Commit graph

5652 commits

Author SHA1 Message Date
Jan Pavlinec
c983b08446 tor: update to version 0.4.2.7 (security fix)
Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-03-26 08:52:55 -10:00
Toke Høiland-Jørgensen
9ba7b1799c acme: Backport two bug fixes from master
This backports the following bug-fix commits from the master branch:

c6b4d7f367 ("acme: Include empty 'dns' config option by default")
983cc995a3 ("acme: Correctly handle domain state dir for ECC certificates")

Fixes #11675.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2020-03-26 16:39:10 +01:00
Yousong Zhou
40c5dd0ba1 openvswitch: depend on IPV6 for intree kmods
Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 88dcd09487)
2020-03-26 15:54:43 +08:00
Yousong Zhou
ec0a9d4d01 openvswitch: rework skipping intree kmod build for unsupported kernels
This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.

Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.

One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built.  This may contradict expectation if the warning was not noticed
by them

Resolves openwrt/packages#9274

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522)
2020-03-26 15:54:13 +08:00
Sven Roederer
f7308a55fa strongswan: add conffiles for swanctl util
Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb74)
2020-03-25 19:26:11 +02:00
Eneas U de Queiroz
ba76d4274e strongswan: quote 'comment' parameter in Config.in
Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc2)
2020-03-25 19:26:11 +02:00
Karl Palsson
1cd3f5fdc2 net/pagekitec: support status reporting json file
Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:47 +00:00
Karl Palsson
1688807f18 net/pagekitec: Update to newest version
Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:28 +00:00
Stan Grishin
6abb6bb2a0 https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:39 +00:00
Yousong Zhou
f043afe468 openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:30:22 +08:00
Rosen Penev
5746e4a2b3
nfs-kernel-server: Fix compile with uClibc-ng
NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e)
2020-03-14 17:36:20 -07:00
Martin Schiller
17924b1283
xtables-addons: disable ASLR PIE
This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60)
2020-03-14 02:51:44 +01:00
Rosen Penev
dc524aa2aa
softethervpn: disable PIC
Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e269)
2020-03-09 13:57:45 -07:00
Rosen Penev
381153d597
softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335)
2020-03-09 13:57:32 -07:00
Rosen Penev
aba0dd8729
softethervpn: Add missing OpenSSL header
Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f)
2020-03-09 13:57:12 -07:00
Philipp Schuster
f09028fcdb
softethervpn: Update to rtm version 4.29-9680
Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b)
2020-03-09 13:56:40 -07:00
Rosen Penev
b546ff127c
stubby: fix init script
The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c647)
2020-03-09 13:55:24 -07:00
Rosen Penev
c5219c8af3
stubby: makefile and init script cleanup
Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf5225323)
2020-03-09 13:55:23 -07:00
W. van den Akker
62d9ba9a02
Shorewall6: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:40:39 +01:00
W. van den Akker
e14ee24803
Shorewall: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:40:18 +01:00
W. van den Akker
84cca11fa0
Shorewall6-lite: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:58 +01:00
W. van den Akker
803ab2f445
Shorewall-lite: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:35 +01:00
W. van den Akker
7b67a0b91d
Shorewall-core: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:17 +01:00
Etienne Champetier
c81415a803
Merge pull request #11501 from Bloup1net/phantap19.07
phantap: add to 19.07
2020-03-04 20:25:07 -05:00
Jo-Philipp Wich
b97f33e026 cgi-io: fix compilation against uClibc
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ed965cf16f)
2020-03-04 09:52:49 +01:00
Jo-Philipp Wich
68aa303efb cgi-io: use O_TMPFILE for uploads and attempt to directly link target file
Create an anonymous inode in /tmp using O_TMPFILE and attempt to link the
file in place using linkat(). Only fall back to the old file copy when
linking the tempfile fails.

Avoids double memory use if both the temporary upload file and the
destination file are located in /tmp.

Ref: https://github.com/openwrt/luci/issues/3654
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f4a7e9532)
2020-03-04 09:52:49 +01:00
Jo-Philipp Wich
7f00eebab0 cgi-io: use dynamic memory for post decoding, support proc files
Allocate dynamic buffer memory for decoding post data and allow post
requsts up to 128KB compared to the previos 1KB limit.

Also support downloading /proc and /sys files by falling back to
chunked transfer encoding when the file size cannot be determined.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 39087eba18)
2020-03-04 09:52:49 +01:00
Diana Dragusin
801a908a17 phantap: add to 19.07
Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2020-03-03 03:42:33 -08:00
Karl Palsson
abdbeb350e mosquitto: bump to 1.6.9
Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/

Nothing of particular relevant to OpenWrt, just general fixes.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-03-02 10:04:06 +00:00
Karl Palsson
99efce0cd2 pagekite: add simple websockets and update syntax
Syntax now matches preferred upstream style.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson
42c7a7adbe pagekite: avoid redundant information in syslog
Patch from upstream: 7b45878185

