summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* libgpg-error: Fix compilation with GAWK 5.0lede-17.01Rosen Penev2020-05-083-1/+190
| | | | | | | | | Patch from Upstream. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 9afde0d39ae364c327063d36b188465058056a86) [rmilecki: autoreconf + po fix] Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* libsoup: fix intltool host dependency. Cleaup some build argsTed Hess2020-01-241-10/+4
| | | | | Signed-off-by: Ted Hess <thess@kitschensync.net> (cherry-picked from 0daec55ce50d4dffae040645227a718ce528b978)
* jamvm: Add host buildRosen Penev2020-01-242-7/+22
| | | | | | | | | | | | | | | | | | | | | | Needed for classpath. GCJ is also needed but that can be dealt with separately. Fix compilation with musl by defining _GNU_SOURCE. What's funny here is that if __USE_GNU gets replaced, the host build fails. The man page says _GNU_SOURCE for pthread_getattr_np but glibc violates that statement. Removed classpath dependency. classpaths must select jamvm, not the other way around. Removed target whitelist. Switched to blacklist. Fixed License information. Various other cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry-picked from 2972cc98ebfb512d394ffe406410961545821936 and synced from master)
* jamvm: Clarify and clean up package descriptionDaniel Santos2020-01-241-3/+3
| | | | | | | Clean up white space and properly clarify the Java version implemented. Signed-off-by: Daniel Santos <daniel.santos@pobox.com> (cherry-picked from 69c5f1dac6afb7a84de5a4c7df8ff5199f5b8903)
* jamvm: Use <fenv.h> instead of <fpu_control.h>Guo Li2020-01-242-1/+87
| | | | | | | | | | | | | musl libc (http://musl-libc.org lack the non-standard <fpu_control.h> header, which is used in src/os/linux/{i386,x86_64}/init.c files to setup the floating point precision. This patch makes it use the standard C <fenv.h> header instead. Original patch at Felix Janda at https://sourceforge.net/p/jamvm/patches/6/ Signed-off-by: Guo Li <uxgood.org@gmail.com> (cherry-picked from 2f96d96aff521f59b192b01971dc669028252f22)
* libgee: copy vapi files to versioned vala dirEneas U de Queiroz2020-01-231-2/+2
| | | | | | | The version is obtained via `valac --api-version` Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> (cherry-picked from fb4b5c57015bcae10c1ba11aa575ba6ec93dbf4f)
* libgee: use unversioned vala dir, misc fixesEneas U de Queiroz2020-01-231-8/+5
| | | | | | | | | | Copy vapi files to unversioned vala dir. Added vala/host to PKG_BUILD_DEPENDS. Removed TARGET_LDFLAGS Removed copyright lines Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> (cherry-picked from 2cf76d52780d352b2ecb4bf14cb5eb403ef5144d)
* protobuf-c: add build time dependency protobufMislav Novakovic2020-01-231-0/+1
| | | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr> (cherry-picked from a35581902cf6c6d4b51fc44a4db4d8c5bc8b51a5)
* Enable the host tools on protobuf-c (protoc-c specifically)Mike Kershaw / Dragorn2020-01-231-0/+5
| | | | | Signed-Off-By: Mike Kershaw <dragorn@kismetwireless.net> (cherry-picked from 6915059e35d74f8daede429df74d9635b2a6c9f0)
* softethervpn: cleanup host/build, pass HOST_*FLAGSEneas U de Queiroz2020-01-231-14/+3
| | | | | | | | | | Remove hack to avoid readline host dependency, now that readline is being host/built. Pass on HOST_CFLAGS, HOST_CPPFLAGS, & HOST_LDFLAGS, to fix buildbots host-compile errors about not finding openssl headers. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> (cherry-picked from e3c6fcb79647b09f669addf4d7fa37151e19b3f1)
* 11# This is a combination of 2 commits.Rosen Penev2020-01-231-3/+3
| | | | | | | | | | | | gammu: Fix build under 64-bit targets. There's a faulty suffix variable that points to the wrong place. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry-picked from bf42426e4a97f3e771de2d3063a4d38f7c8f40e8 5fbc6c873e29dcde6d048ffbbea252411816f884 027ed92f6ed4adb1a90d36c2d3429106b326a53b)
