Commit graph

16896 commits

Author SHA1 Message Date
Rosen Penev
a6ccc44c5d
Merge pull request #14213 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix - config update
2020-12-14 13:37:32 -08:00
Stan Grishin
dc015ffe27 simple-adblock: bugfix - config update
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-12-12 15:58:36 -06:00
Stan Grishin
9ca6bdaa05 https-dns-proxy: update binary to 2020-08-21
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-12-09 23:33:08 -10:00
Rosen Penev
13d999882b
zerotier: add patch to avoid including sys/auxv.h
It seems it's not needed and not supported under uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e632e189fd)
2020-12-09 17:14:22 -08:00
Jitao Lu
061f81ff6d miniupnpd: Don't override ipv6_listening_ip
Fixes: https://github.com/openwrt/packages/issues/14145
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit c89a1f3e8b)
2020-12-08 23:22:46 -08:00
Hannu Nyman
2974079d3d nano: update to 5.4
Update nano editor to version 5.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b7d8a0a028)
2020-12-04 16:32:39 +02:00
Jitao Lu
e82884cafb
miniupnpd: Pass ipv6 addr to ipv6_listening_ip
Unlike ipv4, this option is supposed to be an IP address, otherwise, an
error occurs on startup:

    can't parse "br-lan" as valid IPv6 listening address

Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit 7077fd8c79)
2020-12-03 17:58:39 -08:00
Rosen Penev
33bd6b6afa
Merge pull request #14115 from mwarning/zt
zerotier: update to 1.6.2
2020-12-02 15:50:32 -08:00
Moritz Warning
ace81238c1 zerotier: update to 1.6.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2020-12-02 19:01:33 +01:00
Chen Minqiang
808a67b35d
net/miniupnpd: ext_ip_reserved_ignore support
This add an option to ignore ext_ip reserved
Enable this option in config by default.

Fixes: #13773

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit b76aa99194)
2020-11-29 17:26:32 -08:00
Marco Martins
1adf9d9794
miniupnpd: Added chain rule to filter table so udp stun incoming connections rules works
Signed-off-by: Marco Martins <marcomartins86@gmail.com>
(cherry picked from commit 773b87977e)
2020-11-29 17:26:32 -08:00
Rosen Penev
4ed18c40e6
miniupnpd: update to 2.2.0
Replace daemon patch with upstream solution.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4d824243e6)
2020-11-29 17:26:30 -08:00
Chen Minqiang
16cceb118a
net/miniupnpd: check by /etc/init.d/miniupnpd running
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit 67b4871322)
2020-11-29 17:25:38 -08:00
Rosen Penev
93d44081c3
miniupnpd: default to IGDv1
It seems even modern stuff doesn't support v2 correctly. The miniupnp
suite does but other stacks seem to lack support. Default to v1 to
avoid the headache.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7891124d6c)
2020-11-29 17:25:06 -08:00
Dirk Brenken
49fb6862d2
adblock: reporting fixes/tweaks
* prevents the creation of an invalid json structure
* add more space to the domain column on cli
* removed test.sh script from package

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-29 13:51:48 +01:00
Rosen Penev
613d4e19c6
Merge pull request #14029 from aaronjg/xtables-addons-fix
xtables-addons: fix compilation error
2020-11-25 21:17:20 -08:00
Aaron Goodman
12b0f8c1ab xtables-addons: patch for 4.14 route_me_harder fix
backport xtables-addons: 0ab324790015a6396be5678b6dffeeaa1cd28299

build: adjust for changed signature of ip_route_me_harder

(Cf. commit 46d6c5ae953cc0be38efd0e469284df7c4328cf8 in Linux.)

