Josef Schlehofer and Noah Meyerhans
58b4399a5c
bind: update to version 9.11.19
...
Fixes:
CVE-2020-8616
CVE-2020-8617
Remove backported patch
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-05-20 11:23:29 -07:00
Josef Schlehofer
8b23a429bb
unbound: update to version 1.10.1
...
Fixes:
CVE-2020-12662
CVE-2020-12663
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-05-19 11:50:58 +02:00
Josef Schlehofer
a821c3789d
youtube-dl: update to version 2020.3.24
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-05-01 11:47:42 +02:00
Josef Schlehofer and GitHub
c0ec2dfd55
Merge pull request #11995 from jefferyto/python-2.7.18-openwrt-18.06
...
[openwrt-18.06] python: Update to 2.7.18, refresh patches
2020-04-29 10:57:13 +02:00
Josef Schlehofer and Michael Heimpold
f85dd8b965
php7: update to version 7.2.30
...
Fixes:
CVE-2020-7066
CVE-2020-7064
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
(cherry picked from commit 09738290a3 )
2020-04-25 23:31:13 +02:00
Josef Schlehofer
fc93a4f126
git: update to version 2.20.4
...
Fixes CVE-2020-11008
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-04-21 08:11:54 +02:00
Josef Schlehofer and GitHub
3b55acda90
Merge pull request #11857 from BKPepe/18.06-git
...
[18.06] git: update to version 2.20.3
2020-04-21 07:22:14 +02:00
Josef Schlehofer
4a4c793272
git: update to version 2.20.3
...
Fixes CVE-2020-5260
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-04-15 17:18:25 +02:00
Josef Schlehofer and GitHub
133f71a2cd
Merge pull request #11773 from BKPepe/msmtp
...
[18.06] msmtp: update to version 1.8.7
2020-04-06 09:45:41 +02:00
Josef Schlehofer
b0484b0051
msmtp: update to version 1.8.7
...
- It brings oauthbearer support
- It switches from OpenSSL to GnuTLS, which is fully compatible and
brings more parameters
Makefile changes:
- Fix SPDX License Identifier
- Add PKG_CPE_ID
- The Project does not use sourceforce anymore.
- Uses GnuTLS instead of OpenSSL, which was discouraged
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-04-06 00:57:02 +02:00
Josef Schlehofer
ba934d1fbd
zerotier: add /etc/config/zerotier as configuration file
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-01-22 12:46:54 +01:00
Josef Schlehofer
3d47a69b0c
libseccomp: add seccomp-syscalls.h to InstallDev
...
In the version 2.4.2, there was introduced a new header file.
Ship it to InstallDev
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-01-17 05:16:45 +01:00
Josef Schlehofer
769b3956e8
libseccomp: update to version 2.4.2
...
Fixes CVE-2019-9893
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-01-12 12:42:48 +01:00
Josef Schlehofer and GitHub
b0df5d3365
Merge pull request #10832 from BKPepe/git-18.06
...
[OpenWrt 18.06] git: Update to version 2.16.6 (security fix)
2020-01-01 13:04:17 +01:00
Josef Schlehofer
7f96b4e2c2
git: Update to version 2.16.6 (security fix)
...
Fixes CVEs:
CVE-2018-17456
CVE-2019-1348
CVE-2019-1349
CVE-2019-1350
CVE-2019-1351
CVE-2019-1352
CVE-2019-1353
CVE-2019-1354
CVE-2019-1387
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2020-01-01 13:03:34 +01:00
Josef Schlehofer and Noah Meyerhans
49b5fc001f
bind: Update to version 9.11.14
...
Add patch to fix compile issue:
stats.c: In function 'setcounter':
stats.c:300:29: error: 'val' undeclared (first use in this function); did you mean 'value'?
stats->counters[counter] = val;
^~~
value
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-12-21 15:56:20 -08:00
Josef Schlehofer
8fe26c9855
wget: fix CVE-2019-5953
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-12-21 19:57:41 +01:00
Josef Schlehofer
29fe5f91d7
python3: Updated to version 3.6.10
...
Remove backported patches:
025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch
026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch
Fixes CVE-2019-16056
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-12-21 18:12:34 +01:00
Josef Schlehofer
97de555425
git: Update to version 2.16.6 (security fix)
...
Fixes CVEs:
CVE-2018-17456
CVE-2019-1348
CVE-2019-1349
CVE-2019-1350
CVE-2019-1351
CVE-2019-1352
CVE-2019-1353
CVE-2019-1354
CVE-2019-1387
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-12-18 23:21:47 +01:00
Josef Schlehofer and Michael Heimpold
71969eb041
php7: Update to version 7.2.25
...