* luasocket: Replace -fpic with $(FPIC)Rosen Penev2020-01-112-2/+16
| | | | | | | | | | This is causing linking errors on i386 and ppc. Also removed custom warnings an optimization levels that override stock settings. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry-picked from ecb4fcca0c30d38285a35b1a33eac00927caa792)
* luasocket: fix build on mpc85xxLaurent Papier2020-01-112-1/+26
| | | | | Signed-off-by: Laurent Papier <papier[at]tuxfan.net> (cherry-picked from cb44bfebd5cdf41fb04f14d628ed9ba62275dd1a)
* jool: Fix compilationRosen Penev2019-11-192-1/+77
| | | | | | Backported upstream patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* fastd: fix init script for multiple VPN instancesMatthias Schiffer2019-09-042-1/+30
| | | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> (cherry picked from commit b7ff8b8087c6e948aba45b74c261cd7337433523)
* fastd: update URL and PKG_SOURCE_URLMatthias Schiffer2019-09-041-2/+2
| | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* exfat-nofuse: drop BUILD_PATENTEDDENG Qingfang2019-09-021-1/+1
| | | | | | | | | | | | | | Microsoft has published technical specification for exFAT [1] and the driver has been added to Linux staging tree [2]. It's now safe to drop BUILD_PATENTED label. [1] https://docs.microsoft.com/windows/win32/fileio/exfat-specification [2] http://lkml.iu.edu/hypermail/linux/kernel/1908.3/04254.html Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (cherry-picked from commit 4c9d0c7b56365761fd1986ff954edf963feb2931)
* lighttpd: backport fix for plain auth from 1.4.49 releaseRafał Miłecki2019-07-302-1/+44
| | | | | | | | | | | | | Update commit 3d59ce6f502b ("lighttpd: update to 1.4.48") resulted in plain auth regression: it simply stopped working with: (mod_auth.c.525) password doesn't match for (...) appearing on every authentication try. This regression was fixed in 1.4.49 release. Backport the fix instead of updating to the 1.4.49 to avoid risking more/other regressions. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 4cc0c8871398d7c2fb879a319c87e320249bfdcc)
* nlbwmon: update to latest Git HEADJo-Philipp Wich2019-06-061-4/+4
| | | | | | | | | | | | | | 4574e6e nfnetlink: prevent tight retry loops 163a211 client: fix commit error information 21290db nlbwmon: merge existing data abe701d database: do not overwrite unexpectedly preexisting databases ef3fa58 socket: handle EAGAIN on send() Ref: https://github.com/jow-/nlbwmon/issues/23 Ref: https://github.com/jow-/nlbwmon/issues/26 Ref: https://github.com/jow-/nlbwmon/issues/30 Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit c528e01f4cb5112cbd26b973400ad424280a61e1)
* nlbwmon: receive dhcp interface triggersKevin Darbyshire-Bryant2019-06-062-1/+17
| | | | | | | | | | Not all interfaces may have been allocated address at nlbwmon startup so it may not collect statistics as expected/configured. Add interface triggers to catch dhcp events and restart as required. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> (cherry picked from commit 662d3f16d2702fe55116c852f5d456e90891ee89)
* net/nlbwmon: run with lower priorityMarc Benoit2019-06-061-0/+2
| | | | | | | | | | | | | | | Even on a powerful platform a nlbwmon process' activities are sometimes affecting throoughput and latency. This is a backgroud process, that should not be running with default priority. Even if it is a little deplayed, that is not a worry in this case. The routing should be the main priority, bandwidth stats collection can wait a bit. Tested on Netgear R7800 Signed-off-by: Marc Benoit <marcb62185@gmail.com> (cherry picked from commit 9b3ecbd64a6328e13981165660d8930e8bb2446a)
* nlbwmon: update to current HEADJo-Philipp Wich2019-06-061-4/+5
