Commit graph

16466 commits

Author SHA1 Message Date
Rosen Penev
6a0eeda77f getdns: fix compilation without deprecated OpenSSL APIs
Since DSA is enabled, dsa.h is needed. Normally this header is included
implicitly with engine.h but with OPENSSL_API_COMPAT >= 0x10100000L ,
this is not so.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-09 06:49:30 +01:00
Rosen Penev
805c1344e5 getdns: properly remove libbsd support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-09 06:49:30 +01:00
Rosen Penev
5c4ead1f12
Merge pull request #12756 from jefferyto/python3-maxminddb-fix-build-openwrt-19.07
[openwrt-19.07] python3-maxminddb: Fix build when using newer setuptools
2020-07-08 11:04:23 -07:00
Rosen Penev
dfeb14462d
Merge pull request #12755 from jefferyto/python-host-platform-openwrt-19.07
[openwrt-19.07] python3: Use default _PYTHON_HOST_PLATFORM
2020-07-08 11:03:38 -07:00
Peter Wagner
cc0eb59f42 ntpd: update to version 4.2.8p15 (security fix)
Fixes:
CVE-2020-11868
CVE-2018-8956
CVE-2020-13817
CVE-2020-1502

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2020-07-08 19:11:22 +02:00
Jeffery To
fe32da0841
python3-maxminddb: Fix build when using newer setuptools
This package fails to build with newer setuptools, because setuptools
removed the (deprecated) Features feature in v46.0.0[1].

This adapts a commit[2] to remove the use of this feature. (Changes to
code formatting prevent the original commit/patch to be used.)

[1]: aff64ae89e/CHANGES.rst (v4600)
[2]: 3aac426e35

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-08 17:30:57 +08:00
Jeffery To
4b0c1f8714
python3: Use default _PYTHON_HOST_PLATFORM
This lets the Python build process set _PYTHON_HOST_PLATFORM instead of
forcing an explicit value.

Also:

* Save the target _PYTHON_HOST_PLATFORM value during Build/InstallDev
  for use when building target Python packages (in python3-package.mk).

* Use the (mostly) default PYTHON_FOR_BUILD value, instead patch
  configure to remove the platform triplet from the sysconfigdata file
  name.

* Remove the "CROSS_COMPILE=yes" make variable (there is no indication
  that this variable is necessary).

* Force host pip to build packages from source instead of downloading
  binary wheels.

  Previously, host pip can download universal (platform-independent)
  wheels but not platform-specific wheels, because of the custom
  _PYTHON_HOST_PLATFORM value. (Packages that do not have universal
  wheels would be compiled from source.)

  With a correct _PYTHON_HOST_PLATFORM, host pip can install
  platform-specific wheels as well. However, the pre-built shared object
  (.so) files in these wheels will have the host's platform triplet in
  their file names. When target Python packages are built (using the
  target's _PYTHON_HOST_PLATFORM), Python will not use these shared
  object files.

  By forcing host pip to build packages from source, the built shared
  object files will not have the platform triplet in their file names.
  (Host Python has been patched to remove the platform triplet from file
  names.) This allows these packages to be used when building target
  Python packages.

  (The net effect of this complete change is that platform-dependent
  packages will continue to be compiled from source, while
  platform-independent packages will now also be compiled from source.)

Fixes https://github.com/openwrt/packages/issues/12680.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-08 17:12:33 +08:00
Rosen Penev
e1846e05e3
Merge pull request #12722 from jonathanunderwood/openwrt-19.07-getdns-1.6.0
[19.07] getdns: update to version 1.6.0
2020-07-06 15:37:16 -07:00
Jonathan G. Underwood
7434c91c50 stubby: add build dependency on check package
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-07-05 20:40:35 +01:00
Rosen Penev
97aa95766a
Merge pull request #12723 from jonathanunderwood/openwrt-19.07-stubby-0.3.0
[19.07] stubby: update to version 0.3.0
2020-07-05 09:34:56 -07:00
Jonathan G. Underwood
140e2ea19e stubby: update to version 0.3.0
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-07-05 12:34:31 +01:00
Jonathan G. Underwood
048a39258d getdns: update to version 1.6.0
This update also:
    - enables parallel builds
    - moves to the CMake build system
    - removes the redundant InstallDev stanza

