Commit graph

11059 commits

Author SHA1 Message Date
Jakub Piotr Cłapa
b83b26c33d perl: fixed host compilation of static perl on MacOS
All symbols on MacOS are prefixed with an underscore which
interfered with the filtering mechanism (added in perl 5.28)
for extension libraries to be linked into static perl.

Signed-off-by: Jakub Piotr Cłapa <jpc@loee.pl>
2019-11-10 14:09:56 +01:00
Rosen Penev
f496ed58d3
Merge pull request #9671 from BKPepe/clamav1806
[OpenWrt 18.06] clamav: update to version 0.100.3
2019-11-09 18:52:17 -08:00
Rosen Penev
340d5ce71e protobuf-c: Fix typo on build dependency.
This was fixed in 3bcaa7a4fe

Backported the fix here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-01 20:27:06 -07:00
Rosen Penev
e9c2ba68f7 libgd: Properly disable iconv support
HAVE_ICONV and HAVE_ICONV_H are two different headers that both need to
evaluate to false. Added the extra CONFIGURE_VARS.

This can be verified by passing -Werror=implicit-function-declaration

Added PKG_LICENSE_FILES

Updated homepage URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from bf2f1a0263)
2019-11-01 20:24:58 -07:00
Yousong Zhou
e312133081 wget: provides gnu-wget
So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
[port to 18.06 to fix acme package backport]
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-10-31 10:21:25 +01:00
Toke Høiland-Jørgensen
9f4f78da15 acme: Bring up-to-date with master
There are quite a few bugfixes in the version of the ACME package in
master, and the old version in 18.06 have some issues as seen in #10328.
This commit ports over all changes from the master branch in one go.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-10-29 09:48:37 +01:00
Luiz Angelo Daros de Luca
938818ec41 ruby: bump to 2.5.7
2.5.7 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.5.6 fixes:
* Multiple jQuery vulnerabilities in RDoc
* About 40 bugs

Changelog: https://github.com/ruby/ruby/compare/v2_5_5...v2_5_7

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2019-10-27 11:40:26 -03:00
Josef Schlehofer
0f0c062d3c
python-cryptography: fix CVE-2018-10903
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-25 01:30:27 +02:00
Josef Schlehofer
5a9d222e5c
python-cryptography: Add support for LibreSSL 2.7.x
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-25 01:30:27 +02:00
Hannu Nyman
5edcc9f30e
Merge pull request #10324 from jefferyto/python-2.7.17-openwrt-18.06
[openwrt-18.06] python: Update to 2.7.17, refresh patches
2019-10-21 21:54:57 +03:00
Jeffery To
f184eb5f0e python: Update to 2.7.17, refresh patches
Patches already merged and so removed:
* 019-bpo-36216-Add-check-for-characters-in-netloc-that-normalize-to-separators-GH-12216.patch
* 020-bpo-36216-Only-print-test-messages-when-verbose-GH-12291.patch
* 021-2.7-bpo-35121-prefix-dot-in-domain-for-proper-subdom.patch
* 027-bpo-38243-Escape-the-server-title-of-DocXMLRPCServer.patch
* 028-bpo-34155-Dont-parse-domains-containing-GH-13079.patch

Patches no longer necessary and so removed:
* 017_lib2to3_fix_pyc_search.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 83b300aa83)
2019-10-22 01:04:43 +08:00
Rosen Penev
4d9282a4d6
Merge pull request #10312 from stangri/18.06-vpnbypass
[18.06] vpnbypass: bugfix: PROCD command not found on stop
2019-10-21 09:14:14 -07:00
Stan Grishin
7001d4748d vpnbypass: bugfix: PROCD command not found on stop
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-20 21:21:30 -07:00
Rosen Penev
7dbad81f8d
Merge pull request #10279 from BKPepe/sudo-18.06
[OpenWrt 18.06] sudo: Update to version 1.8.28p1
2019-10-20 10:16:28 -07:00
Josef Schlehofer
4c72f8dd66
sudo: Update to version 1.8.28p1
- Use HTTPS for downloading tarball and for their website
- Add PKG_CPE_ID
- Remove inactive maintainer
- Refreshed patches
Fixes: CVE-2019-14287

