Commit graph

15424 commits

Author SHA1 Message Date
Rosen Penev
95b7c86794
libfizz: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0f209e988c)
2019-09-27 10:01:01 -07:00
Rosen Penev
db0248cf67
libfolly: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d28d9aa4dc)
2019-09-27 09:59:15 -07:00
Jan Pavlinec
a0d4cc9170
treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ceadbcbb64)
2019-09-26 19:36:27 -07:00
Jan Pavlinec
937b19ebb7
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Rosen Penev
e09985075e
libgd: Properly disable iconv support
HAVE_ICONV and HAVE_ICONV_H are two different headers that both need to
evaluate to false. Added the extra CONFIGURE_VARS.

This can be verified by passing -Werror=implicit-function-declaration

Added PKG_LICENSE_FILES

Updated homepage URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Jan Pavlinec
fac472e28a
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ad16f2a851)
2019-09-26 19:36:26 -07:00
Oever González
8671765883
samba4: remove double quotes for renice
The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.

The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.

Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from c45974d0a3)
2019-09-26 19:36:26 -07:00
Andy Walsh
cd597524d1
samba4: add python2 host dependency
* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from c02ef3ae7f)
2019-09-26 19:36:26 -07:00
Rosen Penev
d3db014eb1
samba4: Run init script through shellcheck
Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d03b88b5b0)
2019-09-26 19:36:26 -07:00
Andy Walsh
8a20820a9b
samba4: revert to 4.9.11
* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from 2f2a4bccd9)
2019-09-26 19:36:25 -07:00
Eneas U de Queiroz
8cfab80332
logrotate: move config option to menu
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from f6c9e2bacd)
2019-09-26 19:36:25 -07:00
Rosen Penev
14f80a7302
logrotate: Add ACL support
Various Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 788318625d)
2019-09-26 19:36:25 -07:00
Sven Eckelmann
1142f52078
treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from bbb1ea7345)
2019-09-26 19:36:25 -07:00
Florian Eckert
605383751e
keepalived: update version to 2.0.18
Update version to 2.0.18

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 333324f973)
2019-09-26 19:36:24 -07:00
Florian Eckert
05f4ae9250
keepalived: fix shellcheck warnings
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 7a207f87af)
2019-09-26 19:36:24 -07:00
Nikos Mavrogiannopoulos
4b3ddb1382
ocserv: updated to 0.12.4
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
(cherry-picked from cefb2f03e2)
2019-09-26 19:36:24 -07:00
Florian Eckert
6154afb3cf
stunnel: fix some shellcheck warnings
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 6713d1d771)
2019-09-26 19:36:24 -07:00
Florian Eckert
1a93b5512f
stunnel: update version to 5.55
Update version to 5.55

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from a17e90591c)
2019-09-26 19:36:23 -07:00
Sven Eckelmann
186dc60443
ap51-flash: upgrade package to latest release 2019.0
* improved Zyxel firmware detection
* introduced optional MAC address filtering
* added support for:

  - Plasma Cloud PA300
  - Plasma Cloud PA1200
  - Plasma Cloud PA2200

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from 22062b10c6)
2019-09-26 19:36:23 -07:00
Luiz Angelo Daros de Luca
8f2dccc568
hplip: bump to 3.19.6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry-picked from fdeb5f8171)
2019-09-26 19:36:23 -07:00
Rosen Penev
e02387b95e
geth: Update to 1.9.1
Remove Upstreamed patch.

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 03b1d7c4d4)
2019-09-26 19:36:23 -07:00
Rosen Penev
07f47d6ea5
jamvm: Add host build
Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2972cc98eb)
2019-09-26 19:36:22 -07:00
Rosen Penev
68124fc18a
classpath: Add jamvm/host build dependency
This is needed for compilation. A Java compiler is also needed but that
must be handled elsewhere.

Fixed up license information.

URLs to HTTPS.

Other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1862f908eb)
2019-09-26 19:36:22 -07:00
Rosen Penev
22abd241cf
libshout: Update to 2.4.3
Removed inactive maintainer.

Rearranged Makefile for consistency between packages.

Added --without-pic to avoid both -fPIC and -fpic.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 9bacdfa9a2)
2019-09-26 19:36:22 -07:00
Rosen Penev
7a28475b8b
libtasn1: Update to 4.14
Fixes CVE-2018-1000654

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8482407d7c)
2019-09-26 19:36:21 -07:00
Russell Senior
4e2e2ed8f8
patch: rename CVE-2019-13638 patch to mollify uscan
Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from 604102a865)
2019-09-26 19:36:21 -07:00
Russell Senior
89b362e22b
patch: apply upstream patch for CVE-2019-13638
GNU patch through 2.7.6 is vulnerable to OS shell command injection that
can be exploited by opening a crafted patch file that contains an ed style
diff payload with shell metacharacters. The ed editor does not need to be
present on the vulnerable system. This is different from CVE-2018-1000156.

https://nvd.nist.gov/vuln/detail/CVE-2019-13638

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from b82198ff47)
2019-09-26 19:36:21 -07:00
Russell Senior
d91bbb1971
tools/patch: apply upstream patch for CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in
certain cases other than input files. This affects inp.c and util.c.

