Commit Graph

2382 Commits

Author SHA1 Message Date
Alexander Ryzhov fc59357297
perl: define $sysroot for extensions
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fed1b3b11b)
2020-02-15 22:05:28 -08:00
Rosen Penev 5c856ff558
perl: Don't build InstallDev under ARC
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2628584ffd)
2020-02-15 22:05:20 -08:00
Michael Heimpold 3cf0c61f2e php7: update to 7.2.27
This fixes:
  - CVE-2020-7059
  - CVE-2020-7060

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-07 21:09:24 +01:00
Jan Pavlinec 268ea7a78c
python-importlib-metadata: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-02-06 10:34:41 +01:00
Jeffery To 1d7cda2edc golang: Improve build isolation from user environment
* Set GOENV=off when building Go compiler and packages, to ignore user's
  environment configuration file
* Set GOCACHE when building host Go
* Unset GOTMPDIR, to use the buildroot temp directory instead of temp
  directories in build_dir

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 3b5f1c73fb)
2020-02-04 04:16:17 +08:00
Jeffery To 9a792f41c9 golang: Update to 1.13.7, add PKG_CPE_ID to Makefile
This update includes fixes for[1]:
* CVE-2020-7919 - doesn't appear to be published publicly yet
* CVE-2020-0601 - a Windows-related issue

[1]: https://github.com/golang/go/issues?q=milestone%3AGo1.13.7+label%3ACherryPickApproved

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 0dc4fa6efb)
2020-02-03 05:02:27 +08:00
Rosen Penev cff7a04a6a
Merge pull request #11176 from jefferyto/python-fix-float-byte-order-openwrt-19.07
[openwrt-19.07] python,python3: Fix float byte order detection
2020-01-30 16:27:49 -08:00
Eneas U de Queiroz 36a1c0c5ae
python-certify: bump to 2019.11.28
This is a regular Mozilla CA bundle update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c799f2a913)
2020-01-30 14:59:51 -03:00
Jeffery To ad50eb7c0a python3: Fix float byte order detection
This backports patches from bpo-34585[1] to fix byte order detection of
floats.

Fixing byte order detection allows the repr() of floats to be
shorter[2]. sys.float_repr_style should be 'short' instead of 'legacy'
on supported platforms.

See #11134.

[1]: https://bugs.python.org/issue34585
[2]: https://docs.python.org/3.8/whatsnew/3.1.html#other-language-changes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-30 19:12:25 +08:00
Jeffery To a76dd0635c python: Fix float byte order detection
This backports patches from bpo-34585[1] to fix byte order detection of
floats.

Fixing byte order detection allows the repr() of floats to be shorter (a
feature backported to Python 2.7 from Python 3.1[2]).
sys.float_repr_style should be 'short' instead of 'legacy' on supported
platforms.

See #11134.

[1]: https://bugs.python.org/issue34585
[2]: https://docs.python.org/2.7/whatsnew/2.7.html#python-3-1-features

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from a0da5aec7f)
Omitted PKG_RELEASE change
2020-01-30 19:07:37 +08:00
Rosen Penev 30d0c2ee0f python: Replace utime with utimes
Optionally fixes compilation with uClibc-ng.

Based on the surrounding code, this looks like an oversight.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

(cherry picked from 608df65a62)
Adjusted PKG_RELEASE
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-30 19:04:39 +08:00
Rosen Penev 9cb0c7f4a0
Merge pull request #10990 from BKPepe/django-19.07
[OpenWrt 19.07] django: update to version 1.11.27
2020-01-22 18:41:20 -08:00
Jeffery To 2dbc88762c golang: Update to 1.13.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 01:26:40 +08:00
Jeffery To fdd202bd1e golang: Fix selection of GOARM value
This fixes how GOARM is selected for arm platforms, based on support for
VFP/VFPv3 rather than CPU version.

