Commit graph

17007 commits

Author SHA1 Message Date
Hannu Nyman
11dc840326 irqbalance: upgrade to version 1.8.0
Upgrade irqbalance to version 1.8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6631cfaa61)
2021-04-18 18:29:02 +03:00
Rosen Penev
2871541167
pulseaudio: update to 14.0
Remove upstreamed OpenSSL patch.

Update MESON_ARGS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 325c565040)
2021-04-18 15:27:28 +02:00
Rosen Penev
3bdf75bd2d
pulseaudio: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ca2da3f315)
2021-04-18 15:27:24 +02:00
Rosen Penev
ba0558e8a5
pulseaudio: fix compilation with ICONV_FULL
Reordered check to check external iconv first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 67f8f57d06)
2021-04-18 15:27:19 +02:00
Jeffery To
1248994b9f
pulseaudio: Update ARM NEON/VFP detection
With openwrt/openwrt@8dcc108760, the ARM
FPU compiler options are no longer part of CONFIG_TARGET_OPTIMIZATION.

This updates various packages that look for NEON/VFP support to search
CONFIG_CPU_TYPE instead.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-04-18 15:26:55 +02:00
Rosen Penev
4021cb65a0
pulseaudio: do not build NEON with unsupported platforms
Unfortunately, meson's check is totally broken.

Fortunately, it's fairly easy to workaround.

Fixes compilation with all ARM platforms that don't support NEON.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 91e80e5442)
2021-04-18 15:24:04 +02:00
Rosen Penev
8eb7d95ba8
pulseaudio: add lto and gc-sections to reduce size
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 45e58e1cc3)
2021-04-18 15:24:00 +02:00
Rosen Penev
15fb6ec36e
pulseaudio: fix pkgconfig paths
Turns out, packages like mpd that use pkgconfig to find pulseaudio
end up using host paths.

Fixes compilation with at least mpd.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 21f67bf599)
2021-04-18 15:23:56 +02:00
Rosen Penev
eac2ca1c65
pulseaudio: update to 13.0
Converted to use meson for compilation speed.

Removed libwrap dependency. Upstream no longer supports it.

Removed intltool and glib2 host dependencies. They seem to be no
longer needed.

Removed upstream patch.

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 78d84d4c9c)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[rebased on commit from master branch]
2021-04-18 15:23:35 +02:00
Rosen Penev
f0aa4486a6
pulseaudio: Backport upstream patch
Fixes compilation with recent alsa-libs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 123373b1b7)
2021-04-18 15:16:00 +02:00
Rosen Penev
e5701228c1
Merge pull request #15384 from VolunteerComputingHelp/openwrt-19.07
Transfer of boinc 7.16.16 from 21.02 to 19.07
2021-04-17 09:05:05 -07:00
Josef Schlehofer
8ca4ab69e0
Merge pull request #15413 from luizluca/19.07/ruby-2.6.7
[19.07] ruby: update to 2.6.7
2021-04-13 14:55:18 +02:00
Luiz Angelo Daros de Luca
5c16a052f5 ruby: update to 2.6.7
Fixes two CVEs:

CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability in WEBrick
CVE-2021-28965: XML round-trip vulnerability in REXML

After this release, ruby 2.6 is now in security maintenance phase.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-12 23:00:46 -03:00
Tiago Gaspar
807e088bbc
netdata: disable shared memory totals by default
Fix log spam:
daemon.err netdata[2090]: PROCFILE: Cannot open file '/proc/sysvipc/shm'
This is caused by a non existant /proc/sysvipc/shm because of the
CONFIG_PROC_STRIPPED option that is enabled by default in the kernel
generic target config

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 5f65d87bb7)
2021-04-11 09:58:49 +02:00
Stan Grishin
09ba055839 https-dns-proxy: bugfix: race condition with dnsmasq
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 22:38:48 -07:00
Steffen Moeller
0072fc5336 boinc: Transfer v7.16.16 from 21.02 to 19.07
Intentionally unchanged from 43d21e650d,
i.e. the pull request #14862 from neheb/boi

Signed-off-by: Steffen Moeller <moeller@debian.org>
2021-04-10 20:36:10 +02:00
Dirk Brenken
ba1a801f74
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:38:16 +02:00
Dirk Brenken
1cf2e3530d
Merge pull request #15254 from dibdot/19.07
[19.07] travelmate: minimal change to fix cp detection
2021-04-09 18:34:08 +02:00
Dirk Brenken
74c8fb403f
travelmate: minimal change to fix cp detection
* fix cp detection proposed by @ChristianKuehnel
* add/adapt mikrotik login script provided by @Christian Kuehnel

