Commit graph

1571 commits

Author SHA1 Message Date
Hannu Nyman
19ca64fc81
Merge pull request #7554 from micmac1/tiff-4010-18.06
(openwrt-18.06) tiff: security bump to 4.0.10
2018-12-06 10:36:21 +02:00
Peter Wagner
f432140863 libsndfile: add PKG_SOURCE_DATE
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-12-03 23:10:36 +01:00
Peter Wagner
18c3166385 libsndfile: switch to cmake
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-12-03 20:40:11 +01:00
Peter Wagner
6124b001e9 libsndfile: switch to git
Fixes CVEs:
CVE-2017-6892
CVE-2017-8361
CVE-2017-8362
CVE-2017-8363
CVE-2017-8365
CVE-2017-12562
CVE-2017-14245
CVE-2017-14246
CVE-2017-14634
CVE-2018-13139
CVE-2018-13419

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-12-03 20:39:59 +01:00
Sebastian Kemper
e802a0c008 tiff: security bump to 4.0.10
This bumps libtiff's minor version from 9 to 10. In addition to the CVE
fixes that we already included this fixes:

CVE-2017-17095
CVE-2018-17101
CVE-2018-18557

The update is 100% backwards compatible, no symbol changes.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-12-02 11:31:19 +01:00
Peter Wagner
fc212923d5 glib2: update to 2.58.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-10-28 16:56:11 +01:00
Kevin Darbyshire-Bryant
99208fcfe8 libssh: mark as BROKEN due to CVE-2018-10933
The only known user of this library is currently unable to get their
application to work with with the fixed 0.7.6 release of this library.

To prevent accidental use by unknown parties of a flawed library, mark
it as BROKEN.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 14ad4cb976)
2018-10-19 13:08:01 +01:00
Nikos Mavrogiannopoulos
15cf061d5a gnutls: updated to 3.5.19
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2018-09-29 10:13:58 +02:00
Ted Hess
11c25f58fb boost: Merge updates (1.68.0) and build fixes from master
Makefile and package changes to support builds with both Python 2.x and Python 3.x versions.

Python versioning is automatically configured from lang/python repository xxx-version.mk files.

Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-09-26 09:43:52 -04:00
Rosen Penev
fddaa085f2 tdb: Remove libbsd dependency
libbsd gets picked up since it's no longer limited to glibc.

Patch identical to libtalloc one. Same codebase.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 33dc529e00)
2018-09-24 08:46:29 +02:00
BangLang Huang
aa58b6bfba tdb: bump to latest version
Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>
(cherry picked from commit d1804d38d4)
2018-09-24 08:46:29 +02:00
Eneas U de Queiroz
da27b31346 tdb: avoid installing duplicate files
Use $(CP) instead of $(INSTALL) so that libtdb.so.1 is installed as
symlink, and not duplicated.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 75d9ab331d)
2018-09-24 08:46:29 +02:00
Michael Heimpold
b2eda63396 libxml2: add cpe id for CVE tracking
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-08-21 21:19:01 +02:00
Sebastian Kemper
8476750886 libxml2: fix CVE-2018-9251 and CVE-2018-14567
Backport from master.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-08-21 20:29:19 +02:00
Sebastian Kemper
19e0097978 tiff: fix remaining CVEs
Backport Rosen's commit in master to 18.06 to address open CVEs. This
fixes:

CVE-2017-11613
CVE-2018-5784
CVE-2018-7456
CVE-2018-8905
CVE-2018-10963

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-08-19 10:40:18 +02:00
Sebastian Kemper
2db46d289c postgresql: security bump to 9.6.10
This update includes fixes for the following CVEs:

- CVE-2018-1115
- CVE-2018-10925
- CVE-2018-10915

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-08-15 17:00:21 +02:00
Sebastian Kemper
30d5e97fea libxml2: revision bump to force clean build
Commit dcd68100c23f980a7bbd1d7d9567a315ee584bdf fixed the zlib pkgconfig
file. But libxml2/host is stuck in the compile phase on the build bots.
Bumping the revision will force a clean build.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-05-30 20:27:59 +02:00
Ted Hess
97e43710a5
Merge pull request #5917 from diizzyy/patch-2
libs/libx264: Update to snapshot 20180401
2018-05-14 21:20:48 +00:00
Hannu Nyman
bdc67f63b4
Merge pull request #6023 from ClaymorePT/boost_1.67.0_r2
boost: Package Release 2 (minor fixes)
2018-05-14 22:49:14 +03:00
Hannu Nyman
b8b6576cd4
Merge pull request #6054 from zhaojh329/libuwsc
libuwsc: Update to 2.0.2
2018-05-14 22:44:03 +03:00
Jianhui Zhao
0e475d9a3d libuwsc: Update to 2.0.2
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
2018-05-15 00:04:37 +08:00
Kevin Darbyshire-Bryant
f83ac49d06 libidn: bump to v1.35 (2018-05-11)
Bump to v1.35
Refresh patches.
Update Makefile to use new '--disable-doc' configure flag.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-05-14 11:22:42 +01:00
David Mora
ba923ce93e getdns: Bump to 1.4.2
Update to new upstream version. Needed to add a patch provided by upstream to compile with musl.

