Commit graph

15006 commits

Author SHA1 Message Date
Rosen Penev
8f0f613af0
Merge pull request #9131 from jefferyto/python-bpo-35907
python,python3: Fix CVE-2019-9948 - local_file:// allowed in urllib
2019-06-05 01:23:46 -07:00
Amol Bhave
a73b3b2d75 domoticz: disable searching for boost-cmake
Summary:
This package fails to compile with boost 1.70 when the boost cmake
config gets used.
As far as I can tell, Boost 1.70 introduced
BoostConfigVersion.cmake. In that file, the value of PACKAGE_VERSION is
set to 1.70. This makes CMake auto set the variable Boost_VERSION to
1.70. Historically, Boost_VERSION has been using the format like 170000,
and not 1.70. Some package cmake files still depend on this behavior
and make assertions such as Boost_VERSION > 168000. This is incompatible
with the new scheme.

Test Plan:
`make package/domoticz/compile`
Also compiled all other packages that have a boost dependency, they seem
to be working fine.
tested on nbg6817

Signed-off-by: Amol Bhave <ambhave@fb.com>
[split unrelated change, change commit subject, alphabetical order]
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2019-06-05 10:59:12 +03:00
Stijn Tintel
b93d39ac74 domoticz: enable BUILD_SHARED_LIBS
Without this, no suitable boost_thread variant can be identified when
compiling against Boost 1.70.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2019-06-05 10:55:39 +03:00
Florian Eckert
985a8a3f8c
Merge pull request #9128 from TDT-AG/pr/20190603-mwan3
mwan3: change flush_conntrack handling to use uci list element
2019-06-04 22:06:47 +02:00
Rosen Penev
a1138c676f
Merge pull request #9141 from neheb/sod
libsodium: Update to 1.0.18
2019-06-04 12:24:10 -07:00
Hannu Nyman
438326179e
Merge pull request #9129 from ysc3839/pycryptodome
python-cryptodome: update to 3.8.2.
2019-06-04 21:25:18 +03:00
Rosen Penev
272329d662
Merge pull request #9135 from neheb/n2
google-authenticator-libpam: Update to version 1.06
2019-06-04 09:11:35 -07:00
Jeffery To
53838903fe python,python3: Fix CVE-2019-9948 - local_file:// allowed in urllib
These patches address issue:
CVE-2019-9948: Unnecessary URL scheme exists to allow local_file://
reading file in urllib

Link to Python issue:
https://bugs.python.org/issue35907

Issue 35907 is still currently open, waiting for a decision for
Python 3.5; these patches for Python 2.7 and 3.7 have been merged.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-04 22:20:21 +08:00
Rosen Penev
1784a4d2cf
Merge pull request #9142 from nxhack/hid_0_7_9
node-hid: update to 0.7.9
2019-06-03 23:27:09 -07:00
Hirokazu MORIKAWA
9a1386fa2c node-hid: update to 0.7.9
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2019-06-04 14:52:05 +09:00
Rosen Penev
efc45ea3ca libsodium: Update to 1.0.18
Added PKG_BUILD_PARALLEL for faster compilation.

Several Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-03 20:04:46 -07:00
Rosen Penev
be07c43150 google-authenticator-libpam: Update to version 1.06
Simplifies the Makefile slightly. This also uses a proper release instead
of a random git commit.

