Commit Graph

15469 Commits

Author SHA1 Message Date
Hannu Nyman 3ebf25c608 Merge pull request #10144 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix and improvements (check description)
2019-10-05 11:25:57 +03:00
Jeffery To 1d6436623a python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:46:39 +08:00
Stan Grishin fe2114d785 simple-adblock: bugfix and improvements (check description)
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-03 18:42:14 -07:00
Hannu Nyman bb1c19ffb8 haveged: convert to procd
Convert haveged init script to use procd

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4f717a6f65)
2019-10-01 23:14:14 +03:00
Hannu Nyman c9ca6037a7 haveged: update to 1.9.8
Update haveged to 1.9.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e5b308308b)
2019-10-01 22:10:30 +03:00
Nuno Goncalves 55ae829a14 watchcat: make compatible with updated busybox ash array handling (closes #10127)
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2019-10-01 19:42:53 +02:00
Eneas U de Queiroz 4bbeb730a5 python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit acf7c540ca)
2019-09-30 16:42:59 -03:00
Eneas U de Queiroz d9b708fa38 oniguruma: update to release 6.9.3
This release incorporates fixes for CVE-2019-13224 and CVE-2019-13225,
and "fixed many problems (found by libfuzzer programs)."

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit b7d0a82a7f)
2019-09-30 16:30:10 -03:00
Josef Schlehofer faf6ec5800 python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:02:40 +02:00
Rosen Penev 7c74b6c45a Merge pull request #10112 from commodo/django-sec-19.07
django: Update to 1.11.24
2019-09-30 00:48:10 -07:00
Rosen Penev 33ee8d1ec3 django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 64a02079da)
2019-09-30 10:27:06 +03:00
William Fleurant d0fff76c2e yggdrasil: bump to 0.3.9
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 7296ff1b5c)
2019-09-29 19:04:31 -07:00
Josef Schlehofer f2a06eb9dc golang: Update to version 1.13.1
Fixes CVE-2019-16276

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 65b7bd6cc0)
2019-09-29 20:42:52 +02:00
Josef Schlehofer 6a25e7f5ff youtube-dl: Update to version 2019.9.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 9ed0d76b34)
2019-09-29 20:42:42 +02:00
Josef Schlehofer e59ac33808 dnscrypt-proxy2: Update to version 2.0.27
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit b9fbb90fd4)
2019-09-29 20:42:31 +02:00
Jan Pavlinec dda4bd1f90 expat: update to version 2.2.7 (security fix)
Fixes:
CVE-2018-20843

Changes:
add PKG_CPE_ID
switch to xz
remove maintainer

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 70c62ef2d7)
2019-09-29 10:00:51 +02:00
Claudius Ellsel 05ad389f41 adblock: More cosmetic changes and more detailed installation instructions to README.md
Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 6121af755d)
2019-09-29 08:01:02 +02:00
Claudius Ellsel df4452ade3 adblock: Cosmetic changes to README.md
Add code blocks for easier reading and change "dns" to "DNS".

Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 088a14e5ce)
2019-09-29 07:59:37 +02:00
Johannes Rothe bbc6a303a1 travelmate: add support for optional args in auto-login script
This can be helpful for example in hotels where you need to
enter a new user/password combination every week.

Signed-off-by: Johannes Rothe <mail@johannes-rothe.de>
(cherry picked from commit a7f87f939d)
2019-09-29 07:58:00 +02:00
Jeffery To 2c829c973b golang: Use new -trimpath option when compiling Go packages
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 22ee6e86a0)
2019-09-29 00:42:22 +02:00
Xingwang Liao c7f1bdc592 golang: Update to 1.13
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry-picked from commit 0849e32659)
2019-09-29 00:42:09 +02:00
Josef Schlehofer da75f8612a netdata: Update to version 1.17.1
Patch 002 - Force Python3 is no longer applying, let's try to throw it
away to see if it is still necessary

Patch 003 - Was backported from the master branch and it was included in
Netdata version 1.17.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 5e89816)
2019-09-28 11:39:48 +02:00
Rosen Penev 4c05bd2481 Merge pull request #10097 from neheb/boooo
[19.07]Update boost and other fixes
2019-09-27 16:07:32 -07:00
Richard Yu 2d6c0988bc dump1090: update to 3.7.2
and use GitHub release tarball instead of git

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry-picked from a6a0f4edee)
2019-09-27 13:07:43 -07:00
Rosen Penev 11e9b5e969 dump1090: Update to version 3.7.1
Repository was moved.

Also cleaned up Makefile slightly.

Ran init script through shellcheck.

Added PKG_BUILD_PARALLEL for faster compilation.

Added several CFLAGS and LDFLAGS for smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f3245e6c7d)
2019-09-27 13:07:18 -07:00
Rosen Penev f3473adf5f cmdpad: Fix compilation with musl
When passing -Wimplicit-function-declaration

Also got rid of std=gnu89. It's easy to patch out.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1b5e4883a4)
2019-09-27 13:05:38 -07:00
Rosen Penev 2b1f19c992 gammu: Update to 1.40.0
Cleaned up Makefile for consistency between packages.

Switched to CMAKE_INSTALL to get rid of the InstallDev section.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2e2929366b)
2019-09-27 13:03:45 -07:00
Rosen Penev 34ac8a8e73 ykpers: Update to 1.20.0
Cleaned up Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from db6e6ac24a)
2019-09-27 13:00:22 -07:00
Rosen Penev 8e95b05074 zstd: Update to 1.4.3
Bugfix release.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 133a02a115)
2019-09-27 12:58:40 -07:00
Rosen Penev 154e0c40cd mpd: Add SoundCloud support for full variant
The libyajl cleanup commit revealed that it was not being installed
correctly. Now that it is, mpd picks it up properly.

