Commit graph

16315 commits

Author SHA1 Message Date
Rosen Penev
9aa0d8cf7f
Merge pull request #12330 from rs/nextdns-1.6.3-openwrt-19.07
[19.07] nextdns: Update to version 1.6.3
2020-05-26 13:03:59 -07:00
Olivier Poitrey
6e6e5fa2ad nextdns: Update to version 1.6.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 19:31:36 +00:00
Hannu Nyman
b43a7d4b1b
Merge pull request #12326 from rs/nextdns-1.6.0-openwrt-19.07
[19.07] nextdns: Update to version 1.6.0
2020-05-26 21:08:19 +03:00
Olivier Poitrey
474296dcb1 nextdns: Update to version 1.6.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 17:58:33 +00:00
Rosen Penev
5507a02e24
Merge pull request #12313 from aleksander0m/aleksander/mm-mtu-19.07
modemmanager: set interface MTU based on bearer settings
2020-05-26 01:55:44 -07:00
Aleksander Morgado
ede1a8221b modemmanager: set interface MTU based on bearer settings
Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 41552c1cc2)
2020-05-26 10:28:56 +02:00
Rosen Penev
c6eea20bc8
giflib: remove host build
It's completely unused and breaks under CentOS7.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 23be4f9d7c)
2020-05-25 12:56:27 -07:00
Rosen Penev
b4cf130cba libtasn1: fix host build under old GCC
prereq-build.mk says that GCC 4.8 and above is supported. GCC 4.8
defaults to std=gnu89, breaking the build. GCC5 defaults to gnu99.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6d100823e9)
2020-05-24 23:30:51 -07:00
Dirk Brenken
15257f5b6d
adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0b6ea12560)
2020-05-24 21:49:26 +02:00
Hannu Nyman
246fc735b6 nano: update to 4.9.3
Update nano version to 4.9.3
Minor bugfix release.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38be46a7ae)
2020-05-24 20:43:30 +03:00
Rosen Penev
673e76b1ca
Merge pull request #12275 from micmac1/mar19run
[19.07] mariadb: use default umask for rundir
2020-05-24 03:55:11 -07:00
Sebastian Kemper
39db22ec95 mariadb: use default umask for rundir
rundir needs to be accessible for clients, hence o= is not the proper
permission for rundir. This commit breaks out rundir from the awk script
and sets it up with default umask.

This also removes chmod call and instead tells mkdir to create the
directories with the proper permissions directly.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-24 10:41:11 +02:00
Dirk Brenken
c8d2ed2cbc
adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9f91ecc47)
2020-05-23 21:21:54 +02:00
Rosen Penev
a41e068db8
sslh: update to 1.20
Fixed maintainer entry.

Added patch fixing compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ded3ad41b8)
2020-05-21 17:28:35 -07:00
Hannu Nyman
23251b93a9
Merge pull request #12247 from jefferyto/python-setuptools-site-patch-openwrt-19.07
[openwrt-19.07] python-setuptools,python3-setuptools: Fix error when installing from source
2020-05-21 18:10:31 +03:00
Jeffery To
32fb2ba0d6 python-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-21 22:07:17 +08:00
Jeffery To
6dac29693f python3-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 70a7f736c5)
2020-05-21 20:15:24 +08:00
Josef Schlehofer
49ac1e8b74 bind: update to version 9.14.12
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:25:23 -07:00
Josef Schlehofer
99998e218a
syslog-ng: update to version 3.27.1
snmp-dest was moved to afsnmp

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d4db36ea09)
2020-05-20 19:02:02 +02:00
Philip Prindeville
64ebad3fd9
syslog-ng: restore service "reload" to actually working
Commit 44a16ca broke syslog-ng such that it no longer works with
logrotate, for example.  Yes, you can manually stop and start the
service, but (1) you shouldn't have to and (2) it creates a window
where you potentially lose messages if the syslog UDP socket
overruns.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit c27f4ca53b)
2020-05-20 19:01:56 +02:00
Philip Prindeville
0e80f0486b
syslog-ng: including user settings after system settings
Initially we included user-specific settings last, so that they
could turn off or replace system settings... otherwise we only get
to change what's NOT explicitly set by the system.  This is overly
constraining.

Restore the original functionality of allowing the user to
override settings defined by the distribution's configuration.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit f8443ae829)
2020-05-20 19:01:35 +02:00
Yousong Zhou
98d4126c4a qemu: ignore configure option --disable-ipv6
Fixes: https://github.com/openwrt/packages/issues/12194
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a3033406ea)
2020-05-20 23:34:14 +08:00
Yousong Zhou
50148ea080 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 1091badd83)
2020-05-20 23:34:11 +08:00
Josef Schlehofer
676e6ddd6f
Merge pull request #12216 from BKPepe/19.07-unbound
[19.07] unbound: update to version 1.10.1 (security fix)
2020-05-20 08:38:48 +02:00
Hannu Nyman
149a084773
Merge pull request #12231 from jefferyto/python-openssl-ca-certs-openwrt-19.07
[openwrt-19.07] python-openssl,python3-openssl: Add dependency on ca-certs
2020-05-20 08:19:17 +03:00
Jeffery To
c062120822 python-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-20 04:37:53 +08:00
Jeffery To
c32e08f308 python3-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d2b0cc523d)
2020-05-20 04:36:07 +08:00
Josef Schlehofer
828ba37e06
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:28:40 +02:00
Hannu Nyman
2ccdae9a45
Merge pull request #12206 from micmac1/mar-1907-10413
[19.07] mariadb: minor version bump with CVE fixes and backports
2020-05-18 08:48:54 +03:00
Sebastian Kemper
115f7eeb07 mariadb: install config files readable for all
Backport from master.

