Commit graph

11460 commits

Author SHA1 Message Date
Dirk Brenken
309a1fb200
Merge pull request #6829 from zhaojh329/libuwsc
libuwsc: Update to 2.0.5
2018-08-22 16:27:35 +02:00
Toke Høiland-Jørgensen
56b6d49ce4 acme: Fix bugs from upstream's change to socat
The upstream acme.sh package changed to using socat instead of netcat;
update the dependencies to reflect this, and pass --listen-v6 when running
in standalone mode (since socat only listens on IPv4 by default).

Also add a missing cleanup call when certificate issuance fails.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-08-22 16:03:15 +02:00
Wojciech Dubowik
10b2786245 linuxptp: Upgrade to v2.0
Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>
2018-08-22 13:03:06 +02:00
Nikos Mavrogiannopoulos
2a7e216188
Merge pull request #6838 from neheb/patch-34
gnutls: Add PKG_CPE_ID for proper CVE tracking
2018-08-22 07:42:02 +02:00
Sebastian Kemper
a6761ac20b mariadb: bump to 10.2.17
From Release Notes:

 - New variable innodb_log_optimize_ddl for avoiding delay due to page flushing and allowing concurrent backup
 - InnoDB updated to 5.7.23
 - ALTER TABLE fixes:
    MDEV-14637 - Fix hang due to DDL with FOREIGN KEY or persistent statistics
    MDEV-15953 - Alter InnoDB Partitioned Table Moves Files (which were originally not in the datadir) to the datadir
    MDEV-16515 - InnoDB: Failing assertion: ++retries < 10000 in file dict0dict.cc line 2737
    MDEV-16809 - Allow full redo logging for ALTER TABLE
 - Temporary tables: MDEV-16713 - InnoDB hang with repeating log entry
 - indexed virtual columns: MDEV-15855 - Deadlock between purge thread and DDL statement
 - locking: MDEV-16664 - Change the default to innodb_lock_schedule_algorithm=fcfs
 - Galera: MDEV-15822 - WSREP: BF lock wait long for trx
 - Fixes for the following security vulnerabilities:
    CVE-2018-3060
    CVE-2018-3064
    CVE-2018-3063
    CVE-2018-3058
    CVE-2018-3066

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-08-21 23:19:29 +02:00
Rosen Penev
b7870ea711 libxml2: Fix CVE-2018-14404
Embarrasingly, I missed this one last time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 13:59:56 -07:00
Rosen Penev
9c43fd81d5
gnutls: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 12:47:25 -07:00
Rosen Penev
3f20518a34
giflib: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 12:44:24 -07:00
Yousong Zhou
1b485efbcb openvswitch: bump to version 2.10.0
- Rebased the python target/host separation patch
 - Dropped the now-in-upstream openssl-1.1 compat patch
 - Added a patch to disable tests/

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-21 13:51:37 +00:00
Jo-Philipp Wich
e3edf8fd01
Merge pull request #6819 from tru7/emailrelay
emailrelay: add some runtime options
2018-08-21 15:33:19 +02:00
Jianhui Zhao
826e9366b0 libuwsc: Update to 2.0.5
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
2018-08-21 18:11:28 +08:00
Hannu Nyman
cbd9cc2b28
Merge pull request #6679 from zhouruixi/nginx_dav_master
nginx: Add missing WebDAV methods support (PROPFIND & OPTIONS)
2018-08-21 11:50:06 +03:00
Rosen Penev
456ae2f541
freetype: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:40:57 -07:00
Rosen Penev
20fe720732 flac: Fix CVE-2017-6888
Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 21:38:07 -07:00
Rosen Penev
4c59ee99e9 confuse: Update to 3.2.2
Fix for CVE-2018-14447

God rid of pointless autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-20 20:59:34 -07:00
Carlos Miguel Ferreira
e0e80c1d2c
boost: Package Version Update -> 1.68.0
This package update provides one new library:
 - YAP: An expression template library for C++14 and later, from Zach Laine [1].

More info can be found at the usual place [2].

