Commit graph

24344 commits

Author SHA1 Message Date
Josef Schlehofer
ce44e3f291
Merge pull request #15357 from BKPepe/netdata
netdata: update to version 1.30.0
2021-04-15 19:06:53 +02:00
Josef Schlehofer
27c6314e03
Merge pull request #15432 from turris-cz/clamav-add-libiconv-dependency
clamav: add libiconv dependencies when build with NLS
2021-04-15 17:11:28 +02:00
Josef Schlehofer
87be6ffe60
clamav: add libiconv dependencies when build with NLS
NLS means Native Language Support and when you have it enabled (it is
not default), clamav can not be compiled as it shows following error:

Package clamav is missing dependencies for the following libraries:
libiconv.so.2

Also, it is required that package libiconv-full is compiled first/before
than clamav and then try to compile clamav.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-15 09:44:30 +02:00
Philip Prindeville
c62d9ebec9
Merge pull request #15430 from pprindeville/strongswan-add-ipsec-warning
strongswan: add deprecation warning to ipsec script
2021-04-15 01:31:25 -06:00
Luiz Angelo Daros de Luca
2fe47aff5b openvpn-easy-rsa: add missing configfile
/etc/profile.d/50-openvpn-easy-rsa.sh was not listed as configfile
and changes were lost during upgrades.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-14 19:10:27 -07:00
Rosen Penev
a5f62ca8fb
Merge pull request #15421 from ja-pa/onionshare-v2
onionshare-cli: add new package
2021-04-14 19:10:01 -07:00
Rosen Penev
4dda77eccd ngircd: update to 26.1
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-14 19:06:42 -07:00
Rosen Penev
346784ef8e stm32flash: update to 0.6
Switch to AUTORELEASE for simplicity.

Use autotools build.

Remove upstream patch.

Minor cleanups for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-14 19:06:10 -07:00
Rosen Penev
30dfe5c71e yubico-pam: update to 2.27
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-14 19:06:00 -07:00
Daniel Golle
3d4d75c519
uvol: make volume creation atomic
Make sure filesystem is ready when volume becomes available.
Use 'write-once' as initial state for read-only volumes, only allow
writing to volumes in that state and transision to 'read-only' once
write has completed.
Also fix a typo which prevented 'list' command from working with LVM.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-15 02:55:10 +01:00
Eneas U de Queiroz
ee1a3654dc ocserv: don't build with libseccomp on ARC
libseccomp can't be built on ARC, so we must disable the option here as
well.  A different fix was first proposed by @zxlhhyccc in #15377.

Fixes: #15313

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-04-14 22:52:42 -03:00
Javier Marcet
583dbec703 docker-compose: Update to version 1.29.1
Bugs:

- Fix for invalid handler warning on Windows builds

- Fix config hash to trigger container recreation on IPC mode updates

- Fix conversion map for placement.max_replicas_per_node

- Remove extra scan suggestion on build

Signed-off-by: Javier Marcet <javier@marcet.info>
2021-04-14 16:40:53 -07:00
Alexander Egorenkov
c1a70b84d4 libupnp: restore building tools
This enables tools again which has been disabled in commit
498506af9 ("libupnp: update to 1.14.5"). Disabling tools leads to the
header upnptools.h not being installed into /usr/include. But e.g. mpd-full
depends on this header.

Fixes: 498506af9 ("libupnp: update to 1.14.5")
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
2021-04-14 16:40:36 -07:00
Josef Schlehofer
1d532fa545
netdata: update to version 1.30.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-04-15 00:39:13 +02:00
Rosen Penev
00d0281671 luv: update to 1.40.0-0
Simplify CMake section.

Fix pkgconfig paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-14 14:17:22 -07:00
Philip Prindeville
505db629de strongswan: add deprecation warning to ipsec script
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-14 12:27:07 -06:00
Alexander Ryzhov
34a587275e fdm: don't use host headers
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
2021-04-14 02:11:40 -07:00
Alexandru Ardelean
bde027188a python-greenlet: support MIPS architecture
Fixes: https://github.com/openwrt/packages/issues/15370

This is inspired from:
   330bc94dcc/lang/python-greenlet/Makefile

The `PKG_USE_MIPS16:=0` is not taken into consideration when building
Python modules. That's because the sysconfig is used.

