aboutsummaryrefslogtreecommitdiff
path: root/lang
Commit message (Collapse)AuthorAge
* python-certifi: bump to 2022.9.24Eneas U de Queiroz2022-10-21
| | | | | | This version updates the CA bundle, and needs urllib as dependency. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* python-docutils: bump to version 0.19Eneas U de Queiroz2022-10-21
| | | | | | | Package does not currently build because of distutil dependency. Fix this by updating to the latest version. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* django-restframework: bump to version 3.14.0Alexandru Ardelean2022-10-11
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: update to 3.10.7Michal Vasilek2022-10-10
| | | | | | | | * fixes CVE-2021-28861 * adjust pip and setuptools versions * refresh patches Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* Merge pull request #19554 from commodo/numpyAlexandru Ardelean2022-10-09
|\ | | | | numpy: bump to version 1.23.3
| * numpy: bump to version 1.23.3Alexandru Ardelean2022-10-07
| | | | | | | | | | | | | | | | | | | | | | Also bump Cython version to 0.29.32 And yeeeey: zip -> tar.gz And they fixed the Intel AVX extension stuff/detection. Which is why I deferred updating it until now. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | Merge pull request #19552 from commodo/python-pytzAlexandru Ardelean2022-10-09
|\ \ | | | | | | python3-pytz: bump to version 2022.4
| * | python3-pytz: bump to version 2022.4Alexandru Ardelean2022-10-07
| |/ | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | Merge pull request #19529 from blocktrron/qcsuperDavid Bauer2022-10-08
|\ \ | |/ |/| qcsuper: add Package w/ necessary dependencies
| * python-pycrate: add packageDavid Bauer2022-10-06
| | | | | | | | Signed-off-by: David Bauer <mail@david-bauer.net>
| * python-crcmod: add packageDavid Bauer2022-10-06
| | | | | | | | Signed-off-by: David Bauer <mail@david-bauer.net>
* | perl-net-dns: update to version 1.35Daniel Golle2022-10-07
|/ | | | | | | | | | | | | | | | | | | | | | | **** 1.35 Oct 4, 2022 Improve SVCB error reporting. Fix rt.cpan.org #144328 accept_reply test fails with matched consecutive "random" generated packet->id Fix rt.cpan.org #144299 Spelling errors. **** 1.34 May 30, 2022 Improve robustness of EDNS option compose/decompose functions. Simplify code in Makefile.PL. Fix rt.cpan.org #142426 Avoid "Useless use of a constant in void context" warning. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* django: bump to version 4.1.1Alexandru Ardelean2022-10-06
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* Merge pull request #19534 from mhei/php8-pecl-http-update-4.2.3Michael Heimpold2022-10-06
|\ | | | | php8-pecl-http: update to 4.2.3
| * php8-pecl-http: update to 4.2.3Michael Heimpold2022-10-05
| | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | node: bump to v16.17.1Hirokazu MORIKAWA2022-10-05
|/ | | | | | | | | | | | | | | | | | | | | | The following CVEs are fixed in this release: * CVE-2022-32212: DNS rebinding in --inspect on macOS (High) * Insufficient fix for macOS devices on v18.5.0 * CVE-2022-32222: Node 18 reads openssl.cnf from /home/iojs/build/ upon startup on MacOS (Medium) * CVE-2022-32213: HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium) * Insufficient fix on v18.5.0 * CVE-2022-32215: HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium) * Insufficient fix on v18.5.0 * CVE-2022-35256: HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium) * CVE-2022-35255: Weak randomness in WebCrypto keygen More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post. llhttp updated to 6.0.10 llhttp is updated to 6.0.10 which includes fixes for the following vulnerabilities. * HTTP Request Smuggling - CVE-2022-32213 bypass via obs-fold mechanic (Medium)(CVE-2022-32213 ): The llhttp parser in the http module does not correctly parse and validate Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS). * HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215): The llhttp parser in the http module does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS). * HTTP Request Smuggling - Incorrect Parsing of Header Fields (Medium)(CVE-35256): The llhttp parser in the http does not correctly handle header fields that are not terminated with CLRF. This can lead to HTTP Request Smuggling (HRS). Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* treewide: fix security issues by bumping all packages using libwolfsslPetr Štetiar2022-10-04
