Commit graph

15388 commits

Author SHA1 Message Date
W. Michael Petullo
b43de99d0e pigeonhole: update to 0.5.7.2
Fixes CVE-2019-11500.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry-picked from 707c683fba)
2019-09-24 15:08:52 -07:00
Josef Schlehofer
0f33ce200d dovecot: Update to version 2.3.7.2
Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 5275c4156b)
2019-09-24 15:07:47 -07:00
Jan Pavlinec
6bab28e8d7
usbip: disable ASLR PIE
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit ff216608a0)
2019-09-24 21:58:31 +02:00
Rosen Penev
b15b698e38 libredblack: Pass CFLAGS
CFLAGS were not being passed. This was breaking builds with ASLR.

Pass proper PIC command to gcc with $(fPIC).

Don't install static libraries. Keep those for InstallDev only.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbcf61d9d3)
2019-09-23 12:00:10 -07:00
Rosen Penev
d9d25ba673 libredblack: Update to 1.3
Technically the same version, but this uses the normal tarball instead of
a random GitHub repository.

Cleaned up Makefile as a result.

Removed Python dependency. rbgen is not used for the package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6e8cb556e4)
2019-09-23 11:59:51 -07:00
Rosen Penev
459918c530 keyutils: Pass OpenWrt CFLAGS directly.
Needed for compilation with PKG_ASLR_PIE.

Replaced Build/Compile with PKG_INSTALL.

Adjusted install paths for consistency.

Added license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccc3b6d44a)
2019-09-23 11:59:03 -07:00
Rosen Penev
3fdf5bf2ee libpbc: Pass CFLAGS properly
This was breaking ASLR builds.

Fixed license tag.

Added PKG_BUILD_PARALLEL for faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43f811ad5b)
2019-09-23 11:58:50 -07:00
Rosen Penev
efe8842b51 crconf: Pass CFLAGS properly
CFLAGS were not being passed, breaking ASLR builds.

Switched to using PKG_SOURCE_DATE for the version.

Added PKG_BUILD_PARALLEL for faster compilation.

Added license information.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 35a258a55c)
2019-09-23 11:58:27 -07:00
Rosen Penev
f10bea0e44 madplay: Pass CFLAGS properly
CFLAGS were not being passed which was breaking ASLR builds.

Fixed license header.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL for consistency.

Passed proper $(FPIC) value.

Several other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76c0bea36b)
2019-09-23 11:58:16 -07:00
Rosen Penev
fd31ee0a93 atftp: Update to 0.7.2
Fixes issue where CFLAGS were not being passed. This was breaking ASLR
builds.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL. Changed install paths based on PKG_INSTALL paths.

Added --disable-debug to make sure debug code is disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 946dfed856)
2019-09-23 11:57:51 -07:00
Rosen Penev
278fcd09a7 v4l2rtspserver: Update to 0.1.8
Updated live555 to 2019.08.28

Add TARGET_CFLAGS to LIVE555 CFLAGS to fix compilation with ASLR.

Several other Makefile cleanups and optimizations.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 523eeaed54)
2019-09-23 11:57:32 -07:00
Rosen Penev
b0a8ff354e
Merge pull request #10019 from dibdot/adblock-19.07
[19.07] adblock: update 3.8.6
2019-09-17 13:31:25 -07:00
Dirk Brenken
2c7118e1d7
adblock: update 3.8.6
* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-17 13:59:08 +02:00
Karel Kočí
c004f8a7a6
python-intelhex: add new package
This is Python library to parse, generate and in general handle files
in Intel HEX format.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 306e276a3b)
2019-09-17 08:44:59 +02:00
Karel Kočí
4aa305c99d
bigclown-firmware-tool: update to version 1.4.1
This release updates: bcf create --from

There are no dependencies changes introduced by upstream and changes are
of limited character.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7741e5db4b)
2019-09-17 08:43:21 +02:00
Karel Kočí
c23b682767
bigclown-firmware-tool: add new package
This is tool to flash/manage firmware in Bigclown modules.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 7950442dff)
2019-09-17 08:43:09 +02:00
Karel Kočí
b5a451cfe4
bigclown-mqtt2influxdb: update to version 1.2.0
This version introduces new option -d that makes service not to exit on
error. This is brutal solution but is required to protect against
service failure when remote resource is down.