This is only an issue with greenlet (on MIPS) so far.

One option is to do `PKG_USE_MIPS16:=0` in the core Python package.
But, since we know that the `wlanslovenija` group has successfully used
greenlet on MIPS with this construct, we might as well adopt it until GCC10
becomes the main compiler.

As noted here:
  https://github.com/openwrt/packages/issues/15370#issuecomment-817015484
GCC10 doesn't have this problem.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-04-14 00:17:09 -07:00
Rosen Penev
498506af9b libupnp: update to 1.14.5
Switch to compiling with CMake. Faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 23:54:01 -07:00
Rosen Penev
fe8e2b04fb umpdcli: update to 1.5.11
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 21:38:32 -07:00
Rosen Penev
26a3b95350 libupnpp: update to 0.21.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 21:38:32 -07:00
Rosen Penev
1e4ec2755b pulseaudio: fix compilation without doxygen
Meson update makes this error now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 21:36:28 -07:00
Philip Prindeville
41b536e22c
Merge pull request #15406 from pprindeville/strongswan-add-chacha20poly1305
strongswan: handle chacha20poly1305 as AEAD
2021-04-13 21:48:04 -06:00
Jan Pavlinec
ae069fad3d
onionshare-cli: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-14 00:38:12 +02:00
Rosen Penev
fb4655ab35 hcxdumptool: update to 6.1.6
Fix compilation without deprecated OpenSSL APIs.

Backport upstream patch to fix stdout.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 15:30:39 -07:00
Rosen Penev
f25755b0f9 hcxtools: update to 6.1.6
Add patch fixing compilation without deprecated OpenSSL APIs.

Fix installation. This never worked as the section was misnamed.

Updated tool names.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 15:30:39 -07:00
Rosen Penev
e1d8f4fc96 glib2: update to 2.68.1
Removed two now pointless patches as they were added as options.

Switch to AUTORELEASE for simplicity.

Update MESON_ARGS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 15:30:10 -07:00
Rosen Penev
e69991b631
Merge pull request #15420 from ja-pa/ooniprobe-3.9.2
ooniprobe: update to version 3.9.2
2021-04-13 13:01:24 -07:00
Philip Prindeville
ff33f4ccd3 strongswan: handle chacha20poly1305 as AEAD
chacha20policy1305 is also an AEAD cipher, and hence does not
permit a hash algorithm.

Fixes issue #15397.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-13 12:46:07 -06:00
Philip Prindeville
c95fd69973 strongswan: fail on serious configuration errors
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-13 12:46:07 -06:00
Philip Prindeville
210640d606 strongswan: drop subshell when possible
A subshell caused by $(...) can't persistently modify globals as a
side-effect.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-04-13 12:45:57 -06:00
Luiz Angelo Daros de Luca
6ced83d4cb
Merge pull request #15412 from luizluca/ruby-3.0.1
ruby: update to 3.0.1
2021-04-13 13:04:43 -03:00
Jan Pavlinec
eda48170ec
ooniprobe: update to version 3.9.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-04-13 16:44:40 +02:00
Rosen Penev
385f2898ed vips: update to 8.10.6
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-13 06:15:56 -07:00
Florian Eckert
920d733876
Merge pull request #15379 from jow-/bonding-accept-uci-list
bonding: accept list of slaves in uci list notation
2021-04-13 09:29:22 +02:00
Tomas Lara
6bd8d29b70 collectd: enable cpufreq for rockchip target
Enable collectd-mod-cpufreq  for rockchip

Signed-off-by: Tomas Lara <tl849670@gmail.com>
2021-04-13 09:18:24 +03:00
Rosen Penev
682aebbaea squid: update to 4.14
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-12 23:08:06 -07:00
Rosen Penev
d0b93ea224 vala: update to 0.52.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-12 22:41:18 -07:00
Rosen Penev
1c6dea43a4 meson: update to 0.57.2
Remove upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-12 22:32:20 -07:00
Alexandru Ardelean
c01d0f16cf django: bump to version 3.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-04-12 17:51:54 -07:00
Luiz Angelo Daros de Luca
2e7758916e ruby: update to 3.0.1
Fixes two CVEs:

CVE-2021-28965: XML round-trip vulnerability in REXML
CVE-2021-28966: Path traversal in Tempfile on Windows

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-12 18:19:00 -03:00
Josef Schlehofer
f4a231cdf5
Merge pull request #15396 from BKPepe/update-bottle
python3-bottle: update to version 0.12.19
2021-04-12 11:14:49 +02:00
Josef Schlehofer
8770f64816
Merge pull request #15398 from BKPepe/babel-update
python-babel: update to version 2.9.0
2021-04-12 11:14:38 +02:00
Javier Marcet
75fbd91d66 python-docker: Update to 5.0.0
Breaking changes:

- Remove support for Python 2.7

- Make Python 3.6 the minimum version supported

Features:

- Add limit parameter to image search endpoint

Bugfixes:

- Fix KeyError exception on secret create

- Verify TLS keys loaded from docker contexts

- Update PORT_SPEC regex to allow square brackets for IPv6 addresses

- Fix containers and images documentation examples

Signed-off-by: Javier Marcet <javier@marcet.info>
2021-04-11 20:30:25 -07:00
Javier Marcet
138f1ccb4c docker-compose: Update to version 1.29.0
Features:

- Add profile filter to docker-compose config

- Add a depends_on condition to wait for successful service completion

Miscellaneous:

- Add image scan message on build

- Update warning message for --no-ansi to mention --ansi never as alternative

- Bump docker-py to 5.0.0

- Bump PyYAML to 5.4.1

- Bump python-dotenv to 0.17.0

Signed-off-by: Javier Marcet <javier@marcet.info>
2021-04-11 20:30:20 -07:00
Hirokazu MORIKAWA
21391a6c9c node: bump to v14.16.1
April 2021 Security Releases
- OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High) (CVE-2021-3450)
- OpenSSL - NULL pointer deref in signature_algorithms processing (High) (CVE-2021-3449)
- npm upgrade - Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)

OpenSSL-related vulnerabilities do not affect the OpenWrt package. Because OpenWrt's OpenSSL shared library has been updated.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-11 20:29:48 -07:00
Eneas U de Queiroz
2c8eb03c83
Merge pull request #15400 from cotequeiroz/circular_deps
libseccomp,crun: Fix circular deps
2021-04-11 22:00:03 -03:00
Eneas U de Queiroz
013b1895ed
Revert "libseccomp: don't build on ARC"
This reverts commit b29e609701.

Adding DEPENDS+=@!arc will cause a circular dependency, because some
packages select libseccomp based on a build option.

Commit e29483d7e ("libseccomp: workaround a recursive dependency") added
a workaround that was not properly documented, so I'll explain here.

The problem arises when libseccomp is selected depending on some config
option:

define Pakcage/foo
  DEPENDS=+FOO_SECCOMP:libseccomp

Even if the condition is correctly defined, excluding arc, such as:

define Package/foo/config
  config FOO_SECCOMP
    depends on !arc

the config generator will parse libseccomp's DEPENDS variable and
generate menuconfig statements like these:

config PACKAGE_foo
   select PACKAGE_libseccomp if FOO_SECCOMP
   depends on !FOO_SECCOMP || !arc

The last condition is always true because FOO_SECCOMP will always be
be false when arc is true.  The config generator is not able to
simplify/optimize the condition.

The circular dependecy occurs because FOO_SECCOMP depends on
PACKAGE_foo, and the redundant, always true line will make PACKAGE_foo
depend on FOO_SECCOMP.

As a workaround, we can add the 'depends on !arc' line to
Package/libseccomp/config, outside of the DEPENDS variable, so that the
redundant depends line line does not get generated.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Cc: Daniel Golle <daniel@makrotopia.org>
2021-04-11 21:21:48 -03:00
Eneas U de Queiroz
048e1d2d63
crun: Don't build on arc
The package needs libseccomp, which does not currently support arc.
In order to avoid a circular dependency, we must avoid arc here as well.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-04-11 21:21:14 -03:00
Philip Prindeville
61b2a35a35
Merge pull request #15382 from cotequeiroz/strongswan
strongswan: libnttft must not select strongswan
2021-04-11 17:10:58 -06:00