Commit Graph

2726 Commits

Author SHA1 Message Date
Dirk Brenken 2dd81d6d71 Merge pull request #6885 from neheb/ldns
ldns: Fix two CVEs
2018-09-03 16:09:42 +02:00
Michael Heimpold 76b915c249 expat: fix host build issue with docbook
Additionally to the fix issued for #6923, we need to disable the docbook
usage also for the host build. This prevents the following error:

checking for docbook2man... docbook2man
configure: error: Your local docbook2man was found to work with SGML rather
  than XML. Please install docbook2X and use variable DOCBOOK_TO_MAN to point
  configure to command docbook2x-man of docbook2X.
  Or use DOCBOOK_TO_MAN="xmlto man --skip-validation" if you have xmlto around.
  You can also configure using --without-docbook if you can do without a man
  page for xmlwf.

Signed-off-by: Michael Heimpold <michael.heimpold@i2se.com>
2018-09-03 13:39:04 +02:00
Andy Walsh da1d5de868 libtirpc: update to 1.1.4
* update to 1.1.4
* remove merged patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-03 10:06:54 +02:00
Rosen Penev e3fd149ae2 p11-kit: Update to 0.23.14
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-09-02 14:50:54 -07:00
Ted Hess b2b44c9f3e libv4l: Upgrade to 1.14.2. Adding RDS and CEC components
Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-09-01 15:18:28 -04:00
Ted Hess b01d2c5a72 Merge pull request #6910 from neheb/patch-35
libupnp: Update to 1.6.25
2018-09-01 12:02:34 -04:00
Rosen Penev 1b93344924 libupnp: Update to 1.6.25
Added PKG_BUILD_PARALLEL for faster compilation.

Removed copyright line.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-09-01 08:31:20 -07:00
Ted Hess a603a9a26a Merge pull request #6919 from neheb/tdb
tdb: Remove libbsd dependency
2018-09-01 10:08:32 -04:00
Andy Walsh 6186f46d2e expat: disable docbook
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-09-01 14:16:16 +02:00
Rosen Penev 33dc529e00 tdb: Remove libbsd dependency
libbsd gets picked up since it's no longer limited to glibc.

Patch identical to libtalloc one. Same codebase.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-31 16:48:35 -07:00
Ted Hess 53aa4049a6 Merge pull request #6898 from diizzyy/patch-11
lib/expat: Update to 2.2.6
2018-08-29 13:23:17 -04:00
Ted Hess 72a46ce355 libtalloc: Remove libbsd dependencies. Add myself as maintainer
Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-08-28 18:21:14 -04:00
Daniel Engberg 499f964f0f libs/sqlite: Update to 3.24.0
Update sqlite to 3.24.0

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-08-28 22:44:54 +02:00
Daniel Engberg 305fa09524 lib/expat: Update to 2.2.6
Update (lib)expat to 2.2.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-08-28 22:42:05 +02:00
Dirk Brenken 2e54c41a24 Merge pull request #6798 from MikePetullo/vips
vips: update to 8.6.5
2018-08-27 09:59:45 +02:00
Dirk Brenken fd28123001 Merge pull request #6846 from jsiverskog/protobuf_c_change_maintainer
protobuf-c: Change maintainer
2018-08-27 09:41:21 +02:00
Rosen Penev a430500ffb tiff: Fix CVE-2017-17095
Fedora does not have a fix for this but Debian does. Took fix from there.

There are two more CVEs as reported by uscan but I can't seem to find
patches for those.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-26 21:23:50 -07:00
Rosen Penev 7f561b97c3 ldns: Fix two CVEs
CVE-2017-1000231 and CVE-2017-1000232.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-26 21:05:49 -07:00
W. Michael Petullo d71da004d9 keyutils: add new package
This is based on earlier work by Tobias Waldvogel.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-26 02:37:40 -04:00
Luiz Angelo Daros de Luca 8ea219b03f libvpx: add PKG_CPE_ID id
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-08-26 02:28:37 -03:00
Rosen Penev 6d51a4091c libartnet: Fix compile with GCC7
error: memset' used with length equal to number of elements without
multiplication by element size

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-25 22:14:07 -07:00
Rosen Penev 3f3eda645b file: Update to 5.34
Get rid of autoreconf to speed up build.

