Commit graph

4026 commits

Author SHA1 Message Date
Michal Vasilek
07a36f7881 postgresql: security update to 13.7
* fixes CVE-2022-1552
* refresh a patch

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-14 21:34:19 -07:00
Tianling Shen
afd4a7beff libtorrent-rasterbar: Update to 2.0.6
Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b154)
2022-04-30 11:23:27 -07:00
Rosen Penev
b65afe72b1 libtorrent-rasterbar: update to 2.0.5
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 637ecf8c6a)
2022-04-30 11:23:27 -07:00
Rosen Penev
e15215463e libtorrent-rasterbar: update to 2.0.4
Backport patch fixing compilation with boost 1.77

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 19fcff0910)
2022-04-30 11:23:27 -07:00
Rosen Penev
77a328df70 libtorrent-rasterbar: update to 1.0.2
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fe4fe7d6e)
2022-04-30 11:23:27 -07:00
Damiano Renfer
a62591148b
libsodium: update maintainer email address
Signed-off-by: Damiano Renfer <x9w2n7xnu@relay.firefox.com>
(cherry picked from commit 7c529bab91)
2022-03-26 21:31:41 +00:00
Daniel Golle
4f7fcd9279
libsodium: include ed25519_core in minimal build
Functions from ed25519_core are needed for GNUnet to build.
Include them in the minimal build of libsodium so we don't need to
switch to the full build just for that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3da874371b)
2022-03-26 21:31:32 +00:00
Rosen Penev
919dd80130
libnetfilter-log: update to 1.0.2
Remove all patches as they have been upstreamed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 28c1c0d24c)
2022-03-17 23:29:36 +01:00
Michael Heimpold
8e9f102235 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 81fd836f97)
2022-03-17 08:06:45 +01:00
Rosen Penev
e9dee2684b minizip: update to 3.0.2
Add back compat header as domoticz really wants it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 953e23b0e6)
2022-02-24 00:26:13 -08:00
Rosen Penev
697115688f minizip: update to 3.0.1
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ac671880d)
2022-02-24 00:26:13 -08:00
Rosen Penev
adc6fcc88c minizip: update to 3.0.0
Switch to new upstream and switch package name.

Further disable features to avoid extra dependencies.

Build with PIC to avoid build failures with mips16.

Remove no longer needed patch. Upstream fixed it differently.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3b812f93d6)
2022-02-24 00:26:13 -08:00
Michal Vasilek
584c0c4378 expat: import patches for CVEs
* import patches for CVEs from alpine 3.13

CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-23852, CVE-2022-23990
CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-02-23 17:00:09 -08:00
Michal Hrusecky
a5de4042c1
pcapplusplus: Add new package
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and
crafting of network packets. It is designed to be efficient, powerful
and easy to use. It provides C++ wrappers for the most popular packet
processing engines such as libpcap, WinPcap, DPDK and PF_RING.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2d8e396be3)
2022-02-19 11:34:59 +01:00
Rafał Miłecki
4e8267602b dtc: drop package
It has been imported as core package into OpenWrt repository. Its fdtget
is required by sysupgrade on U-Boot devices so it couldn't live in an
extra feed.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c8d4c89daa)
2022-02-10 23:23:21 +01:00
Jonathan G. Underwood
33d6705d2f
getdns: remove maintainer
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
(cherry picked from commit 4a241581ab)
2022-01-07 00:40:32 +01:00
Rui Salvaterra
b1dfbf975b
getdns: bump to 1.7.0
Remove obsolete patches.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0261cd0972)
2022-01-07 00:40:26 +01:00
Alexandru Ardelean
4308764d8a
seafile: remove myself as maintainer of these packages
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1e27dd7f8f)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-12-20 17:59:02 +08:00
Florian Eckert
e7e91ca071 libqmi: fix missing CONFIG_ prefix
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 43a0f68940)
2021-12-15 12:18:08 +01:00
Eric Luehrsen
7164762fd9 ldns: update to 1.8.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 7594e8581a)
2021-12-12 19:30:55 +01:00
Eneas U de Queiroz
149c3014f7
gnutls: don't run aclocal --install
Remove the --install parameter when running aclocal.  The --install
argument is used to copy third-party files to the first -I directory.
gnutls has -I m4 first, which would copy files to its local build
directory.  However, openwrt prepends the staging dir m4 directory,
causing aclocal --install to copy an old definition of
ax_code_coverage.m4 into the staging dir.

If strace is built after gnutls, compilation will fail:

    Makefile:9303: *** missing separator.  Stop.

The version of ax_code_coverage.m4 that gets installed does not define
@CODE_COVERAGE_RULES@.

