Commit graph

11503 commits

Author SHA1 Message Date
Rosen Penev
456ae2f541
freetype: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:40:57 -07:00
Rosen Penev
20fe720732 flac: Fix CVE-2017-6888
Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:38:07 -07:00
Rosen Penev
4c59ee99e9 confuse: Update to 3.2.2
Fix for CVE-2018-14447

God rid of pointless autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:59:34 -07:00
Carlos Miguel Ferreira
e0e80c1d2c
boost: Package Version Update -> 1.68.0
This package update provides one new library:
 - YAP: An expression template library for C++14 and later, from Zach Laine [1].

More info can be found at the usual place [2].

[1] : https://www.boost.org/libs/yap/
[2] : https://www.boost.org/users/history/version_1_68_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
2018-08-21 02:13:59 +01:00
Ruixi Zhou
fa257720ab nginx: Add missing WebDAV methods support (PROPFIND & OPTIONS)
Nginx provide WebDAV methods PUT, DELETE, MKCOL, COPY, and MOVE with
http_dav_module. But most WebDAV clients that require additional WebDAV
methods (PROPFIND & OPTIONS) to operate. Add missing methods support
with Arutyunyan Roman (arutyunyan.roman@gmail.com)'s nginx-dav-ext-module.
(see: http://nginx.org/en/docs/http/ngx_http_dav_module.html
https://github.com/arut/nginx-dav-ext-module)

Example config:
	location / {
		dav_methods PUT DELETE MKCOL COPY MOVE;
		dav_ext_methods PROPFIND OPTIONS;

		root /var/root/;
	}

Signed-off-by: Ruixi Zhou <zhouruixi@gmail.com>
2018-08-21 08:14:44 +08:00
Othmar Truniger
432cc99d9a emailrelay: add some runtime options
Signed-off-by: Othmar Truniger <github@truniger.ch>
2018-08-20 19:29:41 +02:00
Hannu Nyman
d9749c257b
Merge pull request #6602 from neheb/patch-17
evtest: Switch to tarballs
2018-08-20 20:08:43 +03:00
Dirk Brenken
83c225812b
Merge pull request #6668 from cotequeiroz/emailrelay_pam
emailrelay: avoind linking with -lpam
2018-08-20 18:14:56 +02:00
Dirk Brenken
31a3852044
Merge pull request #6747 from mark0n/fix-curl-variable
ddns-scripts: Fix problems detecting if curl is SSL capable
2018-08-20 18:04:16 +02:00
Martin Konrad
c9b5b02200 ddns-scripts_route53-v1: Fix problems detecting curl
Ensure cURL is installed and has SSL support. This fixes
issue 6744.

Signed-off-by: Martin Konrad <info@martin-konrad.net>
2018-08-20 11:30:37 -04:00
Hannu Nyman
fee4bb8e64
Merge pull request #6789 from Ansuel/fixuwsgi
uwsgi-cgi: improve luci support
2018-08-20 18:04:29 +03:00
Hannu Nyman
70e991b394
Merge pull request #6788 from Ansuel/fixnginx
nginx: improve luci config
2018-08-20 18:04:05 +03:00
Ansuel Smith
c94a9968f7
uwsgi-cgi: improve luci support
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-08-20 14:56:26 +02:00
Ansuel Smith
0f21ab6391
nginx: improve luci config
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-08-20 14:55:53 +02:00
Karl Palsson
97869b7a25 net/mosquitto: update to 1.5.1
Bugfix release.  Full changelog at:
https://mosquitto.org/blog/2018/08/version-151-released/

Of most interest to OpenWrt:
* Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined.
* Fix IPv6 addresses not being able to be used as bridge addresses.
* Fix problem opening listeners on Pi caused by unsigned char being default.
* Fix segfault on startup if bridge CA certificates could not be read.
* Fix possible endian issue when reading the memory_limit option.
* library and client bugfixes including: https://github.com/openwrt/packages/issues/6765

