Commit Graph

4621 Commits

Author SHA1 Message Date
Alexandru Ardelean f9dbdeaa03 django: bump to version 5.0.7
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-07-18 16:20:33 +03:00
Philip Prindeville ea5fd93ca8 perl-text-csv_xs: Update to 1.55
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-07-14 19:08:29 -07:00
Philip Prindeville 52c42db8e2 perl-cgi: Update to 4.66
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2024-07-14 16:06:36 -07:00
Michael Heimpold 07714a24c8
Merge pull request #24548 from mhei/php8-update-to-8.3.9
php8: update to 8.3.9
2024-07-13 12:15:56 +02:00
Rosen Penev d257ffe609 python3: use pkgconfig to find readline
When searching for readline, ncurses is needed, which can be ncursesw or
ncurses. Use pkgconfig to avoid the whole situation and simplify.

Also add readline/host as the OS one may be unusable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Rosen Penev 434cdf4a75 python3: remove rpath from host python
Everything relevant to python is now built statically. No need for
rpath.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Rosen Penev 8aac7a78a9 python3: replace e2fsprogs includes
libuuid is provided by util-linux now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Aleksey Vasilenko fa80e4383b erlang: update to 27.0.1
Disable host build of wx - it slows down the build and is not used anyway

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2024-07-12 12:56:24 -07:00
Javier Marcet 2c96a5bb1d luajit2: update to v2.1-20240626
- change: disable hash computation optimization because of the
 possibility of severe degradation.

Signed-off-by: Javier Marcet <javier@marcet.info>
2024-07-10 10:24:39 +02:00
Florian Eckert b814db5618
Merge pull request #24533 from bretello/fix-lua-cjson-pkg-src-url
lua-cjson: fix broken PKG_SOURCE_URL
2024-07-10 08:13:41 +02:00
Hirokazu MORIKAWA ebc219db41 node: July 8, 2024 Security Releases
This is a security release.

Notable Changes

    CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
    CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
    CVE-2024-22018 - fs.lstat bypasses permission model (Low)
    CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
    CVE-2024-37372 - Permission model improperly processes UNC paths (Low)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-07-10 10:36:48 +08:00
Geoffrey Hausheer 6769d5cf11 luasocket: Enable serial module
Includes the serial module for luasockets (which is already being built)
in the final package. This allows using socket.select() on a serial port
(eg /dev/ttyACM0) which is the easiest way to use a serial-port with
coroutines.

Signed-off-by: Geoffrey Hausheer <rc2012@pblue.org>
2024-07-09 17:52:36 -07:00
Michael Heimpold 183810bd5b php8: update to 8.3.9
Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.3.9

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-07-09 20:49:44 +02:00
brethil bretello 64ac0914f8
lua-cjson: fix broken PKG_SOURCE_URL
See 718f27293a

Signed-off-by: brethil bretello <bretello@distruzione.org>
2024-07-09 18:20:06 +02:00
Milinda Brantini 18aaf0cc44 golang: Update to 1.22.5
go1.22.5 (2024-07-02) includes security fixes to the net/http package, 
as well as bug fixes to the compiler, cgo, the go command, the linker, 
the runtime, and the crypto/tls, go/types, net, net/http, and os/exec.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-07-08 16:49:12 -07:00
Lu jicong 84464a656c rust: select correct architecture for armv5
Currently, armv5 and armv6 targets are both using armv6 rustc.
Without this patch, rust programs in armv5 targets throw illegal instruction
error.

Signed-off-by: Lu jicong <jiconglu58@gmail.com>
2024-07-04 02:09:45 +08:00
Jianhui Zhao 482cfd1c6a lua-ffi: Add package
Lua-ffi is a portable lightweight C FFI for Lua, based on libffi
and aiming to be mostly compatible with LuaJIT FFI, but written
from scratch in C language.

