Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
19566 commits 8 branches 0 tags 65 MiB
Commit graph

19566 commits

This branch
This branch
All branches
Author SHA1 Message Date
Sebastian Kemper
0e1a289613 mariadb: bump to 10.4.13 
Upstream added define INSTALL_PAMDATADIR, so hardcoded path is gone.

Fixes:

  CVE-2020-2752
  CVE-2020-2812
  CVE-2020-2814
  CVE-2020-2760

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
 2020-05-17 22:18:25 +02:00
Sebastian Kemper
980291575e libmariadb: bump to 3.1.8 
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
 2020-05-17 22:15:40 +02:00
Josef Schlehofer
d4db36ea09
syslog-ng: update to version 3.27.1 
snmp-dest was moved to afsnmp

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2020-05-17 17:54:04 +02:00
Kevin Darbyshire-Bryant
a809dc6f3b collectd: Improve sqm_collectd error reporting 
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
 2020-05-17 16:17:07 +01:00
Josef Schlehofer
cb7d8210d3
Merge pull request #12091 from pprindeville/syslog-ng-restore-reload 
syslog-ng: restore service "reload" to actually working
 2020-05-17 15:40:48 +02:00
Hannu Nyman
a5af595a55
Merge pull request #12193 from lnslbrty/master 
netatop: update to version 3.1
 2020-05-17 13:08:48 +03:00
Toni Uhlig
c25b61ac02
netatop: update to version 3.1 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2020-05-17 12:01:28 +02:00
Rosen Penev
498527fa50
Merge pull request #12191 from neheb/libwebp 
libwebp: fix compilation under ARM without NEON
 2020-05-17 00:24:21 -07:00
Lucian Cristian
a659c58f29 libreswan: various fixes 
start if kernel has missing ipv6 support
add libcap-ng support
fix some errors displayed on syslog

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-05-17 04:57:48 +03:00
Rosen Penev
a80658beeb
libwebp: fix compilation under ARM without NEON 
The CMake logic seems broken. Luckily it's easy to work around.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-05-16 18:29:08 -07:00
Rosen Penev
541769ddf4
fuse3: add 
libfuse3 is used by newer versions of sshfs.

utils require udev, which is not present in OpenWrt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-05-16 17:31:51 -07:00
Rosen Penev
45c37a235a
fuse: update to 2.9.9 
Refreshed patches.

Fixed license information.