- Fixes CVE-2019-11043
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
(cherry picked from commit 9bc48abd2a )
2019-11-24 22:11:39 +01:00
Josef Schlehofer
04a8496b7f
unbound: Update to version 1.9.5
...
Fixes CVE-2019-18934
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-11-20 00:09:04 +01:00
Josef Schlehofer
0f0c062d3c
python-cryptography: fix CVE-2018-10903
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-25 01:30:27 +02:00
Josef Schlehofer
5a9d222e5c
python-cryptography: Add support for LibreSSL 2.7.x
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-25 01:30:27 +02:00
Josef Schlehofer
4c72f8dd66
sudo: Update to version 1.8.28p1
...
- Use HTTPS for downloading tarball and for their website
- Add PKG_CPE_ID
- Remove inactive maintainer
- Refreshed patches
Fixes: CVE-2019-14287
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-20 09:06:42 +02:00
Josef Schlehofer and GitHub
f2812716fd
Merge pull request #9997 from flyn-org/openldap-18.06
...
openldap: update to 2.4.48
2019-10-14 21:21:03 +02:00
Josef Schlehofer
9c7cf98805
bind: Update to version 9.11.11
...
Change License to MPL-2.0 and add PKG_LICENSE_FILES.
For more details look at https://www.isc.org/blogs/bind9-adopts-the-mpl-2-0-license-with-bind-9-11-0/
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-13 11:04:51 +02:00
Josef Schlehofer
c674fa684d
unbound: Update to version 1.9.4
...
Fixes CVE-2019-16866
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-07 01:45:38 +02:00
Josef Schlehofer
eef89800eb
clamav: update to version 0.100.3
...
Fixes CVEs:
0.100.1
- CVE-2017-16932
- CVE-2018-0360
- CVE-2018-0361
0.100.2
- CVE-2018-15378
- CVE-2018-14680
- CVE-2018-14681
- CVE-2018-14682
0.100.3
- CVE-2019-1787
- CVE-2019-1788
- CVE-2019-1789
Use HTTPS in URL
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-03 22:27:21 +02:00
Josef Schlehofer
36919e51f4
youtube-dl: Update to version 2019.9.28
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-30 23:23:16 +02:00
Josef Schlehofer
126cdd7c6b
python3: fix CVE-2019-16056 and delete two patches
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-30 17:23:40 +02:00
Josef Schlehofer
0d9eeca453
python3: backport three security patches
...
Fixes: CVE-2019-16935
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
(cherry-picked from commit 80def9e )
2019-09-30 10:03:35 +02:00
Josef Schlehofer
f19f9ffc9f
expat: Update to version 2.2.9
...
Fixes CVE-2019-15903
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-29 11:30:20 +02:00
Josef Schlehofer and GitHub
c64a4e86c3
Merge pull request #9893 from BKPepe/bind-18.06
...
[OpenWrt 18.06] bind: update to version 9.11.10
2019-09-28 11:52:27 +02:00
Josef Schlehofer
7ec22baf1e
libgcrypt: backport fix for CVE-2019-13627
...
Refresh patches due to offsets
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-26 20:27:57 +02:00
Josef Schlehofer and Jan Pavlinec
9265be5448
zmq: fix CVE-2019-13132
...
- Use HTTPS in their website
- Remove unnecessary space between PKG_SOURCE_URL
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
2019-09-24 14:18:05 +02:00
Josef Schlehofer
19879284af
dovecot: Update to version 2.2.36.4
...
- Fix CVE-2019-11500
- Download tarball from HTTPS instead of HTTP
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-09 08:10:47 +02:00
Josef Schlehofer and tripolar
8f42d4b714
wget: fix CVE-2018-20483
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-06 19:58:33 +02:00
Josef Schlehofer
2d9a3eff47
keepalived: add patch for CVE-2018-19115
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-01 17:42:25 +02:00
Josef Schlehofer
e4508a3518
keepalived: Update to version 1.4.5
...
- Use HTTPS for PKG_SOURCE_URL and as well for URL in description
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-01 17:42:25 +02:00
Josef Schlehofer
e0af45ff79
bind: Update to version 9.11.10
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-01 17:01:50 +02:00
Josef Schlehofer
6d8293801e
lighttpd: fix CVE-2018-19052
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-01 13:15:34 +02:00
Josef Schlehofer and GitHub
bdddb2127f
Merge pull request #9703 from BKPepe/squid-18.06
...
[OpenWrt 18.06] squid: update to version 3.5.28
2019-08-29 23:40:33 +02:00
Josef Schlehofer
ddcbf080aa
dovecot: update to version 2.2.36.3
...
