openwrt-mirror/packages
1
0 Fork 0
mirror of https://github.com/openwrt/packages.git synced 2026-11-01 21:39:13 +04:00
Code Issues Packages Projects Releases Wiki Activity
31,635 Commits 13 Branches 1 Tag
828bbd61d60c7844e82eb5d53dfbbded1b321d53
Commit Graph
4542 Commits
Author SHA1 Message Date
Javier Marcet 844fec9fc0 luajit2: update to v2.1-20240314 
Signed-off-by: Javier Marcet <javier@marcet.info>
 2024-04-01 10:49:33 +02:00
Jianhui Zhao 8eb39f3a87 lua-eco: update to 3.3.0 
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
 2024-04-01 12:55:52 +08:00
Philip Prindeville ccabe6d8e6 perl-text-csv_xs: Update to 1.53 
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2024-03-29 08:03:49 +01:00
krant 7f01006f96 rust: update to 1.77.0 
- Restore patch hunk mis-deleted in dccb910
- Refresh patches
- Remove --enable-missing-tools configure option deleted in the upstream

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
 2024-03-26 11:45:24 +02:00
Philip Prindeville c8d934b6df perl-cgi: Update to 4.64 
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2024-03-25 10:19:50 -06:00
krant 4cdbedc5f2 erlang: update to 26.2.3 
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
 2024-03-22 16:05:20 +08:00
Michael Heimpold 8742b6c340 Merge pull request #23695 from mhei/php8-update-to-8.3.4 
php8: update to 8.3.4
 2024-03-21 07:42:15 +01:00
Josef Schlehofer 8b7040b6de lualanes: update to version 3.16.3 and use tarball 
1. Update it to version 3.16.3
Release notes: https://github.com/LuaLanes/lanes/releases/tag/v3.16.3

2. Change to download tarball instead of checking out Git sources
In the previous commit (in the Fixes tag), it was changed to Git sources without any reason. Let's revert it back. Let's use again tagged release.

Fixes: b93e5b45b1 ("lualanes: Version bump to v3.16.2")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2024-03-21 14:09:57 +08:00
Zephyr Lykos 456fa1f1b6 golang: Update to 1.22.1 
Go 1.22.1 contains the following security fixes:

- CVE-2024-24783:
  crypto/x509: Verify panics on certificates with an unknown public key
  algorithm
- CVE-2023-45290
  net/http: memory exhaustion in Request.ParseMultipartForm
- CVE-2023-45289
  net/http, net/http/cookiejar: incorrect forwarding of sensitive headers
  and cookies on HTTP redirect
- CVE-2024-24785
  html/template: errors returned from MarshalJSON methods may break
  template escaping
- CVE-2024-24784
  net/mail: comments in display names are incorrectly handled

https://go.dev/doc/devel/release#go1.22.1
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
 2024-03-20 17:25:09 +08:00
Zephyr Lykos a66a378669 golang: Update to 1.22.0 
Added a third bootstrap stage since go1.22 (and onwards) requires
at least go1.20.14 to build.[1]

[1]: https://go.dev/doc/go1.22#bootstrap

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
 2024-03-20 17:25:09 +08:00
Alexandru Ardelean 79f486b0b2 Merge pull request #23648 from commodo/python-updates1 
python-{pytz,dateutil,evdev},django: bump versions
 2024-03-19 16:33:29 +02:00
Florian Eckert f29102f589 luafilesystem: add missing license information 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2024-03-19 14:11:05 +01:00
Michael Heimpold a519774b97 php8: update to 8.3.4 
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2024-03-17 18:00:30 +01:00
Alexandru Ardelean ee33d30785 django: bump to version 5.0.3 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
 2024-03-14 16:04:24 +02:00
Alexandru Ardelean 637b440b8f python-evdev: bump to version 1.7.0 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
 2024-03-14 16:04:24 +02:00
Alexandru Ardelean 321a71e25c python-dateutil: bump to version 2.9.0.post0 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
 2024-03-14 16:04:24 +02:00
Alexandru Ardelean faccd9214a python-pytz: bump to version 2024.1 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
 2024-03-14 16:04:24 +02:00
jasle 315b58a488 lua-struct: add package 
lua-struct is a implementation of binary packing/unpacking in pure lua.