Added LICENSE Information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-03 16:54:41 -07:00
Rosen Penev
81440bd35b
Merge pull request #9025 from cshoredaniel/pr-update-nbd
nbd: Update to 3.19 and remove unneed patches
2019-06-03 14:23:45 -07:00
Rosen Penev
5093dc4bc3
Merge pull request #9123 from neheb/make
make: Do not use libelf
2019-06-03 09:20:27 -07:00
Rosen Penev
fc08b8d75e
Merge pull request #9125 from neheb/vim
vim: Remove bogus libelf dependency
2019-06-03 09:20:12 -07:00
Hannu Nyman
1e39f3189b
Merge pull request #9114 from jefferyto/python-host-setuptools-pip-installed-pkg-release
python,python3: Record PKG_RELEASE for host setuptools/pip
2019-06-03 17:02:44 +03:00
Florian Eckert
171cb17694 mwan3: change flush_conntrack handling to use uci list element
With this change it is now possible to combine interface action events.
If an interface action is generated by netifd or mwan3 for example ifup,
ifdown, connectd or disconnected and this action is configured in the inteface
uci section, then the conntrack table is flushed by mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-06-03 14:16:05 +02:00
Rosen Penev
15a0606403
Merge pull request #9100 from jefferyto/isolate-host-python
python,python3: Better isolate host Python
2019-06-03 02:11:20 -07:00
Rosen Penev
88c709829a
Merge pull request #9127 from mstorchak/tgt
tgt: update to 1.0.78
2019-06-03 02:10:30 -07:00
Rosen Penev
bb5a8c43b6
Merge pull request #9121 from jefferyto/python-cryptography-2.7
python-cryptography: Update to 2.7
2019-06-03 02:09:20 -07:00
Rosen Penev
8185120be4
Merge pull request #9119 from jefferyto/python-bpo-30458
python,python3: Fix CVE-2019-9740 and CVE-2019-9947
2019-06-03 02:08:32 -07:00
Maxim Storchak
551605b218 tgt: update to 1.0.78
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2019-06-03 10:40:01 +03:00
liudf0716
4af98fc3e9 apfree-wifidog: Add new package
Signed-off-by: liudf0716 <liudf0716@gmail.com>
[Fix indentation and trailing whitespace on Makefile and wifidogx.init]
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-06-03 01:07:01 +00:00
Rosen Penev
7df4cc1a43 vim: Remove bogus libelf dependency
Unused and Unneeded.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-02 16:21:37 -07:00
Rosen Penev
423c20fbaf
Merge pull request #9120 from jefferyto/newt-0.52.21
newt: Update to 0.52.21
2019-06-02 15:56:54 -07:00
Richard Yu
81bffa694a
python-cryptodome: update to 3.8.2.
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2019-06-03 05:09:36 +08:00
Rosen Penev
91c97efbf4 make: Do not use libelf
libelf is used under Solaris for nlist. This is not needed in OpenWrt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-02 14:06:24 -07:00
Jeffery To
e094a67337 newt: Update to 0.52.21
This also removes $(FPIC) from TARGET_CFLAGS.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-03 04:59:36 +08:00
Rosen Penev
a5c540e2d5
Merge pull request #9117 from neheb/evht2
libevhtp: Remove random hacks
2019-06-02 13:48:08 -07:00
Peter Wagner
d57c86bc77 glib2: fix CVE-2019-12450
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2019-06-02 22:01:15 +02:00
Jeffery To
b74d45e88a python-cryptography: Update to 2.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-03 02:56:01 +08:00
Rosen Penev
a544658ffc libevhtp: Remove random hacks
There's no point in overriding the defaults. They work fine.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-02 11:49:20 -07:00
Rosen Penev
72dc6f669a
Merge pull request #8965 from neheb/pow
powertop: Switch to uClibc++
2019-06-02 09:48:25 -07:00
Jeffery To
9331fbb1a0 python,python3: Fix CVE-2019-9740 and CVE-2019-9947
These patches address issues:
CVE-2019-9740: Python urllib CRLF injection vulnerability
CVE-2019-9947: Header Injection in urllib

Links to Python issues:
https://bugs.python.org/issue36276 (resolved duplicated of 30458)
https://bugs.python.org/issue35906 (resolved duplicated of 30458)
https://bugs.python.org/issue30458

Issue 30458 is still currently open, waiting for a decision for
Python 3.5; these patches for Python 2.7 and 3.7 have been merged.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-03 00:38:53 +08:00
Hannu Nyman
982c389732 irqbalance: add support for uci config
Add support for uci config file.

Only a global 'enabled" switch has been implemented so far.

* Default config disables irqbalance initially, so that there is
  no change with the previous behaviour (and the possibly existing
  separate launch scripts in people's builds).