Fixes #10967.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 00:58:28 +08:00
Josef Schlehofer a50eeb01fc
django: update to version 1.11.27
Fixes: CVE-2019-19844

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-11 23:15:13 +01:00
Alexandru Ardelean e847333d15 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

(cherry picked from commit ed0e77f3c3)
Reference to discussion at
c61579b564 (commitcomment-36665837)
Adjusted python PKG_RELEASE items to current situation
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-01-10 18:57:16 +02:00
Jeffery To fc313e772b golang: Format TARGET_LDFLAGS for gcc
go invokes the external linker by calling gcc, so -zxxx options in
TARGET_LDFLAGS (in golang-package.mk) need to be formatted as -Wl,z,xxx.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from dbd6f224c3)
2019-12-29 18:51:15 +08:00
Daniel F. Dickinson bcdb9d00a5 passlib: Update passlib to 1.7.2
Relevant bits of upstream changelog

New Features

    argon2: Support more hashes
    scrypt: Now uses python 3.6 stdlib’s hashlib.scrypt() as backend, if present (issue 86).

Bugfixes

    Python 3.8 compatibility fixes
    passlib.apache.HtpasswdFile: improve compatibility with Apache 2.4's htpasswd
    passlib.totp: fix some compatibility issues with older TOTP clients (issue 92)
    Fixed error in argon2.parsehash() (issue 97)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-12-27 14:06:39 -05:00
Jeffery To db9a8a1e74 golang: Fix ldflags when GO_PKG_LDFLAGS is set
go build/install supports multiple -ldflags arguments, but they are not
combined; for each package, the latest match on the command line is
used.[1]

Previously, the main executable would not be affected by the default
ldflags if GO_PKG_LDFLAGS or GO_PKG_LDFLAGS_X were set. (The default
ldflags instructs go to use the external linker.)

This fixes golang-package.mk so that the default ldflags take effect in
all cases.

[1]: https://golang.org/cmd/go/#hdr-Compile_packages_and_dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 4827bc7509)
2019-12-26 21:09:01 +08:00
Josef Schlehofer c5d6ffaf1c
python3: Updated to version 3.7.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-21 14:35:31 +01:00
Michael Heimpold 13de8da3b3 php7: update to 7.2.26
This fixes:
  - CVE-2019-11046
  - CVE-2019-11044
  - CVE-2019-11045
  - CVE-2019-11050
  - CVE-2019-11047

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d5c18b1d5e)
2019-12-18 21:23:12 +01:00
Josef Schlehofer c1dd9499b1
golang: Update to 1.13.5
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 791729cfc0)
2019-12-09 23:28:07 +01:00
Jan Pavlinec b88b43dd12
python-more-itertools: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from 4bade3b2f7)
2019-12-06 15:41:53 -08:00
Matthias Schiffer 03b412db2e
luasrcdiet: add package (moved from luci-base package)
We use luasrcdiet in Gluon as well. Move it from the luci feed to packages.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 46d68b8699)
2019-11-26 19:52:28 +01:00
Rosen Penev d0e97caca6
Merge pull request #10631 from jefferyto/python-pyopenssl-19.1.0-openwrt-19.07
[openwrt-19.07] python-pyopenssl: Update to 19.1.0
2019-11-25 11:14:29 -08:00
Josef Schlehofer 4a82137613 php7: Update to version 7.2.25
- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bc48abd2a)
2019-11-24 22:04:15 +01:00
W. Michael Petullo 36358e7e38 php7: mark /etc/config/php7-fastcgi as conffile
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 5bc9bb04c5)
2019-11-24 22:03:41 +01:00
Michael Heimpold 3be4577ee9 php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)
PHP7 fails to load xmlreader.so (php7-mod-xmlreader) module without
dom.so (php7-mod-dom) module loaded:

-snip-
PHP Warning:  PHP Startup: Unable to load dynamic library 'xmlreader.so'
 (tried: /usr/lib/php/xmlreader.so (Error relocating /usr/lib/php/xmlreader.so:
 dom_node_class_entry: symbol not found), /usr/lib/php/xmlreader.so.so (Error
 loading shared library /usr/lib/php/xmlreader.so.so: No such file or
 directory)) in Unknown on line 0
^C
-snap-

