Commit graph

23596 commits

Author SHA1 Message Date
Magnus Kroken
f5c82550da openvpn: update to 2.5.1
Set myself as maintainer.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(cherry-picked from commit 204c0901b8)
2021-04-07 22:54:36 +02:00
Jan Pavlinec
6241ec3f62
curl: update to version 7.76.0
Fixes CVE-2021-22876 and CVE-2021-22890

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b971310549)
2021-04-07 14:19:54 +02:00
Rafał Dzięgiel
d9ac276fba
libdvbcsa: add new package
Libdvbcsa is a free implementation of the DVB Common Scrambling Algorithm DVB/CSA - with encryption and decryption capabilities.

OpenWrt packages like `tvheadend` and `minisatip` can benefit from it.

Signed-off-by: Rafał Dzięgiel <rafostar.github@gmail.com>
(cherry picked from commit 51c5a8b4bc)
2021-04-07 14:19:41 +02:00
Jan Pavlinec
7f2d84615e
python-pytest: update to version 6.2.3
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e979ceb6b)
2021-04-07 14:18:59 +02:00
Jan Pavlinec
ed91ba746a
knot-resolver: update to version 5.3.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3e3025b191)
2021-04-07 14:18:53 +02:00
Josef Schlehofer
a6cd649edf
youtube-dl: update to version 2021.4.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 701ded952a)
2021-04-07 14:18:47 +02:00
Josef Schlehofer
f5246aaa29
zeroconf: update to version 0.29.0
Update copyright in Makefile

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 757b0ea647)
2021-04-07 14:18:42 +02:00
Rosen Penev
9e9560362a ksmbd: update to 3.3.8
Major changes are:
  clean-up codes using checkpatch --strict option.
  fix several warning and build failure from linux-next.
  change the minimum supported kernel version to v5.4.
  use xarray for tree connect list.
  fix reviews from lkml.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fa6f182a21)
2021-04-07 00:49:09 -07:00
Rosen Penev
454280ae49 ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:57 -07:00
Kirill Nikolaev
40d885de8e ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:57 -07:00
Sven Roederer
b007b4854c xinetd: honor ${IPKG_INSTROOT} when sourcing /lib/functions.sh
Avoid "file not found"-error when embedding via Imagebuilder.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit bdab7e6bfe)
2021-04-07 08:33:45 +02:00
Philip Prindeville
27caf23cc4 strongswan: bump to 5.9.2
Retire weak algorithms like MD5 and 3DES.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ae3d5aa73e)
2021-04-06 16:05:19 -07:00
Philip Prindeville
11e289b48b strongswan: force PIC on all builds
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit a72780a9c2)
2021-04-06 16:05:19 -07:00
Philip Prindeville
57836bb7d0 strongswan: migrate to swanctl configs
Derived from the ipsec initd script, with the following changes:

(1) various code improvements, corrections (get rid of left/right
    updown scripts, since there's only one), etc;
(2) add reauth and fragmentation parameters;
(3) add x.509 certificate-based authentication;

and other minor changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit f9d91f1f47)
2021-04-06 16:05:19 -07:00
Philip Prindeville
a6eaab4553 strongswan: remove synthesized ipsec conf files
If you shutdown ipsec service, and it doesn't clean up
/var/ipsec/ipsec.conf, then when you start swanctl service it
might see an incompatible file on startup.  Remedy is to
remove unneeded files when shutting down the service.  They
can always be regenerated when the service starts again.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit baa38a1420)
2021-04-06 16:05:19 -07:00
Philip Prindeville
c5335e865d strongswan: move ipsec conf files to subpackage
These config files are only used by the ipsec interface to charon,
and shouldn't be part of the base package.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit e626255b37)
2021-04-06 16:05:19 -07:00
Philip Prindeville
56feabdcdc strongswan: make the include's in the .conf files persistent
Having scripts diddle user written config files seems potentially
dangerous.  Plus there's really no downside to including some
empty files.  Best to just make the includes be permanent.

