Commit graph

24748 commits

Author SHA1 Message Date
Nick Hainke
0c15d77f89 dawn: update to 2022-07-22
10fb043 network: dump detail on ping pong received

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1f60c23296)
2022-07-22 21:55:07 +02:00
Alexandru Ardelean
72147f3b94
Merge pull request #18965 from commodo/django-update-21-02
[21.02] django: bump to version 3.2.14
2022-07-22 14:44:32 +03:00
Nick Hainke
412a04b488 dawn: update to 2022-07-21
bb362db datastorage: fix ap_array_unlink_entry always returns NULL
47e98ef network: ping pong keepalive for tcp connections
eba0354 network: add timeout for client connections

In the dawn config the con_timeout needs to be added:
  option con_timeout '60'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 204fd77bbc)
2022-07-21 18:45:49 +02:00
Jeffery To
8a03e65655 golang: Update to 1.17.12
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-07-20 02:38:16 -07:00
Tianling Shen
b519ab08e5 yq: Update to 4.26.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4df4b8eae7)
2022-07-18 19:44:54 +02:00
Tianling Shen
5c8f038b70 xray-core: Update to 1.5.9
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 25922c6afd)
2022-07-18 19:44:06 +02:00
Nick Hainke
8ea0a73b81 dawn: update to 2022-07-18
e596ff1 ubus.c: only add nr entries matching our own SSID

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bb0d45ed35)
2022-07-18 18:24:19 +02:00
Alexandru Ardelean
c45f72086c django: bump to version 3.2.14
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-18 17:42:45 +03:00
Michal Vasilek
57d7325a88
postfix: fix download failure
cdn.postfix.johnriley.me serves a certificate for a different domain
name.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit d4feef97e6)
2022-07-17 15:03:54 +02:00
Nick Hainke
c1b43cf1c9 dawn: update to 2022-07-16
0689b5e ubus: add missing lock for ubus hearing_map
4b7db09 CONFIGURE.md: fix typo
b3f61d4 CONFIGURE.md: adjust documentation about log levels

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit eef9ee0b83)
2022-07-16 19:52:33 +02:00
Eneas U de Queiroz
5d6ea25959 libuwsc: fix compiltation with wolfSSL
wolfssl/options.h needs to be included before the other wolfssl headers
to enable OpenSSL API required to build the package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8fb3fd3dac)
2022-07-15 13:14:58 -07:00
Jonathan Pagel
efb51fc258 telegraf: Update to version 1.23.2
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 591f8cad33)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:06 +02:00
Jonathan Pagel
a7514c233d telegraf: Update to version 1.23.1
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 9b1cdb7b52)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:06 +02:00
Eneas U de Queiroz
e399927bee
xr_usb_serial_common: bump to 2022-03-30
This is the latest commit that touches the xr_usb_serial_common-1a dir.
The changes are restricted to whitespace fixes and kernel version
adaptations:
ecc6ebe xr_usb: Use tty_driver_kref_put for kernel 5.15 and above
caf6d25 xr_usb: Use tty_alloc_driver for kernel 5.15 and above
a42b7e6 xr_usb: Compilation fixes for kernel 5.14
497adb7 #39 fix compilation for newer linux kernels
9103471 xr_usb: fix some whitespace errors

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit eadab32450)
2022-07-14 12:47:04 +02:00
Rosen Penev
f63ff5f018
fio: update to 3.29
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d1edd7677a)
2022-07-14 12:08:23 +02:00
Petr Štetiar
c38d5976e8 libarchive: fix ext2fs build race error condition
libarchive looks for ext2fs headers during configure, and if it finds
them it will expect to find them during compile, or on the rare occasion
when they aren't it will fail:

 libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory

As we just need headers for some type constants, let's re-use headers
from tools/e2fsprogs package which are always available.

