Commit Graph

16930 Commits

Author SHA1 Message Date
Rosen Penev 02a7ae6572 libfizz: Update to 2019.10.07.00
Add patch removing boost-thread dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from cc1b52c44a)
2019-10-08 14:47:40 -07:00
Rosen Penev fbc1c29a7d libfolly: Update to 2019.10.07.00
Added patch to remove boost-thread.

Removed uClibc-ng patch. libfolly no longer builds there.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b9000043bf)
2019-10-08 14:47:17 -07:00
Jeffery To 863c1a41b4 python-attrs: Update to 19.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-09 05:21:03 +08:00
Hannu Nyman 3b1cf245fe nano: update to 4.5
Update nano editor to version 4.5.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit bfd66f2d23)
2019-10-07 18:20:40 +03:00
Hannu Nyman 7af62d891a Merge pull request #10165 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
2019-10-07 18:09:35 +03:00
Josef Schlehofer 9fd74cbb02 unbound: Update to version 1.9.4
Fixes CVE-2019-16866

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 1caf170daf)
2019-10-07 01:12:20 +02:00
Stan Grishin aac235151b simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-06 09:34:03 -07:00
Hannu Nyman 68fecc3d65 Merge pull request #10158 from gladiac1337/haproxy-2.0.7-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.7
2019-10-05 17:17:33 +03:00
Christian Lachner 62e42b4720 haproxy: Update HAProxy to v2.0.7
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.7.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-10-05 14:05:19 +02:00
Hannu Nyman 51abacee5e Merge pull request #10152 from jefferyto/python-bpo-38243-34155-openwrt-19.07
[openwrt-19.07] python,python3: Fix CVE-2019-16056, CVE-2019-16935
2019-10-05 11:27:32 +03:00
Hannu Nyman 3ebf25c608 Merge pull request #10144 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix and improvements (check description)
2019-10-05 11:25:57 +03:00
Jeffery To 18add705fa python,python3: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-05 00:04:39 +08:00
Jeffery To 1d6436623a python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:46:39 +08:00
Stan Grishin fe2114d785 simple-adblock: bugfix and improvements (check description)
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-03 18:42:14 -07:00
Hannu Nyman bb1c19ffb8 haveged: convert to procd
Convert haveged init script to use procd

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4f717a6f65)
2019-10-01 23:14:14 +03:00
Hannu Nyman c9ca6037a7 haveged: update to 1.9.8
Update haveged to 1.9.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e5b308308b)
2019-10-01 22:10:30 +03:00
Nuno Goncalves 55ae829a14 watchcat: make compatible with updated busybox ash array handling (closes #10127)
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2019-10-01 19:42:53 +02:00
Eneas U de Queiroz 4bbeb730a5 python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit acf7c540ca)
2019-09-30 16:42:59 -03:00
Eneas U de Queiroz d9b708fa38 oniguruma: update to release 6.9.3
This release incorporates fixes for CVE-2019-13224 and CVE-2019-13225,
and "fixed many problems (found by libfuzzer programs)."

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit b7d0a82a7f)
2019-09-30 16:30:10 -03:00
Josef Schlehofer faf6ec5800 python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:02:40 +02:00
Rosen Penev 7c74b6c45a Merge pull request #10112 from commodo/django-sec-19.07
django: Update to 1.11.24
2019-09-30 00:48:10 -07:00
Rosen Penev 33ee8d1ec3 django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 64a02079da)
2019-09-30 10:27:06 +03:00
William Fleurant d0fff76c2e yggdrasil: bump to 0.3.9
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 7296ff1b5c)
2019-09-29 19:04:31 -07:00
Josef Schlehofer f2a06eb9dc golang: Update to version 1.13.1
Fixes CVE-2019-16276

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 65b7bd6cc0)
2019-09-29 20:42:52 +02:00
Josef Schlehofer 6a25e7f5ff youtube-dl: Update to version 2019.9.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 9ed0d76b34)
2019-09-29 20:42:42 +02:00
Josef Schlehofer e59ac33808 dnscrypt-proxy2: Update to version 2.0.27
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit b9fbb90fd4)
2019-09-29 20:42:31 +02:00
Jan Pavlinec dda4bd1f90 expat: update to version 2.2.7 (security fix)
Fixes:
CVE-2018-20843

Changes:
add PKG_CPE_ID
switch to xz
remove maintainer

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 70c62ef2d7)
2019-09-29 10:00:51 +02:00
Claudius Ellsel 05ad389f41 adblock: More cosmetic changes and more detailed installation instructions to README.md
Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 6121af755d)
2019-09-29 08:01:02 +02:00
Claudius Ellsel df4452ade3 adblock: Cosmetic changes to README.md
Add code blocks for easier reading and change "dns" to "DNS".

Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 088a14e5ce)
2019-09-29 07:59:37 +02:00
Johannes Rothe bbc6a303a1 travelmate: add support for optional args in auto-login script
This can be helpful for example in hotels where you need to
enter a new user/password combination every week.