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-08-20 10:47:44 +00:00
Dirk Brenken
5b5e20dfc2
Merge pull request #6810 from Andy2244/rpcbind-update
rpcbind: update to 1.2.5
2018-08-20 10:17:57 +02:00
Dirk Brenken
d872a0dbc4
Merge pull request #6784 from neheb/patch-21
python-pyasn1: Update to 0.4.4
2018-08-20 09:49:01 +02:00
Dirk Brenken
f6e18184a1
Merge pull request #6785 from neheb/patch-22
python-urllib3: Update to 1.2.3
2018-08-20 09:25:32 +02:00
Dirk Brenken
984d9dbfbd
Merge pull request #6813 from neheb/sudo
sudo: Update to 1.8.24
2018-08-20 09:24:07 +02:00
Rosen Penev
b2427ca1cf python-urllib3: Update to 1.23
Use a better URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 20:47:21 -07:00
Yousong Zhou
9400257639 qemu: tighten up CONFIGURE_ARGS spec
This is more for readability, no functional change

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-20 02:43:56 +00:00
Yousong Zhou
41c3a2e0a5 qemu: bump to version 3.0.0
Also switch to domain download.qemu.org and .xz files

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-20 02:38:56 +00:00
Rosen Penev
683d833150
ffmpeg: Add CPE ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:19:32 -07:00
Rosen Penev
61cdf7b4d6
avahi: Add CPE ID to track CVEs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:05:41 -07:00
Peter Wagner
8f8fa47234 ntpd: update to 4.2.8p12
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-08-19 23:38:02 +02:00
Rosen Penev
8ce9f30c42 sudo: Update to 1.8.24
Changed URLs to HTTPS

Rearranged Makefile for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 14:21:33 -07:00
Philip Prindeville
8d710085da
Merge pull request #6812 from pprindeville/perl-cgi-4.40
perl-cgi: Update to 4.40
2018-08-19 14:51:36 -06:00
Philip Prindeville
c4dbc0147f perl-cgi: Update to 4.40
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2018-08-19 14:26:15 -06:00
Daniel F. Dickinson
2b7531ad9f doveco: pigeonhole: Use stock dovecot dir locations
We move dovecot libexec binaries and modules (including the package
pigeonhole) to their standard locations.  This is okay for libexec
because it was added to core prior to 17.04 release.  Moving the
binaries normally in libexec eliminates the reason the modules were in an
unusual directory, which is that there were conflicts with
libexec binaries that were in lib, which the modules normally use.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:38 -04:00
Daniel F. Dickinson
f0fb968346 dovecot: Fix managesieve-login needs libdovecot-login
When trying to use managesieve my MUA complained sieve wasn't supported.
On investigation dovecot logs the following could be seen:

    Aug 16 00:28:44 managesieve-login: Fatal: master:
      service(managesieve-login): child 1430 returned error 127
    Aug 16 00:31:32 managesieve-login: Error: Error loading shared
      library libdovecot-login.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error loading
      shared library libdovecot.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error relocating
      /usr/lib/dovecot/managesieve-login: net_ip2addr: symbol not found

The issue (verified with readelf on non-working build and build with my fix)
is that there is no RPATH information in the pigeonhole binaries (like
managesieve-login).

The dovecot-config that is 'installed' in the staging dir
assumes that plugins will be built on the same host as the installed files.
The 'installed' dovecot-config (partial) looks like:

LIBDOVECOT='-L/usr/lib/dovecot -ldovecot'
LIBDOVECOT_LOGIN='-ldovecot-login -L/home/user/Build/openwrt/openwrt-ath79/staging_dir/target-mips_24kc_musl/usr/lib -lssl -lcrypto'
LIBDOVECOT_SQL=-ldovecot-sql
LIBDOVECOT_COMPRESS=-ldovecot-compression
LIBDOVECOT_LDA=-ldovecot-lda
LIBDOVECOT_STORAGE='-ldovecot-storage '
LIBDOVECOT_DSYNC=-ldovecot-dsync
LIBDOVECOT_LIBFTS=-ldovecot-fts

The solution I used was to modify dovecot-config to add the rpath to
DOVECOT_BINARY_LDFLAGS, and to replace references to host directories
with staging_dir directories.

