Fabrice Fontaine
e24386b3ef
libs/libgd: fix license
...
libgd is licensed under its own "GD" license and not MIT
Fixes: 60feea09c9 (libgd: import from oldpackages, add myself as maintainer, add license...)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 41c998224d )
2024-07-10 10:37:38 +00:00
Fabrice Fontaine
f0780bb913
libs/tiff: fix license
...
tiff is licensed under its own "libtiff" license and not BSD-3-Clause
Fixes: 364de5bc3f (tiff: add licensing information)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit ae165deaf5 )
2024-07-10 10:37:37 +00:00
Fabrice Fontaine
92a4808a21
libs/libev: fix license
...
libev is licensed under BSD-2-Clause or GPL-2.0-or-later since its
addition to openwrt
While at it, assign PKG_LICENSE_FILES
Fixes: 67b39f8f9b
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 070fc8021c )
2024-07-10 10:37:36 +00:00
Fabrice Fontaine
0d4d322e67
libassuan: Fix license
...
libassuan license is wrong since the addition of the package in commit
https://git.openwrt.org/?p=feed/packages.git;a=commit;h=e24e8fa98c813911419271d64433deb2b453fa02
Indeed, libassuan has been licensed under LGPL-2.1+ since version 1.0.3
back in 2007 [1]:
Noteworthy changes in version 1.0.3 (2007-08-24)
------------------------------------------------
* Changed the license of the library code back to LGPLv2.1 to support
a bunch of GPLv2(only) software which does not allow the use of
LGPLv3. Note that this is only a temporary change and authors of
GPLv2(only) software are asked to switch to GPLv3 or to add an
exception which allow the use of LPGLv3 software.
[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libassuan.git;a=blob;f=NEWS;h=3a86eca4175fbcb12bb00722c2047062df67a46d;hb=HEAD
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit cb9b994a53 )
2024-07-10 10:36:03 +00:00
Fabrice Fontaine
10babb22c8
gpgme: Fix license
...
gpgme license is wrong since the addition of the package in commit
https://git.openwrt.org/?p=feed/packages.git;a=commit;h=3e39633b75e7d26f3666bce9c2e97d268f0fd068
Indeed, gpgme has been licensed under LPGL-2.1+ since version 1.0.2 back
in 2004 [1]:
Noteworthy changes in version 1.0.2 (2004-12-28)
------------------------------------------------
* Changed the license of the library to the GNU Lesser General Public
License (LGPL), version 2.1 or later.
[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpgme.git;a=blob;f=NEWS;h=2475a877a40817f575accd22a386bfd5f0a66aad;hb=HEAD
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit e8bbeb05b9 )
2024-07-10 10:36:02 +00:00
Andreas Gnau
4fe6b2c67c
mxml: Add PKG_CPE_ID
...
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu >
(cherry picked from commit fc043c0039 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
557fc52d6b
libs/libvpx: fix PKG_CPE_ID
...
There is not a single CVEs under cpe:/a:john_koleszar:libvpx
so use cpe:/a:webmproject:libvpx:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Awebmproject%3Alibvpx
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 37a60ca934 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
d31e6b044b
libs/apr: fix PKG_CPE_ID
...
There is not a single CVE under cpe:/a:apache:apr
so use cpe:/a:apache:portable_runtime:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aapache%3Aportable_runtime
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit a9ddc8e373 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
73c3c2bacf
libs/libestr: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aadiscon%3Alibestr
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 2d0649c1c9 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
3b9d7313b3
libs/fmtlib: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:fmt:fmt
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 903d010020 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
9904407055
libs/libyang: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:cesnet:libyang
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 3c82335658 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
6d8a44764e
libs/freetype: fix PKG_CPE_ID
...
There is not a single CVE under cpe:/a:freetype:freetype2
so use cpe:/a:freetype:freetype:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freetype:freetype
Fixes: 456ae2f541
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit eb2c47d493 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
8c72417782
libs/libinput: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:libinput
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 17d25745ba )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
2e12f6109b
libs/libmbim: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:freedesktop:libmbim
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit c24fb4a2f7 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
0d8817c582
libs/libgee: assign PKG_CPE_ID
...
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:libgee
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 4bdc29ece4 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
72f0ab05ee
libs/libpam: fix PKG_CPE_ID
...
linux-pam:linux-pam is a better CPE ID than kernel:linux-pam as this CPE
ID has the latest CVEs (whereas kernel:linux-pam only has a
SUSE-specific CVE):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:linux-pam:linux-pam
Fix: 6f74b0c4f1
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 2269848bff )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
4fc01ae350
libs/vips: fix PKG_CPE_ID
...
libvips:libvips is a better CPE ID than vips:vips as this CPE ID has the
latest CVEs (whereas vips only has an old CVE from 2010):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libvips:libvips
Fix: 299e5b0a9b
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit a220c04b50 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
e32911eafc
libs/redis: fix PKG_CPE_ID
...
