Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
16027 commits 8 branches 0 tags 65 MiB
Commit graph

16027 commits

This branch
This branch
All branches
Author SHA1 Message Date
W. van den Akker
c2a5aa1a54
Shorewall-core: Bump to 5.2.3.5 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-01-18 22:48:13 +01:00
Eneas U de Queiroz
8ba3c7b19d
afalg_engine: fix ENGINES location, zero-copy 
Use a fixed ENGINES_DIR location, instead of trying to read it from the
openssl Makefile.

It also fixes the zero-copy config option not being passed down to the
cmake options.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 6a5f7920e9)
 2020-01-17 15:37:26 -08:00
Eneas U de Queiroz
776216a652 afalg_engine: add new package 
This is an alternate AF_ALG engine for openssl, based on the devcrypto
engine, but using the AF_ALG interface instead of /dev/crypto.

It is different than the AF_ALG engine that ships with OpenSSL:
  - it uses sync calls, instead of async
  - it suports more algorithms

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e0bd6da4b)
 2020-01-17 09:40:32 -03:00
Stijn Tintel
995226d95d strongswan: bump to 5.8.2 
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2020-01-17 01:07:37 +02:00
Paul Fertser
243673b2d0 strongswan: allow to specify per-connection reqid with UCI 
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2020-01-17 01:07:32 +02:00
Stijn Tintel
3880d65a07 strongswan: bump to 5.8.1 
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2020-01-17 01:07:28 +02:00
Jan Pavlinec
ba43556aed
libarchive: update to version 3.4.1 (security fix) 
Fixes CVE-2019-19221

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from df634dcc92)
 2020-01-16 14:35:18 -08:00
Eneas U de Queiroz
ff87e8dbfa
oniguruma: bump to version 6.9.4 
This version adds a new RegSet API, and fixes the following:
 - CVE-2019-19012
 - CVE-2019-19203
 - CVE-2019-19204
 - CVE-2019-19246
 - some problems (found by libFuzzer test)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 94895ec818)
 2020-01-16 14:34:14 -08:00
Stan Grishin
3030d0fc1a vpn-policy-routing: bugfix: remove conflict with vpnbypass 
Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 05603822d3)
 2020-01-16 20:00:31 +02:00
Rosen Penev
d0bdd32524
Merge pull request #11021 from jefferyto/golang-updates-openwrt-19.07 
[openwrt-19.07] golang: Updates
 2020-01-14 12:11:06 -08:00
Jeffery To
2dbc88762c golang: Update to 1.13.6 
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2020-01-15 01:26:40 +08:00
Jeffery To
fdd202bd1e golang: Fix selection of GOARM value 
This fixes how GOARM is selected for arm platforms, based on support for
VFP/VFPv3 rather than CPU version.

Fixes #10967.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2020-01-15 00:58:28 +08:00
Josef Schlehofer
6a64b7affe libseccomp: update to version 2.4.2 
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2020-01-13 22:58:48 +01:00
Josef Schlehofer
a50eeb01fc
django: update to version 1.11.27 
Fixes: CVE-2019-19844

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2020-01-11 23:15:13 +01:00
Eric Luehrsen
8f3dcbcee6 unbound: fix TLS forwards with optional suffix 
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit b101dd76fb)
 2020-01-11 23:03:47 +02:00
Jan Pavlinec
ffdbf4e7c3
measurement-kit: update to version 0.10.8 
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 744e2dd19d)
 2020-01-11 09:20:17 +01:00
Jan Pavlinec
8f037084bc
measurement-kit: update package 
Changes:
-add InstallDev section
-remove uclibc patch (issue fixed in upstream)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit df853b2d20)
 2020-01-11 09:20:08 +01:00
Jan Pavlinec
8f2eb8f2da
measurement-kit: update to version 0.10.6 
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 2949906ec4)
 2020-01-11 09:20:02 +01:00
Rosen Penev
3dfabe79f3
smbd: Update to 3.0.2 
Fixes a nasty stack corruption issue and a big endian fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 232a271f40)
 2020-01-10 19:05:10 -08:00
Rosen Penev
670f336d79
transmission: Sync with master 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-01-10 18:07:42 -08:00
Alexandru Ardelean
e847333d15 python,python3: split python[3]-pkg-resources from setuptools 
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

