Commit Graph
1713 Commits
Author SHA1 Message Date
Hannu NymanandGitHub 5240700752 Merge pull request #7818 from commodo/python-CVE-2018-14647
python: backport CVE-2018-14647 patches from upstream
2018-12-31 22:32:18 +02:00
Alexandru Ardelean 3c8172255a python: backport CVE-2018-14647 patches from upstream
These patches are backports from Python 2.7 upstream.
The security issue is described here:
  https://nvd.nist.gov/vuln/detail/CVE-2018-14647

The Python bug report:
  https://bugs.python.org/issue34623

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-12-31 17:53:41 +02:00
Alexandru Ardelean 54e48669e7 python-pyasn1: bump to version 0.4.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-12-31 00:04:50 +02:00
Hannu NymanandGitHub 0e9715553c Merge pull request #7755 from jefferyto/python-dist-info
python/python3: fix .dist-info missing for setuptools and pip
2018-12-30 20:16:38 +02:00
Hannu NymanandGitHub c16948a856 Merge pull request #7662 from neheb/lanes
lualanes: Update to 3.13.0
2018-12-27 19:38:43 +02:00
Hannu NymanandGitHub b42779ed71 Merge pull request #7655 from cotequeiroz/pyjwt-1.7.1
pyjwt: bump to version 1.7.1
2018-12-26 19:40:39 +02:00
Hannu NymanandGitHub e2dc03ed7e Merge pull request #7739 from sartura/things_gateway_0.6.1
node-mozilla-iot-gateway: bump package to 0.6.1
2018-12-26 19:37:19 +02:00
Hannu NymanandGitHub 467649955c Merge pull request #7716 from neheb/patch-20
python-six: Update to 1.12.0
2018-12-26 19:36:39 +02:00
Rosen PenevandYousong Zhou 2a758a1c68 node: Update to 8.14.1
Mainly CVE fixes.

Added a patch to fix compilation without deprecated OpenSSL APIs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-24 10:12:50 +08:00
Eneas U de QueirozandYousong Zhou fc4bc242cc node: use system libnghttp2 libuv libhttp-parser
Use the openwrt system libraries instead of the ones bundled with node.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-24 10:12:50 +08:00
Jeffery To 2f55f2a7b5 python/python3: fix .dist-info missing for setuptools and pip
Without .dist-info (similar to .egg-info), setuptools and pip are not
discoverable by pkg_resources.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-12-22 22:16:52 +08:00
Hannu NymanandGitHub cb6fc9d7a9 Merge pull request #7692 from neheb/patch-6
django: Update to 1.11.17
2018-12-21 21:16:48 +02:00
Hannu NymanandGitHub 069544bedd Merge pull request #7711 from neheb/patch-16
python-service-identity: Update to 18.1.0
2018-12-21 17:38:25 +02:00
Hannu NymanandGitHub d56d13e9ec Merge pull request #7709 from neheb/patch-14
python-mysql: Update to 1.3.14
2018-12-21 17:14:41 +02:00
Marko Ratkaj ce0e807ae0 node-mozilla-iot-gateway: bump package to 0.6.1
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2018-12-20 16:36:53 +01:00
Marko RatkajandGitHub d64e2a39ab Merge pull request #7633 from cotequeiroz/node-mozila-iot-gateway_CPU
node-mozilla-iot-gateway: fix copy of sqlite3 module directory
2018-12-20 16:09:19 +01:00
Rosen Penev 05007d60cf python-service-identity: Update to 18.1.0
Switched URL to standard one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-19 12:36:28 -08:00
Hannu NymanandGitHub b191a875be Merge pull request #7684 from neheb/patch-4
tcp: Update to 8.6.9
2018-12-19 16:52:40 +02:00
Hannu NymanandGitHub 024a554fbd Merge pull request #7718 from neheb/patch-23
python-dpkt: Update to 1.92
2018-12-19 16:49:35 +02:00
Jeffery ToandYousong Zhou d53d839739 golang: update to latest version
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-12-19 15:33:44 +08:00
Rosen Penev 54918d4d46 python-dpkt: Update to 1.9.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-17 19:14:48 -08:00
Rosen PenevandGitHub e01ad70f94 python-six: Update to 1.12.0
Switch to standard pythonhosted URL.

Cosmetic Makefile rearrangements for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-17 18:33:15 -08:00
Rosen PenevandGitHub c49b170809 python-requests: Update to 2.21.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-17 14:19:32 -08:00
Rosen Penev 019bcd9780 python-mysql: Update to 1.3.14
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-17 14:17:11 -08:00
Rosen Penev dda7047768 tcl: Update to 8.6.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-17 09:14:02 -08:00
Rosen PenevandGitHub c57e503cf5 django: Update to 1.11.17
Added PKG_CPE_ID for proper CVE tracking.

