Commit Graph

3564 Commits

Author SHA1 Message Date
Alexandru Ardelean c8644bd19a
Merge pull request #17142 from commodo/python-yaml
python-yaml: bump to version 6.0
2021-11-22 10:29:24 +02:00
Alexandru Ardelean 40ca2f6dd6
Merge pull request #17121 from commodo/python3-bump
python3: bump to version 3.10.0
2021-11-22 10:28:29 +02:00
Alexandru Ardelean 1024d42ac6 python-yaml: bump to version 6.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-21 10:00:28 +02:00
Michael Heimpold 900dcf36f9
Merge pull request #17167 from mhei/php8-update
php8: update to 8.0.13
2021-11-20 23:27:57 +01:00
Michael Heimpold 2e9c1a00ea php8: update to 8.0.13
This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-20 13:53:45 +01:00
Michael Heimpold c6f27671a3 php7: update to 7.4.26
This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-20 13:52:11 +01:00
Alexandru Ardelean 4e05541782 python3: bump to version 3.10.0
Manually re-applied:
  008-distutils-use-python-sysroot.patch
  016-adjust-config-paths.patch

Drop patch: 003-do-not-run-distutils-tests.patch
There is now a configure option '--disable-test-modules'
And seems we left the '_ctypes_test' around for quite some time.
Dropped now.
Refs:
  https://bugs.python.org/issue27640
  https://bugs.python.org/issue43282

Drop patch: 013-getbuildinfo-date-time-source-date-epoch.patch
Python build honors SOURCE_DATE_EPOCH pretty well now.

Drop setuptools patches. Setuptools should be reproducible with Python 3.6+
according to a mention here:
  https://github.com/pypa/setuptools/pull/1690#issuecomment-536517456
It's time to let upstream fix Setuptools reproduce-ability.

Drop patch: 010-do-not-add-rt-lib-dirs-when-cross-compiling.patch
I can't seem to fully remember why it's there.
And it seem to build fine without it.

Drop patch: 015-abort-on-failed-modules.patch
Python build supports a similar PYTHONSTRICTEXTENSIONBUILD=1 env-var
option.

Add patch: 026-openssl-feature-flags.patch
We need to keep this in our tree for a while.
See:
  https://bugs.python.org/issue45627

Backport patch: 027-bpo-43158-Use-configure-values-for-building-_uuid-ex.patch
Link: https://github.com/python/cpython/pull/29353
Fixes the build for uuid C module.

Add patch: 028-host-python-support-ssl-with-libressl.patch
We need the _ssl module working on the host-side with LibreSSL for pip to
work to download from https://pypi.org
Refs: https://github.com/openwrt/openwrt/pull/4749

Add patch: 029-disable-deprecation-warning.patch
Fixes apparmor build. The warning causes a configure error.

Refreshed the rest of patches.

Some old build-flags were removed. They don't seem to be necessary anymore.

Split python3-uuid from python3-light. To better manage the libuuid library
(if needed). Also, fixing the uuid C module build. Seems this was failing,
and was falling back to using hashlib.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-19 13:30:14 +02:00
Alexandru Ardelean b3237baf63
Merge pull request #17151 from jefferyto/golang-1.17.3
golang: Update to 1.17.3
2021-11-19 10:28:28 +02:00
Alexandru Ardelean 7cead5b8e6
Merge pull request #17143 from commodo/py-greenlet
python-greenlet: bump to version 1.1.2
2021-11-19 10:27:14 +02:00
Jeffery To 901f80aae7
golang: Update to 1.17.3
Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-11-19 03:40:17 +08:00
Alexandru Ardelean 35910b2673
Merge pull request #17123 from commodo/python-updates1
python-lxml,django,numpy: bump versions
2021-11-17 15:35:22 +02:00
Alexandru Ardelean 571e6af347 ruamel-yaml: bump to version 0.17.17
The older one won't build with Python 3.10.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-17 14:15:10 +02:00
Alexandru Ardelean b1009ff543 python-greenlet: bump to version 1.1.2
The older version won't build with Python 3.10.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-17 10:55:17 +02:00
Daniel Golle e020b6347a
Flask: update to version 2.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 02:16:20 +00:00
Daniel Golle e971718892
Werkzeug: update to version 2.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 02:16:14 +00:00
Daniel Golle 7c3d48497f
Jinja2: update to version 3.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 02:16:08 +00:00
Daniel Golle 6ea6c94a48
click: update to version 8.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 02:16:00 +00:00
Michael Heimpold 89f015ee63
Merge pull request #17119 from thg2k/pr/master_php80_ini_1
php8: Clean up and update distributed php.ini for php 8.0.12
2021-11-14 08:48:19 +01:00
Alexandru Ardelean 5ae76d9d60 django: bump to version 3.2.9
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-14 09:26:33 +02:00
Alexandru Ardelean d8b38b1102 numpy: bump to version 1.21.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-14 09:24:39 +02:00
Alexandru Ardelean 7d1c3560d8 python-lxml: bump to 4.6.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-14 09:23:07 +02:00
Alexandru Ardelean 84adeaaed3
Merge pull request #17108 from commodo/ovs-no-python-six
ovs,ovn: remove python-six dep
2021-11-14 05:08:47 +02:00
Giovanni Giacobbi f54b987c8f
php8: Clean up and update distributed php.ini for php 8.0.12
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 8.0.12
- Added newly existing directives commented out
- Added '~E_DEPRECATED' to 'error_reporting'