Signed-off-by: David Mora <iamperson347+public@gmail.com>
2018-05-13 07:21:49 -04:00
tripolar
af87abf169
Merge pull request #5981 from diizzyy/patch-8
alsa-lib: Update to 1.1.6
2018-05-10 12:47:39 +02:00
Yousong Zhou
da1912f868 treewide: use mirror tag @KERNEL where applicable
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-05-09 17:05:53 +08:00
Yousong Zhou
af9c7aae09 dtc: add subpackage fdt-utils
Suggested-by: Tom Burkart <tom@aussec.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-05-09 15:45:51 +08:00
Yousong Zhou
8f18594ac9 dtc: bump to version 1.4.6
Suggested-by: Tom Burkart <tom@aussec.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-05-09 15:45:51 +08:00
Carlos Miguel Ferreira
d4fa43e9ac
boost: Package Release 2 (minor fixes)
- Fixed package hyperlink
  -> Now using the @SF macro to obtain the best mirror link
  -> Added backup link in case Source Forge fails to provide the proper link

- Minor fix to package documentation
  -> Help documentation was lacking the contract library info.

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
2018-05-09 01:17:27 +01:00
Hannu Nyman
f35a29fd2b
Merge pull request #5995 from diizzyy/patch-10
sbc: Switch to @KERNEL alias, use LTO optimization
2018-05-08 22:23:41 +03:00
Hannu Nyman
3581bc6fef
Merge pull request #5992 from kismetwireless/feature_protobuf-c_host_tools
Enable the host tools on protobuf-c (protoc-c specifically)
2018-05-08 19:36:32 +03:00
Hannu Nyman
82ac73701e
Merge pull request #5450 from ja-pa/poco_update
poco: update to version 1.8.1
2018-05-06 10:42:56 +03:00
W. Michael Petullo
64a7b5154a cyrus-sasl: update to 2.1.27-rc7
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-05-05 18:04:49 -04:00
Daniel Engberg
4f702765a1 sbc: Switch to @KERNEL alias, use LTO optimization
Switch to the @KERNEL alias
Use LTO optimization, reduces file size by ~20% (~10Kbyte)

With:
39K sbc_1.3-1_arm_cortex-a9_neon.ipk

Without:
51K sbc_1.3-1_arm_cortex-a9_neon.ipk

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-05-04 07:50:18 +02:00
Mike Kershaw / Dragorn
6915059e35 Enable the host tools on protobuf-c (protoc-c specifically)
Signed-Off-By: Mike Kershaw <dragorn@kismetwireless.net>
2018-04-30 17:14:47 -04:00
Daniel Engberg
b33c7e1ca4
alsa-lib: Update to 1.1.6
Update alsa-lib to 1.1.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-04-29 18:27:55 +02:00
Mislav Novakovic
771f6b1263 libyang: add patch
The patch fixes a netopeer2-cli issue on musl.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2018-04-27 13:19:04 +02:00
Ted Hess
aea4c43d2f
Merge pull request #5902 from antonlacon/libvorbis
libvorbis: update to 1.3.6
2018-04-23 21:14:40 +00:00
Hannu Nyman
75dc2dda21
Merge pull request #5959 from DocLM/gphoto2
libgphoto2 and gphoto2: Update to 2.5.17
2018-04-23 23:51:06 +03:00
Leonardo Medici
ff5fa3f52d libgphoto2: update package 2.5.17
Signed-off-by: Leonardo Medici <leonardo_medici@me.com>
2018-04-23 21:46:22 +02:00
W. Michael Petullo
feb1873125 libdaq: update hash and change maintainer
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-04-23 11:56:44 -04:00
Magnus Kroken
812ce161f3 libdaq: update to 2.0.6
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2018-04-23 17:38:33 +03:00
Michael Heimpold
f8ec3965eb libgpiod: update to 1.0.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-04-18 21:35:04 +02:00
David Mora
cefe7738b5 getdns: Package update to replace libidn support with libidn2
Package update to replace libidn support with libidn2

Signed-off-by: David Mora <iamperson347+public@gmail.com>
2018-04-17 18:10:59 -04:00
Carlos Miguel Ferreira
9c09ecf437
boost: Package Version Update -> 1.67.0
This package update provides two new libraries
- Contract (compiled library) [1]: Contract programming for C++.
  All contract programming features are supported: Subcontracting,
  class invariants, postconditions (with old and return values),
  preconditions, customizable actions on assertion failure (e.g.,
  terminate or throw), optional compilation and checking of
  assertions, etc, from Lorenzo Caminiti.

- HOF (header-only library) [2]:
  Higher-order functions for C++, from Paul Fultz II.

More info can be found at the usual place [3].

[1]: https://www.boost.org/libs/contract
[2]: https://www.boost.org/libs/hof
[3]: https://www.boost.org/users/history/version_1_67_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
2018-04-16 01:53:38 +01:00
Daniel Engberg
b386c497e1
libs/libx264: Update to snapshot 20180401
Update libx264 to snapshot 20180401
Scrub any previous set -O flags, cosmetic change.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-04-14 09:35:35 +02:00
champtar
49df906991
Merge pull request #5854 from diizzyy/libs-sqlite
libs/sqlite: Update to 3.23.1
2018-04-12 15:20:45 -07:00
Daniel Engberg
9c61c21014 libs/sqlite: Update to 3.23.1
Update sqlite to 3.23.1

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-04-12 23:56:36 +02:00
Ian Leonard
4e80b1053f libvorbis: build with LTO on arm
Reduces library size by 0.6%

Signed-off-by: Ian Leonard <antonlacon@gmail.com>
2018-04-11 19:45:06 -07:00
Ian Leonard
da040815fa libvorbis: update to 1.3.6
Resolves CVEs:
2018-5146
2017-14632
2017-14633

Signed-off-by: Ian Leonard <antonlacon@gmail.com>
2018-04-11 19:44:55 -07:00
Kevin Darbyshire-Bryant
30fa2156da libidn2: v2.0.4 Add to repo
Add libidn2 & idn2 tool to repo

Heavily based on PR by Daniel Engberg <daniel.engberg.lists@pyret.net>

Added idn2 tool & heavily based on existing idn Makefile.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-04-11 09:11:37 +08:00