Commit graph

18668 commits

Author SHA1 Message Date
Michael Heimpold
e9ee517600 php7: update to 7.4.4
This fixes:
  - CVE-2020-7064
  - CVE-2020-7065
  - CVE-2020-7066

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-03-26 23:42:08 +01:00
Rosen Penev
5a178ae61b
Merge pull request #11674 from nxhack/node-homebridge_0_4_53
node-homebridge: update to 0.4.53
2020-03-26 13:00:01 -07:00
Hannu Nyman
09fd4445b3 nano: update to 4.9
Update nano editor to version 4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-03-26 21:36:36 +02:00
Jan Pavlinec
54c6d6dc0c tor: update to version 0.4.2.7 (security fix)
Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-03-26 08:52:29 -10:00
Hannu Nyman
286557e906 collectd: disable onewire plugin, BROKEN since 2009
Mark the onewire plugin as disabled, as the plugin
has been marked BROKEN since it was introduced in 2009 by
https://git.openwrt.org/?p=openwrt/svn-archive/packages.git;a=commitdiff;h=0de38b88d6ba8c52b8386d3059baba7dca22961f

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-03-26 18:48:52 +02:00
Nikos Mavrogiannopoulos
c5854a8f1a
Merge pull request #11603 from neheb/libssh
libssh: fix compilation without deprecated OpenSSL APIs
2020-03-26 12:35:29 +01:00
Yousong Zhou
88dcd09487 openvswitch: depend on IPV6 for intree kmods
Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-03-26 15:50:34 +08:00
Yousong Zhou
07d6310d2f openvswitch: unset CONFIG_AUTOREMOVE
Phase 2 buildbots with this option enabled will cleanup openvswitch
build dir which is needed later when building ovn

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-03-26 15:50:34 +08:00
Hirokazu MORIKAWA
4f99f17a70 node-homebridge: update to 0.4.53
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-03-26 16:12:59 +09:00
Rosen Penev
4be60489bf libssh: fix compilation without deprecated OpenSSL APIs
Cleaned up Makefile.

Fixed license information.

Simplified big endian condition.

Removed InstallDev section. CMAKE_INSTALL handles it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-03-25 20:51:26 -07:00
Rosen Penev
46427d39f9
Merge pull request #11673 from wvdakker/master
Shorewall: Bump to version 5.2.4
2020-03-25 20:49:31 -07:00
Rosen Penev
4045eff0ae
Merge pull request #11627 from neheb/pfr
libpfring: update to 7.6.0
2020-03-25 20:43:38 -07:00
Rosen Penev
dbc29e8dfb
Merge pull request #11580 from tiagogaspar8/kea-1.6.2-update
Update kea to the latest stable verion (1.6.2).
2020-03-25 20:42:23 -07:00
W. van den Akker
3c18dc63df
All: Update mirror sites.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-25 23:50:41 +01:00
W. van den Akker
fa6db1f8af
Shorewall6: Bump to version 5.2.4.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-25 23:22:03 +01:00
W. van den Akker
61c5cb44fd
Shorewall: Bump to version 5.2.4.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-25 23:20:41 +01:00
W. van den Akker
66f416914a
Shorewall6-lite: Bump to version 5.2.4.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-25 23:02:09 +01:00
W. van den Akker
15c28c40e6
Shorewall-lite: Bump to version 5.2.4.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-25 23:00:00 +01:00
W. van den Akker
8982782027
Shorewall-core: Refresh patch
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-25 22:57:23 +01:00
W. van den Akker
c81b3d4af5
Shorewall-core: Bump to version 5.2.4.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-25 22:57:12 +01:00
Hannu Nyman
ebd4c834e0
Merge pull request #11670 from lucize/nssup
nss: update to 3.51
2020-03-25 23:08:09 +02:00
Hannu Nyman
6b90684e97
Merge pull request #11672 from lucize/clamup
clamav: update to 0.102.2
2020-03-25 23:07:40 +02:00
Hannu Nyman
5ff9618ee5
Merge pull request #11671 from lucize/doveup
dovecot: update to 2.3.10
2020-03-25 23:07:23 +02:00
Hannu Nyman
e3e3e7f752
Merge pull request #11668 from lucize/openfortivpnup
openfortivpn: update to 1.13.2
2020-03-25 23:07:13 +02:00
Hannu Nyman
eb0cf43e55
Merge pull request #11666 from lucize/libreup
libreswan: update to 3.31
2020-03-25 23:06:57 +02:00
Lucian Cristian
24eeea366d clamav: update to 0.102.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-03-25 21:19:01 +02:00
Lucian Cristian
f1fcdf2adb dovecot: update to 2.3.10
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-03-25 20:43:13 +02:00
Lucian Cristian
edd2690815 nss: update to 3.51
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-03-25 19:35:41 +02:00
Lucian Cristian
b18c316cf5 openfortivpn: update to 1.13.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-03-25 18:43:53 +02:00
Lucian Cristian
1c0935bb86 libreswan: update to 3.31
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-03-25 17:34:05 +02:00
Stijn Tintel
ce15a63a9e
Merge pull request #11662 from SvenRoederer/patch-1
strongswan: add conffiles for swanctl util
2020-03-25 15:29:18 +02:00
Sven Roederer
49f298eb74
strongswan: add conffiles for swanctl util
Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
2020-03-25 12:03:48 +01:00
Rosen Penev
15d7a73f19
Merge pull request #11649 from neheb/upnp2
libupnp: enable reuseaddr
2020-03-24 16:11:32 -07:00
Rosen Penev
46c88779b2
Merge pull request #11651 from neheb/nbmfghhf
libcap: apply pkgconfig fix to libpsx.pc as well
2020-03-24 16:11:09 -07:00
Marc Benoit
a9443eb0eb syncthing: configuration cleanup & hardening
Run the service under an unprivileged
user account