Original author: Jan Engelhardt <jengelh@inai.de>

Backported by: Aaron Goodman <aaronjg@stanford.edu>
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-11-25 19:33:34 -05:00
Rosen Penev
a453361e7f
Merge pull request #13943 from jjm2473/openwrt-19.07-fix-libtirpc-clang
libs/libtirpc: fix host compile with clang 12.0.0
2020-11-25 14:32:15 -08:00
Rosen Penev
fb9077a72a
Merge pull request #13983 from rs/nextdns-1.9.4-openwrt-19.07
[19.07] nextdns: Update to version 1.9.4
2020-11-23 17:37:28 -08:00
Olivier Poitrey
591601446b nextdns: Update to version 1.9.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-11-23 22:15:03 +00:00
Rosen Penev
889c46a79e
Merge pull request #13981 from rs/nextdns-1.9.3-openwrt-19.07
[19.07] nextdns: Update to version 1.9.3
2020-11-23 13:50:22 -08:00
Olivier Poitrey
c65dc2c45d nextdns: Update to version 1.9.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-11-23 17:01:54 +00:00
Rosen Penev
446bec6991
Merge pull request #13937 from jjm2473/openwrt-19.07-fix-vim-clang
vim: fix host compile with clang 12.0.0
2020-11-18 13:16:41 -08:00
Dirk Brenken
fb76302091
travelmate: refine scan interface determination
* preferably use the logical wlan interface for scanning
  (as already done in travelmate 2.0)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-18 20:21:06 +01:00
Liangbin Lian
c68be0b846 libs/libtirpc: fix host compile with clang 12.0.0
1.clang ld not supports symvers
2.macos has not mutex_lock, use pthread_mutex_lock instead
3.macos not define SO_PEERCRED, use LOCAL_PEERCRED instead

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 1a9323064c)
2020-11-19 00:28:29 +08:00
Liangbin Lian
1f5670bdff vim: fix host compile with clang 12.0.0
fix autoconf script using 'exit' without including 'stdlib.h'

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2020-11-18 22:52:04 +08:00
Rosen Penev
b77fabe014
Merge pull request #13911 from ja-pa/libexif-sec-19.07
[OpenWrt 19.07] libexif: update to 0.6.22
2020-11-14 20:23:11 -08:00
W. Michael Petullo
e74565a0bb
libexif: update to 0.6.22
Aside from updating the package, this modifies the Makefile to pull the
sources from GitHub rather than SourceForge. The exif project recently
moved to GitHub.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 818f2d9dff)

Fixes:
CVE-2018-20030, CVE-2020-13114, CVE-2020-13113, CVE-2020-13112, CVE-2020-0093, CVE-2019-9278, CVE-2020-12767, CVE-2016-6328, CVE-2017-7544

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-11-13 10:49:42 +01:00
Florian Eckert
68eb1943cc mwan3: add missing dependency
Add missing rpcd dependency.

Fixes #13896

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-11 09:40:01 +01:00
Brian J. Murrell
b038148cc0 mwan3: Remove fork/exec for head
Instead, let sed do the work since it's already being used.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[ update PKG_VERSION ]
2020-11-11 09:39:46 +01:00
Christian Lachner
c5d61945fc haproxy: Update HAProxy to v2.0.19
- Update haproxy download URL and hash
- Fix uclibc patch offset

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-11-08 17:47:02 +02:00
Michael Heimpold
5b3870890d php7: update to 7.2.34
This fixes:
  - CVE-2020-7069
  - CVE-2020-7070

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-11-07 21:44:02 +01:00
Rosen Penev
2bd627ec7d
Merge pull request #13828 from jgora/jgora
xtables-addons: Support IPTV Timeshift. Backport to openwrt-19.07 branch
2020-11-02 12:23:35 -08:00
Jose Olivera
d1d53a3acc xtables-addons: Support IPTV Timeshift
Solves Issue #10373 and PR #10428

Signed-off-by: Jose Olivera <oliverajeo@gmail.com>
(bumped PKG_RELEASE)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-02 10:00:51 +01:00
Josef Schlehofer
05efc24fd6
youtube-dl: update to version 2020.11.1.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 275817a694)
2020-11-02 00:35:49 +01:00
Josef Schlehofer
5db211c621
youtube-dl: update to version 2020.9.20
Release notes: https://github.com/ytdl-org/youtube-dl/releases/tag/2020.09.20

