aboutsummaryrefslogtreecommitdiff
path: root/libs
Commit message (Collapse)AuthorAge
...
* nghttp3: fix pkgconfig fileRosen Penev2024-02-22
| | | | | | CMake build is passing host paths in pkgconfig. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libffi: update to 3.4.6krant2024-02-21
| | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* libpng: update to 1.6.42krant2024-02-21
| | | | | | | | - Don't set default and rename renamed CMake options - Enable NEON optimizations - Rebase the patch Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* libuv: fix CVE-2024-24806Hirokazu MORIKAWA2024-02-20
| | | | | | | | | | | | | | | | Update to 1.48.0 CVE-2024-24806 : Improper Domain Lookup that potentially leads to SSRF attacks Vulnerabilities fixed * CVE-2024-24806 / GHSA-f74f-cvh7-c6q6 0f2d7e7, 3530bcc and e0327e1 Notable Changes * linux: disable io_uring on ppc64 and ppc64le #4285 * linux: disable io_uring on hppa below kernel 6.1.51 #4224 * win/spawn: optionally run executable paths with no file extension #4292 (We recommend that most users consider setting this by default) Important Bugs Fixed * unix,win: fix busy loop with zero timeout timers #4250, #4304. Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* Merge pull request #23463 from mhei/fix-aprMichael Heimpold2024-02-19
|\ | | | | apr/subversion: fix subversion build and apache-mod-php8 build regres…
| * apr/subversion: fix subversion build and apache-mod-php8 build regression ↵Michael Heimpold2024-02-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (fixes #23460) The recent upgrade of apr included a change with should fix the subversion build. Unfortunately, this fix resulted in a build regression of apache-mod-php8. The new approach is to pass the locations of the apr config helpers to configure via parameter. Fixes: 68dd7b7cf632 ("apr: update to 1.7.4") Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | libfmt: fix compilation with mariadbRosen Penev2024-02-18
| | | | | | | | | | | | Upstream backport. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | h2o: remove, nothing depends on it anymorePeter van Dijk2024-02-18
| | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | openblas: enable ARM-specific optimizationskrant2024-02-17
|/ | | | | | | | | | | | | | | | OpenBLAS allows to specify per-family CPU optimizations during build stage. This package supports manual specification of a family during configuration. This commit adds automatic detection of target family, while keeping manual override as a backup. Automatically detected ARM families: - Cortex-A9 without NEON - Cortex-A9 with NEON - Cortex-A15 - Cortex-A53 - Cortex-A72 Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* glib2: update to version 2.74.7Florian Eckert2024-02-16
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* glib2: do not set default meson optionsFlorian Eckert2024-02-16
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* Revert "glib2: update to 2.78.4"Florian Eckert2024-02-16
| | | | | | | | | So that we have a working ModemManager again and can look at the problem revert the update to version 2.78.4 for now. Signed-off-by: Florian Eckert <fe@dev.tdt.de> This reverts commit 08c7b0dfcae48114176762e93aa1b4ce5d42f8ad.
* Revert "glib2: use internal pcre2"Florian Eckert2024-02-16
| | | | | | | | This is must also get revert to get back to working glib2 version 2.74.0 Signed-off-by: Florian Eckert <fe@dev.tdt.de> This reverts commit 9f57ef2d6e339231278f36614d9b2fdd275a9339.
