Commit graph

15902 commits

Author SHA1 Message Date
Andy Walsh
82b463b19f smbd: update to 3.1.1, rename to "ksmbd", "ksmbd-tools"
* rename smbd->ksmbd (upstream name change)
* ksmbd-tools: build with static glib2 (usmbd = ~90kb, smbuseradd = ~40kb)
* new etc folder location = /etc/ksmbd/smb.conf
* new database name = /etc/ksmbd/ksmbdpwd.db
* fixes "map to guest = Bad User" while userdb is also used
* fixes missing ipv6 support
* update/rename to "luci-app-ksmbd"
* remove UCI samba compatibility code for section names (ksmbd uses [share] + [globals] not [sambashare] + [global])

* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: release 3.1.0 version
* ksmbd: fix over 80 character warnings
* ksmbd: rename smbd-tools to ksmbd-tools in travis.yml
* ksmbd: fix password db file location in travis.yml
* ksmbd: rename smbd prefix function to ksmbd
* ksmbd: rename smbd prefix source files to ksmbd
* Revert "smbd: set connection status with SMBD_SESS_EXITING instead of direct destory"
* ksmbd: rename smbd to ksmbd in .travis.yml
* smbd: rename module name to ksmbd.ko
* smbd: set connection status with SMBD_SESS_EXITING instead of direct destory
* smbd: previous session with same user and same password should be deleted
* smbd: only use global session table in smb2 session
* smbd: add support for ipv6
* smbd: fix empty macro issue from smbd_debug
* cifsd: fix printing of file names in find_next

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-27 22:03:28 +01:00
Hannu Nyman
1e43dc8f81
Merge pull request #11123 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
2020-01-26 22:39:33 +02:00
Rosen Penev
045e54e6b6
Merge pull request #11129 from Robby-/openwrt-19.07-freeradius3_update_3_0_20
[19.07] freeradius3: Update to 3.0.20
2020-01-26 10:48:13 -08:00
Jiri Slachta
885c9ed6cb
Merge pull request #11126 from micmac1/19.07-tiff
[19.07] tiff: update version to 4.1.0
2020-01-26 18:27:49 +01:00
Robby K
b3c1a67ff1 freeradius3: Update to 3.0.20
Latest stable release, contains security fixes for EAP-PWD (side-channel leak), logrotate settings (CVE-2019-10143) and a DoS issue due to multithreaded BN_CTX access (CVE-2019-17185).

Also refreshed patches/002-disable-session-cache-CVE-2017-9148.patch due to the following changes/commits in freeradius:
bf1a1eda23
a3c46544b3

Signed-off-by: Robby K <robbyke@gmail.com>
2020-01-26 14:43:06 +01:00
Jiri Slachta
eee4d0830d tiff: update version to 4.1.0
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2020-01-26 09:11:27 +01:00
Stan Grishin
a9fd019a3d https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-01-25 21:14:56 -07:00
Rosen Penev
eab36f8a67
avrdude: Fix GPIO path building
%ud is a GNU extension. It's not really supported elsewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 536c6b8be7)
2020-01-23 21:33:46 -08:00
Rosen Penev
9cb0c7f4a0
Merge pull request #10990 from BKPepe/django-19.07
[OpenWrt 19.07] django: update to version 1.11.27
2020-01-22 18:41:20 -08:00
Rosen Penev
5afe3fd1df
Merge pull request #11078 from ddast/radicale_add_urllib_dep
radicale-py3: Add python3-urllib dependency
2020-01-20 14:55:29 -08:00
Dennis Dast
ea93089afd radicale-py3: Add python3-urllib dependency
Depend on python3-urllib instead of python3-email (python3-urllib has
python3-email as a dependency).

Signed-off-by: Dennis Dast <mail@ddast.de>
2020-01-20 20:59:41 +01:00
Matt Merhar
72af40f2ba
nut: fix other/otherflag custom variables in nut-server.init
This allows custom config parameters to be added to the generated config
files, enabling the original intended functionality per
https://openwrt.org/docs/guide-user/services/ups/software.nut.

Example usage from /etc/config/nut_server:

config driver 'apc'
	option driver 'snmp-ups'
	option snmp_version 'v3'
	option port '172.16.100.5'
	list other 'secLevel'
	list other 'secName'
	list other 'authPassword'
	list otherflag 'notransferoids'

config other 'other_secLevel'
	option value 'authNoPriv'

config other 'other_secName'
	option value 'some_username'

config other 'other_authPassword'
	option value 'some_password'

config other 'otherflag_notransferoids'
	option value '1'

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry-picked from 0b04dd34a0)
2020-01-19 21:22:35 -08:00
Sebastian Kemper
e1aa905ab9
nut: update OpenSSL 1.1.0 patch
Replaces OpenWrt patch with upstream patch. Also removes
0002-Fix-check-for-empty-string.patch as this is included in upstream
OpenSSL 1.1.0 patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from 7d4f1b8589)
2020-01-19 21:22:32 -08:00
Sebastian Kemper
154da8aa02
nut: fix CGI setup
This commit makes

 - the libgd dependency (as well as specifying libs and includes)
 - the configure argument "--with-cgi"

dependant on whether the package nut-web-cgi is selected.

nut-web-cgi is also added to PKG_CONFIG_DEPENDS.

