This version adds a new RegSet API, and fixes the following:
- CVE-2019-19012
- CVE-2019-19203
- CVE-2019-19204
- CVE-2019-19246
- some problems (found by libFuzzer test)
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
004-avoid_ldap_by_defaut.patch:
By default use --avoid-ldap since apache2 is the only user, and we don't
want to add extra dependencies to other apr-utils rdepends. Patch from
Ryan Niebur <ryanryan52@gmail.com>, copied from Debian.
005-apu_config_dont_list_indep_libs.patch:
Prevent recursive linking of dependent libraries by apr-util users.
Patch from Peter Samuelson <peter@p12n.org>, also copied from Debian.
Makes libexpat and libiconv private.
006-avoid_db_by-default.patch:
Make apu-config not output dbm libs by default. See Debian #622081.
Patch from Stefan Fritsch <sf@debian.org>, also copied from Debian
While bumping the revision also correct license information.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
This updates the library to address several CVEs, add modern
crypto, and eliminate legacy patches.
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
I was too aggressive in recommending that we remove the module symbolic
links of form libX.so as part of commit c9ce769b. It turns out that at
least Postfix relies on these, and I suspect any application that makes
use of libsasl2 will require them too.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
The test does not compile with --static.
As this does not touch binaries, not bumping the package release.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
3.2.x is formally "not maintained" and people should stick with 3.1.x
until a new release of the master branch occurs. However, in reality,
3.2.1 has been released, with performance improvements and fixes.
Signed-off-by: Karl Palsson <karlp@etactica.com>
The php7-mod-gd package requires that freetype support exist in libgd,
but this is not included in the default libgd build. In order to allow
a working php7-mod-gd package while keeping the default libgd package
as small as possible, this commit introduces a -full variant of the
libgd package.
Ref: https://github.com/openwrt/packages/issues/10944
Signed-off-by: W. Michael Petullo <mike@flyn.org>
This functionality can be used by downstream applications such as
ttyd to present their HTTP service as a unix domain socket rather
than a TCP server.
Signed-off-by: Mathew McBride <matt@traverse.com.au>
This adds the following drivers as extra packages:
- openssl
- mysql
- odbc
- pgsql
- sqlite3
- gdbm (dbm)
- ldap
This also removes the gratuitous dependency on libsqlite3 from
libaprutil (dbd_sqlite3 was nevery packaged before, after all).
With this ldap and session-crypto support can be enabled in apache.
The mysql driver is currently marked BROKEN, because apr-util still uses
mysql server headers, which aren't part of mariadb-connector-c. But
there's work underway at apr-util upstream to fix that so that BROKEN
can be removed during a feature version bump.
The gdbm dbm driver got added together with a patch that fixes the error
handling. Patch is from Debian.
Resolves#10886
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Freetype support is required for php7-mod-gd as of commit 0f10c8c8,
which causes the PHP7 package to build using this external libgd library.
This commit adds FREETYPE_INCLUDE_DIRS to the definition of CMAKE_OPTIONS.
Without this, libgd does not build freetype support as shown by
this message:
....
Build libgd:
-- Could NOT find Freetype (missing: FREETYPE_INCLUDE_DIRS)
-- Configuring done
-- Generating done
....
Signed-off-by: W. Michael Petullo <mike@flyn.org>
* allows building as mips16 (fixes broken mips16/32 mixed static linking)
* add some static link related flags to reduce target binary size
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
- removes extra flags '$(FPIC)' etc., there is no good reason for them
being used
- stops removing aclocal.m4 and build/ltmain.sh (reason of removal of
these files is not apparent anymore)
- adds PKG_BUILD_PARALLEL:=1
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
- removes '$(FPIC)' and '--without-pic', there is no good reason for
them being used (also @minfrin mentioned memory footprint implications
when '--without-pic' is used)
- stops removing aclocal.m4 and build/ltmain.sh (reason of removal of
these files is not apparent anymore)
- adds PKG_BUILD_PARALLEL:=1
Resolves#10884
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
IPFS C++ HTTP API client library allows C++ applications to communicate with an IPFS node.
