Commit graph

10462 commits

Author SHA1 Message Date
Stijn Tintel
8b76a11e67 strongswan: bump to 5.6.3
Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 7bb68c74e2)
2018-06-27 16:33:58 +03:00
Hannu Nyman
6dbfae07f5
Merge pull request #6351 from EricLuehrsen/unbound_20180625_1806
[openwrt-18.06] unbound: limit outside script source to init funciton scope
2018-06-27 07:17:07 +03:00
Jeffery To
7789257342 golang: update to 1.10.3, add mirrors
This also changes the bootstrap source URL to the official GitHub
mirror, to make building easier for places where Google sites aren't
accessible. Fixes #6326.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-27 11:39:26 +08:00
Stijn Tintel
d48cf92735
Merge pull request #6363 from dwmw2/domoticz-18.06
Domoticz update for 18.06
2018-06-27 00:15:29 +02:00
Hannu Nyman
d471ad56c2
Merge pull request #6349 from jefferyto/python-package-updates-openwrt-18.06
[openwrt-18.06] Python package updates
2018-06-26 21:54:05 +03:00
Eric Luehrsen
eb80360e57 unbound: limit outside script source to init funciton scope
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-06-25 20:45:35 -04:00
Jeffery To
9250b7283a twisted: update to 18.4.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:58:14 +08:00
Jeffery To
d25196bc28 python-zope-interface: update to 4.5.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:35 +08:00
Jeffery To
e7af1e992d python-pyasn1: update to 0.4.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:25 +08:00
Jeffery To
8c545ae8dd python-ply: update to 3.11
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:16 +08:00
Jeffery To
dcdc8807a0 python-ipaddress: update to 1.0.22
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:04 +08:00
Jeffery To
4d225bb519 python-hyperlink: update to 18.0.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:56:53 +08:00
Jeffery To
c5a5b3c74c python-automat: update to 0.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:56:38 +08:00
Jeffery To
2a7c48c7fa python-attrs: update to 18.1.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:56:11 +08:00
David Woodhouse
9b390cb468 domoticz: update to 4.9700 stable release, enable Python, fix compression
The files in ozwcp/ shouldn't be compressed as there's no gzip handling
for those.

Also enable Python support — since it can dynamically link with
libpython optionally, it's harmless to enable it. Those who want Python
plugins can use it. I still want lua-based hardware plugins though.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2018-06-25 16:56:19 +01:00
David Woodhouse
7785d2a444 domoticz: fix Onkyo custom command handling from dzVents
https://github.com/domoticz/domoticz/pull/2386

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2018-06-25 15:26:25 +01:00
David Woodhouse
394e676d27 domoticz: update to 3.9571 and clean up FHS handling
Upstream has merged a simplified version of the FHS patch, with a few
changes...

Scripts are actually configuration. There are examples, but the point is
that you write your own.

So they should live in the data directory (e.g. /var/lib/domoticz) not
in /usr/share/domoticz. The only exception is the dzVents runtime.

So.... the upstream patch handles the dzVents runtime bit. Drop the part
of our patch which added -scripts, because it can just be based in the
userdata directory and we don't need to change that.

Ship the default scripts/ directory in /etc/domoticz/scripts, and on
startup make a *symlink* to it from /var/lib/domoticz/scripts.

Symlink from /etc/domoticz/scripts/dzVents{data,generated_scripts} to
temporary directories under /var/lib/domoticz/dzVents so that those
directories (which are written to by Domoticz) don't land on the root
file system. Anyone with a writeable file system who *wants* the data/
directory to be persistent, can change that. Just as they can change
the userdata config option to point to a real file system somewhere.

Also drop the renaming of the OpenZWave Config/ directory. It's purely
cosmetric so there's no need for us to carry that change. It can go
upstream first, if it really offends anyone.

Drop the patches which are now merged upstream, and turn off the newly
added USE_OPENSSL_STATIC. Add -noupdates to the command line.

Finally, gzip the static www files to save space. In the common case,
clients will use "Accept-Encodiong: gzip" and Domoticz will serve them
as-is. It can also decompress on the fly if it really has to, but now we
aren't asking it to *compress* on the fly, which is probably a losing
proposition on an OpenWRT box.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2018-06-25 15:26:25 +01:00
David Woodhouse
1298bf851a domoticz: build with -flto
This makes quite a significant difference to the executable size:

   text    data     bss     dec     hex filename
7921421   87804   31692 8040917  7ab1d5 domoticz
5862321	  86180	  31212	5979713	 5b3e41	domoticz-lto

As an added bonus, it still seems to work.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2018-06-25 15:26:25 +01:00
David Woodhouse
d4853c5644 domoticz: support -ssldhparam config/command line option
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2018-06-25 15:26:25 +01:00
David Woodhouse
fa714dc793 domoticz: use 'ln -sf' in serial hotplug script
Otherwise, stale symlinks don't get replaced

