* [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues
@ 2025-11-27 19:42 Bernd Kuhls
2025-12-07 16:59 ` Thomas Petazzoni via buildroot
2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
0 siblings, 2 replies; 3+ messages in thread
From: Bernd Kuhls @ 2025-11-27 19:42 UTC (permalink / raw)
To: buildroot; +Cc: Luca Ceresoli, Thomas Petazzoni, Christian Stewart
From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
unzip currently fails to build with GCC 15.x. We're already fetching
from Debian, using patchlevel -27, and it turns out that Debian
patchlevel -29 has the GCC 15.x fix, and very few other fixes:
unzip (6.0-29) unstable; urgency=medium
* Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
Closes: #661956, #1064000.
* Drop conflicting declarations of gmtime() and localtime().
Should fix build with gcc-15. Closes: #1098043.
* Fix zipgrep handling of escapes. Closes: #1054628.
* Stop using update-mime. Closes: #1072396.
* Add debian/source/lintian-overrides for *.a files.
* Do not trim Debian changelog.
* Add debian/salsa-ci.yml.
* Add Vcs-Git and Vcs-Browser fields.
* Update Standards-Version.
unzip (6.0-28) unstable; urgency=medium
* Drop debian/source/lintian-overrides, obsolete since version 6.0-18.
* Update URI for Info-ZIP license in copyright file.
* Update standards version to 4.6.2.
* Run wrap-and-sort.
* Update Homepage.
So let's just bump to this patchlevel version.
Note that the .dsc file link in the .hash file was wrong, it was still
referring to patchlevel -26.
Fixes:
https://autobuild.buildroot.net/results/d81cb9d7c9e87dd233dde350d15cb03427ba2036/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Tested-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Bernd:
Updated _SITE from /debian-debug/ to /debian/ (Baruch)
Updated comment of UNZIP_IGNORE_CVES to reflect bump.]
---
v3:
- updated _SITE from /debian-debug/ to /debian/ (Baruch)
- updated comment of UNZIP_IGNORE_CVES to reflect bump.
package/unzip/unzip.hash | 4 ++--
package/unzip/unzip.mk | 6 +++---
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/package/unzip/unzip.hash b/package/unzip/unzip.hash
index bbf4f7d71f..0b371e5454 100644
--- a/package/unzip/unzip.hash
+++ b/package/unzip/unzip.hash
@@ -1,6 +1,6 @@
-# From https://snapshot.debian.org/archive/debian/20210110T204103Z/pool/main/u/unzip/unzip_6.0-26.dsc
+# From https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip/unzip_6.0-29.dsc
sha256 036d96991646d0449ed0aa952e4fbe21b476ce994abc276e49d30e686708bd37 unzip_6.0.orig.tar.gz
-sha256 67bde7c71d52afd61aa936d4415c8d12fd90ca26e9637a3cd67cae9b71298c12 unzip_6.0-27.debian.tar.xz
+sha256 14043e5ea351c02b3bc8676e1e6d20d79b9a690b6d7520e8138ac629cc048417 unzip_6.0-29.debian.tar.xz
# Locally computed:
sha256 7469b81d5d29ac4fd670f7c86ba0cb9fa34f137a2d4d5198437d92ddf918984b LICENSE
diff --git a/package/unzip/unzip.mk b/package/unzip/unzip.mk
index 5effebee4a..8dccaf6ce3 100644
--- a/package/unzip/unzip.mk
+++ b/package/unzip/unzip.mk
@@ -6,13 +6,13 @@
UNZIP_VERSION = 6.0
UNZIP_SOURCE = unzip_$(UNZIP_VERSION).orig.tar.gz
-UNZIP_PATCH = unzip_$(UNZIP_VERSION)-27.debian.tar.xz
-UNZIP_SITE = https://snapshot.debian.org/archive/debian/20220916T090657Z/pool/main/u/unzip
+UNZIP_PATCH = unzip_$(UNZIP_VERSION)-29.debian.tar.xz
+UNZIP_SITE = https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip
UNZIP_LICENSE = Info-ZIP
UNZIP_LICENSE_FILES = LICENSE
UNZIP_CPE_ID_VALID = YES
-# unzip_$(UNZIP_VERSION)-27.debian.tar.xz has patches to fix:
+# unzip_$(UNZIP_VERSION)-29.debian.tar.xz has patches to fix:
