Commit graph

4623 commits

Author SHA1 Message Date
Jiri Slachta
6953123f1d
Merge pull request #19834 from neheb/7
libxslt: update to 1.1.37
2022-11-06 13:41:23 +01:00
Rosen Penev
b83c56576a libgpg-error: install gpg-error-config again
Upstream deprecated it while not fixing libgcrypt not to use it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 18:00:30 -07:00
Rosen Penev
5542f91918 libdrm: update to 2.4.114
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 17:59:06 -07:00
Rosen Penev
0f9d554f1c libxslt: update to 1.1.37
Upstream URL changed. There's also a cmake build now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 17:40:56 -07:00
Rosen Penev
6b49eeb093 libdnet: update to 1.16.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:33:19 -07:00
Rosen Penev
2e89f90e6a libfido2: update to 1.12.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:33:05 -07:00
Rosen Penev
cecc44fb42 libshout: update to 2.4.6
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:32:43 -07:00
Rosen Penev
b121a210c9 log4cplus: update to 2.0.8
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:32:29 -07:00
Rosen Penev
a75aaa452b libaio: update to 0.3.113
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:32:10 -07:00
Rosen Penev
63b52599bf libcap-ng: update to 0.8.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:31:55 -07:00
Rosen Penev
9a430e72fe libgee: update to 0.20.6
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:30:28 -07:00
Rosen Penev
a3fd2c7982 libgpg-error: update to 1.46
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:30:05 -07:00
Rosen Penev
d4410f7750 libvpx: update to 1.12.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:29:46 -07:00
Rosen Penev
15bfba27e2 libseccomp: update to 2.5.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 01:29:22 -07:00
Rosen Penev
32e21d51e3 libupnpp: update to 0.22.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 20:18:54 -07:00
Espen Jürgensen
a61c629c89 libunistring: Update to 1.1
Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
2022-11-04 13:06:15 -07:00
Rosen Penev
f026ff03b3 libtins: update to 4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:02:22 -07:00
Rosen Penev
38974f4e06 libidn: update to 1.41
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:02:09 -07:00
Rosen Penev
9cf682901e libidn2: update to 2.3.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:01:59 -07:00
Rosen Penev
709a81f2fe liblz4: update to 1.9.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:01:47 -07:00
Rosen Penev
0a92b8c1ab libarchive: update to 3.6.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:54 -07:00
Rosen Penev
97cb401f0d libmad: update to 0.16.3
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:34 -07:00
Rosen Penev
5ea89498ff libnpupnp: update to 5.0.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:23 -07:00
Rosen Penev
7f0ccf4b14 libpng: update to 1.6.38
Remove upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:55:22 -07:00
Nikos Mavrogiannopoulos
6c70c1d900
Merge pull request #19797 from neheb/12
libtasn1: update to 4.19.0
2022-11-04 20:34:25 +01:00
Rosen Penev
b589403c72 libjpeg-turbo: update to 2.1.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-03 20:25:53 -07:00
Rosen Penev
b1d112c5d2 libtasn1: update to 4.19.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-03 19:42:18 -07:00
Jan Hák
c2a270eb7a libedit: update to version 20221030-3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2022-11-01 14:49:46 +01:00
Alois Klink
4eff6c57c1 gdbm: configure with --without-readline
By default, gdbm configures/builds with readline and curses support
if they exist.

This can cause race conditions when compiling gdbm and ncurses in
parallel, as gdbm may try to link to ncurses when it doesn't exist.

This commit forces gdbm to skip using readline/ncurses, since it's
unlikely that anybody is using the line-editing feature of gdbm.

See [gdbm's README][1] for more info.

