Commit graph

3822 commits

Author SHA1 Message Date
Karl Palsson
13a4dcd614 net/mosquitto: bump to 1.5.5
Security and bug fix.  Full changelog available at: https://mosquitto.org/ChangeLog.txt

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-12-17 10:55:34 +00:00
Daniel F. Dickinson
bb1b12733e nut: Backport fixes from master
Backport and squash the following commits from master:

  5790053eb nut: Add missing conffiles
  ceff68837 nut: Reorganize nut-server to clarify nut-driver
  f6a2a97d2 nut: Use 'real' procd init for nut-monitor
  918a62f91 nut: Make FSD really work
  a2f64b3ba nut: Reduce user error with POWERDOWNFLAG
  461393810 nut: Use quotes around filenames
  1b6dbe7a7 nut: Remove duplicate/extraneous lines
  0a49d0ffb nut: Fix checking for path before it exists
  3b5a8eee8 nut: Various startup fixes for monitor and server
  44e57d4bd nut: Fix variables for NUT drivers
  36fd59dc7 nut: Fix extraneous config_get
  192b0f164 nut: Fix a typo in setting a driver parameter
  f48b060fa nut: Fix upsd runs as root

And bump PKG_RELEASE

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-12-11 07:19:15 -05:00
Karl Palsson
890c302e1a net/mosquitto: support more acl plugin options
Adds support for acl_plugin, and acl_opt_* options.
acl_opt_* requires some care as it relies on the internal behaviour of
cfg_load setting environment variables in a certain form.  However,
given that _all_ of the cfg_load infrastructure relies on that, we can
be pretty sure that it won't change in a way that will hurt us.

Originally reported as: https://github.com/openwrt/packages/pull/7434

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-11-27 16:54:37 +00:00
champtar
469bcb5ea1
Merge pull request #7481 from padre-lacroix/darkstat-18.06
darkstat: [18.06] procd init script and enabling additional parameters
2018-11-26 19:57:01 -05:00
Jean-Michel Lacroix
8643915bbd darkstat: [18.06] procd init script and enabling additional parameters
This is the same change as the one on master
This is to change the init script to a procd init script
This also enable some additional parameters in the binary that
were present but not enabled:
The export file (option export_file)
The import file (option import_file)
The daylog (option daylog_file)
These are disabled by default.  Also, the option to run as a daemon
is removed, as not compatible with procd.

There is no change in the binary.

Signed-off-by: Jean-Michel Lacroix <lacroix@lepine-lacroix.info>
2018-11-26 18:12:14 -05:00
Florian Eckert
f1209a6eb8 net/mwan3: fix NDP on ipv6 for ra services
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit b6249f1781)
2018-11-20 14:07:05 -02:00
Magnus Kroken
b6f6df1d77 strongswan: backport upstream fixes for CVEs in gmp plugin
This fixes:
* CVE-2018-16151
* CVE-2018-16152
* CVE-2018-17540

Details:
https://strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html
https://strongswan.org/blog/2018/10/01/strongswan-vulnerability-(cve-2018-17540).html

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2018-11-19 21:58:23 +01:00
Hannu Nyman
f09f0f1c5b
Merge pull request #6932 from chris5560/radicale_18.06
radicale: [18.06] add extra command "export_storage" to init script
2018-11-11 10:52:53 +02:00
Dirk Brenken
74fc2449e4
adblock: fix adguard source
* fix regex for adguard blocklist source

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ff139131a7)
2018-11-10 17:50:19 +01:00
Karl Palsson
1ec36271be net/mosquitto: bump to 1.5.4
Security and bugfix release.  Full release notes available at:
https://mosquitto.org/blog/2018/11/version-154-released/

Security:
* client certificates not validated for websockets listeners.

