Commit graph

23869 commits

Author SHA1 Message Date
Florian Eckert
f584949682 mwan3: bump PKG_VERSION to 2.10.11
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 44d79147ea)
2021-07-12 09:53:48 +02:00
Florian Eckert
7e71550f14 mwan3: add troublshoot command from LuCI
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 619b721c2f)
2021-07-12 09:53:25 +02:00
Florian Eckert
4f5b05ab8c mwan3: cleanup help output
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9dac71e3d)
2021-07-12 09:53:06 +02:00
Josef Schlehofer
588d781dfb
syslog-ng: update to version 3.33.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.1

- Bump version in config
It fixes:
WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.33 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.31'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2b4be08a8c)
2021-07-12 06:16:53 +02:00
Josef Schlehofer
8f284fa00d
Merge pull request #16088 from turris-cz/21.02/lxc-change-gpgkeyserver
lxc: add patch to switch GPG server
2021-07-11 20:44:19 +02:00
Rosen Penev
56d7a225e2
apache: update to 2.4.48
Refreshed patch.

Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6dfd07097d)
2021-07-11 12:00:52 +02:00
Rosen Penev
bed3caea8a
Merge pull request #16093 from Andy2244/samba-4.14.5_(21)
[21.02] samba4: update to 4.14.5
2021-07-11 00:10:49 -07:00
Rosen Penev
f66e5a184a
Merge pull request #16092 from Andy2244/libtirpc-1.3.2_-21]
[21.02] libtirpc: update to 1.3.2
2021-07-11 00:10:44 -07:00
Rosen Penev
e490f89de7
Merge pull request #16091 from Andy2244/rpcbind-1.2.6_-21]
[21.02] rpcbind: update to 1.2.6
2021-07-11 00:10:36 -07:00
Rosen Penev
1d662b100a
Merge pull request #16090 from Andy2244/softethervpn-5.02.5180_(21)
[21.02] softethervpn5: update to 5.02.5180
2021-07-11 00:10:32 -07:00
Rosen Penev
e36ffd6a65
Merge pull request #16094 from Andy2244/wsdd2-git-2021-06-28_(21)
[21.02] wsdd2: update to git 2021-06-28
2021-07-11 00:10:26 -07:00
Daniel Golle
e11d70d0c0
transmission: add new syscalls to seccomp filter
Testing showed that additional syscalls are needed on ARMv7.
Add "getegid32", "geteuid32", "getgid32" and "getrandom" as they are
all innocent.
Bump PKG_RELEASE.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1141ee1e51
and commit a78e527012)
2021-07-10 22:58:48 +01:00
Josef Schlehofer
ee11ce67a2
netdata: update to version 1.30.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1d532fa545)
2021-07-10 22:29:33 +02:00
Andy Walsh
3ac73fa18b wsdd2: update to git 2021-06-28
* update to git 2021-06-28
* add extra startup delay

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:11:11 +02:00
Andy Walsh
7723235f47 samba4: update to 4.14.5
* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:09:29 +02:00
Andy Walsh
a2a9702f8a softethervpn5: update to 5.02.5180
* update to 5.02.5180
* add dep: libsodium

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:07:47 +02:00
Andy Walsh
104af774c6 rpcbind: update to 1.2.6
* update to 1.2.6
* remove upstream merged patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 20:56:50 +02:00
Andy Walsh
90341aa793 libtirpc: update to 1.3.2
* update to 1.3.2

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 20:54:53 +02:00
Josef Schlehofer
c66b3dc45a
lxc: add patch to switch GPG server
By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.

Use the same GPG server as LXC is using by default in the newer
releases.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-10 18:05:53 +02:00
Josef Schlehofer
d948dc938b
Merge pull request #16065 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.7
2021-07-08 06:22:32 +02:00
Tianling Shen
a5a176d867
yq: Update to 4.9.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit faf915e97d)
2021-07-07 20:33:01 +08:00
Rosen Penev
ea8d0d246e
Merge pull request #16050 from nxhack/2102_libuv_CVE-2021-22918
[21.02] libuv: fix CVE-2021-22918
2021-07-06 23:02:17 -07:00
Alexandru Ardelean
4bc55dd043 python3: do a simple ls on pip & setuptools if not selected for build
I seem to forget to check/select setuptools and pip (that come bundled with
Python).
This change will do a simple 'ls' on the 2 wheel files, so that the build
fails even if just building Python.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-06 16:20:30 +02:00
Alexandru Ardelean
ef50ed85a5 python3: update to version 3.9.6
Refreshed patches.
Bumped pip to 21.1.3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 44e009364f5a115172f5825fbfd8c0b3730021a5)
2021-07-06 16:20:30 +02:00
Daniel Golle
033b04ee70 mwan3: use default routes from additional tables
Until now the additional tables listed in gobal 'rt_table_lookup' were
not considered for interfaces.
In order to be able to also use interface-defined routes from tables
other than main, consider also tables listed in 'rt_table_lookup'.
Update version to 2.10.10 as requested by maintainer.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cb02b42007)
2021-07-06 08:00:17 +02:00
Hirokazu MORIKAWA
790a49c09f libuv: fix CVE-2021-22918
idna: fix OOB read in punycode decoder

libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.

