Commit graph

23902 commits

Author SHA1 Message Date
George Iv
fc598339c6 yggdrasil: bump to 0.4.0
- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit e135c4c867)
2021-07-20 20:57:25 -07:00
Rosen Penev
8d20c9ff4d
Merge pull request #16165 from stangri/21.02-vpnbypass
[21.02] vpnbypass: update to 1.3.2-1
2021-07-20 20:55:51 -07:00
Stan Grishin
4ea887e643 vpnbypass: updates to 1.3.2-1
bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-20 21:23:41 +00:00
Rosen Penev
28dacea430
Merge pull request #16154 from nwidger/niels/delve-1.7.0-openwrt-21.02
[openwrt-21.02] delve: Update to 1.7.0
2021-07-20 02:14:50 -07:00
Rosen Penev
903679ddb2
Merge pull request #16156 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.11.0
2021-07-20 02:14:18 -07:00
Josef Schlehofer
5e69e41081
Revert "net/miniupnpd: ext_ip_reserved_ignore support"
This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.

[1] https://github.com/openwrt/packages/issues/15258
[2] https://github.com/miniupnp/miniupnp/issues/542
[3] https://github.com/miniupnp/miniupnp/pull/511

This reverts commit b76aa99194.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 107f3376b5)
2021-07-20 10:25:21 +02:00
Jan Hak
117c6bf761
knot: update to version 3.0.8
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5f374929cf)
2021-07-20 09:40:04 +02:00
Jan Hak
1c69a52703
knot: update to version 3.0.7
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 8d66f49bae)
2021-07-20 09:39:55 +02:00
Tianling Shen
17809e28a1
yq: Update to 4.11.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a5f657ecf7)
2021-07-19 22:15:30 +08:00
Niels Widger
eabde6aab5 delve: Update to 1.7.0
See
https://github.com/go-delve/delve/blob/master/CHANGELOG.md#170-2021-07-19
for changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
(cherry picked from 098d61ca1)
2021-07-19 08:39:15 -04:00
Rosen Penev
d74aedca8a
Merge pull request #16150 from jefferyto/golang-1.16.6-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16.6
2021-07-19 03:38:16 -07:00
Jeffery To
ec9700fee4
golang: Update to 1.16.6
Includes fix for CVE-2021-34558 (crypto/tls: clients can panic when
provided a certificate of the wrong type for the negotiated parameters).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c0c62227bd)
2021-07-19 07:18:08 +08:00
Rosen Penev
b8a50d7a6c
Merge pull request #16147 from luizluca/21.02/sane-fix_backport
[21.02] sane-backends fix usbid generation (backport)
2021-07-17 21:30:46 -07:00
Sebastian Kemper
f7ba01cdd4 sane-backends: use macros (properly), remove chmod
- use $(INSTALL_DIR) instead of mkdir
- using $(INSTALL_CONF) and then running chmod is pointless, use
  $(INSTALL_DATA) directly
- /etc/xinetd.d/sane-port doesn't need read protection from non-root
  users, use $(INSTALL_DATA) as well

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit f37006c2e6)
2021-07-18 00:58:40 -03:00
Sebastian Kemper
041e287766 sane-backends: fix usbid file generation
On some build systems (build bots, Debian Buster for example) the
current mechanism in the Build/Install define doesn't run. Replace it
with shell fu that works.

Issue was reported, see [1].

[1] https://github.com/openwrt/packages/issues/16085

Fixes #16085

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 977109e286)
2021-07-18 00:58:28 -03:00
Alexandru Ardelean
a0183d3f68 stress-ng: bump to version 0.12.10
Patch `010-soft-float.patch` can be dropped.
It was upstreamed via https://github.com/ColinIanKing/stress-ng/pull/126

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 6f48074e79)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
0805c11997 stress-ng: bump to version 0.12.07
Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 96692fa6c1)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
43a391e5fd stress-ng: bump to version 0.12.06
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 940492c577)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
752da2a8b9 stress-ng: bump to version 0.12.04
Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 987c82cc73)
2021-07-16 20:29:16 -07:00
Luiz Angelo Daros de Luca
23925c77a7 ruby: update to 3.0.2
This release fixes some bugs and these vulnerabilities:

* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 1b41e8f641)
2021-07-16 16:07:23 +02:00
Rosen Penev
2b73ad0483
Merge pull request #16119 from commodo/python-updates1-21.02
[21.02] python-{simplejson,cffi}: bump versions
2021-07-15 11:44:35 -07:00
Rosen Penev
e67f5868a7
Merge pull request #16125 from jefferyto/addrwatch-fixes-openwrt-21.02
[openwrt-21.02] addrwatch: Various fixes
2021-07-15 11:42:00 -07:00
Rosen Penev
1d3a342f6b
Merge pull request #16128 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.8
2021-07-15 11:41:42 -07:00
Nick Hainke
dd1930f032 dawn: update to 2021-07-11
ec9a3a9 fix GCC11 compilation

Thanks to neheb and cotequeiroz.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee4616fb43b489003cab957e3a2d6f5f14c6fb97)
2021-07-15 18:58:07 +02:00
Nick Hainke
c6fcfda213 dawn: update to 2021-07-08
555268b ubus: filter neighbors by SSID when preparing nr
3db9607 data storage: match SSID when searching ap entry
a22f5a7 storage: ensure SSID strings are NULL-terminated