UNZIP_IGNORE_CVES = \
CVE-2014-8139 \
CVE-2014-8140 \
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues
2025-11-27 19:42 [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues Bernd Kuhls
@ 2025-12-07 16:59 ` Thomas Petazzoni via buildroot
2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Thomas Petazzoni via buildroot @ 2025-12-07 16:59 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Luca Ceresoli, Christian Stewart
On Thu, 27 Nov 2025 20:42:25 +0100
Bernd Kuhls <bernd@kuhls.net> wrote:
> From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
>
> unzip currently fails to build with GCC 15.x. We're already fetching
> from Debian, using patchlevel -27, and it turns out that Debian
> patchlevel -29 has the GCC 15.x fix, and very few other fixes:
>
> unzip (6.0-29) unstable; urgency=medium
>
> * Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
> Closes: #661956, #1064000.
> * Drop conflicting declarations of gmtime() and localtime().
> Should fix build with gcc-15. Closes: #1098043.
> * Fix zipgrep handling of escapes. Closes: #1054628.
> * Stop using update-mime. Closes: #1072396.
> * Add debian/source/lintian-overrides for *.a files.
> * Do not trim Debian changelog.
> * Add debian/salsa-ci.yml.
> * Add Vcs-Git and Vcs-Browser fields.
> * Update Standards-Version.
>
> unzip (6.0-28) unstable; urgency=medium
>
> * Drop debian/source/lintian-overrides, obsolete since version 6.0-18.
> * Update URI for Info-ZIP license in copyright file.
> * Update standards version to 4.6.2.
> * Run wrap-and-sort.
> * Update Homepage.
>
> So let's just bump to this patchlevel version.
>
> Note that the .dsc file link in the .hash file was wrong, it was still
> referring to patchlevel -26.
>
> Fixes:
>
> https://autobuild.buildroot.net/results/d81cb9d7c9e87dd233dde350d15cb03427ba2036/
>
> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
> Tested-by: Christian Stewart <christian@aperture.us>
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> [Bernd:
> Updated _SITE from /debian-debug/ to /debian/ (Baruch)
> Updated comment of UNZIP_IGNORE_CVES to reflect bump.]
> ---
> v3:
> - updated _SITE from /debian-debug/ to /debian/ (Baruch)
> - updated comment of UNZIP_IGNORE_CVES to reflect bump.
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues
2025-11-27 19:42 [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues Bernd Kuhls
2025-12-07 16:59 ` Thomas Petazzoni via buildroot
@ 2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Arnout Vandecappelle via buildroot @ 2025-12-11 19:32 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: Arnout Vandecappelle, buildroot
In reply of:
> unzip currently fails to build with GCC 15.x. We're already fetching
> from Debian, using patchlevel -27, and it turns out that Debian
> patchlevel -29 has the GCC 15.x fix, and very few other fixes:
>
> unzip (6.0-29) unstable; urgency=medium
>
> * Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
> Closes: #661956, #1064000.
> * Drop conflicting declarations of gmtime() and localtime().
> Should fix build with gcc-15. Closes: #1098043.
> * Fix zipgrep handling of escapes. Closes: #1054628.
> * Stop using update-mime. Closes: #1072396.
> * Add debian/source/lintian-overrides for *.a files.
> * Do not trim Debian changelog.
> * Add debian/salsa-ci.yml.
> * Add Vcs-Git and Vcs-Browser fields.
> * Update Standards-Version.
>
> unzip (6.0-28) unstable; urgency=medium
>
> * Drop debian/source/lintian-overrides, obsolete since version 6.0-18.
