Commit Graph

5020 Commits

Author SHA1 Message Date
krant 8db49729c3 expat: update to 2.6.2
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-03-22 16:04:54 +08:00
Christian Marangi c3a50a9fac
libpfring: backport patch fixing compilation error for sa_data
Backport patch fixing compilation error for sa_data not well defined.
This is triggered only on platform that makes use of fortify string and
cause compilation error due to the fact that sa_data is not well defined
and his size is arbitrary.

Patch has been accepted in the PF_RING project and this is just a
backport.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-03-19 11:40:36 +01:00
Peter van Dijk 0245dd0131 libfstrm: add second maintainer
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-08 00:34:29 +08:00
Peter van Dijk 629fb37b55 libwslay: remove, nothing depends on it since h2o is gone
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-03-07 15:21:46 +01:00
Igor Bezzubchenko 5ad1f0ebbe libpqxx: update to version 7.9.0
Signed-off-by: Igor Bezzubchenko <garikello@gmail.com>
2024-02-29 22:39:24 +01:00
krant 0858accfda c-ares: update to 1.27.0
- Update package URL
- Don't set default CMake options

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-24 12:10:20 -08:00
John Audia c1b4e80825 gperftools: add new package
Thread-caching malloc provided by this package improves snort3
performance.  I have been running with this for over seven months
without issues.  Avg CPU usage is down.  Another user reported
higher throughput achieved with snort3 compiled with this on
samba transfers on system with CPU-limited snort performance.[1]

1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22

Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-02-24 11:45:33 -08:00
John Audia bb574d7b69 hyperscan: symlinks redundant ABI shared objects
Use $(CP) macro rather than $(INSTALL_DATA) to preserve symlinks
on shared objects which saves approx 11.8 M of space.

From hyperscan-runtime_5.4.2-1:

% ls -lh /usr/lib/libhs*
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5
-rw-r--r-- 1 root root 4.7M Feb 16 14:29 /usr/lib/libhs.so.5.4.2
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5
-rw-r--r-- 1 root root 1.2M Feb 16 14:29 /usr/lib/libhs_runtime.so.5.4.2

% grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control
Installed-Size: 18370560

From hyperscan-runetime_5.4.2-2 (created by this PR):

% ls -lh /usr/lib/libhs*
lrwxr-xr-x 1 root root   10 Feb 22 15:56 /usr/lib/libhs.so -> libhs.so.5
lrwxr-xr-x 1 root root   14 Feb 22 15:56 /usr/lib/libhs.so.5 -> libhs.so.5.4.2
-rwxr-xr-x 1 root root 4.6M Feb 22 15:27 /usr/lib/libhs.so.5.4.2
lrwxr-xr-x 1 root root   18 Feb 22 15:56 /usr/lib/libhs_runtime.so -> libhs_runtime.so.5
lrwxr-xr-x 1 root root   22 Feb 22 15:56 /usr/lib/libhs_runtime.so.5 -> libhs_runtime.so.5.4.2
-rwxr-xr-x 1 root root 1.2M Feb 22 15:27 /usr/lib/libhs_runtime.so.5.4.2

% grep Installed-Size /usr/lib/opkg/info/hyperscan-runtime.control
Installed-Size: 5918720

Credit to @efahl for pointing this out.

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2024-02-22 16:04:08 -08:00
Rosen Penev 0e7554cbf4 glib2: use internal pcre2 for host
There's some weird issue where -lpcre2 is not being passed. Fixes
vala/host which links to static libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-22 10:49:16 -08:00
Rosen Penev 6f79ac8500 libiio: fix pkgconfig paths
CMake build is passing host paths in pkgconfig file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-22 10:48:21 -08:00
Rosen Penev fa79aaad5f nghttp3: fix pkgconfig file
CMake build is passing host paths in pkgconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-22 10:47:40 -08:00
krant 7770e65c57 libffi: update to 3.4.6
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-21 21:56:07 -08:00
krant 315c4e1a10 libpng: update to 1.6.42
- Don't set default and rename renamed CMake options
- Enable NEON optimizations
- Rebase the patch

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-21 21:55:24 -08:00
Hirokazu MORIKAWA 02a982bc10 libuv: fix CVE-2024-24806
Update to 1.48.0
CVE-2024-24806 : Improper Domain Lookup that potentially leads to SSRF attacks

Vulnerabilities fixed
* CVE-2024-24806 / GHSA-f74f-cvh7-c6q6 0f2d7e7, 3530bcc and e0327e1
Notable Changes
* linux: disable io_uring on ppc64 and ppc64le #4285
* linux: disable io_uring on hppa below kernel 6.1.51 #4224
* win/spawn: optionally run executable paths with no file extension #4292 (We recommend that most users consider setting this by default)
Important Bugs Fixed
* unix,win: fix busy loop with zero timeout timers #4250, #4304.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-02-20 13:46:50 +08:00
Michael Heimpold 2953350f75
Merge pull request #23463 from mhei/fix-apr
apr/subversion: fix subversion build and apache-mod-php8 build regres…
2024-02-19 07:31:02 +01:00
Rosen Penev b111a290d8 libfmt: fix compilation with mariadb
Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-18 15:39:04 -08:00
Peter van Dijk d30a34bac1 h2o: remove, nothing depends on it anymore
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2024-02-18 15:03:07 -08:00
krant 8bcd244715 openblas: enable ARM-specific optimizations
OpenBLAS allows to specify per-family CPU optimizations during build stage.
This package supports manual specification of a family during configuration.
This commit adds automatic detection of target family, while keeping manual
override as a backup.