* efivar: disable mold linkerOskari Rauta2024-02-16
| | | | | | | efivar fails to build with mold linker, so it should be opted out. I also added missing maintainer. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* zmq: update to 4.3.5Rosen Penev2024-02-14
| | | | | | | | Remove GCC13 backport. Refresh other patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* taglib: update to 2.0Rosen Penev2024-02-14
| | | | | | Switched to local tarball as the utf8cpp subproject needs to be used. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libcap-ng: update to 0.84Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* hidapi: update to 0.14.0Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libnpupnp: update to 6.1.0Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libxerces-c: update to 3.2.5Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libupnp: update to 1.14.18Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libtins: update to 4.5Rosen Penev2024-02-14
| | | | | | Remove upstream backport. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* log4cplus: update to 2.1.1Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libv4l: update to 1.26.1Rosen Penev2024-02-14
| | | | | | | | meson now available. Added 2 patches to fix missing intl dependency and musl support. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libmpdclient: update to 2.22Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* faad2: update to 2.11.1Rosen Penev2024-02-14
| | | | | | CMake is used now. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libidn: update to 1.42Rosen Penev2024-02-14
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* glib2: use internal pcre2Rosen Penev2024-02-14
| | | | | | | For some strange reason, glib2 does not link properly with a static pcre2. Work around by bundling own copy. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libstrophe: Specify correct PKG_LICENSEAndreas Gnau2024-02-14
| | | | | | | | libstrophe is dual-licensed as MIT OR GPL-3.0-only, which is also reflected by the SPDX-License-Identifier lines in the source files. Correct PKG_LICENSE in the Makefile accordingly. Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
* redis: update to 6.2.14Rosen Penev2024-02-12
| | | | | | Fixes CVE-2022-24735 and CVE-2022-24736 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libusb-compat: update to 0.1.8krant2024-02-12
| | | | | | - Update package URL Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* zlog: update to 1.2.17Rosen Penev2024-02-11
| | | | | | | | | | | | Rework to use local tarballs. Smaller and more stable. Build with cmake. Faster and simpler. Needs a small patch though. License was updated. Fixes CVE-2021-43521 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libmicrohttpd: update to 0.9.77Rosen Penev2024-02-11
| | | | | | Fixes CVE-2023-27371 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libao: backport fix for CVE-2017-11548Rosen Penev2024-02-11
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* yajl: backport CVE-2023-33460 fixRosen Penev2024-02-11
| | | | | | Removed old uclibc patches. Not relevant with modern musl or glibc. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* postgesql: update to 15.6Rosen Penev2024-02-12
| | | | | | Fixes CVE-2023-39417 and CVE-2023-39418 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* confuse: fix CVE-2022-40320Rosen Penev2024-02-10
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* giflib: fix CVEsRosen Penev2024-02-10
| | | | | | Patches taken from Fedora Signed-off-by: Rosen Penev <rosenp@gmail.com>
* avahi: backport CVE fixes from upstreamRosen Penev2024-02-10
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libvpx: update to 1.14.0Rosen Penev2024-02-10
| | | | | | Fixes CVE-2023-5217 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libssh2: update to 1.11.0Rosen Penev2024-02-10
| | | | | | Fixes CVE-2020-22218 Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libx264: update to 2024-01-13 revisionkrant2024-02-10
| | | | | | | - Fix CPU type detection to enable asm on ARM - Refresh patches Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* libfido2: update to 1.14.0krant2024-02-10
| | | | | | - Don't set default and remove obsolete CMake options Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* libcbor: update to 0.11.0krant2024-02-10
| | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* file: update to 5.45krant2024-02-10
| | | | | | - Remove default and non-existent configure options Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* cjson: update to 1.7.17krant2024-02-10
| | | | Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* json-glib: update to 1.8.0krant2024-02-10
| | | | | | - Don't set default Meson option Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* libextractor: update to 1.13krant2024-02-10
| | | | | | | - Remove obsolete configure option - Remove patch and var override since MEM_SRCDST_SUPPORTED is always on Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* glib2: update to 2.78.4krant2024-02-09
| | | | | | | | | - Use HTTPS for package URL - Don't set default Meson options - Remove upstreamed patch - Refresh remaining patches Signed-off-by: krant <aleksey.vasilenko@gmail.com>
* apr-util: update to 1.6.3krant2024-02-07
| | | | | | | - Remove upstreamed patches - Fix OS path leak in iconv configure script Signed-off-by: krant <aleksey.vasilenko@gmail.com>