Commit Graph

1663 Commits

Author SHA1 Message Date
Luiz Angelo Daros de Luca 98ca3621cf libvpx: backport security fixes
Fixes CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433.

From: openwrt/telephony#492

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2019-12-09 23:33:09 -03:00
Archil Pirmisashvili cf4e50ab7b Compilation fix & upgrade to version 0.8.1
Signed-off-by: Archil Pirmisashvili <kulipator@gmail.com>
2019-11-13 22:30:33 +02:00
RF-Networks 1b64cb83d6 Libmraa compilation fix
Signed-off-by: Archil Pirmisashvili <kulipator@gmail.com>
2019-11-10 21:56:28 +02:00
RF-Networks d029658323 Libmraa compilation fix
Signed-off-by: Archil Pirmisashvili <kulipator@gmail.com>
Signed-off-by: RF-Networks <archil@rf-networks.com>
2019-11-10 21:13:59 +02:00
Rosen Penev 340d5ce71e protobuf-c: Fix typo on build dependency.
This was fixed in 3bcaa7a4fe

Backported the fix here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-01 20:27:06 -07:00
Rosen Penev e9c2ba68f7 libgd: Properly disable iconv support
HAVE_ICONV and HAVE_ICONV_H are two different headers that both need to
evaluate to false. Added the extra CONFIGURE_VARS.

This can be verified by passing -Werror=implicit-function-declaration

Added PKG_LICENSE_FILES

Updated homepage URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from bf2f1a0263)
2019-11-01 20:24:58 -07:00
Josef Schlehofer f2812716fd Merge pull request #9997 from flyn-org/openldap-18.06
openldap: update to 2.4.48
2019-10-14 21:21:03 +02:00
Rosen Penev 728edfbdcd Merge pull request #10108 from BKPepe/expat-1806
[OpenWrt 18.06] expat: Update to version 2.2.9
2019-10-11 12:49:51 -07:00
Rosen Penev 00133e1e07 Merge pull request #10118 from BKPepe/libgcrypt-1806
[OpenWrt 18.06] libgcrypt: backport fix for CVE-2019-13627
2019-09-30 13:30:46 -07:00
Josef Schlehofer f19f9ffc9f expat: Update to version 2.2.9
Fixes CVE-2019-15903

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-29 11:30:20 +02:00
Jan Pavlinec c0dea72f92 expat: update to version 2.2.7 (security fix)
Fixes:
CVE-2018-20843

Changes:
add PKG_CPE_ID
switch to xz
remove maintainer

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-29 11:29:57 +02:00
Michael Heimpold deae9b348a expat: fix host build issue with docbook
Additionally to the fix issued for #6923, we need to disable the docbook
usage also for the host build. This prevents the following error:

checking for docbook2man... docbook2man
configure: error: Your local docbook2man was found to work with SGML rather
  than XML. Please install docbook2X and use variable DOCBOOK_TO_MAN to point
  configure to command docbook2x-man of docbook2X.
  Or use DOCBOOK_TO_MAN="xmlto man --skip-validation" if you have xmlto around.
  You can also configure using --without-docbook if you can do without a man
  page for xmlwf.

Signed-off-by: Michael Heimpold <michael.heimpold@i2se.com>
2019-09-29 11:29:52 +02:00
Andy Walsh fec2709d78 expat: disable docbook
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-09-29 11:29:47 +02:00
Daniel Engberg fefe8e1f79 lib/expat: Update to 2.2.6
Update (lib)expat to 2.2.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2019-09-29 11:29:31 +02:00
Rosen Penev d98310a3fb Merge pull request #9798 from ja-pa/zmq-security-fix-18.06
[OpenWrt 18.06] zeromq: update to version 4.1.7 (security fix)
2019-09-27 12:24:47 -07:00
Josef Schlehofer 7ec22baf1e libgcrypt: backport fix for CVE-2019-13627
Refresh patches due to offsets

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 20:27:57 +02:00
Josef Schlehofer 9265be5448 zmq: fix CVE-2019-13132
- Use HTTPS in their website
- Remove unnecessary space between PKG_SOURCE_URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-24 14:18:05 +02:00
W. Michael Petullo 3772cdb3d1 openldap: update to 2.4.48
Fixes CVE-2019-13565.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-15 13:28:11 -04:00
Rosen Penev bbc22a721a openldap: Add static function declaration
Fixes compilation with -Werror=implicit-function-declaration .