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:21:17 +02:00
Karel Kočí
56e1674efc
rpcd-mod-lxc: add postinst to reload rpcd on update/installation
This is dependency of luci-app-lxc and when users install that package
it is no way clear that they have to reload rpcd to get it working
correctly. Without it container listing does not work.
In general this reload should be in this package simply because other
rpcd-mod-* packages reload rpcd as well.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 54b6116d7d)
2021-04-09 10:46:16 +02:00
Rosen Penev
560a0ea2bf ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:43 -07:00
Kirill Nikolaev
0863ab3237 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:43 -07:00
Rosen Penev
52d3ce0f6d ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1a8f3659)
2021-04-06 21:54:34 -07:00
Rosen Penev
f275b3f418 ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d95edf16ef)
2021-04-06 21:54:34 -07:00
Martin Blumenstingl
ba329c4ea5 ksmbd-tools: update to 3.3.5
Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 58f91090f5)
2021-04-06 21:54:33 -07:00
Sven Roederer
055b1cd581 nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:55 -07:00
Josef Schlehofer
e88b4d873b
netdata: update to version 1.29.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbfdc)
(cherry picked from commit 4322399166)
2021-04-06 22:52:50 +02:00
Josef Schlehofer
f6bc822ff3
syslog-ng: update to version 3.31.2
Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e968e)
2021-04-06 22:52:14 +02:00
Dirk Brenken
fdd4afe6ac
adblock: fix init status command
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-01 20:55:45 +02:00
Rosen Penev
65b578bfa2
Merge pull request #15295 from lucize/librefix
[19.07] libreswan: update cu 3.32
2021-03-28 14:48:00 -07:00
Lucian Cristian
5a8a7aeab1 libreswan: update cu 3.32
CVE and NSS fix

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-03-28 23:10:05 +03:00
Nikos Mavrogiannopoulos
7436ea3fb1
Merge pull request #15252 from ja-pa/gnutls-security-fix-19.07
[OpenWrt 19.07] gnutls: patch security issue
2021-03-26 21:55:20 +01:00
Rosen Penev
7e815fe4e2
Merge pull request #15255 from ja-pa/mariadb-10.2.37-openwrt-19.07
[OpenWrt 19.07] mariadb: update to version 10.2.37
2021-03-26 13:24:25 -07:00
Rosen Penev
05474882bc
Merge pull request #15256 from cartender/pr_libftdi1_19
[19.07] libftdi1: Improve build binary reproducibility
2021-03-26 13:23:13 -07:00
Giovanni Giacobbi
7af60cc3e2
libftdi1: Improve build binary reproducibility
The library embeds the result of "git describe" inside the source code, making the binary result dependent of the particular commit being used in the build root when building inside a git working copy.

As this is unnecessary information, remove this option and fallback to the default "unknown", which is also the value compiled by tools that do not clone but export the openwrt base tree.

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-03-26 10:48:39 +00:00
Josef Schlehofer
58ded3ff4c
Merge pull request #15214 from BKPepe/aiohttp-19.07
python-aiohttp: backport fix for CVE-2021-21330
2021-03-26 00:48:13 +01:00
Stan Grishin
aa3e95ac69 https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:10 -07:00
Jan Pavlinec
abb3c7ede0
mariadb: update to version 10.2.37
Fixes CVE-2021-27928

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 14:30:51 +01:00
Jan Pavlinec
cb6509e882
gnutls: patch security issue
Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 10:34:58 +01:00
Rosen Penev
e2d1af1a29
Merge pull request #15221 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for additional Force DNS ports
2021-03-22 11:56:50 -07:00
Josef Schlehofer
41388ed8a2
php: add fix for updated ICU 68+
Recently, I updated icu for issues with node feed, but it broke
compiling of php7.

Error:
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: error: 'TRUE' undeclared (first use in this function)
  collator_sort_internal( TRUE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: note: each undeclared identifier is reported only once for each function it appears in
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c: In function 'zif_collator_asort':
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:543:26: error: 'FALSE' undeclared (first use in this function); did you mean 'FILE'?
  collator_sort_internal( FALSE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~~
                          FILE
make[3]: *** [Makefile:1031: ext/intl/collator/collator_sort.lo] Error 1

More details:
https://github.com/php/php-src/commit/8eaaabd

Backport of patch from PHP7.3 didn't work for me, but this one was suggested that
Homebrew is using it and it works for me. However, PHP7.2 is EoL.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 13:57:13 +01:00
Stan Grishin
3530635214 https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:14 +00:00
Josef Schlehofer
44b301125f bind: update to version 9.16.13
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-21 20:35:45 -07:00
Josef Schlehofer
612fbeb58f
nnn: update to version 3.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 53f54c45e4)
2021-03-22 02:06:16 +01:00
Josef Schlehofer
1952a1c2ae
python-aiohttp: backport fix for CVE-2021-21330
More details:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 01:41:14 +01:00
Hirokazu MORIKAWA
13ab7af3f0
icu: update to 68.2
Maintainer: me
Compile tested: head r15324-920b692, aarch64, x86_64
Run tested: (qemu-5.2.0) aarch64

Description:
Update to 68.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d6317132dd)
2021-03-22 00:31:59 +01:00
Hirokazu MORIKAWA
2120a3cf51
icu: update to 68.1
It updates to CLDR 38. New features including locale-dependent smart unit preferences (road distance, temperature, etc.) and locale ID canonicalization conformant with CLDR.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4f3a8c1535)
2021-03-22 00:31:51 +01:00
Rosen Penev
10712797f0
icu: fix compilation under CentOS 7
CentOS 7's GCC is quite old and does not put max_align_t under std.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6255a77128)
2021-03-22 00:31:43 +01:00
Hirokazu MORIKAWA
79ddd03288
icu: update to 67.1
Unicode 13 & CLDR 37. Bug fixes for date and number formatting, enhanced support for user preferences in the locale identifier. LocaleMatcher code and data improved. Number skeletons have a new “concise” form that can be used in MessageFormat strings.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit e3be3aadc1)
2021-03-22 00:31:34 +01:00
Rosen Penev
813f8d7db2
Merge pull request #15165 from gladiac1337/haproxy-2.0.21-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.21
2021-03-19 15:51:45 -07:00