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-07-05 12:30:53 +01:00
Rosen Penev
1c29c1d86d
Merge pull request #12698 from Andy2244/samba-4_11_11-(19.07)
[19.07] samba4: update to 4.11.11
2020-07-03 07:04:17 -07:00
Andy Walsh
0c03b71b88 samba4: update to 4.11.11
* update to 4.11.11
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)
* fix python3 host paths, ensure we use build hostpkg tools
* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-07-03 02:12:16 +02:00
Dirk Brenken
a375ee0cc2
Merge pull request #12694 from BKPepe/mc-19.07
[19.07] mc: fix mouse handling
2020-07-02 14:00:17 +02:00
Josef Schlehofer
28b5a2b046
mc: fix mouse handling
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-02 10:52:26 +02:00
Josef Schlehofer
9b3ce06b98
travis: improve build config
Build config validation showed up 1 warning, 1 info
- deprecated sudo
- missing os

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 651b9f9bf1)
2020-07-01 23:04:12 +02:00
Josef Schlehofer
2461e79787
travis: Use Ubuntu 20.04 LTS - Focal Fossa
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 995822b5f7)
2020-07-01 23:04:01 +02:00
Josef Schlehofer
d7bec1b0f0
travis: Use Ubuntu (Bionic Beaver) 18.04 LTS
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f2c7a00ef4)
2020-07-01 23:03:55 +02:00
Josef Schlehofer
a80754337d
travis: use mpc85xx-p2020 sdk instead of ar71xx
Target ar71xx is deprecated and removed in the master branch and makes SDK
not available anymore. Travis fails because of that.
It was superseded by target ath79. These devices have 4 MB flash and/or 32 MB RAM.

However, ath79 is being used by CircleCI if you have it configured for
your repository and if you are contributing to this repository. It
is not good to have two CI for the same target. Let's use powerpc.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4526fb3eae)
2020-07-01 23:03:43 +02:00
Josef Schlehofer
2a9998771c
travis: Download SDK from OpenWrt instead of LEDE
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 25fc446ffb)
2020-07-01 23:03:28 +02:00
Rosen Penev
3eb3221210
Merge pull request #12657 from jefferyto/python-3.7.8-openwrt-19.07
[openwrt-19.07] python3: Update to 3.7.8, refresh/rework patches
2020-06-30 14:35:12 -07:00
Jeffery To
d78bdbd8ad
python3: Update to 3.7.8, refresh/rework patches
This contains a fix for CVE-2020-8492 (Denial of service in
urllib.request.AbstractBasicAuthHandler)[1].

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: https://docs.python.org/release/3.7.8/whatsnew/changelog.html#python-3-7-8-release-candidate-1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-06-30 21:20:18 +08:00
Karel Kočí
c7495a2008
syslog-ng: detect disabled IPv6 on loopback and fallback to IPv4
Binding in default to IPv6 is preferable but it can be disabled in
kernel and that prevents syslog-ng to start. This setup should not be
that common but syslog is very important service and should survive
that.

This introduces new plugin defining source generator
`network_localhost`. This is used instead of original network source.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry picked from commit 43a8f7072e)
2020-06-30 14:46:23 +02:00
Rosen Penev
587e387af7
Merge pull request #12628 from jonathanunderwood/openwrt-19.07-stubby-fix-tls-port
[19.07] stubby: fix handling of tls_port config option
2020-06-28 19:54:51 -07:00
Rosen Penev
cd080dded6
miniupnpd: added libcap dependency
As miniupnpd is running as root, libcap can be used to limit its
capabilities.

libcap is very small, so this isn't a problem.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ba49c96808)
(switched to use libcap as -ng is not available)
2020-06-28 14:01:25 -07:00
Rosen Penev
b418029e41
miniupnpd: update to 2.1.20200510
Use the newly introduced configure script.

Use PKG_INSTALL for consistency between packages.

Use PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2b5028458e)
2020-06-28 14:00:39 -07:00
David Ehrmann
231e47185e
miniupnpd: suppress grep and uci errors
If miniupnpd is installed but disabled or not running, the hotplug
script will query uci for keys that don't exist and grep a temporary
config file that doesn't exist, resulting in the following errors:

uci: Entry not found
grep: /var/etc/miniupnd.conf: No such file or directory

These would arise when an interface is brought up or down, and are
more confusing than helpful, especially when miniupnpd is disabled.

Suppress these errors.

Signed-off-by: David Ehrmann <ehrmann@gmail.com>
(cherry picked from commit 6ef2b5400b)
2020-06-28 14:00:39 -07:00
Kevin Darbyshire-Bryant
5cb388497e
miniupnpd: improve hotplug & interface handling
The existing interface selection/detection code was incomprehensible at
worst and convoluted at best.  The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice.  Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.

Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.