There is not a single CVE linked to pivotal_software:redis so use
redis:redis instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:redis:redis
Fixes: ceadbcbb64 (treewide: add PKG_CPE_ID for cvescanner)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 5c089b16ba )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
df3b0d47eb
libs/expat: fix PKG_CPE_ID
...
There is not a single CVE linked to libexpat:expat so use
libexpat_project:libexpat instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat_project:libexpat
Fixes: 70c62ef2d7 (expat: update to version 2.2.7 (security fix))
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 77a02f1efc )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
ca577d40e9
libs/libidn2: fix PKG_CPE_ID
...
There is not a single CVE linked to libidn2_project:libidn2 so use
gnu:libidn2 instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnu:libidn2
Fixes: ceadbcbb64 (treewide: add PKG_CPE_ID for cvescanner)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit b5b4545b24 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
84d7eb7af2
treewide: assign PKG_CPE_ID
...
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
[davici: not present in 23.05]
(cherry picked from commit 5afe5c9031 )
2024-07-06 10:28:19 -07:00
Fabrice Fontaine
bbb20bd572
treewide: fix licence typos
...
- PKG_LICENCE -> PKG_LICENSE
- PKC_LICENSE_FILES -> PKG_LICENSE_FILES
- BSD 3-Clause -> BSD-3-Clause
- BSD-3-clause -> BSD-3-Clause
- BSD-2-clause -> BSD-2-Clause
- Public Domain -> Public-Domain
- PublicDomain -> Public-Domain
- Drop unneeded ',' in PKG_LICENSE or PKG_LICENSE_FILES
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit 820fcc5fb9 )
2024-07-06 10:28:19 -07:00
Daniel Golle
f47158a63d
libjwt: add package
...
Add package for JWT C Library built against OpenSSL.
Signed-off-by: Daniel Golle <daniel@makrotopia.org >
(cherry picked from commit 57fdc5d2b9 )
2024-06-24 15:29:40 -07:00
Christian Marangi
a183849549
libpfring: backport patch fixing compilation error for sa_data
...
Backport patch fixing compilation error for sa_data not well defined.
This is triggered only on platform that makes use of fortify string and
cause compilation error due to the fact that sa_data is not well defined
and his size is arbitrary.
Patch has been accepted in the PF_RING project and this is just a
backport.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com >
(cherry picked from commit c3a50a9fac )
2024-06-07 03:21:46 +08:00
John Thomson
29b1b8301a
libpfring: update to 8.4.0
...
Release notes:
https://github.com/ntop/PF_RING/releases/tag/8.4.0
Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au >
(cherry picked from commit 534bd518f3 )
2024-06-07 03:21:46 +08:00
Christian Marangi
24e2a32bd6
libndpi: backport patch for PCRE2 support
...
Backport patch for PCRE2 support as PCRE is EOL and won't receive any
support updates anymore.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com >
(cherry picked from commit baa0d51270 )
2024-04-27 12:35:54 +02:00
Fabrice Fontaine
f7251c4f82
libs/libdaq3: assign PKG_LICENSE_FILES
...
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
(cherry picked from commit b2c548975d )
2024-04-11 14:14:16 -04:00
John Audia
e1f0df9517
libdaq3: update to 3.0.14
...
Update to latest version.
Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.14
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne
Signed-off-by: John Audia <therealgraysky@proton.me >
(cherry picked from commit 651b7e1f92 )
2024-04-11 14:14:10 -04:00
John Audia
4acf815ddf
libdaq3: update to 3.0.13
...
Upstream bump
Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne
Signed-off-by: John Audia <therealgraysky@proton.me >
(cherry picked from commit 4c05ae5f6c )
2024-04-11 14:14:03 -04:00
John Audia
19c641a266
libdaq3: update to 3.0.11
...
Upstream bump
Signed-off-by: John Audia <therealgraysky@proton.me >
(cherry picked from commit 9f2d3c5bf8 )
2024-04-11 14:13:53 -04:00
Peter van Dijk
229175a0bb
libwslay: remove, nothing depends on it since h2o is gone
...
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com >
(cherry picked from commit e1b6bac484 )
2024-03-11 10:55:22 +01:00
Peter van Dijk
218769f991
h2o: remove, nothing depends on it anymore
...
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com >
(cherry picked from commit d30a34bac1 )
2024-03-06 20:54:04 +01:00
Rosen Penev
1504a153b0
nghttp3: fix pkgconfig file
...
CMake build is passing host paths in pkgconfig.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
(cherry picked from commit fa79aaad5f )
2024-03-06 20:53:25 +01:00
krant
210468d0c5
c-ares: update to 1.27.0
...
- Update package URL
- Don't set default CMake options
Signed-off-by: krant <aleksey.vasilenko@gmail.com >
(cherry picked from commit 0858accfda )
2024-03-05 11:43:05 +08:00
John Audia
28aeff87b3
gperftools: add new package
...
