Commit graph

11173 commits

Author SHA1 Message Date
tripolar
48b347e47c
Merge pull request #11883 from yousong/wget1806
[18.06] acme: depends on wget-ssl
2020-04-18 19:55:52 +02:00
Yousong Zhou
a62e54af3e acme: depends on wget-ssl
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d917d662ae)
2020-04-18 23:46:09 +08:00
Yousong Zhou
7d1f138c23 wget: make the ssl variant provides wget-ssl
This is to address the need for specifying dependency on a wget
implementation with ssl support.

Now we have a game of names for opkg

 1. uclient-fetch: minimal version by openwrt project
 2. wget-nossl: gnu wget w/o ssl support
 3. wget-ssl: for the moment since this commit, gnu wget w/ ssl support
 4. wget: uclient-fetch, wget-nossl, or wget-ssl
 5. gnu-wget: wget-nossl or wget-ssl

By the time we provide some dummy package like uclient-fetch-ssl and
make it also provide wget-ssl, I guess by then we will also need
gnu-wget-ssl...

Ref: https://github.com/openwrt/packages/issues/11534
Ref: https://github.com/openwrt/packages/pull/9941
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 585e4a38fe &
resolved conflict)
2020-04-18 23:45:35 +08:00
Karel Kočí
b075784431 wget: do not provide itself
The package wget should not say that it provides itself.

This also make gnu-wget provide general so it is not written in Makefile
twice.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 75f2be7d50 &
resolved conflict)
2020-04-18 23:44:20 +08:00
Luiz Angelo Daros de Luca
3066aaa825 ruby: update to 2.5.8
This release includes security fixes, specially:

* CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix)
* CVE-2020-10933: Heap exposure vulnerability in the socket library

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-15 17:20:17 -03:00
Jo-Philipp Wich
a0fe9eeab1 nlbwmon: update to latest Git HEAD
34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 53c48fae15)
2020-04-11 23:24:42 +02:00
Hannu Nyman
c0fffb996f
Merge pull request #11821 from stangri/18.06-https-dns-proxy
[18.06] https-dns-proxy: bugfix: memory leak
2020-04-11 10:48:29 +03:00
Stan Grishin
a0a779faf6 https-dns-proxy: bugfix: memory leak
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-11 00:25:39 +00:00
Jo-Philipp Wich
e8cf2e60ae nlbwmon: update to latest Git HEAD
e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d81d777a0f)
2020-04-11 00:33:10 +02:00
DENG Qingfang
8696b34992 nlbwmon: bump to latest git
e921ca0a Add further commonly used protocols to the protocol file.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5e140462e4)
2020-04-11 00:33:10 +02:00
Richard Yu
c66a3cf7ce nlbwmon: add procd reload trigger for nlbwmon config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit d551758310)
2020-04-11 00:33:09 +02:00
Kevin Darbyshire-Bryant
28d6dc944e nlbwmon: receive dhcp interface triggers
Not all interfaces may have been allocated address at nlbwmon startup so
it may not collect statistics as expected/configured.

Add interface triggers to catch dhcp events and restart as required.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 662d3f16d2)
2020-04-11 00:33:09 +02:00
Marc Benoit
6a642a6073 net/nlbwmon: run with lower priority
Even on a powerful platform a nlbwmon process'
activities are sometimes affecting throoughput and
latency. This is a backgroud process, that should not
be running with default priority.
Even if it is a little deplayed, that is not a worry in
this case. The routing should be the main priority,
bandwidth stats collection can wait a bit.

Tested on Netgear R7800
Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit 9b3ecbd64a)
2020-04-11 00:33:09 +02:00
Rosen Penev
21f7d16a19
Merge pull request #11803 from stangri/18.06-simple-adblock
[18.06] simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
2020-04-07 18:39:35 -07:00
Stan Grishin
6787a9bfd2 simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-07 21:55:51 +00:00
Hannu Nyman
876a7418fe nano: update to 4.9.2
Update nano editor to version 4.9.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f11833d46c)
2020-04-07 18:07:20 +03:00
Josef Schlehofer
133f71a2cd
Merge pull request #11773 from BKPepe/msmtp
[18.06] msmtp: update to version 1.8.7
2020-04-06 09:45:41 +02:00
Josef Schlehofer
b0484b0051
msmtp: update to version 1.8.7
- It brings oauthbearer support
- It switches from OpenSSL to GnuTLS, which is fully compatible and
  brings more parameters

Makefile changes:
- Fix SPDX License Identifier
- Add PKG_CPE_ID
- The Project does not use sourceforce anymore.
- Uses GnuTLS instead of OpenSSL, which was discouraged

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-06 00:57:02 +02:00
Hannu Nyman
2c4a58a38b nano: update to 4.9.1
Update nano editor to version 4.9.1