Additional feature suggested by Luiz: if a -opkg version of the
config file was created unnecessarily, remove it as part of the
upgrade process since changes won't be happening to that file
as an artifact of the service starting.  The include lines are
now permanent, which means that (1) additional configuration
synthesized by UCI won't be anywhere that opkg (or sysupgrade,
for that matter) cares about since it won't be persistent, and
(2) if changes are being made, then they're being done by a
person with an editor and they really should be distinguished.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 643df01275)
2021-04-06 16:05:19 -07:00
Philip Prindeville
2983a7f9ef strongswan: change maintainers
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 0bd4410e30)
2021-04-06 16:05:19 -07:00
Philip Prindeville
cc8a4252b1 strongswan: fix local_gateway discovery
This has been observed by myself and @luizluca: ip route get is
appending uid0 to the output, as seen from:

root@OpenWrt2:~# ip route get 1.1.1.1
1.1.1.1 via 174.27.160.1 dev eth3 src 174.27.182.184 uid 0
    cache
root@OpenWrt2:~#

so the fix is an anchored match, discarding all else. Also, using
ip -o means never having to do multiline matches...

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ec72d3a9e4)
2021-04-06 16:05:19 -07:00
David Bauer
d9f1bc3754 mtd-rw: fix build failure with kernel 5.10
When building mtd-rw for a target based on Kernel 5.10 which has
CONFIG_MTD disabled the build fails with

ERROR: "put_mtd_device" [../mtd-rw.ko] undefined!
ERROR: "get_mtd_device" [../mtd-rw.ko] undefined!

Omit building the package for such a target.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c6b3d94929)
2021-04-06 16:02:22 -07:00
Rosen Penev
3a3b7c6eee clamav: update to 0.103.1
Convert to using CMake in order to speed up compilation and to fix
compilation under glibc.

Add extra dependencies since they're now needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7cd687cb7e)
2021-04-06 16:01:00 -07:00
Rosen Penev
e1b21ddda2 python3-libsemanage: update to 3.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit acb72e7452)
2021-04-06 15:59:19 -07:00
Rosen Penev
39023fe0a2 setools: update to 4.4.0
Remove no longer needed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 39bce0e719)
2021-04-06 15:59:19 -07:00
Ondřej Caletka
aefb3927ce jool: Update to 4.1.5
Compile and run tested on: mvebu (Turris Omnia)

Signed-off-by: Ondřej Caletka <ondrej@caletka.cz>
(cherry picked from commit 0c044284b7)
2021-04-06 14:51:29 -07:00
Sven Roederer
e9a109cc8c nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:29 -07:00
Karl Palsson
2fcc5d5c9f mosquitto: bump to 2.0.10
This is a security fix, affecting 2.0.0 through to 2.0.9.  Mosquitto instances
could be remotely DoS'd by authenticated clients.

Release notes at: https://github.com/eclipse/mosquitto/blob/v2.0.10/ChangeLog.txt
CVE number has not yet been assigned.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-06 14:14:57 +00:00
Christian Lachner
ab26cb98e1 haproxy: Update HAProxy to v2.2.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-04-06 12:56:14 +03:00
Gerard Ryan
d382ce0bc7 cache-domains: Fixed host files directory
* Hid unnecessary output

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-05 17:15:36 -07:00
Rosen Penev
58d5865471
Merge pull request #15331 from 1715173329/xray-2102
[openwrt-21.02] xray-core: Update to 1.4.2
2021-04-03 19:07:23 -07:00
Dirk Brenken
326661db31
banip: bugfix 0.7.6-2
* fix housekeeping of external list sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 86a20c7955)
2021-04-03 19:20:09 +02:00
Tianling Shen
5dd5cabd74
xray-core: Update to 1.4.2
Updated geo datas to latest version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 781c70077b)
2021-04-02 17:29:18 +08:00
Tianling Shen
5543e0925a
xray-core: init: add browser dialer support
Since v1.4.1, Xray has introduced a new feature to transfer data via
browsers, which can disguise itself as a normal browser to cheat
network censorship.