Bugfixes:
* wills with disconnected clients better handled
* bridge restart_timeout properly observed

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-11-09 10:26:02 +00:00
Philip Prindeville
7b85f3c376 isc-dhcp: drop .conf suffix on dhcrelay config file
Resolves issue #7235

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit b0e73634f7)
2018-10-31 09:35:21 -06:00
Hannu Nyman
971efb45af
Merge pull request #7160 from EricLuehrsen/o1806_ub_181
[openwrt-18.06] unbound: update to 1.8.1
2018-10-10 20:29:22 +03:00
Pacien TRAN-GIRARD
58dbd3fda4 tinc: update to 1.0.35
Critical security update for:
* CVE-2018-16737,
* CVE-2018-16738,
* CVE-2018-16758

Announcement:
https://www.tinc-vpn.org/pipermail/tinc/2018-October/005311.html

Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
2018-10-09 23:45:35 +02:00
Eric Luehrsen
f3bc02155e unbound: update to 1.8.1
bug fixes for memory leaks
bug fixes for DNS over TLS

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-10-08 21:21:13 -04:00
Ted Hess
482d94bf47 iotivity, i2pd, domoticz: Bump PKG_RELEASE to force re-build with Boost upgrade to 1.68
Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-10-04 15:59:43 -04:00
Karl Palsson
d7980aceb2 mosquitto: bump to 1.5.3
Full changelog at https://github.com/eclipse/mosquitto/blob/v1.5.3/ChangeLog.txt

Primary change:
CVE fix for CVE-2018-12543 - prevent crash on topics that begin with $
but are not $SYS

Selected other fixes relevant to OpenWrt since 1.5.1:
- Fix retained messages not sent by bridges on outgoing topics at the first
  connection. Closes #701.
- Fix duplicate clients being added to by_id hash before the old client was
  removed. Closes #645.
- Fix excessive CPU usage when the number of sockets exceeds the system limit.
  Closes #948.
- Fix for bridge connections when using WITH_ADNS=yes.
- Fix round_robin false behaviour. Closes #481.
- Fix segfault on HUP when bridges and security options are configured.
  Closes #965.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-09-27 11:48:36 +00:00
Jo-Philipp Wich
cea8bebc6f
Merge pull request #7084 from brianjmurrell/add-foolsm-to-18.06
foolsm: Add package foolsm
2018-09-25 16:25:16 +02:00
Rob Mosher
c58367d4ff cshark: update to latest git HEAD
This fixes GCC8 compile due to buffer overrun

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>
(cherry picked from commit e3144f00a3)
2018-09-24 08:57:08 +02:00
Hans Dedecker
e70b4775d3 strongswan: refresh patches
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(cherry picked from commit 3bc3949e28)
2018-09-24 08:49:41 +02:00
Hans Dedecker
88715598b1 strongswan: fix OpenWrt hotplug script handling
Commit 6cd8fcabe added ipsec hotplug script support by calling "exec
/sbin/hotplug-call ipsec".
Using the exec call breaks the insertion of iptables rules by the _updown.in
script as hotplug-call just replaces the current shell meaning the commands
following exec do not run since the shell is replaced and as a result lead to
connectivity issues.
Fix this by removing the exec command in front of /sbin/hotplug-call.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(cherry picked from commit d0ac611bf0)
2018-09-24 08:49:40 +02:00
Florian Eckert
1f4c93972e strongswan: add openwrt hotplug script handling
Ipsec user script (/etc/ipsec.user) now get called indirectly by openwrt
"/sbin/hotplug-call". So other packages could also install their scripts
in "/etc/hotplug.d/ipsec".

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6cd8fcabe6)
2018-09-24 08:49:40 +02:00
Sebastian Kemper
c340159a92 strongswan: include nls.mk for mysql plugin
ibmariadb 10.2 needs to be linked in together with iconv.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 7a0aebbff2)
2018-09-24 08:49:40 +02:00
Hans Dedecker
474d9a0a15 net-snmp: fix inbound firewall rule support
Commit ae5ee6ba6c added support for inbound
firewall rule support but some corner cases were not covered.

In case net-snmp is started and the network interface is already up
the procd firewall rule is created but not applied by fw3 as
service_started calling procd_set_config_changed firewall was missing.

