Commit Graph
61 Commits
Author SHA1 Message Date
Josef SchlehoferandNoah Meyerhans 58b4399a5c bind: update to version 9.11.19
Fixes:
CVE-2020-8616
CVE-2020-8617

Remove backported patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:23:29 -07:00
Josef Schlehofer 8b23a429bb unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:50:58 +02:00
Josef Schlehofer a821c3789d youtube-dl: update to version 2020.3.24
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-01 11:47:42 +02:00
Josef SchlehoferandGitHub c0ec2dfd55 Merge pull request #11995 from jefferyto/python-2.7.18-openwrt-18.06
[openwrt-18.06] python: Update to 2.7.18, refresh patches
2020-04-29 10:57:13 +02:00
Josef SchlehoferandMichael Heimpold f85dd8b965 php7: update to version 7.2.30
Fixes:
CVE-2020-7066
CVE-2020-7064

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 09738290a3)
2020-04-25 23:31:13 +02:00
Josef Schlehofer fc93a4f126 git: update to version 2.20.4
Fixes CVE-2020-11008

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-21 08:11:54 +02:00
Josef SchlehoferandGitHub 3b55acda90 Merge pull request #11857 from BKPepe/18.06-git
[18.06] git: update to version 2.20.3
2020-04-21 07:22:14 +02:00
Josef Schlehofer 4a4c793272 git: update to version 2.20.3
Fixes CVE-2020-5260

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-15 17:18:25 +02:00
Josef SchlehoferandGitHub 133f71a2cd Merge pull request #11773 from BKPepe/msmtp
[18.06] msmtp: update to version 1.8.7
2020-04-06 09:45:41 +02:00
Josef Schlehofer b0484b0051 msmtp: update to version 1.8.7
- It brings oauthbearer support
- It switches from OpenSSL to GnuTLS, which is fully compatible and
  brings more parameters

Makefile changes:
- Fix SPDX License Identifier
- Add PKG_CPE_ID
- The Project does not use sourceforce anymore.
- Uses GnuTLS instead of OpenSSL, which was discouraged

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-06 00:57:02 +02:00
Josef Schlehofer ba934d1fbd zerotier: add /etc/config/zerotier as configuration file
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-22 12:46:54 +01:00
Josef Schlehofer 3d47a69b0c libseccomp: add seccomp-syscalls.h to InstallDev
In the version 2.4.2, there was introduced a new header file.
Ship it to InstallDev

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-17 05:16:45 +01:00
Josef Schlehofer 769b3956e8 libseccomp: update to version 2.4.2
Fixes CVE-2019-9893

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-12 12:42:48 +01:00
Josef SchlehoferandGitHub b0df5d3365 Merge pull request #10832 from BKPepe/git-18.06
[OpenWrt 18.06] git: Update to version 2.16.6 (security fix)
2020-01-01 13:04:17 +01:00
Josef Schlehofer 7f96b4e2c2 git: Update to version 2.16.6 (security fix)
Fixes CVEs:
CVE-2018-17456
CVE-2019-1348
CVE-2019-1349
CVE-2019-1350
CVE-2019-1351
CVE-2019-1352
CVE-2019-1353
CVE-2019-1354
CVE-2019-1387

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-01 13:03:34 +01:00
Josef SchlehoferandNoah Meyerhans 49b5fc001f bind: Update to version 9.11.14
Add patch to fix compile issue:
stats.c: In function 'setcounter':
stats.c:300:29: error: 'val' undeclared (first use in this function); did you mean 'value'?
  stats->counters[counter] = val;
                             ^~~
                             value

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-21 15:56:20 -08:00
Josef Schlehofer 8fe26c9855 wget: fix CVE-2019-5953
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-21 19:57:41 +01:00
Josef Schlehofer 29fe5f91d7 python3: Updated to version 3.6.10
Remove backported patches:
025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch
026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch

Fixes CVE-2019-16056

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-21 18:12:34 +01:00
Josef Schlehofer 97de555425 git: Update to version 2.16.6 (security fix)
Fixes CVEs:
CVE-2018-17456
CVE-2019-1348
CVE-2019-1349
CVE-2019-1350
CVE-2019-1351
CVE-2019-1352
CVE-2019-1353
CVE-2019-1354
CVE-2019-1387