Some Makefile rearrangements for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-16 11:33:26 -08:00
Rosen Penev 71332c0371 luv: Update to 1.22.0-1
Switched to tarball and rearranged Makefile for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-15 22:55:34 -08:00
Hannu NymanandGitHub d5cf9c0569 Merge pull request #7617 from neheb/sip
golang-github-dchest-siphash: Switch to versioned releases
2018-12-14 16:54:17 +02:00
Rosen Penev 643f09e83f lualanes: Update to 3.13.0
Switched to codeload for a simpler Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-13 17:45:00 -08:00
Eneas U de Queiroz 253334011c pyjwt: bump to version 1.7.1
This is a bugfix release.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-13 16:24:38 -02:00
Jeffery To 0fa7f3c882 golang: fix package clean / autoremove, add output whitespace
go 1.11 added modules, which are cached locally. The go developers have
decided to make this cache read-only (golang/go#27455), which causes
problems with package clean / autoremove (#7635).

This adds a call to clear this cache right after building, as currently
there is no easy way to hook into autoremove (it may be possible to hook
into package clean).

This also adds whitespace (blank lines) to certain places in make
output, to aid debugging.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-12-12 04:23:47 +08:00
Eneas U de Queiroz 9f7c1407e8 node-mozilla-iot-gateway: fix copy of sqlite3 mod
Use $(CPU) to find sqlite3 module node binding dir.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-10 23:49:30 -02:00
Karl Palsson 509691b4a7 lua-penlight: update to 1.6.0
Full changelog at https://github.com/stevedonovan/Penlight/blob/master/CHANGELOG.md#160-2018-11-23

Interesting changes:
* version numbers fixed
* import_into includes everything properly
* more compat with lua 5.1

Includes a switch to codeload to avoid the git cloning and mirror
hashes.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-12-10 15:33:50 +00:00
Eneas U de Queiroz d1174d7779 php7-pecl-http: ensure libidnkit is disabled
Otherwise, configure may pick up the host system library.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-09 17:38:16 -02:00
Michael Heimpold 794f8f8e94 php7: update to 7.2.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-12-09 16:26:52 +01:00
Hannu NymanandGitHub 251131af61 Merge pull request #7493 from neheb/luajit
luajit: Switch to versioned releases
2018-12-09 13:39:47 +02:00
Hannu NymanandGitHub ba6abc9b74 Merge pull request #7487 from neheb/lsql
luasql: Update to 2.4.0
2018-12-09 13:34:46 +02:00
Rosen Penev ae79f0e14f python-psycopg2: Update to 2.7.6.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-08 18:12:55 -08:00
Rosen Penev 4e88f514d6 golang-github-dchest-siphash: Switch to versioned releases
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-08 17:51:33 -08:00
Hannu NymanandGitHub e81189e983 Merge pull request #7607 from cotequeiroz/python-egenix-mx-base_sources
python-egenix-mx-base: use source distribution
2018-12-08 21:59:38 +02:00
Hannu NymanandGitHub 37228c0248 Merge pull request #7584 from cretingame/master
erlang: license corrected
2018-12-08 09:33:46 +02:00
Eneas U de Queiroz 4688a248b8 node-serialport: copy files, not symlinks
This was meant to be included in 93d6d1b, but wasn't.
Current version of npm install installs a link to the build directory.
The workaround is to use npm pack to make a tarball and install from
that.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-07 15:22:53 -02:00
Eneas U de Queiroz 663f8f3da2 node-hid: copy files, not symlinks
This was meant to be included in 1e0720e, but wasn't.
Current version of npm install installs a link to the build directory.
The workaround is to use npm pack to make a tarball and install from
that.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-07 15:22:53 -02:00
Eneas U de Queiroz 1a577c80ba node-cylon: copy files, not symlinks
This was meant to be included in 56fe558, but wasn't.
Current version of npm install installs a link to the build directory.
The workaround is to use npm pack to make a tarball and install from
that.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-07 15:22:53 -02:00
Eneas U de Queiroz b8180ef712 node-arduino-firmata: copy files, not symlinks
This was meant to be included in 6ed62c6, but wasn't.
Current version of npm install installs a link to the build directory.
The workaround is to use npm pack to make a tarball and install from
that.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-07 15:22:53 -02:00
Eneas U de Queiroz e1cb6d5fbb python-egenix-mx-base: use source distribution
The zip file distribution did not include the source files, and
downloaded pre-built binaries from the web.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2018-12-07 14:17:37 -02:00
Rosen Penev e56e1ad746 python-idna: Update to 2.8
Changed URL to pythonhosted one.

Some Makefile rearrangements for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-06 15:23:32 -08:00
Rosen Penev 5925372884 luasql: Update to 2.4.0
Switch to codeload + other adjustments.

Removed nico as he seems to no longer be active.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-06 14:47:29 -08:00
Rosen Penev 0873c8da60 luajit: Switch to versioned releases
Allows to simplify the Makefile

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-12-06 14:44:32 -08:00
Hannu NymanandGitHub 026392bcf8 Merge pull request #6720 from cotequeiroz/node-_update-npm
Node-{arduino-firmata,cylon,hid,serialport}:  fix npm installation
2018-12-06 23:00:46 +02:00