Commit graph

11744 commits

Author SHA1 Message Date
Rosen Penev
683d833150
ffmpeg: Add CPE ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:19:32 -07:00
Rosen Penev
61cdf7b4d6
avahi: Add CPE ID to track CVEs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:05:41 -07:00
Peter Wagner
8f8fa47234 ntpd: update to 4.2.8p12
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-08-19 23:38:02 +02:00
Rosen Penev
8ce9f30c42 sudo: Update to 1.8.24
Changed URLs to HTTPS

Rearranged Makefile for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 14:21:33 -07:00
Philip Prindeville
8d710085da
Merge pull request #6812 from pprindeville/perl-cgi-4.40
perl-cgi: Update to 4.40
2018-08-19 14:51:36 -06:00
Philip Prindeville
c4dbc0147f perl-cgi: Update to 4.40
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2018-08-19 14:26:15 -06:00
Daniel F. Dickinson
2b7531ad9f doveco: pigeonhole: Use stock dovecot dir locations
We move dovecot libexec binaries and modules (including the package
pigeonhole) to their standard locations.  This is okay for libexec
because it was added to core prior to 17.04 release.  Moving the
binaries normally in libexec eliminates the reason the modules were in an
unusual directory, which is that there were conflicts with
libexec binaries that were in lib, which the modules normally use.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:38 -04:00
Daniel F. Dickinson
f0fb968346 dovecot: Fix managesieve-login needs libdovecot-login
When trying to use managesieve my MUA complained sieve wasn't supported.
On investigation dovecot logs the following could be seen:

    Aug 16 00:28:44 managesieve-login: Fatal: master:
      service(managesieve-login): child 1430 returned error 127
    Aug 16 00:31:32 managesieve-login: Error: Error loading shared
      library libdovecot-login.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error loading
      shared library libdovecot.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error relocating
      /usr/lib/dovecot/managesieve-login: net_ip2addr: symbol not found

The issue (verified with readelf on non-working build and build with my fix)
is that there is no RPATH information in the pigeonhole binaries (like
managesieve-login).

The dovecot-config that is 'installed' in the staging dir
assumes that plugins will be built on the same host as the installed files.
The 'installed' dovecot-config (partial) looks like:

LIBDOVECOT='-L/usr/lib/dovecot -ldovecot'
LIBDOVECOT_LOGIN='-ldovecot-login -L/home/user/Build/openwrt/openwrt-ath79/staging_dir/target-mips_24kc_musl/usr/lib -lssl -lcrypto'
LIBDOVECOT_SQL=-ldovecot-sql
LIBDOVECOT_COMPRESS=-ldovecot-compression
LIBDOVECOT_LDA=-ldovecot-lda
LIBDOVECOT_STORAGE='-ldovecot-storage '
LIBDOVECOT_DSYNC=-ldovecot-dsync
LIBDOVECOT_LIBFTS=-ldovecot-fts

The solution I used was to modify dovecot-config to add the rpath to
DOVECOT_BINARY_LDFLAGS, and to replace references to host directories
with staging_dir directories.

This results in RPATH being added as it needs to be, and results in a working
version of dovecot+pigeonhole.

NB: I've also touched package version of pigeonhole as this change in dovecot
results in (needed) binary changes for pigeonhole.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:23 -04:00
Hannu Nyman
53a912201c
Merge pull request #6539 from neheb/patch-4
bluelog: Switch to GitHub tarball
2018-08-19 20:15:39 +03:00
Hannu Nyman
d580202e38
Merge pull request #6488 from neheb/patch-2
alpine: Update to 2.21.9999
2018-08-19 20:14:34 +03:00
Jiri Slachta
e3681cb107
Merge pull request #6780 from neheb/tiff
tiff: Fix remaining CVEs
2018-08-19 19:10:32 +02:00
champtar
be234c29b4
Merge pull request #6803 from neheb/monit
monit: Update to 5.25.2
2018-08-19 10:55:06 -04:00
champtar
67bc803ed9
Merge pull request #6802 from neheb/patch-30
htop: Minor adjustments
2018-08-19 10:51:11 -04:00
Andy Walsh
7a88e515d0 rpcbind: update to 1.2.5
* update to 1.2.5
* fix wrong URL
* adapt to bin/sbin from new version

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-19 16:36:03 +02:00
Rosen Penev
18283b444b monit: Update to 5.25.2
Added PKG_BUILD_PARALLEL to speed up compilation times.

Added PKG_CPE_ID for proper CVE tracking.

A few other cosmetic changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:54:11 -07:00
Rosen Penev
c0b9f73919 htop: Minor adjustments
Added PKG_CPE_ID for proper CVE tracking.

Fixed URLs. Changed to HTTPS as well.

Removed autoreconf as there is no patching being done.

PKG_BUILD_PARALLEL was enabled for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:33:25 -07:00
Rosen Penev
6e14e47024
rsyslog: Update to 8.37.0
HTTPS to everything

Remove autoreconf as it's not needed and slows down the build.