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
2018-06-25 15:26:25 +01:00
Hannu Nyman
38077f8db4
Merge pull request #6338 from EricLuehrsen/unbound_173_1806
[openwrt-18.06] unbound: update to 1.7.3
2018-06-24 21:41:40 +03:00
Eric Luehrsen
3f00ecb725 unbound: update to 1.7.3
Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2018-06-23 12:47:43 -04:00
Daniel Golle
b94f4f8dce ola: enable and ship web stuff
Make OLA more useful for untrained users which depend on the built-in
webserver. We may split the ola package into smaller parts to allow
not having web-stuff in case this breaks the space-constraints for some
users.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Daniel Golle
e4142dee1b ola: implement Host/Install for ola_protoc_plugin
Should fix build with SDK on buildbots.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Daniel Golle
5268d788f5 ola: update to 0.10.6, fix build with recent protobuf
Recent protobuf requires C++11 while OLA was forcing C++98 in order
to keep using auto_ptr without getting warnings... Use gnu++11 to make
everyone happy and live with the warnings about auto_ptr being
deprecated.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
champtar
d83dc7cfb8
Merge pull request #6327 from aparcar/fancy_backport
prometheus-node-exporter-lua: handle fancy release backport to 18.06
2018-06-21 14:29:54 +02:00
Paul Spooren
9e1fcd153b prometheus-node-exporter-lua: handle fancy release
Some releases may have non letters in it's name currently resulting in
an empty ("") output which is then discarded, resulting in *missing*
labels in the metric.

Now it uses `.-` to catch as little as possible, but anything.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2018-06-21 20:34:24 +09:00
Jo-Philipp Wich
adb6c1e129
Merge pull request #6314 from aparcar/golang-18.06
golang: add package to 18.06
2018-06-20 15:34:10 +02:00
Alif M. Ahmad
5025648074 gptfdisk: add a new package
gptfdisk is a gpt-aware disk partitioning tool. It can be used to
convert mbr partitioned disk to gpt and vice versa.

It supports reading GPT, MBR, and BSD disklabels.

Signed-off-by: Alif M. Ahmad <alive4ever@live.com>
(cherry picked from commit eac2e12a6b)
2018-06-18 21:54:25 +02:00
Jeffery To
e077dc6a90 golang: new packages
From golang.org:
The Go programming language is an open source project to make
programmers more productive.

This commit consists of two "parts":

* golang/host: Main Go compiler for host (installed to
  STAGING_DIR_HOST/lib/go-cross), used to cross-compile Go programs to
  be packaged.

* golang (and golang-src/golang-doc): Main Go compiler for on-target
  development. These packages are quite large, but I would expect only
  developers to install these.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Paul Spooren <mail@aparcar.org>
2018-06-18 22:50:37 +09:00
Saverio Proto
cb7048e427 tinc: version bump 1.0.34
Signed-off-by: Saverio Proto <zioproto@gmail.com>
2018-06-15 17:03:47 +02:00
Hannu Nyman
656a56fee7
Merge pull request #6281 from wvdakker/openwrt-18.06
Shorewall: Bump to 5.2.0.4 (cherry-pick from master)
2018-06-12 16:29:48 +03:00
W. van den Akker
3d38c59976
Shorewall6: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:50 +02:00
W. van den Akker
0daf02f3a3
Shorewall: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:29 +02:00
W. van den Akker
979ea451a3
Shorewall6-lite: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:09 +02:00
W. van den Akker
61f78cd51b
Shorewall-lite: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:50 +02:00
W. van den Akker
decc2f979f
Shorewall-core: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:30 +02:00
W. van den Akker
25f8ef2a46
Shorewall6: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:04 +02:00
W. van den Akker
4a024eaf3b
Shorewall: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:03:41 +02:00
W. van den Akker
6f14c89fb0
Shorewall6-lite: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:03:08 +02:00
W. van den Akker
e0166df3dd
Shorewall-lite: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:02:49 +02:00
W. van den Akker
12e3fe7743
Shorewall-core: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:02:28 +02:00
Rafał Miłecki
4cc0c88713 lighttpd: backport fix for plain auth from 1.4.49 release
Update commit 3d59ce6f50 ("lighttpd: update to 1.4.48") resulted in
plain auth regression: it simply stopped working with:
(mod_auth.c.525) password doesn't match for (...)
appearing on every authentication try.

This regression was fixed in 1.4.49 release. Backport the fix instead of
updating to the 1.4.49 to avoid risking more/other regressions.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2018-06-09 22:21:44 +02:00
Toke Høiland-Jørgensen
b6e7720aff sqm-scripts: Bump to v1.2.3
Fixes an issue with sqm-scripts not being reloaded on ifup/down.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-06-05 23:39:02 +02:00
Hannu Nyman
f754df5e4b nano: update to 2.9.8
Update nano to version 2.9.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 33f1f6e940)
2018-06-04 18:12:19 +03:00
Michael Heimpold
178926dc19
Merge pull request #6154 from micmac1/18.06-bump-libxml2
libxml2: revision bump to force clean build
2018-05-30 21:53:13 +02:00
Sebastian Kemper
30d5e97fea libxml2: revision bump to force clean build
Commit dcd68100c23f980a7bbd1d7d9567a315ee584bdf fixed the zlib pkgconfig
file. But libxml2/host is stuck in the compile phase on the build bots.
Bumping the revision will force a clean build.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-05-30 20:27:59 +02:00
Florian Eckert
cd5fd3883e net/mwan3: update version to 2.6.17
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit acf7278fb8)
2018-05-30 17:38:36 +03:00
Florian Eckert
4bb6f8fff3 net/mwan3: fix update on connected ip networks
If an interface is not tracked by mwan3 or enabled and this interface is
setup by netifd, then the connected ipset is not update by mwan3.
To fix this also call connected ipset update code even if the interface
is not tracked or enabled by mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 7ea690ea3c)
2018-05-30 17:38:28 +03:00
Hannu Nyman
619474a15e
Merge pull request #6147 from EricLuehrsen/openwrt-18.06
[openwrt-18.06] unbound: provide transparent defaults with documentation
2018-05-29 08:06:11 +03:00