Commit graph

16524 commits

Author SHA1 Message Date
Tiago Gaspar
bb42a250b4
kea: Update kea to the latest stable verion (1.6.2).
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 0f4cc2e339)
2020-05-24 19:47:00 -07:00
Rosen Penev
1d30a273e1
kea: Remove openssl host dependency
OpenSSL is already built as part of tools (LibreSSL actually) and can be
used instead for the host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c037c8d988)
2020-05-24 19:46:50 -07:00
Tiago Gaspar
f22e122e64
kea: update package to 1.6.0
Update kea to the latest stable verion (1.6.0).

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 03cf093332)
2020-05-24 19:46:39 -07:00
Tiago Gaspar
6f19b894d6
kea: remove dependency and reduce file size
Remove boost-python3 dependency and reduce file size of the compiled
kea-libs

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 74603fe5ea)
2020-05-24 19:46:30 -07:00
Tiago Gaspar
87f4d6ba2c
kea: fix kea-admin dependency
Fix kea-admin dependency where if procps-ng-ps wasn't available busybox
would output an error casuse it does't support showing a processe's PID

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 9314a96765)
2020-05-24 19:46:22 -07:00
Tiago Gaspar
1360d1f88c
kea: fix and improve makefile
Fix an issue where the Makefile wouldn't allow kea to show up in the
menuconfig Also added some description to the packages

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 95307f2a4b)
2020-05-24 19:46:13 -07:00
Rosy Song
07538f535a
kea: remove python3 dependency of kea-admin
fix #9495

Signed-off-by: Rosy Song <rosysong@rosinson.com>
(cherry picked from commit 444420423f)
2020-05-24 19:46:07 -07:00
Rosen Penev
efde7c454e
kea: Fix compilation without deprecated OpenSSL APIs
Forgot to add this one to the last pull request.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54d7bc119d)
2020-05-24 19:45:58 -07:00
Rosen Penev
09ea6f0325
kea: Don't install to STAGING_DIR_HOST
STAGING_DIR_HOST is for packages under tools/ , not host packages.

Reorganized Makefile for consistency between packages.

Added PKG/HOST_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d93fd61d62)
2020-05-24 19:45:50 -07:00
Rosen Penev
fb58e3b8c4
spoofer: remove host build + cleanups
The host build is not used by anything.

Added PKG_INSTALL for consistency between packages.

Added PKG_BUILD_PARALLEL for faster compilation.

Added missing protobuf/host build dependency. This was previously
specified as a host dependency, which is wrong.

Removed pointless std parameter.  It's only useful for old G++ versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63107fa8c0)
2020-05-24 19:38:43 -07:00
Rosen Penev
deccad8925
spoofer: Update to 1.4.5
Needed for the new protobuf update.

Cleaned up Makefile.

Got rid of HOST_BUILD_DEPENDS. This package does not have a host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4c42eb0b45)
2020-05-24 19:38:34 -07:00
Dirk Brenken
15257f5b6d
adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0b6ea12560)
2020-05-24 21:49:26 +02:00
Hannu Nyman
246fc735b6 nano: update to 4.9.3
Update nano version to 4.9.3
Minor bugfix release.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38be46a7ae)
2020-05-24 20:43:30 +03:00
Rosen Penev
673e76b1ca
Merge pull request #12275 from micmac1/mar19run
[19.07] mariadb: use default umask for rundir
2020-05-24 03:55:11 -07:00
Sebastian Kemper
39db22ec95 mariadb: use default umask for rundir
rundir needs to be accessible for clients, hence o= is not the proper
permission for rundir. This commit breaks out rundir from the awk script
and sets it up with default umask.

This also removes chmod call and instead tells mkdir to create the
directories with the proper permissions directly.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-24 10:41:11 +02:00
Rosen Penev
8362f46fe4 gerbera: backport init and config changes from master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-23 17:35:20 -07:00
Rosen Penev
225eeb9a6b gerbera: add taglib support
Gives audio metadata support to gerbera.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-23 17:35:20 -07:00
Rosen Penev
074444794c libupnp: enable reuseaddr
Helps applications restart safely.

Disabled optssdp. Not used by anything.

Disabled scriptsupport. Not used by anything.

Made all configure options explicit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8e065c147f)
Added some extra stuff from master.
2020-05-23 17:35:20 -07:00
Rosen Penev
51efb1723e taglib: update to 1.12-beta-1
It seems 1.11.1 is old and has CVEs.

Removed boost hack since upstream removed boost support.

Removed outdated InstallDev hacks.

Added PKG_CPE_ID.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b0dc454c0e)
2020-05-23 17:34:56 -07:00
Rosen Penev
778f14f51f taglib: fix taglib-config paths
It seems gerbera uses this instead of pkgconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2016b7b799)
2020-05-23 16:57:00 -07:00
Rosen Penev
e74a456c0e taglib: add
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 350317d673)
2020-05-23 16:56:01 -07:00
Dirk Brenken
c8d2ed2cbc
adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9f91ecc47)
2020-05-23 21:21:54 +02:00
Rosen Penev
a41e068db8
sslh: update to 1.20
Fixed maintainer entry.