Minor adjustments.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-05-16 17:26:30 -07:00
Rosen Penev
348358bd50
fuse: import from base 
This belongs here. All dependent packages are located here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-05-16 17:26:30 -07:00
Rosen Penev
dad8672037
Merge pull request #12180 from lucize/libcapng 
libcap-ng: add package libcap-ng
 2020-05-16 16:42:58 -07:00
Hannu Nyman
479e438400
Merge pull request #12188 from jefferyto/golang-1.14.3 
golang: Update to 1.14.3
 2020-05-16 23:41:55 +03:00
Jeffery To
2b8f9b7349 golang: Update to 1.14.3 
This also removes a (useless) test for PKG_GO_ZBOOTSTRAP_MODS (it is
always non-empty).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2020-05-17 03:37:45 +08:00
Rosen Penev
7235ec41c3
Merge pull request #12181 from micmac1/apa-suid 
apache: tighten log dir + suEXEC
 2020-05-16 12:26:09 -07:00
Hannu Nyman
ca408508d5
Merge pull request #12186 from lucize/nsslto 
nss: revert -flto change
 2020-05-16 21:30:37 +03:00
Lucian Cristian
630c19f648 nss: revert -flto change 
it seems that it can lead to segfault in libfreebl3.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-05-16 21:06:53 +03:00
Sebastian Kemper
07db6b4a39 apache: revisit suEXEC setup 
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
 2020-05-16 14:47:37 +02:00
Lucian Cristian
16ecc549f1 libcap-ng: add package libcap-ng 
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-05-16 15:28:52 +03:00
Sebastian Kemper
dbaad2fa44 apache: create log directory o= 
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
 2020-05-16 14:24:05 +02:00
Michael Heimpold
04575c258e php7-pecl-redis: update to 5.2.2 
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2020-05-16 14:09:51 +02:00
Michael Heimpold
ceb660cc61 php7: update to 7.4.6 
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
 2020-05-16 13:56:33 +02:00
Hannu Nyman
909f4c6638
Merge pull request #12179 from wvdakker/master 
Shorewall: Bump to 5.2.4.5
 2020-05-16 11:58:13 +03:00
W. van den Akker
fbed8ff1e7
Shorewall6: Bump to 5.2.4.5 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-05-16 10:35:30 +02:00
W. van den Akker
49a930dae6
Shorewall: Bump to 5.2.4.5 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-05-16 10:34:21 +02:00
W. van den Akker
10afa55dfb
Shorewall6-lite: Bump to 5.2.4.5 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-05-16 10:33:12 +02:00
W. van den Akker
3a61f1244d
Shorewall-lite: Bump to 5.2.4.5 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-05-16 10:32:11 +02:00
W. van den Akker
fba9ad6c3b
Shorewall-core: Bump to 5.2.4.5 
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
 2020-05-16 10:31:02 +02:00
Rosen Penev
9f4cde559c
Merge pull request #12167 from lucize/nsslto 
nss: add -flto and makefile cleanup
 2020-05-15 12:55:33 -07:00
Rosen Penev
a85753f2e4
Merge pull request #12166 from lucize/nsprlto 
nspr: nspr add -flto to compile
 2020-05-15 12:55:16 -07:00
Rosen Penev
1efe4cf4a1
Merge pull request #12170 from kagurazakakotori/open-vm-tools 
open-vm-tools: bump to version 11.1.0
 2020-05-15 12:53:01 -07:00
Lucian Cristian
47570b4cf5 nss: add -flto and makefile cleanup 
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-05-15 16:28:23 +03:00
Lucian Cristian
df7392149c nspr: nspr add -flto to compile 
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-05-15 10:29:23 +03:00
Rosen Penev
66c94cd4e9
Merge pull request #12168 from lucize/libreswup 
libreswan: update to 3.32
 2020-05-14 20:45:37 -07:00
Rosen Penev
c732b9358c
Merge pull request #12172 from rs/nextdns-1.5.8-master 
nextdns: Update to version 1.5.8
 2020-05-14 20:45:16 -07:00
Rosen Penev
fbc719b3f3
Merge pull request #12162 from neheb/upnp23 
npupnp updates
 2020-05-14 20:44:53 -07:00
Olivier Poitrey
5d6e75743a nextdns: Update to version 1.5.8 
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
 2020-05-14 23:41:01 +00:00
Rosen Penev
8302890162
Merge pull request #12149 from ja-pa/python-atomicwrites-udate 
python-atomicwrites: update to version 1.4.0
 2020-05-14 16:14:45 -07:00
Rosen Penev
2ad0aab050
Merge pull request #12161 from neheb/faad22 
faad2: update to 2.9.2
 2020-05-14 16:14:04 -07:00
Rosen Penev
aee7061658
Merge pull request #12165 from jefferyto/golang-tweaks 
golang: Various improvements/tweaks
 2020-05-14 16:13:44 -07:00
Kagurazaka Kotori
24a12c8f28
open-vm-tools: bump to version 11.1.0 
Signed-off-by: Kagurazaka Kotori <kagurazakakotori@gmail.com>
 2020-05-15 02:30:46 +08:00
Rosen Penev
d9328d42bd
Merge pull request #12130 from jefferyto/python3-find-stdlib-depends 
python3: Add script to help find standard library dependencies
 2020-05-14 09:06:30 -07:00
Jeffery To
d4d78c2511 python3: Add script to help find standard library dependencies 
This adds a script that searches a Python package's source code to find
imports for separately-packaged standard library modules.

The script can be run by calling make with the configure target and
"PY3=stdlib V=s" arguments, e.g.

    make package/python3-lxml/configure PY3=stdlib V=s

This also updates the readme on how to call this script, as well as more
information on Python package dependencies in general.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2020-05-14 23:38:24 +08:00
Lucian Cristian
7d969ca3e1 libreswan: update to 3.32 
also add -flto to compiler flags

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-05-14 16:32:10 +03:00
Jeffery To
da3fb97b9c golang: Set/reset default platform options for target Go compiler 
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.

This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2020-05-14 17:45:18 +08:00
Rosen Penev
a22fff844d
Merge pull request #9865 from peter-stadler/etesync 
etesync-server: add package and configuration for running with uwsgi on nginx [RFC]
 2020-05-14 00:24:59 -07:00
Peter Stadler
62609f1587 nginx: do not reduce max processes 
Use the upstream value for NGX_MAX_PROCESSES (=1024) again.
So it is safe to use `worker_processes auto;` (which sets it to
the number of CPUs). Also use this directive in the conf instead
of calculating the number in the init and passing it as argument.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
 2020-05-14 09:19:45 +02:00
Rosen Penev
ba2c714aa8
Merge pull request #12075 from ja-pa/redis-update 
redis: update to version 6.0.1
 2020-05-13 16:33:16 -07:00