Removing the --install parameter in gnutls solves the issue.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 206eaae165)
2021-12-07 22:58:38 +01:00
Michal Hrusecky
fb4c9e5c48
mariadb-common: Drop package and adjust configuration
The raison d'être of package mariadb-common was to provide common my.cnf
config file that was being used to include subdirectories and then to
push utf-8 as default everywhere. Let's make this file part of the
server package as there we actually set other options as well and drop
it from all clients. Instead let's set utf-8 as default in server,
client and client libraries. While at it also set socket to the more
common path and drop mysqld_safe script from the list of configuration
files and do other minor tweaks.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit d8ecded02d)
2021-12-03 14:29:02 +01:00
Hirokazu MORIKAWA
ff5728497f icu: bump to 70.1
ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.

This change will require minor modifications in php7 and php8.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-29 01:42:17 -08:00
Daniel Golle
b30fc0a677
gpgme: update to version 1.16.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e0e5dea89e)
2021-11-15 20:05:17 +00:00
Daniel Golle
2d027dc824
libinput: update to version 1.19.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23ac7563c2)
2021-11-15 20:03:30 +00:00
Daniel Golle
0972feac51
libinput: update to version 1.19.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e852f509cf)
2021-11-15 20:03:25 +00:00
Daniel Golle
975bb6f486
libinput: package libinput cli applets and quriks
Also package /usr/libexec/libinput/* and /usr/share/lib/input/*.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f53cd4232a)
2021-11-15 20:03:21 +00:00
Daniel Golle
cd42b74ac8
libinput: update to version 1.18.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 112e5628f4)
2021-11-15 20:03:16 +00:00
Daniel Golle
4042c299bd
libinput: update to version 1.17.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81ccb88a80)
2021-11-15 20:03:11 +00:00
Daniel Golle
2e5a72bf50
libevdev: update to version 1.12.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 60bc9982b4)
2021-11-15 20:03:07 +00:00
Daniel Golle
d337bce97f
libextractor: update to version 1.11
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 42707fc1ee)
2021-11-15 20:03:02 +00:00
Daniel Golle
9fde4ba670
libksba: update to version 1.6.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0876a981c2)
2021-11-15 20:01:52 +00:00
Daniel Golle
1322801587
libksba: update to version 1.5.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1c7ef6c666)
2021-11-15 20:01:46 +00:00
Daniel Golle
821bcc603e
libassuan: update to version 2.5.5
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1f50a9e417)
2021-11-15 20:01:41 +00:00
W. Michael Petullo
2260a2227f
libgpg-error: patch to fix cross-compile
Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit 33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 71b7f74ff1)
2021-11-15 20:01:35 +00:00
W. Michael Petullo
8c8e574884
libgpg-error: update to 1.42
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c664e1f207)
2021-11-15 20:01:28 +00:00
Daniel Golle
698f54b328
hiredis: update to version 1.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c15172f7f7)
2021-11-15 20:01:18 +00:00
Rosen Penev
543c0969d1
hiredis: fix compilation with macOS
uname is used to test the host OS. Override it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ce3a961d3)
2021-11-15 20:01:08 +00:00
Daniel Golle
717f494ca7
postgresql: update to version 13.5
Addresses CVE-2021-3393 and CVE-2021-20229.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 20:00:02 +00:00
Daniel Golle
ec01d0c395
libudev-zero: update to version 1.0.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 36b9ff3c83)
2021-11-15 19:59:33 +00:00
Daniel Golle
beffb3c3ff
libudev-zero: update to version 0.5.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 50bb46baaa)
2021-11-15 19:59:27 +00:00
Daniel Golle
3d417377b3
libudev-zero: update to version 0.4.8
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7341e39768)
2021-11-15 19:59:20 +00:00
Michal Vasilek
44838c21e4
cyrus-sasl: patch CVE-2019-19906
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit f7717bd382)
2021-11-13 16:09:28 +01:00
Jan Pavlinec
bc785e584d
redis: update to version 6.2.6
Fixes:
- CVE-2021-41099
- CVE-2021-32762
- CVE-2021-32687
- CVE-2021-32675
- CVE-2021-32672
- CVE-2021-32628
- CVE-2021-32627
- CVE-2021-32626

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 766a5b285e)
2021-10-26 11:06:33 +02:00
Jan Pavlinec
edadea28c6
redis: update to version 6.2.5
Fixes CVE-2021-32761

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3cc8a1f37e)
2021-10-26 11:06:28 +02:00
Jan Pavlinec
86ce4cee0e
redis: update to version 6.2.4
Fixes CVE-2021-32625

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c7ffa391f1)
2021-10-26 11:06:22 +02:00
Jan Pavlinec
0412c3f0eb
redis: update to version 6.2.3
Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5f47bec5e8)
2021-10-26 11:06:18 +02:00
Jan Pavlinec
f5464f16d9
redis: update to version 6.2.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5894ca38b2)
2021-10-26 11:06:04 +02:00
Jan Pavlinec
cdd2b4668d
redis: update to version 6.2.1
Changes:
-remove zmalloc patch which is part of release

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d4ead62706)
2021-10-26 11:06:00 +02:00
Jan Pavlinec
a92f8ea070
redis: update to version 6.2.0
Fixes CVE-2021-21309

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e0962e8f4)
2021-10-26 11:05:56 +02:00