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-18 23:21:47 +01:00
Josef SchlehoferandMichael Heimpold 71969eb041 php7: Update to version 7.2.25
- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bc48abd2a)
2019-11-24 22:11:39 +01:00
Josef Schlehofer 04a8496b7f unbound: Update to version 1.9.5
Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-20 00:09:04 +01:00
Josef Schlehofer 0f0c062d3c python-cryptography: fix CVE-2018-10903
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-25 01:30:27 +02:00
Josef Schlehofer 5a9d222e5c python-cryptography: Add support for LibreSSL 2.7.x
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-25 01:30:27 +02:00
Josef Schlehofer 4c72f8dd66 sudo: Update to version 1.8.28p1
- Use HTTPS for downloading tarball and for their website
- Add PKG_CPE_ID
- Remove inactive maintainer
- Refreshed patches
Fixes: CVE-2019-14287

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-20 09:06:42 +02:00
Josef SchlehoferandGitHub f2812716fd Merge pull request #9997 from flyn-org/openldap-18.06
openldap: update to 2.4.48
2019-10-14 21:21:03 +02:00
Josef Schlehofer 9c7cf98805 bind: Update to version 9.11.11
Change License to MPL-2.0 and add PKG_LICENSE_FILES.
For more details look at https://www.isc.org/blogs/bind9-adopts-the-mpl-2-0-license-with-bind-9-11-0/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-13 11:04:51 +02:00
Josef Schlehofer c674fa684d unbound: Update to version 1.9.4
Fixes CVE-2019-16866

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-07 01:45:38 +02:00
Josef Schlehofer eef89800eb clamav: update to version 0.100.3
Fixes CVEs:
0.100.1
- CVE-2017-16932
- CVE-2018-0360
- CVE-2018-0361
0.100.2
- CVE-2018-15378
- CVE-2018-14680
- CVE-2018-14681
- CVE-2018-14682
0.100.3
- CVE-2019-1787
- CVE-2019-1788
- CVE-2019-1789

Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-03 22:27:21 +02:00
Josef Schlehofer 36919e51f4 youtube-dl: Update to version 2019.9.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-30 23:23:16 +02:00
Josef Schlehofer 126cdd7c6b python3: fix CVE-2019-16056 and delete two patches
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-30 17:23:40 +02:00
Josef Schlehofer 0d9eeca453 python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:03:35 +02:00
Josef Schlehofer f19f9ffc9f expat: Update to version 2.2.9
Fixes CVE-2019-15903

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-29 11:30:20 +02:00
Josef SchlehoferandGitHub c64a4e86c3 Merge pull request #9893 from BKPepe/bind-18.06
[OpenWrt 18.06] bind: update to version 9.11.10
2019-09-28 11:52:27 +02:00
Josef Schlehofer 7ec22baf1e libgcrypt: backport fix for CVE-2019-13627
Refresh patches due to offsets

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 20:27:57 +02:00
Josef SchlehoferandJan Pavlinec 9265be5448 zmq: fix CVE-2019-13132
- Use HTTPS in their website
- Remove unnecessary space between PKG_SOURCE_URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-24 14:18:05 +02:00
Josef Schlehofer 19879284af dovecot: Update to version 2.2.36.4
- Fix CVE-2019-11500
- Download tarball from HTTPS instead of HTTP

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-09 08:10:47 +02:00
Josef Schlehoferandtripolar 8f42d4b714 wget: fix CVE-2018-20483
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-06 19:58:33 +02:00
Josef Schlehofer 2d9a3eff47 keepalived: add patch for CVE-2018-19115
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 17:42:25 +02:00
Josef Schlehofer e4508a3518 keepalived: Update to version 1.4.5
- Use HTTPS for PKG_SOURCE_URL and as well for URL in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 17:42:25 +02:00
Josef Schlehofer e0af45ff79 bind: Update to version 9.11.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 17:01:50 +02:00
Josef Schlehofer 6d8293801e lighttpd: fix CVE-2018-19052
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 13:15:34 +02:00
Josef SchlehoferandGitHub bdddb2127f Merge pull request #9703 from BKPepe/squid-18.06
[OpenWrt 18.06] squid: update to version 3.5.28
2019-08-29 23:40:33 +02:00
Josef Schlehofer ddcbf080aa dovecot: update to version 2.2.36.3
- Fixes CVE-2019-7524
- Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-18 09:50:52 +02:00
Josef SchlehoferandGitHub df3d2312c6 Merge pull request #9403 from BKPepe/yt-18.06
[18.06] youtube-dl: update to version 2019.8.2
2019-08-14 21:20:07 +02:00
Josef SchlehoferandGitHub 6d55ff558b Merge pull request #9513 from BKPepe/openwrt-18.06_python_shebang
[OpenWrt 18.06] python,python3: move shebang handle in install script
2019-08-14 21:19:50 +02:00
Josef Schlehofer 4bda1ca542 icu: fix patch, which adds big endian ARM support
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-13 13:25:52 +02:00
Josef Schlehofer 78bf09b084 golang: update to version 1.10.8
Fixes CVEs

