Commit graph

15890 commits

Author SHA1 Message Date
Matt Merhar
72af40f2ba
nut: fix other/otherflag custom variables in nut-server.init
This allows custom config parameters to be added to the generated config
files, enabling the original intended functionality per
https://openwrt.org/docs/guide-user/services/ups/software.nut.

Example usage from /etc/config/nut_server:

config driver 'apc'
	option driver 'snmp-ups'
	option snmp_version 'v3'
	option port '172.16.100.5'
	list other 'secLevel'
	list other 'secName'
	list other 'authPassword'
	list otherflag 'notransferoids'

config other 'other_secLevel'
	option value 'authNoPriv'

config other 'other_secName'
	option value 'some_username'

config other 'other_authPassword'
	option value 'some_password'

config other 'otherflag_notransferoids'
	option value '1'

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry-picked from 0b04dd34a0)
2020-01-19 21:22:35 -08:00
Sebastian Kemper
e1aa905ab9
nut: update OpenSSL 1.1.0 patch
Replaces OpenWrt patch with upstream patch. Also removes
0002-Fix-check-for-empty-string.patch as this is included in upstream
OpenSSL 1.1.0 patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from 7d4f1b8589)
2020-01-19 21:22:32 -08:00
Sebastian Kemper
154da8aa02
nut: fix CGI setup
This commit makes

 - the libgd dependency (as well as specifying libs and includes)
 - the configure argument "--with-cgi"

dependant on whether the package nut-web-cgi is selected.

nut-web-cgi is also added to PKG_CONFIG_DEPENDS.

Resolves: #10641

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from cdd660a41d)
2020-01-19 21:21:51 -08:00
Hannu Nyman
7b07ac9e3d
Merge pull request #11063 from EricLuehrsen/openwrt-19.07-unbound
[openwrt-19.07] unbound: improve dependencies for okpg
2020-01-19 22:49:31 +02:00
Eric Luehrsen
bc4f3c11cb unbound: improve dependencies for okpg
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
cherry pick 6505154a74
2020-01-19 15:35:09 -05:00
Rosen Penev
895200940a
Merge pull request #11061 from cotequeiroz/afalg_1.1.0-19.07
[19.07] afalg_engine: bump to v1.1.0
2020-01-19 12:17:06 -08:00
Eneas U de Queiroz
1410d6b737
afalg_engine: bump to v1.1.0
This version is up to 20% faster than 1.0.1.
Build without cryptouser information, which is not available in 19.07.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-01-19 16:16:25 -03:00
Josef Schlehofer
162974f809
btrfs-progs: update to version 5.4.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c864563372)
2020-01-19 11:55:42 +01:00
Josef Schlehofer
072fcb5ce4
libseccomp: add seccomp-syscalls.h to InstallDev
In the version 2.4.2, there was introduced a new header file.
Ship it to InstallDev

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-19 11:37:57 +01:00
Hannu Nyman
3ab34b50db
Merge pull request #11051 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.5
2020-01-19 00:08:39 +02:00
W. van den Akker
5022caf869
Shorewall6-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:47 +01:00
W. van den Akker
0b890cf4b5
Shorewall6: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:28 +01:00
W. van den Akker
1201cdcd5f
Shorewall: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:07 +01:00
W. van den Akker
4cb0ff8314
Shorewall-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:35 +01:00
W. van den Akker
c2a5aa1a54
Shorewall-core: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:13 +01:00
Eneas U de Queiroz
8ba3c7b19d
afalg_engine: fix ENGINES location, zero-copy
Use a fixed ENGINES_DIR location, instead of trying to read it from the
openssl Makefile.

It also fixes the zero-copy config option not being passed down to the
cmake options.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 6a5f7920e9)
2020-01-17 15:37:26 -08:00
Eneas U de Queiroz
776216a652 afalg_engine: add new package
This is an alternate AF_ALG engine for openssl, based on the devcrypto
engine, but using the AF_ALG interface instead of /dev/crypto.

It is different than the AF_ALG engine that ships with OpenSSL:
  - it uses sync calls, instead of async
  - it suports more algorithms

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e0bd6da4b)
2020-01-17 09:40:32 -03:00
Stijn Tintel
995226d95d strongswan: bump to 5.8.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:37 +02:00
Paul Fertser
243673b2d0 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:32 +02:00
Stijn Tintel
3880d65a07 strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:28 +02:00
Jan Pavlinec
ba43556aed
libarchive: update to version 3.4.1 (security fix)
Fixes CVE-2019-19221

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from df634dcc92)
2020-01-16 14:35:18 -08:00
Eneas U de Queiroz
ff87e8dbfa
oniguruma: bump to version 6.9.4
This version adds a new RegSet API, and fixes the following:
 - CVE-2019-19012
 - CVE-2019-19203
 - CVE-2019-19204
 - CVE-2019-19246
 - some problems (found by libFuzzer test)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 94895ec818)
2020-01-16 14:34:14 -08:00
Stan Grishin
3030d0fc1a vpn-policy-routing: bugfix: remove conflict with vpnbypass
Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 05603822d3)
2020-01-16 20:00:31 +02:00
Rosen Penev
d0bdd32524
Merge pull request #11021 from jefferyto/golang-updates-openwrt-19.07
[openwrt-19.07] golang: Updates
2020-01-14 12:11:06 -08:00
Jeffery To
2dbc88762c golang: Update to 1.13.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 01:26:40 +08:00
Jeffery To
fdd202bd1e golang: Fix selection of GOARM value
This fixes how GOARM is selected for arm platforms, based on support for
VFP/VFPv3 rather than CPU version.

