Commit graph

17086 commits

Author SHA1 Message Date
Rosen Penev
b031b21430
Merge pull request #16133 from jefferyto/addrwatch-fixes-openwrt-19.07
[openwrt-19.07] addrwatch: Update to 1.0.2 and various fixes
2021-07-15 11:42:18 -07:00
Jeffery To
a673a23268
addrwatch: Various fixes
Makefile changes include:

* Include syslog output module

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  374cfd2cab

* 004-more-specific-library-linking.patch - from
  27b57d9da3

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 20:40:13 +08:00
Jeffery To
1f9aa31eab
addrwatch: fix broken conffiles
This is 704e733e51 but applied for
addrwatch only.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:05:33 +08:00
Rosen Penev
531d59dbc7
addrwatch: update to 1.0.2
Switch to standard tarball to avoid autoreconfig.

Fix license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Add PKG_INSTALL for consistency with other packages.

Removed upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f1a7d509b5)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:42 +08:00
Rosen Penev
ce1781155d
addrwatch: Add missing limits header for PATH_MAX
Fixes compilation on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8003eea2b9)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:28 +08:00
Rosen Penev
879838998e luajit: for powerpc, add FPU dependency
powerpc support as of 2.1 does not work with soft float.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d23ca0010c)
2021-07-14 19:26:19 -07:00
Rosen Penev
be2f1b2c00 luajit: fix compilation with host clang
It errors out with this section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0e620f1fa1)
2021-07-14 19:26:19 -07:00
Donald Hoskins
29c5a802c4 [LuaJIT] Allow MIPS64 support
Signed-off-by: Donald Hoskins <grommish@gmail.com>
(cherry picked from commit d325fbffbe)
2021-07-14 19:26:19 -07:00
Rosen Penev
e5e5c88919 luajit: do not install static libraries to InstallDev
The dynamic library change removed static libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 51de4b2e35)
2021-07-14 19:26:19 -07:00
Rosen Penev
dd62736784 luajit: use dynamic buildmode
Reduces package size with about 50%

Fixes: https://github.com/openwrt/packages/issues/10848

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d9487590c6)
2021-07-14 19:26:19 -07:00
Rosen Penev
d617e7b143
Merge pull request #16062 from miska/snort3
snort3: Backport update to the stable version
2021-07-14 19:23:31 -07:00
James Vorderbruggen
192aea109a yggdrasil: allow HTTPS connections
Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>
(cherry picked from commit ffff347396)
2021-07-14 12:33:34 -07:00
George Iv
7248e1b957 yggdrasil: bump to 0.3.16
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 76b642b50f)
2021-07-14 12:33:34 -07:00
George Iv
fe9b2579f9 yggdrasil: bump to 0.3.15
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 6b2b730181)
2021-07-14 12:33:34 -07:00
William Fleurant
8687d79f84 yggdrasil: Ygg-over-ygg bugfix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 1d78e7dc31)
2021-07-14 12:32:59 -07:00
George Iv
35531bcb26 yggdrasil: bump to 0.3.14
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 860f1a1113)
2021-07-14 12:32:59 -07:00
William Fleurant
3232f27243 yggdrasil: bump to 0.3.13
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 0642927d5d)
2021-07-14 12:32:59 -07:00
William Fleurant
2136fafe39 yggdrasil: bump to 0.3.12
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit be4fe496ce)
2021-07-14 12:32:58 -07:00
George Iv
05816dbfd8 yggdrasil: Change package configuration to UCI
Signed-off-by: George Iv <57254463+zhoreeq@users.noreply.github.com>
(cherry picked from commit 6857fd45c8)
2021-07-14 12:32:58 -07:00
William Fleurant
325bf6bc75 yggdrasil: fixes build name and version #10309
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit bd415bc7bf)
2021-07-14 12:32:58 -07:00
William Fleurant
7087b16140 yggdrasil: uci firewall Section name and cover both IP versions
- rename the section instance to yggdrasil (feat. request)
- allow zone to cover both ip4 and ip6 fam

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 2baab77b77)
2021-07-14 12:32:58 -07:00
William Fleurant
56b6518c88 yggdrasil: bump to 0.3.11
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 06bdd7aebf)
2021-07-14 12:32:58 -07:00
Rosen Penev
c37ed20609
Merge pull request #16109 from nxhack/1907_libuv
[19.07] libuv: fix CVE-2021-22918
2021-07-12 23:15:11 -07:00
Josef Schlehofer
b83f6f9af3
syslog-ng: disable mqtt
For now, disable mqtt as it was automatically enabled as the build
system finds compiled libpaho-mqtt-c and requires dependency.

---
Here is the output:
Package syslog-ng is missing dependencies for the following libraries:
libpaho-mqtt3c.so.1
---

This is a new feature since syslog-ng 3.33.1 and if anyone is interested
in it, it can be enabled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e319e89fde)
2021-07-12 16:17:59 +02:00
Hirokazu MORIKAWA
c0e93ddff3 libuv: fix CVE-2021-22918
idna: fix OOB read in punycode decoder

libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.

libuv/libuv@b7466e3
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-12 15:13:13 +09:00
Josef Schlehofer
39a92140d1
syslog-ng: update to version 3.33.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.1

- Bump version in config
It fixes:
WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.33 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.31'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2b4be08a8c)
2021-07-12 06:17:27 +02:00
Josef Schlehofer
21ab2ee937
Merge pull request #16087 from turris-cz/19.07/lxc-update-gpg-keyserver
lxc: add patch to switch GPG server
2021-07-11 20:44:23 +02:00
Josef Schlehofer
dd32c2cbee
czmq: disable nss
While bumping czmq to version 4.2.1 from master branch into OpenWrt
19.07, it automatically detects nss when compiled before czmq.

