Commit graph

15897 commits

Author SHA1 Message Date
Jiri Slachta
885c9ed6cb
Merge pull request #11126 from micmac1/19.07-tiff
[19.07] tiff: update version to 4.1.0
2020-01-26 18:27:49 +01:00
Jiri Slachta
eee4d0830d tiff: update version to 4.1.0
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2020-01-26 09:11:27 +01:00
Rosen Penev
eab36f8a67
avrdude: Fix GPIO path building
%ud is a GNU extension. It's not really supported elsewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 536c6b8be7)
2020-01-23 21:33:46 -08:00
Rosen Penev
9cb0c7f4a0
Merge pull request #10990 from BKPepe/django-19.07
[OpenWrt 19.07] django: update to version 1.11.27
2020-01-22 18:41:20 -08:00
Rosen Penev
5afe3fd1df
Merge pull request #11078 from ddast/radicale_add_urllib_dep
radicale-py3: Add python3-urllib dependency
2020-01-20 14:55:29 -08:00
Dennis Dast
ea93089afd radicale-py3: Add python3-urllib dependency
Depend on python3-urllib instead of python3-email (python3-urllib has
python3-email as a dependency).

Signed-off-by: Dennis Dast <mail@ddast.de>
2020-01-20 20:59:41 +01:00
Matt Merhar
72af40f2ba
nut: fix other/otherflag custom variables in nut-server.init
This allows custom config parameters to be added to the generated config
files, enabling the original intended functionality per
https://openwrt.org/docs/guide-user/services/ups/software.nut.

Example usage from /etc/config/nut_server:

config driver 'apc'
	option driver 'snmp-ups'
	option snmp_version 'v3'
	option port '172.16.100.5'
	list other 'secLevel'
	list other 'secName'
	list other 'authPassword'
	list otherflag 'notransferoids'

config other 'other_secLevel'
	option value 'authNoPriv'

config other 'other_secName'
	option value 'some_username'

config other 'other_authPassword'
	option value 'some_password'

config other 'otherflag_notransferoids'
	option value '1'

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry-picked from 0b04dd34a0)
2020-01-19 21:22:35 -08:00
Sebastian Kemper
e1aa905ab9
nut: update OpenSSL 1.1.0 patch
Replaces OpenWrt patch with upstream patch. Also removes
0002-Fix-check-for-empty-string.patch as this is included in upstream
OpenSSL 1.1.0 patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from 7d4f1b8589)
2020-01-19 21:22:32 -08:00
Sebastian Kemper
154da8aa02
nut: fix CGI setup
This commit makes

 - the libgd dependency (as well as specifying libs and includes)
 - the configure argument "--with-cgi"

dependant on whether the package nut-web-cgi is selected.

nut-web-cgi is also added to PKG_CONFIG_DEPENDS.

Resolves: #10641

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from cdd660a41d)
2020-01-19 21:21:51 -08:00
Hannu Nyman
7b07ac9e3d
Merge pull request #11063 from EricLuehrsen/openwrt-19.07-unbound
[openwrt-19.07] unbound: improve dependencies for okpg
2020-01-19 22:49:31 +02:00
Eric Luehrsen
bc4f3c11cb unbound: improve dependencies for okpg
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
cherry pick 6505154a74
2020-01-19 15:35:09 -05:00
Rosen Penev
895200940a
Merge pull request #11061 from cotequeiroz/afalg_1.1.0-19.07
[19.07] afalg_engine: bump to v1.1.0
2020-01-19 12:17:06 -08:00
Eneas U de Queiroz
1410d6b737
afalg_engine: bump to v1.1.0
This version is up to 20% faster than 1.0.1.
Build without cryptouser information, which is not available in 19.07.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-01-19 16:16:25 -03:00
Josef Schlehofer
162974f809
btrfs-progs: update to version 5.4.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c864563372)
2020-01-19 11:55:42 +01:00
Josef Schlehofer
072fcb5ce4
libseccomp: add seccomp-syscalls.h to InstallDev
In the version 2.4.2, there was introduced a new header file.
Ship it to InstallDev

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-19 11:37:57 +01:00
Hannu Nyman
3ab34b50db
Merge pull request #11051 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.5
2020-01-19 00:08:39 +02:00
W. van den Akker
5022caf869
Shorewall6-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:47 +01:00
W. van den Akker
0b890cf4b5
Shorewall6: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:28 +01:00
W. van den Akker
1201cdcd5f
Shorewall: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:07 +01:00
W. van den Akker
4cb0ff8314
Shorewall-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:35 +01:00
W. van den Akker
c2a5aa1a54
Shorewall-core: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:13 +01:00
Eneas U de Queiroz
8ba3c7b19d
afalg_engine: fix ENGINES location, zero-copy
Use a fixed ENGINES_DIR location, instead of trying to read it from the
openssl Makefile.

It also fixes the zero-copy config option not being passed down to the
cmake options.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 6a5f7920e9)
2020-01-17 15:37:26 -08:00
Eneas U de Queiroz
776216a652 afalg_engine: add new package
This is an alternate AF_ALG engine for openssl, based on the devcrypto
engine, but using the AF_ALG interface instead of /dev/crypto.