Fixes #10967.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 00:58:28 +08:00
Josef Schlehofer
6a64b7affe libseccomp: update to version 2.4.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-13 22:58:48 +01:00
Eric Luehrsen
8f3dcbcee6 unbound: fix TLS forwards with optional suffix
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit b101dd76fb)
2020-01-11 23:03:47 +02:00
Jan Pavlinec
ffdbf4e7c3
measurement-kit: update to version 0.10.8
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 744e2dd19d)
2020-01-11 09:20:17 +01:00
Jan Pavlinec
8f037084bc
measurement-kit: update package
Changes:
-add InstallDev section
-remove uclibc patch (issue fixed in upstream)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit df853b2d20)
2020-01-11 09:20:08 +01:00
Jan Pavlinec
8f2eb8f2da
measurement-kit: update to version 0.10.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 2949906ec4)
2020-01-11 09:20:02 +01:00
Rosen Penev
3dfabe79f3
smbd: Update to 3.0.2
Fixes a nasty stack corruption issue and a big endian fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 232a271f40)
2020-01-10 19:05:10 -08:00
Rosen Penev
670f336d79
transmission: Sync with master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-10 18:07:42 -08:00
Alexandru Ardelean
e847333d15 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

(cherry picked from commit ed0e77f3c3)
Reference to discussion at
c61579b564 (commitcomment-36665837)
Adjusted python PKG_RELEASE items to current situation
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-01-10 18:57:16 +02:00
Yousong Zhou
1f293771cd openvswitch: bump PKG_RELEASE
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 13:03:25 +08:00
Yousong Zhou
dc097661c5 openvswitch: backport patch to fix compilation
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:59:37 +08:00
Yousong Zhou
74e160df22 openvswitch: fix building failure caused by dst_ops api change
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:56:32 +08:00
Yousong Zhou
a4a54d0f3b openvswitch: bump to version 2.11.1
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:57:17 +08:00
Rosen Penev
d974cd3673
Merge pull request #10920 from Rixerx/openwrt-19.07
[19.07] zabbix: update to 4.0.16
2020-01-05 17:15:37 -08:00
Rosen Penev
26c23f3b9e
Merge pull request #10881 from mstorchak/stubby-19.07
[19.07] stubby: switch to ca-bundle
2020-01-05 15:38:13 -08:00
Sebastian Kemper
9adadfd8ec
sqlite3: bump to version 3.30.1
Fixes CVE-2019-16168

In other news:

- adds ABI_VERSION
- prefers INSTALL_DATA over CP
- removes gratuitous trailing slashes

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from commit 33fecfefec)
2020-01-04 23:21:19 +01:00
Sebastian Kemper
3bfc11ea22
sqlite3: bump to 3.29.0
Fixes CVE-2019-5018
Also drops upstreamed patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2f7fbde7d6)
2020-01-04 23:19:54 +01:00
DENG Qingfang
e2bca1026b
nginx: update to 1.16.1
Fixes:
when using HTTP/2 a client might cause excessive memory
consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5ffc744018)
2020-01-04 23:13:48 +01:00
Jan Pavlinec
74e9ca74fd
tor: add respawn to init script
Note:
In some cases when tor daemon starts before
than the router is connected to the Internet.
Tor will exit and you have to run it manually.
This should fix this case.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5bce9c3e1d)
2020-01-04 20:53:01 +01:00
Jan Pavlinec
b85cbaf7e5
tor: update to version 0.4.2.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a339e0ede3)
2020-01-04 20:52:49 +01:00
Josef Schlehofer
2da2cf43b8
youtube-dl: update to version 2020.1.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-04 20:50:31 +01:00
Rosen Penev
9ec8652533
Merge pull request #10940 from Andy2244/samba-4.11.4-(19.07)
[19.07] samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
2020-01-03 16:32:02 -08:00
Rosen Penev
7472cc7427
Merge pull request #10938 from Andy2244/smbd-rename-3.0.1-(19.07)
[19.07] smbd: rename from cifsd, update to 3.0.1
2020-01-03 16:15:54 -08:00
Rosen Penev
396c5fc9bf
Merge pull request #10939 from Andy2244/wsdd2-init-update-(19.07)
[19.07] wsdd2: update to git (2019-12-15), bind to 'lan' only, update init for smbd
2020-01-03 16:09:13 -08:00
Rosen Penev
bff3204973
Merge pull request #10937 from Andy2244/libtirpc-1.2.5-(19.07)
[19.07] libtirpc: update to 1.2.5
2020-01-03 16:08:32 -08:00