When stopping net-snmp clean up the net-snmp inbound firewall rules in
iptables by calling procd_set_config_changed firewall in stop_service
which will trigger fw3 to remove the inbound firewall rules.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
(cherry picked from commit 0bd19db049)
2018-09-24 08:47:43 +02:00
Brian J. Murrell
1bdddaefcd foolsm: Add package foolsm
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit 5cff94399d)
2018-09-21 07:52:47 -04:00
Miroslav Lichvar
1377bc60f0 chrony: fix configuration of IPv6 client access
Fix the init script to allow access from IPv6 subnets of the interface
specified in allow section in /etc/config/chrony.

Fixes issue #7039.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2018-09-17 17:44:18 +02:00
Dirk Brenken
23bb744ff3
adblock: bugfix 3.5.5v2
* fix uci wrapper calls
* fix link in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit cd3f925210)
2018-09-05 17:54:26 +02:00
Dirk Brenken
e8813bb561
adblock: update 3.5.5
* accept only ascii aka punycode chars in blocklists to prevent possible
dns backend warnings
* fix cornercase issues in json parsing (backend & frontend)
* slightly optimize tld compression performance
* refine logging
* use uci wrapper where possible
* change indentation from spaces to tabs (saves 8kb)
* add experimental youtube blocklist source

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4987f066f9)
2018-09-04 21:41:09 +02:00
Christian Schoenebeck
c7e97bf2b0 radicale[18.06]: add extra command "export_storage" to init script
add extra command "export_storage" to export data for use with Radicale 2.x.x
remove myself as PKG_MAINTAINER

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2018-09-02 16:59:20 +02:00
Ted Hess
6680ce8650 socat: Fix CRDLY, TABDLY and CSIZE shifts for PowerPC
Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-08-30 15:07:20 -04:00
Toke Høiland-Jørgensen
09f9947f83 sqm-scripts: Bump to v1.2.4
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-08-28 12:14:41 +02:00
Karl Palsson
c696cc4600 net/mosquitto: update to 1.5.1
Bugfix release.  Full changelog at:
https://mosquitto.org/blog/2018/08/version-151-released/

Of most interest to OpenWrt:
* Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined.
* Fix IPv6 addresses not being able to be used as bridge addresses.
* Fix problem opening listeners on Pi caused by unsigned char being default.
* Fix segfault on startup if bridge CA certificates could not be read.
* Fix possible endian issue when reading the memory_limit option.
* library and client bugfixes including: https://github.com/openwrt/packages/issues/6765

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-08-20 09:30:12 +00:00
Eric Luehrsen
45ffcb3d6a unbound: drop odhcpd leases with wrong field count
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry pick commit: 59617f076d)
2018-08-17 23:24:16 -04:00
Dirk Brenken
1e5416bbd1
travelmate: update 1.2.2
* fix restart behaviour after successful connection
* fix labeling of faulty stations
* optimize re-connect behaviour at locations where multiple uplinks with
the same SSID are in range
* use procd pidfile handling
* refine logging
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bc78ad8200)
2018-08-11 07:49:33 +02:00
Jo-Philipp Wich
d7bea561dc usbip: remove nonshared flag (#6681)
Since https://git.openwrt.org/d0e0b7049f88774e67c3d5ad6b573f7070e5f900,
OpenWrt SDKs ship the appropriate sources for building usbip userspace
packages, so special nonshared handling is not required anymore.

Sucessfully tested by compiling usbip utilities for various architectures
using self built SDKs after applying the change linked above.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit eded6ed7cf)
2018-08-05 12:39:45 +02:00
Philip Prindeville
bae476afe5 isc-dhcp: write resolv.conf per network & dhcp settings
The internal nameservers and the DHCP default domain should be
squirted into /tmp/resolv.conf.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit db6adb616d)
2018-08-02 22:38:05 -06:00
Daniel F. Dickinson
af0ad2ce0d nut: Fix for nut-upsmon without nut-server
nut-monitor failed to create required dir /var/etc/nut, as
well as failing to set appropriate user on the directory and
conf files.  Fixing this closes
https://github.com/openwrt/packages/issues/6644