For more details, see https://github.com/XTLS/Xray-core/pull/421.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 736667ce6e)
2021-04-02 17:29:03 +08:00
Stan Grishin
d13b4c53f6 simple-adblock: jsonOps-related bugfixes
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-01 23:03:38 -10:00
Tianling Shen
fb402a71e0 xray-core: Update to 1.4.1
Updated geodata to latest version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from ee9868cb20f78b01df1996090f1fe224a5e4c017)
2021-03-31 17:37:39 -10:00
Tianling Shen
ee38781149 yq: Update to 4.6.3
- Re-assigned myself as the maintainer
- Used $(AUTORELEASE) for PKG_RELEASE

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 82ebe3e49a50075116da4b677eacae91e6fcd2c4)
2021-03-31 17:36:51 -10:00
Martin Matějek
c07c27ce7f
python3-pyroute2: update to version 0.5.16
Signed-off-by: Martin Matějek <martin.matejek@gmx.com>
(cherry picked from commit df4b1ae24e)
2021-03-30 21:47:40 +02:00
Dirk Brenken
28024c0ced
banip: update to 0.7.6
* rework the central iptables function to significantly
  reduce the code complexity and the overall number of iptables calls
* check early and only once in the chain for ctstate NEW and
  return otherwise (thanks @ldir-EDB0)
* made the whitelist ordering within the chain more flexible

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1235acdde6)
2021-03-29 17:54:02 +02:00
Josef Schlehofer
5dec63279c
hwdata: update to version 0.345
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5e30a07908)
2021-03-29 00:24:10 +02:00
Jan Pavlinec
7bd8b26e1e
python-zipp: update to version 3.4.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 7f85073979)
2021-03-29 00:23:44 +02:00
Jan Pavlinec
d3facdda9a
subversion: update to 1.14.1
Fixes CVE-2020-17525

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 0dd5354abc)
2021-03-29 00:23:34 +02:00
Jan Pavlinec
74b0a3de7e
zstd: update to version 1.4.9
Fixes CVE-2021-24032

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ebc4939dd2)
2021-03-29 00:23:09 +02:00
Jan Pavlinec
1f47b58bbe
git: update to version 2.30.2
Fixes CVE-2021-21300

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a4f058ec5c)
2021-03-29 00:23:00 +02:00
Paul Spooren
bb3eb4d98c
CI: use new openwrt Docker username
We now own `openwrtorg` and `openwrt`, where the latter replaces the
former. Slowly migrate over.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b164a3aa32)
2021-03-29 00:22:08 +02:00
Rosen Penev
7e7adfceef
reptyr: add mips64el to the DEPENDS list
MIPS is completely unsupported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 03515d00cd)
2021-03-29 00:21:49 +02:00
Rosen Penev
5e1909711a
bind: update to 9.17.11
Backport upstream OpenSSL deprecated API patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd64cb713b)
2021-03-29 00:21:38 +02:00
Josef Schlehofer
4322399166
netdata: update to version 1.29.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbfdc)
2021-03-29 00:21:31 +02:00
Josef Schlehofer
8870abe052
sshpass: update to version 1.09
Changelog [1]:
Version 1.09
	* Explicitly set the controlling TTY

Version 1.08
	* Report when IP key has changed
	* Scrub the environment variable for -e

Version 1.07
	* Pass signals that should terminate to ssh
	* Fix race around signal handling
	* Report IPC errors to stderr
	* Report if can't open -f password file

[1] https://sourceforge.net/p/sshpass/code/76/tree/trunk/ChangeLog

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5799d0b1ee)
2021-03-29 00:21:25 +02:00
Josef Schlehofer
ffdfd13550
nnn: update to version 3.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ad116f29ce)
2021-03-29 00:21:17 +02:00
Josef Schlehofer
ec9563fa21
syslog-ng: update to version 3.31.2
Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e968e)
2021-03-29 00:21:12 +02:00
Jan Pavlinec
7e33ed6ec0
gitlab-runner: update to version 13.10.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d7e2b608e6)
2021-03-29 00:15:44 +02:00