Commit Graph

4857 Commits

Author SHA1 Message Date
Rosen Penev
f026ff03b3 libtins: update to 4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:02:22 -07:00
Rosen Penev
38974f4e06 libidn: update to 1.41
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:02:09 -07:00
Rosen Penev
9cf682901e libidn2: update to 2.3.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:01:59 -07:00
Rosen Penev
709a81f2fe liblz4: update to 1.9.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:01:47 -07:00
Rosen Penev
0a92b8c1ab libarchive: update to 3.6.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:54 -07:00
Rosen Penev
97cb401f0d libmad: update to 0.16.3
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:34 -07:00
Rosen Penev
5ea89498ff libnpupnp: update to 5.0.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:23 -07:00
Rosen Penev
7f0ccf4b14 libpng: update to 1.6.38
Remove upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:55:22 -07:00
Nikos Mavrogiannopoulos
6c70c1d900 Merge pull request #19797 from neheb/12
libtasn1: update to 4.19.0
2022-11-04 20:34:25 +01:00
Rosen Penev
b589403c72 libjpeg-turbo: update to 2.1.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-03 20:25:53 -07:00
Rosen Penev
b1d112c5d2 libtasn1: update to 4.19.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-03 19:42:18 -07:00
Jan Hák
c2a270eb7a libedit: update to version 20221030-3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2022-11-01 14:49:46 +01:00
Alois Klink
4eff6c57c1 gdbm: configure with --without-readline
By default, gdbm configures/builds with readline and curses support
if they exist.

This can cause race conditions when compiling gdbm and ncurses in
parallel, as gdbm may try to link to ncurses when it doesn't exist.

This commit forces gdbm to skip using readline/ncurses, since it's
unlikely that anybody is using the line-editing feature of gdbm.

See [gdbm's README][1] for more info.

[1]: https://git.gnu.org.ua/gdbm.git/tree/README?h=v1.21#n50

Signed-off-by: Alois Klink <alois@aloisklink.com>
2022-10-27 12:04:00 -07:00
Josef Schlehofer
a4e8cbb89a libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-26 09:31:30 +02:00
Josef Schlehofer
02eb18a65f Merge pull request #19701 from turris-cz/libwebsockets-conflicts-provides
libwebsockets: full variant provides OpenSSL
2022-10-25 14:28:58 +02:00
Josef Schlehofer
676c5c72b5 libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 12:27:11 +02:00
Josef Schlehofer
77e682a11c libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 07:57:23 +02:00
Nick Hainke
ed7d38c145 libmariadb: update to 3.1.18
The official download mirror does not host 3.1.12 anymore. Update to
newest version to solve the issue.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-24 05:38:43 -07:00
Hirokazu MORIKAWA
2c16091d07 icu: bump to 72.1
It updates to Unicode 15, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 42 locale data with various additions and corrections.

ICU 72 adds technology preview implementations for person name formatting, as well as for a new version of message formatting based on a proposed draft Unicode specification.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-10-23 18:42:29 +02:00
Lucian Cristian
990748d135 nss: update to 4.84
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:34 -07:00
Lucian Cristian
0e0286e7a1 nspr: update to 4.35
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:29 -07:00
Michael Heimpold
60e503a4d7 Merge pull request #19614 from mhei/libxml2-update-2.10.3
libxml2: update to 2.10.3
2022-10-17 07:42:47 +02:00
Daniel Golle
032e14c96e libksba: update to version 1.6.2
Noteworthy changes in version 1.6.2 (2022-10-07) [C22/A14/R2]
------------------------------------------------

 * Fix integer overflow in the CRL parser.  [rK4b7d9cd4a0]

Release-info: https://dev.gnupg.org/T6230

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-16 20:30:30 +01:00
Michael Heimpold
c2742973b0 libxml2: update to 2.10.3
This fixes:
    - CVE-2022-40303
    - CVE-2022-40304

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-16 19:57:59 +02:00
Nikos Mavrogiannopoulos
4f3d297e1f Merge pull request #19564 from PolynomialDivision/update-gnutls-3-7-8
gnutls: update to 3.7.8
2022-10-09 09:35:38 +02:00
Alexandru Ardelean
4e4e7fdf16 Merge pull request #19538 from mhei/libzip-update-1.9.2
libzip: update to 1.9.2
2022-10-09 08:11:16 +03:00
Nick Hainke
e2a9c55980 gnutls: update to 3.7.8
Release Notes:
https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-09 00:23:24 +02:00
Daniel Golle
df589ce880 libksba: update to version 1.6.1
Update to stable release 1.6.1.
See commit log since version 1.6.0 for changes[1].