[1]: https://git.gnu.org.ua/gdbm.git/tree/README?h=v1.21#n50

Signed-off-by: Alois Klink <alois@aloisklink.com>
2022-10-27 12:04:00 -07:00
Josef Schlehofer
a4e8cbb89a
libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-26 09:31:30 +02:00
Josef Schlehofer
02eb18a65f
Merge pull request #19701 from turris-cz/libwebsockets-conflicts-provides
libwebsockets: full variant provides OpenSSL
2022-10-25 14:28:58 +02:00
Josef Schlehofer
676c5c72b5
libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 12:27:11 +02:00
Josef Schlehofer
77e682a11c
libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 07:57:23 +02:00
Nick Hainke
ed7d38c145 libmariadb: update to 3.1.18
The official download mirror does not host 3.1.12 anymore. Update to
newest version to solve the issue.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-24 05:38:43 -07:00
Hirokazu MORIKAWA
2c16091d07 icu: bump to 72.1
It updates to Unicode 15, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 42 locale data with various additions and corrections.

ICU 72 adds technology preview implementations for person name formatting, as well as for a new version of message formatting based on a proposed draft Unicode specification.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-10-23 18:42:29 +02:00
Lucian Cristian
990748d135 nss: update to 4.84
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:34 -07:00
Lucian Cristian
0e0286e7a1 nspr: update to 4.35
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:29 -07:00
Michael Heimpold
60e503a4d7
Merge pull request #19614 from mhei/libxml2-update-2.10.3
libxml2: update to 2.10.3
2022-10-17 07:42:47 +02:00
Daniel Golle
032e14c96e
libksba: update to version 1.6.2
Noteworthy changes in version 1.6.2 (2022-10-07) [C22/A14/R2]
------------------------------------------------

 * Fix integer overflow in the CRL parser.  [rK4b7d9cd4a0]

Release-info: https://dev.gnupg.org/T6230

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-16 20:30:30 +01:00
Michael Heimpold
c2742973b0 libxml2: update to 2.10.3
This fixes:
    - CVE-2022-40303
    - CVE-2022-40304

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-16 19:57:59 +02:00
Nikos Mavrogiannopoulos
4f3d297e1f
Merge pull request #19564 from PolynomialDivision/update-gnutls-3-7-8
gnutls: update to 3.7.8
2022-10-09 09:35:38 +02:00
Alexandru Ardelean
4e4e7fdf16
Merge pull request #19538 from mhei/libzip-update-1.9.2
libzip: update to 1.9.2
2022-10-09 08:11:16 +03:00
Nick Hainke
e2a9c55980 gnutls: update to 3.7.8
Release Notes:
https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-09 00:23:24 +02:00
Daniel Golle
df589ce880
libksba: update to version 1.6.1
Update to stable release 1.6.1.
See commit log since version 1.6.0 for changes[1].

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=shortlog;h=d3c1e063d708a46ef39152256f8b1ea466b61be0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-07 02:11:36 +01:00
Michael Heimpold
94e60a352f libzip: update to 1.9.2
Also drop already mainlined patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-06 21:06:24 +02:00
Josef Schlehofer
ec6e977cd4
Merge pull request #19372 from cotequeiroz/libgd
libgd: avoid recursive and redundant dependencies
2022-10-06 11:45:23 +02:00
Petr Štetiar
845d81ca09 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-10-04 00:58:29 -07:00
Nick Hainke
a8774f84e9 expat: update to 2.4.9
Fixes CVE-2022-40674.

Release Notes:
- https://github.com/libexpat/libexpat/blob/R_2_4_8/expat/Changes
- https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-03 15:04:50 -07:00
Michael Heimpold
f27fb38c6b libmodbus: update to 3.1.8
- drop obsolete configure argument
- update download url

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-09-28 21:39:07 +02:00
Karl Palsson
f4ce13b700 libs/libwebsockets: Update to 4.3.x
Changes since 4.2 are extensive, as always.
https://libwebsockets.org/git/libwebsockets/tree/changelog?h=v4.3-stable#n4

Eg, Adds CBOR, support for reduced memory CA verification, cookie jars,
mqtt client gains qos2, mbedtls v3, fault injection apis, better support
for event loops.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:38:00 +00:00