[1] : https://www.boost.org/libs/yap/
[2] : https://www.boost.org/users/history/version_1_68_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
2018-08-21 02:13:59 +01:00
Ruixi Zhou
fa257720ab nginx: Add missing WebDAV methods support (PROPFIND & OPTIONS)
Nginx provide WebDAV methods PUT, DELETE, MKCOL, COPY, and MOVE with
http_dav_module. But most WebDAV clients that require additional WebDAV
methods (PROPFIND & OPTIONS) to operate. Add missing methods support
with Arutyunyan Roman (arutyunyan.roman@gmail.com)'s nginx-dav-ext-module.
(see: http://nginx.org/en/docs/http/ngx_http_dav_module.html
https://github.com/arut/nginx-dav-ext-module)

Example config:
	location / {
		dav_methods PUT DELETE MKCOL COPY MOVE;
		dav_ext_methods PROPFIND OPTIONS;

		root /var/root/;
	}

Signed-off-by: Ruixi Zhou <zhouruixi@gmail.com>
2018-08-21 08:14:44 +08:00
Othmar Truniger
432cc99d9a emailrelay: add some runtime options
Signed-off-by: Othmar Truniger <github@truniger.ch>
2018-08-20 19:29:41 +02:00
Hannu Nyman
d9749c257b
Merge pull request #6602 from neheb/patch-17
evtest: Switch to tarballs
2018-08-20 20:08:43 +03:00
Dirk Brenken
83c225812b
Merge pull request #6668 from cotequeiroz/emailrelay_pam
emailrelay: avoind linking with -lpam
2018-08-20 18:14:56 +02:00
Dirk Brenken
31a3852044
Merge pull request #6747 from mark0n/fix-curl-variable
ddns-scripts: Fix problems detecting if curl is SSL capable
2018-08-20 18:04:16 +02:00
Martin Konrad
c9b5b02200 ddns-scripts_route53-v1: Fix problems detecting curl
Ensure cURL is installed and has SSL support. This fixes
issue 6744.

Signed-off-by: Martin Konrad <info@martin-konrad.net>
2018-08-20 11:30:37 -04:00
Hannu Nyman
fee4bb8e64
Merge pull request #6789 from Ansuel/fixuwsgi
uwsgi-cgi: improve luci support
2018-08-20 18:04:29 +03:00
Hannu Nyman
70e991b394
Merge pull request #6788 from Ansuel/fixnginx
nginx: improve luci config
2018-08-20 18:04:05 +03:00
Ansuel Smith
c94a9968f7
uwsgi-cgi: improve luci support
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-08-20 14:56:26 +02:00
Ansuel Smith
0f21ab6391
nginx: improve luci config
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-08-20 14:55:53 +02:00
Karl Palsson
97869b7a25 net/mosquitto: update to 1.5.1
Bugfix release.  Full changelog at:
https://mosquitto.org/blog/2018/08/version-151-released/

Of most interest to OpenWrt:
* Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined.
* Fix IPv6 addresses not being able to be used as bridge addresses.
* Fix problem opening listeners on Pi caused by unsigned char being default.
* Fix segfault on startup if bridge CA certificates could not be read.
* Fix possible endian issue when reading the memory_limit option.
* library and client bugfixes including: https://github.com/openwrt/packages/issues/6765

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-08-20 10:47:44 +00:00
Dirk Brenken
5b5e20dfc2
Merge pull request #6810 from Andy2244/rpcbind-update
rpcbind: update to 1.2.5
2018-08-20 10:17:57 +02:00
Dirk Brenken
d872a0dbc4
Merge pull request #6784 from neheb/patch-21
python-pyasn1: Update to 0.4.4
2018-08-20 09:49:01 +02:00
Dirk Brenken
f6e18184a1
Merge pull request #6785 from neheb/patch-22
python-urllib3: Update to 1.2.3
2018-08-20 09:25:32 +02:00
Dirk Brenken
984d9dbfbd
Merge pull request #6813 from neheb/sudo
sudo: Update to 1.8.24
2018-08-20 09:24:07 +02:00
Rosen Penev
b2427ca1cf python-urllib3: Update to 1.23
Use a better URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 20:47:21 -07:00
Yousong Zhou
9400257639 qemu: tighten up CONFIGURE_ARGS spec
This is more for readability, no functional change

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-20 02:43:56 +00:00
Yousong Zhou
41c3a2e0a5 qemu: bump to version 3.0.0
Also switch to domain download.qemu.org and .xz files

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-08-20 02:38:56 +00:00
Rosen Penev
683d833150
ffmpeg: Add CPE ID for proper CVE tracking
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:19:32 -07:00
Rosen Penev
61cdf7b4d6
avahi: Add CPE ID to track CVEs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 15:05:41 -07:00
Peter Wagner
8f8fa47234 ntpd: update to 4.2.8p12
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-08-19 23:38:02 +02:00
Rosen Penev
8ce9f30c42 sudo: Update to 1.8.24
Changed URLs to HTTPS

