Fabrice Fontaine
58cc22a6d0
package/c-icap-modules: bump to version 0.5.5
...
https://sourceforge.net/p/c-icap/news/2021/03/the-c-icap-modules-055-is-released
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 17:10:54 +01:00
Fabrice Fontaine
eb6ad853d6
package/c-icap: bump to version 0.5.10
...
https://sourceforge.net/p/c-icap/news/2021/10/the-c-icap-0510-is-released
https://sourceforge.net/p/c-icap/news/2021/09/the-c-icap-059-is-released
https://sourceforge.net/p/c-icap/news/2021/03/the-c-icap-058-is-released
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 17:10:33 +01:00
Fabrice Fontaine
51eb81ddcf
package/python-future: security bump to version 0.18.3
...
Fix CVE-2022-40899: An issue discovered in Python Charmers Future 0.18.2
and earlier allows remote attackers to cause a denial of service via
crafted Set-Cookie header from malicious web server.
https://github.com/PythonCharmers/python-future/releases/tag/v0.18.3
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 17:08:56 +01:00
Fabrice Fontaine
cd7bfba252
package/lxc: security bump to version 5.0.2
...
- Fix CVE-2022-47952: lxc-user-nic in lxc through 5.0.1 is installed
setuid root, and may allow local users to infer whether any file
exists, even within a protected directory tree, because "Failed to
open" often indicates that a file does not exist, whereas "does not
refer to a network namespace path" often indicates that a file exists.
NOTE: this is different from CVE-2018-6556 because the CVE-2018-6556
fix design was based on the premise that "we will report back to the
user that the open() failed but the user has no way of knowing why it
failed"; however, in many realistic cases, there are no plausible
reasons for failing except that the file does not exist.
- Drop patches (already in version)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 17:08:23 +01:00
Fabrice Fontaine
722b84eafa
package/nginx: bump to version 1.22.1
...
- Drop eleventh patch (already in version)
- Update hash of LICENSE file (update in year)
- pcre2 is supported (and enabled by default) since
c6fec0b027
http://nginx.org/en/CHANGES-1.22
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 17:07:20 +01:00
Francois Perrad
5ec326fb97
package/nano: bump to version 7.2
...
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 14:26:23 +01:00
Francois Perrad
5bce041aec
package/tcpdump: bump to version 4.99.3
...
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 14:26:18 +01:00
Maxim Kochetkov
3621312a84
package/libosmium: bump version to 2.19.0
...
Release-notes: https://github.com/osmcode/libosmium/releases/tag/v2.19.0
Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 14:25:50 +01:00
Maxim Kochetkov
f5d73033b8
package/timescaledb: bump version to 2.9.1
...
Release notes: https://github.com/timescale/timescaledb/releases/tag/2.9.1
Signed-off-by: Maxim Kochetkov <fido_max@inbox.ru>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 14:25:14 +01:00
Nicolas Cavallari
cc47da516c
package/libgit2: security bump to 1.5.1
...
Fixes CVE-2023-22742: when compiled with BR2_PACKAGE_LIBSSH2,
libgit2 fails to verify SSH keys by default.
https://github.com/libgit2/libgit2/blob/v1.5.1/docs/changelog.md
Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2023-01-26 14:24:54 +01:00
Joachim Wiberg
6e0ba6bfc2
package/ssdp-responder: fix misspelled define directive
...
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-23 07:25:19 +01:00
Casey Reeves
e6789e8b8b
package/systemd: reenable utmp support
...
This patch provides a way to enable utmp support when using systemd,
with it disabled by default, as some security concerns may apply. Still,
there are cases where having utmp is desirable, even though it is rare,
so let's make this configurable.
See commit 32f53bdfb4
.
Signed-off-by: Casey Reeves <casey@xogium.me>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 19:05:12 +01:00
Vincent Fazio
f090116066
package/ipmitool: allow configuring PEN registry source
...