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-20 09:06:42 +02:00
Jan Pavlinec
b504ac5532
irssi: update to version 1.2.2 (security fix)
Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit b42159dea3)
2019-10-20 00:23:44 +02:00
Noah Meyerhans
e98bc6874d Merge branch 'pr/10215' into openwrt-18.06
https://github.com/openwrt/packages/pull/10215
2019-10-16 08:38:11 -07:00
Josef Schlehofer
f2812716fd
Merge pull request #9997 from flyn-org/openldap-18.06
openldap: update to 2.4.48
2019-10-14 21:21:03 +02:00
Rosen Penev
22a272ccf9
Merge pull request #10237 from jefferyto/gammu-fix-lib-symlinks-openwrt-18.06
[openwrt-18.06] gammu: Fix lib symlinks
2019-10-14 09:29:16 -07:00
Jeffery To
6e2b8c2da6 gammu: Fix lib symlinks
This fixes the symlinks for libGammu.so and libgsmsd.so. Previously, the
symlinks were overwritten by $(INSTALL_BIN) with copies of their
sources.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-14 17:12:41 +08:00
Josef Schlehofer
9c7cf98805
bind: Update to version 9.11.11
Change License to MPL-2.0 and add PKG_LICENSE_FILES.
For more details look at https://www.isc.org/blogs/bind9-adopts-the-mpl-2-0-license-with-bind-9-11-0/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-13 11:04:51 +02:00
Rosen Penev
728edfbdcd
Merge pull request #10108 from BKPepe/expat-1806
[OpenWrt 18.06] expat: Update to version 2.2.9
2019-10-11 12:49:51 -07:00
Rosen Penev
a8ca566840
Merge pull request #10167 from BKPepe/unbound18.06
[OpenWrt 18.06] unbound: Update to version 1.9.4
2019-10-08 13:58:14 -07:00
Alexandru Ardelean
e84deea057
python3-pip: fix install rule
This seems to have slipped for some time. No idea if it ever worked.
It could be that this worked at some point.

In any case, the shebang is properly updated now.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1b96dc0171)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(bump PKG_RELEASE for python3-pip)
2019-10-08 09:48:19 +02:00
Hannu Nyman
c4710f7805 nano: update to 4.5
Update nano editor to version 4.5.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit bfd66f2d23)
(fix also license tag and add CVE)
2019-10-07 18:24:57 +03:00
Hannu Nyman
cae699fc44
Merge pull request #10164 from stangri/18.06-simple-adblock
[18.06] simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
2019-10-07 18:08:58 +03:00
Josef Schlehofer
c674fa684d
unbound: Update to version 1.9.4
Fixes CVE-2019-16866

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-07 01:45:38 +02:00
Eric Luehrsen
0b8eee5fbd
unbound: update to 1.9.3
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-10-07 01:45:24 +02:00
Stan Grishin
dba87ee0cc simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-06 09:33:48 -07:00
Hannu Nyman
5452bb8332
Merge pull request #10156 from gladiac1337/haproxy-1.8.21-openwrt-18.06
[openwrt-18.06] haproxy: Update HAProxy to v1.8.21
2019-10-05 17:17:46 +03:00
Christian Lachner
1bb725133e haproxy: Update HAProxy to v1.8.21
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-1.8.21.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-10-05 13:26:02 +02:00
Hannu Nyman
da5a8e5962
Merge pull request #10155 from jefferyto/python-bpo-38243-34155-openwrt-18.06
[openwrt-18.06] python: Fix CVE-2019-16056, CVE-2019-16935
2019-10-05 11:27:49 +03:00
Hannu Nyman
ad7b3c6184
Merge pull request #10143 from stangri/18.06-simple-adblock
[18.06] simple-adblock: bugfix and improvements (check description)
2019-10-05 11:26:08 +03:00
Jeffery To
dad9a1a2a4 python: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-05 00:58:08 +08:00
Stan Grishin
b677e3eee3 simple-adblock: bugfix and improvements (check description)
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-03 18:42:02 -07:00
Rosen Penev
7a8808940c
clamav: Remove build hacks
Simplified the Makefile and fixes compilation with uClibc-ng. Also added
IPv6 support.