These steps can verify this:

make package/nss/compile V=s
make package/czmq/compile V=s

Then czmq requires many dependencies:
Package czmq is missing dependencies for the following libraries:
libnspr4.so
libnss3.so
libnssutil3.so
libplc4.so
libplds4.so
libsmime3.so
libsoftokn3.so
libssl3.so

And this fails. If you are using SDK and wants to have just a few
packages then czmq gets compiled if any of those packages are not
present in build system.

This was also mentioned in the release notes for czmq 4.2.1:
https://github.com/zeromq/czmq/releases/tag/v4.2.1

> Note for packagers: NSS can now be used and linked against to avoid using
an internal embedded reimplementation of SHA. It is enabled by default if
present.

NSS was disabled before, so let's disable it.

This is required only for OpenWrt 19.07 as this is done differently in OpenWrt 21.02 and OpenWrt
master and czmq is compiled there.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-11 19:48:56 +02:00
Rosen Penev
b7d2b9163c
apache: update to 2.4.48
Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(partially cherry picked from commit 6dfd07097d)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[removed patch, which is not in OpenWrt 19.07 branch, used integer in
PKG_RELEASE instead of autorelease]
2021-07-11 12:04:10 +02:00
Jan Pavlinec
a16402770c
czmq: update to version 4.2.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 39b4c64545)
2021-07-10 23:08:20 +02:00
Josef Schlehofer
b86ca1563b
lxc: add patch to switch GPG server
By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.

Use the same GPG server as LXC is using by default in the newer
releases.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-10 17:38:41 +02:00
Michal Hrusecky
dc621a9b19
snort3: Backport stable version from 21.02
Update snort3 from beta to the stable version available in 21.02 version
of feeds.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-07 12:39:31 +02:00
Michal Hrusecky
5d189c1013
libdaq3: New package, dependency of snort3
Backport from 21.02 in order to satisfy dependencies of snort3 to allow
upgrade to stable version of snort3 from beta available now.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-07 12:36:20 +02:00
Josef Schlehofer
d6b64bb653
msmtp: update to version 1.8.15
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110abfb9f6)
2021-07-06 17:12:16 +02:00
Josef Schlehofer
a896cbac26
Merge pull request #16051 from BKPepe/openwrt-19.07
python3: update to version 3.7.11
2021-07-06 16:20:02 +02:00
Josef Schlehofer
a2ab062439
youtube-dl: update to version 2021.4.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 701ded952a)
2021-07-06 09:29:06 +02:00
Josef Schlehofer
118b0cb9d6
youtube-dl: update to version 2021.2.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a7523a9fab)
2021-07-06 09:28:59 +02:00
Josef Schlehofer
b18aab0d13
python3: update to version 3.7.11
Fixes: CVE-2021-3426

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-06 09:15:33 +02:00
Rosen Penev
5837c5a00a
Merge pull request #16004 from commodo/python-dateutil-setuptools-scm
[19.07] python-dateutil: pin setuptools-scm version to 5.0.2
2021-07-03 15:17:09 -07:00
Rosen Penev
e23bd114be
Merge pull request #16023 from rs/nextdns-1.34.2-openwrt-19.07
[19.07] nextdns: Update to version 1.34.2
2021-07-03 15:15:49 -07:00
Olivier Poitrey
9bcac7859a nextdns: Update to version 1.34.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-02 18:54:53 +00:00
Florian Eckert
608db2d141
Merge pull request #15663 from Ansuel/fix-ddns-script
[19-07] ddns-scripts: standardize required params declaration
2021-07-02 08:57:15 +02:00
Ansuel Smith
2294d252b3
ddns-scripts: standardize required params declaration
The luci app scan the script and search for params in the form of
$required_params.
This script use the form "${required_params}" and cause confusion
with the luci app by hiding needed values. Fix this by using the
standard way to declare required params following other ddns scripts.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2021-07-02 03:38:51 +02:00
Alexandru Ardelean
730e14da79 python-dateutil: pin setuptools-scm version to 5.0.2
This is known to still work with Python2.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-06-30 17:24:26 +03:00
Alexandru Ardelean
d1aac139a6 Revert "python-dateutil: disable setuptools-scm for build"
This reverts commit 29da5d65b6.

That fix doesn't work fully correct as the egg directory has version 0.0.0.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-06-30 17:23:00 +03:00
Alexandru Ardelean
29da5d65b6 python-dateutil: disable setuptools-scm for build
Fixes https://github.com/openwrt/packages/issues/15988

It seems that the newer setuptools-scm package (6.0.1) has some
Python3-only syntax.
For the 19.07 release, where Python2 is still around this causes the
python-dateutil package to fail to build.

See https://github.com/pypa/setuptools_scm/issues/541

However, removing 'setuptools-scm' from the build also works.
This change does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-06-30 10:28:31 +02:00
Rosen Penev
113377ae73
Merge pull request #15974 from rs/nextdns-1.33.11-openwrt-19.07
[19.07] nextdns: Update to version 1.33.11
2021-06-26 12:44:24 -07:00
Olivier Poitrey
b955b69435 nextdns: Update to version 1.33.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-06-26 18:00:29 +00:00
Hannu Nyman
0f5fbe1f5b nano: update to 5.8
Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6f2ac237a1)
2021-06-17 19:05:04 +03:00
Karl Palsson
ce1ae404c3 net/mosquitto: Update to 1.6.15
This is a security release

Full release notes: https://mosquitto.org/blog/2021/06/version-2-0-11-released/

Fixes a remotely triggered memory leak

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-06-11 15:54:19 +00:00