Reported-by: Adam Dov <adov@maxlinear.com>
Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com>
References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 797945dfaa)
2022-07-13 08:47:35 +02:00
Hirokazu MORIKAWA
2ac03c2372 node: July 7th 2022 Security Releases
Update to v14.20.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-07-10 22:38:30 +02:00
Jeffery To
580926cb6c python-cryptography: Fix failing build
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d7883)
2022-07-07 09:54:10 -07:00
Etienne Champetier
50547b6d51
nft-qos: simplify ifname retrieval
network_get_device should be enough, and since https://git.openwrt.org/?p=openwrt/openwrt.git;a=commitdiff;h=4b9a67362d70c544b85078b8d5c661f43f7472d9
uci network config interface sections use 'device' instead of 'ifname',
rendering the fallback useless

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 76b750d720)
2022-07-06 13:30:33 +02:00
Stijn Segers
d5738504d0
unbound: update to 1.16.0
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
(cherry picked from commit 695e0dbaa4)
2022-07-05 04:54:30 +02:00
Florian Eckert
6b1d459373
Merge pull request #18828 from nemesisdesign/openwrt-21.02
[21.02] openwisp-config: update to 1.0.1
2022-07-04 09:21:50 +02:00
Florian Eckert
0105c8d49b
Merge pull request #18847 from nemesisdesign/monitoring-openwrt-21
[21.02] openwisp-monitoring: added 0.1.1
2022-07-04 09:21:03 +02:00
Federico Capoano
1a63a03305 openwisp-monitoring: added 0.1.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae)
2022-07-01 18:52:02 -04:00
Federico Capoano
f689115b4b openwisp-config: update to 1.0.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit abb75e3a7b)
2022-07-01 18:44:25 -04:00
Florian Eckert
b44b37050d
Merge pull request #18839 from TDT-AG/pr/collectd-fix-smart
collectd: fix smart plugin segfault
2022-06-30 16:42:42 +02:00
Florian Eckert
ebe9833ea0 collectd: smart: add patch to check udev_enumerate_scan_devices return value
The function udev_enumarte_scan_devices returns a value less than 0 on
failure. If this is the case then we terminate the read for this smart
information.

This change was already send upstream. And could be delete in feature
collectd versions.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 896a0f0db6)
2022-06-30 14:45:26 +02:00
Florian Eckert
2773123201 collectd: remove not needed fix
This was not a real fix but a workaround. It is no longer clear to me
why this was necessary. Deleting the patch restores the upstream
behaviour of the collected for the smart plugin. I have tested it and on
my system the hard disk to be monitored is recognised.

root@system ~ # cat /sys/class/block/sda/uevent
MAJOR=8
MINOR=0
DEVNAME=sda
DEVTYPE=disk

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9ea1cf6ed)
2022-06-30 14:45:20 +02:00
Florian Eckert
6570249dc5
Merge pull request #18838 from 1715173329/y2
[openwrt-21.02] yq: Update to 4.25.3
2022-06-30 11:45:57 +02:00
Tianling Shen
e23edff2f0
yq: Update to 4.25.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 15aff10231)
2022-06-30 16:23:09 +08:00
Sebastian Kemper
405dcf239b protobuf: fix 022aef6
The cherry-pick done in 022aef6 includes changing the build setup from
cmake to ninja, but it was overlooked that this was actually reverted in
2e654b1.

The ninja build results in headers not being installed for the host pkg,
so protobuf-c/host can't be build.

This commit reverts the package back to cmake.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2022-06-26 11:30:14 +02:00
Josef Schlehofer
20fab250dd
syslog-ng: update to version 3.37.1
- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111)
2022-06-25 06:51:48 +02:00
Stijn Tintel
a37c65902b
Revert "lxc: export systemd cgroups after install"
The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b950.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 039912dec5)
2022-06-24 12:20:35 +02:00
Michal Vasilek
af27e76540
lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b950
reverted in 039912dec5

