Commit graph

16052 commits

Author SHA1 Message Date
Rosen Penev
811fd060a5
Merge pull request #9850 from neheb/crc
crconf: Pass CFLAGS properly
2019-09-02 01:58:05 -07:00
Rosen Penev
227d6b8fcf
Merge pull request #9890 from ecsv/ap51-flash-2019.0
ap51-flash: upgrade package to latest release 2019.0
2019-09-01 20:54:15 -07:00
Rosen Penev
642ac0b1eb
Merge pull request #9899 from RussellSenior/master
patch: rename CVE-2019-13638 patch to mollify uscan
2019-09-01 17:01:28 -07:00
Russell Senior
604102a865 patch: rename CVE-2019-13638 patch to mollify uscan
Signed-off-by: Russell Senior <russell@personaltelco.net>
2019-09-01 15:56:23 -07:00
Hannu Nyman
c933ac5dcb haveged: update to 1.9.6
Update haveged to 1.9.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-09-01 23:56:57 +03:00
Rosen Penev
ac91293e73
Merge pull request #9886 from BKPepe/pyyaml
python-yaml: Update to version 5.1.2
2019-09-01 12:52:23 -07:00
Rosen Penev
1879d9c1ee
Merge pull request #9694 from neheb/clas
classpath: Add jamvm/host build dependency
2019-09-01 12:33:40 -07:00
Rosen Penev
1862f908eb
classpath: Add jamvm/host build dependency
This is needed for compilation. A Java compiler is also needed but that
must be handled elsewhere.

Fixed up license information.

URLs to HTTPS.

Other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-01 12:32:42 -07:00
Rosen Penev
f9e5b9f143
Merge pull request #9881 from aparcar/ipsec-tools
remove ipsec-tools and opennhrp
2019-09-01 11:34:33 -07:00
Sven Eckelmann
22062b10c6 ap51-flash: upgrade package to latest release 2019.0
* improved Zyxel firmware detection
* introduced optional MAC address filtering
* added support for:

  - Plasma Cloud PA300
  - Plasma Cloud PA1200
  - Plasma Cloud PA2200

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-01 16:34:23 +02:00
Josef Schlehofer
3cfbdbf25b
python-yaml: Update to version 5.1.2
PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 09:56:04 +02:00
Dirk Brenken
f564008b9d
Merge pull request #9877 from EricLuehrsen/unbound_193
unbound: update to 1.9.3
2019-09-01 07:47:32 +02:00
DENG Qingfang
4c9d0c7b56 exfat-nofuse: drop BUILD_PATENTED
Microsoft has published technical specification for exFAT [1]
and the driver has been added to Linux staging tree [2].

It's now safe to drop BUILD_PATENTED label.

[1] https://docs.microsoft.com/windows/win32/fileio/exfat-specification
[2] http://lkml.iu.edu/hypermail/linux/kernel/1908.3/04254.html

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-09-01 10:01:39 +08:00
Paul Spooren
96be603258 ipsec-tools: remove
As discussed on GitHub[0] the package should be removed.

[0]: https://github.com/openwrt/packages/issues/7832

> The package is effectively orphaned upstream and has been for some
  time. Given the security-sensitive nature of the package, an active
  maintainer community is essential for safe usage. Racoon's lack of
  support for IKEv2, despite it being stable for a long time, and the
  availability of next-generation tunneling systems such as wireguard,
  also would seem to limit its future value. Setkey's functionality
  has been subsumed by 'ip xfrm'.

> If you disagree that ipsec-tools should be removed from OpenWRT,
  please say so now. If there are still use cases for it that are
  not met by other IKE implmenentations that would be good to
  know. But more importantly, I think you'll need to convince us
  that ipsec-tools is actually safe to operate on today's Internet
  given its current state of development.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2019-08-31 10:26:21 -10:00
Paul Spooren
4dcb01af8d opennhrp: remove
The package requires ipsec-tools which will be removed from packages.git