bigclown-mqtt2influxdb is service moving data from MQTT to InfluxDB and
both of those services can and potentially are remote. The original
implementation where it failed when service goes down is not ideal
because network outage or target server outage can later require this
service restart.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commti 508e2b865a)
2019-09-17 08:42:09 +02:00
Karel Kočí
c35c9d6932
python-schema: update to version 0.7.1
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7bb6d72a47)
2019-09-17 08:41:40 +02:00
Hannu Nyman
b2f6a65e19
Merge pull request #9999 from flyn-org/openldap-19.07
openldap: update to 2.4.48
2019-09-15 19:43:34 +03:00
Rosen Penev
18975d4fa3
Merge pull request #9998 from flyn-org/libgcrypt-19.07
libgcrypt: Update to 1.8.5
2019-09-15 07:23:20 -07:00
Rosen Penev
3875601317
Merge pull request #10000 from cshoredaniel/pr-19.07-p910nd-non-root-backport
[19.07] p910nd: Run as non-root by default
2019-09-15 07:16:27 -07:00
Rosen Penev
335240c842
Merge pull request #10002 from cshoredaniel/pr-19.07-uwsgi-cgi-backport
[19.07] uwsgi-cgi: use python3 hostpkg not system python3
2019-09-15 07:16:19 -07:00
Rosen Penev
cfc39afc95
Merge pull request #10001 from cshoredaniel/pr-19.07-msmtp-scripts-backport
[19.07] msmtp-scripts: Backport fix for run-time failure
2019-09-15 07:15:58 -07:00
Daniel F. Dickinson
0e78a105c8 uwsgi-cgi: use python3 hostpkg not system python3
On a Debian system without python3-distutils install, uwsgi-cgi was
failing to build because it couldn't import sysconfig from distutils.
OpenWrt packages should be using the OpenWrt python not the system
python. In addition we need to use python3 not python2, even when
both are available.

(cherry-pick c387d0923c from master)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:46:05 -04:00
Daniel F. Dickinson
875eb10d11 p910nd: Run as non-root by default
We add the necessary Makefile, hotplug, config, and init bits
so that p910nd daemon runs as user:group p910nd:lp by default.
This eliminates an unnecessary root daemon.

The hotplug script sets the permissions of the USB lp
device(s) to read-write owner and group and no access to
anyone else, and sets owner root, group lp.

This is allows sufficient privileges to p910nd
to do it's job.

(cherry-pick 932c76fa74)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:44:08 -04:00
Daniel F. Dickinson
0ff1a55891 msmtp-scripts: Backport to fix runtime failure
This commit syncs msmtp-scripts with master as current
openwrt-19.07 is broken.

Cherry-picks and squashes the following commits from
master.

6d8cff9a msmtp-scripts: Fix LICENSE information
d163eaea msmtp-scripts: Overhaul and update like upstream
3c15d410 msmtp-scripts: Make conn_test default nc
b9cc3cf2 msmtp-scripts: Fix spool/lock dir permissions
f76408af msmtp-scripts: Add msmtprc permission docs

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:40:17 -04:00
Daniel F. Dickinson
2c51c7b18e msmtp: msmtp-scripts: Backport "Enable PROVIDES and ALTERNATIVES"
Backports needed change from master for the next commit (a
combined cherry-pick and squash of required fixes to msmtp-scripts,
due to msmtp-scripts being broken on openwrt-19.07).

Use the PROVIDES mechanism so that msmtp and msmtp-nossl can be be
+depended-on and avoid generating a file level conflict.  Also use
alternatives for msmtp-mta and msmtpq-ng-mta with msmtp-mta since
we can only have one sendmail at a time.

(cherry-pick f76408af48)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:39:52 -04:00
W. Michael Petullo
ecc6de6e22 openldap: update to 2.4.48
Fixes CVE-2019-13565.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:30:58 -04:00
Rosen Penev
68092405c2 libgcrypt: Update to 1.8.5
Fixed up license information. Only the library is packaged.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:29:27 -04:00
Rosen Penev
1d0c66755e
Merge pull request #9966 from dibdot/openwrt-19.07
[19.07] banip: update 0.2.1
2019-09-12 14:14:18 -07:00
Michael Heimpold
41fb159a38 php7: update to 7.2.22
While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5805da860e)
2019-09-12 21:52:27 +02:00
Josef Schlehofer
5be09b19ab
btrfs-progs: Update to version 5.2.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit c42b279)
2019-09-12 11:08:24 +02:00
Daniel Engberg
0b2e2f2411
Merge pull request #9968 from BKPepe/1907-yt
[OpenWrt 19.07] youtube-dl: Update to version 2019.9.12.1
2019-09-12 00:21:53 +02:00
Josef Schlehofer
03f9fa5b7a
youtube-dl: Update to version 2019.9.12.1
- Move PKG_MAINTAINER above PKG_LICENSE
- PKG_HASH and PKG_BUILD_DIR should be together in one section

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-11 23:55:31 +02:00
Dirk Brenken
3f89abbf0d
banip: update 0.2.1
* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
  directory), always create and re-use backups if available.
  To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
  to detect break-in events
* always update the black-/whitelist with logfile parsing results
  in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics
* Change .*GPL.*+ licenses to SPDX compatible identifier