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d2b4c4e63e)
2020-11-02 00:35:43 +01:00
Josef Schlehofer
7b1ac92830
youtube-dl: update to version 2020.9.14
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cc6f4ab7eb)
2020-11-02 00:35:37 +01:00
Josef Schlehofer
3a61338ab4
bind: update to version 9.16.8
- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d442033941)
2020-11-02 00:35:03 +01:00
Stijn Tintel
2331de4ec7
libftdi1: disable building documentation
This fixes the following build failure:

[ 66%] Generating ../doc/xml/ftdi_8c.xml
warning: Tag 'PERL_PATH' at line 2083 of file 'Doxyfile' has become obsolete.
         To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
warning: Tag 'MSCGEN_PATH' at line 2105 of file 'Doxyfile' has become obsolete.
         To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
[ 72%] Generating ftdi1_doc.i
Traceback (most recent call last):
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 457, in <module>
    main()
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 453, in main
    convert(args[0], args[1], not options.func_def, options.quiet)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 430, in convert
    p = Doxy2SWIG(input, include_function_definition, quiet)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 72, in __init__
    f = my_open_read(src)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 44, in my_open_read
    return open(source)
FileNotFoundError: [Errno 2] No such file or directory: '/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/doc/xml/ftdi_8c.xml'

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c131843663)
2020-10-28 21:36:37 -07:00
Rosen Penev
73c7bcb639
libftdi1: Fix pkgconfig paths properly
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0dac4b74ca)
2020-10-28 21:36:23 -07:00
Rosen Penev
82208ceca8
libftdi1: Apply pkgconfig fixes to libftdipp1 as well
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 762a0eeb79)
2020-10-28 21:36:15 -07:00
Rosen Penev
58b6d0ee5a
libftdi1: Partially add back InstallDev
The pkgconfig file needs changing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 180134d04c)
2020-10-28 21:35:59 -07:00
Rosen Penev
55e7acc25e
libftdi1: Remove faulty change from last patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 79168cc259)
2020-10-28 21:35:42 -07:00
Rosen Penev
45e7e13dc0
libftdi1: Don't build examples
Add PKG_BUILD_PARALLEL for faster compilation.

Replace InstallDev section with CMAKE_INSTALL

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2e12e13a3b)
2020-10-28 21:35:28 -07:00
Rosen Penev
089699b1ee
tinyproxy: convert to procd
The path changed since 274506803a

Fixed.

Also took the time to convert to procd.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c14ba8bd77)
2020-10-29 01:51:52 +01:00
Rosen Penev
39ce334617
tinyproxy: update to 1.10.0
Added license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Refreshed patches.

Updated URLs.

Ran init script through shellcheck.

Fixes: CVE-2017-11747, CVE-2012-3505
Fixes: #13793

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 274506803a)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added fixed CVEs and Github Issue]
2020-10-29 01:49:24 +01:00
Olivier Poitrey
b07f752e79 nextdns: Update to version 1.8.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-26 20:45:25 +02:00
Mengyang Li
99e77a716b openconnect: allow specify --protocol from config
openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>
2020-10-25 21:45:31 +01:00
Dirk Brenken
37303e1f04
adblock: update 4.0.7-2
* switch all safesearch providers to dynamic ips (derived from cname)
* made the new safesearch approach compatible with bind-nslookup
* removed 3.x config compatibility code

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4b0d029bb5)
2020-10-23 21:14:44 +02:00
Dirk Brenken
5dbbb7ebf4
adblock: update 4.0.7
* fix aria2c download options
* fix report engine with empty domains
* fix safesearch ips of safe.duckduckgo.com (get ips dynamically)
* fix safesearch ips of safesearch.pixabay.com (get ips dynamically)
* add regional blocklist for italy
* shellcheck adjustments
* add test.sh for CI testing

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d36fd57662)
2020-10-23 21:14:24 +02:00