1.10.6
CVE-2018-16873
CVE-2018-16874
CVE-2018-16875

1.10.8
CVE-2019-6486

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-13 09:02:17 +02:00
Josef Schlehofer 1607a5bd8b squid: update to version 3.5.28
Fixes CVEs:
CVE-2018-1000024
CVE-2018-1000027
CVE-2018-1172

Add patches from Squid Proxy Cache Security Update Advisory:
http://www.squid-cache.org/Advisories/SQUID-2018_4.txt
http://www.squid-cache.org/Advisories/SQUID-2018_5.txt
http://www.squid-cache.org/Advisories/SQUID-2019_3.txt
http://www.squid-cache.org/Advisories/SQUID-2019_6.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-12 23:16:59 +02:00
Josef Schlehofer cdbc724641 youtube-dl: update to version 2019.8.2
Backport the Makefile from branches 'master' and 'openwrt-19.07'
- It means that now it will be created as Python package
with one difference that this one uses Python2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-08 19:16:18 +02:00
Josef SchlehoferandYousong Zhou 243f921ae1 subversion: update to version 1.10.6
Most interesting changes:
- Fixes CVEs
1.10.6
- CVE-2018-11782
- CVE-2019-0203
1.10.4
- CVE-2018-11803

Other misc changes:
- Fixes indentation in Makefile
- Reorder some things in Makefile to be sync with other packages
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-06 11:19:41 +08:00
Josef SchlehoferandGitHub 276b7d9b06 Merge pull request #9542 from jefferyto/python-musl-find_library-openwrt-18.06
[openwrt-18.06] python,python3: Fix ctypes.util.find_library()
2019-07-24 09:11:35 +02:00
Josef Schlehofer d16a931db4 python: add patch for CVE-2018-20852
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-22 15:22:56 +02:00
Josef Schlehofer ae21f4990d python3: update to version 3.6.9
3.6.9 is the latest security fix release of Python 3.6.

- Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010
- Refreshed patches
- Removed a few backports patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-22 10:17:35 +02:00
Josef Schlehofer 63c532a712 youtube-dl: update to version 2019.06.21
Small Makefile polishing
- removed PKG_BUILD_DIR
- PKG_MAINTAINER is above PKG_LICENSE
- URL should be under TITLE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-06-22 19:05:43 +02:00
Josef Schlehofer 5387239ad1 youtube-dl: update to version 2019.05.11
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-05-12 11:41:04 +02:00
Josef SchlehoferandGitHub 76ebe2be00 Merge pull request #8765 from BKPepe/1806-urllib3
[OpenWrt 18.06] python-urllib3: update to 1.24.3
2019-05-12 11:09:35 +02:00
Josef Schlehofer 8459433eb8 python-urllib3: update to 1.24.3
- Fixes CVE-2019-9740, CVE-2019-11324
- RFC 3986 compliant
- Fix TITLE, which was too long for make menuconfig
- Add PKG_LICENSE_FILES
- Remove current maintainer

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-05-08 19:23:10 +02:00
Josef SchlehoferandGitHub f69a00efba Merge pull request #8764 from BKPepe/1806-youtubedl
[OpenWrt 18.06] youtube-dl: update to version 2019.04.24
2019-04-25 11:45:43 +02:00
Josef Schlehofer a3d99ad905 youtube-dl: update to version 2019.04.24
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-04-24 20:11:18 +02:00
Josef Schlehofer 99c3670bb1 Netdata: update to version 1.12.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-03-13 14:49:38 +01:00
Josef Schlehofer fb3dd71efd youtube-dl: update to version 2019.01.30.1
Add Josef Schlehofer as Co-maintainer to be able to track issues

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-01-30 14:29:53 +01:00