| | | | | | | | | | | | Update to latest Git HEAD in order to solve a number of issues. - Improves MAC address lookup reliability - Properly counts DNAT-ed connections (e.g. for port forwards) - Fixes stack corruption when parsing netlink records - Fixes deletion of gzipped databases Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 70858690c08773c5e420f9ec66ed95c20b593212)
* nlbwmon: preserve protocols mapping across sysupgradeKevin Darbyshire-Bryant2019-06-061-1/+6
| | | | | | | | Define package config files to preserve /usr/share/nlbwmon/protocols across sysupgrade Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> (cherry picked from commit 2305de5f2e529bb7591f5aac31557aff80ef39c4)
* Merge pull request #8883 from micmac1/xslt-cve-17Jiri Slachta2019-05-037-47/+120
|\ | | | | (17.01) libxslt: backport patch for CVE-2019-11068
| * libxslt: backport patch for CVE-2019-11068Sebastian Kemper2019-05-027-47/+120
|/ | | | | | Refreshed existing patches. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* icu: [lede-17.01] support for new Japanese era ReiwaHirokazu MORIKAWA2019-04-222-16/+8
| | | | | | | support for new Japanese era Reiwa change source url Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* Merge pull request #6642 from krombel/replace_git_by_httpsRosen Penev2019-04-0426-26/+26
|\ | | | | [17.01] Change links from git://github.com to https://github.com
| * Change links from git://github.com to https://github.comMatthias Kesler2018-08-0126-26/+26
| | | | | | | | | | | | | | | | | | | | I got into troubles to be behind a proxy and my build then fails because it cannot connect to git://github.com urls To avoid such problems for others I think it is useful to replace them for the whole repo. This changes make it work for me again. Signed-off-by: Matthias Kesler <krombel@krombel.de>
* | Merge pull request #8450 from micmac1/ssh2-1701-181Jiri Slachta2019-03-281-6/+5
|\ \ | | | | | | libssh2 (17.01): version bump/CVE fixes
| * | libssh2: version bump/CVE fixesSebastian Kemper2019-03-191-6/+5
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - CVE-2019-3855 Possible integer overflow in transport read allows out-of-bounds write - CVE-2019-3856 Possible integer overflow in keyboard interactive handling allows out-of-bounds write - CVE-2019-3857 Possible integer overflow leading to zero-byte allocation and out-of-bounds write - CVE-2019-3858 Possible zero-byte allocation leading to an out-of-bounds read - CVE-2019-3859 Out-of-bounds reads with specially crafted payloads due to unchecked use of `_libssh2_packet_require` and `_libssh2_packet_requirev` - CVE-2019-3860 Out-of-bounds reads with specially crafted SFTP packets - CVE-2019-3861 Out-of-bounds reads with specially crafted SSH packets - CVE-2019-3862 Out-of-bounds memory comparison - CVE-2019-3863 Integer overflow in user authenicate keyboard interactive allows out-of-bounds writes Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #8433 from hnyman/vpncHannu Nyman2019-03-172-2/+2
|\ \ | | | | | | vpnc: fix IPv6-triggered inoperability
| * | vpnc: fix IPv6-triggered inoperabilityDaniel Gimpelevich2019-03-172-2/+2
|/ / | | | | | | | | | | | | | | | | | | When the server hostname resolved to both IPv4 and IPv6 addresses, connecting would fail with nothing in syslog. This corrects that oversight. Originally signedoffby: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us> cherry picked from ca56324 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | Merge pull request #7723 from micmac1/lede-17.01-sqlite3champtar2018-12-181-6/+7
|\ \ | | | | | | (lede 17.01) sqlite3 security bump
| * | sqlite3: use dynamic linking for sqlite cli toolSebastian Kemper2018-12-181-1/+2