Resulting-package:
 * lua-struct

Signed-off-by: jasle <jasle@riseup.net>
 2024-03-04 00:28:42 +00:00
Fabian Lipken 21c721440c python-bcrypt: Update to 4.1.2 
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
 2024-03-02 19:29:59 +01:00
Tianling Shen 34867e83ca golang: Update to 1.21.7 
go1.21.6 (released 2024-01-09) includes fixes to the compiler,
the runtime, and the crypto/tls, maps, and runtime/pprof packages.

go1.21.7 (released 2024-02-06) includes fixes to the compiler,
the go command, the runtime, and the crypto/x509 package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2024-03-02 19:16:06 +08:00
Michael Heimpold 42aa20ddeb php8/pecl8-pecl-*: use https URLs for PKG_SOURCE_URLs 
Most packages already use https URLs and for PHP and PECL
package downloads https is working properly.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2024-02-26 21:03:22 +01:00
krant dccb910ae0 rust: update to 1.76.0 
- Use .xz for source archive
- Refresh patches

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
 2024-02-25 16:14:46 +08:00
krant bd84d97be6 python-yaml: fix build with Cython 3 
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
 2024-02-24 12:20:49 -08:00
Oskari Rauta b6e8be2389 micropython: disable mold 
package fails to build with mold linker due to unregocnized flag.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
 2024-02-22 16:05:05 -08:00
Michael Heimpold a8c69cf6bf php8: update to 8.3.3 
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2024-02-19 08:07:02 +01:00
Hirokazu MORIKAWA 52e6017ad1 node: February 14 2024 Security Releases 
Update to v20.11.1
This is a security release.

Notable changes
* CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
* CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
* CVE-2024-21896 - Path traversal by monkey-patching Buffer internals- (High)
* CVE-2024-22017 - setuid() does not drop all privileges due to io_uring - (High)
* CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
* CVE-2024-21891 - Multiple permission model bypasses due to improper path traversal sequence sanitization - (Medium)
* CVE-2024-21890 - Improper handling of wildcards in --allow-fs-read and --allow-fs-write (Medium)
* CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
* undici version 5.28.3
* libuv version 1.48.0
* OpenSSL version 3.0.13+quic1 (Depends on shared library provided by OpenWrt)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
 2024-02-16 15:46:33 +01:00
Rosen Penev 93b7989d8e vala: remove pcre2 patch 
Issue was avoided with glib2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2024-02-14 17:04:49 -08:00
Rosen Penev 648e566361 python-aiohttp: update to 3.9.3 
Fixes CVE-2023-47627

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2024-02-14 12:58:00 -08:00
krant e14154df43 erlang: update to 26.2.2 
- Drop upstreamed patch
- Fix broken symlink /usr/bin/epmd
- Re-enable mips16
- Formatting

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
 2024-02-08 21:41:50 -08:00
Alexandru Ardelean 62e42c9a97 python-lxml: bump to version 5.1.0 
Also add a quick test.sh file.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
 2024-02-08 09:40:01 -08:00
Alexandru Ardelean 641dfa1695 django: bump to version 5.0.1 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
 2024-02-08 09:40:01 -08:00
Alexandru Ardelean a66e68e2bb numpy: bump to version 1.26.3 
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
 2024-02-08 09:40:01 -08:00
Eneas U de Queiroz ce92b017a3 python-certifi: Update to 2024.2.2 
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
 2024-02-05 15:25:45 -03:00
Timothy M. Ace 868a469ccc python-orjson: update to version 3.9.13 
Relevant changes since 3.9.12:
- FIXED: Serialization str escape uses only 128-bit SIMD.
- FIXED: Fix compatibility with CPython 3.13 alpha 3.
- Publish musllinux_1_2 instead of musllinux_1_1 wheels.
- Serialization uses small integer optimization in CPython 3.12 or later.

Signed-off-by: Timothy M. Ace <openwrt@timothyace.com>
 2024-02-05 15:17:40 +01:00
Fabrice Fontaine 94734c4bf9 lang/python/python-yaml: fix PKG_CPE_ID 
There is not a single CVE linked to pyyaml_project:pyyaml so use
pyyaml:pyyaml instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pyyaml:pyyaml

Fixes: c06a04c754 (python-yaml: update to version 5.1)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-02-05 00:14:47 -08:00
Mark Baker 08e51ab50a lualanes: Version bump to v3.16.2 
Update the PKG_VERSION and PKG_SOURCE_VERSION to pull version 3.16.2
from upstream. The upstream version includes fixes for the
`pthread_yield: symbol not found` issue.

Removed patches 100-musl-compat.patch and 200-fix-redef-error.patch
as fixes were implemented upstream.