| | | | | | | | | | | | | | | | | | | | As wolfSSL is having hard time maintaining ABI compatibility between releases, we need to manually force rebuild of packages depending on libwolfssl and thus force their upgrade. Otherwise due to the ABI handling we would endup with possibly two libwolfssl libraries in the system, including the patched libwolfssl-5.5.1, but still have vulnerable services running using the vulnerable libwolfssl-5.4.0. So in order to propagate update of libwolfssl to latest stable release done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages using wolfSSL library. Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide: fix security issues by bumping all packages using libwolfssl"). Signed-off-by: Petr Štetiar <ynezz@true.cz>
* Merge pull request #19512 from mhei/php8-update-8.1.11Michael Heimpold2022-10-04
|\ | | | | php8: update to 8.1.11
| * php8: update to 8.1.11Michael Heimpold2022-10-03
| | | | | | | | | | | | | | | | This fixes: - CVE-2022-31628 - CVE-2022-31629 Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | python-stem: update to v1.8.1Javier Marcet2022-10-03
|/ | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* php8-pecl-sodium: drop package, replaced by php8-mod-sodium (refs #18997)Michael Heimpold2022-09-30
| | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* php8: add sodium extensions (refs #18997)Michael Heimpold2022-09-30
| | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* python3: use tools/expat for host buildRosen Penev2022-09-28
| | | | | | Oversight from when the expat host build was removed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* lua-eco: adapt SSL choice to libwolfsslcpu-cryptoEneas U de Queiroz2022-09-26
| | | | | | | libwolfsslcpu-crypto has to be taken into consideration when selecting the default SSL backend. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* lang: lua-penlight: update to 1.13.1Karl Palsson2022-09-26
| | | | | | | | | | | These are bugfix and feature releases. Changes from 1.11->1.12: https://github.com/lunarmodules/Penlight/blob/master/CHANGELOG.md#1120-2022-jan-10 Changes from 1.12->1.13: https://github.com/lunarmodules/Penlight/blob/master/CHANGELOG.md#1130-2022-jul-22 Signed-off-by: Karl Palsson <karlp@etactica.com>
* php8-pecl-xdebug: add package (refs 19424)Michael Heimpold2022-09-24
| | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* python-jsonschema: Update to 4.16.0Javier Marcet2022-09-17
| | | | | | | | | | | - Improve the base URI behavior when resolving a $ref to a resolution URI which is different from the resolved schema's declared $id. - Accessing jsonschema.draftN_format_checker is deprecated. Instead, if you want access to the format checker itself, it is exposed as jsonschema.validators.DraftNValidator.FORMAT_CHECKER on any jsonschema.protocols.Validator. Signed-off-by: Javier Marcet <javier@marcet.info>
* python-jsonschema: Update to 4.15.0, broken since 4.6.0Javier Marcet2022-09-17
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* python-flask-socketio: update to 5.3.1Michal Vasilek2022-09-16
| | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* python3-iperf3: add iperf3 python wrapperNick Hainke2022-09-14
| | | | | | This wrapper gives us an easy to use api for using iperf3 in python. Signed-off-by: Nick Hainke <vincent@systemli.org>
* python3-flent: add flent packageNick Hainke2022-09-14
| | | | | | | | | | As described on GitHub page [0]: Flent is a Python wrapper to run multiple simultaneous netperf/iperf/ping instances and aggregate the results. [0] - https://github.com/tohojo/flent Signed-off-by: Nick Hainke <vincent@systemli.org>
* python3: backport and fix target musl libc detectionŠimon Bořek2022-09-12
| | | | | | | | | | | | | | | | | | | Patch 030: Backported from Python main branch[^1] for Python to distinguish between glibc and musl libc SOABI. Patch 131: Changes PLATFORM_TRIPLET -gnu/-musl suffix detection (performed by the backported patch) to be based on the target OS instead of the building OS. See included patches for more detailed descriptions. Specifically this fixes cross-compilation for mpc8548 CPUs with SPE instructions[^2] enabled. [^1]: merged to python:main as https://github.com/python/cpython/pull/24502 'bpo-43112: detect musl as a separate SOABI' [^2]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf Co-authored-by: Pali Rohár <pali@kernel.org> Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* python-websocket-client: update to 1.4.1Javier Marcet2022-09-09