Fixed project URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-24 15:18:21 -07:00
W. Michael Petullo c06e5ba978 vips: update to 8.6.5
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-08-24 05:53:17 -04:00
Rosen Penev 853e9d1c38 libextractor: Update to 1.7
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-23 14:46:19 -07:00
Martin Schiller be0e664fb9 libiio: add missing dependency to zlib
Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2018-08-23 08:52:59 +02:00
Ted Hess d97e89d256 Merge pull request #6828 from neheb/patch-32
freetype: Add PKG_CPE_ID for proper CVE tracking
2018-08-22 18:42:59 -04:00
Ted Hess 31573ca348 Merge pull request #6816 from neheb/patch-4
avahi: Add CPE ID to track CVEs
2018-08-22 16:03:41 -04:00
Ted Hess 1417cec3dd Merge pull request #6837 from neheb/patch-33
giflib: Add PKG_CPE_ID for proper CVE tracking
2018-08-22 15:58:48 -04:00
Ted Hess d67647f64f Merge pull request #6827 from neheb/flac
flac: Fix CVE-2017-6888
2018-08-22 15:57:16 -04:00
Michael Heimpold 8d059948be Merge pull request #6839 from neheb/xml2
libxml2: Fix CVE-2018-14404
2018-08-22 21:24:38 +02:00
Jacob Siverskog f3d2f1698c protobuf-c: Change maintainer
Change maintainer to Rosen Penev as agreed upon
(https://github.com/openwrt/packages/pull/6778#issuecomment-414479840).

Signed-off-by: Jacob Siverskog <jacob@teenage.engineering>
2018-08-22 17:47:19 +02:00
Hannu Nyman 4e5822a2bc Merge pull request #6822 from ClaymorePT/boost_1.68.0
boost: Package Version Update -> 1.68.0
2018-08-22 18:02:38 +03:00
Dirk Brenken 40e35d14eb Merge pull request #6825 from neheb/patch-21
confuse: Update to 3.2.2
2018-08-22 16:50:48 +02:00
Dirk Brenken a3e8990510 Merge pull request #6645 from neheb/patch-16
libdmapsharing: Update to 3.9.2
2018-08-22 16:47:03 +02:00
Dirk Brenken 28fbe2369f Merge pull request #6778 from neheb/proto
protobuf-c: Update to 1.3.1
2018-08-22 16:34:34 +02:00
Dirk Brenken 309a1fb200 Merge pull request #6829 from zhaojh329/libuwsc
libuwsc: Update to 2.0.5
2018-08-22 16:27:35 +02:00
Rosen Penev b7870ea711 libxml2: Fix CVE-2018-14404
Embarrasingly, I missed this one last time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 13:59:56 -07:00
Rosen Penev 9c43fd81d5 gnutls: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 12:47:25 -07:00
Rosen Penev 3f20518a34 giflib: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 12:44:24 -07:00
Jianhui Zhao 826e9366b0 libuwsc: Update to 2.0.5
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
2018-08-21 18:11:28 +08:00
Rosen Penev 456ae2f541 freetype: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:40:57 -07:00
Rosen Penev 20fe720732 flac: Fix CVE-2017-6888
Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:38:07 -07:00
Rosen Penev 4c59ee99e9 confuse: Update to 3.2.2
Fix for CVE-2018-14447

God rid of pointless autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:59:34 -07:00
Rosen Penev 0e29ec3ca0 cyrus-sasl: Update to 2.1.27-rc8
Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:53:53 -07:00
Carlos Miguel Ferreira e0e80c1d2c boost: Package Version Update -> 1.68.0
This package update provides one new library:
 - YAP: An expression template library for C++14 and later, from Zach Laine [1].

More info can be found at the usual place [2].

[1] : https://www.boost.org/libs/yap/
[2] : https://www.boost.org/users/history/version_1_68_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
2018-08-21 02:13:59 +01:00
Rosen Penev 9be580359e c-ares: Add CPE ID to track CVEs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:13:18 -07:00
Rosen Penev 61cdf7b4d6 avahi: Add CPE ID to track CVEs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:05:41 -07:00
Jiri Slachta e3681cb107 Merge pull request #6780 from neheb/tiff
tiff: Fix remaining CVEs
2018-08-19 19:10:32 +02:00
Rosen Penev e7aea55d56 libfastjson: Update to 0.99.8 + switch to tarball
Using the tarball allows getting rid of autoreconf and speeding up the build.
Also easier to bump the package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 14:01:36 -07:00
Michael Heimpold 77d8472ed5 Merge pull request #6781 from neheb/xml2
libxml2: Fix CVE-2018-9251 and CVE-2018-14567
2018-08-18 13:13:29 +02:00