Build in parallel for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 14:09:35 -07:00
Rosen Penev
e7aea55d56 libfastjson: Update to 0.99.8 + switch to tarball
Using the tarball allows getting rid of autoreconf and speeding up the build.
Also easier to bump the package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 14:01:36 -07:00
W. Michael Petullo
f13f51c6fe gstreamer1: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:59:05 -04:00
W. Michael Petullo
3f60075c06 dmapd: update to 0.0.76
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:47:40 -04:00
W. Michael Petullo
8f8aa698b6 gst1-plugins-ugly: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:46:26 -04:00
W. Michael Petullo
27d0fda404 gst1-plugins-good: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:45:49 -04:00
W. Michael Petullo
08bcf793af gst1-plugins-base: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:44:39 -04:00
W. Michael Petullo
bb744b032c gst1-plugins-bad: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:43:53 -04:00
W. Michael Petullo
0f62535176 gst1-libav: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:42:19 -04:00
Ted Hess
23efd1f3f1
Merge pull request #6775 from neheb/patch-27
shairport-sync: Install /etc/config as 600
2018-08-18 15:33:03 -04:00
Michael Heimpold
77d8472ed5
Merge pull request #6781 from neheb/xml2
libxml2: Fix CVE-2018-9251 and CVE-2018-14567
2018-08-18 13:13:29 +02:00
Rosen Penev
22baa9f3ed python-pyasn1: Update to 0.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 23:14:00 -07:00
Rosen Penev
0d9b5dd468 libxml2: Fix CVE-2018-9251 and CVE-2018-14567
Also added the CPE ID.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 18:46:27 -07:00
Rosen Penev
29ffbead75 tiff: Fix remaining CVEs
Taken from Fedora. Reordered them so as to apply properly.

Added a CPE ID.

Added parallel build for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 18:19:00 -07:00
Daniel Engberg
5988204db7
utils/dbus: Update to 1.12.10
Update dbus to 1.12.10
Remove Steven Barth as maintainer since he hasn't replied to numerous of
reviews requests for several packages within months.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-08-17 23:53:07 +02:00
Michael Heimpold
f8a7546537 php7-pecl-http: update to 3.2.0
Drop already upstreamed patches.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-08-17 23:18:57 +02:00
Michael Heimpold
010dc61d7b libgpiod: update to 1.1.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-08-17 23:18:57 +02:00
Rosen Penev
be07e5d2f9 protobuf-c: Update to 1.3.1
Switched to regular tarballs. Makes updating easier and avoids having to
autoreconf. Simplifies Makefile slightly.

Updated project URL. Some Makefile reorganization was done for consistency
with other packages.

Added parallel build for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 13:16:26 -07:00
Dirk Brenken
aef396dd0e
Merge pull request #6761 from neheb/patch-22
btrfs-progs: Update to 4.17.1
2018-08-17 18:26:20 +02:00
Dirk Brenken
1ddb7746bb
Merge pull request #6673 from neheb/patch-21
scapy: Update to 2.4.0 and change URLs to new
2018-08-17 16:37:30 +02:00
Dirk Brenken
5a31cbf7c5
Merge pull request #6763 from neheb/patch-24
geth: Update to 1.8.13
2018-08-17 14:33:08 +02:00
Dirk Brenken
f1e866a2da
Merge pull request #6774 from EricLuehrsen/unbound_20180815
unbound: drop odhcpd leases with wrong field count
2018-08-17 14:28:44 +02:00
Hannu Nyman
dbb8bbc919
Merge pull request #6659 from cshoredaniel/pr-update-gitolite3
Updates for gitolite package
2018-08-17 11:37:57 +03:00
Rosen Penev
8547ce444d
shairport-sync: Install /etc/config as 600
/etc/config should not be readable by non-root.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-16 21:02:38 -07:00
Eric Luehrsen
59617f076d unbound: drop odhcpd leases with wrong field count
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-08-16 22:46:49 -04:00
Daniel Engberg
faff71c576
net/stunnel: Update to 5.48
Update stunnel to 5.48

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-08-16 23:09:47 +02:00
Hannu Nyman
38ced675aa
Merge pull request #6729 from neheb/patch-28
grep: Update to 3.1
2018-08-16 17:33:16 +03:00
Hannu Nyman
e972aca8e5
Merge pull request #6755 from Andy2244/samba4-update
samba4: update to 4.8.4
2018-08-16 17:30:20 +03:00
Jo-Philipp Wich
d2014c75b7
Merge pull request #6698 from dedeckeh/pr-xtables-addons-rtsp
Pr xtables addons rtsp
2018-08-16 15:57:49 +02:00
Jo-Philipp Wich
65d9b3f92b
Merge pull request #6562 from KarlVogel/host_sanitize
ddns-scripts: sanitize host charset and shell escape characters
2018-08-16 15:44:28 +02:00
Peter Wagner
a87f450c67 rpcbind: disable libwrap explicitly if it's not enabled to avoid linking against it
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-08-16 11:51:14 +02:00
Rosen Penev
2e7bdcd618
geth: Update to 1.8.13
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-15 19:21:36 -07:00
Rosen Penev
e62e2ddd9a
btrfs-progs: Update to 4.17.1
Cosmetic adjustments

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-15 18:47:47 -07:00
Rosen Penev
2192c572a3 shadow: Update to 4.6
Switched dead URLs to new upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-15 18:31:34 -07:00