It implements IPFS API bindings for C++. Not all methods are implemented.
https://github.com/vasild/cpp-ipfs-http-client
Signed-off-by: Leonid Esman <leonid.esman@gmail.com>
This commit updates Boost to version 1.72.0
There are no new libraries in this release.
Note:
- This commit also adds a post-release patch to fix an issue
with Boost.Coroutine
More info about Boost 1.72.0 can be found at the usual place [1].
[1]: https://www.boost.org/users/history/version_1_72_0.html
Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
backport patch for backtrace detection in h2o.
This patch solves the issue of uclibc pretending to be glibc
Signed-off-by: James Taylor <james@jtaylor.id.au>
musl doesn't support fts. But with the extra package musl-fts installed,
libzip picks up the fts header and fails at the linking stage:
zipcmp.c:(.text.startup+0x130): undefined reference to `fts_open'
/home/sk/tmp/openwrt/staging_dir/toolchain-mips_24kc_gcc-8.3.0_musl/lib/gcc/mips-openwrt-linux-musl/8.3.0/../../../../mips-openwrt-linux-musl/bin/ld: zipcmp.c:(.text.startup+0x172): undefined reference to `fts_read'
So with musl-fts we need to link in libfts. To address that this commits
patches the cmake setup to check if fts is available in libc itself or
in any external libfts.
So when musl-fts is installed on the system the setup will be the
following:
musl: use libfts
uclibc: use fts from libc
glibc: like uclibc
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Add myself as maintainer.
Add PKG_CPE_ID.
Switch to submenu for easier readability.
Change libplist-utils name to the utility.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
dnsdist picks up cdb.h but can't link in the static archive.
/home/sk/tmp/openwrt/staging_dir/toolchain-mips_24kc_gcc-8.3.0_musl/lib/gcc/mips-openwrt-linux-musl/8.3.0/../../../../mips-openwrt-linux-musl/bin/ld: /home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/lib/libcdb.a(cdb_init.o): relocation R_MIPS_26 against `fstat' can not be used when making a shared object; recompile with -fPIC
This commit extends the tinycdb Makefile to build and install as well
the shared library as well as the pic archive. dnsdist will then pick
the shared library.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
JSON for Modern C++ library.
Design goals: intuitive syntax, trivial integration, serious testing.
https://nlohmann.github.io/json/
IPFS C++ HTTP API client library depends on this library.
Signed-off-by: Leonid Esman <leonid.esman@gmail.com>
On some host machines (example: Gentoo amd64 no-multilib) by default
cmake will install libraries to lib64. But in OpenWrt the correct libdir
is lib (for instance the RPATH is set to lib). So you may end up with
libraries in lib64 while RPATH points to lib:
sk@darth ~/tmp/openwrt $ ldd staging_dir/hostpkg/bin/protoc
linux-vdso.so.1 (0x00007ffc741ea000)
libprotoc.so.3.8.0.0 => not found
libprotobuf.so.3.8.0.0 => not found
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f0a8f7ea000)
libstdc++.so.6 => /usr/lib/gcc/x86_64-pc-linux-gnu/9.2.0/libstdc++.so.6 (0x00007f0a8f572000)
libm.so.6 => /lib64/libm.so.6 (0x00007f0a8f427000)
libgcc_s.so.1 => /usr/lib/gcc/x86_64-pc-linux-gnu/9.2.0/libgcc_s.so.1 (0x00007f0a8f40d000)
libc.so.6 => /lib64/libc.so.6 (0x00007f0a8f23c000)
/lib64/ld-linux-x86-64.so.2 (0x00007f0a8f827000)
sk@darth ~/tmp/openwrt $
Fix this by specifying the libdir during host builds.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Jan Pavlinec
Eneas U de Queiroz
Sebastian Kemper
Nikos Mavrogiannopoulos
W. Michael Petullo
Josef Schlehofer
Rosen Penev
Karl Palsson
Mathew McBride
Daniel Golle
Andy Walsh
Leonid Esman
Yousong Zhou
Nicholas Smith
Carlos Miguel Ferreira
James Taylor
Alexander Couzens
Michael Heimpold
Othmar Truniger