Rearranged Makefile for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-19 14:21:33 -07:00
Philip Prindeville
8d710085da
Merge pull request #6812 from pprindeville/perl-cgi-4.40
perl-cgi: Update to 4.40
2018-08-19 14:51:36 -06:00
Philip Prindeville
c4dbc0147f perl-cgi: Update to 4.40
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2018-08-19 14:26:15 -06:00
Daniel F. Dickinson
2b7531ad9f doveco: pigeonhole: Use stock dovecot dir locations
We move dovecot libexec binaries and modules (including the package
pigeonhole) to their standard locations.  This is okay for libexec
because it was added to core prior to 17.04 release.  Moving the
binaries normally in libexec eliminates the reason the modules were in an
unusual directory, which is that there were conflicts with
libexec binaries that were in lib, which the modules normally use.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:38 -04:00
Daniel F. Dickinson
f0fb968346 dovecot: Fix managesieve-login needs libdovecot-login
When trying to use managesieve my MUA complained sieve wasn't supported.
On investigation dovecot logs the following could be seen:

    Aug 16 00:28:44 managesieve-login: Fatal: master:
      service(managesieve-login): child 1430 returned error 127
    Aug 16 00:31:32 managesieve-login: Error: Error loading shared
      library libdovecot-login.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error loading
      shared library libdovecot.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error relocating
      /usr/lib/dovecot/managesieve-login: net_ip2addr: symbol not found

The issue (verified with readelf on non-working build and build with my fix)
is that there is no RPATH information in the pigeonhole binaries (like
managesieve-login).

The dovecot-config that is 'installed' in the staging dir
assumes that plugins will be built on the same host as the installed files.
The 'installed' dovecot-config (partial) looks like:

LIBDOVECOT='-L/usr/lib/dovecot -ldovecot'
LIBDOVECOT_LOGIN='-ldovecot-login -L/home/user/Build/openwrt/openwrt-ath79/staging_dir/target-mips_24kc_musl/usr/lib -lssl -lcrypto'
LIBDOVECOT_SQL=-ldovecot-sql
LIBDOVECOT_COMPRESS=-ldovecot-compression
LIBDOVECOT_LDA=-ldovecot-lda
LIBDOVECOT_STORAGE='-ldovecot-storage '
LIBDOVECOT_DSYNC=-ldovecot-dsync
LIBDOVECOT_LIBFTS=-ldovecot-fts

The solution I used was to modify dovecot-config to add the rpath to
DOVECOT_BINARY_LDFLAGS, and to replace references to host directories
with staging_dir directories.

This results in RPATH being added as it needs to be, and results in a working
version of dovecot+pigeonhole.

NB: I've also touched package version of pigeonhole as this change in dovecot
results in (needed) binary changes for pigeonhole.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:23 -04:00
Hannu Nyman
53a912201c
Merge pull request #6539 from neheb/patch-4
bluelog: Switch to GitHub tarball
2018-08-19 20:15:39 +03:00
Hannu Nyman
d580202e38
Merge pull request #6488 from neheb/patch-2
alpine: Update to 2.21.9999
2018-08-19 20:14:34 +03:00
Jiri Slachta
e3681cb107
Merge pull request #6780 from neheb/tiff
tiff: Fix remaining CVEs
2018-08-19 19:10:32 +02:00
champtar
be234c29b4
Merge pull request #6803 from neheb/monit
monit: Update to 5.25.2
2018-08-19 10:55:06 -04:00
champtar
67bc803ed9
Merge pull request #6802 from neheb/patch-30
htop: Minor adjustments
2018-08-19 10:51:11 -04:00
Andy Walsh
7a88e515d0 rpcbind: update to 1.2.5
* update to 1.2.5
* fix wrong URL
* adapt to bin/sbin from new version

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2018-08-19 16:36:03 +02:00
Rosen Penev
18283b444b monit: Update to 5.25.2
Added PKG_BUILD_PARALLEL to speed up compilation times.

Added PKG_CPE_ID for proper CVE tracking.

A few other cosmetic changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:54:11 -07:00
Rosen Penev
c0b9f73919 htop: Minor adjustments
Added PKG_CPE_ID for proper CVE tracking.

Fixed URLs. Changed to HTTPS as well.

Removed autoreconf as there is no patching being done.

PKG_BUILD_PARALLEL was enabled for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-18 21:33:25 -07:00