summaryrefslogtreecommitdiff
path: root/libs
Commit message (Collapse)AuthorAgeFilesLines
* libgpg-error: Fix compilation with GAWK 5.0lede-17.01Rosen Penev2020-05-083-1/+190
| | | | | | | | | Patch from Upstream. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 9afde0d39ae364c327063d36b188465058056a86) [rmilecki: autoreconf + po fix] Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* libsoup: fix intltool host dependency. Cleaup some build argsTed Hess2020-01-241-10/+4
| | | | | Signed-off-by: Ted Hess <thess@kitschensync.net> (cherry-picked from 0daec55ce50d4dffae040645227a718ce528b978)
* libgee: copy vapi files to versioned vala dirEneas U de Queiroz2020-01-231-2/+2
| | | | | | | The version is obtained via `valac --api-version` Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> (cherry-picked from fb4b5c57015bcae10c1ba11aa575ba6ec93dbf4f)
* libgee: use unversioned vala dir, misc fixesEneas U de Queiroz2020-01-231-8/+5
| | | | | | | | | | Copy vapi files to unversioned vala dir. Added vala/host to PKG_BUILD_DEPENDS. Removed TARGET_LDFLAGS Removed copyright lines Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> (cherry-picked from 2cf76d52780d352b2ecb4bf14cb5eb403ef5144d)
* protobuf-c: add build time dependency protobufMislav Novakovic2020-01-231-0/+1
| | | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr> (cherry-picked from a35581902cf6c6d4b51fc44a4db4d8c5bc8b51a5)
* Enable the host tools on protobuf-c (protoc-c specifically)Mike Kershaw / Dragorn2020-01-231-0/+5
| | | | | Signed-Off-By: Mike Kershaw <dragorn@kismetwireless.net> (cherry-picked from 6915059e35d74f8daede429df74d9635b2a6c9f0)
* libxslt: backport patch for CVE-2019-11068Sebastian Kemper2019-05-027-47/+120
| | | | | | Refreshed existing patches. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* icu: [lede-17.01] support for new Japanese era ReiwaHirokazu MORIKAWA2019-04-222-16/+8
| | | | | | | support for new Japanese era Reiwa change source url Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* Merge pull request #6642 from krombel/replace_git_by_httpsRosen Penev2019-04-045-5/+5
|\ | | | | [17.01] Change links from git://github.com to https://github.com
| * Change links from git://github.com to https://github.comMatthias Kesler2018-08-015-5/+5
| | | | | | | | | | | | | | | | | | | | I got into troubles to be behind a proxy and my build then fails because it cannot connect to git://github.com urls To avoid such problems for others I think it is useful to replace them for the whole repo. This changes make it work for me again. Signed-off-by: Matthias Kesler <krombel@krombel.de>
* | libssh2: version bump/CVE fixesSebastian Kemper2019-03-191-6/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - CVE-2019-3855 Possible integer overflow in transport read allows out-of-bounds write - CVE-2019-3856 Possible integer overflow in keyboard interactive handling allows out-of-bounds write - CVE-2019-3857 Possible integer overflow leading to zero-byte allocation and out-of-bounds write - CVE-2019-3858 Possible zero-byte allocation leading to an out-of-bounds read - CVE-2019-3859 Out-of-bounds reads with specially crafted payloads due to unchecked use of `_libssh2_packet_require` and `_libssh2_packet_requirev` - CVE-2019-3860 Out-of-bounds reads with specially crafted SFTP packets - CVE-2019-3861 Out-of-bounds reads with specially crafted SSH packets - CVE-2019-3862 Out-of-bounds memory comparison - CVE-2019-3863 Integer overflow in user authenicate keyboard interactive allows out-of-bounds writes Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | sqlite3: use dynamic linking for sqlite cli toolSebastian Kemper2018-12-181-1/+2
| | | | | | | | | | | | Otherwise it'll carry a static copy of it's own lib. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | sqlite3: security bumpSebastian Kemper2018-12-181-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | A remote code execution vuln has been found in sqlite. Infos available here: https://blade.tencent.com/magellan/index_en.html sqlite 3.26.0 contains the fix. This commit also changes source URL to https. It also adds a depend on zlib, which is now required. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | tiff: security bump to 4.0.10Sebastian Kemper2018-12-0210-639/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | This bumps libtiff's minor version from 9 to 10. In addition to the CVE fixes that we already included this fixes: CVE-2017-17095 CVE-2018-17101 CVE-2018-18557 The update is 100% backwards compatible, no symbol changes. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | libxml2: add Debian patches to address CVEsSebastian Kemper2018-08-2113-1/+1150
