* [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues
@ 2025-11-27 19:42 Bernd Kuhls
2025-12-07 16:59 ` Thomas Petazzoni via buildroot
2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
0 siblings, 2 replies; 3+ messages in thread
From: Bernd Kuhls @ 2025-11-27 19:42 UTC (permalink / raw)
To: buildroot; +Cc: Luca Ceresoli, Thomas Petazzoni, Christian Stewart
From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
unzip currently fails to build with GCC 15.x. We're already fetching
from Debian, using patchlevel -27, and it turns out that Debian
patchlevel -29 has the GCC 15.x fix, and very few other fixes:
unzip (6.0-29) unstable; urgency=medium
* Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
Closes: #661956, #1064000.
* Drop conflicting declarations of gmtime() and localtime().
Should fix build with gcc-15. Closes: #1098043.
* Fix zipgrep handling of escapes. Closes: #1054628.
* Stop using update-mime. Closes: #1072396.
* Add debian/source/lintian-overrides for *.a files.
* Do not trim Debian changelog.
* Add debian/salsa-ci.yml.
* Add Vcs-Git and Vcs-Browser fields.
* Update Standards-Version.
unzip (6.0-28) unstable; urgency=medium
* Drop debian/source/lintian-overrides, obsolete since version 6.0-18.
* Update URI for Info-ZIP license in copyright file.
* Update standards version to 4.6.2.
* Run wrap-and-sort.
* Update Homepage.
So let's just bump to this patchlevel version.
Note that the .dsc file link in the .hash file was wrong, it was still
referring to patchlevel -26.
Fixes:
https://autobuild.buildroot.net/results/d81cb9d7c9e87dd233dde350d15cb03427ba2036/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Tested-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Bernd:
Updated _SITE from /debian-debug/ to /debian/ (Baruch)
Updated comment of UNZIP_IGNORE_CVES to reflect bump.]
---
v3:
- updated _SITE from /debian-debug/ to /debian/ (Baruch)
- updated comment of UNZIP_IGNORE_CVES to reflect bump.
package/unzip/unzip.hash | 4 ++--
package/unzip/unzip.mk | 6 +++---
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/package/unzip/unzip.hash b/package/unzip/unzip.hash
index bbf4f7d71f..0b371e5454 100644
--- a/package/unzip/unzip.hash
+++ b/package/unzip/unzip.hash
@@ -1,6 +1,6 @@
-# From https://snapshot.debian.org/archive/debian/20210110T204103Z/pool/main/u/unzip/unzip_6.0-26.dsc
+# From https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip/unzip_6.0-29.dsc
sha256 036d96991646d0449ed0aa952e4fbe21b476ce994abc276e49d30e686708bd37 unzip_6.0.orig.tar.gz
-sha256 67bde7c71d52afd61aa936d4415c8d12fd90ca26e9637a3cd67cae9b71298c12 unzip_6.0-27.debian.tar.xz
+sha256 14043e5ea351c02b3bc8676e1e6d20d79b9a690b6d7520e8138ac629cc048417 unzip_6.0-29.debian.tar.xz
# Locally computed:
sha256 7469b81d5d29ac4fd670f7c86ba0cb9fa34f137a2d4d5198437d92ddf918984b LICENSE
diff --git a/package/unzip/unzip.mk b/package/unzip/unzip.mk
index 5effebee4a..8dccaf6ce3 100644
--- a/package/unzip/unzip.mk
+++ b/package/unzip/unzip.mk
@@ -6,13 +6,13 @@
UNZIP_VERSION = 6.0
UNZIP_SOURCE = unzip_$(UNZIP_VERSION).orig.tar.gz
-UNZIP_PATCH = unzip_$(UNZIP_VERSION)-27.debian.tar.xz
-UNZIP_SITE = https://snapshot.debian.org/archive/debian/20220916T090657Z/pool/main/u/unzip
+UNZIP_PATCH = unzip_$(UNZIP_VERSION)-29.debian.tar.xz
+UNZIP_SITE = https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip
UNZIP_LICENSE = Info-ZIP
UNZIP_LICENSE_FILES = LICENSE
UNZIP_CPE_ID_VALID = YES
-# unzip_$(UNZIP_VERSION)-27.debian.tar.xz has patches to fix:
+# unzip_$(UNZIP_VERSION)-29.debian.tar.xz has patches to fix:
UNZIP_IGNORE_CVES = \
CVE-2014-8139 \
CVE-2014-8140 \
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 3+ messages in thread* Re: [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues
2025-11-27 19:42 [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues Bernd Kuhls
@ 2025-12-07 16:59 ` Thomas Petazzoni via buildroot
2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Thomas Petazzoni via buildroot @ 2025-12-07 16:59 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Luca Ceresoli, Christian Stewart
On Thu, 27 Nov 2025 20:42:25 +0100
Bernd Kuhls <bernd@kuhls.net> wrote:
> From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
>
> unzip currently fails to build with GCC 15.x. We're already fetching
> from Debian, using patchlevel -27, and it turns out that Debian
> patchlevel -29 has the GCC 15.x fix, and very few other fixes:
>
> unzip (6.0-29) unstable; urgency=medium
>
> * Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
> Closes: #661956, #1064000.
> * Drop conflicting declarations of gmtime() and localtime().
> Should fix build with gcc-15. Closes: #1098043.
> * Fix zipgrep handling of escapes. Closes: #1054628.
> * Stop using update-mime. Closes: #1072396.
> * Add debian/source/lintian-overrides for *.a files.
> * Do not trim Debian changelog.
> * Add debian/salsa-ci.yml.
> * Add Vcs-Git and Vcs-Browser fields.
> * Update Standards-Version.
>
> unzip (6.0-28) unstable; urgency=medium
>
> * Drop debian/source/lintian-overrides, obsolete since version 6.0-18.
> * Update URI for Info-ZIP license in copyright file.
> * Update standards version to 4.6.2.
> * Run wrap-and-sort.
> * Update Homepage.
>
> So let's just bump to this patchlevel version.
>
> Note that the .dsc file link in the .hash file was wrong, it was still
> referring to patchlevel -26.
>
> Fixes:
>
> https://autobuild.buildroot.net/results/d81cb9d7c9e87dd233dde350d15cb03427ba2036/
>
> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
> Tested-by: Christian Stewart <christian@aperture.us>
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> [Bernd:
> Updated _SITE from /debian-debug/ to /debian/ (Baruch)
> Updated comment of UNZIP_IGNORE_CVES to reflect bump.]
> ---
> v3:
> - updated _SITE from /debian-debug/ to /debian/ (Baruch)
> - updated comment of UNZIP_IGNORE_CVES to reflect bump.
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues
2025-11-27 19:42 [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues Bernd Kuhls
2025-12-07 16:59 ` Thomas Petazzoni via buildroot
@ 2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Arnout Vandecappelle via buildroot @ 2025-12-11 19:32 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: Arnout Vandecappelle, buildroot
In reply of:
> unzip currently fails to build with GCC 15.x. We're already fetching
> from Debian, using patchlevel -27, and it turns out that Debian
> patchlevel -29 has the GCC 15.x fix, and very few other fixes:
>
> unzip (6.0-29) unstable; urgency=medium
>
> * Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
> Closes: #661956, #1064000.
> * Drop conflicting declarations of gmtime() and localtime().
> Should fix build with gcc-15. Closes: #1098043.
> * Fix zipgrep handling of escapes. Closes: #1054628.
> * Stop using update-mime. Closes: #1072396.
> * Add debian/source/lintian-overrides for *.a files.
> * Do not trim Debian changelog.
> * Add debian/salsa-ci.yml.
> * Add Vcs-Git and Vcs-Browser fields.
