Commit Graph
3681 Commits
Author SHA1 Message Date
Jeffery To 478666b00b golang: Update to 1.18, update patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-28 19:42:59 -07:00
Jeffery To d0efe27a8c python3: Update to 3.10.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-28 00:57:45 -07:00
Josef Schlehofer 474414dff1 vala: update to version 0.54.8
Changelog:
https://gitlab.gnome.org/GNOME/vala/raw/0.54/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-26 10:19:37 -07:00
Daniel Golle 2366b26813 Jinja2: add Josef as the maintainer of this package
It seems that Turris guys is using this package in the Turris OS, where
it is used for reForis (simple, basic UI for users)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[replace Daniel as maintainer, add commit message]
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
2022-03-24 22:41:57 +00:00
Josef Schlehofer 116c0d6c39 Flask: use AUTORELEASE
This helps in cases, when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-24 22:41:51 +00:00
Daniel Golle 934a7e22cd Flask: add Josef as the maintainer of this package
It seems that Turris guys is using this package in the Turris OS, where
it is used for reForis (simple, basic UI for users)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[replace Daniel as maintainer, add commit message]
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
2022-03-24 22:41:36 +00:00
Jeffery To bed8dc2132 python3: Update to 3.10.3, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-21 16:43:35 +08:00
Michael Heimpold 7c31879f78 php8: update to 8.1.4
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-03-20 22:58:55 +01:00
Michael Heimpold d30b18257d php8-pecl-http: update to 4.2.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-03-19 23:09:50 +01:00
Daniel Golle 93a7806578 perl-net-dns: update to version 1.33
**** 1.33 Dec 16, 2021
 Fix rt.cpan.org #137768
    Test t/05-SVCB.t on Perl 5.18.0 fails with deep recursion.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-18 23:47:14 +00:00
Jeffery To 60ce07b9a1 Mako: Remove package
This package (more specifically, the host version) was added for mesa in
the video feed[1]; no packages in the packages feed require this
package.

As mesa will be updated to install Mako using host pip[2], there is no
need to continue maintaining the package here. It will be imported into
the abandoned packages repo[3].

[1]: https://github.com/openwrt/packages/commit/2e17cb9a1b336f4b53146bdedbc583a03092e424#commitcomment-63047904
[2]: https://github.com/openwrt/video/pull/25
[3]: https://github.com/openwrt/packages-abandoned/pull/26

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-18 13:17:22 +00:00
Jeffery To 2f81f907c2 python3: Add Py3Build/InstallBuildDepends recipe
This adds a recipe, Py3Build/InstallBuildDepends, that installs the
requirements listed in HOST_PYTHON3_PACKAGE_BUILD_DEPENDS. This allows
other (non-Python) packages to install host Python packages by calling
this recipe, without having to know the internals of python3-package.mk.

This also updates apparmor to call this recipe.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-17 11:38:19 -07:00
Javier Marcet d09e1b23b2 python3-paramiko: update to version 2.10.1
2.10.1:

 - [Bug]: (CVE-2022-24302) Creation of new private key files using
 PKey subclasses was subject to a race condition between file creation
 & mode modification, which could be exploited by an attacker with
 knowledge of where the Paramiko-using code would write out such
 files.

 - This has been patched by using os.open and os.fdopen to ensure new
 files are opened with the correct mode immediately. We’ve left the
 subsequent explicit chmod in place to minimize any possible
 disruption, though it may get removed in future backwards-
 incompatible updates.

 - Thanks to Jan Schejbal for the report & feedback on the solution,
 and to Jeremy Katz at Tidelift for coordinating the disclosure.

2.10.0:

 - [Feature] Add support for OpenSSH’s Windows agent as a fallback
 when Putty/WinPageant isn’t available or functional. Reported by
 @benj56 with patches/PRs from @lewgordon and Patrick Spendrin.

 - [Feature] Add support for the %C token when parsing SSH config
 files. Foundational PR submitted by @jbrand42.

 - [Bug] Significantly speed up low-level read/write actions on
 SFTPFile objects by using bytearray/memoryview. This is unlikely to
 change anything for users of the higher level methods like
 SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will
 likely see orders of magnitude improvements for files larger than a
 few megabytes in size.

 - Thanks to @jkji for the original report and to Sevastian Tchernov
 for the patch.