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-11 06:21:20 +02:00
Dirk Brenken
1ad19c6bfa
adblock: update 3.8.5
* use raw procd interface trigger as last resort, if the
  adblock config is not available during startup
* fix selective subdomain whitelisting for dnsmasq
* fix a kresd restart issue with 'DNS File Reset'
* fix a suspend/resume cornercase
* disable the tld compression, if the number of blocked domains
  is greater than 'adb_maxtld' (default: 100000)
* made the fw portlist configurable (default '53 853 5353')
* preliminary support for inotify-like autoload features
  of dns backends like kresd in future Turris OS. If 'adb_dnsinotify'
  is set to 'true', all adblock related restarts and the
  'DNS File Reset' will be disabled

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 45cb0e1023)
2019-09-09 14:57:14 +02:00
Sebastian Kemper
54b33157a6 glib2: don't use libelf during host build
Since commit 2e490e7e46a4f6fbf66fa930a25c2991e24c0f83 tools/libelf
installs a pkgconfig file, which in turn is picked up during the glib2
host build. On the build bots the same occurs, although it so happens
that (sometimes?) libelf.h is not found and the host build fails. This
may be a timing issue specific to the build bots, as the header is in
fact installed by tools/libelf and I can't reproduce this here on my own
computer.

In any case, libelf (if detected) is only used by gresource. gresource
can be used without it. gresource is not used by OpenWrt's build system
(also not in openwrt/packages). So adding "--disable-libelf" to the host
configure args is not detrimental in any way and works around the issue
described above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-09 09:39:49 +02:00
Josef Schlehofer
20bd9b78e1
lighttpd: Makefile polishing
- Correct SPDX License Identifier
- Move MAINTAINER, SUBMENU to more appropriate place
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e06086c4c)
2019-09-07 13:31:02 +02:00
Josef Schlehofer
19039dc4ae
lighttpd: Update to version 1.4.54
Fixes CVE-2019-11072

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80c721c6a)
2019-09-07 13:30:44 +02:00
Jan Hák
52a2936597 knot: update to 2.8.3
Added lmdb dependency

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 0b19979301)
2019-09-06 16:37:07 -07:00
Jan Hák
abb9ac3e9c knot: upgrade to vetsion 2.8.2
Upgrade of Knot DNS package to version 2.8.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 30627a9928)
2019-09-06 16:36:45 -07:00
Rosen Penev
89b0c039b0 measurement-kit: Fix compilation with uClibc-ng
nextafter is not included in std with uClibc-ng. Don't use the std version

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from e613acffad)
2019-09-06 16:35:46 -07:00
Rosen Penev
7a07957baa libgpg-error: Fix compilation with GAWK 5.0
Patch from Upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-06 16:24:42 -07:00
Matthias Schiffer
421b922fde
fastd: fix init script for multiple VPN instances
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit b7ff8b8087)
2019-09-04 22:50:12 +02:00
Sebastian Kemper
3d7ae8dd26 pulseaudio: fix recursive dependencies
Since OpenWrt commit e82a4d9cfb ("config: regenerate *_shipped sources")
a few recursive dependencies have been discovered that were not visible
before.

$ make menuconfig
tmp/.config-package.in:103098:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:103098:	symbol PACKAGE_baresip-mod-pulse depends on PACKAGE_baresip-mod-pulse
tmp/.config-package.in:121863:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121863:	symbol PACKAGE_pulseaudio-profiles depends on PACKAGE_pulseaudio-profiles
tmp/.config-package.in:121878:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
qtmp/.config-package.in:121878:	symbol PACKAGE_pulseaudio-tools depends on PACKAGE_pulseaudio-tools

This commit addresses the pulseaudio package's own recursive
dependencies and partially resolves #9300 (baresip will be handled in
telephony repository).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

cherry picked from commit ec3d077287
to correct the errors related to backported config parsing changes.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-09-04 23:16:59 +03:00
Jo-Philipp Wich
b7c7074a4b boost: fix raw kconfig syntax
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

cherry picked from commit af4cacd108
to correct the errors related to kernel config parsing.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-09-04 23:10:52 +03:00
Josef Schlehofer
70baf873b7 boost: Makefile polishing
Corrected License according to SPDX in PKG_LICENSE
Added PKG_LICENSE_FILES
HTTPS in their website
Reordered some stuff

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

cherry picked from commit 79831ee0ab
to correct the errors related to kernel config parsing.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-09-04 23:07:44 +03:00
Josef Schlehofer
c1efe44157
syslog-ng: Add GPL license for plugins
- Correct SPDX License Identifier
- Move DEPENDS under URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d4eed8c422)
2019-09-04 16:06:32 +02:00
Josef Schlehofer
30fdebab73
syslog-ng: Update to version 3.23.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 298a91364c)
2019-09-04 16:06:21 +02:00
Josef Schlehofer
24ef2a78e3
python-sqlalchemy: Update to version 1.3.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 2ee4b09760)
2019-09-04 16:06:09 +02:00