Commit Graph

8906 Commits

Author SHA1 Message Date
Etienne Champetier 23387d29a2 screen: update to 4.6.2
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-10-29 19:23:21 -07:00
Philip Prindeville 4bf720985e
Merge pull request #5027 from pprindeville/perl-makefile_pl-failure
perl: when Makefile.PL fails give more feedback
2017-10-29 20:17:50 +00:00
Ted Hess 706929c03e opus-tools: Update to 0.1.10, move to Sound, add myself as co-maintainer 2017-10-29 16:06:45 -04:00
Peter Wagner 11af80ebe1 wget: update to 1.19.2
Fixes: CVE-2017-13089, CVE-2017-13090

switch to gz as there is no xz tarball for 1.19.2

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 19:39:08 +01:00
Matthias Schiffer dfd652ff3b
jool: fix PKG_BUILD_DIR to avoid kernel ABI mismatch
As jool builds a kernel module, a PKG_BUILD_DIR under KERNEL_BUILD_DIR must
be used to avoid reusing build artifacts when switching to a different
target of the same architecture. Otherwise, kernel ABI mismatches may
result, leading to an unusuable module, or build failures like the
following:

    Package kmod-jool is missing dependencies for the following libraries:
    crypto_hash.ko

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2017-10-29 18:36:59 +01:00
Peter Wagner 90a74ed428 irssi: fix typo
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 17:07:24 +01:00
Peter Wagner dfb51561ef irssi: update to 1.0.5
Fixes the following CVEs:

CVE-2017-15227
  https://nvd.nist.gov/vuln/detail/CVE-2017-15227

CVE-2017-15228
  https://nvd.nist.gov/vuln/detail/CVE-2017-15228

CVE-2017-15721
  https://nvd.nist.gov/vuln/detail/CVE-2017-15721

CVE-2017-15722
  https://nvd.nist.gov/vuln/detail/CVE-2017-15722

CVE-2017-15723
  https://nvd.nist.gov/vuln/detail/CVE-2017-15723

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 17:04:22 +01:00
Peter Wagner 7651605329 glib2: update to 2.54.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 16:24:52 +01:00
Ted Hess d28321bf29
Merge pull request #5035 from diizzyy/patch-101
libs/faad2: Update to 2.8.6
2017-10-29 09:03:32 -04:00
Daniel Engberg fb98124db3
libs/faad2: Update to 2.8.6
Update faad2 to 2.8.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-10-29 09:11:39 +01:00
Hannu Nyman 04d2768825
Merge pull request #5034 from kissg1988/pypkgupdate
Update several python packages
2017-10-29 10:07:13 +02:00
Gergely Kiss fdb8267c2d openpyxl: update to 2.5.0b1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:28:12 +01:00
Gergely Kiss 8a54d94325 django-constance: update to 2.0.0
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:24:43 +01:00
Gergely Kiss 430dce852a django-restframework: update to 3.7.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:21:42 +01:00
Gergely Kiss e8dac18034 python-urllib3: update to 1.22
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:17:18 +01:00
Gergely Kiss bc1b9fa0e3 django-compressor: update to 2.2
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:13:03 +01:00
Gergely Kiss 467582f7d9 django-picklefield: update to 1.0.0
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:09:55 +01:00
Gergely Kiss 2c9a1f9b4e gunicorn: update to 19.7.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:07:20 +01:00
Gergely Kiss 68f0085fe2 jdcal: update to 1.3
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:04:19 +01:00
Gergely Kiss e3a971558a chardet: update to 3.0.4
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:00:58 +01:00
Gergely Kiss 90173afbbb pytz: update to 2017.2
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:56:07 +01:00
Gergely Kiss e6010224b5 simplejson: update to 3.11.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:52:08 +01:00
Gergely Kiss 23fc92b308 django-postoffice: update to 3.0.3
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:47:27 +01:00
Gergely Kiss 0bcfa490ef python-dateutil: update to 2.6.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:43:47 +01:00
Gergely Kiss 1ae1024041 django-statici18n: update to 1.4.0
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:36:29 +01:00
Philip Prindeville a4aaaf8d8f perl: when Makefile.PL fails give more feedback
There are a few packages which mysteriously fail during the configure
stage.  Give us better means of understanding why.

Also, some Makefile.PL's have "use" statements which reference
files which are in or under ".".

