Commit Graph
4664 Commits
Author SHA1 Message Date
Rosen Penev 63b52599bf libcap-ng: update to 0.8.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:31:55 -07:00
Rosen Penev 9a430e72fe libgee: update to 0.20.6
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:30:28 -07:00
Rosen Penev a3fd2c7982 libgpg-error: update to 1.46
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:30:05 -07:00
Rosen Penev d4410f7750 libvpx: update to 1.12.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 10:29:46 -07:00
Rosen Penev 15bfba27e2 libseccomp: update to 2.5.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-05 01:29:22 -07:00
Rosen Penev 32e21d51e3 libupnpp: update to 0.22.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 20:18:54 -07:00
Espen Jürgensen a61c629c89 libunistring: Update to 1.1
Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
2022-11-04 13:06:15 -07:00
Rosen Penev f026ff03b3 libtins: update to 4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:02:22 -07:00
Rosen Penev 38974f4e06 libidn: update to 1.41
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:02:09 -07:00
Rosen Penev 9cf682901e libidn2: update to 2.3.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:01:59 -07:00
Rosen Penev 709a81f2fe liblz4: update to 1.9.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 13:01:47 -07:00
Rosen Penev 0a92b8c1ab libarchive: update to 3.6.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:54 -07:00
Rosen Penev 97cb401f0d libmad: update to 0.16.3
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:34 -07:00
Rosen Penev 5ea89498ff libnpupnp: update to 5.0.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:56:23 -07:00
Rosen Penev 7f0ccf4b14 libpng: update to 1.6.38
Remove upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-04 12:55:22 -07:00
Nikos Mavrogiannopoulos 6c70c1d900 Merge pull request #19797 from neheb/12
libtasn1: update to 4.19.0
2022-11-04 20:34:25 +01:00
Rosen Penev b589403c72 libjpeg-turbo: update to 2.1.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-03 20:25:53 -07:00
Rosen Penev b1d112c5d2 libtasn1: update to 4.19.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-03 19:42:18 -07:00
Jan Hák c2a270eb7a libedit: update to version 20221030-3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
2022-11-01 14:49:46 +01:00
Alois Klink 4eff6c57c1 gdbm: configure with --without-readline
By default, gdbm configures/builds with readline and curses support
if they exist.

This can cause race conditions when compiling gdbm and ncurses in
parallel, as gdbm may try to link to ncurses when it doesn't exist.

This commit forces gdbm to skip using readline/ncurses, since it's
unlikely that anybody is using the line-editing feature of gdbm.

See [gdbm's README][1] for more info.

[1]: https://git.gnu.org.ua/gdbm.git/tree/README?h=v1.21#n50

Signed-off-by: Alois Klink <alois@aloisklink.com>
2022-10-27 12:04:00 -07:00
Josef Schlehofer a4e8cbb89a libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-26 09:31:30 +02:00
Josef Schlehofer 02eb18a65f Merge pull request #19701 from turris-cz/libwebsockets-conflicts-provides
libwebsockets: full variant provides OpenSSL
2022-10-25 14:28:58 +02:00
Josef Schlehofer 676c5c72b5 libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 12:27:11 +02:00
Josef Schlehofer 77e682a11c libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-25 07:57:23 +02:00
Nick Hainke ed7d38c145 libmariadb: update to 3.1.18
The official download mirror does not host 3.1.12 anymore. Update to
newest version to solve the issue.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-24 05:38:43 -07:00
Hirokazu MORIKAWA 2c16091d07 icu: bump to 72.1
It updates to Unicode 15, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 42 locale data with various additions and corrections.

