Commit graph

16988 commits

Author SHA1 Message Date
Steffen Moeller
0072fc5336 boinc: Transfer v7.16.16 from 21.02 to 19.07
Intentionally unchanged from 43d21e650d,
i.e. the pull request #14862 from neheb/boi

Signed-off-by: Steffen Moeller <moeller@debian.org>
2021-04-10 20:36:10 +02:00
Rosen Penev
560a0ea2bf ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:43 -07:00
Kirill Nikolaev
0863ab3237 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:43 -07:00
Rosen Penev
52d3ce0f6d ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1a8f3659)
2021-04-06 21:54:34 -07:00
Rosen Penev
f275b3f418 ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d95edf16ef)
2021-04-06 21:54:34 -07:00
Martin Blumenstingl
ba329c4ea5 ksmbd-tools: update to 3.3.5
Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 58f91090f5)
2021-04-06 21:54:33 -07:00
Sven Roederer
055b1cd581 nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:55 -07:00
Josef Schlehofer
e88b4d873b
netdata: update to version 1.29.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbfdc)
(cherry picked from commit 4322399166)
2021-04-06 22:52:50 +02:00
Josef Schlehofer
f6bc822ff3
syslog-ng: update to version 3.31.2
Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e968e)
2021-04-06 22:52:14 +02:00
Dirk Brenken
fdd4afe6ac
adblock: fix init status command
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-01 20:55:45 +02:00
Rosen Penev
65b578bfa2
Merge pull request #15295 from lucize/librefix
[19.07] libreswan: update cu 3.32
2021-03-28 14:48:00 -07:00
Lucian Cristian
5a8a7aeab1 libreswan: update cu 3.32
CVE and NSS fix

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-03-28 23:10:05 +03:00
Nikos Mavrogiannopoulos
7436ea3fb1
Merge pull request #15252 from ja-pa/gnutls-security-fix-19.07
[OpenWrt 19.07] gnutls: patch security issue
2021-03-26 21:55:20 +01:00
Rosen Penev
7e815fe4e2
Merge pull request #15255 from ja-pa/mariadb-10.2.37-openwrt-19.07
[OpenWrt 19.07] mariadb: update to version 10.2.37
2021-03-26 13:24:25 -07:00
Rosen Penev
05474882bc
Merge pull request #15256 from cartender/pr_libftdi1_19
[19.07] libftdi1: Improve build binary reproducibility
2021-03-26 13:23:13 -07:00
Giovanni Giacobbi
7af60cc3e2
libftdi1: Improve build binary reproducibility
The library embeds the result of "git describe" inside the source code, making the binary result dependent of the particular commit being used in the build root when building inside a git working copy.

As this is unnecessary information, remove this option and fallback to the default "unknown", which is also the value compiled by tools that do not clone but export the openwrt base tree.

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-03-26 10:48:39 +00:00
Josef Schlehofer
58ded3ff4c
Merge pull request #15214 from BKPepe/aiohttp-19.07
python-aiohttp: backport fix for CVE-2021-21330
2021-03-26 00:48:13 +01:00
Stan Grishin
aa3e95ac69 https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:10 -07:00
Jan Pavlinec
abb3c7ede0
mariadb: update to version 10.2.37
Fixes CVE-2021-27928

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 14:30:51 +01:00
Jan Pavlinec
cb6509e882
gnutls: patch security issue
Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 10:34:58 +01:00
Rosen Penev
e2d1af1a29
Merge pull request #15221 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for additional Force DNS ports
2021-03-22 11:56:50 -07:00
Josef Schlehofer
41388ed8a2
php: add fix for updated ICU 68+
Recently, I updated icu for issues with node feed, but it broke
compiling of php7.

Error:
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: error: 'TRUE' undeclared (first use in this function)
  collator_sort_internal( TRUE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: note: each undeclared identifier is reported only once for each function it appears in
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c: In function 'zif_collator_asort':
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:543:26: error: 'FALSE' undeclared (first use in this function); did you mean 'FILE'?
  collator_sort_internal( FALSE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~~
                          FILE
make[3]: *** [Makefile:1031: ext/intl/collator/collator_sort.lo] Error 1

More details:
https://github.com/php/php-src/commit/8eaaabd

Backport of patch from PHP7.3 didn't work for me, but this one was suggested that
Homebrew is using it and it works for me. However, PHP7.2 is EoL.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 13:57:13 +01:00
Stan Grishin
3530635214 https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:14 +00:00
Josef Schlehofer
44b301125f bind: update to version 9.16.13
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-21 20:35:45 -07:00
Josef Schlehofer
612fbeb58f
nnn: update to version 3.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 53f54c45e4)
2021-03-22 02:06:16 +01:00
Josef Schlehofer
1952a1c2ae
python-aiohttp: backport fix for CVE-2021-21330
More details:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 01:41:14 +01:00
Hirokazu MORIKAWA
13ab7af3f0
icu: update to 68.2
Maintainer: me
Compile tested: head r15324-920b692, aarch64, x86_64
Run tested: (qemu-5.2.0) aarch64