However, this dependency only exists when during build also php7-mod-dom
is selected.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit b8c22fc1ec)
2019-11-24 22:03:11 +01:00
Stefaan Ghysels 7aadc71300 php7: bump to 7.2.23
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
(cherry picked from commit dacda44755)
2019-11-24 22:02:30 +01:00
Jeffery To fc33728724 python-pyopenssl: Update to 19.1.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from aff03aee1f)
2019-11-25 04:40:19 +08:00
Alexandru Ardelean 2969a1842d django: bump to version 1.11.26
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-11-19 10:49:50 +02:00
Rosen Penev 41503554d0
Merge pull request #10577 from jefferyto/python-zope-interface-4.7.1-openwrt-19.07
[openwrt-19.07] python-zope-interface: Update to 4.7.1, refresh patch
2019-11-17 18:11:45 -08:00
Rosen Penev 209ecba6be
Merge pull request #10575 from jefferyto/python-twisted-19.10.0-openwrt-19.07
[openwrt-19.07] python-twisted: Update to 19.10.0, refresh patches
2019-11-17 18:11:27 -08:00
Jeffery To 1f417d7ed0 python-zope-interface: Update to 4.7.1, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5e8feda04a)
2019-11-18 04:49:46 +08:00
Jeffery To 87ccd3ddbd python-twisted: Update to 19.10.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c56770a570)
2019-11-18 04:35:45 +08:00
Jeffery To 7504b410a6 python-pyasn1: Update to 0.4.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from b99abe8dd8)
2019-11-18 04:07:32 +08:00
Jeffery To daebf4aba9 python-six: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5be603a836)
2019-11-11 18:39:36 +08:00
Josef Schlehofer aa4c5e7de6
Revert "Revert "perl-www-curl: curl 7.66.0 compatibility""
This is required as curl 7.66.0 was cherry-picked to openwrt-19.07 3
days ago. Otherwise, compilation of perl-www-curl fails.

This reverts commit ec6cd9b9c3.
2019-11-10 20:40:19 +01:00
Josef Schlehofer a6f026ff5b
python-zipp: fix python-more-itertools dependency
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 426ed75dbe)
2019-11-10 18:30:30 +01:00
Jan Pavlinec 0faf7bfcc2
python-zipp: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit f0a79ca148)
2019-11-10 18:30:19 +01:00
Jakub Piotr Cłapa 91da56a942
perl: fixed host compilation of static perl on MacOS
All symbols on MacOS are prefixed with an underscore which
interfered with the filtering mechanism (added in perl 5.28)
for extension libraries to be linked into static perl.

Signed-off-by: Jakub Piotr Cłapa <jpc@loee.pl>
(cherry-picked from commit 3954356)
2019-11-10 18:28:23 +01:00
Rosen Penev ec6cd9b9c3
Revert "perl-www-curl: curl 7.66.0 compatibility"
This reverts commit 3d98d7fd05.

This was a bad backport.
2019-11-09 11:30:15 -08:00
Rosen Penev 16657121a1
Merge pull request #10458 from jefferyto/python-cffi-1.13.2-openwrt-19.07
[openwrt-19.07] python-cffi: Update to 1.13.2
2019-11-04 09:28:13 -08:00
Jeffery To e1d9652edc python-cffi: Update to 1.13.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c21eee0df4)
2019-11-04 23:45:03 +08:00
Jeffery To 07835fc26e golang: Update to 1.13.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 37facb63f5)
2019-11-04 22:55:53 +08:00
Jeffery To 58ed21040c
python,python3: Add PYPI_SOURCE_NAME to pypi.mk
This adds a new (optional) variable, PYPI_SOURCE_NAME, to pypi.mk.

For some PyPi packages (e.g. aiohttp_cors, click, django-compressor),
the name of the package and the source tarball name are slightly
different (usually by capitalisation or hyphen/underscore change).

