浏览代码

package/libbson: remove package

The upstream libbson repository has been archived since october 2020,
and there is a known vulnerabilities affecting it (CVE-2025-0755).

Since no other package depends on libbson, and it hasn't seen any recent
activity, let's simply remove it from Buildroot. In case anyone needs a
bson implementation, one could integrate the replacement from mongo-c-driver
instead, see https://github.com/mongodb/mongo-c-driver/tree/master/src/libbson

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Titouan Christophe 3 月之前
父节点
当前提交
851c6ad279
共有 6 个文件被更改,包括 6 次插入39 次删除
  1. 6 0
      Config.in.legacy
  2. 0 1
      DEVELOPERS
  3. 0 1
      package/Config.in
  4. 0 11
      package/libbson/Config.in
  5. 0 4
      package/libbson/libbson.hash
  6. 0 22
      package/libbson/libbson.mk

+ 6 - 0
Config.in.legacy

@@ -146,6 +146,12 @@ endif
 
 comment "Legacy options removed in 2025.11"
 
+config BR2_PACKAGE_LIBBSON
+	bool "libbson has been removed"
+	select BR2_LEGACY
+	help
+	  libbson is officially deprecated upstream and has been removed
+
 config BR2_TARGET_ROOTFS_AXFS
 	bool "AXFS root filesystem has been removed"
 	select BR2_LEGACY

+ 0 - 1
DEVELOPERS

@@ -2994,7 +2994,6 @@ F:	package/wlr-randr/
 
 N:	Semyon Kolganov <semenak94@mail.ru>
 F:	package/fmt/
-F:	package/libbson/
 F:	package/lua-resty-http/
 F:	package/mpir/
 

+ 0 - 1
package/Config.in

@@ -1924,7 +1924,6 @@ menu "JSON/XML"
 	source "package/json-for-modern-cpp/Config.in"
 	source "package/json-glib/Config.in"
 	source "package/jsoncpp/Config.in"
-	source "package/libbson/Config.in"
 	source "package/libfastjson/Config.in"
 	source "package/libjson/Config.in"
 	source "package/libjwt/Config.in"

+ 0 - 11
package/libbson/Config.in

@@ -1,11 +0,0 @@
-config BR2_PACKAGE_LIBBSON
-	bool "libbson"
-	depends on BR2_TOOLCHAIN_HAS_THREADS
-	help
-	  libbson is a library providing useful routines related to
-	  building, parsing, and iterating BSON documents.
-
-	  http://mongoc.org/libbson/
-
-comment "libbson needs a toolchain w/ threads"
-	depends on !BR2_TOOLCHAIN_HAS_THREADS

+ 0 - 4
package/libbson/libbson.hash

@@ -1,4 +0,0 @@
-# Locally calculated
-sha256  6bb51b863a4641d6d7729e4b55df8f4389ed534c34eb3a1cda906a53df11072c  libbson-1.9.5.tar.gz
-sha256  cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30  COPYING
-sha256  8dc5cb3146b026715e6c145621c7732f36c295d825b7b3a03076ad3f238db48e  THIRD_PARTY_NOTICES

+ 0 - 22
package/libbson/libbson.mk

@@ -1,22 +0,0 @@
-################################################################################
-#
-# libbson
-#
-################################################################################
-
-LIBBSON_VERSION = 1.9.5
-LIBBSON_SITE = https://github.com/mongodb/libbson/releases/download/$(LIBBSON_VERSION)
-LIBBSON_LICENSE = Apache-2.0, MIT (jsonl), ISC (b64), Zlib (md5)
-LIBBSON_LICENSE_FILES = COPYING THIRD_PARTY_NOTICES
-LIBBSON_CPE_ID_VENDOR = mongodb
-LIBBSON_CONF_OPTS = \
-	--disable-tests \
-	--disable-examples \
-	--disable-man-pages \
-	--disable-html-docs
-
-LIBBSON_INSTALL_STAGING = YES
-
-# Also has CMake support, but that forces shared+static libs and static
-# lib has a different name.
-$(eval $(autotools-package))