606-main-Fails-to-build-with-system-ma.patch diff --git a/package/webkitgtk/0001-REGRESSION-313606-main-Fails-to-build-with-system-ma.patch b/package/webkitgtk/0001-REGRESSION-313606-main-Fails-to-build-with-system-ma.patch new file mode 100644 index 00000000000..decdba68148 --- /dev/null +++ b/package/webkitgtk/0001-REGRESSION-313606-main-Fails-to-build-with-system-ma.patch @@ -0,0 +1,52 @@ +From 146cdc86b7345ac8f513fdf649979e80db01a2ca Mon Sep 17 00:00:00 2001 +From: Alberto Garcia +Date: Tue, 2 Jun 2026 07:24:38 -0700 +Subject: [PATCH] REGRESSION(313606@main): Fails to build with system malloc + https://bugs.webkit.org/show_bug.cgi?id=316083 + +Reviewed by Fujii Hironori. + +Don't add bmalloc_CopyHeaders to LLIntOffsetsExtractor_DEPENDENCIES if +USE_SYSTEM_MALLOC is on. + +* Source/JavaScriptCore/CMakeLists.txt: + +Canonical link: https://commits.webkit.org/305877.698@webkitglib/2.52 + +Upstream: https://github.com/WebKit/WebKit/commit/a6bc685a685c8f16c919dc6310a62a26971d396e +Signed-off-by: Thomas Devoogdt +--- + Source/JavaScriptCore/CMakeLists.txt | 8 ++++++-- + 1 file changed, 6 insertions(+), 2 deletions(-) + +diff --git a/Source/JavaScriptCore/CMakeLists.txt b/Source/JavaScriptCore/CMakeLists.txt +index a2a6d724608a..ea9ea17802f2 100644 +--- a/Source/JavaScriptCore/CMakeLists.txt ++++ b/Source/JavaScriptCore/CMakeLists.txt +@@ -412,8 +412,10 @@ set(LLIntSettingsExtractor_DEPENDENCIES + JavaScriptCore_CopyHeaders + JavaScriptCore_CopyPrivateHeaders + WTF_CopyHeaders +- bmalloc_CopyHeaders + ) ++if (NOT USE_SYSTEM_MALLOC) ++ list(APPEND LLIntSettingsExtractor_DEPENDENCIES bmalloc_CopyHeaders) ++endif () + WEBKIT_EXECUTABLE(LLIntSettingsExtractor) + + # LLIntSettingsExtractor target needs to have a direct or indirect +@@ -439,8 +441,10 @@ set(LLIntOffsetsExtractor_DEPENDENCIES + JavaScriptCore_CopyHeaders + JavaScriptCore_CopyPrivateHeaders + WTF_CopyHeaders +- bmalloc_CopyHeaders + ) ++if (NOT USE_SYSTEM_MALLOC) ++ list(APPEND LLIntOffsetsExtractor_DEPENDENCIES bmalloc_CopyHeaders) ++endif () + WEBKIT_EXECUTABLE(LLIntOffsetsExtractor) + + # The build system will execute asm.rb every time LLIntOffsetsExtractor's mtime is newer than +-- +2.43.0 + diff --git a/package/webkitgtk/webkitgtk.hash b/package/webkitgtk/webkitgtk.hash index 03b8d0a9bec..f8c0e0297a3 100644 --- a/package/webkitgtk/webkitgtk.hash +++ b/package/webkitgtk/webkitgtk.hash @@ -1,6 +1,6 @@ -# From https://webkitgtk.org/releases/webkitgtk-2.52.3.tar.xz.sums -sha1 17f9b127618040a5f3fcbb70e37ea16ab6d69b0b webkitgtk-2.52.3.tar.xz -sha256 5b3e0d174e63dcc28848b1194e0e7448d5948c3c2427ecd931c2c5be5261aebb webkitgtk-2.52.3.tar.xz +# From https://webkitgtk.org/releases/webkitgtk-2.52.4.tar.xz.sums +sha1 1bfaa562ae46a420abaad2b3b9175dc823cc7a93 webkitgtk-2.52.4.tar.xz +sha256 cf4076a1ca2a64788edca8c452d8ebb68d5e2965e588fe46a388a016513edce4 webkitgtk-2.52.4.tar.xz # Hashes for license files: sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE diff --git a/package/webkitgtk/webkitgtk.mk b/package/webkitgtk/webkitgtk.mk index 54e769d5892..6cab2c6a247 100644 --- a/package/webkitgtk/webkitgtk.mk +++ b/package/webkitgtk/webkitgtk.mk @@ -4,7 +4,7 @@ # ################################################################################ -WEBKITGTK_VERSION = 2.52.3 +WEBKITGTK_VERSION = 2.52.4 WEBKITGTK_SITE = https://www.webkitgtk.org/releases WEBKITGTK_SOURCE = webkitgtk-$(WEBKITGTK_VERSION).tar.xz WEBKITGTK_INSTALL_STAGING = YES