Enabled SoundCloud support for the full variant. Disabled for the mini.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 835bc1df03)
2019-09-27 12:56:20 -07:00
Michal Čihař 3efd435bc6 mpd: enable pulseaudio in full package
Signed-off-by: Michal Čihař <michal@cihar.com>
(cherry-picked from 2ed62adc59)
2019-09-27 12:55:53 -07:00
Rosen Penev 7f957cf8ac yajl: Update to modern standards
Replaced git:// link with https:// which gets through firewalls easier.

Replaced archive with .xz. The one currently in the mirrors has the wrong
hash. .xz is also smaller than .gz.

Eliminated already default CMake option.

Eliminated Build/InstallDev with CMAKE_INSTALL.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2abbc83c9d)
2019-09-27 12:54:50 -07:00
Hirokazu MORIKAWA d97123b729 node: fix http/2 DoS
This is a security release.

Node.js, as well as many other implementations of HTTP/2,
have been found
vulnerable to Denial of Service attacks.
See https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
for more information.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 81bccf9068)
2019-09-27 12:44:16 -07:00
Hirokazu MORIKAWA 976fd4e9c1 node: fix host build error on macOS
fix host build error on macOS
reference: https://github.com/openwrt/packages/issues/9616

Related: https://github.com/openwrt/packages/issues/7171
(This correspondence is necessary to build with macOS.)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from c69d5a0241)
2019-09-27 12:43:43 -07:00
Rosen Penev 0164259db0 opencv: Update to 4.1.1
Update Makefile to modern standards.

Switched to local tarballs..xz archives are smaller. The .gz archive that
codeload comes with is 85MB.

Replaced PKG_INSTALL with CMAKE_INSTALL to get rid of Build/InstallDev.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed inactive maintainer.

Added uClibc-ng patches to fix compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f8cd4f094a)
2019-09-27 12:38:40 -07:00
Rosen Penev 5b903f68eb Merge pull request #10084 from BKPepe/sentrysdk-1907
[OpenWrt 19.07] python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:37 -07:00
Rosen Penev d203688738 boost: Switch to blacklist of targets for context
Works around a buildbot bug.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from dc3220736d)
2019-09-27 10:17:24 -07:00
Rosen Penev c4a7a2c3da boost: Update host libraries
It seems newer versions of fbthrift require more libraries.

Also added AR7, RB532, and Lantiq ASE to fiber exclusion.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1f77459ace)
2019-09-27 10:14:21 -07:00
Carlos Miguel Ferreira e3c1765598 boost: Package Version Update (1.71.0) + bugfixes
This commit updates Boost to version 1.71.0 and disables Boost.Context
 for arc and mips64 architectures, since either jump_fcontext or
 getcontext are undefined for those architectures.

It also fixes a bug were Boost.Fiber was not properly disabled for
mips32 and mips64 architectures.

Boost.Coroutine2 option was removed since it was redundant. By selecting
the Coroutine package, Coroutine2 is also installed.

Boost.Fiber has been disabled for target brcm47xx_generic and brcm47xx_legacy
due to misssing opcode support from instruction set.

Boost 1.71.0 brings a new header-only library
 - Boost.Variant2 [1]
   -> A never-valueless, strong guarantee implementation of
      std::variant, from Peter Dimov.

More info about Boost 1.71.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_71_0/libs/variant2/doc/html/variant2.html
[2]: https://www.boost.org/users/history/version_1_71_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
(cherry-picked from 0cd9824623)
2019-09-27 10:13:59 -07:00
Rosen Penev 884c89b5e9 jamvm: Don't compile on ARM64
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccd2b767d)
2019-09-27 10:10:33 -07:00
Rosen Penev 2bc353a35e fbzmq: Size optimizations
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76b57b0e6c)
2019-09-27 10:06:55 -07:00
Rosen Penev d4f1b24ea9 fbthrift: Update to 2019-09-22
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 7139cddccf)
2019-09-27 10:06:12 -07:00
Rosen Penev 7319d940fb libwangle: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43a8e02bb8)
2019-09-27 10:04:46 -07:00
Rosen Penev 8a5cb085b6 librsocket-cpp: Update to 2019-09-22
Added URLs.

Added needed Boost patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 164e706f9d)
2019-09-27 10:02:55 -07:00
Rosen Penev 95b7c86794 libfizz: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0f209e988c)
2019-09-27 10:01:01 -07:00
Rosen Penev db0248cf67 libfolly: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d28d9aa4dc)
2019-09-27 09:59:15 -07:00
Jan Pavlinec a0d4cc9170 treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ceadbcbb64)
2019-09-26 19:36:27 -07:00
Jan Pavlinec 937b19ebb7 treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Rosen Penev e09985075e libgd: Properly disable iconv support
HAVE_ICONV and HAVE_ICONV_H are two different headers that both need to
evaluate to false. Added the extra CONFIGURE_VARS.

This can be verified by passing -Werror=implicit-function-declaration

Added PKG_LICENSE_FILES

Updated homepage URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Jan Pavlinec fac472e28a samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ad16f2a851)
2019-09-26 19:36:26 -07:00