(cherry picked from commit ed0e77f3c3)
Reference to discussion at
c61579b564 (commitcomment-36665837)
Adjusted python PKG_RELEASE items to current situation
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
 2020-01-10 18:57:16 +02:00
Yousong Zhou
1f293771cd openvswitch: bump PKG_RELEASE 
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2020-01-08 13:03:25 +08:00
Yousong Zhou
dc097661c5 openvswitch: backport patch to fix compilation 
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2020-01-08 12:59:37 +08:00
Yousong Zhou
74e160df22 openvswitch: fix building failure caused by dst_ops api change 
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2020-01-08 12:56:32 +08:00
Yousong Zhou
a4a54d0f3b openvswitch: bump to version 2.11.1 
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2020-01-08 11:57:17 +08:00
Rosen Penev
d974cd3673
Merge pull request #10920 from Rixerx/openwrt-19.07 
[19.07] zabbix: update to 4.0.16
 2020-01-05 17:15:37 -08:00
Rosen Penev
26c23f3b9e
Merge pull request #10881 from mstorchak/stubby-19.07 
[19.07] stubby: switch to ca-bundle
 2020-01-05 15:38:13 -08:00
Sebastian Kemper
9adadfd8ec
sqlite3: bump to version 3.30.1 
Fixes CVE-2019-16168

In other news:

- adds ABI_VERSION
- prefers INSTALL_DATA over CP
- removes gratuitous trailing slashes

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from commit 33fecfefec)
 2020-01-04 23:21:19 +01:00
Sebastian Kemper
3bfc11ea22
sqlite3: bump to 3.29.0 
Fixes CVE-2019-5018
Also drops upstreamed patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2f7fbde7d6)
 2020-01-04 23:19:54 +01:00
DENG Qingfang
e2bca1026b
nginx: update to 1.16.1 
Fixes:
when using HTTP/2 a client might cause excessive memory
consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5ffc744018)
 2020-01-04 23:13:48 +01:00
Jan Pavlinec
74e9ca74fd
tor: add respawn to init script 
Note:
In some cases when tor daemon starts before
than the router is connected to the Internet.
Tor will exit and you have to run it manually.
This should fix this case.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5bce9c3e1d)
 2020-01-04 20:53:01 +01:00
Jan Pavlinec
b85cbaf7e5
tor: update to version 0.4.2.5 
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a339e0ede3)
 2020-01-04 20:52:49 +01:00
Josef Schlehofer
2da2cf43b8
youtube-dl: update to version 2020.1.1 
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2020-01-04 20:50:31 +01:00
Rosen Penev
9ec8652533
Merge pull request #10940 from Andy2244/samba-4.11.4-(19.07) 
[19.07] samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
 2020-01-03 16:32:02 -08:00
Rosen Penev
7472cc7427
Merge pull request #10938 from Andy2244/smbd-rename-3.0.1-(19.07) 
[19.07] smbd: rename from cifsd, update to 3.0.1
 2020-01-03 16:15:54 -08:00
Rosen Penev
396c5fc9bf
Merge pull request #10939 from Andy2244/wsdd2-init-update-(19.07) 
[19.07] wsdd2: update to git (2019-12-15), bind to 'lan' only, update init for smbd
 2020-01-03 16:09:13 -08:00
Rosen Penev
bff3204973
Merge pull request #10937 from Andy2244/libtirpc-1.2.5-(19.07) 
[19.07] libtirpc: update to 1.2.5
 2020-01-03 16:08:32 -08:00
Andy Walsh
85066d81d0 samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build 
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

extra:
* add rpcsvc-proto package _(don't rely on nfs-utils/host for headers, rpcgen anymore)_
* add libasn1 host build _(samba4 is looking for the bins)_