b7466e31e4
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-06 14:02:43 +09:00
Nikos Mavrogiannopoulos
bfd2ad7a09
Merge pull request #16015 from DeathCamel58/openconnect-backport-iconv/intl-fixes
openconnect: backport iconv/intl fix
2021-07-05 19:43:08 +02:00
Rosen Penev
99c42c4b3e
Merge pull request #16042 from commodo/django-bump-21.02
[21.02] django: bump to version 3.2.5
2021-07-05 02:54:56 -07:00
Alexandru Ardelean
c605f4cb4c django: bump to version 3.2.5
Several bug-fixes.
Fix CVE-2021-35042

Release notes:
  https://docs.djangoproject.com/en/3.2/releases/3.2.5/

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3ee863421a675c41848261a17df145716a23d907)
2021-07-05 10:48:42 +03:00
Rosen Penev
23a799a7db
Merge pull request #16013 from commodo/python-dateutil-21.02
[21.02] python-dateutil: add setuptools-scm build dep
2021-07-03 15:16:37 -07:00
Rosen Penev
8a2619b8ca
Merge pull request #16024 from rs/nextdns-1.34.2-openwrt-21.02
[21.02] nextdns: Update to version 1.34.2
2021-07-03 15:15:37 -07:00
Olivier Poitrey
63ca71937f nextdns: Update to version 1.34.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-02 18:54:54 +00:00
Baptiste Jonglez
57ed36db42 tessdata: uncompress tarball only once to speed up builds
The previous approach was to uncompress N times a big tarball (638 MB)
where N=130 is the number of supported languages.  Each iteration would
only extract a single file, but it still needs to uncompress the whole
tarball.  This is of course completely inefficient.

Now, we uncompress the tarball only once to extract all relevant files,
and then iterate N times to copy the file needed for each language.

This massively speeds up builds, at the expense of temporarily requiring
more build space (about 1 GB more)

Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
(cherry picked from commit 7fe513971f)
2021-07-02 20:37:50 +02:00
Rosen Penev
3d7d41f712 tessdata: update to 2.1.0
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 37bffba074)
2021-07-02 20:37:45 +02:00
Dylan Corrales
7d9210015d openconnect: backport iconv/intl fix
This was pulled from #14741. #14734 affects me as well on Debian 11.

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>
2021-07-02 12:11:03 -04:00
Alexandru Ardelean
5201d8739c python-dateutil: add setuptools-scm build dep
Following:
  https://github.com/openwrt/packages/pull/16004
  https://github.com/openwrt/packages/pull/15995
  https://github.com/openwrt/packages/issues/15988

It seems that dateutil requires setuptools-scm to be installed.
As such, this is being added as a dependency.

Also, bump setuptools-scm to version 6.0.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e2026346cc)
2021-07-02 16:23:23 +03:00
Dirk Brenken
c2657a2e96
adblock: update 4.1.3-2
* add a tcpdump option to resolve IPs in adblock reporting,
  set 'adb_represolve' accordingly (disabled by default). If enabled
  tcpdump will perform a reverse DNS (PTR) lookup for each IP address
* add 'stalkerware' source (provided by @astryzia)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5fd19d2e0)
2021-07-01 06:31:56 +02:00
Oskari Rauta
8e1a8026b9
crun: update to 0.20
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 0b609eb373)
2021-06-30 18:34:45 +02:00
Oskari Rauta
15b873947c
crun: bump to version 0.19.1
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 616d867e48)
2021-06-30 18:34:32 +02:00
Eneas U de Queiroz
dae7bdd915
crun: Don't build on arc
The package needs libseccomp, which does not currently support arc.
In order to avoid a circular dependency, we must avoid arc here as well.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 048e1d2d63)
2021-06-30 18:34:19 +02:00
Oskari Rauta
08abbfd9b4
crun: add package crun
crun is the prefered container run-time of podman, it's faster than
runc and has a much lower memory footprint.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 01d1a4969e)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Fixes: #15870
2021-06-30 18:33:54 +02:00
Daniel Golle
0f395b9947
auc: update to version 0.1.8
This fixes support for x86, auc now selects the right combined image
depending on the system being booted in EFI mode or not.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1204cb82f9)
2021-06-30 13:43:57 +01:00
Niels Widger
51dd1c1fdb delve: add package
Signed-off-by: Niels Widger <niels@qacafe.com>
2021-06-29 20:56:18 +03:00
Rosen Penev
e81fa692af
Merge pull request #15987 from G-M0N3Y-2503/backport-cache-domains-fix-wildcard
cache-domains: Fixed missing wildcard entries
2021-06-28 16:34:40 -07:00
Gerard Ryan
3fef9fffa7 cache-domains: Fixed missing wildcard entries
The fix requires the use of the generated dnsmasq `lancache.conf` file.
So I moved configuration of the hosts directory out of the UCI and into
the generated dnsmasq configuration file to simplify the script.

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-27 17:29:02 +10:00
Rosen Penev
dc67b2a183
Merge pull request #15976 from rs/nextdns-1.33.11-openwrt-21.02
[21.02] nextdns: Update to version 1.33.11
2021-06-26 12:43:56 -07:00
Olivier Poitrey
24e67d6fa7 nextdns: Update to version 1.33.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-06-26 18:00:32 +00:00
Dirk Brenken
4692a31beb
travelmate: startup fixes
* fix a possible race condition during boot
* use the new "device" syntax in the network wizard

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e407566cce)
2021-06-25 23:19:21 +02:00
Rosen Penev
6b85a951c5
Merge pull request #15940 from mkrkn/openwrt-21.02
[21.02] openvpn: update to 2.5.3
2021-06-23 16:42:51 -07:00
Magnus Kroken
29eab35c68 openvpn: update to 2.5.3
Remove upstreamed patch and fix test.sh script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2021-06-23 22:00:04 +02:00