The defusedxml package contains several Python-only workarounds and
fixes for denial of service and other vulnerabilities in Python's XML
libraries. In order to benefit from the protection you just have to
import and use the listed functions / classes from the right defusedxml
module instead of the original module.
Currently, openpyxl detects, and uses defusedxml, if installed.
Karl Palsson [Thu, 2 May 2019 12:27:09 +0000 (12:27 +0000)]
mosquitto: major upgrade to 1.6.x
Major new release of mosquitto.
This release rolls up the initial 1.6.0 release, plus the subsequent
build/bug fixes of 1.6.1 and 1.6.2.
Original upstream changelogs:
https://mosquitto.org/blog/2019/04/version-1-6-released/
https://mosquitto.org/blog/2019/04/version-1-6-1-released/
https://mosquitto.org/blog/2019/04/version-1-6-2-released/
Major features of interest:
* MQTTv5 support
* performance improvements
* ALPN support
* OCSP staping support
* OpenSSL Engine support
* TLSv1.0 support dropped
Currently adds two patches to continue supporting OpenSSL engine support
being disabled, and a missing header include. These are both tracked
upstream and are expected to be dropped in a subsequent release.
Commit b32f8d4ff035272706a1d559992cfd6bc1ffe560 broke compilation
of Subversion on systems where unixodbc package is present.
This partial revert fixes issue #8975.
Amol Bhave [Sat, 11 May 2019 13:35:01 +0000 (06:35 -0700)]
libfolly: Fix folly missing deps
Description: folly automatically picks up lz4 and unwind if they are found
by its cmake build script. This is causing buildbot failure.
Include these libraries in DEPENDS as well.
Test Plan:
- build packages liblz4 and libunwind
- build folly, and check that it throws an error
- add this patch, and rebuild
- verify that it succeeds this time around
Compile Tested: nbg6817, openwrt master
Maintainer: me Signed-off-by: Amol Bhave <redacted>
Summary: Currently, boost host build doesn't actually compile boost
libraries for the host arch. If there are host tools that would want
to link against boost, it can't right now.
This diff adds support for compiling host boost library as well.
Any packages that need to depend on a host boost library can depend on
CONFIG_boost-host-build-<lib>.
Test Plan: Compiled fbthrift and verified that it works.
used openwrt master using nbg6817
Sebastian Kemper [Fri, 10 May 2019 20:42:39 +0000 (22:42 +0200)]
mariadb: init script update
- added trailing '--' to logger to make it foolproof
- user is extracted from config instead of using hard-coded value
- log directory is now also extracted from config (if set)
- directory creation is now done via awk script (more robust)
- improved log messages
Sebastian Kemper [Fri, 10 May 2019 20:27:04 +0000 (22:27 +0200)]
mariadb: bump to 10.2.24
From Release Notes:
Security
MDEV-18686 - Add option to PAM authentication plugin to allow case insensitive username matching
bugfix - multi-update checked privileges on views incorrectly (commit 5057d4637525eadad438d25ee6a4870a4e6b384c)
MDEV-19276 - during connect, write error log warning for ER_DBACCESS_DENIED_ERROR, if log_warnings > 1
MDEV-17456 - Malicious SUPER user can possibly change audit log configuration without leaving traces.
Fixes for the following security vulnerabilities:
CVE-2019-2614
CVE-2019-2627
CVE-2019-2628
OpenWrt changes:
- added PKG_CPE_ID
- shortened default description to make "opkg info" output easier on the eyes
- refreshed patches
Amol Bhave [Fri, 10 May 2019 01:17:52 +0000 (18:17 -0700)]
librsocket-cpp: Add new package librsocket-cpp
C++ implementation of RSocket
RSocket is a binary protocol for use on byte stream transports such as
TCP, WebSockets, and Aeron. (https://rsocket.io/)
This ships with two separte libraries, yarpl and rsocket
Patch 100 is already upstream
(https://github.com/rsocket/rsocket-cpp/commit/862202c6e99a49a8cbd304644d98d3f419b429d8).
Patch 101 in process of upstreaming as it needs to made compatible with
using both gold and ld.
Amol Bhave [Tue, 7 May 2019 08:23:55 +0000 (01:23 -0700)]
libfizz: Add libfizz package
Fizz is a TLS 1.3 implementation.
Fizz currently supports TLS 1.3 drafts 28, 26 (both wire-compatible with
the final specification), and 23. All major handshake modes are
supported, including PSK resumption, early data, client authentication,
and HelloRetryRequest.
Compile tested: nbg6817 and arc700, openwrt master
Yousong Zhou [Sun, 5 May 2019 17:14:05 +0000 (17:14 +0000)]
python3-packages: port from python-packages
This is largely done by suffixing "python" or "py" with "3". The
README.md file is also copied here and we intend to maintain it
independently from its python2 counterpart.
Amol Bhave [Sat, 5 Jan 2019 04:13:57 +0000 (20:13 -0800)]
libfolly: Add package for folly library
folly is an open-source C++ library developed and used at Facebook.
Adding this package will enable adding further packages that depend on
this.
Depends on PR #7098, PR #7101, PR #7126, PR #7877
Maintainer: me
Compile tested: openwrt-18.06 for ipq40xx, ipq806x, x86 and ar71xx
Run tested: Tested on devices running on the above architectures.
Verified that dependent packages can successfully build and run using
the libfolly.so shared library.
Yousong Zhou [Mon, 6 May 2019 15:59:14 +0000 (15:59 +0000)]
shadowsocks-libev: move plugin options to server section
Plugin options are properties of shadowsocks deployment as a whole,
including both server and each client components. Multiple client
instances accessing the same server will need to share the same plugin
settings
With this change, plugin options will need to specified to "server" and
"ss-server" section, not to each component section.
Xue Liu [Sun, 19 Aug 2018 11:24:30 +0000 (13:24 +0200)]
lora-gateway-hal: Add package lora-gateway
Add a package for the Semtech lora-gateway-hal.
This package includes three sub packages which
are libloragw, lora-gateway-tests and lora-gateway-utils.
git.99rst.org / openwrt-packages.git / log