Config file and init script can be later extended for irqbalance
options like the oneshot mode or the evaluation interval

(Also change the init file to use tabs)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-06-02 12:43:08 +03:00
Aleksandr Mezin
df14fa949f irqbalance: add init script
Signed-off-by: Aleksandr Mezin <mezin.alexander@gmail.com>
2019-06-02 12:13:53 +03:00
Nikos Mavrogiannopoulos
e053ce17c7 gnutls: removed autogen patch
It was causing regressions in systems without some particular
development tools (see #8129)

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-06-01 08:14:37 +02:00
Rosen Penev
729eb5da3a
Merge pull request #9097 from neheb/softe
softethervpn: Fix compilation with full/stub iconv
2019-05-31 20:49:02 -07:00
Rosen Penev
2c67456537
Merge pull request #9034 from neheb/do
dosfstools: Fix compilation with full NLS
2019-05-31 20:48:21 -07:00
Rosen Penev
1cc3c11739
Merge pull request #9111 from neheb/fol
libfolly: Update to version 2019.05.27.00
2019-05-31 18:26:55 -07:00
Rosen Penev
b2269ff2f1 fbthrift: Update to 2019.05.27.00
Simplify dependencies.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-05-31 17:00:23 -07:00
Rosen Penev
650c7e6eec libwangle: Update to 2019.05.27.00
Simplify dependencies.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-05-31 17:00:08 -07:00
Rosen Penev
2d9ad583f5 librsocket-cpp: Simplify dependencies
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-05-31 16:59:41 -07:00
Rosen Penev
b9c64ba003 libfizz: Update to 2019.05.27.00
Simplified DEPENDS. libfolly is all that's needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-05-31 16:58:56 -07:00
Rosen Penev
0c69a7b336 softethervpn: Fix compilation with full/stub iconv
Needs -liconv.

Also fixed compilation without deprecated OpenSSL APIs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Add OPENSSL_init_crypto to deprecated patch
Co-Authored-By: Eneas Queiroz <cote2004-github@yahoo.com>
2019-05-31 13:58:30 -07:00
Jeffery To
1f1eacc484 python,python3: Record PKG_RELEASE for host setuptools/pip
This changes the "patched" indicator files for host setuptools and pip
to include their PKG_RELEASE values. This also removes host setuptools
and/or pip before host install, if the installed copy does not match the
version (and PKG_RELEASE) of the copy to be installed.

This will allow added or removed patches to affect host setuptools /
pip, since these changes will cause PKG_RELEASE to be incremented.

This also fixes the host install error, when the install tries to patch
an already patched copy of setuptools. (This error occurs because the
existing indicator files do not have version numbers in their file
names, whereas host install expected version numbers to be present.)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-01 03:52:23 +08:00
Rosen Penev
e243f40fd4 libfolly: Update to version 2019.05.27.00
Removed upstreamed patches. Also fixes a redefinition error on some
platforms.

Cleaned up the DEPENDS to be simpler and more concise.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-05-31 11:33:03 -07:00
Stijn Tintel
99411ab743
Merge pull request #9056 from lucize/strongup
strongswan: update to 5.8.0
2019-05-31 10:08:37 +02:00
Daniel F. Dickinson
b6da58fabf nbd: Update to 3.19 and remove unneed patches
Current version in OpenWrt (3.16.2) fails against the Arch Linux
in System Rescue CD's NBD as rootfs (to allow sharing ISO across
network).  Based on resolved issues and web searching it seems
nbd had endianness issues (which affected my ath79 device).

This updates to 3.19 which allows System Rescue CD PXE boot with
NBD rootfs to work.

Removed patches no longer required due to upstream changes, and
added new configure option (--without-libnl) required to avoid
linking against full libnl and libnl-genl (if present in build).

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-05-31 07:08:06 +00:00
Dirk Brenken
d347c432b4
Merge pull request #9106 from dibdot/banIP
banip: update 0.1.3
2019-05-31 07:13:46 +02:00