Signed-off-by: Paul Spooren <mail@aparcar.org>
2019-08-31 10:26:21 -10:00
Rosen Penev
e12862ed2e
Merge pull request #9878 from zhaojh329/libuhttpd
libuhttpd: Update to 3.0.1
2019-08-31 12:32:15 -07:00
Noah Meyerhans
a8fd5cb7ab net: remove ipsec-tools
As discussed in #7832, ipsec-tools is no longer suitable for inclusion in the
distribution.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2019-08-31 08:06:33 -07:00
Jianhui Zhao
02ec32f34d libuhttpd: Update to 3.0.1
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
2019-08-31 22:47:15 +08:00
Eric Luehrsen
c36d8a49fd unbound: update to 1.9.3
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-08-31 01:12:16 -04:00
Rosen Penev
d3b32a62c2
Merge pull request #9595 from dengqf6/ev
libev: update to 4.27
2019-08-30 16:35:27 -07:00
Rosen Penev
0f52ce32c8
Merge pull request #9848 from neheb/key4
keyutils: Add Debian hardening patch
2019-08-30 16:19:28 -07:00
Rosen Penev
b8aa5d8fcb
Merge pull request #9578 from neheb/opn
opencv: Update to 4.1.1
2019-08-30 16:17:57 -07:00
Rosen Penev
d990519a85
Merge pull request #5886 from nonicknamewasleftforme/feature/backuppc
new backuppc package w/ dependency perl-file-rsyncp
2019-08-30 16:02:49 -07:00
Rosen Penev
85f1e3e474 rxtx: Add missing classpath dependency
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-30 11:27:32 -07:00
Rosen Penev
cbecbc6298
Merge pull request #9693 from neheb/jam
jamvm: Add host build
2019-08-30 10:34:50 -07:00
Rosen Penev
2972cc98eb jamvm: Add host build
Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-30 10:32:19 -07:00
Rosen Penev
614e8e8be3
Merge pull request #9851 from neheb/madp
madplay: Pass CFLAGS properly
2019-08-30 10:19:22 -07:00
Rosen Penev
2676c2dd57
Merge pull request #9732 from dengqf6/ngx
nginx: update to 1.16.1
2019-08-30 10:16:47 -07:00
Rosen Penev
f452195ab6
Merge pull request #9844 from cshoredaniel/pr-msmtpq-ng-mta-conn_test
msmtp-scripts: Fix connectivity test and various permissions
2019-08-30 10:15:44 -07:00
Rosen Penev
f414253f09
Merge pull request #9852 from neheb/prob
libredblack: Pass CFLAGS
2019-08-30 10:14:58 -07:00
Rosen Penev
0fe7e4586b
Merge pull request #9853 from neheb/atf
atftp: Update to 0.7.2
2019-08-30 10:14:28 -07:00
Rosen Penev
7aa461730d
Merge pull request #9813 from neheb/xml
xmlrpc-c: Update to 1.51.03
2019-08-30 10:12:33 -07:00
Rosen Penev
73801c267a
Merge pull request #9868 from gladiac1337/haproxy-2.0.5
haproxy: Update HAProxy to v2.0.5
2019-08-30 10:11:38 -07:00
Rosen Penev
35c4fd5aba
Merge pull request #9871 from wvdakker/master
Shorewall: Bump to 5.2.3.4
2019-08-30 10:10:56 -07:00
Rosen Penev
9fd31a0c05
Merge pull request #9866 from tru7/libfmt
libfmt: bump to version 6.0.0
2019-08-30 09:56:20 -07:00
Othmar Truniger
f0ca08bec4 libfmt: bump to version 6.0.0
Signed-off-by: Othmar Truniger <github@truniger.ch>
2019-08-30 16:11:38 +02:00
Jo-Philipp Wich
22be9a1c01 cgi-io: require whitelisting upload locations
Introduce further ACL checks to verify that the request-supplied
upload location may be written to. This prevents overwriting things
like /bin/busybox and allows to confine uploads to specific directories.

To setup the required ACLs, the following ubus command may be used
on the command line:

ubus call session grant '{
  "ubus_rpc_session": "d41d8cd98f00b204e9800998ecf8427e",
  "scope": "cgi-io",
  "objects": [
    [ "/etc/certificates/*", "write" ],
    [ "/var/uploads/*", "write" ]
  ]
}'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-08-30 13:58:50 +02:00
W. van den Akker
eaecd26777
Shorewall6: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 13:29:39 +02:00
W. van den Akker
7654150496
Shorewall: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 13:25:14 +02:00
W. van den Akker
6794fef86f
Shorewall6-lite: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 13:22:53 +02:00
W. van den Akker
fba1e1d0f3
Shorewall-lite: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 13:19:05 +02:00
W. van den Akker
e51db908a1
Shorewall-core: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 13:17:40 +02:00
Christian Lachner
33bc3d877b haproxy: Update HAProxy to v2.0.5
- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-08-30 07:21:51 +02:00
Dirk Brenken
4f43e9b388
Merge pull request #9863 from dibdot/adblock
adblock: update 3.8.4
2019-08-29 20:03:16 +02:00
Dirk Brenken
f385415110
Merge pull request #9862 from dibdot/travelmate
travelmate: update 1.4.12
2019-08-29 20:02:38 +02:00
Dirk Brenken
1d90509b03
travelmate: update 1.4.12
* automatically add open uplinks to your wireless config,
  e.g. hotel captive portals (disabled by default)
* shift net status check in a separate function
* (s)hellcheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-08-29 15:45:35 +02:00
Dirk Brenken
161597f2fa
adblock: update 3.8.4
* fix the 'adb_sysver' output
* pass the adblock version information to the helper scripts correctly

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-08-29 14:45:01 +02:00
Jiri Slachta
062044b3ff
Merge pull request #9854 from neheb/ssh2
libssh2: Don't build tests
2019-08-29 12:13:41 +02:00
Etienne Champetier
df316b5578
Merge pull request #9858 from champtar/phantap
phantap: update to latest commit
2019-08-28 21:31:36 -07:00
Etienne Champetier
2e628bcdcc phantap: update to latest commit
758fba1 Fix EAP (802.1x) passthrough

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2019-08-28 20:56:24 -07:00