Build tested on aarch64, arm_cortex_a15/a9, i386, mips[el]_24kc,
powerpc_464fp/8548, riscv64, x86_64. Confirmed on x86_64.

Signed-off-by: Mark Baker <mark@vpost.net>
 2024-02-04 16:37:07 -08:00
Timothy Ace c2aedbf411 perl-time-moment: initial package at v0.44 
Builds compiled perl module Time::Moment v0.44 from CPAN.

Signed-off-by: Timothy Ace <openwrt@timothyace.com>
 2024-02-04 16:30:55 -08:00
Fabrice Fontaine 5afe5c9031 treewide: assign PKG_CPE_ID 
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-02-04 16:16:10 -08:00
Fabrice Fontaine acad8ffb5f lang/python/python-pip: fix PKG_CPE_ID 
There is not a single CVE linked to python:pip so use pypa:pip instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pypa:pip

Moreover, CPE_ID missed PKG_ prefix

Fixes: eee273507b (python3: Split pip into separate source package)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-02-04 16:03:49 -08:00
Fabrice Fontaine 3380427f29 lang/python/python-paho-mqtt: fix license 
python-paho-mqtt is licensed under EPL-2.0, not EPL-1.0, since version
1.6.0 and
https://github.com/eclipse/paho.mqtt.python/commit/fabe7500fb6fde31fd98c619e0117d1c651fd18d

While at it, add LICENSE.txt to PKG_LICENSE_FILES

Fixes: 784f2a519b (python-paho-mqtt: bump to version 1.6.1)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-02-04 15:59:21 -08:00
Fabrice Fontaine c0aec8bc08 lang/python/python-requests: fix PKG_CPE_ID 
There is not a single CVE linked to python-requests:requests so use
python:requests instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:python:requests

Fixes: ceadbcbb64 (treewide: add PKG_CPE_ID for cvescanner)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-02-04 15:56:56 -08:00
Fabrice Fontaine d369edb571 lang/python/python-urllib3: fix PKG_CPE_ID 
There is not a single CVE linked to urllib3_project:urllib3 so use
python:urllib3 instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:python:urllib3

Fixes: 6dcaa769d8 (python-urllib3: update to version 1.25)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-02-04 15:56:22 -08:00
Fabrice Fontaine 8b9965fcb3 lang/python/python-aiohttp: fix PKG_CPE_ID 
aiohttp:aiohttp is a better CPE ID than aio-libs_projet:aiohttp as this
CPE ID has the latest CVEs (whereas aio-libs_project:aiohttp only has
one CVE from 2018):
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:aiohttp:aiohttp

Fixes: 2edf5034f1 (python-aiohttp: add a new package)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-02-04 13:15:41 +01:00
Fabrice Fontaine 820fcc5fb9 treewide: fix licence typos 
- PKG_LICENCE -> PKG_LICENSE
- PKC_LICENSE_FILES -> PKG_LICENSE_FILES
- BSD 3-Clause -> BSD-3-Clause
- BSD-3-clause -> BSD-3-Clause
- BSD-2-clause -> BSD-2-Clause
- Public Domain -> Public-Domain
- PublicDomain -> Public-Domain
- Drop unneeded ',' in PKG_LICENSE or PKG_LICENSE_FILES

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-01-31 16:00:10 -08:00
krant c813aaaed7 erlang: remove CFLAGS modification since it has been fixed in the upstream 
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
 2024-01-29 16:05:22 -08:00
krant e8673e9e85 erlang: update to 26.2.1 
- Update to Erlang/OTP 26.2.1
- Remove obsolete configure options
- Remove obsolete patches, add new one
- Add missing no_dot_erlang.boot file (fixes #20587)
- Change package URL to https

Signed-off-by: krant <aleksey.vasilenko@gmail.com>
 2024-01-29 16:05:22 -08:00
Fabrice Fontaine dd52b70c4c lang/python/python-docker: assign PKG_CPE_ID 
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:docker:docker-py

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-01-29 16:00:22 -08:00
Fabrice Fontaine 72e92747a7 lang/vala: assign PKG_CPE_ID 
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:vala

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2024-01-29 15:58:26 -08:00
Michael Heimpold 002aa5f541 Merge pull request #23182 from mhei/php8-update-to-8.3.2 
php8: update to 8.3.2
 2024-01-29 07:56:56 +01:00
Javier Marcet 6017084ea0 python-dotenv: update to v1.0.1 
Signed-off-by: Javier Marcet <javier@marcet.info>
 2024-01-29 13:58:15 +08:00