 - [Support] Add six explicitly to install-requires; it snuck into
 active use at some point but has only been indicated by transitive
 dependency on bcrypt until they somewhat-recently dropped it. This
 will be short-lived until we drop Python 2 support. Thanks to
 Sondre Lillebø Gundersen for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-16 19:45:42 -07:00
Josef Schlehofer 405bc53c0c chicken-scheme: add conflict and small Makefile polishing
- No need to explicitly state two times section and category since this is
already done in define Package/chicken-scheme/Default
- Also add TITLE to Default

- Add conflict between chicken-scheme-interpreter and
  chicken-scheme-full
They both provide the same files:
/usr/lib/libchicken.so
/usr/lib/chicken/11/chicken.time.import.so
/usr/lib/chicken/11/chicken.fixnum.import.so
/usr/lib/chicken/11/chicken.internal.import.so
/usr/lib/chicken/11/chicken.tcp.import.so
/usr/lib/chicken/11/chicken.continuation.import.so
/usr/lib/chicken/11/chicken.port.import.so
/usr/lib/chicken/11/chicken.random.import.so
/usr/lib/chicken/11/chicken.compiler.user-pass.import.so
/usr/lib/chicken/11/chicken.process-context.import.so
/usr/lib/chicken/11/chicken.bitwise.import.so
/usr/lib/chicken/11/srfi-4.import.so
/usr/lib/chicken/11/chicken.load.import.so
/usr/lib/chicken/11/chicken.blob.import.so
/usr/lib/chicken/11/chicken.time.posix.import.so
/usr/lib/chicken/11/chicken.file.posix.import.so
/usr/lib/chicken/11/chicken.flonum.import.so
/usr/lib/chicken/11/chicken.condition.import.so
/usr/lib/chicken/11/chicken.pretty-print.import.so
/usr/lib/chicken/11/types.db
/usr/lib/chicken/11/chicken.foreign.import.so
/usr/lib/chicken/11/chicken.repl.import.so
/usr/lib/chicken/11/chicken.pathname.import.so
/usr/lib/chicken/11/chicken.sort.import.so
/usr/lib/chicken/11/chicken.keyword.import.so
/usr/lib/chicken/11/chicken.process.signal.import.so
/usr/lib/chicken/11/chicken.platform.import.so
/usr/lib/chicken/11/chicken.base.import.so
/usr/lib/chicken/11/chicken.syntax.import.so
/usr/lib/chicken/11/chicken.file.import.so
/usr/lib/chicken/11/chicken.memory.import.so
/usr/lib/chicken/11/chicken.gc.import.so
/usr/lib/chicken/11/chicken.io.import.so
/usr/lib/chicken/11/chicken.memory.representation.import.so
/usr/lib/chicken/11/chicken.process.import.so
/usr/lib/chicken/11/chicken.plist.import.so
/usr/lib/chicken/11/chicken.string.import.so
/usr/lib/chicken/11/chicken.errno.import.so
/usr/lib/chicken/11/chicken.format.import.so
/usr/lib/chicken/11/chicken.eval.import.so
/usr/lib/chicken/11/chicken.irregex.import.so
/usr/lib/chicken/11/chicken.process-context.posix.import.so
/usr/lib/chicken/11/chicken.read-syntax.import.so
/usr/lib/chicken/11/chicken.csi.import.so
/usr/lib/chicken/11/chicken.locative.import.so
/usr/bin/csi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-16 19:39:59 -07:00
Alexandru Ardelean a85bc94a76 python-asn1crypto: drop package
I can't seem to see any package that needs it.
This was added for cryptography, since it was needed up to version 2.7
asn1-crypto doesn't have a user since commit 9d892e3cf8
So, remove it.

Abandoned packaged PR: https://github.com/openwrt/packages-abandoned/pull/23

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-16 19:39:31 -07:00
Jeffery To 26f99270d2 python-packages: Remove unused library packages
With the removal of Seafile, these library packages no longer have any
in-repo users. They will be imported into the abandoned packages
repo[1].

[1]: https://github.com/openwrt/packages-abandoned/pull/24

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-16 19:38:32 -07:00
Jeffery To 4d0d6eedfa python-jsonschema: Update to 4.4.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-08 21:56:02 -08:00
Javier Marcet 0395f9d2a4 python-websocket-client: update to 1.3.1
- 1.3.1:
  - Fix 10 year old bug and improve dispatcher handling for
  run_forever
  - Fix run_forever to never return None, only return True or False,
  and add two tests
  - Remove Python 3.6 support, EOL in Dec 2021