The default, the IANA PEN registry used by ipmitool is large (4 MiB+)
and changes at the whim of IANA, meaning reproducible builds may not be
possible by using the default package.
Add a configuration option to specify the source of the registry file.
Remote and local files are supported. If no source is specified, no
registry file will be installed to the target.
Backport upstream patches to allow this to add requisite support:
Make a missing registry file non-fatal
Make downloading/installing the registry optional
Signed-off-by: Vincent Fazio <vfazio@gmail.com>
Co-Developed-by: Yann E. MORIN <yann.morin.1998@free.fr>
[yann.morin.1998@free.fr:
- use https for the default URL
- use simple assignment for first _CONF_OPTS
- squeeze empty lines, comment closing endif
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 15:15:21 +01:00
Lang Daniel
a4befb442e
package/vte: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:49 +01:00
Lang Daniel
ca2be02a6a
package/rygel: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:46 +01:00
Lang Daniel
b3ff33a8b0
package/python-gobject: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:43 +01:00
Lang Daniel
d3ecb398b1
package/pangomm: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:40 +01:00
Lang Daniel
6893eabaa0
package/pango: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:37 +01:00
Lang Daniel
97ceb937a1
package/mono-gtksharp3: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:34 +01:00
Lang Daniel
002774d8ba
package/mobile-broadband-provider-info: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:32 +01:00
Lang Daniel
86b0605de1
package/metacity: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:29 +01:00
Lang Daniel
8da8773aa1
package/libxmlpp: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:26 +01:00
Lang Daniel
4426874cd3
package/libxml2: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:23 +01:00
Lang Daniel
bf3242b8ff
package/libsoup: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:20 +01:00
Lang Daniel
70f4be5700
package/libsecret: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:59:17 +01:00
Lang Daniel
9da85317b3
package/librsvg: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:39 +01:00
Lang Daniel
abe3c7f81b
package/libpeas: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:36 +01:00
Lang Daniel
7a511e286d
package/libmediaart: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:33 +01:00
Lang Daniel
824c40d39d
package/libgudev: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:30 +01:00
Lang Daniel
4b1114e579
package/libgtk3: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:27 +01:00
Lang Daniel
1d7e304648
package/libgtk2: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:24 +01:00
Lang Daniel
9d4d3a930e
package/libglib2: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:21 +01:00
Lang Daniel
03255ca627
package/libglade: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:18 +01:00
Lang Daniel
500f40bbc7
package/libgee: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:15 +01:00
Lang Daniel
39c25a288e
package/libepoxy: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:12 +01:00
Lang Daniel
16acbf9ce3
package/libart: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:09 +01:00
Lang Daniel
ce15c411a2
package/json-glib: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:06 +01:00
Lang Daniel
65c47725b0
package/gvfs: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:03 +01:00
Lang Daniel
dc967784cc
package/gcr: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:58:00 +01:00
Lang Daniel
be4b330008
package/gupnp: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:57:58 +01:00
Lang Daniel
01b5b18cbc
package/gupnp-tools: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:28 +01:00
Lang Daniel
b443913bcc
package/gupnp-dlna: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:25 +01:00
Lang Daniel
cfdd3fcd15
package/gupnp-av: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:22 +01:00
Lang Daniel
76c0ac9725
package/gtksourceview: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:19 +01:00
Lang Daniel
30b916546b
package/gtkmm3: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:16 +01:00
Lang Daniel
cb96dcaff4
package/gtk2-engines: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:13 +01:00
Lang Daniel
9086723227
package/gssdp: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:10 +01:00
Lang Daniel
2d7de5b2be
package/gsettings-desktop-schemas: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:55:07 +01:00
Lang Daniel
01e4f72b6b
package/gobject-introspection: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:53:15 +01:00
Lang Daniel
2334adaa97
package/glibmm: switch to https download
...
Signed-off-by: Daniel Lang <d.lang@abatec.at>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-01-21 13:53:12 +01:00