It is different than the AF_ALG engine that ships with OpenSSL:
  - it uses sync calls, instead of async
  - it suports more algorithms

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e0bd6da4b)
2020-01-17 09:40:32 -03:00
Stijn Tintel
995226d95d strongswan: bump to 5.8.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:37 +02:00
Paul Fertser
243673b2d0 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:32 +02:00
Stijn Tintel
3880d65a07 strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:28 +02:00
Jan Pavlinec
ba43556aed
libarchive: update to version 3.4.1 (security fix)
Fixes CVE-2019-19221

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from df634dcc92)
2020-01-16 14:35:18 -08:00
Eneas U de Queiroz
ff87e8dbfa
oniguruma: bump to version 6.9.4
This version adds a new RegSet API, and fixes the following:
 - CVE-2019-19012
 - CVE-2019-19203
 - CVE-2019-19204
 - CVE-2019-19246
 - some problems (found by libFuzzer test)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 94895ec818)
2020-01-16 14:34:14 -08:00
Stan Grishin
3030d0fc1a vpn-policy-routing: bugfix: remove conflict with vpnbypass
Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 05603822d3)
2020-01-16 20:00:31 +02:00
Rosen Penev
d0bdd32524
Merge pull request #11021 from jefferyto/golang-updates-openwrt-19.07
[openwrt-19.07] golang: Updates
2020-01-14 12:11:06 -08:00
Jeffery To
2dbc88762c golang: Update to 1.13.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 01:26:40 +08:00
Jeffery To
fdd202bd1e golang: Fix selection of GOARM value
This fixes how GOARM is selected for arm platforms, based on support for
VFP/VFPv3 rather than CPU version.

Fixes #10967.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 00:58:28 +08:00
Josef Schlehofer
6a64b7affe libseccomp: update to version 2.4.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-13 22:58:48 +01:00
Josef Schlehofer
a50eeb01fc
django: update to version 1.11.27
Fixes: CVE-2019-19844

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-11 23:15:13 +01:00
Eric Luehrsen
8f3dcbcee6 unbound: fix TLS forwards with optional suffix
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit b101dd76fb)
2020-01-11 23:03:47 +02:00
Jan Pavlinec
ffdbf4e7c3
measurement-kit: update to version 0.10.8
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 744e2dd19d)
2020-01-11 09:20:17 +01:00
Jan Pavlinec
8f037084bc
measurement-kit: update package
Changes:
-add InstallDev section
-remove uclibc patch (issue fixed in upstream)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit df853b2d20)
2020-01-11 09:20:08 +01:00
Jan Pavlinec
8f2eb8f2da
measurement-kit: update to version 0.10.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 2949906ec4)
2020-01-11 09:20:02 +01:00
Rosen Penev
3dfabe79f3
smbd: Update to 3.0.2
Fixes a nasty stack corruption issue and a big endian fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 232a271f40)
2020-01-10 19:05:10 -08:00
Rosen Penev
670f336d79
transmission: Sync with master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-10 18:07:42 -08:00
Alexandru Ardelean
e847333d15 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

(cherry picked from commit ed0e77f3c3)
Reference to discussion at
c61579b564 (commitcomment-36665837)
Adjusted python PKG_RELEASE items to current situation
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-01-10 18:57:16 +02:00
Yousong Zhou
1f293771cd openvswitch: bump PKG_RELEASE
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 13:03:25 +08:00
Yousong Zhou
dc097661c5 openvswitch: backport patch to fix compilation
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:59:37 +08:00
Yousong Zhou
74e160df22 openvswitch: fix building failure caused by dst_ops api change
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:56:32 +08:00
Yousong Zhou
a4a54d0f3b openvswitch: bump to version 2.11.1
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:57:17 +08:00
Rosen Penev
d974cd3673
Merge pull request #10920 from Rixerx/openwrt-19.07
[19.07] zabbix: update to 4.0.16
2020-01-05 17:15:37 -08:00
Rosen Penev
26c23f3b9e
Merge pull request #10881 from mstorchak/stubby-19.07
[19.07] stubby: switch to ca-bundle
2020-01-05 15:38:13 -08:00
Sebastian Kemper
9adadfd8ec
sqlite3: bump to version 3.30.1
Fixes CVE-2019-16168

In other news:

- adds ABI_VERSION
- prefers INSTALL_DATA over CP
- removes gratuitous trailing slashes

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from commit 33fecfefec)
2020-01-04 23:21:19 +01:00
Sebastian Kemper
3bfc11ea22
sqlite3: bump to 3.29.0
Fixes CVE-2019-5018
Also drops upstreamed patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2f7fbde7d6)
2020-01-04 23:19:54 +01:00
DENG Qingfang
e2bca1026b
nginx: update to 1.16.1
Fixes:
when using HTTP/2 a client might cause excessive memory
consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5ffc744018)
2020-01-04 23:13:48 +01:00