Commit graph

8902 commits

Author SHA1 Message Date
Peter Wagner
11af80ebe1 wget: update to 1.19.2
Fixes: CVE-2017-13089, CVE-2017-13090

switch to gz as there is no xz tarball for 1.19.2

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 19:39:08 +01:00
Matthias Schiffer
dfd652ff3b
jool: fix PKG_BUILD_DIR to avoid kernel ABI mismatch
As jool builds a kernel module, a PKG_BUILD_DIR under KERNEL_BUILD_DIR must
be used to avoid reusing build artifacts when switching to a different
target of the same architecture. Otherwise, kernel ABI mismatches may
result, leading to an unusuable module, or build failures like the
following:

    Package kmod-jool is missing dependencies for the following libraries:
    crypto_hash.ko

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2017-10-29 18:36:59 +01:00
Peter Wagner
90a74ed428 irssi: fix typo
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 17:07:24 +01:00
Peter Wagner
dfb51561ef irssi: update to 1.0.5
Fixes the following CVEs:

CVE-2017-15227
  https://nvd.nist.gov/vuln/detail/CVE-2017-15227

CVE-2017-15228
  https://nvd.nist.gov/vuln/detail/CVE-2017-15228

CVE-2017-15721
  https://nvd.nist.gov/vuln/detail/CVE-2017-15721

CVE-2017-15722
  https://nvd.nist.gov/vuln/detail/CVE-2017-15722

CVE-2017-15723
  https://nvd.nist.gov/vuln/detail/CVE-2017-15723

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 17:04:22 +01:00
Peter Wagner
7651605329 glib2: update to 2.54.2
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-29 16:24:52 +01:00
Ted Hess
d28321bf29
Merge pull request #5035 from diizzyy/patch-101
libs/faad2: Update to 2.8.6
2017-10-29 09:03:32 -04:00
Daniel Engberg
fb98124db3
libs/faad2: Update to 2.8.6
Update faad2 to 2.8.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-10-29 09:11:39 +01:00
Hannu Nyman
04d2768825
Merge pull request #5034 from kissg1988/pypkgupdate
Update several python packages
2017-10-29 10:07:13 +02:00
Gergely Kiss
fdb8267c2d openpyxl: update to 2.5.0b1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:28:12 +01:00
Gergely Kiss
8a54d94325 django-constance: update to 2.0.0
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:24:43 +01:00
Gergely Kiss
430dce852a django-restframework: update to 3.7.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:21:42 +01:00
Gergely Kiss
e8dac18034 python-urllib3: update to 1.22
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:17:18 +01:00
Gergely Kiss
bc1b9fa0e3 django-compressor: update to 2.2
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:13:03 +01:00
Gergely Kiss
467582f7d9 django-picklefield: update to 1.0.0
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:09:55 +01:00
Gergely Kiss
2c9a1f9b4e gunicorn: update to 19.7.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:07:20 +01:00
Gergely Kiss
68f0085fe2 jdcal: update to 1.3
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:04:19 +01:00
Gergely Kiss
e3a971558a chardet: update to 3.0.4
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 07:00:58 +01:00
Gergely Kiss
90173afbbb pytz: update to 2017.2
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:56:07 +01:00
Gergely Kiss
e6010224b5 simplejson: update to 3.11.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:52:08 +01:00
Gergely Kiss
23fc92b308 django-postoffice: update to 3.0.3
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:47:27 +01:00
Gergely Kiss
0bcfa490ef python-dateutil: update to 2.6.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:43:47 +01:00
Gergely Kiss
1ae1024041 django-statici18n: update to 1.4.0
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2017-10-29 06:36:29 +01:00
Philip Prindeville
72cb164486
Merge pull request #5026 from pprindeville/perl-dot-exclude-breakage
perl: modules failing due to dot not in @INC
2017-10-28 00:16:35 +01:00
Philip Prindeville
c79911b66d perl: modules failing due to dot not in @INC
5.26.1 introduced default_inc_excludes_dot which is causing
perl-html-tags and possibly other modules to fail.  Add explict
dot back when invoking module's ./Makefile.PL.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-10-27 15:43:14 -06:00
Hannu Nyman
80c3c0bd2f
Merge pull request #5011 from Borromini/mii-tool
mii-tool: fix kernel 4.9 compatibility
2017-10-27 22:27:51 +03:00
Stijn Segers
8b829cdbc1 net/mii-tool: fix kernel 4.9 compatibility
Signed-off-by: Stijn Segers <francesco.borromini@inventati.org>
2017-10-27 20:16:53 +02:00
Hannu Nyman
0f1e755ec2 Merge pull request #4996 from f00fc7c9/dynv6
ddns-scripts: fix dynv6.com "unchanged" response
2017-10-27 16:28:59 +03:00
Hannu Nyman
a072a746f3 Merge pull request #5009 from commodo/squashsfs-tools-update
squashfs-tools: pull newer version from git repo
2017-10-27 11:44:25 +03:00
Alexandru Ardelean
401b376b75 squashfs-tools: pull newer version from git repo
squashfs-tools does not provide tar-balls.
It looks like a good time to pull a newer version
that obsoletes a few accepted patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-10-27 09:55:23 +03:00
Peter Wagner
314aad053b git: update to 2.14.3
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-10-27 00:12:31 +02:00
Hannu Nyman
9ad97d7585 Merge pull request #5016 from tru7/0.0.1.34
linknx: bump to version 0.0.1.34
2017-10-26 18:28:12 +03:00
Nuno Goncalves
4e82a56ccd tcsh: fix out of memory crash
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-10-26 14:40:52 +02:00
Philip Prindeville
aacfbb244a Merge pull request #4956 from pprindeville/perl-update-5.26.1
perl: update to 5.26.1
2017-10-26 01:28:49 +01:00
Othmar Truniger
3c668250f9 linknx: bump to version 0.0.1.34
Signed-off-by: Othmar Truniger <github@truniger.ch>
2017-10-25 20:26:27 +02:00
Hannu Nyman
5e6b44559e Merge pull request #5008 from commodo/ovs-upgrade-2.8.1
openvswitch: upgrade to 2.8.1 ; package more stuff from the OVS build
2017-10-25 20:02:02 +03:00
Hannu Nyman
381055b2d9 Merge pull request #5013 from lucize/doveup
dovecot: update to 2.2.33.2
2017-10-25 20:00:14 +03:00
Hannu Nyman
bc4671ac5b Merge pull request #5000 from kissg1988/seafile
seafile: upgrade to 6.2.2
2017-10-25 19:59:35 +03:00
Hannu Nyman
07fe7c1d77 Merge pull request #5014 from marcin1j/pr/20171025-nbd-fix-gnutls-dependecy
nbd: fix gnutls dependency
2017-10-25 19:57:56 +03:00
Marcin Jurkowski
f3bf7eb125 nbd: fix gnutls dependency
Get rid of gnutls dependency introduced in 5bca84b. Needs patching
configure script to make gnutls existence test optional.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2017-10-25 16:52:28 +02:00
Lucian Cristian
134164a8a7 dovecot: update to 2.2.33.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-10-25 16:28:40 +03:00
Karl Palsson
c97d4999f8 libwebsockets: Upgrade to 2.4.0 and drop wolfssl for mbedtls
Libwebsockets 2.4.0 now includes mbedtls as a first class citizen.
Drop the problematic and poorly supported wolf/cyassl variant and add
mbedtls variant instead.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-10-25 10:53:25 +00:00
Philip Prindeville
4a94479f96 perl: update to 5.26.1
Required changes:

* Add qualifying '.' to scripts or to @INC, as appropriate since we're
  enabling default_inc_excludes_dot;

* Add new platform/library definitions like double-double format and
  locale library functions/headers;

* Delete patch 020 as it's been upstreamed;

Optional changes:

* Instead of using -@rm and having that fail, emit an error message,
  and be ignored, just use @rm -f instead which will always succeed.

Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler

Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]

[CVE-2017-12883] Buffer over-read in regular expression parser

For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]

[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows

A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-10-24 11:40:34 -06:00
Hannu Nyman
b1dc90e41d Merge pull request #5010 from Wedmer/master
[utils/zoneinfo] Updated to the latest release
2017-10-24 20:19:28 +03:00
Vladimir Ulrich
5db8bd9136 zoneinfo: Updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
2017-10-24 18:43:19 +03:00
Alexandru Ardelean
1a53301cd1 openvswitch: upgrade to 2.8.1 ; package more stuff from the OVS build
I should have packaged the OVN stuff, VTEP and what-not
earlier, but was not inspired to do this earlier.

I made some time now to package those parts.

Disabling flake8 & python3 explicitly.
They might get detected and cause weird build errors.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-10-24 14:57:12 +03:00
Hirokazu MORIKAWA
f90bba4046 icu: fix CVE-2017-14952 Double-Free Vulnerability
http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/

https://security-tracker.debian.org/tracker/CVE-2017-14952

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2017-10-24 02:35:19 -05:00
Hannu Nyman
5d4ded7c6b Merge pull request #5003 from sartura/lxc_bump_to_2.1.1
lxc: bump to 2.1.1
2017-10-23 21:26:33 +03:00
Hannu Nyman
e13b4b27c2 Merge pull request #5002 from msva/zsh-5.4.2
zsh: updated to 5.4.2
2017-10-23 21:25:44 +03:00
Marko Ratkaj
792c5713ad lxc: bump to 2.1.1
This is the first bugfix release for LXC 2.1. Full list of changes can
be found here:

https://linuxcontainers.org/lxc/news/

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2017-10-23 15:31:21 +02:00
Vadim A. Misbakh-Soloviov
dc9654770a
zsh: updated to 5.4.2
Signed-off-by: Vadim A. Misbakh-Soloviov <git@mva.name>
2017-10-23 18:12:11 +07:00