- 1.3.0:
  - BREAKING: Set Origin header to use https:// scheme when wss://
  WebSocket URL is passed
  - Replace deprecated/broken WebSocket URLs with working ones
  (6ad5197)
  - Add documentation referencing rel for automatic reconnection with
  run_forever()
  - Add missing opcodes 1012, 1013
  - Add errno.ENETUNREACH to improve error handling (da1b050)
  - Minor documentation improvements and typo fixes

- 1.2.3:
  - Fix broken run_forever() functionality

- 1.2.2:
  - Migrate wsdump script in setup.py from scripts to newer
  entry_points
  - Add support for ssl.SSLContext for arbitrary SSL parameters
  - Remove keep_running variable
  - Remove HAVE_CONTEXT_CHECK_HOSTNAME variable (dac1692)
  - Replace deprecated ssl.PROTOCOL_TLS with ssl.PROTOCOL_TLS_CLIENT
  - Simplify code and improve Python 3 support
  - Fill default license template fields
  - Update CI tests
  - Improve documentation

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-08 21:54:19 -08:00
Javier Marcet 1232273626 python3-distro: update to version 1.7.0
- BACKWARD COMPATIBILITY:

  - Dropped support for EOL Pythons 2.7, 3.4 and 3.5
  - Dropped support for LSB and uname back-ends when --root-dir is
  specified
  - Moved distro.py to src/distro/distro.py

- ENHANCEMENTS:

  - Documented that distro.version() can return an empty string on
  - rolling releases
  - Documented support for Python 3.10
  - Added official support for Rocky Linux distribution
  - Added a shebang to distro.py to allow standalone execution
  - Added support for AIX platforms
  - Added compliance for PEP-561

- BUG FIXES:

  - Fixed include_uname parameter oversight
  - Fixed crash when uname -rs output is empty
  - Fixed Amazon Linux identifier in distro.id() documentation
  - Fixed OpenSuse >= 15 support
  - Fixed encoding issues when opening distro release files
  - Fixed linux_distribution regression

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-03-08 21:54:05 -08:00
Jeffery To 9704e900da golang: Update to 1.17.8
Includes fix for CVE-2022-24921 (regexp: stack overflow (process exit)
handling deeply nested regexp).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-06 19:38:35 -08:00
Jeffery To 630d6800f2 python-twisted: Update to 22.2.0
Includes fix for CVE-2022-21716 (The Twisted SSH client and server
implementation naively accepted an infinite amount of data for the
peer's SSH version identifier.)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-07 04:01:16 +08:00
Alexandru Ardelean 33e1e206d3 python-lxml: bump to version 4.8.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-05 08:00:52 +02:00
Rosen Penev 59980b6be7 perl: add powerpc64 support
Needed by the QoriQ target.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-03-02 16:30:32 -08:00
Sergey V. Lobanov 45b8ef2822 python-psutil: update to version 5.9.0, fix build on macos
1. updated to 5.9.0

2. psutil can not be built on macos due to build script detects Darwin
using sys.platform and changes build logic to build for Darwin, but
OpenWrt is Linux.
This commit add patch to allow redefining sys.platform and uses
env var TARGET_SYS_PLATFORM to specify linux as sys platfrom.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-24 14:33:56 -08:00
Josef Schlehofer 2d10b0836d MarkupSafe: update to version 2.1.0
Changelog:
https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-24 15:46:36 +01:00
Michael Heimpold 2c19d13be8 php8: update to 8.1.3
This fixes:
    - CVE-2021-21708

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-02-18 22:06:15 +01:00
Jeffery To 9f3816d1c6 python-twisted: Update to 22.1.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-02-15 16:42:13 -08:00
Kerma Gérald 846df82a84 lua-cs-bouncer: initial package
Lua Crowdsec Bouncer module
  Lua module to allow ip (or not) from CrowdSec API.
  https://github.com/crowdsecurity/lua-cs-bouncer

  required for crowdsec-nginx-bouncer

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-02-14 17:26:16 -08:00
Siger Yang 4137429a25 cqueues: add cqueues(rel-20200726) to feeds
Signed-off-by: Siger Yang <siger.yang@outlook.com>
2022-02-14 17:25:51 -08:00
Jeffery To 69c53fcb6c golang: Update to 1.17.7, refresh patch
This includes fixes for:

* CVE-2022-23772: math/big: Rat.SetString may consume large amount of
  RAM and crash

* CVE-2022-23806: crypto/elliptic: IsOnCurve returns true for invalid
  field elements