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 163ccbf0236824b29fd2158d3a287dda5e427b00)
2021-07-15 18:58:07 +02:00
Tianling Shen
8aeb26b413
yq: Update to 4.9.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 855e5b6eb5)
2021-07-15 17:25:58 +08:00
Jeffery To
cc78ba6b58
addrwatch: Various fixes
Makefile changes include:

* Remove USE_UCLIBC, as uclibc is no longer supported

* Package output modules

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  374cfd2cab

* 004-more-specific-library-linking.patch - from
  27b57d9da3

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Change from explicit disable to explicit enable, so that the service
  is disabled by default and on first install

* Set config option default values to default values of the main binary

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 31ae85bca9)
2021-07-15 15:51:35 +08:00
James Vorderbruggen
6a24f88c3b yggdrasil: allow HTTPS connections
Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>
(cherry picked from commit ffff347396)
2021-07-14 12:27:58 -07:00
George Iv
0a5ab68823 yggdrasil: bump to 0.3.16
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 76b642b50f)
2021-07-14 12:27:58 -07:00
Alexandru Ardelean
79417f0a37 python-cffi: bump to version 1.14.6
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e08b94b753)
2021-07-14 11:22:04 +03:00
Alexandru Ardelean
02a0c8a4fb python-simplejson: bump to version 3.17.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3f2d7052743500e993a5f4a39cef0dc0eaac4d60)
2021-07-14 09:41:10 +03:00
Etienne Champetier
1954ed36ab openvpn: enable LZO support by default for OpenSSL variant
User that don't control both OpenVPN client and server
might still need LZO support, so keep it enable by default for at least
OpenSSL variant.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 03c3c92496)
2021-07-13 11:51:46 -04:00
Josef Schlehofer
827fa8e21f
syslog-ng: disable mqtt
For now, disable mqtt as it was automatically enabled as the build
system finds compiled libpaho-mqtt-c and requires dependency.

---
Here is the output:
Package syslog-ng is missing dependencies for the following libraries:
libpaho-mqtt3c.so.1
---

This is a new feature since syslog-ng 3.33.1 and if anyone is interested
in it, it can be enabled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e319e89fde)
2021-07-12 16:17:35 +02:00
Florian Eckert
f584949682 mwan3: bump PKG_VERSION to 2.10.11
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 44d79147ea)
2021-07-12 09:53:48 +02:00
Florian Eckert
7e71550f14 mwan3: add troublshoot command from LuCI
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 619b721c2f)
2021-07-12 09:53:25 +02:00
Florian Eckert
4f5b05ab8c mwan3: cleanup help output
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9dac71e3d)
2021-07-12 09:53:06 +02:00
Josef Schlehofer
588d781dfb
syslog-ng: update to version 3.33.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.1

- Bump version in config
It fixes:
WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.33 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.31'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2b4be08a8c)
2021-07-12 06:16:53 +02:00
Josef Schlehofer
8f284fa00d
Merge pull request #16088 from turris-cz/21.02/lxc-change-gpgkeyserver
lxc: add patch to switch GPG server
2021-07-11 20:44:19 +02:00
Rosen Penev
56d7a225e2
apache: update to 2.4.48
Refreshed patch.

Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6dfd07097d)
2021-07-11 12:00:52 +02:00
Rosen Penev
bed3caea8a
Merge pull request #16093 from Andy2244/samba-4.14.5_(21)
[21.02] samba4: update to 4.14.5
2021-07-11 00:10:49 -07:00
Rosen Penev
f66e5a184a
Merge pull request #16092 from Andy2244/libtirpc-1.3.2_-21]
[21.02] libtirpc: update to 1.3.2
2021-07-11 00:10:44 -07:00
Rosen Penev
e490f89de7
Merge pull request #16091 from Andy2244/rpcbind-1.2.6_-21]
[21.02] rpcbind: update to 1.2.6
2021-07-11 00:10:36 -07:00
Rosen Penev
1d662b100a
Merge pull request #16090 from Andy2244/softethervpn-5.02.5180_(21)
[21.02] softethervpn5: update to 5.02.5180
2021-07-11 00:10:32 -07:00
Rosen Penev
e36ffd6a65
Merge pull request #16094 from Andy2244/wsdd2-git-2021-06-28_(21)
[21.02] wsdd2: update to git 2021-06-28
2021-07-11 00:10:26 -07:00
Daniel Golle
e11d70d0c0
transmission: add new syscalls to seccomp filter
Testing showed that additional syscalls are needed on ARMv7.
Add "getegid32", "geteuid32", "getgid32" and "getrandom" as they are
all innocent.
Bump PKG_RELEASE.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1141ee1e51
and commit a78e527012)
2021-07-10 22:58:48 +01:00
Josef Schlehofer
ee11ce67a2
netdata: update to version 1.30.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1d532fa545)
2021-07-10 22:29:33 +02:00
Andy Walsh
3ac73fa18b wsdd2: update to git 2021-06-28
* update to git 2021-06-28
* add extra startup delay

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:11:11 +02:00
Andy Walsh
7723235f47 samba4: update to 4.14.5
* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:09:29 +02:00
Andy Walsh
a2a9702f8a softethervpn5: update to 5.02.5180
* update to 5.02.5180
* add dep: libsodium

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:07:47 +02:00
Andy Walsh
104af774c6 rpcbind: update to 1.2.6
* update to 1.2.6
* remove upstream merged patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 20:56:50 +02:00