The following parameters are now configurable
  niceness
  max concurrency (defaults to number of CPUs)
  user

Added flags "-no-browser"
Disabled in-place upgrades (disabled in the
build already)

Redirected stderr/stdout to syslog

Added support for "reload_config"

Increased "term_timeout" to 15s to give it
plenty of time to shut down gracefully

Properly handled non-existing directories

Removed a softlink that assumes a specific naming
convention in syncthing

Added a comment that using external storage is a
recommend configration

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
[increased package release]
Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-03-24 10:36:51 -10:00
Karl Palsson
36f350c582 net/pagekitec: support status reporting json file
Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:17:53 +00:00
Karl Palsson
c549596b62 net/pagekitec: Update to newest version
Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:17:53 +00:00
Rosen Penev
eef3d14af7
Merge pull request #11655 from nxhack/node_follow_icu_version
node: Change icu version specification
2020-03-24 03:20:34 -07:00
Rosen Penev
e592c06b08
Merge pull request #11657 from jefferyto/newt-remove-patch
newt: Remove python_init_once.patch
2020-03-24 03:20:16 -07:00
Daniel Engberg
b827691a62
Merge pull request #11656 from BKPepe/youtubedl
youtube-dl: update to version 2020.3.24
2020-03-24 10:05:17 +01:00
Jeffery To
cf1579a75c newt: Remove python_init_once.patch
It was pointed out in #11504 that the code in python_init_once.patch is
incorrect; the patch does not prevent newtInit() from being called more
than once (in fact it is called twice the first time initScreen() is
called).

Testing without the patch, using the example code from the corresponding
Debian bug report[1], did not result in any segfaults.

This removes the patch from the package build.

Supersedes #11504.

[1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=557960#5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-03-24 15:51:55 +08:00
Josef Schlehofer
0085b928f7
youtube-dl: update to version 2020.3.24
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-24 08:15:43 +01:00
Rosen Penev
192bbbc8d2
Merge pull request #11650 from neheb/ksmb
ksmbd update
2020-03-23 23:36:35 -07:00
Hirokazu MORIKAWA
a0a18df42c node: Change icu version specification
modify host icu library path

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-03-24 13:26:34 +09:00
Paul Spooren
3a651638ce syncthing: bump to 1.4.0
Release information:
https://github.com/syncthing/syncthing/releases/tag/v1.4.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-03-23 17:18:01 -10:00
Yousong Zhou
0fa07ed578 openvswitch: openvswitch.mk: add ovs_common_depends variable
This is to address the need that openvswitch starting with 2.13 now
depends on libunwind for handling SIGSEGV (upstream commit e2ed6fbeb18
("fatal-signal: Catch SIGSEGV and print backtrace"))

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-03-24 10:45:57 +08:00
Paul Spooren
b85e387cc2 syncthing: fixup version detection
Since upstream commit dc92994 the LDFLAGS used for settings the version
(and build host and user) changed resulting in "unknown" versions in
syncthing.

Correct version detection is important for syncthing to assure
compatibility with other running instances. The "unknown" version fails
to communicate and sync with correctly compiled instances.

This patch updates the syncthing Makefile to inject the correct
variables and thereby fixes the version detection in syncthing.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-03-23 16:37:36 -10:00
Rosen Penev
a0a1f058e5
libcap: apply pkgconfig fix to libpsx.pc as well
Made a bunch of libraries explicit for clarity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-03-23 16:54:00 -07:00
Rosen Penev
dd85d0a35c
ksmbd-tools: update to 3.2.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-03-23 16:42:12 -07:00
Rosen Penev
ffa184cc17
ksmbd: update to 3.1.6
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-03-23 16:42:12 -07:00