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Debian uses libxml2 2.9.4 in Stretch. This adds their security related fixes from 2.9.4+dfsg1-2.2+deb9u2 to LEDE's 17.01 release. Fixed CVEs: CVE-2016-4658 CVE-2016-5131 CVE-2017-0663 CVE-2017-15412 CVE-2017-7375 CVE-2017-7376 CVE-2017-9047 CVE-2017-9048 CVE-2017-9049 CVE-2017-9050 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | tiff: fix remaining CVEsSebastian Kemper2018-08-198-13/+488
| | | | | | | | | | | | | | | | | | | | | | | | | | Backport Rosen's commit in master to 17.01 to address open CVEs. This fixes: CVE-2017-11613 CVE-2018-5784 CVE-2018-7456 CVE-2018-8905 CVE-2018-10963 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | postgresql: security bump to 9.5.14Sebastian Kemper2018-08-151-4/+4
|/ | | | | | | | | | | This update includes fixes for the following CVEs: - CVE-2018-1053 - CVE-2018-1058 - CVE-2018-10915 - CVE-2018-10925 Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* icu: fix CVE-2017-15422Hirokazu MORIKAWA2018-03-272-1/+107
| | | | | | | | | | | | | | [lede-17.01] Maintainer: me
 Compile tested: ar71xx, mips_24kc_gcc-5.4.0_musl-1.1.16, lede-17.01 r3863-fad29d2 Run tested: NONE Description: CVE-2017-15422 : integer overflow in icu https://security-tracker.debian.org/tracker/CVE-2017-15422 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* Merge pull request #5492 from micmac1/fix-sqlite3-on-uclibcchamptar2018-01-311-2/+5
|\ | | | | sqlite3 [lede-17.01]: fix uClibc builds
| * sqlite3: fix uClibc buildsSebastian Kemper2018-01-301-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When compiling against uClibc on lede-17.01 it's detected in the linking phase that '__isnan' is nowhere to be found: sqlite3-sqlite3.o: In function `serialGet': sqlite3.c:(.text+0x6364): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3_result_double': sqlite3.c:(.text+0x10faa): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3VXPrintf': sqlite3.c:(.text+0x175ca): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3_bind_double': sqlite3.c:(.text+0x1b0ac): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3VdbeExec': sqlite3.c:(.text+0x3b77e): undefined reference to `__isnan' collect2: error: ld returned 1 exit status To fix this libm needs to be linked in as well in the uClibc case. So add libm ('-lm') to the TARGET_LDFLAGS accordingly. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | p11-kit: disable trust moduleNikos Mavrogiannopoulos2018-01-301-2/+3
| | | | | | | | | | | | | | | | | | This allows prevents build error due to trust-paths not being specified. The trust module was not being used in openwrt. Resolves #5528 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | tiff: version bump to address open CVEsSebastian Kemper2018-01-307-406/+156
| | | | | | | | | | | | | | | | | | | | - Version bump to 4.0.9, as otherwise ca. a dozen patches would need to be added to fix the open CVEs. There have been no API/ABI changes between 4.0.6 and 4.0.9, so this is OK. - Adds patches copied from Debian for CVE-2017-18013 and CVE-2017-9935 on top. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | libxslt: add patches copied from Debian to fix CVEsSebastian Kemper2018-01-3018-2/+1007
| | | | | | | | | | | | | | - there are multiple open CVEs, this adds patches for them - adds --disable-silent-rules for verbose build output Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | libssh: fix zlib detectionSebastian Kemper2018-01-301-5/+6
| | | | | | | | | | | | | | | | - currently zlib is never detected, although there is a dependency on it, fix that. - change links from http to https Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | alsa-lib: fix uClibc buildsSebastian Kemper2018-01-272-2/+34
|/ | | | | | | | | | | | | | | | | | | | | | | | | Currently alsa-lib fails to build on uClibc: parser.c: In function 'snd_tplg_build_file': parser.c:262:35: error: 'S_IRUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ parser.c:262:35: note: each undeclared identifier is reported only once for each function it appears in parser.c:262:45: error: 'S_IWUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ parser.c: In function 'snd_tplg_build': parser.c:330:35: error: 'S_IRUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ parser.c:330:45: error: 'S_IWUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ Makefile:390: recipe for target 'parser.lo' failed Fix this by adding an upstream fix as a backport. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* postgresql: update to version 9.5.10Daniel Golle2018-01-051-2/+2
| | | | | | | | | | | | | | | | | | | | Contains fixes for * CVE-2017-15099 * CVE-2017-15098 * CVE-2017-12172 * CVE-2017-7548 * CVE-2017-7547 * CVE-2017-7546 * CVE-2017-7486 * CVE-2017-7485 * CVE-2017-7484 Note that some fixes apply for newly created databases only! To mitigate CVE-2017-7486 and CVE-2017-7547 in existing databases, a procedure described in the the release notes of PostgreSQL 9.5.8 is necessary! Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* gnutls: Use HTTPS instead of FTPRosen Penev2017-12-301-1/+1