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-15 13:27:32 -04:00
Val Kulkov c272beb439 openldap: version update and new build parameters
This patch updates OpenLDAP to 2.4.47, introduces new build
parameters and places openldap-server, openldap-utils and
libopenldap under a separate menu item in Network.

OpenLDAP is difficult to find in menuconfig at present. Making
a separate menu item for OpenLDAP for selection of packages and
enabling or disabling build parameters makes better sense.

To have access to the loglevel directive, OpenLDAP must be built
with debugging information. Having access to the loglevel directive
is essential during the initial configuration of OpenLDAP server.

International users may want to enable ICU support to have access
to international characters.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-15 13:26:13 -04:00
Daniel Engberg ec029b9ae0 openldap: Switch tarball sources to https and http
Switch from ftp which can be broken on corp firewalls to https and http.
Mirrors taken from https://www.openldap.org/software/download/ and
https://www.openldap.org/software/download/OpenLDAP/MIRRORS
Place master site as last resort.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-15 13:25:22 -04:00
Rosen Penev fded0497e4 Merge pull request #9789 from ja-pa/libarchive-security-fix-18.06
[OpenWrt 18.06] libarchive: update to version 3.4.0 (security fix)
2019-08-22 18:18:46 -07:00
Jan Pavlinec 232df28216 libarchive: update to version 3.4.0 (security fix)
Fixes:
CVE-2019-1000019
CVE-2019-1000020
CVE-2018-1000880
CVE-2018-1000879
CVE-2018-1000878
CVE-2018-1000877

Changes:
add bsdtar libopenssl variant
switch to github codeload
polish tab/spaces

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-08-21 17:49:29 +02:00
Matthias Schiffer 41a85be714 libuecc: update URL and PKG_SOURCE_URL
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2019-08-21 16:18:18 +02:00
Rosen Penev b29ecaa111 libinput: Add missing header to fix compilation
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 671f0363a4)
2019-08-13 22:22:27 -07:00
Eneas U de Queiroz 3414ca250e libglog: fix removing libunwind dependency
ac_cv_header_libunwind_h needs to be set to 0, as ac_cv_have_libunwind_h
overwritten based on the former's value.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from ec317934b2)
2019-08-13 22:21:06 -07:00
Eneas U de Queiroz e41a914bf2 libseccomp: workaround a recursive dependency
DEPENDS:=@!arc is causing a recursive dependency because of the optional
selection of libseccomp by util/lxc.  The workaround hides the package
in Package/libseccomp/config instead.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from e29483d7e2)
2019-08-13 15:21:46 -07:00
Rosen Penev bb1882d294 boost: Fix compilation with uClibc-ng
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 053faa31e5)
2019-08-13 15:09:52 -07:00
Daniel Golle 29e7e06191 libudev-fbsd: update to git source as of 2017-12-16
Remove patches 001-fix-unused.patch and 002-replace-nitems.patch,
similar fixes to make libudev-fbsd compile were applied upstream.
Refresh remaining patches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry-picked from 58f1de60f8)
2019-08-13 14:56:53 -07:00
Josef Schlehofer 4bda1ca542 icu: fix patch, which adds big endian ARM support
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-13 13:25:52 +02:00
Eneas U de Queiroz fa384e518f libgee: copy vapi files to versioned vala dir
The version is obtained via `valac --api-version`

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from fb4b5c5701)
2019-08-12 17:09:55 -07:00
Eneas U de Queiroz 2d59ec88d8 libgee: use unversioned vala dir, misc fixes
Copy vapi files to unversioned vala dir.
Added vala/host to PKG_BUILD_DEPENDS.
Removed TARGET_LDFLAGS
Removed copyright lines