| | | | | | | | | | - Fix stack growth bug when `run_forever` reconnects - Add doctest CI for sphinx docs code examples (d150099) - General docs improvements - Fix automatic reconnect with `run_forever` - Allow a timeout to be set when using a proxy Signed-off-by: Javier Marcet <javier@marcet.info>
* python-dotenv: update to v0.21.0Javier Marcet2022-09-09
| | | | | | | | | | | | | | | | | | | Added: - CLI: add support for invocations via 'python -m'. - load_dotenv function now returns False. - CLI: add --format= option to list command. Fixed: - Drop Python 3.5 and 3.6 and upgrade GA - Use open instead of io.open. - Improve documentation for variables without a value - Add parse_it to Related Projects - Update README.md - Improve documentation with direct use of MkDocs Signed-off-by: Javier Marcet <javier@marcet.info>
* python-docker: Update to 6.0.0Javier Marcet2022-09-09
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* php8: update to 8.1.10Michael Heimpold2022-09-06
| | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* luaossl: update to rel-20220711Siger Yang2022-08-31
| | | | Signed-off-by: Siger Yang <siger.yang@outlook.com>
* Merge pull request #19238 from dynasticorpheus/pycaresAlexandru Ardelean2022-08-28
|\ | | | | python-pycares: add new package
| * python-pycares: add new packageFabian Lipken2022-08-25
| | | | | | | | Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* | Merge pull request #19253 from turris-cz/pyuciJosef Schlehofer2022-08-26
|\ \ | | | | | | python-uci: update to version 0.9.0
| * | python-uci: update to version 0.9.0Josef Schlehofer2022-08-25
| | | | | | | | | | | | | | | | | | | | | | | | - Release notes: https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0 - Update copyright while at it. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | lua-eco: rework SSL library dependency & selectionEneas U de Queiroz2022-08-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, lua-eco will add dependencies to all SSL libraries that are selected, even though it will only use one of them. That means that the package downloaded from the regular repository will install OpenSSL, wolfSSL and mbedTLS, even though it will only use OpenSSL. Fix that by adding a built option so that the default can be changed at build-time. To maintain the author's intention, a default symbol is computed based on what libraries are being built into the image, or just selected as a module. Originally, the order or preference was OpenSSL, wolfSSL, then mbedTLS. One change was made to the original order: if OpenSSL and wolfSSL are both selected as module, and mbedTLS is not built into the image, wolfSSL will be preferred over OpenSSL. This is being done to keep the package consistent with OpenWRT's selection of wolfSSL as the default SSL library. If they are both included in the image, then OpenSSL will be preferred. The order of preference is: 1. If at least one library is included in the image, use the first of OpenSSL, wolfSSL, and mbedTLS that is included in the image. 2. If at least one library is selected, but none included in the image, prefer wolfSSL, then OpenSSL, then mbedTLS. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* | | Merge pull request #19229 from commodo/python-updates1Alexandru Ardelean2022-08-24
|\ \ \ | | | | | | | | django, python-{evdev,pytz}: bump versions
| * | | python-pytz: bump to version 2022.2.1Alexandru Ardelean2022-08-22
| | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
| * | | django: bump to 4.1Alexandru Ardelean2022-08-22
| | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
| * | | python-evdev: bump to 1.6.0Alexandru Ardelean2022-08-22
| |/ / | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | / perl-ack: Update to 3.6.0Tianling Shen2022-08-23
| |/ |/| | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | node: bump to v16.17.0Hirokazu MORIKAWA2022-08-23
|/ | | | | | | | | | | | | | | | Notable Changes: Experimental command-line argument parser API Experimental ESM Loader Hooks API Experimental test runner Improved interoperability of the Web Crypto API Dependency updates: Updated Corepack to 0.12.1 Updated ICU to 71.1 Updated npm to 8.15.0 Updated Undici to 5.8.0 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* Merge pull request #19192 from turris-cz/cython-pip-requirementsAlexandru Ardelean2022-08-19
|\ | | | | host-pip-requirements: update Cython to version 0.29.28
| * host-pip-requirements: update Cython to version 0.29.28Josef Schlehofer2022-08-17
| | | | | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Powered by cgit, Themed by Ted Yin.