For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 295d77943c)
2020-06-28 14:00:24 -07:00
Jonathan G. Underwood
f49c2c71ca stubby: fix handling of tls_port config option
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-06-27 17:00:34 +01:00
Toke Høiland-Jørgensen
0ea1e213e7
Merge pull request #12616 from andersk/acme-19.07
Backport acme fixes from #11968 to 19.07
2020-06-26 11:21:12 +02:00
David Yang
f51ec94f86 acme: Bump release version
Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
David Yang
f7e03d1271 acme: Handle ecc cert correctly
Error was:
  The domain 'example.com' seems to have a ECC cert already, please add '--ecc' parameter if you want to use that cert.

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
David Yang
0e5b273241 acme: Handle log message correctly
Error was:
  logger: unrecognized option: renew

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
Rosen Penev
17e12ad796
Merge pull request #12614 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: re-add conffiles and add description to Makefile
2020-06-25 22:18:04 -07:00
Stan Grishin
4344723f8c https-dns-proxy: re-add conffiles and add description to Makefile
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-26 03:09:39 +00:00
Rosen Penev
1d369c9e6a
Merge pull request #12597 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: bugfix: remove eDNS support
2020-06-25 14:22:18 -07:00
Stan Grishin
2c4644bf9b https-dns-proxy: bugfix: remove eDNS support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-25 19:40:52 +00:00
Rosen Penev
02f5b9ced0
Merge pull request #12588 from rs/nextdns-1.7.0-openwrt-19.07
[19.07] nextdns: Update to version 1.7.0
2020-06-24 22:05:00 -07:00
Olivier Poitrey
8044a7014d nextdns: Update to version 1.7.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-06-25 00:22:43 +00:00
Hannu Nyman
e1b8d033e0 irqbalance: fix socket directory and create it
Irqbalance defines /run/irqbalance dir for its socket
communication between irqbalance and its UI. /run does not exist
in OpenWrt (although it is defined by the Linux FHS), so the
socket creation fails. Although we do not compile UI and thus
the issue is not critical to us, fix the directory location.

Additionally, the creation is originally handled by a systemd
init script that we do not use.

* patch source to define dir as /var/run/irqbalance
* create the dir in the procd init script.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry-picked from 4f0c847828)
2020-06-24 18:33:39 +03:00
Huangbin Zhan
4a129a996c treewide: add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry-picked irqbalance section from from 0ec746ccb6)
2020-06-24 18:32:19 +03:00
Ian Cooper
ca6751a7d0 irqbalance: fix compilation for USE_GLIBC and BUILD_NLS cases
The package Makefile was not taking into consideration that the build
may be using BUILD_NLS with libintl-full and libiconv-full and was
trying to link the wrong versions of these libraries in this case.

The necessary flags are added by nls.mk to TARGET_LDFLAGS and can be
passed to irqbalance's configure script for setting the GLIB2_LIBS
variable instead of the explicit static link to the libiconv stub.

The PKG_BUILD_DEPENDS line should be modified so as to add to and not
override the definition set by nls.mk, which will ensure the right
version of libiconv and libintl is built beforehand.

A DEPENDS:= line should be added to the package definition using the
variables defined in nls.mk, which will add the appropriate version
of libintl and libiconv (vanilla or -full versions)

If USE_GLIBC is true, then libpthread needs to be explicitly passed
to the configure script in the GLIB2_LIBS variable for linking.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>

(cherry-picked from 88c25e87a1)
2020-06-24 18:32:14 +03:00
Hannu Nyman
9bdd0f113d haveged: update to 1.9.12
Update haveged to version 1.9.12

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6392d50c31)
2020-06-21 23:24:50 +03:00
Daniel Engberg
7222143b4d
Merge pull request #12563 from Andy2244/ksmbd-3.2.0_ksmbd-tools-3.2.6-(19-07)
[19.07] Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"
2020-06-20 21:11:26 +02:00
Andy Walsh
45e78b34a7 Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

This reverts commit d88405ba84.
2020-06-20 19:26:12 +02:00
Christian Lachner
1b1c2c598e haproxy: Update HAProxy to v2.0.15
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-06-20 09:04:47 +03:00
Josef Zila
fd3648a7b4
transmission: add access to web interface files to procd jail
Signed-off-by: Josef Zila <josefzila@gmail.com>
(cherry picked from commit 9a82c952b4)
2020-06-18 14:53:16 -07:00
Rosen Penev
054b87df40
transmission: add a disabled notification
Helps to see that transmission must be enabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89fc95c4fc)
2020-06-18 14:52:37 -07:00
Rosen Penev
8cb9367313
transmission: update to 3.0
remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 93485dd317)
2020-06-18 14:51:49 -07:00