Automatically detected ARM families:
 - Cortex-A9 without NEON
 - Cortex-A9 with NEON
 - Cortex-A15
 - Cortex-A53
 - Cortex-A72

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-17 14:51:58 +01:00
Michael Heimpold 84ac0263b5 apr/subversion: fix subversion build and apache-mod-php8 build regression (fixes #23460)
The recent upgrade of apr included a change with should fix the subversion build.

Unfortunately, this fix resulted in a build regression of apache-mod-php8.

The new approach is to pass the locations of the apr config helpers
to configure via parameter.

Fixes: 68dd7b7cf6 ("apr: update to 1.7.4")

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-02-17 00:28:46 +01:00
Florian Eckert 56188542b6 glib2: update to version 2.74.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-02-16 12:02:11 +01:00
Florian Eckert 71b7b44789 glib2: do not set default meson options
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-02-16 12:02:11 +01:00
Florian Eckert 7b33b15032 Revert "glib2: update to 2.78.4"
So that we have a working ModemManager again and can look at the problem
revert the update to version 2.78.4 for now.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This reverts commit 08c7b0dfca.
2024-02-16 12:02:05 +01:00
Florian Eckert 445f75e3f1 Revert "glib2: use internal pcre2"
This is must also get revert to get back to working glib2 version 2.74.0

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This reverts commit 9f57ef2d6e.
2024-02-16 12:01:46 +01:00
Oskari Rauta 3d0e1e524e efivar: disable mold linker
efivar fails to build with mold linker, so it should
be opted out. I also added missing maintainer.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2024-02-16 14:00:59 +08:00
Rosen Penev 7536aebe63 zmq: update to 4.3.5
Remove GCC13 backport.

Refresh other patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:40:25 -08:00
Rosen Penev 8bdf5f94bd taglib: update to 2.0
Switched to local tarball as the utf8cpp subproject needs to be used.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:33:34 -08:00
Rosen Penev ad2c58bfec libcap-ng: update to 0.84
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:28:07 -08:00
Rosen Penev b935ee1721 hidapi: update to 0.14.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:27:56 -08:00
Rosen Penev e9c77f2d33 libnpupnp: update to 6.1.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:27:39 -08:00
Rosen Penev c6dc9227fe libxerces-c: update to 3.2.5
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:23:29 -08:00
Rosen Penev 440a86ee7d libupnp: update to 1.14.18
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:23:11 -08:00
Rosen Penev 41cd4c388a libtins: update to 4.5
Remove upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:13:58 -08:00
Rosen Penev 819dabf439 log4cplus: update to 2.1.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:09:50 -08:00
Rosen Penev 7cb3cc7dc2 libv4l: update to 1.26.1
meson now available.

Added 2 patches to fix missing intl dependency and musl support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:06:52 -08:00
Rosen Penev bade2501e9 libmpdclient: update to 2.22
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:06:38 -08:00
Rosen Penev f8af56c555 faad2: update to 2.11.1
CMake is used now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:06:21 -08:00
Rosen Penev 4f285f85a0 libidn: update to 1.42
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:05:39 -08:00
Rosen Penev 9f57ef2d6e glib2: use internal pcre2
For some strange reason, glib2 does not link properly with a static
pcre2. Work around by bundling own copy.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-14 17:04:49 -08:00
Andreas Gnau ccb4632c57
libstrophe: Specify correct PKG_LICENSE
libstrophe is dual-licensed as MIT OR GPL-3.0-only, which is also
reflected by the SPDX-License-Identifier lines in the source files.
Correct PKG_LICENSE in the Makefile accordingly.

Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
2024-02-14 18:39:54 +01:00
Rosen Penev 3085a842c2 redis: update to 6.2.14
Fixes CVE-2022-24735 and CVE-2022-24736

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-12 13:51:21 -08:00
krant 9752d27737 libusb-compat: update to 0.1.8
- Update package URL

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-02-12 06:53:34 -08:00
Rosen Penev fa69fdc2b0 zlog: update to 1.2.17
Rework to use local tarballs. Smaller and more stable.

Build with cmake. Faster and simpler. Needs a small patch though.

License was updated.

Fixes CVE-2021-43521

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-11 17:14:23 -08:00
Rosen Penev 45897d0174 libmicrohttpd: update to 0.9.77
Fixes CVE-2023-27371

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-11 17:14:10 -08:00
Rosen Penev d4e7f5c731 libao: backport fix for CVE-2017-11548
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-11 17:13:57 -08:00
Rosen Penev c9ff829fdb yajl: backport CVE-2023-33460 fix
Removed old uclibc patches. Not relevant with modern musl or glibc.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-11 17:13:46 -08:00
Rosen Penev 58dfc350a8 postgesql: update to 15.6
Fixes CVE-2023-39417 and CVE-2023-39418

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-12 00:17:23 +00:00
Rosen Penev 7e4135cfd6 confuse: fix CVE-2022-40320
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-10 22:13:08 -08:00
Rosen Penev 9c35e63608 giflib: fix CVEs
Patches taken from Fedora

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-10 18:35:25 -08:00
Rosen Penev 1974a441d5 avahi: backport CVE fixes from upstream
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-10 18:34:55 -08:00
Rosen Penev 7f7cc4bbb0 libvpx: update to 1.14.0
Fixes CVE-2023-5217

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-02-10 18:34:39 -08:00