| | | | | | | | | | | | | | | | | | Otherwise it'll carry a static copy of it's own lib. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | sqlite3: security bumpSebastian Kemper2018-12-181-5/+5
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | A remote code execution vuln has been found in sqlite. Infos available here: https://blade.tencent.com/magellan/index_en.html sqlite 3.26.0 contains the fix. This commit also changes source URL to https. It also adds a depend on zlib, which is now required. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #7555 from micmac1/tiff-4010-17.01Hannu Nyman2018-12-0610-639/+13
|\ \ | | | | | | (lede-17.01) tiff: security bump to 4.0.10
| * | tiff: security bump to 4.0.10Sebastian Kemper2018-12-0210-639/+13
|/ / | | | | | | | | | | | | | | | | | | | | | | | | This bumps libtiff's minor version from 9 to 10. In addition to the CVE fixes that we already included this fixes: CVE-2017-17095 CVE-2018-17101 CVE-2018-18557 The update is 100% backwards compatible, no symbol changes. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #7165 from pacien/181009-1701-pkg-tincHannu Nyman2018-10-101-2/+2
|\ \ | | | | | | tinc: update to 1.0.35 (security update) [lede-17.01]
| * | tinc: update to 1.0.35Pacien TRAN-GIRARD2018-10-091-2/+2
|/ / | | | | | | | | | | | | | | | | | | | | | | Critical security update for: * CVE-2018-16737, * CVE-2018-16738, * CVE-2018-16758 Announcement: https://www.tinc-vpn.org/pipermail/tinc/2018-October/005311.html Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
* | socat: Fix CRDLY, TABDLY and CSIZE shifts for PowerPCTed Hess2018-08-301-6/+16
| | | | | | | | Signed-off-by: Ted Hess <thess@kitschensync.net>
* | Merge pull request #6835 from micmac1/xml2-cve-17.01Michael Heimpold2018-08-2113-1/+1150
|\ \ | | | | | | libxml2: add Debian patches to address CVEs
| * | libxml2: add Debian patches to address CVEsSebastian Kemper2018-08-2113-1/+1150
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Debian uses libxml2 2.9.4 in Stretch. This adds their security related fixes from 2.9.4+dfsg1-2.2+deb9u2 to LEDE's 17.01 release. Fixed CVEs: CVE-2016-4658 CVE-2016-5131 CVE-2017-0663 CVE-2017-15412 CVE-2017-7375 CVE-2017-7376 CVE-2017-9047 CVE-2017-9048 CVE-2017-9049 CVE-2017-9050 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #6806 from micmac1/tiff-17.01Jiri Slachta2018-08-198-13/+488
|\ \ | | | | | | tiff: fix remaining CVEs
| * | tiff: fix remaining CVEsSebastian Kemper2018-08-198-13/+488
|/ / | | | | | | | | | | | | | | | | | | | | | | | | Backport Rosen's commit in master to 17.01 to address open CVEs. This fixes: CVE-2017-11613 CVE-2018-5784 CVE-2018-7456 CVE-2018-8905 CVE-2018-10963 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #6783 from EricLuehrsen/unbound_1701Dirk Brenken2018-08-182-61/+63
|\ \ | | | | | | [lede-17.01] unbound: drop odhcpd leases with wrong field count
| * | unbound: drop odhcpd leases with wrong field countEric Luehrsen2018-08-172-61/+63
|/ / | | | | | | | | Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com> (cherry pick commit: 59617f076d7cbdd04a341bf7cfb5f3d9772b5765)
* | Merge pull request #6760 from micmac1/postgresql-17.01Daniel Golle2018-08-151-4/+4
|\ \ | |/ |/| postgresql: security bump to 9.5.14 for 17.01
| * postgresql: security bump to 9.5.14Sebastian Kemper2018-08-151-4/+4
|/ | | | | | | | | | | This update includes fixes for the following CVEs: - CVE-2018-1053 - CVE-2018-1058 - CVE-2018-10915 - CVE-2018-10925 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* Merge pull request #6350 from EricLuehrsen/unbound_20180625_1701Hannu Nyman2018-06-272-7/+6
|\ | | | | [lede-17.01] unbound: limit outside script source to init funciton scope
| * unbound: limit outside script source to init funciton scopeEric Luehrsen2018-06-252-7/+6
|/ | | | Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>