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=shortlog;h=d3c1e063d708a46ef39152256f8b1ea466b61be0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-07 02:11:36 +01:00
Michael Heimpold
94e60a352f libzip: update to 1.9.2
Also drop already mainlined patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-06 21:06:24 +02:00
Josef Schlehofer
ec6e977cd4 Merge pull request #19372 from cotequeiroz/libgd
libgd: avoid recursive and redundant dependencies
2022-10-06 11:45:23 +02:00
Petr Štetiar
845d81ca09 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-10-04 00:58:29 -07:00
Nick Hainke
a8774f84e9 expat: update to 2.4.9
Fixes CVE-2022-40674.

Release Notes:
- https://github.com/libexpat/libexpat/blob/R_2_4_8/expat/Changes
- https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-03 15:04:50 -07:00
Michael Heimpold
f27fb38c6b libmodbus: update to 3.1.8
- drop obsolete configure argument
- update download url

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-09-28 21:39:07 +02:00
Karl Palsson
f4ce13b700 libs/libwebsockets: Update to 4.3.x
Changes since 4.2 are extensive, as always.
https://libwebsockets.org/git/libwebsockets/tree/changelog?h=v4.3-stable#n4

Eg, Adds CBOR, support for reduced memory CA verification, cookie jars,
mqtt client gains qos2, mbedtls v3, fault injection apis, better support
for event loops.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:38:00 +00:00
Karl Palsson
75df9b7a4a libs/cjson: bump to 1.7.15
This is a bugfix release.
Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:38:00 +00:00
Alexandru Ardelean
df2f351463 openblas: bump to version 0.3.21
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-09-25 11:40:40 -07:00
Rosen Penev
a546f26ddb Revert "jose: remove libjose"
This reverts commit 02d6c8346c.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-25 02:10:06 -07:00
Rosen Penev
d70538c43c Revert "jose: fix static library usage"
This reverts commit c61b70918b.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-25 02:10:06 -07:00
Rosen Penev
04043be54a glib2: backport locale fix
Fixes compilation with non English locale.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 20:49:27 -07:00
Rosen Penev
dbdfef081c libowfat: fix glibc compilation
Ported Fedora patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-23 01:14:24 +01:00
Rosen Penev
82700f0d55 libsoup3: update maintainer
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 15:48:52 -07:00
Rosen Penev
fc7faa2122 libsoup3: add
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 01:31:28 -07:00
Martin Blumenstingl
8cead176bd libcli: Add new package
This package is a dependency for building mausezahn as part of the
netsniff-ng sources. mausezahn is a multicast traffic generator used by
the upcoming kernel-selftests-net-forwarding package.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
2022-09-22 01:30:14 -07:00
Florian Eckert
7e3a2f926b libmspack: initial checkin
libmspack is a library for some loosely related Microsoft compression
formats: CAB, CHM, HLP, LIT, KWAJ and SZDD

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-09-22 01:29:04 -07:00
Rosen Penev
5d27631d9f glib2: update to 2.74.0
Remove upstreamed patch and delete pointless one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 01:20:17 -07:00
Michael Heimpold
ed4d9ba0b5 libxml2: update to 2.10.2 (closes #19288)
This fixes:
- CVE-2022-2309

Release Notes:
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.0
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.1
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.2

Also drop removed docbook compile switch.
Disable PKG_FIXUP to allow backporting.

Signed-off-by: Nick Hainke <vincent@systemli.org>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-09-20 23:19:38 +02:00
Rosen Penev
c61b70918b jose: fix static library usage
When libjose is built statically, it must use --whole-archive as it uses
GCC's constructor attribute to initialize itself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-18 23:19:31 -07:00
Eneas U de Queiroz
085eb34fbf libgd: avoid recursive and redundant dependencies
Change the CONFLICTS line from the libgd-full to libgd to fix a
recursive dependency.

While at it, remove the redundant +LIBGD_TIFF:libtiff
+LIBGD_FREETYPE:libfreetype dependencies from Package/libgd/default.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-09-15 09:53:08 -03:00
Rosen Penev
0db4553ac9 liboil: small cleanups
Fixes a compile error when glib2 is missing.

get rid of nls.mk. iconv/gettext is not used. This was previously here
because of glib2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-14 13:00:04 -07:00
Maxim Anisimov
0b0d8163d5 libqmi: bump to 1.30.8
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
2022-09-14 22:03:19 +03:00