Stijn Tintel [Thu, 17 Mar 2022 10:48:50 +0000 (12:48 +0200)]
strongswan: move iptables deps to updown plugin
Let's move the iptables IPsec dependencies out of the strongswan package
and into the plugin package that actually depends on it,
strongswan-mod-updown. As the default updown script calls the iptables
binary, also add a dependency on the iptables-legacy package.
John Audia [Sun, 20 Mar 2022 15:55:22 +0000 (11:55 -0400)]
gnutls: Update to 3.7.4
Bump to latest upstream release. Rebased existing patches.
This version introduces certificate compression support, and with that,
optional dependencies on zlib and zstd. When configure picks them up,
build will fail due to missing dependencies:
Package libgnutls is missing dependencies for the following libraries:
libz.so.1
libzstd.so.1
Disable zlib and zstd support to avoid that.
Signed-off-by: John Audia <redacted>
[disable zlib and zstd] Signed-off-by: Stijn Tintel <redacted>
Stijn Tintel [Fri, 25 Mar 2022 12:40:37 +0000 (14:40 +0200)]
gnutls: add build dependency on gettext-full/host
The gnutls package uses the gettext-version fixup, which is only
available if gettext-full/host has been built. Add the missing build
dependency to fix these errors:
bash: line 1: /home/stijn/Development/OpenWrt/openwrt/staging_dir/hostpkg/bin/gettext: No such file or directory
bash: line 1: /home/stijn/Development/OpenWrt/openwrt/staging_dir/hostpkg/bin/autopoint: No such file or directory
It also prevents configure from using host gettext:
checking for msgfmt... /usr/bin/msgfmt
checking for gmsgfmt... /usr/bin/gmsgfmt
checking for xgettext... /usr/bin/xgettext
checking for msgmerge... /usr/bin/msgmerge
vs:
checking for msgfmt... /home/stijn/Development/OpenWrt/openwrt/staging_dir/hostpkg/bin/msgfmt
checking for gmsgfmt... /home/stijn/Development/OpenWrt/openwrt/staging_dir/hostpkg/bin/gmsgfmt
checking for xgettext... /home/stijn/Development/OpenWrt/openwrt/staging_dir/hostpkg/bin/xgettext
checking for msgmerge... /home/stijn/Development/OpenWrt/openwrt/staging_dir/hostpkg/bin/msgmerge
Javier Marcet [Tue, 29 Mar 2022 13:05:35 +0000 (15:05 +0200)]
python3-paramiko: update to version 2.10.3
2.10.2:
- [Bug] Fix Python 2 compatibility breakage introduced in 2.10.1.
Spotted by Christian Hammond.
2.10.3:
- [Bug] Switch from module-global to thread-local storage when
recording thread IDs for a logging helper; this should avoid one
flavor of memory leak for long-running processes. Catch & patch via
Richard Kojedzinszky.
- [Bug] Certificate-based pubkey auth was inadvertently broken when
adding SHA2 support; this has been fixed. Reported by Erik Forsberg
and fixed by Jun Omae.
Javier Marcet [Tue, 29 Mar 2022 13:02:24 +0000 (15:02 +0200)]
ctop: update to 0.7.7
- Adds uptime column
- CPU bar color thresholds update
- Updated container status icons
- Optimize health status event handling
- Adds ppc64le build
- Adds "open in browser" menu option
- Fix CPU count estimation
Javier Marcet [Tue, 29 Mar 2022 13:07:37 +0000 (15:07 +0200)]
docker-compose: Update to version 2.3.4
What's Changed:
- don't fail trying to remove container with no candidate by @ndeloof
- recreate container after image has been rebuilt/pulled by @ndeloof
- ps: un-deprecate --filter, and enhance docs by @thaJeztah
- Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @dependabot
- Remove DEPRECATED text, since it's just the default by
@ulyssessouza
- Bump Buildx to v0.8.0 by @ndeloof
- kill only need project name by @ndeloof
- don't remove external volumes/networks by @ndeloof
- use docker/cli RunExec and RunStart to handle all the
interactive/tty/* terminal logic by @ndeloof
- Validate doc on pr by @glours
Maxim Anisimov [Sat, 26 Mar 2022 08:45:59 +0000 (11:45 +0300)]
libmbim: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libmbim.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.
Martin Moreno [Tue, 29 Mar 2022 06:51:38 +0000 (23:51 -0700)]
sslh: update to v1.22c
Change notes:
Updated Makefile package version and hash.
Added libpcre2 dependency
Removed USELIBPCRE make flag (no longer optional within sslh)
Updated patch 001 to work with new sslh Makefile
Maxim Anisimov [Sat, 26 Mar 2022 09:04:26 +0000 (12:04 +0300)]
libqmi: switch to meson build tools
Using https://gitlab.freedesktop.org/mobile-broadband/libqmi.git to download the source code.
Enabled lto and additional gcc flags for perfomance and less size.
Added support for selecting qmi message collection.
Selected basic qmi message collection by default (modemmanager requires it).
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.
Sven Eckelmann [Wed, 16 Mar 2022 13:39:20 +0000 (14:39 +0100)]
ap51-flash: update to version 2022.0
* Improve listing of ethernet devices under Linux
* Add support for modern Npcap DLLs
* Fix embedding of images with modern GCC versions
* coding style cleanups and refactoring
* added support for:
Make sure /etc/gnunet and all its files and sub-directories are owned
by gnunet:gnunet. This is somehow necessary as file ownership otherwise
doesn't survive sysupgrade.