Took the time to clean up the Makefile with other useful options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit 012e4c1)
2019-10-03 23:03:21 +02:00
Josef Schlehofer
eef89800eb
clamav: update to version 0.100.3
Fixes CVEs:
0.100.1
- CVE-2017-16932
- CVE-2018-0360
- CVE-2018-0361
0.100.2
- CVE-2018-15378
- CVE-2018-14680
- CVE-2018-14681
- CVE-2018-14682
0.100.3
- CVE-2019-1787
- CVE-2019-1788
- CVE-2019-1789

Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-03 22:27:21 +02:00
Rosen Penev
b60caa4940
Merge pull request #10120 from BKPepe/youtubedl-1806
[OpenWrt 18.06] youtube-dl: Update to version 2019.9.28
2019-10-02 12:05:53 -07:00
Hannu Nyman
2d822fb624 haveged: convert to procd
Convert haveged init script to use procd

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4f717a6f65)
2019-10-01 23:18:46 +03:00
Hannu Nyman
4fe703393b haveged: update to 1.9.8
Update haveged to 1.9.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e5b308308b)
2019-10-01 22:11:11 +03:00
Josef Schlehofer
36919e51f4
youtube-dl: Update to version 2019.9.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-30 23:23:16 +02:00
Rosen Penev
00133e1e07
Merge pull request #10118 from BKPepe/libgcrypt-1806
[OpenWrt 18.06] libgcrypt: backport fix for CVE-2019-13627
2019-09-30 13:30:46 -07:00
Josef Schlehofer
126cdd7c6b
python3: fix CVE-2019-16056 and delete two patches
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-30 17:23:40 +02:00
Josef Schlehofer
0d9eeca453
python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:03:35 +02:00
Josef Schlehofer
f19f9ffc9f
expat: Update to version 2.2.9
Fixes CVE-2019-15903

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-29 11:30:20 +02:00
Jan Pavlinec
c0dea72f92
expat: update to version 2.2.7 (security fix)
Fixes:
CVE-2018-20843

Changes:
add PKG_CPE_ID
switch to xz
remove maintainer

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-29 11:29:57 +02:00
Michael Heimpold
deae9b348a
expat: fix host build issue with docbook
Additionally to the fix issued for #6923, we need to disable the docbook
usage also for the host build. This prevents the following error:

checking for docbook2man... docbook2man
configure: error: Your local docbook2man was found to work with SGML rather
  than XML. Please install docbook2X and use variable DOCBOOK_TO_MAN to point
  configure to command docbook2x-man of docbook2X.
  Or use DOCBOOK_TO_MAN="xmlto man --skip-validation" if you have xmlto around.
  You can also configure using --without-docbook if you can do without a man
  page for xmlwf.

Signed-off-by: Michael Heimpold <michael.heimpold@i2se.com>
2019-09-29 11:29:52 +02:00
Andy Walsh
fec2709d78
expat: disable docbook
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-09-29 11:29:47 +02:00
Daniel Engberg
fefe8e1f79
lib/expat: Update to 2.2.6
Update (lib)expat to 2.2.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-09-29 11:29:31 +02:00
Josef Schlehofer
c64a4e86c3
Merge pull request #9893 from BKPepe/bind-18.06
[OpenWrt 18.06] bind: update to version 9.11.10
2019-09-28 11:52:27 +02:00