Commit Graph

2726 Commits

Author SHA1 Message Date
Kevin Darbyshire-Bryant 72096874d0 libssh: bump to 0.7.6 CVE-2018-10933 fix
Bump from 0.7.5 to 0.7.6.  Upstream changelog:

Fixed CVE-2018-10933
Added support for OpenSSL 1.1
Added SHA256 support for ssh_get_publickey_hash()
Fixed config parsing
Fixed random memory corruption when importing pubkeys

Backported upstream patches since 0.7.6 to fix interactive
authentication issues amongst other things:

9d5cf209 libcrypto: Fix memory leak in evp_final()
10397321 gssapi: Set correct state after sending GSSAPI_RESPONSE (select mechanism OID)
7ad80ba1 server: Fix compile error
acb0e4f4 examples: Explicitly track auth state in samplesshd-kbdint
3fe7510b messages: Check that the requested service is 'ssh-connection'
734e3ce6 server: Set correct state after sending INFO_REQUEST (Kbd Interactive)
e4c6d591 packet: Add missing break in ssh_packet_incoming_filter()
f81ca616 misc: Add strndup implementation if not provides by the OS

Refresh patches.
Remove local backport for OpenSSL 1.1 support as is now in release
Remove PKG_INSTALL & CMAKE vars that are defaulted anyway
Add PKG_CPE_ID:=cpe:/a:libssh:libssh for CVE tracking
Remove BROKEN tag as is no longer broken

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-10-29 09:08:11 +00:00
Rosen Penev eed77a988b libpam: Update to 1.3.0
Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-28 20:27:33 -07:00
Bruno Randolf 42fdfe14a0 websocketpp: Add package (WebSocket++)
WebSocket++ is a header only C++ library that implements RFC6455 The
WebSocket Protocol.

Signed-off-by: Bruno Randolf <br1@einfach.org>
2018-10-28 19:57:08 +00:00
Rosen Penev ea626f0ecd qrencode: Update to 4.0.2
Small Makefile reorganization for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-28 10:15:01 -07:00
Hannu Nyman 5302ac5cfc Merge pull request #7063 from neheb/patch-38
libsearpc: Update to 3.1.0
2018-10-28 18:40:41 +02:00
Hannu Nyman 25e9ced018 Revert "libaio: Update to 0.3.111"
This reverts commit bf9f919551.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-10-28 16:46:26 +02:00
Karl Palsson 6ade0d1933 lib/c-ares: remove duplicate cpe-id
Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2018-10-28 14:21:40 +00:00
Hannu Nyman d65bff264a Merge pull request #7184 from neheb/soup
libsoup: Update to 2.65.1
2018-10-28 15:16:08 +02:00
Hannu Nyman c37f21f668 Merge pull request #6367 from neheb/libaio
libaio: Update to 0.3.111
2018-10-28 14:51:41 +02:00
Hannu Nyman 55c2b406d2 Merge pull request #6626 from neheb/libevdev
libevdev: Update to 1.5.9
2018-10-28 14:47:59 +02:00
Hannu Nyman a0a21f7112 Merge pull request #7055 from neheb/patch-6
pcre2: Update to 10.32
2018-10-28 14:44:11 +02:00
Hannu Nyman 0ac9ccb718 Merge pull request #7157 from neheb/hid
hiredis: Update to 0.14.0
2018-10-28 14:35:05 +02:00
Hannu Nyman 7662fb4cef Merge pull request #6817 from neheb/patch-30
c-ares: Add CPE ID to track CVEs
2018-10-28 14:33:47 +02:00
Hannu Nyman 9b955767fc Merge pull request #6879 from neheb/libartnet
libartnet: Fix compile with GCC7
2018-10-28 14:33:20 +02:00
Hannu Nyman f6b523045c Merge pull request #6826 from neheb/patch-22
cyrus-sasl: Update to 2.1.27-rc8
2018-10-28 14:32:08 +02:00
Hannu Nyman 2c65634748 Merge pull request #6973 from neheb/p11
libp11: Update to 0.4.9
2018-10-28 14:30:21 +02:00
Hannu Nyman edd02d564a Merge pull request #7216 from neheb/patch-9
libopus: Update to 1.3.0
2018-10-28 14:08:40 +02:00
Daniel Engberg e291038cbc sbc: Bump to 1.4
Minor bugfix
Remove Dirk as maintainer, hasn't been active in years

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-10-23 09:29:25 +02:00
Rosen Penev 41f2036afe keyutils: Update to 1.5.11
Added Kerberos dependency as it's required now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-22 19:26:36 -07:00
Rosen Penev 81cb10c597 liboping: Update to 1.10.0
Updated URLs.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-22 19:16:54 -07:00
Rosen Penev 6ad8893dcf libndpi: Update to 2.4
Switched to codeload for simplicity and easier package bumping.

Added PKG_BUILD_PARALLEL for faster compilation.

Reordanized Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-21 18:24:58 -07:00
Rosen Penev 7a024a8f54 libarchive: Update to 3.3.3
Added HTTPS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-21 18:10:32 -07:00
Dirk Brenken a478c21d39 Merge pull request #7219 from neheb/patch-18
libglog: Remove libunwind dependency
2018-10-21 22:48:02 +02:00
Peter Wagner 072fad310f alsa-lib: update to 1.1.7
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-10-21 20:38:37 +02:00
Rosen Penev ca9d59631d libglog: Remove libunwind dependency
Switched to codeload and updated Makefile for consistency between projects

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-20 11:41:16 -07:00
Rosen Penev b177162cdb libopus: Update to 1.3.0
Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-19 17:57:26 -07:00
Rosen Penev 414df31c74 unixodbc: Update to 2.3.7
Switched to HTTP as FTP can be problematic. uscan for example has issues
figuring out the latest version.

