Fixes CVE-2026-56123: SOCKS5 client buffer overflow. Only signed char
platforms are affected.

  http://www.dest-unreach.org/socat/CHANGES

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Julien Olivain <ju.o@free.fr>

Provide a fallback when native __int128 is not available.

Fixes:
https://autobuild.buildroot.org/results/39df217ad5a1036d5e606ae0e8291d885e9d0e1a/

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/intel/libva/blob/2.24.1/NEWS

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/intel/libva-utils/blob/2.24.0/NEWS

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/intel/libvpl/releases/tag/v2.17.0

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/intel/media-driver/releases/tag/intel-media-26.2.4

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/intel/vpl-gpu-rt/releases/tag/intel-onevpl-26.2.4

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

libcamera has moved for a while now to gitlab.freedesktop.org. The
mirror on git.linuxtv.org is still active, but it isn't the canonical
repository and has less bandwidth than freedesktop.org. Switch the
libcamera source URL to gitlab.freedesktop.org.

Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Reviewed-by: Kieran Bingham <kieran.bingham@ideasonboard.com>
[Julien: removed trailing slash in _SITE]
Signed-off-by: Julien Olivain <ju.o@free.fr>

openwrt/odhcp6c@f19dd37...10a5222

Removed patches which are included in this release.

Please note that upstream committed
https://git.openwrt.org/project/odhcp6c/commit/?id=10a52220aec9d45803518d8cc4d63e552484ed61
instead of patch 0001.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/changes-v1.29?h=v1.31
https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/changes-v1.30?h=v1.31
https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/changes-v1.31?h=v1.31

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

The removed patch has been merged [1].

Release notes:
https://github.com/jech/babeld/blob/master/CHANGES

[1] jech/babeld@f8e5fbb
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/libjpeg-turbo/libjpeg-turbo/blob/3.2.0/ChangeLog.md

Updated license hash due to upstream commits:
libjpeg-turbo/libjpeg-turbo@54bd58c
libjpeg-turbo/libjpeg-turbo@42b7522

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/akheron/jansson/blob/v2.15.1/CHANGES

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

For more information on the version bump, see:
  - https://www.wireshark.org/docs/relnotes/wireshark-4.4.17.html

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://github.com/dracut-ng/dracut/blob/111/NEWS.md

Removed patch which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://stellarium.org/release/2026/06/24/stellarium-26.2.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

samba4 uses very big switch statements, which causes the build to fail
on m68k, because the offsets there are only 16-bit.

We fix that by using -mlong-jump-table-offsets on m68k to use 32-bit
offsets for switch statements, but this is only available starting with
gcc 7 [0] [1].

Only one package selects samba4, mpd, but it already depends on gcc
>= 12. As such, we do not need to propagate that new dependency.

Fixes:
https://autobuild.buildroot.net/results/b60/b606da691bb462879d4f9769928b5a40b9170837/

[0] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=57583#c15
[1] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=57583#c16

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

https://www.samba.org/samba/history/samba-4.24.4.html

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>

Enable to build p11-kit on the host.
This is to support enabling pkcs11 in host-gnutls.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>

Future U-Boot 2026.07 will build mkeficapsule with pkcs11 support. [1]

This causes link errors with Buildroot, such as the following one:

   mkeficapsule.c:(.text.startup+0xcd3): undefined reference to `gnutls_pkcs11_init'

(Other symbols the linker complains about are: gnutls_pkcs11_add_provider,
gnutls_pkcs11_obj_list_import_url4, gnutls_x509_crt_import_pkcs11 and
gnutls_pkcs11_deinit.)

The following example commands can be used to reproduce the issue:

     make qemu_aarch64_ebbr_defconfig
     echo 'BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2026.07-rc3"' >>.config
     echo 'BR2_TARGET_UBOOT_NEEDS_GNUTLS=y' >>.config
     echo '# BR2_DOWNLOAD_FORCE_CHECK_HASHES is not set' >>.config
     make olddefconfig
     make uboot

This commit adds the pkcs11 support for host-gnutls.

In Buildroot, since host-gnutls is currently only needed by uboot
(and other uboot derivatives such as uboot-tools) the pkcs11 support
is added unconditionally to host-gnutls.

Link: u-boot/u-boot@0c716a1 [1]
Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>

Release announcement:
https://lists.denx.de/pipermail/u-boot/2026-July/624082.html

Changelog:
u-boot/u-boot@v2026.04...v2026.07

U-Boot 2026.07 adds PKCS#11 support to tools/mkeficapsule, which
requires host-gnutls with PKCS#11 support. That was enabled in commit
6597563.

Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
[Fiona: remove hidden option for p11-kit, update commit message accordingly]
Tested-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>