Commit graph

15463 commits

Author SHA1 Message Date
Eneas U de Queiroz
4bbeb730a5
python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit acf7c540ca)
2019-09-30 16:42:59 -03:00
Eneas U de Queiroz
d9b708fa38
oniguruma: update to release 6.9.3
This release incorporates fixes for CVE-2019-13224 and CVE-2019-13225,
and "fixed many problems (found by libfuzzer programs)."

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit b7d0a82a7f)
2019-09-30 16:30:10 -03:00
Josef Schlehofer
faf6ec5800
python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:02:40 +02:00
Rosen Penev
7c74b6c45a
Merge pull request #10112 from commodo/django-sec-19.07
django: Update to 1.11.24
2019-09-30 00:48:10 -07:00
Rosen Penev
33ee8d1ec3 django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 64a02079da)
2019-09-30 10:27:06 +03:00
William Fleurant
d0fff76c2e
yggdrasil: bump to 0.3.9
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 7296ff1b5c)
2019-09-29 19:04:31 -07:00
Josef Schlehofer
f2a06eb9dc
golang: Update to version 1.13.1
Fixes CVE-2019-16276

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 65b7bd6cc0)
2019-09-29 20:42:52 +02:00
Josef Schlehofer
6a25e7f5ff
youtube-dl: Update to version 2019.9.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 9ed0d76b34)
2019-09-29 20:42:42 +02:00
Josef Schlehofer
e59ac33808
dnscrypt-proxy2: Update to version 2.0.27
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit b9fbb90fd4)
2019-09-29 20:42:31 +02:00
Jan Pavlinec
dda4bd1f90
expat: update to version 2.2.7 (security fix)
Fixes:
CVE-2018-20843

Changes:
add PKG_CPE_ID
switch to xz
remove maintainer

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 70c62ef2d7)
2019-09-29 10:00:51 +02:00
Claudius Ellsel
05ad389f41
adblock: More cosmetic changes and more detailed installation instructions to README.md
Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 6121af755d)
2019-09-29 08:01:02 +02:00
Claudius Ellsel
df4452ade3
adblock: Cosmetic changes to README.md
Add code blocks for easier reading and change "dns" to "DNS".

Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 088a14e5ce)
2019-09-29 07:59:37 +02:00
Johannes Rothe
bbc6a303a1
travelmate: add support for optional args in auto-login script
This can be helpful for example in hotels where you need to
enter a new user/password combination every week.

Signed-off-by: Johannes Rothe <mail@johannes-rothe.de>
(cherry picked from commit a7f87f939d)
2019-09-29 07:58:00 +02:00
Jeffery To
2c829c973b
golang: Use new -trimpath option when compiling Go packages
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 22ee6e86a0)
2019-09-29 00:42:22 +02:00
Xingwang Liao
c7f1bdc592
golang: Update to 1.13
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry-picked from commit 0849e32659)
2019-09-29 00:42:09 +02:00
Josef Schlehofer
da75f8612a
netdata: Update to version 1.17.1
Patch 002 - Force Python3 is no longer applying, let's try to throw it
away to see if it is still necessary

Patch 003 - Was backported from the master branch and it was included in
Netdata version 1.17.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 5e89816)
2019-09-28 11:39:48 +02:00
Rosen Penev
4c05bd2481
Merge pull request #10097 from neheb/boooo
[19.07]Update boost and other fixes
2019-09-27 16:07:32 -07:00
Richard Yu
2d6c0988bc
dump1090: update to 3.7.2
and use GitHub release tarball instead of git

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry-picked from a6a0f4edee)
2019-09-27 13:07:43 -07:00
Rosen Penev
11e9b5e969
dump1090: Update to version 3.7.1
Repository was moved.

Also cleaned up Makefile slightly.

Ran init script through shellcheck.

Added PKG_BUILD_PARALLEL for faster compilation.

Added several CFLAGS and LDFLAGS for smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f3245e6c7d)
2019-09-27 13:07:18 -07:00
Rosen Penev
f3473adf5f
cmdpad: Fix compilation with musl
When passing -Wimplicit-function-declaration

Also got rid of std=gnu89. It's easy to patch out.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1b5e4883a4)
2019-09-27 13:05:38 -07:00
Rosen Penev
2b1f19c992
gammu: Update to 1.40.0
Cleaned up Makefile for consistency between packages.

Switched to CMAKE_INSTALL to get rid of the InstallDev section.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2e2929366b)
2019-09-27 13:03:45 -07:00
Rosen Penev
34ac8a8e73
ykpers: Update to 1.20.0
Cleaned up Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from db6e6ac24a)
2019-09-27 13:00:22 -07:00
Rosen Penev
8e95b05074
zstd: Update to 1.4.3
Bugfix release.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 133a02a115)
2019-09-27 12:58:40 -07:00
Rosen Penev
154e0c40cd
mpd: Add SoundCloud support for full variant
The libyajl cleanup commit revealed that it was not being installed
correctly. Now that it is, mpd picks it up properly.

Enabled SoundCloud support for the full variant. Disabled for the mini.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 835bc1df03)
2019-09-27 12:56:20 -07:00
Michal Čihař
3efd435bc6
mpd: enable pulseaudio in full package
Signed-off-by: Michal Čihař <michal@cihar.com>
(cherry-picked from 2ed62adc59)
2019-09-27 12:55:53 -07:00
Rosen Penev
7f957cf8ac
yajl: Update to modern standards
Replaced git:// link with https:// which gets through firewalls easier.