Added PKG_CPE_ID for proper CVE tracking.

Reorganized Makefile for consistency with other projects.

Add PKG_FIXUP:=autoreconf, needed to avoid host lib leakage on hosts
with unixodbc installed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
[add PKG_FIXUP:=autoreconf - thanks jow]
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-10-19 19:56:06 +03:00
Stijn Tintel f225f1fd49 Revert "unixodbc: Update to 2.3.7"
This reverts commit 6d6c15e1e9.

The package no longer cross-compiles when building for the x86/64 target
on an x86/64, resulting in the following error:

Package unixodbc is missing dependencies for the following libraries:
libc.so.6
libpthread.so.0

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-10-19 19:24:23 +03:00
Kevin Darbyshire-Bryant 14ad4cb976 libssh: mark as BROKEN due to CVE-2018-10933
The only known user of this library is currently unable to get their
application to work with with the fixed 0.7.6 release of this library.

To prevent accidental use by unknown parties of a flawed library, mark
it as BROKEN.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-10-19 13:04:27 +01:00
Michael Heimpold 32b413015c Merge pull request #7212 from nxhack/bump_63_1
icu: update to 63.1
2018-10-18 17:45:37 +02:00
Karl Palsson 2b50949287 libs/c-ares: finaly cpe id update.
Use the correct base 2.2 CPE id from
https://nvd.nist.gov/products/cpe/search instead of the old id.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-10-18 09:45:46 +00:00
Karl Palsson 9deeb53403 libs/c-ares: fix CPE id
Incorrectly copied from source document.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-10-18 09:00:41 +00:00
Hirokazu MORIKAWA 1efccb1ea1 icu: update to 63.1
ICU 63 updates to CLDR 34 locale data with many additions and corrections,
and some new languages. ICU adds API for number and currency range formatting,
and API for additional Unicode properties and for constructing custom properties.
CLDR and ICU include data for testing readiness for the upcoming Japanese calendar era.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2018-10-18 16:59:15 +09:00
Karl Palsson e5477e3dec lib/c-ares: add PKG_CPE_ID
bump package, but no functional changes

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-10-17 22:37:20 +00:00
Kevin D-B f8638be659 Merge pull request #6716 from neheb/patch-26
file: Update to 5.34
2018-10-16 07:38:09 +01:00
Rosen Penev 8d4b700597 libsearpc: Update to 3.1.0
Switch to codeload for simplicity. Rearranged Makefile a bit for consistency between Makefiles.

Removed version dependency for seafile-server to avoid breaking builds.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-14 18:20:07 -07:00
Rosen Penev bffa9be004 libsoup: Update to 2.65.1
Added PKG_CPE_ID for proper CVE tracking.

Added PKG_BUILD_PARALLEL for faster compilation.

Added --disable-gtk-doc-html to fix parallel compilation.

Cleaned up and reorganized configure flags.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-13 21:10:03 -07:00
Peter Wagner 5837cc1038 glib2: Install glib binaries
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-10-13 12:30:14 +02:00
Hannu Nyman 0a9ed54ac3 Merge pull request #7175 from sartura/sysrepo-release-0.7.5
Sysrepo release 0.7.5
2018-10-12 16:36:05 +03:00
Rosen Penev d033024be9 libpsl: Disable documentation and enable parallel building
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-11 17:40:12 -07:00
Mislav Novakovic 0ebbcf792e libnetconf2: update to 0.12-r1
PR includes switch to codeload tarballs.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2018-10-11 13:50:12 +02:00
Mislav Novakovic 77307df42b libyang: update to 0.16-r1
PR includes switch to codeload tarballs.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2018-10-11 13:50:12 +02:00
Hannu Nyman e022528b60 Merge pull request #7132 from jzapater/jj
libical: update to version 3.0.4
2018-10-10 20:26:15 +03:00
Daniel Engberg e6599366e5 libs/libx264: Update to snapshot 20181006
Update libx264 to snapshot 20181006
Add 464fp to ASM blacklist (doesn't support AltiVec instructions)
Enable LTO by default for platforms that uses ASM
Remove a few whitespaces (cosmetic)

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-10-09 07:58:37 +02:00
Rosen Penev 8e7a7cf544 hiredis: Update to 0.14.0
Added PKG_BUILD_PARALLEL for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-08 13:47:18 -07:00
Ted Hess 988a9886d4 Merge pull request #7153 from neheb/xml
xmlrpc-c: Update to 1.43.08
2018-10-08 14:07:49 -04:00
Jianhui Zhao 44577488a6 libuwsc: update to 3.1.0
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
2018-10-08 22:26:21 +08:00
Jose Zapater 3633868250 libical: update to version 3.0.4
Signed-off-by: Jose Zapater <jzapater@gmail.com>
2018-10-08 12:21:18 +02:00
Rosen Penev 2ebbfc6ef1 xmlrpc-c: Update to 1.43.08
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-07 15:06:53 -07:00
Stijn Tintel bf47fe3d27 libpfring: disable libnl
When libnl is built, libpfring links against it. This causes the build
to fail due to a missing dependency. Disable libnl to avoid this.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-10-07 13:21:51 +03:00