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-06-23 11:15:50 -07:00
Hirokazu MORIKAWA a5e319df3d node: bump to v20.15.0
Notable Changes
* test_runner: support test plans
* inspector: introduce the --inspect-wait flag
* zlib: expose zlib.crc32()
* cli: allow running wasm in limited vmem with --disable-wasm-trap-handler

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-06-23 11:06:32 -07:00
Esaaprilia Salsabila c5b97d4d96 perl: update version 5.40.0
https://metacpan.org/release/HAARG/perl-5.40.0

remove bytes_heavy.pl
Perl/perl5#22047

perl update version 5.40.0

Signed-off-by: Esaaprilia Salsabila <esaapriliasalsabila@gmail.com>
2024-06-20 14:18:35 -07:00
Luiz Angelo Daros de Luca 0c7b588695 ruby: update to 3.3.3
Ruby 3.3 adds a new parser named Prism, uses Lrama as a parser
generator, adds a new pure-Ruby JIT compiler named RJIT, and many
performance improvements especially YJIT.

See: https://www.ruby-lang.org/en/news/2023/12/25/ruby-3-3-0-released/

The 3.3.1 release includes security fixes.

- CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
- CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
- CVE-2024-27280: Buffer overread vulnerability in StringIO

See: https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-3-1-released/

The 3.3.2 release includes many bug-fixes.

See: https://www.ruby-lang.org/en/news/2024/05/30/ruby-3-3-2-released/

Packaging changes since 3.2.2:
- New packages: ruby-prism and ruby-rjit
- Added /usr/bin/rdbg to ruby-debug
- Added /usr/bin/syntax_suggest to ruby-syntax_suggest

The 3.3.3 release includes:

- RubyGems 3.5.11
- Bundler 2.5.11
- REXML 3.2.8
- strscan 3.0.9
- --dump=prism_parsetree is replaced by --parser=prism --dump=parsetree
- Invalid encoding symbols raise SyntaxError instead of EncodingError
- Memory leak fix in Ripper parsing
- Bugfixes for YJIT, **{}, Ripper.tokenize,
- RubyVM::InstructionSequence#to_binary, --with-gmp, and some build
  environments

See: https://www.ruby-lang.org/en/news/2024/06/12/ruby-3-3-3-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2024-06-17 16:22:59 +08:00
Jianhui Zhao 1425899f7e lua-eco: update to 3.5.2
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-06-16 02:35:26 +08:00
Michael Heimpold f5e5fe7ad2
Merge pull request #24367 from mhei/php8-update-to-8.3.8-with-libgd-fixup
php8: workaround libgd capability detection (refs #23846)
2024-06-12 07:35:51 +02:00
Rosen Penev 9acf60320c lzmq: fix compilation with GCC14
Missing header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-06-10 13:47:21 -07:00
Michael Heimpold ab7d5716d0
Merge pull request #24339 from mhei/php8-update-to-8.3.8
php8: update to 8.3.8
2024-06-10 06:51:59 +02:00
Milinda Brantini b4ffdb4c42 golang: Update to 1.22.4
go1.22.4 (released 2024-06-04) includes
security fixes to the archive/zip and net/netip packages,
as well as bug fixes to the compiler,
the go command, the linker,
the runtime, and the os package.

Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-10 04:45:29 +08:00
Alexandru Ardelean 41486a7df7
Merge pull request #24314 from commodo/python-updates1
django,python-{requests,evdev,lxml}: bump versions
2024-06-09 12:50:19 +03:00
Aleksey Vasilenko fa7b780cbf erlang: fix mis-detection of transparent hugepages
Latest Erlang update incorrectly detects THP as always enabled,
which leads to segmentation fault on systems without transparent hugepages.
Here we manually override configure flag by checking actual option of target kernel.

Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
2024-06-08 19:45:19 -07:00
Rosen Penev ea8e6fbf33 perl: fix compilation with GCC14
Need the header for fegetround.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-06-08 17:47:24 -07:00
Michael Heimpold 1b7f11d96d php8: workaround libgd capability detection (refs #23846)
This is an alternative approach to #24209. Instead of switching
to bundled/internal libgd, workaround the capability detection
by giving the information to the build system directly.

