Commit Graph

4027 Commits

Author SHA1 Message Date
W. Michael Petullo 3970ec5f9f openldap: update to 2.4.58
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f200ccd6fc)

* remove a dead mirror
* use https
* fixes CVE-2021-27212

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-20 12:10:42 -07:00
Michal Vasilek 07a36f7881 postgresql: security update to 13.7
* fixes CVE-2022-1552
* refresh a patch

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-14 21:34:19 -07:00
Tianling Shen afd4a7beff libtorrent-rasterbar: Update to 2.0.6
Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b154)
2022-04-30 11:23:27 -07:00
Rosen Penev b65afe72b1 libtorrent-rasterbar: update to 2.0.5
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 637ecf8c6a)
2022-04-30 11:23:27 -07:00
Rosen Penev e15215463e libtorrent-rasterbar: update to 2.0.4
Backport patch fixing compilation with boost 1.77

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 19fcff0910)
2022-04-30 11:23:27 -07:00
Rosen Penev 77a328df70 libtorrent-rasterbar: update to 1.0.2
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fe4fe7d6e)
2022-04-30 11:23:27 -07:00
Damiano Renfer a62591148b
libsodium: update maintainer email address
Signed-off-by: Damiano Renfer <x9w2n7xnu@relay.firefox.com>
(cherry picked from commit 7c529bab91)
2022-03-26 21:31:41 +00:00
Daniel Golle 4f7fcd9279
libsodium: include ed25519_core in minimal build
Functions from ed25519_core are needed for GNUnet to build.
Include them in the minimal build of libsodium so we don't need to
switch to the full build just for that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3da874371b)
2022-03-26 21:31:32 +00:00
Rosen Penev 919dd80130
libnetfilter-log: update to 1.0.2
Remove all patches as they have been upstreamed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 28c1c0d24c)
2022-03-17 23:29:36 +01:00
Michael Heimpold 8e9f102235 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 81fd836f97)
2022-03-17 08:06:45 +01:00
Rosen Penev e9dee2684b minizip: update to 3.0.2
Add back compat header as domoticz really wants it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 953e23b0e6)
2022-02-24 00:26:13 -08:00
Rosen Penev 697115688f minizip: update to 3.0.1
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ac671880d)
2022-02-24 00:26:13 -08:00
Rosen Penev adc6fcc88c minizip: update to 3.0.0
Switch to new upstream and switch package name.

Further disable features to avoid extra dependencies.

Build with PIC to avoid build failures with mips16.

Remove no longer needed patch. Upstream fixed it differently.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3b812f93d6)
2022-02-24 00:26:13 -08:00
Michal Vasilek 584c0c4378 expat: import patches for CVEs
* import patches for CVEs from alpine 3.13

CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-23852, CVE-2022-23990
CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-02-23 17:00:09 -08:00
Michal Hrusecky a5de4042c1
pcapplusplus: Add new package
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and
crafting of network packets. It is designed to be efficient, powerful
and easy to use. It provides C++ wrappers for the most popular packet
processing engines such as libpcap, WinPcap, DPDK and PF_RING.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2d8e396be3)
2022-02-19 11:34:59 +01:00
Rafał Miłecki 4e8267602b dtc: drop package
It has been imported as core package into OpenWrt repository. Its fdtget
is required by sysupgrade on U-Boot devices so it couldn't live in an
extra feed.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c8d4c89daa)
2022-02-10 23:23:21 +01:00
Jonathan G. Underwood 33d6705d2f
getdns: remove maintainer
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
(cherry picked from commit 4a241581ab)
2022-01-07 00:40:32 +01:00
Rui Salvaterra b1dfbf975b
getdns: bump to 1.7.0
Remove obsolete patches.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0261cd0972)
2022-01-07 00:40:26 +01:00
Alexandru Ardelean 4308764d8a
seafile: remove myself as maintainer of these packages
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1e27dd7f8f)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-12-20 17:59:02 +08:00
Florian Eckert e7e91ca071 libqmi: fix missing CONFIG_ prefix
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 43a0f68940)
2021-12-15 12:18:08 +01:00
Eric Luehrsen 7164762fd9 ldns: update to 1.8.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 7594e8581a)
2021-12-12 19:30:55 +01:00
Eneas U de Queiroz 149c3014f7
gnutls: don't run aclocal --install
Remove the --install parameter when running aclocal.  The --install
argument is used to copy third-party files to the first -I directory.
gnutls has -I m4 first, which would copy files to its local build
directory.  However, openwrt prepends the staging dir m4 directory,
causing aclocal --install to copy an old definition of
ax_code_coverage.m4 into the staging dir.

If strace is built after gnutls, compilation will fail:

    Makefile:9303: *** missing separator.  Stop.

The version of ax_code_coverage.m4 that gets installed does not define
@CODE_COVERAGE_RULES@.