This new variable is to make this difference explicit. PYPI_NAME is
meant for the "official" package name, whereas PYPI_SOURCE_NAME is meant
for the source tarball name.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 1bacdd52f7)
2019-11-02 20:21:46 +01:00
Jeffery To 866b42c60e
python,python3: Add pypi makefile
This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit add4c42191)
2019-11-02 19:01:21 +01:00
Alexandru Ardelean 807c557cf9 django: bump to version 1.11.25
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e9e687a1f1)
2019-10-30 23:16:57 +08:00
Alexandru Ardelean 4574e8fcb9 python-cffi: bump to version 1.13.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from dff2fe2963)
2019-10-30 05:49:55 +08:00
Luiz Angelo Daros de Luca 702c655874 ruby: update to 2.6.5
2.6.5 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.6.4 fixes:
* Multiple jQuery vulnerabilities in RDoc

Changelog: https://github.com/ruby/ruby/compare/v2_6_3...v2_6_5

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit d3d0c28149)
2019-10-27 16:09:43 -03:00
Alexandru Ardelean f18bc652c7
django-ranged-response: update packaging format + add python3 variant
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Not updating deps here, since that will be done in the next changeset that
will convert packages to the Python[3] packaging format.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 70ebc7a2f4)
2019-10-24 21:33:37 +02:00
Josef Schlehofer 629b8fb60e
flup: add Python3 variant and src package
- Add PKG_LICENSE_FILES
- Reorder things in Makefile
- Add dependency python3-logging otherwise I cannot import
flup.server.ajp
flup.server.scgi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit a5b2ba9b4d)
2019-10-23 15:34:59 +02:00
Josef Schlehofer 6f392ad0cb
django-statici18n: fix changes in merge 2019-10-23 09:16:42 +02:00
Josef Schlehofer c4782e6e8b
django-web-pack-loader: fix changes in merge conflict 2019-10-23 09:15:47 +02:00
Eneas U de Queiroz db4cbf71a5
django: move django* packages under django submenu
This changes the python[3]-django dependencies in packages to be
non-selecting, and adds an MDEPENDS line so that the *-src packages get
placed inside the django menu as well.

Added MENU:= to the src-package definitions in python[3]-package.mk,
so it does not import that setting from the binary package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 90527d75af)
2019-10-23 01:59:52 +02:00
Alexandru Ardelean 19e137162d
django-simple-captcha: update packaging format + add python3 variant
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Also, changing here is the download URL to github's codeload, since that
one offers .tar.gz archives.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 545cff8b63)
2019-10-23 01:57:51 +02:00
Alexandru Ardelean b686fa3f48
python-qrcode: update Eneas' email as per prev request
The email change was part of a previous request from a different PR series.
In this series, the change is the only thing left to do (from what the
original changeset intended to do).

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f5eb040e6b)
2019-10-23 01:55:16 +02:00
Josef Schlehofer 7c48116933
python-qrcode: add Python3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 6c7a31ec5e)
2019-10-23 01:55:00 +02:00
Alexandru Ardelean 7257bb05a9
django-restframework: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 441f486081)
2019-10-23 01:51:26 +02:00
Alexandru Ardelean d386164ae7
django-postoffice: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 15272fcc65)
2019-10-23 01:51:12 +02:00
Alexandru Ardelean 2a8c5fe35e
django-picklefield: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 6a7f547a38)
2019-10-23 01:50:56 +02:00
Alexandru Ardelean 74f3bf88df
django-jsonfield: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 7bbc5131f2)
2019-10-23 01:50:43 +02:00
Alexandru Ardelean 03852aa990
django-formtools: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit e4d8127cae)
2019-10-23 01:50:29 +02:00
Alexandru Ardelean 8df3e1ae45
django-compressor: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 35cddd9b6f)
2019-10-23 01:50:17 +02:00
Alexandru Ardelean c3710fadac
django-appconf: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 3392fbc6fc)
2019-10-23 01:50:05 +02:00
Alexandru Ardelean dcadf6baac
django-constance: convert to python pkg format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1b2936a2d0)
2019-10-23 01:49:35 +02:00
Alexandru Ardelean f8ff5017d2
django: convert to python pkg format + add python3 variant
This also updates all dependencies to use the new `python-django` package.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f026dba26e)
2019-10-23 01:49:15 +02:00
Alexandru Ardelean d735b2be96 python-pillow: bump to version 6.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-22 10:54:39 +02:00
Josef Schlehofer 3569a3b029 pillow: add Python3 variant and update to 6.1.0
- Add @commodo as maintainer