> * Update Standards-Version.
>
> unzip (6.0-28) unstable; urgency=medium
>
> * Drop debian/source/lintian-overrides, obsolete since version 6.0-18.
> * Update URI for Info-ZIP license in copyright file.
> * Update standards version to 4.6.2.
> * Run wrap-and-sort.
> * Update Homepage.
>
> So let's just bump to this patchlevel version.
>
> Note that the .dsc file link in the .hash file was wrong, it was still
> referring to patchlevel -26.
>
> Fixes:
>
> https://autobuild.buildroot.net/results/d81cb9d7c9e87dd233dde350d15cb03427ba2036/
>
> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
> Tested-by: Christian Stewart <christian@aperture.us>
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> [Bernd:
> Updated _SITE from /debian-debug/ to /debian/ (Baruch)
> Updated comment of UNZIP_IGNORE_CVES to reflect bump.]
Applied to 2025.08.x. Thanks
> ---
> v3:
> - updated _SITE from /debian-debug/ to /debian/ (Baruch)
> - updated comment of UNZIP_IGNORE_CVES to reflect bump.
>
> package/unzip/unzip.hash | 4 ++--
> package/unzip/unzip.mk | 6 +++---
> 2 files changed, 5 insertions(+), 5 deletions(-)
>
> diff --git a/package/unzip/unzip.hash b/package/unzip/unzip.hash
> index bbf4f7d71f..0b371e5454 100644
> --- a/package/unzip/unzip.hash
> +++ b/package/unzip/unzip.hash
> @@ -1,6 +1,6 @@
> -# From https://snapshot.debian.org/archive/debian/20210110T204103Z/pool/main/u/unzip/unzip_6.0-26.dsc
> +# From https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip/unzip_6.0-29.dsc
> sha256 036d96991646d0449ed0aa952e4fbe21b476ce994abc276e49d30e686708bd37 unzip_6.0.orig.tar.gz
> -sha256 67bde7c71d52afd61aa936d4415c8d12fd90ca26e9637a3cd67cae9b71298c12 unzip_6.0-27.debian.tar.xz
> +sha256 14043e5ea351c02b3bc8676e1e6d20d79b9a690b6d7520e8138ac629cc048417 unzip_6.0-29.debian.tar.xz
>
> # Locally computed:
> sha256 7469b81d5d29ac4fd670f7c86ba0cb9fa34f137a2d4d5198437d92ddf918984b LICENSE
> diff --git a/package/unzip/unzip.mk b/package/unzip/unzip.mk
> index 5effebee4a..8dccaf6ce3 100644
> --- a/package/unzip/unzip.mk
> +++ b/package/unzip/unzip.mk
> @@ -6,13 +6,13 @@
>
> UNZIP_VERSION = 6.0
> UNZIP_SOURCE = unzip_$(UNZIP_VERSION).orig.tar.gz
> -UNZIP_PATCH = unzip_$(UNZIP_VERSION)-27.debian.tar.xz
> -UNZIP_SITE = https://snapshot.debian.org/archive/debian/20220916T090657Z/pool/main/u/unzip
> +UNZIP_PATCH = unzip_$(UNZIP_VERSION)-29.debian.tar.xz
> +UNZIP_SITE = https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip
> UNZIP_LICENSE = Info-ZIP
> UNZIP_LICENSE_FILES = LICENSE
> UNZIP_CPE_ID_VALID = YES
>
> -# unzip_$(UNZIP_VERSION)-27.debian.tar.xz has patches to fix:
> +# unzip_$(UNZIP_VERSION)-29.debian.tar.xz has patches to fix:
> UNZIP_IGNORE_CVES = \
> CVE-2014-8139 \
> CVE-2014-8140 \
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2025-12-11 19:32 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-11-27 19:42 [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues Bernd Kuhls
2025-12-07 16:59 ` Thomas Petazzoni via buildroot
2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.