Thread-caching malloc provided by this package improves snort3
performance. I have been running with this for over seven months
without issues. Avg CPU usage is down. Another user reported
higher throughput achieved with snort3 compiled with this on
samba transfers on system with CPU-limited snort performance.[1]
1. https://forum.openwrt.org/t/some-help-with-a-makefile-gperftools/165656/22
Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64
Signed-off-by: John Audia <therealgraysky@proton.me >
(cherry picked from commit c1b4e80825 )
2024-02-27 13:25:54 +08:00
John Audia
f589b58808
hyperscan: new package for speeding up regex ops
...
Hyperscan is a high performance regular expression matching
library from Intel that runs on x86 platforms and offers
support for Perl Compatible Regular Expressions (PCRE) syntax,
simultaneous matching of groups of regular expressions, and
streaming operations.
This has utility in speeding up snort3.
Signed-off-by: John Audia <therealgraysky@proton.me >
(cherry picked from commit 1db5c54617 )
2024-02-27 13:25:43 +08:00
Hirokazu MORIKAWA
76aaa3059e
libuv: fix CVE-2024-24806
...
Update to 1.48.0
CVE-2024-24806 : Improper Domain Lookup that potentially leads to SSRF attacks
Vulnerabilities fixed
* CVE-2024-24806 / GHSA-f74f-cvh7-c6q6 0f2d7e7, 3530bcc and e0327e1
Notable Changes
* linux: disable io_uring on ppc64 and ppc64le #4285
* linux: disable io_uring on hppa below kernel 6.1.51 #4224
* win/spawn: optionally run executable paths with no file extension #4292 (We recommend that most users consider setting this by default)
Important Bugs Fixed
* unix,win: fix busy loop with zero timeout timers #4250 , #4304 .
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com >
(cherry picked from commit 02a982bc10 )
2024-02-20 09:16:12 +01:00
Tianling Shen
3ffac159c5
inih: Update to r58
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 2c6453adb6 )
2024-02-04 14:55:18 +08:00
Nikos Mavrogiannopoulos
4da835d3eb
gnutls: updated to 3.8.3
...
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com >
2024-01-24 10:55:43 +01:00
John Audia
5b4067ccb6
libxcrypt: update to 4.4.36
...
Upstream bump required to fix build issues reported here:
https://forum.openwrt.org/t/i-cannot-build-my-image-due-to-failure-in-libxcrypt/168114
Signed-off-by: John Audia <therealgraysky@proton.me >
(cherry picked from commit b1d28936cb )
2023-12-20 11:26:15 +01:00
Tianling Shen
9e7371ed55
libtorrent-rasterbar: Update to 2.0.9
...
Switch to use release tarball to avoid try_signal hack.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 9b0608547b )
2023-12-20 10:57:31 +08:00
Tianling Shen
7697be576b
libupnpp: Update to 0.24.1
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 8facff466b )
2023-12-10 20:18:52 +08:00
Tianling Shen
c95ff2e260
libnpupnp: Update to 5.1.2
...
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org >
(cherry picked from commit 24b4173030 )
2023-12-10 20:18:52 +08:00
Rosen Penev
24eb6278d0
libupnpp: update to 0.24.0
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
(cherry picked from commit f53100b69e )
2023-12-10 20:18:52 +08:00
Rosen Penev
10b5d353af
libnpupnp: update to 5.1.1
...
Build with meson. Faster.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
(cherry picked from commit 36360b7406 )
2023-12-10 20:18:52 +08:00
Stan Grishin
641d7f4398
Merge pull request #22773 from stangri/openwrt-23.05-ngtcp2
...
[23.05] ngtcp2: update to 1.1.0
2023-12-01 12:56:05 -07:00
Stan Grishin
8dffb5132a
ngtcp2: update to 1.1.0
...
* Changelog: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.1.0
Signed-off-by: Stan Grishin <stangri@melmac.ca >
(cherry picked from commit 05cf7cff10 )
2023-11-27 17:47:06 +00:00
Stan Grishin
dc358fb4e1
nghttp3: update to 1.1.0
...
* Changelog: https://github.com/ngtcp2/nghttp3/releases/tag/v1.1.0
Signed-off-by: Stan Grishin <stangri@melmac.ca >
(cherry picked from commit 353bdb9cf0 )
2023-11-27 17:44:54 +00:00
Christian Marangi
4ae7384089
libndpi: bump to release 4.8
...
Bump to release 4.8 to make it easier to backport PCRE2 support patch.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com >
(cherry picked from commit 97a7165e72 )
2023-11-02 01:57:24 +01:00
Anton Antonov
41f5c318d7
efivar: Add armsr target support
...
Backport up-stream patch:
ca48d3964d
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com >
(cherry picked from commit c618100c82 )
2023-11-01 12:11:10 +08:00