Description:
Update to 68.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d6317132dd)
2021-03-22 00:31:59 +01:00
Hirokazu MORIKAWA
2120a3cf51
icu: update to 68.1
It updates to CLDR 38. New features including locale-dependent smart unit preferences (road distance, temperature, etc.) and locale ID canonicalization conformant with CLDR.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4f3a8c1535)
2021-03-22 00:31:51 +01:00
Rosen Penev
10712797f0
icu: fix compilation under CentOS 7
CentOS 7's GCC is quite old and does not put max_align_t under std.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6255a77128)
2021-03-22 00:31:43 +01:00
Hirokazu MORIKAWA
79ddd03288
icu: update to 67.1
Unicode 13 & CLDR 37. Bug fixes for date and number formatting, enhanced support for user preferences in the locale identifier. LocaleMatcher code and data improved. Number skeletons have a new “concise” form that can be used in MessageFormat strings.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit e3be3aadc1)
2021-03-22 00:31:34 +01:00
Rosen Penev
813f8d7db2
Merge pull request #15165 from gladiac1337/haproxy-2.0.21-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.21
2021-03-19 15:51:45 -07:00
Christian Lachner
227597c970 haproxy: Update HAProxy to v2.0.21
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:38:26 +01:00
Tianling Shen
a8a4059284 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa50)
2021-03-18 23:22:48 -10:00
Tianling Shen
01ab015a9a msgpack-c: add new package
This is needed by tmate.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cfc965b107)
2021-03-18 23:22:48 -10:00
Rosen Penev
97beb7d365
minidlna: update to 1.3.0
Fixes two CVEs relating to UPnP.

Removed libuuid dependency. It is not used.

Remove clock_gettime hack. It seems to have been fixed.

Removed upstream patches.

Refreshed the other ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f568979648)
2021-03-18 10:23:08 +01:00
Hannu Nyman
d1eec4ad47
Merge pull request #15149 from ja-pa/tor-0.4.4.8-openwrt-19.07
[openwrt 19.07] tor: update to version 0.4.4.8 (security fix)
2021-03-17 19:55:45 +02:00
Jan Pavlinec
0494d8706b
tor: update to version 0.4.4.8
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-17 10:52:33 +01:00
Florian Eckert
1656b49bfe
Merge pull request #15136 from TDT-AG/pr/2021015-openwrt-19.07-mwan3
mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
2021-03-16 14:14:24 +01:00
Florian Eckert
40d56e46b1 mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
With this change, the interface status is no longer read from the mwan3 ubus.
The status of the interface is read directly from the status directory.
This was already implemented in the master with the
commit c07f5230be.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-15 14:15:42 +01:00
Karl Palsson
b66d262d75 net/mosquitto: bump to 1.6.14
This is a minor security fix for outgoing bridges and the client
library.

Full details: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 10:41:31 +00:00
Paul Spooren
e573dac5f1 CI: backport GitHub action CI
The CI is working fine with OpenWrt snapshots and 21.02, so backport it.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-03-12 09:21:44 -10:00
Olivier Poitrey
81fa8cf893 nextdns: Update to version 1.11.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-03-09 21:24:18 +02:00
Rosen Penev
2170d8ed62
Merge pull request #15054 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: better processing of custom user files
2021-03-08 12:26:46 -08:00
Stan Grishin
af02206e25 vpn-policy-routing: better processing of custom user files
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:35:01 +00:00
Rosen Penev
5c58de5e63
libpam: update to 1.5.1
Fix installed paths. After e52d0487e88c3c8c57e1310d1a02b18eae0d142e
upstream, this bug was exposed.

Instead of working around it, fix the patch.

After this, everything consistently gets installed to ipkg-install/usr.

Minor Makefile reorganization.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b75f250f3b)
2021-03-07 13:55:07 +01:00
Rosen Penev
86a70892d8
libpam: update to 1.5.0
Fixes CVE-2020-27780

Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0f317e9fbd)
2021-03-07 13:54:58 +01:00
Rosen Penev
ef17e4a30c
libpam: update to 1.4.0
Remove upstreamed patch and add a new one to fix compilation.

Add some more configure options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a05db1acfe)
2021-03-07 13:54:46 +01:00
Hannu Nyman
85d122fdc7 nano: update to 5.6.1
Update nano editor to version 5.6.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0f4138db0b)
2021-03-06 10:29:08 +02:00
Rosen Penev
a6a27c904a ninja: update to 1.10.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f25f29c740)
2021-03-04 23:49:55 -08:00
Rosen Penev
b4adde5872 ninja: fix typo
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 52569b80fa)
2021-03-04 23:49:55 -08:00