Karl Vogel [Thu, 26 Oct 2017 08:55:50 +0000 (10:55 +0200)]
utils/lxc: disable gnutls during configure
Previous versions of LXC never compiled in gnutls support due to a bug in the
configure script. As other TLS implementations are not supported and the feature
was disabled in previous builds, disable it during configure.
See https://github.com/lxc/lxc/pull/1360 for details regarding the bug in the
autoconf of the previous versions.
Karl Palsson [Tue, 24 Oct 2017 13:16:53 +0000 (13:16 +0000)]
libwebsockets: Upgrade to 2.4.0 and drop wolfssl for mbedtls
Libwebsockets 2.4.0 now includes mbedtls as a first class citizen.
Drop the problematic and poorly supported wolf/cyassl variant and add
mbedtls variant instead.
* Add qualifying '.' to scripts or to @INC, as appropriate since we're
enabling default_inc_excludes_dot;
* Add new platform/library definitions like double-double format and
locale library functions/headers;
* Delete patch 020 as it's been upstreamed;
Optional changes:
* Instead of using -@rm and having that fail, emit an error message,
and be ignored, just use @rm -f instead which will always succeed.
Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler
Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]
[CVE-2017-12883] Buffer over-read in regular expression parser
For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]
[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows
A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]
This release fixes the following issues
[1] - A second run to build Boost was executed, even though
Boost.Python3 was not selected.
[2] - Because wserialization and coroutine2 targets were removed from
Boost building system, the flags "--without-wserialization" and
"--without-coroutine2" no longer work and are now suppressed.
The option coroutine2 just selects the necessary dependencies for
the header-library to work.
The sub-package wserialization just selects the serialization
dependency and packs the wserialization shared object.
Stijn Tintel [Fri, 20 Oct 2017 14:46:51 +0000 (17:46 +0300)]
libxml2: install cmake module
Since version 2.9.2, libxml2 provides its own cmake module. Install it
to avoid packages built with cmake and requiring libxml2 to fall back to
cmake's FindLibXml2 module, which seems to detect host libxml2 instead
of the one in staging_dir.
Marko Ratkaj [Fri, 20 Oct 2017 07:23:38 +0000 (09:23 +0200)]
dhcpcd: bump to 6.11.5
1.) pkg version bumped from 6.4.3 to 6.11.5
2.) maintainer changed to me (#4944 dhcpcd: needs a new maintainer)
3.) source changed from bz2 to xz
4.) removed old unnecessary patch
5.) minor style improvements
Lucian Cristian [Wed, 18 Oct 2017 19:07:49 +0000 (22:07 +0300)]
xl2tpd: add some default configs needed on most of cases
mtu 1400, mru 1400 - on ppp devices, usually we need lower mtu, the existing link mabye is already under a lower MTU
require-mschap-v2 - most of the time l2tp is used in conjunction with windows client who will use this kind of auth
lcp-echo-interval 20, lcp-echo-failure 5 - keep alive 20 seconds interval and dead peer detection after 100 seconds
connect-delay 5000 - wait for up to 5 seconds after the connect script finishes for a valid PPP packet from the peer
nodefaultroute - prevent users from creating default routes with pppd
nodefaultip - disables the default behavior when no local IP address is specified
proxyarp - this will have the effect of making the peer appear to other systems to be on the local ethernet
Marko Ratkaj [Wed, 18 Oct 2017 10:38:18 +0000 (12:38 +0200)]
clamav: fix invalid zlib version error
ClamAV's configure script uses grep to check for bugy zlib version
1.2.1. Since current OpenWrt zlib version is 1.2.11 this check passes
and build fails. This patch will disable this unneeded check and make
sure we are looking for zlib on the right location.
clamdtop was beeing built without it's ncurses dependency. Build system
would link it to the host's ncurses making the program fail at run time.
This patch will disable building of optional clamdtop, otherwise we need
to add ncurses as a dependency and fix the search path.
Daniel Engberg [Tue, 17 Oct 2017 08:37:40 +0000 (10:37 +0200)]
sound/lame: Update to 3.100
* Update LAME to 3.100
* Switch to shared library instead of static binary as it adds very little
overhead if you only need LAME binary but saves space if you need both
library and binary.
Some users might create a minidlna root with symlinks
to shared locations. While this could potentially create
a vulnerability, the option should be available to allow
users to do this should they choose to.
wide_links=no : (default) no content served + error message
[timestamp] upnphttp.c:1366: error: Rejecting wide link X
wide_links=yes : content served, no error messages
Signed-off-by: James Christopher Adduono <redacted>
git.99rst.org / openwrt-packages.git / log