This fixes CVE-2020-36242 (buffer overflows caused by integer overflow
in OpenSSL).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Description:
Update to v14.15.5
upgrade npm to 6.14.11

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Added a check for macOS 11 and newer to resolve a compile error:
*** Unexpected product version 11.2.

Added Internals::getcwd.
Fallback to the built-in getcwd to resolve compile errors on macOS:
Can't locate Errno.pm in @INC
/miniperl not found

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>

fix for CVE-2021-3281

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

Python bindings for ubus.

Signed-off-by: Erik Larsson <who+github@cnackers.org>

This fixes:
    - CVE-2021-21702

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Allows targets such as prepare, refresh, or update to be run without
building dependencies for easier patch maintenance.

This is d741a64b7 applied to php8.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This fixes:
  - CVE-2021-21702

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

The build process uses a minilua helper for code generation
which must not be compiled with target cross-compiler but
the host compiler.

This error was spotted by buildbots:
ext/opcache/minilua /builder/shared-workdir/build/sdk/build_dir/
 target-x86_64_musl/php-8.0.1/ext/opcache/jit/dynasm/dynasm.lua
 -D X64=1 -o ext/opcache/jit/zend_jit_x86.c /builder/shared-workdir
 /build/sdk/build_dir/target-x86_64_musl/php-8.0.1/ext/opcache/jit/zend_jit_x86.dasc
/bin/bash: ext/opcache/minilua: No such file or directory
Makefile:406: recipe for target 'ext/opcache/jit/zend_jit_x86.c' failed
make[4]: *** [ext/opcache/jit/zend_jit_x86.c] Error 127

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Allows targets such as prepare, refresh, or update to be run without
building dependencies for easier patch maintenance.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Python bindings for libuci, useful for writing ansible modules to manage OpenWRT systems.
Reused Makefile from upstream: https://gitlab.nic.cz/turris/turris-os-packages/-/blob/develop/lang/python-uci/Makefile

Signed-off-by: Erik Larsson <who+github@cnackers.org>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

This includes fixes for:
* CVE-2021-3114: crypto/elliptic: incorrect operations on the P-224
  curve
* CVE-2021-3115: cmd/go: packages using cgo can cause arbitrary code
  execution on Windows

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Needed for host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This properly disables compilation on ARC, where perl is not supported.
Also matches dependencies with other perl packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Upstream changed slightly. Adjusted.

Add missing host build dependency. perl/host is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

lyaml provides a Lua binding for libyaml

Signed-off-by: Mathew McBride <matt@traverse.com.au>

This fixes:
    - CVE-2020-7071

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Align some lines with the rest, no functional change.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

January 2021 Security Releases:
use-after-free in TLSWrap (High) (CVE-2020-8265)
HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Fixes:
pkg_resources.ContextualVersionConflict: (idna 3.0 (/usr/lib/python3.9/site-packages), Requirement.parse('idna<3,>=2.5'), {'requests'})

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

No package version bump as no change to built package.  URL now points
to current useful webpage, and description is based on current release.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

This became a requirement in libwww-perl 6.17.

Note that there are two other missing "soft" dependencies, Authen::Ntlm
as used by LWP::Authen::Ntlm, and Data::Dump as used by
LWP::Debug::TraceHTTP, that are not required for basic functionality.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>