> * Update URI for Info-ZIP license in copyright file.
> * Update standards version to 4.6.2.
> * Run wrap-and-sort.
> * Update Homepage.
>
> So let's just bump to this patchlevel version.
>
> Note that the .dsc file link in the .hash file was wrong, it was still
> referring to patchlevel -26.
>
> Fixes:
>
> https://autobuild.buildroot.net/results/d81cb9d7c9e87dd233dde350d15cb03427ba2036/
>
> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
> Tested-by: Christian Stewart <christian@aperture.us>
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> [Bernd:
> Updated _SITE from /debian-debug/ to /debian/ (Baruch)
> Updated comment of UNZIP_IGNORE_CVES to reflect bump.]
Applied to 2025.08.x. Thanks
> ---
> v3:
> - updated _SITE from /debian-debug/ to /debian/ (Baruch)
> - updated comment of UNZIP_IGNORE_CVES to reflect bump.
>
> package/unzip/unzip.hash | 4 ++--
> package/unzip/unzip.mk | 6 +++---
> 2 files changed, 5 insertions(+), 5 deletions(-)
>
> diff --git a/package/unzip/unzip.hash b/package/unzip/unzip.hash
> index bbf4f7d71f..0b371e5454 100644
> --- a/package/unzip/unzip.hash
> +++ b/package/unzip/unzip.hash
> @@ -1,6 +1,6 @@
> -# From https://snapshot.debian.org/archive/debian/20210110T204103Z/pool/main/u/unzip/unzip_6.0-26.dsc
> +# From https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip/unzip_6.0-29.dsc
> sha256 036d96991646d0449ed0aa952e4fbe21b476ce994abc276e49d30e686708bd37 unzip_6.0.orig.tar.gz
> -sha256 67bde7c71d52afd61aa936d4415c8d12fd90ca26e9637a3cd67cae9b71298c12 unzip_6.0-27.debian.tar.xz
> +sha256 14043e5ea351c02b3bc8676e1e6d20d79b9a690b6d7520e8138ac629cc048417 unzip_6.0-29.debian.tar.xz
>
> # Locally computed:
> sha256 7469b81d5d29ac4fd670f7c86ba0cb9fa34f137a2d4d5198437d92ddf918984b LICENSE
> diff --git a/package/unzip/unzip.mk b/package/unzip/unzip.mk
> index 5effebee4a..8dccaf6ce3 100644
> --- a/package/unzip/unzip.mk
> +++ b/package/unzip/unzip.mk
> @@ -6,13 +6,13 @@
>
> UNZIP_VERSION = 6.0
> UNZIP_SOURCE = unzip_$(UNZIP_VERSION).orig.tar.gz
> -UNZIP_PATCH = unzip_$(UNZIP_VERSION)-27.debian.tar.xz
> -UNZIP_SITE = https://snapshot.debian.org/archive/debian/20220916T090657Z/pool/main/u/unzip
> +UNZIP_PATCH = unzip_$(UNZIP_VERSION)-29.debian.tar.xz
> +UNZIP_SITE = https://snapshot.debian.org/archive/debian/20250311T215724Z/pool/main/u/unzip
> UNZIP_LICENSE = Info-ZIP
> UNZIP_LICENSE_FILES = LICENSE
> UNZIP_CPE_ID_VALID = YES
>
> -# unzip_$(UNZIP_VERSION)-27.debian.tar.xz has patches to fix:
> +# unzip_$(UNZIP_VERSION)-29.debian.tar.xz has patches to fix:
> UNZIP_IGNORE_CVES = \
> CVE-2014-8139 \
> CVE-2014-8140 \
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2025-12-11 19:32 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-11-27 19:42 [Buildroot] [PATCH v3 1/1] package/unzip: bump to Debian patch level -29 to fix GCC 15.x issues Bernd Kuhls
2025-12-07 16:59 ` Thomas Petazzoni via buildroot
2025-12-11 19:32 ` Arnout Vandecappelle via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox