Commit Graph

4595 Commits

Author SHA1 Message Date
Alois Klink
4eff6c57c1 gdbm: configure with --without-readline
By default, gdbm configures/builds with readline and curses support
if they exist.

This can cause race conditions when compiling gdbm and ncurses in
parallel, as gdbm may try to link to ncurses when it doesn't exist.

This commit forces gdbm to skip using readline/ncurses, since it's
unlikely that anybody is using the line-editing feature of gdbm.

See [gdbm's README][1] for more info.

[1]: https://git.gnu.org.ua/gdbm.git/tree/README?h=v1.21#n50

Signed-off-by: Alois Klink <alois@aloisklink.com>
2022-10-27 12:04:00 -07:00
Josef Schlehofer
a4e8cbb89a libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-26 09:31:30 +02:00
Josef Schlehofer
02eb18a65f Merge pull request #19701 from turris-cz/libwebsockets-conflicts-provides
libwebsockets: full variant provides OpenSSL
2022-10-25 14:28:58 +02:00
Josef Schlehofer
676c5c72b5 libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 12:27:11 +02:00
Josef Schlehofer
77e682a11c libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 07:57:23 +02:00
Nick Hainke
ed7d38c145 libmariadb: update to 3.1.18
The official download mirror does not host 3.1.12 anymore. Update to
newest version to solve the issue.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-24 05:38:43 -07:00
Hirokazu MORIKAWA
2c16091d07 icu: bump to 72.1
It updates to Unicode 15, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 42 locale data with various additions and corrections.

ICU 72 adds technology preview implementations for person name formatting, as well as for a new version of message formatting based on a proposed draft Unicode specification.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-10-23 18:42:29 +02:00
Lucian Cristian
990748d135 nss: update to 4.84
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:34 -07:00
Lucian Cristian
0e0286e7a1 nspr: update to 4.35
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:29 -07:00
Michael Heimpold
60e503a4d7 Merge pull request #19614 from mhei/libxml2-update-2.10.3
libxml2: update to 2.10.3
2022-10-17 07:42:47 +02:00
Daniel Golle
032e14c96e libksba: update to version 1.6.2
Noteworthy changes in version 1.6.2 (2022-10-07) [C22/A14/R2]
------------------------------------------------

 * Fix integer overflow in the CRL parser.  [rK4b7d9cd4a0]

Release-info: https://dev.gnupg.org/T6230

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-16 20:30:30 +01:00
Michael Heimpold
c2742973b0 libxml2: update to 2.10.3
This fixes:
    - CVE-2022-40303
    - CVE-2022-40304

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-16 19:57:59 +02:00
Nikos Mavrogiannopoulos
4f3d297e1f Merge pull request #19564 from PolynomialDivision/update-gnutls-3-7-8
gnutls: update to 3.7.8
2022-10-09 09:35:38 +02:00
Alexandru Ardelean
4e4e7fdf16 Merge pull request #19538 from mhei/libzip-update-1.9.2
libzip: update to 1.9.2
2022-10-09 08:11:16 +03:00
Nick Hainke
e2a9c55980 gnutls: update to 3.7.8
Release Notes:
https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-09 00:23:24 +02:00
Daniel Golle
df589ce880 libksba: update to version 1.6.1
Update to stable release 1.6.1.
See commit log since version 1.6.0 for changes[1].

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=shortlog;h=d3c1e063d708a46ef39152256f8b1ea466b61be0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-07 02:11:36 +01:00
Michael Heimpold
94e60a352f libzip: update to 1.9.2
Also drop already mainlined patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-06 21:06:24 +02:00
Josef Schlehofer
ec6e977cd4 Merge pull request #19372 from cotequeiroz/libgd
libgd: avoid recursive and redundant dependencies
2022-10-06 11:45:23 +02:00
Petr Štetiar
845d81ca09 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-10-04 00:58:29 -07:00
Nick Hainke
a8774f84e9 expat: update to 2.4.9
Fixes CVE-2022-40674.

Release Notes:
- https://github.com/libexpat/libexpat/blob/R_2_4_8/expat/Changes
- https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-03 15:04:50 -07:00
Michael Heimpold
f27fb38c6b libmodbus: update to 3.1.8
- drop obsolete configure argument
- update download url

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-09-28 21:39:07 +02:00
Karl Palsson
f4ce13b700 libs/libwebsockets: Update to 4.3.x
Changes since 4.2 are extensive, as always.
https://libwebsockets.org/git/libwebsockets/tree/changelog?h=v4.3-stable#n4

Eg, Adds CBOR, support for reduced memory CA verification, cookie jars,
mqtt client gains qos2, mbedtls v3, fault injection apis, better support
for event loops.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:38:00 +00:00
Karl Palsson
75df9b7a4a libs/cjson: bump to 1.7.15
This is a bugfix release.
Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:38:00 +00:00
Alexandru Ardelean
df2f351463 openblas: bump to version 0.3.21
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-09-25 11:40:40 -07:00
Rosen Penev
a546f26ddb Revert "jose: remove libjose"
This reverts commit 02d6c8346c.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-25 02:10:06 -07:00
Rosen Penev
d70538c43c Revert "jose: fix static library usage"
This reverts commit c61b70918b.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-25 02:10:06 -07:00
Rosen Penev
04043be54a glib2: backport locale fix
Fixes compilation with non English locale.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 20:49:27 -07:00
Rosen Penev
dbdfef081c libowfat: fix glibc compilation
Ported Fedora patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-23 01:14:24 +01:00
Rosen Penev
82700f0d55 libsoup3: update maintainer
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 15:48:52 -07:00
Rosen Penev
fc7faa2122 libsoup3: add
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 01:31:28 -07:00
Martin Blumenstingl
8cead176bd libcli: Add new package
This package is a dependency for building mausezahn as part of the
netsniff-ng sources. mausezahn is a multicast traffic generator used by
the upcoming kernel-selftests-net-forwarding package.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
2022-09-22 01:30:14 -07:00
Florian Eckert
7e3a2f926b libmspack: initial checkin
libmspack is a library for some loosely related Microsoft compression
formats: CAB, CHM, HLP, LIT, KWAJ and SZDD