 2020.03.31 - GNU nano 4.9.1 "Sapperdeflap"
 Two bugs introduced in version 4.9 are fixed: the cursor
 getting misplaced when undoing line cuts, and filtering
 of the whole buffer to a new buffer not working.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f5c47a2606)
2020-04-05 19:24:07 +03:00
Hannu Nyman
6effd4b7aa
Merge pull request #11756 from gladiac1337/haproxy-1.8.25-openwrt-18.06
[openwrt-18.06] haproxy: Update HAProxy to v1.8.25
2020-04-03 16:47:09 +03:00
Christian Lachner
0db9f894de haproxy: Update HAProxy to v1.8.25
- Update haproxy download URL and hash
- This fixes CVE-2020-11100 (http://git.haproxy.org/?p=haproxy-1.8.git;a=commit;h=525fbbe388ba033d638ff2a4efb83ae6526db5ab)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-04-03 09:24:53 +02:00
Hannu Nyman
5610642876
Merge pull request #11700 from stangri/18.06-simple-adblock
[18.06] simple-adblock: support multiple dnsmasq instances + internal refactoring
2020-03-29 10:01:04 +03:00
Stan Grishin
2c1a3aaf5a simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-29 05:13:29 +00:00
Hannu Nyman
e4c60e87d5 nano: update to 4.9
Update nano editor to version 4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 09fd4445b3)
2020-03-26 21:39:49 +02:00
Rosen Penev
24f10e379e
Merge pull request #11626 from nxhack/18_06_icu_fix_CVE-2020-10531
[openwrt-18.06] icu: fix CVE-2020-10531
2020-03-21 18:08:46 -07:00
Hannu Nyman
9bdb25f51f
Merge pull request #11616 from stangri/18.06-https-dns-proxy
[18.06] https-dns-proxy: support for dnsmasq noresolv option
2020-03-21 09:47:15 +02:00
Hirokazu MORIKAWA
c4ddc21bf6 icu: fix CVE-2020-10531
FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-03-21 09:18:49 +09:00
Stan Grishin
6b290744db https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:49 +00:00
Yousong Zhou
f5ae75cf0b openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:32:11 +08:00
Michael Heimpold
c05ea69d6d php7: update to 7.2.28
This fixes:
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 95c72d8aba)
2020-02-25 22:39:03 +01:00
Michael Heimpold
31e16f276f php7: update to 7.2.27
This fixes:
  - CVE-2020-7059
  - CVE-2020-7060

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3cf0c61f2e)
2020-02-25 22:13:58 +01:00
Yousong Zhou
f3df27f6f6 xl2tpd: fix building failure caused by pfc
Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b)
2020-02-25 11:57:26 +08:00
Yousong Zhou
a0f2911918 xl2tpd: bump to version 1.3.15
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4)
2020-02-25 11:57:26 +08:00
Rosen Penev
c95e3b71f3
icu: bump proper variable.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-18 18:50:21 -08:00
Rosen Penev
ad7f02d0f1 icu: backport upstream ARC patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-15 23:01:20 -08:00
Hannu Nyman
d1c6d1d958 nano: update to 4.8
Update nano editor to version 4.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 7bc96280d3)
2020-02-08 11:26:38 +02:00
Rosen Penev
b2a29b7a49
Merge pull request #11252 from neheb/i22p
i2pd: fix various issues in 18.06
2020-02-06 19:08:00 -08:00
Rosen Penev
ddfa4cddca
i2pd: move chmod command
Similar change to upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-04 18:50:35 -08:00
David Yang
87a7ec7257
i2pd: Move DATADIR to /var/lib/i2pd, fix #5693
Original author: dartraiden <wowemuh@gmail.com>

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-02-04 18:44:34 -08:00
Hannu Nyman
8235cc43a3
Merge pull request #11227 from micmac1/sqlite3-18.06-2
[18.06] sqlite3: bump to 3.31.1
2020-02-03 22:41:35 +02:00
Sebastian Kemper
e6884e5544 sqlite3: bump to 3.31.1
Upstreamed patch removed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-03 20:19:21 +01:00
Rosen Penev
a744482ef5
Merge pull request #11186 from micmac1/18.06-maria-10.1.44
[18.06] mariadb: security bump to 10.1.44
2020-01-30 16:30:19 -08:00
Sebastian Kemper
27d8c1bcc9 mariadb: security bump to 10.1.44
Addresses CVE-2020-2574. Patches refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-30 22:21:52 +01:00
Kwonjin Jeong
925068d4f8
ddns-scripts: Change protocols of afraid.org urls to HTTPS.
- Use HTTPS protocol for updating urls for afraid.org to protect the password.
- Bump/align package version number.

Signed-off-by: Kwonjin Jeong <gram25gwh@gmail.com>
(cherry-picked from e25b558999)
2020-01-27 21:44:34 -08:00
Hirokazu MORIKAWA
d905324e49 node-hid: fix i386 build fail
more stability for parallel build

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 1aa55f86b5)
2020-01-26 20:44:02 -08:00
Hirokazu MORIKAWA
4ac86244ab node-serialport: fix i386 build fail
more stability for parallel build

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 1ce1ca6e06)
2020-01-26 20:38:07 -08:00
Hannu Nyman
1091c431de
Merge pull request #11124 from stangri/18.06-https-dns-proxy
[18.06] https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
2020-01-26 22:39:51 +02:00
Jiri Slachta
7c667ed4ed
Merge pull request #11127 from micmac1/18.06-tiff
[18.06] tiff: update to 4.1.0
2020-01-26 18:27:28 +01:00
Jiri Slachta
33e31a4b3a tiff: update version to 4.1.0
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2020-01-26 09:20:30 +01:00
Jan Pavlinec
709dc04d2a tiff: patch security issues
Fixes
CVE-2019-7663
CVE-2019-6128

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-01-26 09:19:11 +01:00