Hannu Nyman [Mon, 30 Oct 2017 16:42:06 +0000 (18:42 +0200)]
Merge pull request #5029 from hnyman/wget1192
wget: fix update to 1.19.2 for buildbot
I modifed the commit in this PR to reflect the already pushed version bump change by @tripolar
Several targets have already failed in buildbot like
```
target-arm_cortex-a15+neon-vfpv4_musl_eabi/wget-nossl/wget-1.19.2'
Package wget-nossl is missing dependencies for the following libraries:
libunistring.so.2
```
So, let's try to overcome that libunistring linkage with a hack that makes the actual libunistring overlooked.
Hannu Nyman [Sat, 28 Oct 2017 08:34:36 +0000 (11:34 +0300)]
wget: fix update to 1.19.2 for buildbot
Disable linkage to libunistring with a hack: advice configure
to use included libunistring when there is actually none.
This avoids libunistring detection in buildbot the the need
for dependency.
jool: fix PKG_BUILD_DIR to avoid kernel ABI mismatch
As jool builds a kernel module, a PKG_BUILD_DIR under KERNEL_BUILD_DIR must
be used to avoid reusing build artifacts when switching to a different
target of the same architecture. Otherwise, kernel ABI mismatches may
result, leading to an unusuable module, or build failures like the
following:
Package kmod-jool is missing dependencies for the following libraries:
crypto_hash.ko
5.26.1 introduced default_inc_excludes_dot which is causing
perl-html-tags and possibly other modules to fail. Add explict
dot back when invoking module's ./Makefile.PL.
Karl Palsson [Tue, 24 Oct 2017 13:16:53 +0000 (13:16 +0000)]
libwebsockets: Upgrade to 2.4.0 and drop wolfssl for mbedtls
Libwebsockets 2.4.0 now includes mbedtls as a first class citizen.
Drop the problematic and poorly supported wolf/cyassl variant and add
mbedtls variant instead.
* Add qualifying '.' to scripts or to @INC, as appropriate since we're
enabling default_inc_excludes_dot;
* Add new platform/library definitions like double-double format and
locale library functions/headers;
* Delete patch 020 as it's been upstreamed;
Optional changes:
* Instead of using -@rm and having that fail, emit an error message,
and be ignored, just use @rm -f instead which will always succeed.
Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler
Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]
[CVE-2017-12883] Buffer over-read in regular expression parser
For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]
[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows
A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]
This release fixes the following issues
[1] - A second run to build Boost was executed, even though
Boost.Python3 was not selected.
[2] - Because wserialization and coroutine2 targets were removed from
Boost building system, the flags "--without-wserialization" and
"--without-coroutine2" no longer work and are now suppressed.
The option coroutine2 just selects the necessary dependencies for
the header-library to work.
The sub-package wserialization just selects the serialization
dependency and packs the wserialization shared object.
Stijn Tintel [Fri, 20 Oct 2017 14:46:51 +0000 (17:46 +0300)]
libxml2: install cmake module
Since version 2.9.2, libxml2 provides its own cmake module. Install it
to avoid packages built with cmake and requiring libxml2 to fall back to
cmake's FindLibXml2 module, which seems to detect host libxml2 instead
of the one in staging_dir.
Marko Ratkaj [Fri, 20 Oct 2017 07:23:38 +0000 (09:23 +0200)]
dhcpcd: bump to 6.11.5
1.) pkg version bumped from 6.4.3 to 6.11.5
2.) maintainer changed to me (#4944 dhcpcd: needs a new maintainer)
3.) source changed from bz2 to xz
4.) removed old unnecessary patch
5.) minor style improvements
Lucian Cristian [Wed, 18 Oct 2017 19:07:49 +0000 (22:07 +0300)]
xl2tpd: add some default configs needed on most of cases
mtu 1400, mru 1400 - on ppp devices, usually we need lower mtu, the existing link mabye is already under a lower MTU
require-mschap-v2 - most of the time l2tp is used in conjunction with windows client who will use this kind of auth
lcp-echo-interval 20, lcp-echo-failure 5 - keep alive 20 seconds interval and dead peer detection after 100 seconds
connect-delay 5000 - wait for up to 5 seconds after the connect script finishes for a valid PPP packet from the peer
nodefaultroute - prevent users from creating default routes with pppd
nodefaultip - disables the default behavior when no local IP address is specified
proxyarp - this will have the effect of making the peer appear to other systems to be on the local ethernet
Marko Ratkaj [Wed, 18 Oct 2017 10:38:18 +0000 (12:38 +0200)]
clamav: fix invalid zlib version error
ClamAV's configure script uses grep to check for bugy zlib version
1.2.1. Since current OpenWrt zlib version is 1.2.11 this check passes
and build fails. This patch will disable this unneeded check and make
sure we are looking for zlib on the right location.
clamdtop was beeing built without it's ncurses dependency. Build system
would link it to the host's ncurses making the program fail at run time.
This patch will disable building of optional clamdtop, otherwise we need
to add ncurses as a dependency and fix the search path.