Co-Authored-By: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-22 10:54:22 +02:00
Jeffery To 18a7c29f55 python: Update to 2.7.17, refresh patches
Patches already merged and so removed:
* 011-fix-ssl-build-use-have-npn.patch
* 019-bpo-36216-Add-check-for-characters-in-netloc-that-normalize-to-separators-GH-12216.patch
* 020-bpo-36216-Only-print-test-messages-when-verbose-GH-12291.patch
* 021-2.7-bpo-35121-prefix-dot-in-domain-for-proper-subdom.patch
* 022-bpo-30458-Disallow-control-chars-in-http-URLs-GH-13315.patch
* 023-bpo-35907-Avoid-file-reading-as-disallowing-the-unnecessary-URL-scheme-in-urllib-GH-11842.patch
* 027-bpo-38243-Escape-the-server-title-of-DocXMLRPCServer.patch
* 028-bpo-34155-Dont-parse-domains-containing-GH-13079.patch

Patches no longer necessary and so removed:
* 017_lib2to3_fix_pyc_search.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 83b300aa83)
2019-10-21 23:42:32 +08:00
Josef Schlehofer 0882737b4a
python3: Update to version 3.7.5
setuptools: Updated to version 41.2.0
pip: Updated to version 19.2.3

Removed patches:
- 017: code was refactored
- 02{5,6,7,8}: those patches were backported from upstream and they are
included in 3.7.5

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-21 15:19:32 +02:00
Jeffery To d97f776050 python-ipaddress: Update to 1.0.23
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 2185895297)
2019-10-21 21:10:59 +08:00
Jeffery To 2dfbcb7b99 python-automat: Update to 0.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 57b4938bab)
2019-10-21 21:10:38 +08:00
Jeffery To 5e981bfffe python-attrs: Update to 19.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 8c3f7dcc36)
2019-10-21 21:10:14 +08:00
Jeffery To b89bf0470d python-cryptography: Update to 2.8
With this update, the package no longer depends on python-asn1crypto[1].

[1]: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#28---2019-10-16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 23f308123c)
2019-10-21 13:44:25 +02:00
Jeffery To bf66776f93
python-cffi: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 141ead6bd7)
2019-10-21 13:43:25 +02:00
Josef Schlehofer a1a665c7e2
golang: Update to version 1.13.3
Fixes CVE-2019-17596

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 10d55f6)
2019-10-21 03:31:56 +02:00
Jeffery To a0c1c2da6a python-pyasn1-modules: Update to 0.2.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5848f67e41)
2019-10-16 02:15:00 +08:00
Rosen Penev c6f2699f96
Merge pull request #10183 from jefferyto/python-attrs-19.2.0-openwrt-19.07
[openwrt-19.07] python-attrs: Update to 19.2.0
2019-10-09 12:50:28 -07:00
Alexander Ryzhov 3d98d7fd05 perl-www-curl: curl 7.66.0 compatibility
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry-picked from 7910715d86)
2019-10-08 14:57:26 -07:00
Jeffery To 863c1a41b4 python-attrs: Update to 19.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-09 05:21:03 +08:00
Jeffery To 18add705fa python,python3: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-05 00:04:39 +08:00
Jeffery To 1d6436623a python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:46:39 +08:00
Eneas U de Queiroz 4bbeb730a5
python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit acf7c540ca)
2019-09-30 16:42:59 -03:00
Josef Schlehofer faf6ec5800
python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:02:40 +02:00
Rosen Penev 33ee8d1ec3 django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 64a02079da)
2019-09-30 10:27:06 +03:00
Josef Schlehofer f2a06eb9dc
golang: Update to version 1.13.1
Fixes CVE-2019-16276

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 65b7bd6cc0)
2019-09-29 20:42:52 +02:00
Jeffery To 2c829c973b
golang: Use new -trimpath option when compiling Go packages
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 22ee6e86a0)
2019-09-29 00:42:22 +02:00
Xingwang Liao c7f1bdc592
golang: Update to 1.13
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry-picked from commit 0849e32659)
2019-09-29 00:42:09 +02:00
Hirokazu MORIKAWA d97123b729
node: fix http/2 DoS
This is a security release.