Resolves: #10641

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from cdd660a41d)
2020-01-19 21:21:51 -08:00
Hannu Nyman
7b07ac9e3d
Merge pull request #11063 from EricLuehrsen/openwrt-19.07-unbound
[openwrt-19.07] unbound: improve dependencies for okpg
2020-01-19 22:49:31 +02:00
Eric Luehrsen
bc4f3c11cb unbound: improve dependencies for okpg
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
cherry pick 6505154a74
2020-01-19 15:35:09 -05:00
Rosen Penev
895200940a
Merge pull request #11061 from cotequeiroz/afalg_1.1.0-19.07
[19.07] afalg_engine: bump to v1.1.0
2020-01-19 12:17:06 -08:00
Eneas U de Queiroz
1410d6b737
afalg_engine: bump to v1.1.0
This version is up to 20% faster than 1.0.1.
Build without cryptouser information, which is not available in 19.07.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-01-19 16:16:25 -03:00
Josef Schlehofer
162974f809
btrfs-progs: update to version 5.4.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c864563372)
2020-01-19 11:55:42 +01:00
Josef Schlehofer
072fcb5ce4
libseccomp: add seccomp-syscalls.h to InstallDev
In the version 2.4.2, there was introduced a new header file.
Ship it to InstallDev

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-19 11:37:57 +01:00
Hannu Nyman
3ab34b50db
Merge pull request #11051 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.5
2020-01-19 00:08:39 +02:00
W. van den Akker
5022caf869
Shorewall6-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:47 +01:00
W. van den Akker
0b890cf4b5
Shorewall6: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:28 +01:00
W. van den Akker
1201cdcd5f
Shorewall: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:07 +01:00
W. van den Akker
4cb0ff8314
Shorewall-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:35 +01:00
W. van den Akker
c2a5aa1a54
Shorewall-core: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:13 +01:00
Eneas U de Queiroz
8ba3c7b19d
afalg_engine: fix ENGINES location, zero-copy
Use a fixed ENGINES_DIR location, instead of trying to read it from the
openssl Makefile.

It also fixes the zero-copy config option not being passed down to the
cmake options.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 6a5f7920e9)
2020-01-17 15:37:26 -08:00
Eneas U de Queiroz
776216a652 afalg_engine: add new package
This is an alternate AF_ALG engine for openssl, based on the devcrypto
engine, but using the AF_ALG interface instead of /dev/crypto.

It is different than the AF_ALG engine that ships with OpenSSL:
  - it uses sync calls, instead of async
  - it suports more algorithms

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e0bd6da4b)
2020-01-17 09:40:32 -03:00
Stijn Tintel
995226d95d strongswan: bump to 5.8.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:37 +02:00
Paul Fertser
243673b2d0 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:32 +02:00
Stijn Tintel
3880d65a07 strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:28 +02:00
Jan Pavlinec
ba43556aed
libarchive: update to version 3.4.1 (security fix)
Fixes CVE-2019-19221

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from df634dcc92)
2020-01-16 14:35:18 -08:00
Eneas U de Queiroz
ff87e8dbfa
oniguruma: bump to version 6.9.4
This version adds a new RegSet API, and fixes the following:
 - CVE-2019-19012
 - CVE-2019-19203
 - CVE-2019-19204
 - CVE-2019-19246
 - some problems (found by libFuzzer test)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 94895ec818)
2020-01-16 14:34:14 -08:00
Stan Grishin
3030d0fc1a vpn-policy-routing: bugfix: remove conflict with vpnbypass
Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 05603822d3)
2020-01-16 20:00:31 +02:00
Rosen Penev
d0bdd32524
Merge pull request #11021 from jefferyto/golang-updates-openwrt-19.07
[openwrt-19.07] golang: Updates
2020-01-14 12:11:06 -08:00
Jeffery To
2dbc88762c golang: Update to 1.13.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 01:26:40 +08:00
Jeffery To
fdd202bd1e golang: Fix selection of GOARM value
This fixes how GOARM is selected for arm platforms, based on support for
VFP/VFPv3 rather than CPU version.

Fixes #10967.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 00:58:28 +08:00
Josef Schlehofer
6a64b7affe libseccomp: update to version 2.4.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-13 22:58:48 +01:00
Josef Schlehofer
a50eeb01fc
django: update to version 1.11.27
Fixes: CVE-2019-19844

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-11 23:15:13 +01:00
Eric Luehrsen
8f3dcbcee6 unbound: fix TLS forwards with optional suffix
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit b101dd76fb)
2020-01-11 23:03:47 +02:00
Jan Pavlinec
ffdbf4e7c3
measurement-kit: update to version 0.10.8
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 744e2dd19d)
2020-01-11 09:20:17 +01:00
Jan Pavlinec
8f037084bc
measurement-kit: update package
Changes:
-add InstallDev section
-remove uclibc patch (issue fixed in upstream)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit df853b2d20)
2020-01-11 09:20:08 +01:00
Jan Pavlinec
8f2eb8f2da
measurement-kit: update to version 0.10.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 2949906ec4)
2020-01-11 09:20:02 +01:00
Rosen Penev
3dfabe79f3
smbd: Update to 3.0.2
Fixes a nasty stack corruption issue and a big endian fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 232a271f40)
2020-01-10 19:05:10 -08:00
Rosen Penev
670f336d79
transmission: Sync with master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-10 18:07:42 -08:00
Alexandru Ardelean
e847333d15 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

(cherry picked from commit ed0e77f3c3)
Reference to discussion at
c61579b564 (commitcomment-36665837)
Adjusted python PKG_RELEASE items to current situation
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-01-10 18:57:16 +02:00
Yousong Zhou
1f293771cd openvswitch: bump PKG_RELEASE
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 13:03:25 +08:00
Yousong Zhou
dc097661c5 openvswitch: backport patch to fix compilation
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:59:37 +08:00
Yousong Zhou
74e160df22 openvswitch: fix building failure caused by dst_ops api change
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:56:32 +08:00
Yousong Zhou
a4a54d0f3b openvswitch: bump to version 2.11.1
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:57:17 +08:00