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-01-04 01:08:11 +01:00
Andy Walsh
28e84aacf7 wsdd2: update to git (2019-12-15), bind to 'lan' only, update init for smbd 
* update to git (2019-12-15)
* bind to 'lan' interface only
* update init for renamed cifsd->smbd
* make smbd/samba compatible _(avoid testparm dependency)_
* only start if needed
* add meta data _(vendor, model, sku)_
* update smb.conf procd location
* lower restart delay
* remove outdated patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-01-04 01:01:43 +01:00
Andy Walsh
8bc58d175e smbd: rename from cifsd, update to 3.0.1 
* follow upstream rename to 'smbd' and 'smbd-tools'
* config is '/config/smbd' and '/etc/smbd/smb.conf'
* smbd: update to 3.0.1
* smbd: fixes delete access on readonly shares
* smbd: add patch to keep version metadata in kmod
* smbd: remove synchrous kill_server patches
* smbd-tools: update to 3.0.1
* smbd-tools: userspace service is now 'usmbd'
* smbd-tools: userspace tools are: 'smbuseradd', 'smbshareadd' with /etc/smbd/smbdpwd.db
* smbd-tools: split package into server/utils (reduce size)
* smbd-tools: fix init (luci save&apply)
* smbd-tools: remove kill_server related timeouts
* smbd-tools: add low memory options to template, to prevent oom

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-01-04 00:55:40 +01:00
Andy Walsh
71d639a45f libtirpc: update to 1.2.5 
* update to 1.2.5
* remove upstream merged patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
 2020-01-04 00:48:23 +01:00
Krystian Kozak
3a82973ae8 zabbix: update to 4.0.16 
Updated to 4.0.16 LTS version.

Compile tested: Yes, x86_64
Run tested: Yes, x86_64

Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>
 2020-01-01 11:19:49 +01:00
Hannu Nyman
34938d03f6
Merge pull request #10903 from stangri/19.07-vpn-policy-routing 
[19.07] vpn-policy-routing: initial release
 2019-12-31 17:23:20 +02:00
Josef Schlehofer
a015cc1bd8
youtube-dl: update to version 2019.12.25 
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2019-12-31 03:45:59 +01:00
Stan Grishin
86b48645fa vpn-policy-routing: initial release 
Signed-off-by: Stan Grishin <stangri@melmac.net>
 2019-12-30 07:40:38 -07:00
Hannu Nyman
d22c35e588 nano: update to 4.7 
Update nano to version 4.7

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c62f8962ba)
 2019-12-29 15:20:25 +02:00
Rosen Penev
10a7a87638
Merge pull request #10897 from jefferyto/golang-format-ldflags-openwrt-19.07 
[openwrt-19.07] golang: Format TARGET_LDFLAGS for gcc
 2019-12-29 04:36:16 -08:00
Jeffery To
fc313e772b golang: Format TARGET_LDFLAGS for gcc 
go invokes the external linker by calling gcc, so -zxxx options in
TARGET_LDFLAGS (in golang-package.mk) need to be formatted as -Wl,z,xxx.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from dbd6f224c3)
 2019-12-29 18:51:15 +08:00
Hannu Nyman
8df00a88e7
Merge pull request #10892 from cshoredaniel/pr-19.07-radicale2-doc-passlib-bcrypt 
[19.07] radicale2: Document suggested use of passlib and bcrypt
 2019-12-28 23:52:37 +02:00
Hannu Nyman
3b5c73f85b
Merge pull request #10893 from cshoredaniel/pr-19.07-update-passlib-1-7-2 
[19.07] passlib: Update passlib to 1.7.2
 2019-12-28 23:51:39 +02:00