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-02-14 17:17:07 -08:00
Alexandru Ardelean 95f38fead8 python: django: bump to 4.0.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-02-10 21:09:36 -08:00
Alexandru Ardelean 2c89383068 python: pillow: bump to 9.0.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-02-10 21:09:36 -08:00
Sergey V. Lobanov c55092396e ruby: fix build on macos
1. ruby/host build fails on macos due to Apple ld generates warning
if a folder from LDFLAGS is not exist. configure script catches this
warning and fails. This patch disables ld warnings for macos

2. ruby build fails on macos due /bin/true is not exist on macos.
This patch replaces /bin/true with true in OpenWrt Makefile

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-02-06 21:46:17 -03:00
Philip Prindeville 5c311014ca perl-cgi: Update to 4.54
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2022-02-06 11:08:44 -07:00
Josef Schlehofer d34e46e535 Merge pull request #17743 from turris-cz/dnspython-bump
python-dns: update to version 2.2.0
2022-02-06 16:11:52 +01:00
Michal Vasilek 75933e73f2 ruby: update to 3.0.3
* fixes CVE-2021-41817, CVE-2021-41816 and CVE-2021-41819

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-02-06 08:54:05 -03:00
Šimon Bořek 32e2a2fa2a python-sentry-sdk: update to 1.5.4
changelog: https://github.com/getsentry/sentry-python/blob/f6d3adcb3d7017a55c1b06e5253d08dc5121db07/CHANGELOG.md#154

Signed-off-by: Šimon Bořek <borek@autobakterie.cz>
2022-02-04 18:45:12 +01:00
Josef Schlehofer c0198bad43 python-dns: update to version 2.2.0
- Removed PYPI_SOURCE_EXT as this release provides tarball with .tar.gz
extension, which is default.

- Changelog: https://dnspython.readthedocs.io/en/stable/whatsnew.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-31 06:37:23 +01:00
Sergey V. Lobanov e4755df4c8 lyaml: fix build on macos
lyaml build script detects Darwin using `uname -s` and changes
build logic so lyaml package can not be built on macos.

This patch uses fakeuname host tool to redefine `uname -s` output
and fix build on macos.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-29 13:31:55 -08:00
Sergey V. Lobanov 6e9c701050 tcl: fix build on macos
configure script detects Darwin and uses flags incompatible with
Linux target build.

This patch uses fakeuname tool if host OS is MacOS to avoid Darwin
detection on target build.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-29 08:19:54 -08:00
Michael Heimpold 267753b1d4 Merge pull request #17676 from mhei/php8-update
php8: update to 8.1.2
2022-01-25 21:40:04 +01:00
Hirokazu MORIKAWA 8278998e48 node: January 10th 2022 Security Releases
Update to v14.18.3

January 10th 2022 Security Releases:
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
Prototype pollution via console.table properties (Low)(CVE-2022-21824)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-01-24 15:44:05 -08:00
Jeffery To af341cd76e micropython: Update to 1.18, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-24 15:43:39 -08:00
Michael Heimpold ca4e6992fd php8: update to 8.1.2
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-01-22 21:48:12 +01:00
Sergey V. Lobanov 30f4e26d16 perl-device-serialport: fix build on macos
./configure script detects macos specific system headers
(IOKit/serial/ioss.h and sys/ttycom.h) that are not available
during compile time. There is no way to pass ac_cv_* vars to
./configure script due to perl wrappers

To fix this issue, fake(empty) headers provided during compile
time if build host is MacOS

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-18 18:10:18 -08:00
Sergey V. Lobanov 0e6a33a3a4 python-curl: fix build on macos
setup.py detects macos (darwin) and adds -flat_namespace flag. This
flag is not compatible with GCC that is used to compile target.

This patch patch disables darwin detection

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-18 18:09:35 -08:00
Josef Schlehofer 88578e77a0 Merge pull request #17624 from jefferyto/python-3.10.2
python3: Update to 3.10.2, refresh patches
2022-01-18 17:24:26 +01:00
Sergey V. Lobanov 99515bdf96 luaossl: fix build on macos
luaossl detects OS and changes compilation flags depends on OS.
If Darwin is detected then it adds GCC non-compatible flags.
OpenWrt is always Linux so build OS detection is disabled

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-17 21:12:53 -08:00
Jeffery To 5b2c8bccf3 python3: Update to 3.10.2, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-17 04:32:42 +08:00
Sergey V. Lobanov a00735ec8c luasql: fix build on macos
luasql ./config scripts checks `uname -s` output and changes
LIB_OPTION from '-static' to macos specific if detected OS is
Darwin. These flags are not compatible with GCC

OpenWrt is always Linux, this patch removes Darwin
specific stuff from compilation flags

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-01-11 16:25:33 -08:00