Commit graph

17134 commits

Author SHA1 Message Date
Josef Schlehofer
dd6be653dd
tor: update to version 0.4.4.9
Fixes:
- CVE-2021-34548
- CVE-2021-34549
- CVE-2021-34550

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-09-08 11:54:19 +02:00
Rosen Penev
508c15acb7
irssi: update to 1.2.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 752656c6be)
2021-09-08 11:44:16 +02:00
Olivier Poitrey
93cfd1679a nextdns: Update to version 1.37.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 14:57:58 -07:00
Olivier Poitrey
6f3cd160d2 nextdns: Update to version 1.37.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 11:31:27 -07:00
Dennis Schüsselbauer
72f35e712e acme: Fix uhttpd restart to load new certificates
Fixes issue #16256

Bump PKG_RELEASE to 4.

Signed-off-by: Dennis Schüsselbauer <scde@users.noreply.github.com>

(cherry picked from commit d69534751e)
2021-09-06 14:29:41 -07:00
Josef Schlehofer
684b71f0cd
click: update to version 7.0
- Change URL of the website and for PKG_SOURCE_URL
- Change TITLE and description
- Remove PKG_BUILD_DEPENDS, PKG_UNPACK as they are not necessary
- Add src package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 25e8b2cda2)
2021-09-05 14:16:26 +02:00
Eneas U de Queiroz
5bd73795e8
dnsdist: fix default SSL lib spelling
This is cosmetic only, since openssl is the first one being defined, but
it avoids a warning in scripts/config, after upgrading to kconfig-v5.6:
tmp/.config-package.in:102839:warning: choice default symbol
'DNSDIST_OPENSSSL' is not contained in the choice

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit dbe11776ed)
2021-09-02 12:12:58 +02:00
Rosen Penev
4006aeabad
Merge pull request #16518 from jefferyto/golang-packages-remove-strip-ldflags-openwrt-19.07
[openwrt-19.07] treewide: Remove GO_PKG_LDFLAGS for stripping binaries
2021-09-01 17:16:20 -07:00
Jeffery To
1dd040f9ca
treewide: Remove GO_PKG_LDFLAGS for stripping binaries
The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.

When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.

This removes these flags for all relevant packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-09-02 06:36:01 +08:00
Peter Stadler
82a3613ec8 nginx: add PROVIDES nginx-ssl to nginx-all-module
fix issue when installing luci-ssl-nginx

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-09-01 14:25:17 -07:00
Josef Schlehofer
b35c3984e1
Revert "net/miniupnpd: ext_ip_reserved_ignore support"
This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.

[1] https://github.com/openwrt/packages/issues/15258
[2] https://github.com/miniupnp/miniupnp/issues/542
[3] https://github.com/miniupnp/miniupnp/pull/511

This reverts commit b76aa99194.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 107f3376b5)
2021-08-28 09:05:30 +02:00
Rosen Penev
857e98768f
Merge pull request #16410 from paper42/git-2.26.3-19
[19.07] git: update to 2.26.3
2021-08-27 01:05:32 -07:00
Michal Vasilek
72d806d181
apr: patch CVE-2021-35940
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 0777e40b74)
2021-08-25 06:06:48 +02:00
Rosen Penev
844cde96b8
Merge pull request #16444 from paper42/postgresql-fix-hardening
[19.07] postgresql: disable PIC
2021-08-24 19:04:13 -07:00
Stan Grishin
a7691fdfb0
Merge pull request #16455 from rs/nextdns-1.36.0-openwrt-19.07
[19.07] nextdns: Update to version 1.36.0
2021-08-24 17:07:57 -07:00
Olivier Poitrey
9d3ad065b2 nextdns: Update to version 1.36.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-08-24 23:40:31 +00:00
Michal Vasilek
4b091361ef
postgresql: disable PIC
with PIC enabled, build fails with
ld: access/gist/gistproc.o: in function `rtree_internal_consistent':
gistproc.c:(.text+0x188): relocation truncated to fit: R_AARCH64_LD64_GOTPAGE_LO15 against symbol `DirectFunctionCall2Coll' defined in .text section in utils/fmgr/fmgr.o
ld: gistproc.c:(.text+0x188): warning: too many GOT entries for -fpic, please recompile with -fPIC
ld: final link failed: symbol needs debug section which does not exist
collect2: error: ld returned 1 exit status

Related-to: 8e9ad7bb51
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-24 12:48:19 +02:00
Rosen Penev
9da0165a7d
Merge pull request #16411 from paper42/file-5.38-19
[19.07] file: update to 5.38
2021-08-23 05:58:04 -07:00
Michal Vasilek
0573fb59ab
file: update to 5.38
* fixes CVE-2019-18218

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-23 12:25:13 +02:00
Josef Schlehofer
5982af9ed5
Merge pull request #16412 from paper42/tar-cve-19
[19.07] tar: fix CVE-2021-20193
2021-08-22 09:34:58 +02:00
Etienne Champetier
b03fe54e0e https-dns-proxy: patch CMakeList.txt to use OpenWrt CFLAGS
This fixes compilation issues with ASLR PIE enabled