ICU 72 adds technology preview implementations for person name formatting, as well as for a new version of message formatting based on a proposed draft Unicode specification.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-10-23 18:42:29 +02:00
Lucian Cristian 990748d135 nss: update to 4.84
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:34 -07:00
Lucian Cristian 0e0286e7a1 nspr: update to 4.35
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2022-10-21 15:08:29 -07:00
Michael Heimpold 60e503a4d7 Merge pull request #19614 from mhei/libxml2-update-2.10.3
libxml2: update to 2.10.3
2022-10-17 07:42:47 +02:00
Daniel Golle 032e14c96e libksba: update to version 1.6.2
Noteworthy changes in version 1.6.2 (2022-10-07) [C22/A14/R2]
------------------------------------------------

 * Fix integer overflow in the CRL parser.  [rK4b7d9cd4a0]

Release-info: https://dev.gnupg.org/T6230

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-16 20:30:30 +01:00
Michael Heimpold c2742973b0 libxml2: update to 2.10.3
This fixes:
    - CVE-2022-40303
    - CVE-2022-40304

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-16 19:57:59 +02:00
Nikos Mavrogiannopoulos 4f3d297e1f Merge pull request #19564 from PolynomialDivision/update-gnutls-3-7-8
gnutls: update to 3.7.8
2022-10-09 09:35:38 +02:00
Alexandru Ardelean 4e4e7fdf16 Merge pull request #19538 from mhei/libzip-update-1.9.2
libzip: update to 1.9.2
2022-10-09 08:11:16 +03:00
Nick Hainke e2a9c55980 gnutls: update to 3.7.8
Release Notes:
https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-09 00:23:24 +02:00
Daniel Golle df589ce880 libksba: update to version 1.6.1
Update to stable release 1.6.1.
See commit log since version 1.6.0 for changes[1].

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=shortlog;h=d3c1e063d708a46ef39152256f8b1ea466b61be0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-07 02:11:36 +01:00
Michael Heimpold 94e60a352f libzip: update to 1.9.2
Also drop already mainlined patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-06 21:06:24 +02:00
Josef Schlehofer ec6e977cd4 Merge pull request #19372 from cotequeiroz/libgd
libgd: avoid recursive and redundant dependencies
2022-10-06 11:45:23 +02:00
Petr Štetiar 845d81ca09 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-10-04 00:58:29 -07:00
Nick Hainke a8774f84e9 expat: update to 2.4.9
Fixes CVE-2022-40674.

Release Notes:
- https://github.com/libexpat/libexpat/blob/R_2_4_8/expat/Changes
- https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-03 15:04:50 -07:00
Michael Heimpold f27fb38c6b libmodbus: update to 3.1.8
- drop obsolete configure argument
- update download url

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-09-28 21:39:07 +02:00
Karl Palsson f4ce13b700 libs/libwebsockets: Update to 4.3.x
Changes since 4.2 are extensive, as always.
https://libwebsockets.org/git/libwebsockets/tree/changelog?h=v4.3-stable#n4

Eg, Adds CBOR, support for reduced memory CA verification, cookie jars,
mqtt client gains qos2, mbedtls v3, fault injection apis, better support
for event loops.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:38:00 +00:00
Karl Palsson 75df9b7a4a libs/cjson: bump to 1.7.15
This is a bugfix release.
Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:38:00 +00:00
Alexandru Ardelean df2f351463 openblas: bump to version 0.3.21
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-09-25 11:40:40 -07:00
Rosen Penev a546f26ddb Revert "jose: remove libjose"
This reverts commit 02d6c8346c.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-25 02:10:06 -07:00
Rosen Penev d70538c43c Revert "jose: fix static library usage"
This reverts commit c61b70918b.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-25 02:10:06 -07:00
Rosen Penev 04043be54a glib2: backport locale fix
Fixes compilation with non English locale.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 20:49:27 -07:00
Rosen Penev dbdfef081c libowfat: fix glibc compilation
Ported Fedora patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-23 01:14:24 +01:00
Rosen Penev 82700f0d55 libsoup3: update maintainer
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 15:48:52 -07:00
Rosen Penev fc7faa2122 libsoup3: add
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-09-22 01:31:28 -07:00
Martin Blumenstingl 8cead176bd libcli: Add new package
This package is a dependency for building mausezahn as part of the
netsniff-ng sources. mausezahn is a multicast traffic generator used by
the upcoming kernel-selftests-net-forwarding package.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
2022-09-22 01:30:14 -07:00