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2022-09-22 01:29:04 -07:00
Rosen Penev
5d27631d9f glib2: update to 2.74.0
Remove upstreamed patch and delete pointless one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 01:20:17 -07:00
Michael Heimpold
ed4d9ba0b5 libxml2: update to 2.10.2 (closes #19288)
This fixes:
- CVE-2022-2309

Release Notes:
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.0
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.1
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.2

Also drop removed docbook compile switch.
Disable PKG_FIXUP to allow backporting.

Signed-off-by: Nick Hainke <vincent@systemli.org>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-09-20 23:19:38 +02:00
Rosen Penev
c61b70918b jose: fix static library usage
When libjose is built statically, it must use --whole-archive as it uses
GCC's constructor attribute to initialize itself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-18 23:19:31 -07:00
Eneas U de Queiroz
085eb34fbf libgd: avoid recursive and redundant dependencies
Change the CONFLICTS line from the libgd-full to libgd to fix a
recursive dependency.

While at it, remove the redundant +LIBGD_TIFF:libtiff
+LIBGD_FREETYPE:libfreetype dependencies from Package/libgd/default.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-09-15 09:53:08 -03:00
Rosen Penev
0db4553ac9 liboil: small cleanups
Fixes a compile error when glib2 is missing.

get rid of nls.mk. iconv/gettext is not used. This was previously here
because of glib2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-14 13:00:04 -07:00
Maxim Anisimov
0b0d8163d5 libqmi: bump to 1.30.8
Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
2022-09-14 22:03:19 +03:00
Michael Pratt
980707ac10 apr: add autotools compatibility backports
Backport a bunch of patches that fixes build
when using new Autoconf and Automake.

The patches removed are replaced by upstream backports
which are more complete.

Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-09-09 15:20:58 -07:00
Florian Eckert
99a659c798 Merge pull request #19188 from mars642/feature_lorawan
basicstation, sx1302_hal: initial commit
2022-09-08 16:23:18 +02:00
Daniel Golle
d3b5074476 libp11: update to version 0.4.12
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-07 22:56:56 +01:00
Daniel Golle
b95dbe4187 libinput: update to version 1.19.4
This release includes a fix for CVE-2022-1215, a format string
vulnerabilty in the evdev device handling. For details, see
https://gitlab.freedesktop.org/libinput/libinput/-/issues/752

Peter Hutterer (2):
      evdev: strip the device name of format directives
      libinput 1.19.4

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-07 22:56:46 +01:00
Daniel Golle
630f5b1608 libevdev: update to version 1.13.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-07 22:56:40 +01:00
Daniel Golle
ead096d6dd postgresql: update to version 14.5
Release date: 2022-08-11
Adresses CVE-2022-2625.
For more details, please see the release notes[1].

[1]: https://www.postgresql.org/docs/release/14.5/
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-07 22:56:35 +01:00
Daniel Golle
00bfb4f151 gpgme: update to version 1.18.0
Noteworthy changes in version 1.18.0 (2022-08-10)
 -------------------------------------------------

 * New keylist mode to force refresh via external methods.  [T5951]
 * The keylist operations now create an import result to report the
   result of the locate keylist modes.  [T5951]
 * core: Return BAD_PASSPHRASE error code on symmetric decryption
   failure.  [T5939]
 * cpp, qt: Do not export internal symbols anymore.  [T5906]
 * cpp, qt: Support revocation of own OpenPGP keys.  [T5904]
 * qt: The file name of (signed and) encrypted data can now be set.  [T6056]
 * cpp, qt: Support setting the primary user ID.  [T5938]
 * python: Fix segv(NULL) when inspecting contect after exeception.  [T6060]

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-07 22:56:20 +01:00
Marcus Schref
deb8921629 sx1302_hal: initial check-in
The SX1302 hardware abstraction layer is required by the basicstation
to control the concentrator based on SX1302/SX1303 chip.

Signed-off-by: Marcus Schref <mschref@web.de>
2022-09-07 13:16:02 +02:00
Florian Eckert
3d5264c8a4 Merge pull request #19285 from tru7/knxd
libfmt: bump to upstream version 9.1.0
2022-09-07 07:48:44 +02:00
Othmar Truniger
125fb8de5b libfmt: bump to upstream version 9.1.0
Signed-off-by: Othmar Truniger <github@truniger.ch>
2022-09-06 21:18:27 +02:00
Eric Luehrsen
6dd38447d5 ldns: update to 1.8.3
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2022-09-05 22:13:30 -07:00
Nick Hainke
c808768cad libssh: update to 0.10.3
Release notes:
https://www.libssh.org/2022/09/05/libssh-0-10-3/

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-09-05 22:13:14 -07:00