Until now $(INSTALL_CONF) is used for configuration files that go into
/etc/mysql. This commit replaces that with $(INSTALL_DATA). The
configuration files are not only parsed by the server, but also by the
clients (which can be anybody).

This also removes a comment about a cron job from one of the
configuration files. There is no cron job.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:08:28 +02:00
Sebastian Kemper
4f0d108359 mariadb: move mysql_upgrade to the client package
Backport from master.

It's really a client. It connects to the running server as a client, to
upgrade the DBs. And it depends on both mysql and mysqlcheck.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:03:40 +02:00
Sebastian Kemper
9dda3cc87f mariadb: bump to 10.2.32
Fixes:

  CVE-2020-2752
  CVE-2020-2812
  CVE-2020-2814
  CVE-2020-2760

Upstream added support files for auth_pam plugin. This commit adds them
to the package.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:01:00 +02:00
Hannu Nyman
5e9f5cd769
Merge pull request #12187 from jefferyto/golang-1.13.11-default-platform-options-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.11, set default platform options
2020-05-16 23:36:22 +03:00
Jeffery To
d3762591da golang: Set/reset default platform options for target Go compiler
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.

This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit da3fb97b9c)
2020-05-17 03:30:36 +08:00
Jeffery To
f52fbe1d49 golang: Update to 1.13.11
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-17 03:30:36 +08:00
Michael Heimpold
2e6bd4cb86 php7: update to version 7.2.31
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:57:30 +02:00
Rosen Penev
191aac1741
Merge pull request #12171 from rs/nextdns-1.5.8-openwrt-19.07
[19.07] nextdns: Update to version 1.5.8
2020-05-14 20:45:21 -07:00
Olivier Poitrey
07164dec74 nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:04 +00:00
Rosen Penev
504a5f1b81
Merge pull request #12169 from jefferyto/arm-aarch64-vfp-neon-openwrt-19.07
[openwrt-19.07] treewide: Backport VFP/NEON fixes/updates
2020-05-14 09:07:03 -07:00
Jeffery To
a12555cc06 treewide: Enable VFP/NEON optimizations for aarch64
For speexdsp, support for NEON on aarch64 was added in 1.2.0[1].

[1]: https://github.com/xiph/speexdsp/pull/8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dec17eb36c)
2020-05-14 22:45:07 +08:00
Jeffery To
595342148e treewide: Update ARM NEON/VFP detection
With openwrt/openwrt@8dcc108760, the ARM
FPU compiler options are no longer part of CONFIG_TARGET_OPTIMIZATION.

This updates various packages that look for NEON/VFP support to search
CONFIG_CPU_TYPE instead.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2d99ee3004)
[adapted patch for pulseaudio using autotools build]
2020-05-14 22:45:03 +08:00
Rosen Penev
5f5d63e791
Merge pull request #12158 from Robby-/openwrt-19.07-eaptlstmpdir
[19.07] freeradius3: Fix to init script.
2020-05-13 14:22:09 -07:00
Eiji MATSUMOTO
0feb9ad314 freeradius3: Fix to init script.
To use eap tls, 'tmpdir' must be created before server starts.
This 'tmpdir' is used to store and verify client certificate,
and therefore radiusd do 'chmod go-rwx'.

If 'tmpdir' does NOT exists, server failed to start and default
'tmpdir' is '/tmp/radiusd'. So init script MUST create default
'tmpdir' like other directories.

Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>
2020-05-13 09:45:09 +02:00
Hannu Nyman
d8b9b0c92a
Merge pull request #12141 from EricLuehrsen/unbound_1907_1100
[openwrt-19.07] unbound: update to 1.10.0
2020-05-11 15:09:03 +03:00
Eric Luehrsen
8668e83d51 unbound: update to 1.10.0
cherry-pick: f779ef48cd
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-05-10 23:45:17 -04:00
Kevin Darbyshire-Bryant
2e01dd8382
miniupnpd: make hotplug work again
hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common
doesn't pull in the functions defined in /etc/rc.common thus since
'enabled' isn't defined the following sequence always fails:

enabled miniupnpd || exit 0

Unfortunately sourcing /etc/rc.common doesn't appear to work so come up
with some alternatives.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-10 14:57:29 -07:00
Rosen Penev
468f6fa13c
Merge pull request #12127 from aleksander0m/aleksander/mm-qmi-19.07
ModemManager and libqmi stable releases in 19.07
2020-05-10 01:02:04 -07:00
Aleksander Morgado
1c8e2e0c24 modemmanager: release 1.12.10
https://lists.freedesktop.org/archives/modemmanager-devel/2020-May/007828.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 3feeacc051)
2020-05-10 09:27:27 +02:00
Rosen Penev
cea4fbe30a modemmanager: fix compilation under uClibc-ng
Needs nls.mk as a result of the glib2 change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 311e2d76bb)
2020-05-10 09:27:12 +02:00
Aleksander Morgado
86fedfd522 libqmi: update version to 1.24.12
https://lists.freedesktop.org/archives/libqmi-devel/2020-May/003296.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 6584192deb)
2020-05-10 09:27:01 +02:00