Signed-off-by: Johannes Rothe <mail@johannes-rothe.de>
(cherry picked from commit a7f87f939d)
2019-09-29 07:58:00 +02:00
Jeffery To 2c829c973b golang: Use new -trimpath option when compiling Go packages
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 22ee6e86a0)
2019-09-29 00:42:22 +02:00
Xingwang Liao c7f1bdc592 golang: Update to 1.13
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry-picked from commit 0849e32659)
2019-09-29 00:42:09 +02:00
Josef Schlehofer da75f8612a netdata: Update to version 1.17.1
Patch 002 - Force Python3 is no longer applying, let's try to throw it
away to see if it is still necessary

Patch 003 - Was backported from the master branch and it was included in
Netdata version 1.17.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 5e89816)
2019-09-28 11:39:48 +02:00
Rosen Penev 4c05bd2481 Merge pull request #10097 from neheb/boooo
[19.07]Update boost and other fixes
2019-09-27 16:07:32 -07:00
Richard Yu 2d6c0988bc dump1090: update to 3.7.2
and use GitHub release tarball instead of git

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry-picked from a6a0f4edee)
2019-09-27 13:07:43 -07:00
Rosen Penev 11e9b5e969 dump1090: Update to version 3.7.1
Repository was moved.

Also cleaned up Makefile slightly.

Ran init script through shellcheck.

Added PKG_BUILD_PARALLEL for faster compilation.

Added several CFLAGS and LDFLAGS for smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f3245e6c7d)
2019-09-27 13:07:18 -07:00
Rosen Penev f3473adf5f cmdpad: Fix compilation with musl
When passing -Wimplicit-function-declaration

Also got rid of std=gnu89. It's easy to patch out.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1b5e4883a4)
2019-09-27 13:05:38 -07:00
Rosen Penev 2b1f19c992 gammu: Update to 1.40.0
Cleaned up Makefile for consistency between packages.

Switched to CMAKE_INSTALL to get rid of the InstallDev section.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2e2929366b)
2019-09-27 13:03:45 -07:00
Rosen Penev 34ac8a8e73 ykpers: Update to 1.20.0
Cleaned up Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from db6e6ac24a)
2019-09-27 13:00:22 -07:00
Rosen Penev 8e95b05074 zstd: Update to 1.4.3
Bugfix release.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 133a02a115)
2019-09-27 12:58:40 -07:00
Rosen Penev 154e0c40cd mpd: Add SoundCloud support for full variant
The libyajl cleanup commit revealed that it was not being installed
correctly. Now that it is, mpd picks it up properly.

Enabled SoundCloud support for the full variant. Disabled for the mini.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 835bc1df03)
2019-09-27 12:56:20 -07:00
Michal Čihař 3efd435bc6 mpd: enable pulseaudio in full package
Signed-off-by: Michal Čihař <michal@cihar.com>
(cherry-picked from 2ed62adc59)
2019-09-27 12:55:53 -07:00
Rosen Penev 7f957cf8ac yajl: Update to modern standards
Replaced git:// link with https:// which gets through firewalls easier.

Replaced archive with .xz. The one currently in the mirrors has the wrong
hash. .xz is also smaller than .gz.

Eliminated already default CMake option.

Eliminated Build/InstallDev with CMAKE_INSTALL.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2abbc83c9d)
2019-09-27 12:54:50 -07:00
Hirokazu MORIKAWA d97123b729 node: fix http/2 DoS
This is a security release.

Node.js, as well as many other implementations of HTTP/2,
have been found
vulnerable to Denial of Service attacks.
See https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
for more information.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 81bccf9068)
2019-09-27 12:44:16 -07:00
Hirokazu MORIKAWA 976fd4e9c1 node: fix host build error on macOS
fix host build error on macOS
reference: https://github.com/openwrt/packages/issues/9616

Related: https://github.com/openwrt/packages/issues/7171
(This correspondence is necessary to build with macOS.)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from c69d5a0241)
2019-09-27 12:43:43 -07:00
Rosen Penev 0164259db0 opencv: Update to 4.1.1
Update Makefile to modern standards.

Switched to local tarballs..xz archives are smaller. The .gz archive that
codeload comes with is 85MB.

Replaced PKG_INSTALL with CMAKE_INSTALL to get rid of Build/InstallDev.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed inactive maintainer.

Added uClibc-ng patches to fix compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f8cd4f094a)
2019-09-27 12:38:40 -07:00
Rosen Penev 5b903f68eb Merge pull request #10084 from BKPepe/sentrysdk-1907
[OpenWrt 19.07] python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:37 -07:00
Rosen Penev d203688738 boost: Switch to blacklist of targets for context
Works around a buildbot bug.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from dc3220736d)
2019-09-27 10:17:24 -07:00
Rosen Penev c4a7a2c3da boost: Update host libraries
It seems newer versions of fbthrift require more libraries.

Also added AR7, RB532, and Lantiq ASE to fiber exclusion.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1f77459ace)
2019-09-27 10:14:21 -07:00
Carlos Miguel Ferreira e3c1765598 boost: Package Version Update (1.71.0) + bugfixes
This commit updates Boost to version 1.71.0 and disables Boost.Context
 for arc and mips64 architectures, since either jump_fcontext or
 getcontext are undefined for those architectures.

It also fixes a bug were Boost.Fiber was not properly disabled for
mips32 and mips64 architectures.

Boost.Coroutine2 option was removed since it was redundant. By selecting
the Coroutine package, Coroutine2 is also installed.

Boost.Fiber has been disabled for target brcm47xx_generic and brcm47xx_legacy
due to misssing opcode support from instruction set.

Boost 1.71.0 brings a new header-only library
 - Boost.Variant2 [1]
   -> A never-valueless, strong guarantee implementation of
      std::variant, from Peter Dimov.

More info about Boost 1.71.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_71_0/libs/variant2/doc/html/variant2.html
[2]: https://www.boost.org/users/history/version_1_71_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
(cherry-picked from 0cd9824623)
2019-09-27 10:13:59 -07:00