Maxim Storchak [Tue, 22 Dec 2015 11:54:43 +0000 (13:54 +0200)]
rsync: update to 3.1.2
https://rsync.samba.org/security.html#s3_1_2:
If you're using a version of rsync older than 3.1.2 as a client and
receiving files from an rsync server that you might not fully trust,
this version adds extra checking to the file list to prevent the sender
from tweaking the paths and/or the transfer requests in a way that could
cause a file to be received outside the transfer destination.
Probably related to -fstack-protector being used.
Got the idea from:
http://ubuntuforums.org/showthread.php?t=352642&p=10100263#post10100263
Regarding the missing __stack_check_fail_local, using gcc as the linker instead of ld fixes the issue without disabling stack protection as with -fno-stack-protector.
Fixes linker errs on some targets:
objects/prod/dnssd_clientstub.c.so.o: In function `handle_resolve_response':
dnssd_clientstub.c:(.text+0x395): undefined reference to `__stack_chk_fail_local'
objects/prod/dnssd_clientstub.c.so.o: In function `handle_query_response':
dnssd_clientstub.c:(.text+0x4bd): undefined reference to `__stack_chk_fail_local'
Dirk Brenken [Thu, 17 Dec 2015 10:49:31 +0000 (11:49 +0100)]
adblock: feature update
* add two new blocklist sources: adaway.org and disconnect.me
* each blocklist source will be processed separately (no longer use one
big monolithic adblocklist), duplicates makes no harm to dnsmasq
* url timestamp check to download and process only updated blocklists
* overall duplicate removal in separate blocklists (will be
automatically disabled on low memory systems)
* additional checks & various small changes
Hannu Nyman [Tue, 15 Dec 2015 11:50:53 +0000 (13:50 +0200)]
wget: bump version to 1.17.1
Update wget to version 1.17.1.
Remove patches as they are included upstream.
Changes in Wget 1.17.1
* Fix compile error when IPv6 is disabled or SSL is not present.
* Fix HSTS memory leak.
* Fix progress output in non-C locales.
* Fix SIGSEGV when -N and --content-disposition are used together.
* Add --check-certificate=quiet to tell wget to not print any warning
about invalid certificates.
krb5: bump to version 1.13.3 and fix uninitialized warning/error
Version 1.13.3 has a tar.gz so the OpenWRT default Build/Prepare
rule can be used with MD5 checksum.
Add patch to fix build:
ktutil_funcs.c: In function 'ktutil_delete':
ktutil_funcs.c:75:28: error: 'prev' may be used uninitialized in this function [-Werror=maybe-uninitialized]
prev->next = lp->next;
There does not seem to be a way for 'prev' being uninitialized
(logically), however the compiler does not see that, because
'prev' is dependent on i >= 1.
So, we just need to initialize it to NULL.
Reported buildbot issue is:
/store/buildbot/slave/ar71xx/build/build_dir/target-mips_34kc_musl-1.1.11/ola-0.9.7/plugins/openpixelcontrol/.libs/libolaopenpixelcontrol.so: undefined reference to `ola::network::TCPSocket::ReadDescriptor() const'
collect2: error: ld returned 1 exit status
There's also a discussion (attempt) to fix this on the buildroot project:
https://patchwork.ozlabs.org/patch/503884/
This bug has been reported (from the buildroot project), here:
https://github.com/OpenLightingProject/ola/issues/880
This commit introduced the issue:
https://github.com/OpenLightingProject/ola/commit/bfc1d99055980dfac5c959a7210257d1939803ec
specifically the `-fvisibility-inlines-hidden` switch.
So, until, the upstream project (ola) fixes this, this fix
looks like the quickest/simplest workaround to have this package build.
Kiril Zyapkov [Wed, 9 Dec 2015 21:43:42 +0000 (23:43 +0200)]
sshtunnel: switch to procd
This changeset removes the shell wrapper the package used previously,
and uses the instance-management abilities of procd to track ssh
processes. Many fixes and improvements were integrated from the
package maintainer's branch at
ntpd: add libcap to default dependencies of the ntpd package
Seems ntpdate also requires this lib:
```
Package ntpdate is missing dependencies for the following libraries:
libcap.so.2
make[2]: *** [/store/buildbot/slave/ar71xx/build/bin/ar71xx/packages/packages/ntpdate_4.2.8p4-1_ar71xx.ipk] Error 1
make[2]: Leaving directory `/store/buildbot/slave/ar71xx/build/feeds/packages/net/ntpd'
```
Seems those pkgconfig file paths were revealed to be incorrect
after doing a full clean build.
And I only had to inspiration to do one after doing the initial PR.
cmf [Thu, 10 Dec 2015 20:56:22 +0000 (20:56 +0000)]
Boost: Update 8
Major fixes:
- The "Select Boost Options" was improved:
- In previous versions, it was possible to unselect both Shared and Static
options, so that there would be nothing to be built. This was solved by
creating a choice menu "Compile Boost libraries".
- A new choice menu was also created for Boost Run-time linkage called
"Selects Boost Run-time linkage", which is used to select the C and C++
runtime. This choice menu obeys to the required restrictions by boost
options [1].
- Fixed the invalid combination where boost shared version could be linked
to C and C++ static runtime. This is not allowed by the boost builder.
- Added new menu where a Boost building variant can be chosen from 3 options:
- Release: The optimized version for daily use.
- Debug: The debugging version, for testing purposes.
- Profiling: The profiling version for evaluation purposes.
- Improved options help descriptions.
Minor fixes:
- Makefile Version was bumped from 6 to 8 because the previous update [2] did
not bumped the value acordingly to the submission rules.
- Removed stuff that was not doing anything: "-sBUILD=release"
- Changed builder executable from "bjam" to "b2" which is the correct caller:
- "bjam" is the old name and exists only for compatibility purposes.
git.99rst.org / openwrt-packages.git / log