Removing the --install parameter in gnutls solves the issue.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 206eaae165)
2021-12-07 22:58:38 +01:00
Michal Hrusecky fb4c9e5c48
mariadb-common: Drop package and adjust configuration
The raison d'être of package mariadb-common was to provide common my.cnf
config file that was being used to include subdirectories and then to
push utf-8 as default everywhere. Let's make this file part of the
server package as there we actually set other options as well and drop
it from all clients. Instead let's set utf-8 as default in server,
client and client libraries. While at it also set socket to the more
common path and drop mysqld_safe script from the list of configuration
files and do other minor tweaks.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit d8ecded02d)
2021-12-03 14:29:02 +01:00
Hirokazu MORIKAWA ff5728497f icu: bump to 70.1
ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.

This change will require minor modifications in php7 and php8.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-29 01:42:17 -08:00
Daniel Golle b30fc0a677
gpgme: update to version 1.16.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e0e5dea89e)
2021-11-15 20:05:17 +00:00
Daniel Golle 2d027dc824
libinput: update to version 1.19.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23ac7563c2)
2021-11-15 20:03:30 +00:00
Daniel Golle 0972feac51
libinput: update to version 1.19.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e852f509cf)
2021-11-15 20:03:25 +00:00
Daniel Golle 975bb6f486
libinput: package libinput cli applets and quriks
Also package /usr/libexec/libinput/* and /usr/share/lib/input/*.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f53cd4232a)
2021-11-15 20:03:21 +00:00
Daniel Golle cd42b74ac8
libinput: update to version 1.18.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 112e5628f4)
2021-11-15 20:03:16 +00:00
Daniel Golle 4042c299bd
libinput: update to version 1.17.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81ccb88a80)
2021-11-15 20:03:11 +00:00
Daniel Golle 2e5a72bf50
libevdev: update to version 1.12.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 60bc9982b4)
2021-11-15 20:03:07 +00:00
Daniel Golle d337bce97f
libextractor: update to version 1.11
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 42707fc1ee)
2021-11-15 20:03:02 +00:00
Daniel Golle 9fde4ba670
libksba: update to version 1.6.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0876a981c2)
2021-11-15 20:01:52 +00:00
Daniel Golle 1322801587
libksba: update to version 1.5.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1c7ef6c666)
2021-11-15 20:01:46 +00:00
Daniel Golle 821bcc603e
libassuan: update to version 2.5.5
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1f50a9e417)
2021-11-15 20:01:41 +00:00
W. Michael Petullo 2260a2227f
libgpg-error: patch to fix cross-compile
Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit 33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 71b7f74ff1)
2021-11-15 20:01:35 +00:00
W. Michael Petullo 8c8e574884
libgpg-error: update to 1.42
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c664e1f207)
2021-11-15 20:01:28 +00:00
Daniel Golle 698f54b328
hiredis: update to version 1.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c15172f7f7)
2021-11-15 20:01:18 +00:00
Rosen Penev 543c0969d1
hiredis: fix compilation with macOS
uname is used to test the host OS. Override it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ce3a961d3)
2021-11-15 20:01:08 +00:00
Daniel Golle 717f494ca7
postgresql: update to version 13.5
Addresses CVE-2021-3393 and CVE-2021-20229.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 20:00:02 +00:00
Daniel Golle ec01d0c395
libudev-zero: update to version 1.0.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 36b9ff3c83)
2021-11-15 19:59:33 +00:00
Daniel Golle beffb3c3ff
libudev-zero: update to version 0.5.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 50bb46baaa)
2021-11-15 19:59:27 +00:00
Daniel Golle 3d417377b3
libudev-zero: update to version 0.4.8
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7341e39768)
2021-11-15 19:59:20 +00:00
Michal Vasilek 44838c21e4
cyrus-sasl: patch CVE-2019-19906
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit f7717bd382)
2021-11-13 16:09:28 +01:00
Jan Pavlinec bc785e584d
redis: update to version 6.2.6
Fixes:
- CVE-2021-41099
- CVE-2021-32762
- CVE-2021-32687
- CVE-2021-32675
- CVE-2021-32672
- CVE-2021-32628
- CVE-2021-32627
- CVE-2021-32626

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 766a5b285e)
2021-10-26 11:06:33 +02:00
Jan Pavlinec edadea28c6
redis: update to version 6.2.5
Fixes CVE-2021-32761

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3cc8a1f37e)
2021-10-26 11:06:28 +02:00
Jan Pavlinec 86ce4cee0e
redis: update to version 6.2.4
Fixes CVE-2021-32625

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c7ffa391f1)
2021-10-26 11:06:22 +02:00
Jan Pavlinec 0412c3f0eb
redis: update to version 6.2.3
Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5f47bec5e8)
2021-10-26 11:06:18 +02:00
Jan Pavlinec f5464f16d9
redis: update to version 6.2.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5894ca38b2)
2021-10-26 11:06:04 +02:00
Jan Pavlinec cdd2b4668d
redis: update to version 6.2.1
Changes:
-remove zmalloc patch which is part of release

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d4ead62706)
2021-10-26 11:06:00 +02:00