Commit graph

17145 commits

Author SHA1 Message Date
Steffen Moeller
0072fc5336 boinc: Transfer v7.16.16 from 21.02 to 19.07
Intentionally unchanged from 43d21e650d,
i.e. the pull request #14862 from neheb/boi

Signed-off-by: Steffen Moeller <moeller@debian.org>
2021-04-10 20:36:10 +02:00
Dirk Brenken
ba1a801f74
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:38:16 +02:00
Dirk Brenken
1cf2e3530d
Merge pull request #15254 from dibdot/19.07
[19.07] travelmate: minimal change to fix cp detection
2021-04-09 18:34:08 +02:00
Dirk Brenken
74c8fb403f
travelmate: minimal change to fix cp detection
* fix cp detection proposed by @ChristianKuehnel
* add/adapt mikrotik login script provided by @Christian Kuehnel

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:21:17 +02:00
Karel Kočí
56e1674efc
rpcd-mod-lxc: add postinst to reload rpcd on update/installation
This is dependency of luci-app-lxc and when users install that package
it is no way clear that they have to reload rpcd to get it working
correctly. Without it container listing does not work.
In general this reload should be in this package simply because other
rpcd-mod-* packages reload rpcd as well.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 54b6116d7d)
2021-04-09 10:46:16 +02:00
Rosen Penev
560a0ea2bf ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:43 -07:00
Kirill Nikolaev
0863ab3237 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:43 -07:00
Rosen Penev
9355f9503d ksmbd: update to 3.3.7
Major change are:

Fix an issue that directories appear as files when using windows
backup.
Fix xfstests generic/241 failure on life test.
Update ksmbd shutdown and debug print on/off using ksmbd.control in
cifsd.rst.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 851b9b252f)
2021-04-06 21:56:43 -07:00
Rosen Penev
2c328f3d8a ksmbd: update to 3.3.6
Major changes are:

Fix kernel oops from fuse+ntfs driver.
Fix the issue of change the directory to the file using Nautilus
client.
Fix ksmbd build break with the latest linux-5.12-rc1.
Fix potential memleak and use after free.
Fix use after free from KASAN(racy issue)

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8e3a4adea3)
2021-04-06 21:56:43 -07:00
Martin Blumenstingl
08d1a66e3d ksmbd: update to 3.3.5
Major changes for version 3.3.5 are:
- Add support for version 4 dos attribute structure of samba.
- Implement maximal allowed desired access.
- Fix several error handling.
- Fix a few smbtorture failures.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 71aef26ecb)
2021-04-06 21:56:43 -07:00
Rosen Penev
52d3ce0f6d ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1a8f3659)
2021-04-06 21:54:34 -07:00
Rosen Penev
f275b3f418 ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d95edf16ef)
2021-04-06 21:54:34 -07:00
Martin Blumenstingl
ba329c4ea5 ksmbd-tools: update to 3.3.5
Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 58f91090f5)
2021-04-06 21:54:33 -07:00
Sven Roederer
055b1cd581 nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:55 -07:00
Josef Schlehofer
e88b4d873b
netdata: update to version 1.29.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbfdc)
(cherry picked from commit 4322399166)
2021-04-06 22:52:50 +02:00
Josef Schlehofer
f6bc822ff3
syslog-ng: update to version 3.31.2
Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e968e)
2021-04-06 22:52:14 +02:00
Dirk Brenken
fdd4afe6ac
adblock: fix init status command
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-01 20:55:45 +02:00
Rosen Penev
65b578bfa2
Merge pull request #15295 from lucize/librefix
[19.07] libreswan: update cu 3.32
2021-03-28 14:48:00 -07:00
Lucian Cristian
5a8a7aeab1 libreswan: update cu 3.32
CVE and NSS fix

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-03-28 23:10:05 +03:00
Nikos Mavrogiannopoulos
7436ea3fb1
Merge pull request #15252 from ja-pa/gnutls-security-fix-19.07
[OpenWrt 19.07] gnutls: patch security issue
2021-03-26 21:55:20 +01:00
Rosen Penev
7e815fe4e2
Merge pull request #15255 from ja-pa/mariadb-10.2.37-openwrt-19.07
[OpenWrt 19.07] mariadb: update to version 10.2.37
2021-03-26 13:24:25 -07:00
Rosen Penev
05474882bc
Merge pull request #15256 from cartender/pr_libftdi1_19
[19.07] libftdi1: Improve build binary reproducibility
2021-03-26 13:23:13 -07:00
Giovanni Giacobbi
7af60cc3e2
libftdi1: Improve build binary reproducibility
The library embeds the result of "git describe" inside the source code, making the binary result dependent of the particular commit being used in the build root when building inside a git working copy.

As this is unnecessary information, remove this option and fallback to the default "unknown", which is also the value compiled by tools that do not clone but export the openwrt base tree.