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
(cherry picked from commit 98fdf16ecb)
2018-08-02 19:27:33 +03:00
Daniel F. Dickinson
6a5a257fc0 nut: Update my email
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
(cherry picked from commit b4fe49d2b2)
2018-08-02 19:27:33 +03:00
Eneas U de Queiroz
41a9bf21f0 nut: Add PKG_FIXUP:=autoreconf
We need to force this since a *.m4 file is patched.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 6543859dab)
2018-08-02 19:27:33 +03:00
Eneas U de Queiroz
6576f7be92 nut: added compatibility with openssl-1.1
Also added a fix in a check for empty string.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 1a9a7cc280)
2018-08-02 19:27:33 +03:00
Christian Schoenebeck
edf11aaaee ddns-scripts[18.06]: bump to version 2.7.8-1
- synchronize with "master" incl. add service FreeDNS.42.pl
- remove Cloudflare v1 protocol support #6084 #6519
- fix goip.de update url #6448 #6519
- change Cloudflare v4 to read "Proxied" from current setting at Cloudflare Dashboard #5097 #6364 #6505
- fix replace of password inside logfile #6568
- remove myself as PKG_MAINTAINER

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2018-08-01 09:59:02 +02:00
Jo-Philipp Wich
cb54af8d0d privoxy: fix uci configuration parsing after upstream OpenWrt changes
OpenWrt changed the way the uci shell parsing functions deal with list
configuration items.

This change broke the generation of the privoxy runtime configuration
because no callbacks were emitted anymore.

Fix the problem by defining a list_cb() that simply calls the existing
option_cb() to deal with list item values.

Ref: c9c0fc28a9 ("base-files: fix UCI config parsing and callback handling")
Ref: https://forum.lede-project.org/t/openwrt-snapshot-privoxy-error/15919
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 3113d62393)
2018-08-01 09:29:55 +02:00
Eneas U de Queiroz
327a03e8f0 usbip: adapt package to new kernel/libudev
The sources for usbip are within the kernel.  A patch that was included
with the package, which changed the old signal name SIGCLD to the new
one, SIGCHLD, was merged upstream.  However, different targets use
different kernel versions.  Current version 4.14 and 4.9 are fine, but
older versions do not have the patch applied.  So, I used
-DSIGCLD=SIGCHLD to please both worlds.

libudev-fbsd currently used by openwrt does not implement the
udev_device_get_devpath function.  eudev's implementation of libudev
sets it as (src/libudev/libudev-device.c):
udev_device->devpath = udev_device->syspath + strlen("/sys");
I used a command-line define to use the same logic, as it works with
new and old versions of the kernel--the use of ..devpath is quite
recent.

I also linked with libbsd, when using glibc.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 633fe0dbdf)
2018-07-31 21:29:55 +02:00
Eneas U de Queiroz
8f6157048f usbip: Remove obsolete patches
These patches are obsolete and are never applied.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry picked from commit 0baaabb640)
2018-07-31 21:29:55 +02:00
Hannu Nyman
64ccbc88fb
Merge pull request #6617 from dibdot/travelmate-18.06
travelmate[18.06]: backport release 1.2.1 to 18.06 branch
2018-07-30 23:07:09 +03:00
Hannu Nyman
4554f1c37c
Merge pull request #6616 from dibdot/adblock-18.06
adblock[18.06]: backport release 3.5.4 to 18.06 branch
2018-07-30 23:06:58 +03:00
W. Michael Petullo
8bf5fc17db krb5: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 8256b96743)
2018-07-30 16:11:35 +02:00
W. Michael Petullo
59199e2534 krb5: set replay cache directory to /tmp
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 536d555456)
2018-07-30 16:11:34 +02:00
Andy Walsh
14340062e3 krb5: update depends, adapt FS#1310
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit ebc41d5759)
2018-07-30 16:11:34 +02:00
Dirk Brenken
8a19a18c45 travelmate[18.06]: backport release 1.2.1 to 18.06 branch
Tested with latest 18.06 branch (OpenWrt 18.06-SNAPSHOT,
r7175+5-ca0c649a38)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-07-30 13:58:40 +02:00
Dirk Brenken
5e41db3de3 adblock[18.06]: backport release 3.5.4 to 18.06 branch
Tested with latest 18.06 branch (OpenWrt 18.06-SNAPSHOT,
r7175+5-ca0c649a38)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-07-30 13:51:06 +02:00