https://nvd.nist.gov/vuln/detail/CVE-2019-13636

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from c8142f1ac1)
2019-09-26 19:36:21 -07:00
Rosen Penev
d084083e42
Merge pull request #10086 from adde88/openwrt-19.07
Openwrt 19.07
2019-09-26 13:32:03 -07:00
Andreas Nilsen
1e48632e08 hcxtools: Update to v5.2.2
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-09-26 19:47:29 +02:00
Andreas Nilsen
80002c1b99 hcxdumptool: Update to v5.2.2
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-09-26 19:47:08 +02:00
Karl Palsson
1f1444ed2c net/mosquitto: bump to 1.6.7
Fixes compatibility with newer libwebsockets versions.
Fixes performance issues with websockets
Fixes potential crash on config reload
Fixes CVEs: CVE-2019-11778 and CVE-2019-11779
Various MQTTv5 fixes.
Skips releases with critical regressions

Changelog for 1.6.7:
https://mosquitto.org/blog/2019/09/version-1-6-7-released/

Changelog for 1.6.5:
https://mosquitto.org/blog/2019/09/version-1-6-5-released/

Changelog for 1.6.6:
https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-09-25 16:13:23 +00:00
Hannu Nyman
83e7e3af8d
Merge pull request #10064 from stangri/19.07-simple-adblock
[19.07] simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
2019-09-25 19:13:00 +03:00
Hannu Nyman
55c6121536
Merge pull request #10072 from gladiac1337/haproxy-2.0.6-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.6
2019-09-25 19:11:40 +03:00
Christian Lachner
aacc401495 haproxy: Update HAProxy to v2.0.6
- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-09-25 11:53:08 +02:00
W. Michael Petullo
b43de99d0e pigeonhole: update to 0.5.7.2
Fixes CVE-2019-11500.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry-picked from 707c683fba)
2019-09-24 15:08:52 -07:00
Josef Schlehofer
0f33ce200d dovecot: Update to version 2.3.7.2
Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 5275c4156b)
2019-09-24 15:07:47 -07:00
Jan Pavlinec
6bab28e8d7
usbip: disable ASLR PIE
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit ff216608a0)
2019-09-24 21:58:31 +02:00
Stan Grishin
17a58fa39d simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-09-24 09:12:08 -07:00
Rosen Penev
b15b698e38 libredblack: Pass CFLAGS
CFLAGS were not being passed. This was breaking builds with ASLR.

Pass proper PIC command to gcc with $(fPIC).

Don't install static libraries. Keep those for InstallDev only.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbcf61d9d3)
2019-09-23 12:00:10 -07:00
Rosen Penev
d9d25ba673 libredblack: Update to 1.3
Technically the same version, but this uses the normal tarball instead of
a random GitHub repository.

Cleaned up Makefile as a result.

Removed Python dependency. rbgen is not used for the package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6e8cb556e4)
2019-09-23 11:59:51 -07:00
Rosen Penev
459918c530 keyutils: Pass OpenWrt CFLAGS directly.
Needed for compilation with PKG_ASLR_PIE.

Replaced Build/Compile with PKG_INSTALL.

Adjusted install paths for consistency.

Added license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccc3b6d44a)
2019-09-23 11:59:03 -07:00
Rosen Penev
3fdf5bf2ee libpbc: Pass CFLAGS properly
This was breaking ASLR builds.

Fixed license tag.

Added PKG_BUILD_PARALLEL for faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43f811ad5b)
2019-09-23 11:58:50 -07:00
Rosen Penev
efe8842b51 crconf: Pass CFLAGS properly
CFLAGS were not being passed, breaking ASLR builds.

Switched to using PKG_SOURCE_DATE for the version.

Added PKG_BUILD_PARALLEL for faster compilation.

Added license information.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 35a258a55c)
2019-09-23 11:58:27 -07:00
Rosen Penev
f10bea0e44 madplay: Pass CFLAGS properly
CFLAGS were not being passed which was breaking ASLR builds.

Fixed license header.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL for consistency.

Passed proper $(FPIC) value.

Several other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76c0bea36b)
2019-09-23 11:58:16 -07:00
Rosen Penev
fd31ee0a93 atftp: Update to 0.7.2
Fixes issue where CFLAGS were not being passed. This was breaking ASLR
builds.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL. Changed install paths based on PKG_INSTALL paths.

Added --disable-debug to make sure debug code is disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 946dfed856)
2019-09-23 11:57:51 -07:00
Rosen Penev
278fcd09a7 v4l2rtspserver: Update to 0.1.8
Updated live555 to 2019.08.28

Add TARGET_CFLAGS to LIVE555 CFLAGS to fix compilation with ASLR.

Several other Makefile cleanups and optimizations.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 523eeaed54)
2019-09-23 11:57:32 -07:00
Rosen Penev
b0a8ff354e
Merge pull request #10019 from dibdot/adblock-19.07
[19.07] adblock: update 3.8.6
2019-09-17 13:31:25 -07:00
Dirk Brenken
2c7118e1d7
adblock: update 3.8.6
* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-17 13:59:08 +02:00
Karel Kočí
c004f8a7a6
python-intelhex: add new package
This is Python library to parse, generate and in general handle files
in Intel HEX format.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 306e276a3b)
2019-09-17 08:44:59 +02:00