Node.js, as well as many other implementations of HTTP/2,
have been found
vulnerable to Denial of Service attacks.
See https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
for more information.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 81bccf9068)
2019-09-27 12:44:16 -07:00
Hirokazu MORIKAWA 976fd4e9c1
node: fix host build error on macOS
fix host build error on macOS
reference: https://github.com/openwrt/packages/issues/9616

Related: https://github.com/openwrt/packages/issues/7171
(This correspondence is necessary to build with macOS.)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from c69d5a0241)
2019-09-27 12:43:43 -07:00
Rosen Penev 5b903f68eb
Merge pull request #10084 from BKPepe/sentrysdk-1907
[OpenWrt 19.07] python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:37 -07:00
Rosen Penev 884c89b5e9
jamvm: Don't compile on ARM64
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccd2b767d)
2019-09-27 10:10:33 -07:00
Jan Pavlinec a0d4cc9170
treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ceadbcbb64)
2019-09-26 19:36:27 -07:00
Jan Pavlinec 937b19ebb7
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Sven Eckelmann 1142f52078
treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from bbb1ea7345)
2019-09-26 19:36:25 -07:00
Rosen Penev 07f47d6ea5
jamvm: Add host build
Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2972cc98eb)
2019-09-26 19:36:22 -07:00
Josef Schlehofer de686dc0e8
python-sentry-sdk: Update to version 0.12.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 18:24:21 +02:00
Karel Kočí c004f8a7a6
python-intelhex: add new package
This is Python library to parse, generate and in general handle files
in Intel HEX format.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 306e276a3b)
2019-09-17 08:44:59 +02:00
Karel Kočí c35c9d6932
python-schema: update to version 0.7.1
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7bb6d72a47)
2019-09-17 08:41:40 +02:00
Michael Heimpold 41fb159a38 php7: update to 7.2.22
While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5805da860e)
2019-09-12 21:52:27 +02:00
Josef Schlehofer 24ef2a78e3
python-sqlalchemy: Update to version 1.3.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 2ee4b09760)
2019-09-04 16:06:09 +02:00
Josef Schlehofer 38ba031f26
python-slugify: Update to version 3.0.3
Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d3c2ff35b5)
2019-09-04 16:05:56 +02:00
Josef Schlehofer 43e07c60a0
python-yaml: Update to version 5.1.2
PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 3cfbdbf25b)
2019-09-04 16:05:44 +02:00
Josef Schlehofer d49bde8ea9
python-voluptuous-serialize: Update to version 2.2.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit af213059f5)
2019-09-04 16:05:31 +02:00
Josef Schlehofer 5fa4f744ac
python-voluptuous: Update to version 0.11.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 0835e5e6dc)
2019-09-04 16:05:20 +02:00
Jeffery To f57f327f06 python-pyasn1: Update to 0.4.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-09-03 02:52:18 +08:00
Alexandru Ardelean 76ea030571
python-dateutil: bump to version 2.8.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 0699a69ba1)
2019-09-01 10:10:38 +02:00
Alexandru Ardelean 6464894728
python-lxml: bump to version 4.4.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 621f5777d3)
2019-09-01 10:10:23 +02:00
Alexandru Ardelean 87fbf41ae8
python-pytz: bump to version 2019.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 16c9fcdda8)
2019-09-01 10:09:45 +02:00
Eric Kinzie bc0001d5a5
luajit: fix building for 64-bit targets
Host and target architectures need to have the same pointer size.
When building on x86_64, do not force 32-bit host binaries if the target
architecture is also 64-bit.

See http://luajit.org/install.html#cross

Add 64-bit arm (aarch64) to the list of architectures.