Added patch fixing compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ded3ad41b8)
2020-05-21 17:28:35 -07:00
Hannu Nyman
23251b93a9
Merge pull request #12247 from jefferyto/python-setuptools-site-patch-openwrt-19.07
[openwrt-19.07] python-setuptools,python3-setuptools: Fix error when installing from source
2020-05-21 18:10:31 +03:00
Jeffery To
32fb2ba0d6 python-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-21 22:07:17 +08:00
Jeffery To
6dac29693f python3-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 70a7f736c5)
2020-05-21 20:15:24 +08:00
Josef Schlehofer
49ac1e8b74 bind: update to version 9.14.12
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:25:23 -07:00
Josef Schlehofer
99998e218a
syslog-ng: update to version 3.27.1
snmp-dest was moved to afsnmp

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d4db36ea09)
2020-05-20 19:02:02 +02:00
Philip Prindeville
64ebad3fd9
syslog-ng: restore service "reload" to actually working
Commit 44a16ca broke syslog-ng such that it no longer works with
logrotate, for example.  Yes, you can manually stop and start the
service, but (1) you shouldn't have to and (2) it creates a window
where you potentially lose messages if the syslog UDP socket
overruns.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit c27f4ca53b)
2020-05-20 19:01:56 +02:00
Philip Prindeville
0e80f0486b
syslog-ng: including user settings after system settings
Initially we included user-specific settings last, so that they
could turn off or replace system settings... otherwise we only get
to change what's NOT explicitly set by the system.  This is overly
constraining.

Restore the original functionality of allowing the user to
override settings defined by the distribution's configuration.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit f8443ae829)
2020-05-20 19:01:35 +02:00
Yousong Zhou
98d4126c4a qemu: ignore configure option --disable-ipv6
Fixes: https://github.com/openwrt/packages/issues/12194
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a3033406ea)
2020-05-20 23:34:14 +08:00
Yousong Zhou
50148ea080 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 1091badd83)
2020-05-20 23:34:11 +08:00
Josef Schlehofer
676e6ddd6f
Merge pull request #12216 from BKPepe/19.07-unbound
[19.07] unbound: update to version 1.10.1 (security fix)
2020-05-20 08:38:48 +02:00
Hannu Nyman
149a084773
Merge pull request #12231 from jefferyto/python-openssl-ca-certs-openwrt-19.07
[openwrt-19.07] python-openssl,python3-openssl: Add dependency on ca-certs
2020-05-20 08:19:17 +03:00
Jeffery To
c062120822 python-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-20 04:37:53 +08:00
Jeffery To
c32e08f308 python3-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d2b0cc523d)
2020-05-20 04:36:07 +08:00
Josef Schlehofer
828ba37e06
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:28:40 +02:00
Hannu Nyman
2ccdae9a45
Merge pull request #12206 from micmac1/mar-1907-10413
[19.07] mariadb: minor version bump with CVE fixes and backports
2020-05-18 08:48:54 +03:00
Sebastian Kemper
115f7eeb07 mariadb: install config files readable for all
Backport from master.

Until now $(INSTALL_CONF) is used for configuration files that go into
/etc/mysql. This commit replaces that with $(INSTALL_DATA). The
configuration files are not only parsed by the server, but also by the
clients (which can be anybody).

This also removes a comment about a cron job from one of the
configuration files. There is no cron job.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:08:28 +02:00
Sebastian Kemper
4f0d108359 mariadb: move mysql_upgrade to the client package
Backport from master.

It's really a client. It connects to the running server as a client, to
upgrade the DBs. And it depends on both mysql and mysqlcheck.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:03:40 +02:00
Sebastian Kemper
9dda3cc87f mariadb: bump to 10.2.32
Fixes:

  CVE-2020-2752
  CVE-2020-2812
  CVE-2020-2814
  CVE-2020-2760

Upstream added support files for auth_pam plugin. This commit adds them
to the package.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:01:00 +02:00
Hannu Nyman
5e9f5cd769
Merge pull request #12187 from jefferyto/golang-1.13.11-default-platform-options-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.11, set default platform options
2020-05-16 23:36:22 +03:00
Jeffery To
d3762591da golang: Set/reset default platform options for target Go compiler
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.

This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit da3fb97b9c)
2020-05-17 03:30:36 +08:00
Jeffery To
f52fbe1d49 golang: Update to 1.13.11
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-17 03:30:36 +08:00
Michael Heimpold
2e6bd4cb86 php7: update to version 7.2.31
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:57:30 +02:00
Rosen Penev
191aac1741
Merge pull request #12171 from rs/nextdns-1.5.8-openwrt-19.07
[19.07] nextdns: Update to version 1.5.8
2020-05-14 20:45:21 -07:00
Olivier Poitrey
07164dec74 nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:04 +00:00
Rosen Penev
504a5f1b81
Merge pull request #12169 from jefferyto/arm-aarch64-vfp-neon-openwrt-19.07
[openwrt-19.07] treewide: Backport VFP/NEON fixes/updates
2020-05-14 09:07:03 -07:00
Jeffery To
a12555cc06 treewide: Enable VFP/NEON optimizations for aarch64
For speexdsp, support for NEON on aarch64 was added in 1.2.0[1].

[1]: https://github.com/xiph/speexdsp/pull/8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dec17eb36c)
2020-05-14 22:45:07 +08:00
Jeffery To
595342148e treewide: Update ARM NEON/VFP detection
With openwrt/openwrt@8dcc108760, the ARM
FPU compiler options are no longer part of CONFIG_TARGET_OPTIMIZATION.

This updates various packages that look for NEON/VFP support to search
CONFIG_CPU_TYPE instead.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2d99ee3004)
[adapted patch for pulseaudio using autotools build]
2020-05-14 22:45:03 +08:00