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-03-26 10:48:39 +00:00
Josef Schlehofer
58ded3ff4c
Merge pull request #15214 from BKPepe/aiohttp-19.07
python-aiohttp: backport fix for CVE-2021-21330
2021-03-26 00:48:13 +01:00
Stan Grishin
aa3e95ac69 https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:10 -07:00
Jan Pavlinec
abb3c7ede0
mariadb: update to version 10.2.37
Fixes CVE-2021-27928

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 14:30:51 +01:00
Jan Pavlinec
cb6509e882
gnutls: patch security issue
Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 10:34:58 +01:00
Rosen Penev
e2d1af1a29
Merge pull request #15221 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for additional Force DNS ports
2021-03-22 11:56:50 -07:00
Josef Schlehofer
41388ed8a2
php: add fix for updated ICU 68+
Recently, I updated icu for issues with node feed, but it broke
compiling of php7.

Error:
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: error: 'TRUE' undeclared (first use in this function)
  collator_sort_internal( TRUE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: note: each undeclared identifier is reported only once for each function it appears in
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c: In function 'zif_collator_asort':
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:543:26: error: 'FALSE' undeclared (first use in this function); did you mean 'FILE'?
  collator_sort_internal( FALSE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~~
                          FILE
make[3]: *** [Makefile:1031: ext/intl/collator/collator_sort.lo] Error 1

More details:
https://github.com/php/php-src/commit/8eaaabd

Backport of patch from PHP7.3 didn't work for me, but this one was suggested that
Homebrew is using it and it works for me. However, PHP7.2 is EoL.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 13:57:13 +01:00
Stan Grishin
3530635214 https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:14 +00:00
Josef Schlehofer
44b301125f bind: update to version 9.16.13
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-21 20:35:45 -07:00
Josef Schlehofer
612fbeb58f
nnn: update to version 3.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 53f54c45e4)
2021-03-22 02:06:16 +01:00
Josef Schlehofer
1952a1c2ae
python-aiohttp: backport fix for CVE-2021-21330
More details:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 01:41:14 +01:00
Hirokazu MORIKAWA
13ab7af3f0
icu: update to 68.2
Maintainer: me
Compile tested: head r15324-920b692, aarch64, x86_64
Run tested: (qemu-5.2.0) aarch64

Description:
Update to 68.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d6317132dd)
2021-03-22 00:31:59 +01:00
Hirokazu MORIKAWA
2120a3cf51
icu: update to 68.1
It updates to CLDR 38. New features including locale-dependent smart unit preferences (road distance, temperature, etc.) and locale ID canonicalization conformant with CLDR.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4f3a8c1535)
2021-03-22 00:31:51 +01:00
Rosen Penev
10712797f0
icu: fix compilation under CentOS 7
CentOS 7's GCC is quite old and does not put max_align_t under std.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6255a77128)
2021-03-22 00:31:43 +01:00
Hirokazu MORIKAWA
79ddd03288
icu: update to 67.1
Unicode 13 & CLDR 37. Bug fixes for date and number formatting, enhanced support for user preferences in the locale identifier. LocaleMatcher code and data improved. Number skeletons have a new “concise” form that can be used in MessageFormat strings.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit e3be3aadc1)
2021-03-22 00:31:34 +01:00
Rosen Penev
813f8d7db2
Merge pull request #15165 from gladiac1337/haproxy-2.0.21-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.21
2021-03-19 15:51:45 -07:00
Christian Lachner
227597c970 haproxy: Update HAProxy to v2.0.21
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:38:26 +01:00
Tianling Shen
a8a4059284 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa50)
2021-03-18 23:22:48 -10:00
Tianling Shen
01ab015a9a msgpack-c: add new package
This is needed by tmate.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cfc965b107)
2021-03-18 23:22:48 -10:00
Rosen Penev
97beb7d365
minidlna: update to 1.3.0
Fixes two CVEs relating to UPnP.

Removed libuuid dependency. It is not used.

Remove clock_gettime hack. It seems to have been fixed.

Removed upstream patches.

Refreshed the other ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f568979648)
2021-03-18 10:23:08 +01:00
Hannu Nyman
d1eec4ad47
Merge pull request #15149 from ja-pa/tor-0.4.4.8-openwrt-19.07
[openwrt 19.07] tor: update to version 0.4.4.8 (security fix)
2021-03-17 19:55:45 +02:00
Jan Pavlinec
0494d8706b
tor: update to version 0.4.4.8
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-17 10:52:33 +01:00
Florian Eckert
1656b49bfe
Merge pull request #15136 from TDT-AG/pr/2021015-openwrt-19.07-mwan3
mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
2021-03-16 14:14:24 +01:00
Florian Eckert
40d56e46b1 mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
With this change, the interface status is no longer read from the mwan3 ubus.
The status of the interface is read directly from the status directory.
This was already implemented in the master with the
commit c07f5230be.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-15 14:15:42 +01:00
Karl Palsson
b66d262d75 net/mosquitto: bump to 1.6.14
This is a minor security fix for outgoing bridges and the client
library.

Full details: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 10:41:31 +00:00
Paul Spooren
e573dac5f1 CI: backport GitHub action CI
The CI is working fine with OpenWrt snapshots and 21.02, so backport it.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-03-12 09:21:44 -10:00
Olivier Poitrey
81fa8cf893 nextdns: Update to version 1.11.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-03-09 21:24:18 +02:00
Rosen Penev
2170d8ed62
Merge pull request #15054 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: better processing of custom user files
2021-03-08 12:26:46 -08:00