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da7356539)
(cherry picked from commit 345ae974bc)
2022-06-24 12:18:43 +02:00
Lucian Cristian
883fded23d
libreswan: update to 4.4
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit b8c2ab47e1)
2022-06-23 23:34:00 +02:00
Lucian Cristian
e9130a712f
libreswan: update to 4.3
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 7087177bb0)
2022-06-23 23:33:49 +02:00
W. Michael Petullo
8c4ec7faa3
nfdump: update to 1.6.24
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d3b96a4b26)
2022-06-23 23:31:11 +02:00
Josef Schlehofer
92d379f752
knot-resolver: update to version 5.5.1
Changelog for versions:
- 5.4.4 [1]
- 5.5.0 [2]
- 5.5.1 [3]

[1] https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html
[2] https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html
[3] https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html

And refresh patch to avoid offset

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f74754fac1)
2022-06-23 20:14:38 +02:00
Michael Heimpold
79af866bae
Merge pull request #18795 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.20
2022-06-23 07:37:40 +02:00
Michael Heimpold
8d5bfb3110
Merge pull request #18794 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.30
2022-06-23 07:37:11 +02:00
Rosen Penev
7be6cc19e0
luajit: backport softfloat ppc support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 24c0007ea2)
2022-06-23 05:08:08 +02:00
Sergey V. Lobanov
0f1599d2b4
luajit: fix build on macos (ldconfig issue)
fix ldconfig build issue. This patch is a backport from upstream:
18c9cf7d37

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 42c4d25455)
2022-06-22 14:37:52 +02:00
Michael Heimpold
fc32551652 php8: update to 8.0.20
This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-06-22 00:03:28 +02:00
Michael Heimpold
adb76ab12a php7: update to 7.4.30
This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-06-21 23:38:26 +02:00
Stan Grishin
1248b48da7
Merge pull request #18699 from stangri/openwrt-21.02-curl
[21.02] curl: bump to 7.83.1
2022-06-21 12:42:04 -06:00
Tianling Shen
1acfe6ed2a xray-core: Update to 1.5.8
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c6103fe402)
2022-06-21 20:21:31 +03:00
Nick Hainke
64da0fdd54 dawn: update to 2022-06-13
88c78b4 memory_utils: fix reallocation

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4a9eaecf58)
2022-06-14 20:10:28 +02:00
Nick Hainke
9cab118229 dawn: update to 2022-06-11
4cf9d0b treewide: code and documentation cleanup
48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling.
7b615b6 treewide: improve beacon/probe logging
185f31b treewide: improve beacon request handling
0c2e713 datastorage/ubus: Add "soft" kicking algorithm
38f60c5 treewide: RSSI / RCPI handling updates
aba3e81 documentation: Parameter defaults and documentation
3979fdf treewide: cleanup code
e3b3753 scoring: improve scoring algorithm
33f380f treewide: cleanup code
b42193f kicking: improve kicking algorithm
16deab3 treewide: improve mutex handling
31f0a37 test: cleanup tests and add some test scripts
43ca8b8 treewide: fix bugs from Coverity Scan
8ae2a42 utils/storage: improve descriptions
9a9b4dd ubus: Simplify loops and scans in generating hearing map
c833064 treewide: rework mutex
1df5bc5 (master) network: cleanup and improve network handling
3bd349a utils: cleanup
a855087 utils/storage: cleanup
439fe95 ubus/datastorage/msghandler: cleanup
335ace2 datastorage: improve linked list
40ebf48 ubus/datastorage: cleanup
c13c285 utils: cleanup
0e4fc50 documentation: Heavily revised Markdown documentation files

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0c74ab9a79)
2022-06-14 20:10:28 +02:00
Nick Hainke
a43077742d dawn: update to 2022-06-09
850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f78)
2022-06-14 20:10:28 +02:00
Jonathan Pagel
cae6530b91 telegraf: update to version 1.23.0
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e8f6600851)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-06-13 19:42:02 -07:00
Rosen Penev
df56b54ba5
libprotobuf-c: update to 1.4.0
Remove patch. Upstream fixed it.

Add AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 40d2b7c43e)
2022-06-13 11:26:10 +02:00