We were compiling with '-g -DDEBUG'

https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 374e1dd56e)
2021-08-20 21:04:03 -04:00
Michal Vasilek
8ff2671b22
tar: fix CVE-2021-20193
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-20 16:17:56 +02:00
Michal Vasilek
3862bb3e6d
mc: add a missing Syntax file
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 312caff03b)
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-20 12:02:52 +02:00
Michal Vasilek
47e2ef579e
git: update to 2.26.3
* fixes CVE-2021-21300

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-20 11:29:43 +02:00
Josef Schlehofer
4689c49144
Merge pull request #16398 from paper42/mc-1907
[19.07] mc: update to 2.8.27
2021-08-19 17:33:36 +02:00
Michal Vasilek
b39f185bdf
mc: update to 2.8.27
* fixes CVE-2021-36370
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-18 15:05:33 +02:00
Eneas U de Queiroz
865ae46492 unixodbc: use 'install' when copying host binaries
'cp' fails with a text file busy error if it tries to overwrite an
executable file that is running.  'install' unlinks the file first, so
it will not cause the problem.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 47f98d7030)
2021-08-14 13:45:53 -07:00
Eneas U de Queiroz
67f403b5e6 perl: perlmod.mk: use 'install' for host binaries
When installing a host perl module, the host perl binary in the staging
dir is replaced by using 'cp'.  However, if the binary is running in a
parallel job, cp will fail with a text file busy error.  Use
$(INSTALL_BIN), which unliks the file first to avoid the error.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 19c7496648)
2021-08-14 13:45:07 -07:00
Stan Grishin
6c12530346
Merge pull request #16254 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: update to 2021-07-29-1
2021-08-03 22:14:19 -07:00
Jan Hak
5051c4bb00
knot: update to version 3.0.8
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5f374929cf)
2021-08-02 05:56:08 +02:00
Jan Hak
e0f5b4e289
knot: update to version 3.0.7
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 8d66f49bae)
2021-08-02 05:56:08 +02:00
Jan Hak
de894d37a6
knot: update to version 3.0.6
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d578f60818)
2021-08-02 05:56:08 +02:00
Jan Hak
0c3d97bf57
knot: update to version 3.0.5
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d92a2cd21b)
2021-08-02 05:56:08 +02:00
Hauke Mehrtens
c6ae1c6a0f
Merge pull request #15108 from neheb/ksmbd
ksmbd updates for 19.07
2021-08-01 16:09:24 +00:00
Stan Grishin
210e3d9167 https-dns-proxy: update to 2021-07-29-01
* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 13:11:58 +00:00
Olivier Poitrey
a0e39ca02c nextdns: Update to version 1.35.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-30 12:40:19 +03:00
Dirk Brenken
92abb99170
adblock: bugfix 4.0.7-9
* fix regex to prepare google safesearch domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-07-28 08:01:44 +02:00
Rosen Penev
0872827d2d librouteros: don't build docs
Fixes compilation without host pod2man.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e41fd1794b)
2021-07-25 22:19:29 +03:00
Josef Schlehofer
de84e781e5
syslog-ng: update to version 3.33.2
Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4b06f9ff4c)
2021-07-22 07:51:50 +02:00
George Iv
242dbcebaf yggdrasil: bump to 0.4.0
- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit e135c4c867)
2021-07-20 20:57:40 -07:00
Rosen Penev
d1c39e3d90
Merge pull request #16166 from stangri/19.07-vpnbypass
[19.07] vpnbypass: update to 1.3.2-1
2021-07-20 20:56:00 -07:00
Stan Grishin
df79c0614c vpnbypass: updates to 1.3.2-1
bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-20 21:23:49 +00:00
Josef Schlehofer
3f432b66ae
Merge pull request #16095 from turris-cz/bind-update
bind: update to version 9.16.18
2021-07-16 16:59:08 +02:00
Luiz Angelo Daros de Luca
f795536f48 ruby: update to 2.6.8
This release includes security fixes like:

CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
CVE-2021-31799: A command injection vulnerability in RDoc

We ordinally do not fix Ruby 2.6 except security fixes, but this release
also includes some regressed bugs and build problem fixes.

Ruby 2.6 is now under the state of the security maintenance phase, until
the end of March of 2022. After that date, maintenance of Ruby 2.6 will
be ended.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-07-16 15:57:54 +02:00
Rosen Penev
b031b21430
Merge pull request #16133 from jefferyto/addrwatch-fixes-openwrt-19.07
[openwrt-19.07] addrwatch: Update to 1.0.2 and various fixes
2021-07-15 11:42:18 -07:00
Jeffery To
a673a23268
addrwatch: Various fixes
Makefile changes include:

* Include syslog output module

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  374cfd2cab

* 004-more-specific-library-linking.patch - from
  27b57d9da3

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 20:40:13 +08:00
Jeffery To
1f9aa31eab
addrwatch: fix broken conffiles
This is 704e733e51 but applied for
addrwatch only.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:05:33 +08:00
Rosen Penev
531d59dbc7
addrwatch: update to 1.0.2
Switch to standard tarball to avoid autoreconfig.

Fix license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Add PKG_INSTALL for consistency with other packages.

Removed upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f1a7d509b5)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:42 +08:00
Rosen Penev
ce1781155d
addrwatch: Add missing limits header for PATH_MAX
Fixes compilation on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8003eea2b9)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:28 +08:00
Rosen Penev
879838998e luajit: for powerpc, add FPU dependency
powerpc support as of 2.1 does not work with soft float.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d23ca0010c)
2021-07-14 19:26:19 -07:00