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-11-13 21:33:55 +00:00
Giovanni Giacobbi 024ac2b040 php7: Clean up and update distributed php.ini for php 7.4.25
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 7.4.25
- Added '~E_DEPRECATED' to 'error_reporting'

Directives removed that no longer exist as of PHP 7.4.25:
- zend.ze1_compatibility_mode
- y2k_compliance
- register_globals
- register_long_arrays
- magic_quotes_gpc
- magic_quotes_runtime
- magic_quotes_sybase
- always_populate_raw_post_data

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
(cherry picked from commit 7e45ad87f3)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-12 07:48:43 +01:00
Alexandru Ardelean b84b71c149 python-six: remove host-build
There are no more users left in this tree.
So, remove it.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-11-10 14:54:44 +02:00
Michael Heimpold df692d4d07
Merge pull request #17090 from mhei/php7-pecl-redis-update
php7-pecl-redis: update to 5.3.4
2021-11-08 07:44:33 +01:00
Michael Heimpold 465d297906
Merge pull request #17089 from mhei/php7-pecl-http-update
php7-pecl-http: update to version 3.2.4
2021-11-08 07:44:18 +01:00
Michael Heimpold 755e3c2eb6 php7-pecl-imagick: update to 3.5.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-07 11:00:05 +01:00
Michael Heimpold 82f115bded php7-pecl-redis: update to 5.3.4
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-07 10:27:16 +01:00
Michael Heimpold 5fe58d0002 php7-pecl-http: update to version 3.2.4
This is the latest version, which still has support for PHP 7.x.

It's an intermediate step in the transition to PHP 8.x.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-07 10:21:16 +01:00
Michael Heimpold 614e39e846
Merge pull request #17046 from nxhack/php7_for_ICU-70_1
php7: Support for icu 70.1
2021-11-02 07:32:38 +01:00
Hirokazu MORIKAWA bc13112a7c php7: Support for icu 70.1
This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-02 09:36:12 +09:00
Hirokazu MORIKAWA 4da149b68a php8: Support for icu 70.1
This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-02 09:28:45 +09:00
Sebastian Kemper c175f8b82c php8: add mod php for apache
The module will be available, once php8 is selected, at the same place
as the other apache modules.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-10-31 22:54:15 +01:00
Peter Stadler 55c3bc14f7 nginx, python3-{asgiref,django-cors-headers,drf-nested-routers,sqlparse}: bump versions
Update to the newest versions and switch to $(AUTORELEASE) for the python3 packages (where I am the maintainer).

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-10-30 01:12:02 -07:00
Alexandru Ardelean 784f2a519b python-paho-mqtt: bump to version 1.6.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-27 20:56:05 +03:00
Alexandru Ardelean 52aadf9579 numpy: bump to version 1.21.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-27 20:56:05 +03:00
Michael Heimpold be8539156d
Merge pull request #16958 from mhei/php7-update
php7: update to 7.4.25
2021-10-23 12:54:22 +02:00
Michael Heimpold 1df333bfb0 php7: update to 7.4.25
This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-10-22 22:28:27 +02:00
Michael Heimpold fb7a33a114 php8: update to 8.0.12
This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-10-22 21:04:32 +02:00
Alexandru Ardelean 0f84091abe django: bump to version 3.2.8
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-19 13:22:25 -07:00
Alexandru Ardelean ee2a4278d9 python-cffi: bump to version 1.15.0
And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-19 13:22:25 -07:00
Alexandru Ardelean 9fe8937d54 python-idna: bump to version 3.3
And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-19 13:22:25 -07:00
Alexandru Ardelean 6063add545 pillow: bump to version 8.4.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-19 13:22:25 -07:00
Rosen Penev 5bf74f2ad4 expat: don't build host libs
tools/expat is actually what's used by the various packages that
supposedly depend on expat/host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-19 13:16:18 -07:00
Rosen Penev 575776cfa5 vala: update to 0.54.2
Remove shared libraries. Allows removing rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-19 00:32:26 -07:00
Eneas U de Queiroz d2a4fa61e2 lua-wsapi: build each variant in its own dir
This avoids unnecessary package rebuilds, when running make back to
back.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-10-15 23:02:07 -07:00
Rosen Penev 369da40c2a lua-openssl: update to 0.8.0-6
Remove upstreamed patches and backport cmake fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-15 09:13:05 -07:00
Hirokazu MORIKAWA da967b7536 node: bump to 14.18.1 / October 12th 2021 Security Releases
October 12th 2021 Security Releases:
 HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959)
 HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-10-14 16:22:53 -07:00
Eneas U de Queiroz f263ed4449 python-qrcode: bump to 7.3.1
This is a major update, which drops support for python < 3.6, among
other changes, better seen at:
https://github.com/lincolnloop/python-qrcode/blob/v7.3.1/CHANGES.rst

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-10-13 22:21:06 -07:00