- Fixes CVE-2019-7524
- Refresh patch
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-08-18 09:50:52 +02:00
Josef Schlehofer and GitHub
df3d2312c6
Merge pull request #9403 from BKPepe/yt-18.06
...
[18.06] youtube-dl: update to version 2019.8.2
2019-08-14 21:20:07 +02:00
Josef Schlehofer and GitHub
6d55ff558b
Merge pull request #9513 from BKPepe/openwrt-18.06_python_shebang
...
[OpenWrt 18.06] python,python3: move shebang handle in install script
2019-08-14 21:19:50 +02:00
Josef Schlehofer
4bda1ca542
icu: fix patch, which adds big endian ARM support
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-08-13 13:25:52 +02:00
Josef Schlehofer
78bf09b084
golang: update to version 1.10.8
...
Fixes CVEs
1.10.6
CVE-2018-16873
CVE-2018-16874
CVE-2018-16875
1.10.8
CVE-2019-6486
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-08-13 09:02:17 +02:00
Josef Schlehofer
1607a5bd8b
squid: update to version 3.5.28
...
Fixes CVEs:
CVE-2018-1000024
CVE-2018-1000027
CVE-2018-1172
Add patches from Squid Proxy Cache Security Update Advisory:
http://www.squid-cache.org/Advisories/SQUID-2018_4.txt
http://www.squid-cache.org/Advisories/SQUID-2018_5.txt
http://www.squid-cache.org/Advisories/SQUID-2019_3.txt
http://www.squid-cache.org/Advisories/SQUID-2019_6.txt
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-08-12 23:16:59 +02:00
Josef Schlehofer
cdbc724641
youtube-dl: update to version 2019.8.2
...
Backport the Makefile from branches 'master' and 'openwrt-19.07'
- It means that now it will be created as Python package
with one difference that this one uses Python2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-08-08 19:16:18 +02:00
Josef Schlehofer and Yousong Zhou
243f921ae1
subversion: update to version 1.10.6
...
Most interesting changes:
- Fixes CVEs
1.10.6
- CVE-2018-11782
- CVE-2019-0203
1.10.4
- CVE-2018-11803
Other misc changes:
- Fixes indentation in Makefile
- Reorder some things in Makefile to be sync with other packages
- Use HTTPS in URL
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-08-06 11:19:41 +08:00
Josef Schlehofer and GitHub
276b7d9b06
Merge pull request #9542 from jefferyto/python-musl-find_library-openwrt-18.06
...
[openwrt-18.06] python,python3: Fix ctypes.util.find_library()
2019-07-24 09:11:35 +02:00
Josef Schlehofer
d16a931db4
python: add patch for CVE-2018-20852
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-07-22 15:22:56 +02:00
Josef Schlehofer
ae21f4990d
python3: update to version 3.6.9
...
3.6.9 is the latest security fix release of Python 3.6.
- Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010
- Refreshed patches
- Removed a few backports patches
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-07-22 10:17:35 +02:00
Josef Schlehofer
63c532a712
youtube-dl: update to version 2019.06.21
...
Small Makefile polishing
- removed PKG_BUILD_DIR
- PKG_MAINTAINER is above PKG_LICENSE
- URL should be under TITLE
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-06-22 19:05:43 +02:00
Josef Schlehofer
5387239ad1
youtube-dl: update to version 2019.05.11
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-05-12 11:41:04 +02:00
Josef Schlehofer and GitHub
76ebe2be00
Merge pull request #8765 from BKPepe/1806-urllib3
...
[OpenWrt 18.06] python-urllib3: update to 1.24.3
2019-05-12 11:09:35 +02:00
Josef Schlehofer
8459433eb8
python-urllib3: update to 1.24.3
...
- Fixes CVE-2019-9740, CVE-2019-11324
- RFC 3986 compliant
- Fix TITLE, which was too long for make menuconfig
- Add PKG_LICENSE_FILES
- Remove current maintainer
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-05-08 19:23:10 +02:00
Josef Schlehofer and GitHub
f69a00efba
Merge pull request #8764 from BKPepe/1806-youtubedl
...
[OpenWrt 18.06] youtube-dl: update to version 2019.04.24
2019-04-25 11:45:43 +02:00
Josef Schlehofer
a3d99ad905
youtube-dl: update to version 2019.04.24
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-04-24 20:11:18 +02:00
Josef Schlehofer
99c3670bb1
Netdata: update to version 1.12.2
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-03-13 14:49:38 +01:00
Josef Schlehofer
fb3dd71efd
youtube-dl: update to version 2019.01.30.1
...
Add Josef Schlehofer as Co-maintainer to be able to track issues
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-01-30 14:29:53 +01:00