This results in RPATH being added as it needs to be, and results in a working
version of dovecot+pigeonhole.

NB: I've also touched package version of pigeonhole as this change in dovecot
results in (needed) binary changes for pigeonhole.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:23 -04:00
Hannu Nyman
53a912201c
Merge pull request #6539 from neheb/patch-4
bluelog: Switch to GitHub tarball
2018-08-19 20:15:39 +03:00
Hannu Nyman
d580202e38
Merge pull request #6488 from neheb/patch-2
alpine: Update to 2.21.9999
2018-08-19 20:14:34 +03:00
Jiri Slachta
e3681cb107
Merge pull request #6780 from neheb/tiff
tiff: Fix remaining CVEs
2018-08-19 19:10:32 +02:00
champtar
be234c29b4
Merge pull request #6803 from neheb/monit
monit: Update to 5.25.2
2018-08-19 10:55:06 -04:00
champtar
67bc803ed9
Merge pull request #6802 from neheb/patch-30
htop: Minor adjustments
2018-08-19 10:51:11 -04:00
Andy Walsh
7a88e515d0 rpcbind: update to 1.2.5
* update to 1.2.5
* fix wrong URL
* adapt to bin/sbin from new version

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-19 16:36:03 +02:00
Rosen Penev
18283b444b monit: Update to 5.25.2
Added PKG_BUILD_PARALLEL to speed up compilation times.

Added PKG_CPE_ID for proper CVE tracking.

A few other cosmetic changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:54:11 -07:00
Rosen Penev
c0b9f73919 htop: Minor adjustments
Added PKG_CPE_ID for proper CVE tracking.

Fixed URLs. Changed to HTTPS as well.

Removed autoreconf as there is no patching being done.

PKG_BUILD_PARALLEL was enabled for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:33:25 -07:00
W. Michael Petullo
f13f51c6fe gstreamer1: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:59:05 -04:00
W. Michael Petullo
3f60075c06 dmapd: update to 0.0.76
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:47:40 -04:00
W. Michael Petullo
27d0fda404 gst1-plugins-good: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:45:49 -04:00
W. Michael Petullo
08bcf793af gst1-plugins-base: update to 1.14.2
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-18 15:44:39 -04:00
Ted Hess
23efd1f3f1
Merge pull request #6775 from neheb/patch-27
shairport-sync: Install /etc/config as 600
2018-08-18 15:33:03 -04:00
Michael Heimpold
77d8472ed5
Merge pull request #6781 from neheb/xml2
libxml2: Fix CVE-2018-9251 and CVE-2018-14567
2018-08-18 13:13:29 +02:00
Rosen Penev
22baa9f3ed python-pyasn1: Update to 0.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 23:14:00 -07:00
Rosen Penev
0d9b5dd468 libxml2: Fix CVE-2018-9251 and CVE-2018-14567
Also added the CPE ID.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 18:46:27 -07:00
Rosen Penev
29ffbead75 tiff: Fix remaining CVEs
Taken from Fedora. Reordered them so as to apply properly.

Added a CPE ID.

Added parallel build for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 18:19:00 -07:00
Daniel Engberg
5988204db7
utils/dbus: Update to 1.12.10
Update dbus to 1.12.10
Remove Steven Barth as maintainer since he hasn't replied to numerous of
reviews requests for several packages within months.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-08-17 23:53:07 +02:00
Michael Heimpold
f8a7546537 php7-pecl-http: update to 3.2.0
Drop already upstreamed patches.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-08-17 23:18:57 +02:00
Michael Heimpold
010dc61d7b libgpiod: update to 1.1.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-08-17 23:18:57 +02:00