Signed-off-by: Eric Kinzie <ekinzie@labn.net>
(cherry-picked from commit 5b0ef0e1b9)
2019-08-26 03:47:52 +02:00
Eneas U de Queiroz 40e86c8729
python-oauthlib: bump to 3.1.0
This is a feature release including improvement to OIDC and security
enhancements, as well as bugfixes.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit ab990af307)
2019-08-24 16:50:44 +02:00
Josef Schlehofer 03bc9a0b50
ruamel-yaml: Update to version 0.15.100
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 907287b)
2019-08-21 22:24:30 +02:00
Jeffery To 999c2a5457 golang: Update to 1.12.9
Includes fixes (in 1.12.8) for:
CVE-2019-14809 - https://nvd.nist.gov/vuln/detail/CVE-2019-14809
CVE-2019-9512 - https://nvd.nist.gov/vuln/detail/CVE-2019-9512
CVE-2019-9514 - https://nvd.nist.gov/vuln/detail/CVE-2019-9514

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-20 22:04:08 +08:00
Jeffery To e450748208 python,python3: Fix host Python compilation for macOS
* Remove $$$$(pkg-config --static --libs libcrypto libssl) from
  HOST_LDFLAGS

  Having this leads to an "unknown type name 'u_int'" error on Mac.
  Removing it doesn't appear to affect Python's ability to find
  buildroot LibreSSL.

* Change -Wl,-rpath=... to -Wl,-rpath,... in HOST_LDFLAGS

  The equals sign version is not supported by the Mac linker (appears to
  be an GNU extension). The comma version is supported; -rpath and its
  argument will be separated by a space when passed to the linker.

* Add ac_cv_header_libintl_h=no to HOST_CONFIGURE_VARS for Mac

  Python on Mac doesn't expect to use libintl, but if gettext-full is
  compiled for host, it will try, leading to undefined symbol errors
  during compilation. This prevents configure from finding libintl.h.

Fixes #7171.
Fixes #9621.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-17 05:14:42 +08:00
Jeffery To dec56a3140 python-twisted: Update to 19.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-15 03:22:54 +08:00
Michael Stegeman 07d771ee1b
node-mozilla-iot-gateway: Remove package
As the WebThings Gateway moves into a full-fledged router
distribution, it no longer makes sense to have this as a
standalone package, as it now modifies system-wide settings.

References #9629
References mozilla-iot/gateway#2060
References https://gitlab.labs.nic.cz/turris/turris-os-packages/issues/452

Signed-off-by: Michael Stegeman <michael@stegeman.me>
2019-08-08 08:44:20 -08:00
Rosen Penev 94d1ad766e
Merge pull request #9649 from jefferyto/python-pyasn1-0.4.6-openwrt-19.07
[openwrt-19.07] python-pyasn1: Update to 0.4.6
2019-08-05 10:00:52 -07:00
Jeffery To f52637d3be python-pyasn1-modules: Update to 0.2.6
Requires python-pyasn1 0.4.6 (#9649).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-05 04:05:06 +08:00
Jeffery To 29289e244c python-pyasn1: Update to 0.4.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-05 03:43:40 +08:00
Michael Heimpold 42a98950b8 php7: update to 7.2.21
This fixes CVE-2019-11042 and CVE-2019-11041.

Compile and run tested on mxs platform

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-08-04 00:44:31 +02:00
Eneas U de Queiroz 4273dfd32f
bcrypt: add python-cffi/host build dependency
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from 86fb008751)
2019-07-31 15:32:17 -07:00
Stepan Henek eee9c627c8
python-cachelib: package added
Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-22 22:58:31 +02:00
Josef Schlehofer 54e3c2280a
python: add patch for CVE-2018-20852
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-22 15:29:46 +02:00
Jeffery To 2d6700ed38 python,python3: Fix ctypes.util.find_library()
Python's ctypes.util.find_library() function currently doesn't work for
musl libraries/systems[1].

This adds a patch to fix this function, based on a patch from Alpine
Linux[2].

Fixes #9448.

[1]: https://bugs.python.org/issue21622
[2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-07-22 04:52:27 +08:00
Jeffery To 91e92c99f2 golang: Update to 1.12.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-07-20 20:54:08 +08:00
Hirokazu MORIKAWA 064528047e
node-mozilla-iot-gateway: Remove unnecessary step
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 1314b86231)
2019-07-19 19:37:13 -07:00
Josef Schlehofer eda5cd792f
python-pyrsistent: add a new package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-16 15:49:12 +02:00
Josef Schlehofer 670926f527
python-cachetools: add a new package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-16 15:49:08 +02:00
Eneas U de Queiroz b2df2da369
python-oauthlib: update to 3.0.2 (bugfix release)
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 6c4ba3a58d)
2019-07-12 11:54:23 -03:00
Josef Schlehofer 62827e7592
python-sentry-sdk: Update to version 0.10.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 4a7b407d70 )
2019-07-11 09:24:08 +02:00
Josef Schlehofer ca059b8993
python-sentry-sdk: Update to version 0.10.0
- Reorder alphabetically dependencies
- Add python3-logging as a dependency