Replaced archive with .xz. The one currently in the mirrors has the wrong
hash. .xz is also smaller than .gz.

Eliminated already default CMake option.

Eliminated Build/InstallDev with CMAKE_INSTALL.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2abbc83c9d)
2019-09-27 12:54:50 -07:00
Hirokazu MORIKAWA
d97123b729
node: fix http/2 DoS
This is a security release.

Node.js, as well as many other implementations of HTTP/2,
have been found
vulnerable to Denial of Service attacks.
See https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
for more information.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 81bccf9068)
2019-09-27 12:44:16 -07:00
Hirokazu MORIKAWA
976fd4e9c1
node: fix host build error on macOS
fix host build error on macOS
reference: https://github.com/openwrt/packages/issues/9616

Related: https://github.com/openwrt/packages/issues/7171
(This correspondence is necessary to build with macOS.)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from c69d5a0241)
2019-09-27 12:43:43 -07:00
Rosen Penev
0164259db0
opencv: Update to 4.1.1
Update Makefile to modern standards.

Switched to local tarballs..xz archives are smaller. The .gz archive that
codeload comes with is 85MB.

Replaced PKG_INSTALL with CMAKE_INSTALL to get rid of Build/InstallDev.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed inactive maintainer.

Added uClibc-ng patches to fix compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f8cd4f094a)
2019-09-27 12:38:40 -07:00
Rosen Penev
5b903f68eb
Merge pull request #10084 from BKPepe/sentrysdk-1907
[OpenWrt 19.07] python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:37 -07:00
Rosen Penev
d203688738
boost: Switch to blacklist of targets for context
Works around a buildbot bug.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from dc3220736d)
2019-09-27 10:17:24 -07:00
Rosen Penev
c4a7a2c3da
boost: Update host libraries
It seems newer versions of fbthrift require more libraries.

Also added AR7, RB532, and Lantiq ASE to fiber exclusion.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1f77459ace)
2019-09-27 10:14:21 -07:00
Carlos Miguel Ferreira
e3c1765598
boost: Package Version Update (1.71.0) + bugfixes
This commit updates Boost to version 1.71.0 and disables Boost.Context
 for arc and mips64 architectures, since either jump_fcontext or
 getcontext are undefined for those architectures.

It also fixes a bug were Boost.Fiber was not properly disabled for
mips32 and mips64 architectures.

Boost.Coroutine2 option was removed since it was redundant. By selecting
the Coroutine package, Coroutine2 is also installed.

Boost.Fiber has been disabled for target brcm47xx_generic and brcm47xx_legacy
due to misssing opcode support from instruction set.

Boost 1.71.0 brings a new header-only library
 - Boost.Variant2 [1]
   -> A never-valueless, strong guarantee implementation of
      std::variant, from Peter Dimov.

More info about Boost 1.71.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_71_0/libs/variant2/doc/html/variant2.html
[2]: https://www.boost.org/users/history/version_1_71_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
(cherry-picked from 0cd9824623)
2019-09-27 10:13:59 -07:00
Rosen Penev
884c89b5e9
jamvm: Don't compile on ARM64
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccd2b767d)
2019-09-27 10:10:33 -07:00
Rosen Penev
2bc353a35e
fbzmq: Size optimizations
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76b57b0e6c)
2019-09-27 10:06:55 -07:00
Rosen Penev
d4f1b24ea9
fbthrift: Update to 2019-09-22
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 7139cddccf)
2019-09-27 10:06:12 -07:00
Rosen Penev
7319d940fb
libwangle: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43a8e02bb8)
2019-09-27 10:04:46 -07:00
Rosen Penev
8a5cb085b6
librsocket-cpp: Update to 2019-09-22
Added URLs.

Added needed Boost patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 164e706f9d)
2019-09-27 10:02:55 -07:00
Rosen Penev
95b7c86794
libfizz: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0f209e988c)
2019-09-27 10:01:01 -07:00
Rosen Penev
db0248cf67
libfolly: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d28d9aa4dc)
2019-09-27 09:59:15 -07:00
Jan Pavlinec
a0d4cc9170
treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ceadbcbb64)
2019-09-26 19:36:27 -07:00
Jan Pavlinec
937b19ebb7
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Rosen Penev
e09985075e
libgd: Properly disable iconv support
HAVE_ICONV and HAVE_ICONV_H are two different headers that both need to
evaluate to false. Added the extra CONFIGURE_VARS.

This can be verified by passing -Werror=implicit-function-declaration

Added PKG_LICENSE_FILES

Updated homepage URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Jan Pavlinec
fac472e28a
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ad16f2a851)
2019-09-26 19:36:26 -07:00
Oever González
8671765883
samba4: remove double quotes for renice
The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.

The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.

Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from c45974d0a3)
2019-09-26 19:36:26 -07:00
Andy Walsh
cd597524d1
samba4: add python2 host dependency
* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from c02ef3ae7f)
2019-09-26 19:36:26 -07:00
Rosen Penev
d3db014eb1
samba4: Run init script through shellcheck
Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d03b88b5b0)
2019-09-26 19:36:26 -07:00
Andy Walsh
8a20820a9b
samba4: revert to 4.9.11
* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from 2f2a4bccd9)
2019-09-26 19:36:25 -07:00
Eneas U de Queiroz
8cfab80332
logrotate: move config option to menu
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from f6c9e2bacd)
2019-09-26 19:36:25 -07:00
Rosen Penev
14f80a7302
logrotate: Add ACL support
Various Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 788318625d)
2019-09-26 19:36:25 -07:00