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson
13e8c6ffed pagekite: bump to v0.91.200218
pings the front ends less aggressively, reducing cpu usage on the host.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Nikos Mavrogiannopoulos
c3ff03a34c ocserv: updated to 0.12.6
Fixes: #11174

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-02-26 06:07:40 +01:00
Yousong Zhou
61970ece51 xl2tpd: fix building failure caused by pfc
Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b)
2020-02-25 11:57:24 +08:00
Yousong Zhou
7fe2073756 xl2tpd: bump to version 1.3.15
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4)
2020-02-25 11:57:24 +08:00
Marcos Del Sol Vives
2c0a307eeb acme: update to 2.8.5
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
[ fix for 19.07 branch ]
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-02-19 15:40:52 +01:00
Rosen Penev
e29cc586f2
Merge pull request #11381 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.6
2020-02-18 14:50:45 -08:00
W. van den Akker
1c7b7cfdfa
Shorewall6: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:26 +01:00
W. van den Akker
481e63febb
Shorewall: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:09 +01:00
W. van den Akker
4f0e5c49d3
Shorewall6-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:50 +01:00
W. van den Akker
7c8f5fd70b
Shorewall-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:33 +01:00
W. van den Akker
1fbf3e1795
Shorewall-core: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:34:58 +01:00
Christian Lachner
2f5b209873 haproxy: Update HAProxy to v2.0.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-02-17 11:00:48 +01:00
Rosen Penev
78d7c8aef5
knot: Do not try to build under ARC
liburcu does not support ARC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ec47ca837)
2020-02-15 22:07:30 -08:00
Rosen Penev
8640d243ee
Merge pull request #11296 from Andy2244/samba4-update-4.11.6-(19.07)
[19.07] samba4: update to 4.11.6, add new UCI option
2020-02-10 13:29:10 -08:00
Andy Walsh
f5be481a4f ksmbd: update to 3.1.3, ksmbd-tools: update to 3.2.1, add smb1 support, add avahi support package
* ksmbd: update to 3.1.3
* ksmbd-tools: update to 3.2.1
* add new package build option "KSMBD_SMB_INSECURE_SERVER"
* enable smb1 support to kmod by default
* add new UCI option "allow_legacy_protocols" to section [globals]
* add avahi support package "ksmbd-avahi-service"

* ksmbd: release 3.1.3 version
* ksmbd: lock SMB2_QUERY_INFO_HE request with read lock
* ksmbd: fix potential racy between query_dir and ksmbd_vfs_empty_dir
* ksmbd: fix racy issue between deleting file and checking empty directory
* ksmbd: don't register interface which are member of bridge
* ksmbd: SO_REUSEADDR is no property of tcp_setsockopt
* ksmbd: release 3.1.2 version
* ksmbd: fix read caching buffer size as max_read_size
* ksmbd: fix the infinite loop of handling FSCTL_QUERY_ALLOCATED_RANGES
* ksmbd: use compounding for smb2 flush
* ksmbd: downgrade error message to debug in get_file_all_info
* ksmbd: rename usmbd to ksmbd.mountd in trvis-ci
* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: update README file

* ksmbd-tools: release 3.2.1 version
* ksmbd-tools: revert "remove glib2.0 dependancy" patch
* ksmbd-tools: release 3.2.0 version
* ksmbd-tools: update how to restart ksmbd in README file
* Revert "ksmbd-tools: disable tbuf and rbuf caching by default"
* ksmbd-tools: disable tbuf and rbuf caching by default
* ksmbd-tools: replace usmbd prefix with ksmbd prefix
* ksmbd-tools: update README file
* ksmbd-tools: fix warning ignoring return value of 'fread'
* ksmbd-tools: downgrade unsupported command print to debug
* ksmbd-tools: remove GLIB_LIBS in Makefiles
* ksmbd-tools: rename usmbd, smbuseradd, smbshareadd to ksmbd.mountd, ksmbd.adduser and ksmbd.addshare
* ksmbd-tools: fix null pointer dereference in _list_remove
* ksmbd-tools: fix the sanity check fails depending on the password length
* ksmbd-tools: fix build error(not found glib.h)
* ksmbd-tools: remove glib-2.0 dependancy
* ksmbd-tools: update README to add libglib2.0-dev for Ubuntu preprequisite packages

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 15:02:51 +01:00
Andy Walsh
1a503986f1 samba4: update to 4.11.6, add new UCI option
* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 14:54:48 +01:00
Rosen Penev
4906850936
dnsdist: fix compilation on PIE ARM64
$(FPIC) evaluates to -fpic on ARM64, breaking compilation:

The dnsdist build system handles it properly anyway. Added --with-pic to
make it explicit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7ddb2ddc45158669990374968da87a62a2e9e2e2)
2020-02-09 18:51:09 -08:00
Rosen Penev
f815a74160 Merge pull request #11281 from micmac1/apache-19.07-up
[19.07] apr/apr-util/apache/subversion: sync with master
2020-02-09 14:51:27 -08:00
Sebastian Kemper
9e551f1b3e apache: add postinstall script
This script notifies users about the changes that recently went into the
package, to prevent surprises.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:47:48 +01:00