PHP's original approach does not work when cross-compiling,
but since it is known which features are enabled in OpenWrt's
build, we can directly enable these features here, too.

This is not that future prove, but should do the job for the
moment until a proper solution was discussed with upstream.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 07:33:18 +02:00
Michael Heimpold 1dd9f4bfc8 php8: update to 8.3.8
This fixes:
    - CVE-2024-4577
    - CVE-2024-5458
    - CVE-2024-5585

Changelog: https://www.php.net/ChangeLog-8.php#8.3.8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-06-08 06:17:24 +02:00
W. Michael Petullo b560ea218e python-networkx: update to 3.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-06-07 03:23:18 +08:00
Hirokazu MORIKAWA ff7f26e379 node: bump to v20.14.0
Notable Changes
* src,permission: throw async errors on async APIs (Rafael Gonzaga)
* (SEMVER-MINOR) test_runner: support forced exit (Colin Ihrig)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-06-03 16:35:03 +08:00
Alexandru Ardelean 76c07f6432 django: bump to version 5.0.6
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-06-03 09:42:38 +03:00
Alexandru Ardelean bcebcf13fb python-requests: bump to version 2.32.3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-06-03 09:41:21 +03:00
Alexandru Ardelean 78500aa922 python-lxml: bump to version 5.2.2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-06-03 09:40:04 +03:00
Alexandru Ardelean e33c78b092 python-evdev: bump to version 1.7.1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-06-03 09:37:54 +03:00
krant e6a390739e erlang: update to 27.0
Signed-off-by: krant <aleksey.vasilenko@gmail.com>
2024-06-01 17:28:19 -07:00
Michael Heimpold 37a6c5846f
Merge pull request #24251 from mhei/php8-update-to-8.3.7
php8: update to 8.3.7
2024-05-30 07:52:56 +02:00
W. Michael Petullo 18963ff373 python-selinux: update to 3.6
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-05-29 18:47:42 -07:00
Michael Heimpold 533456bcc0 php8: update to 8.3.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2024-05-28 20:41:50 +02:00
Christian Marangi e28bd51cab treewide: update packages to use new toolchain define
Update packages to use new toolchain define and drop usage of
TOOLCHAIN_DIR.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-05-28 15:42:30 +08:00
Tianling Shen b642f337b2 golang: Update to 1.22.3
go1.22.3 (released 2024-05-07) includes security fixes to the go command
and the net package, as well as bug fixes to the compiler, the runtime,
and the net/http package.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-28 14:09:12 +08:00
Florian Eckert 4fac186de9
Merge pull request #24146 from TDT-AG/pr/20240513-rust
rust: fix remote filesystem issue
2024-05-16 15:13:48 +02:00
Florian Eckert 6b6c74dca8 rust: add patch to fix remote filesystem issue
If the download directory is on another filesystem (NFS), then the
current implementation of bootstrapping rust fails. Because the 'syscall'
(rename) does not work on crossing filesystem boundary.

This chnage was already merged upstream to the github main rust repository.
rust-lang/rust#124975

The patch has been rebased so that it can be applied correctly.
No functional change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2024-05-16 13:20:37 +02:00
Rosen Penev e44aae02d0 vala: fix compilation with GCC14
Needs a cast now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-05-14 10:56:51 -07:00
Hirokazu MORIKAWA fe8b0e85af node: bump to v20.13.1
Update to v20.13.1

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2024-05-14 05:01:33 -07:00
Jianhui Zhao 2227a4c180 lua-eco: update to 3.5.1
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2024-05-13 16:00:34 +08:00
Javier Marcet 356f8347de python-jsonschema: Update to 4.22.0
Release notes:
https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst#v4220

Signed-off-by: Javier Marcet <javier@marcet.info>
2024-05-11 21:56:34 +08:00
Michael Heimpold 904b8814de
Merge pull request #24103 from nxhack/php8-intl-icu75
php8: Support for icu 75
2024-05-09 21:23:29 +02:00
Tianling Shen 32a22201db golang: Enable loongarch64 for Go compiler and packages
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-09 16:15:50 +08:00