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from 2cf76d5278)
2019-08-12 17:09:27 -07:00
Rosen Penev d7a071f4ae icu: Fix patch from faulty backport
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-12 16:05:04 -07:00
Mislav Novakovic 983bd03703 protobuf-c: add build time dependency protobuf
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
(cherry-picked from a35581902c)
2019-08-11 13:01:57 -07:00
Rosen Penev ca0e429e25 icu: Backport ARMEB support patch
This should fix php compilation on PPC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from a958f49bd0)
2019-08-11 12:56:03 -07:00
Yousong Zhou fb0566686d libsoc: fix compilation error caused by multiple goals on make
Error of the following kind can happen when parallel build with goals "all" and
"install" both specified on the command line.  Seems like make can parallelly
build for both targets causing race conditions

	make[3]: Entering directory `/tmp/tmp.HIR3tEIqBb/build_dir/target-mips_24kc_musl/libsoc-2016-12-22-5b788d4d'
	Making all in lib
	Making install in lib
	make[4]: Entering directory `/tmp/tmp.HIR3tEIqBb/build_dir/target-mips_24kc_musl/libsoc-2016-12-22-5b788d4d/lib'
	  CC       libsoc_la-gpio.lo
	make[4]: Entering directory `/tmp/tmp.HIR3tEIqBb/build_dir/target-mips_24kc_musl/libsoc-2016-12-22-5b788d4d/lib'
	  CC       libsoc_la-spi.lo
	  CC       libsoc_la-gpio.lo
	  CC       libsoc_la-file.lo
	  CC       libsoc_la-i2c.lo
	  CC       libsoc_la-spi.lo
	  CC       libsoc_la-pwm.lo
	  CC       libsoc_la-board.lo
	  CC       libsoc_la-file.lo
	  CC       libsoc_la-conffile.lo
	  CC       libsoc_la-debug.lo
	  CC       libsoc_la-pwm.lo
	  CC       libsoc_la-conffile.lo
	  CCLD     libsoc.la
	OpenWrt-libtool: link: `libsoc_la-pwm.lo' is not a valid libtool object
	make[4]: *** [libsoc.la] Error 1

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from 19bde8da68)
2019-08-03 12:23:33 -07:00
Rosen Penev de750bba0c libdouble-conversion: Update to 3.1.4
Added patch to fix compilation on big endian ARM.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 4252d20f6a)
2019-08-03 12:13:32 -07:00
Rosen Penev 49a6444ab4 libdouble-conversion: Update to 3.1.1
Switched to codeload and updated the Makefile to standards.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 9da161b8ae)
2019-08-03 12:13:00 -07:00
Rosen Penev 056cad1e0e libaio: Update to 0.3.112
Replace inactive maintainer with myself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 7cd204e99e)
2019-08-03 12:10:23 -07:00
Rosen Penev b4e4e5a002 libaio: Backport DESTDIR patch to simplify the Makefile
Fixes issue where OpenWrt CFLAGS like relro were not being passed.

Updated license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 5e34f4a32b)
2019-08-03 12:09:57 -07:00
Rosen Penev 7ccc104c96 libaio: Update to 0.3.111
Switched to new upstream at pagure.io.

Refreshed debian patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 9428e4cbd2)
2019-08-03 12:09:32 -07:00
Rosen Penev 47e4537fd9 quasselc: Fix compilation with uClibc-ng
nls.mk is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 54e6f29df1)
2019-08-03 12:05:15 -07:00
Rosen Penev 59f7eb5e1f libartnet: Fix compilation with GCC8
Previous GCC7 fix was incorrect and GCC8 correctly complains about it.
Fix it properly.

Also cleaned up the Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fac6f0e0a5)
2019-07-22 20:27:56 -07:00
Rosen Penev e00521bc76 poco: Do not build on ARC
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(ported from ec2f632603)
2019-07-22 20:26:26 -07:00
Rosen Penev 8923eecd3b elektra: Fix compilation with uClibc-ng
Add patch that checks for libiconv instead of iconv. nls.mk handles this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-07-22 20:17:21 -07:00
Rosen Penev 24ad87702f elektra: Fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-07-22 20:17:14 -07:00
Rosen Penev 4870eab081 loudmouth: Fix compilation with uClibc-ng
nls.mk must be included.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from e69d5dc1d5)
2019-07-22 20:11:23 -07:00
Rosen Penev b1adbbe5b1 loudmouth: Disable debug and fix no deprecated API compilation
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 788fda356e)
2019-07-22 20:10:52 -07:00
Michael Heimpold d90a035c1f libxml2: update to 2.9.9
Also drop the CVE patches which are already covered by this new release.

Compile tested for and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d5f0331c91)
2019-06-21 07:03:05 +02:00
Rosen Penev 5aa670ed36 libxml2: Fix CVE-2018-14404
Embarrasingly, I missed this one last time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit b7870ea711)
2019-06-21 07:01:55 +02:00