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit cd13d5d4de)
2019-07-11 09:23:51 +02:00
Eneas U de Queiroz 77b122c207
python-curl: add ssl locking support to wolfssl
Patch was merged upstream.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 8bdb697671 )
2019-07-11 09:23:23 +02:00
Eneas U de Queiroz 07d5a24b16
python-curl: fix compilation with libcurl-wolfssl
This allows compilation when libcurl is build with wolfssl as its SSL
backend.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 3e78945eaf)
2019-07-11 09:23:09 +02:00
Josef Schlehofer b6688f0e79
python-curl: update to version 7.43.0.3
Patch was accepted.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 3856573)
2019-07-11 09:21:49 +02:00
Josef Schlehofer e9322993b9
python3-bottle: update to version 0.12.17
Shorter TITLE
- The longer one was not shown in make menuconfig.
Reodered stuff in Makefile
Removed PKG_UNPACK and change PKG_BUILD_DIR

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 0a3e4d8)
2019-07-11 09:20:12 +02:00
Josef Schlehofer 34f8cf530d
python3: Update to version 3.7.4
- Update setuptools to 40.8.0
- Update pip to 19.0.3
- Refreshed patches
- Removed 4 patches (2 of them was included in 3.7.3 and other two are
included in this release)

Makefile python3:
- Move PKG_MAINTAINER above PKG_LICENSE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from ce769db007)
2019-07-10 10:16:47 +02:00
Eneas U de Queiroz 493cc51a4d
python3: use _python_sysroot for cross-compilation
This patch, taken from buildroot, avoids the use of host paths when
compiling third-party extensions.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 523c52f6f2)
2019-07-10 10:16:29 +02:00
Josef Schlehofer de44768c5a
python-sqlalchemy: add package with version 1.3.5
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from f5fae3d )
2019-07-09 07:33:28 +02:00
Josef Schlehofer b21fb60176
bcrypt: Update to version 3.1.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 43c89c56a2)
2019-07-09 07:32:51 +02:00
Josef Schlehofer 58760acd10
bcrypt: Reorder Makefile and change TITLE
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from b728e84ec6 )
2019-07-09 07:32:33 +02:00
Karel Kočí cf6c6d01aa
python-markdown: add a new package
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
[Add me as maintainer]
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 6cdcfd9)
2019-07-07 10:13:38 +02:00
Josef Schlehofer f00cfce768
python-yaml: update to version 5.1.1
Reorder one thing in Makefile and add two spaces in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-pick from bec7011401 )
2019-07-07 10:09:18 +02:00
Josef Schlehofer 295bd4c237
python-sentry-sdk: add package with version 0.9.5
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
(cherry-pick from 7fb6466435)
2019-07-07 10:08:47 +02:00
Josef Schlehofer 6bbf892b56
python-aiohttp-cors: add package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-pick from commit eb38ddfa13)
2019-07-07 10:08:26 +02:00
Rosen Penev cf7cab4976
python-cryptography: Remove NPN
Upstream backport. It seems the holdup is on python-twisted.

Without this, it fails with
SSL_get0_next_proto_negotiated: symbol not found

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit 0859931)
2019-07-07 10:05:58 +02:00
Jeffery To 5a7ad42dec golang: Update to 1.12.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-19 01:09:40 +08:00
Eneas U de Queiroz d80ec47df5 python-certifi: bump to 2019.6.16
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2019-06-17 16:18:29 -03:00
Rosen Penev 3acd543a53
Merge pull request #9208 from BKPepe/zeroconf
zeroconf: update to version 0.23.0
2019-06-10 08:43:24 -07:00
Rosen Penev f961f11ca4
Merge pull request #9210 from nxhack/homebridge_0_4_50
node-homebridge: update to 0.4.50
2019-06-10 08:42:44 -07:00