| | | | | | While recently building asterisk, the make system stalled on gnutls. On my install of Ubuntu 16.04 on WSL, it seems curl can't download from ftp and doesn't even time out properly. Easiest solution is to switch the gnutls Makefile to use HTTPS instead. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* gnutls: updated to 3.5.16Nikos Mavrogiannopoulos2017-11-041-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* sqlite3: update to 3.19.3Etienne Champetier2017-10-251-2/+2
| | | | | | | fix possible database corruption https://www.sqlite.org/releaselog/3_19_3.html Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* libs/sqlite3: Update to 3190200Daniel Engberg2017-10-251-3/+2
| | | | | | | Update sqlite to 3190200 Remove obsolete tarball hash variable Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* sqlite: update to 3.17.0Ian Leonard2017-10-251-2/+3
| | | | Signed-off-by: Ian Leonard <antonlacon@gmail.com>
* libwebsockets: add PROVIDES to both variantsKarl Palsson2017-10-251-0/+1
| | | | | | | | Fixed recently in master as part of upgrading, but the same issue applies to 17.01. The two variant packages both now PROVIDE libwebsockets, the virtual package. Signed-off-by: Karl Palsson <karlp@etactica.com>
* icu: fix CVE-2017-14952 Double-Free Vulnerability [lede-17.01]Hirokazu MORIKAWA2017-10-242-1/+11
| | | | | | | | http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/ https://security-tracker.debian.org/tracker/CVE-2017-14952 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* noddos: new backport of noddos from master branchSteven Hessing2017-10-071-0/+53
| | | | Signed-off-by: Steven Hessing <steven.hessing@gmail.com>
* pcre: Added fix for CVE-2017-11164 by adding stack recursion limitThomas Heil2017-09-031-1/+2
| | | | Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
* pcre: upgrade to version 8.41Thomas Heil2017-09-032-56/+3
| | | | | | - fixes security issues Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
* gnutls: updated to 3.5.13Nikos Mavrogiannopoulos2017-06-181-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* libtasn1: updated to 4.12Nikos Mavrogiannopoulos2017-06-181-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openldap: update to 2.4.45W. Michael Petullo2017-06-141-2/+2
| | | | | | Fixes CVE-2017-9287 Signed-off-by: W. Michael Petullo <mike@flyn.org>
* Merge pull request #4443 from MikePetullo/lede-17.01-libdmapsharingHannu Nyman2017-06-062-21/+5
|\ | | | | libdmapsharing: update to 2.9.38
| * libdmapsharing: update to 2.9.38W. Michael Petullo2017-06-052-21/+5
| | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | gnutls: updated to 3.5.11Nikos Mavrogiannopoulos2017-05-081-2/+2
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | [lede-17.01] icu: fix CVE-2017-7867 CVE-2017-7868Hirokazu MORIKAWA2017-04-192-1/+177
|/ | | | | | | | icu: CVE-2017-7867 CVE-2017-7868: Heap-buffer-overflow in utf8TextAccess Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com> icu: increase PKG_RELEASE
* [libs/pcre]: fix CVE-2017-7186Thomas Heil2017-03-272-1/+54
| | | | | | Fix CVE-2017-7186 mentioned in https://bugs.exim.org/show_bug.cgi?id=2052 Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
* gnutls: updated to 3.5.9Nikos Mavrogiannopoulos2017-02-121-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* libs/gnutls: Don't link libidn unintentionallyDaniel Engberg2017-02-081-0/+1
| | | | | | | Fixes compilation reported by by buildbots. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> (cherry picked from commit c7c951eada3682c2a2bac73cbe95ee15f174317f)
* opus: update to 1.1.4Ian Leonard2017-02-071-4/+5
| | | | | | | | Includes fix for CVE 2017-0381. Assume maintainership. Signed-off-by: Ian Leonard <antonlacon@gmail.com>
* package: pcre bump to version 8.40heil2017-02-051-2/+2
| | | | Signed-off-by: heil <heil@terminal-consulting.de>
* libidn: install libidn.pc in staging area & refresh patchesKevin Darbyshire-Bryant2017-02-053-9/+11
| | | | | | | | | | | | libidn.pc file was missing in package staging area causing build failures for other packages expecting to find libidn package config files. refreshed patches to clear existing patch fuzz take over maintainership Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
* libs/liboping: update to 1.9.0p-wassi2017-02-051-4/+4
| | | | | | | | Update liboping/oping/noping to upstream release 1.9.0 Also introduce new location of downloads and correct the licence to LGPL-2.1+ (as seen in liboping's README) Signed-off-by: Paul Wassi <p.wassi@gmx.at>
generated by cgit (git 2.46.0) at 2026-10-12 02:26:12 +0000