Daniel Golle [Tue, 22 Mar 2022 14:16:58 +0000 (14:16 +0000)]
uvol: fix list output on LVM backend
'uvol list' was broken when introducing support for the hidden volumes.
Fix that by not using 'continue' keyword to break the loop (as that
lead to skipping 'json_select ..') and using if-clause instead.
Jeffery To [Mon, 21 Mar 2022 08:43:35 +0000 (16:43 +0800)]
python3: Update to 3.10.3, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer
Daniel Golle [Mon, 21 Mar 2022 01:55:28 +0000 (01:55 +0000)]
gnunet-fuse: update to 0.16.0
Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np()
is now no longer used.
pthread_mutexattr_setkind_np() is deprecated and non-standard.
The standard version is called pthread_mutexattr_settype()
Daniel Golle [Mon, 21 Mar 2022 01:54:29 +0000 (01:54 +0000)]
gnunet: update to 0.16.2
This is a bugfix release for gnunet 0.16.1.
Noteworthy changes in 0.16.2 (since 0.16.1)
DHT: Fix path signature handling.
GNS: Fix BOX handling in zone apex.
NAMESTORE: Prevent storing under invalid labels.
Buildsystem: Fix build on *BSD and Guix.
Daniel Golle [Fri, 18 Mar 2022 18:49:33 +0000 (18:49 +0000)]
lvm2: update to 2.03.15
Version 2.03.15 - 07th February 2022
====================================
Remove service based autoactivation. global/event_activation = 0 is NOOP.
Improve support for metadata profiles for --type writecache.
Use cache or active DM device when available with new kernels.
Introduce function to utilize UUIDs from DM_DEVICE_LIST.
Increase some hash table size to better support large device sets.
Daniel Golle [Fri, 18 Mar 2022 18:46:53 +0000 (18:46 +0000)]
libinput: update to 1.19.3
ed79e4fa quirks: changes touchpad pressure Lenovo Yoga 2 Pro 797a66c1 doc/user: fix broken link to "Observations on trackpoint input data" 7db2a339 quirks: add ModelBouncingKeys for A4Tech X-710BK Mouse 5e7bae44 quirks: Dell 15R touchpad settings for firmware v3 54275910 gestures: cancel hold gestures on thumb detection 033aee76 doc/user: fix broken link to systemd 60-evdev.hwdb
Daniel Golle [Fri, 18 Mar 2022 18:40:15 +0000 (18:40 +0000)]
ccid: update to version 1.5.0
1.5.0 - 27 January 2022, Ludovic Rousseau
- Add support of
- ACS ACR1281U
- Circle CCR7125 ICC
- Circle CIR125 ICC
- Circle CIR125-DOT ICC
- Circle CIR215 CL with iProduct 0x2100
- Circle CIR315 DI
- Circle CIR315 with idProduct: 0x0324
- Circle CIR315 with idProduct: 0x7004
- Circle CIR415 CL
- Circle CIR515 ICC
- Circle CIR615 CL
- Circle CIR615 CL & 1S
- ELYCTIS CL reader
- Nitrokey Nitrokey 3
- Thales Shield M4 Reader
- Add support of simultaneous slot access on multi slots readers
- Use FeliCa instead of Felica on SONY request
- Fix SafeNet eToken 5110 SC issue
- Allow vendor control commands for Omnikey 5427 CK
- always compute readTimeout to use a value greater than default 3 seconds
- Check the bSeq value when receiving a CCID frame
- Avoid logging errors when a reader is removed
- Some other minor improvements
Daniel Golle [Fri, 18 Mar 2022 18:36:16 +0000 (18:36 +0000)]
pcsc-lite: update to version 1.9.5
1.9.5: Ludovic Rousseau 4 December 2021
- pcscd: autoexit even if no client connects
- Fix variable substitution in systemd units
- fix potential race conditions with powerState handling
- Add and use tag TAG_IFD_DEVICE_REMOVED
- UnitaryTests: port code to Python 3
Jeffery To [Fri, 18 Mar 2022 08:42:21 +0000 (16:42 +0800)]
Mako: Remove package
This package (more specifically, the host version) was added for mesa in
the video feed[1]; no packages in the packages feed require this
package.
As mesa will be updated to install Mako using host pip[2], there is no
need to continue maintaining the package here. It will be imported into
the abandoned packages repo[3].
Noah Meyerhans [Fri, 18 Mar 2022 01:32:38 +0000 (18:32 -0700)]
bind: bump to 9.18.1
Fixes multiple security issues:
* CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the
fetch had been shut down earlier
* CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when
"synth-from-dnssec" was enabled
* CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
isc__nm_process_sock_buffer() to be called recursively,
which in turn left TCP connections hanging in the CLOSE_WAIT
state blocking indefinitely when out-of-order processing was
disabled.
* CVE-2021-25220 -- The rules for acceptance of records into the cache
have been tightened to prevent the possibility of
poisoning if forwarders send records outside the
configured bailiwick
Rosen Penev [Sun, 13 Mar 2022 08:09:52 +0000 (00:09 -0800)]
glib2: fix compilation with Alpine Linux
Patch taken from Alpine Linux git. The problem is missing -lintl linker
flag. Placed in a separate directory as the patch interferes with the
way libintl is implemented in OpenWrt.
Also removed rpath hack, which is not needed as all libraries are
static.