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-10-27 18:22:13 -06:00
Philip Prindeville 72cb164486
Merge pull request #5026 from pprindeville/perl-dot-exclude-breakage
perl: modules failing due to dot not in @INC
2017-10-28 00:16:35 +01:00
Philip Prindeville c79911b66d perl: modules failing due to dot not in @INC
5.26.1 introduced default_inc_excludes_dot which is causing
perl-html-tags and possibly other modules to fail.  Add explict
dot back when invoking module's ./Makefile.PL.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-10-27 15:43:14 -06:00
Hannu Nyman 80c3c0bd2f
Merge pull request #5011 from Borromini/mii-tool
mii-tool: fix kernel 4.9 compatibility
2017-10-27 22:27:51 +03:00
Stijn Segers 8b829cdbc1 net/mii-tool: fix kernel 4.9 compatibility
Signed-off-by: Stijn Segers <francesco.borromini@inventati.org>
2017-10-27 20:16:53 +02:00
Hannu Nyman 0f1e755ec2 Merge pull request #4996 from f00fc7c9/dynv6
ddns-scripts: fix dynv6.com "unchanged" response
2017-10-27 16:28:59 +03:00
Hannu Nyman a072a746f3 Merge pull request #5009 from commodo/squashsfs-tools-update
squashfs-tools: pull newer version from git repo
2017-10-27 11:44:25 +03:00
Alexandru Ardelean 401b376b75 squashfs-tools: pull newer version from git repo
squashfs-tools does not provide tar-balls.
It looks like a good time to pull a newer version
that obsoletes a few accepted patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-10-27 09:55:23 +03:00
Peter Wagner 314aad053b git: update to 2.14.3
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-27 00:12:31 +02:00
Hannu Nyman 9ad97d7585 Merge pull request #5016 from tru7/0.0.1.34
linknx: bump to version 0.0.1.34
2017-10-26 18:28:12 +03:00
Nuno Goncalves 4e82a56ccd tcsh: fix out of memory crash
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-10-26 14:40:52 +02:00
Philip Prindeville aacfbb244a Merge pull request #4956 from pprindeville/perl-update-5.26.1
perl: update to 5.26.1
2017-10-26 01:28:49 +01:00
Othmar Truniger 3c668250f9 linknx: bump to version 0.0.1.34
Signed-off-by: Othmar Truniger <github@truniger.ch>
2017-10-25 20:26:27 +02:00
Hannu Nyman 5e6b44559e Merge pull request #5008 from commodo/ovs-upgrade-2.8.1
openvswitch: upgrade to 2.8.1 ; package more stuff from the OVS build
2017-10-25 20:02:02 +03:00
Hannu Nyman 381055b2d9 Merge pull request #5013 from lucize/doveup
dovecot: update to 2.2.33.2
2017-10-25 20:00:14 +03:00
Hannu Nyman bc4671ac5b Merge pull request #5000 from kissg1988/seafile
seafile: upgrade to 6.2.2
2017-10-25 19:59:35 +03:00
Hannu Nyman 07fe7c1d77 Merge pull request #5014 from marcin1j/pr/20171025-nbd-fix-gnutls-dependecy
nbd: fix gnutls dependency
2017-10-25 19:57:56 +03:00
Marcin Jurkowski f3bf7eb125 nbd: fix gnutls dependency
Get rid of gnutls dependency introduced in 5bca84b. Needs patching
configure script to make gnutls existence test optional.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2017-10-25 16:52:28 +02:00
Lucian Cristian 134164a8a7 dovecot: update to 2.2.33.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-10-25 16:28:40 +03:00
Karl Palsson c97d4999f8 libwebsockets: Upgrade to 2.4.0 and drop wolfssl for mbedtls
Libwebsockets 2.4.0 now includes mbedtls as a first class citizen.
Drop the problematic and poorly supported wolf/cyassl variant and add
mbedtls variant instead.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-10-25 10:53:25 +00:00
Philip Prindeville 4a94479f96 perl: update to 5.26.1
Required changes:

* Add qualifying '.' to scripts or to @INC, as appropriate since we're
  enabling default_inc_excludes_dot;

* Add new platform/library definitions like double-double format and
  locale library functions/headers;

* Delete patch 020 as it's been upstreamed;

Optional changes:

* Instead of using -@rm and having that fail, emit an error message,
  and be ignored, just use @rm -f instead which will always succeed.

Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler

Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]

[CVE-2017-12883] Buffer over-read in regular expression parser

For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]

[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows

A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-10-24 11:40:34 -06:00
Hannu Nyman b1dc90e41d Merge pull request #5010 from Wedmer/master
[utils/zoneinfo] Updated to the latest release
2017-10-24 20:19:28 +03:00
Vladimir Ulrich 5db8bd9136 zoneinfo: Updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
2017-10-24 18:43:19 +03:00
Alexandru Ardelean 1a53301cd1 openvswitch: upgrade to 2.8.1 ; package more stuff from the OVS build
I should have packaged the OVN stuff, VTEP and what-not
earlier, but was not inspired to do this earlier.

I made some time now to package those parts.

Disabling flake8 & python3 explicitly.
They might get detected and cause weird build errors.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-10-24 14:57:12 +03:00
Hirokazu MORIKAWA f90bba4046 icu: fix CVE-2017-14952 Double-Free Vulnerability
http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/

https://security-tracker.debian.org/tracker/CVE-2017-14952

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2017-10-24 02:35:19 -05:00