Compare commits

...

2184 commits

Author SHA1 Message Date
Josef Schlehofer
e6ecebbfcc
libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a4e8cbb89a)
2022-10-27 14:48:20 +02:00
Josef Schlehofer
7b1b79c505
libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 676c5c72b5)
2022-10-25 14:29:47 +02:00
Josef Schlehofer
13a3a415a9
libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 77e682a11c)
2022-10-25 14:29:44 +02:00
Josef Schlehofer
1eeac014ad
nss: disable PKG_BUILD_PARALLEL
This is similar to commit f303e87a1e
("nss: update to 3.67") as there is something wrong with NSS build
system and otherwise this package fails to compile. Let's compile it
single threaded.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-09-26 20:39:07 +02:00
Josef Schlehofer
72b0fb294a
bind: update to version 9.16.33
Changelog:
https://downloads.isc.org/isc/bind9/9.16.33/RELEASE-NOTES-bind-9.16.33.html

Fixes:
- multiple CVEs
(CVE-2022-2795, CVE-2022-3080, CVE-2022-38177, CVE-2022-38178)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-09-25 12:16:10 +02:00
Josef Schlehofer
850d2ca96b
syslog-ng: update to version 3.38.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.38.1

- Update the configuration file to use version 4.0 as mentioned in the
  release notes to try the latest changes

Fixes: CVE-2022-38725

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 34b7af9e08)
2022-09-08 09:59:02 +02:00
Jan Hak
b4016afdd2
libedit: update to version 20210522-3.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 0b8f3ea81a)
2022-09-07 14:23:27 +02:00
Jan Hak
5ad19e5a40
libedit: update to version 20210419-3.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit b0870d792b)
2022-09-07 14:23:22 +02:00
Jan Hák
1a22460ec2
knot: update to 3.1.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)
2022-09-07 14:22:36 +02:00
Jan Hák
5d26dbb16d
knot: update to 3.1.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4de863e418)
2022-09-07 14:22:30 +02:00
Jan Hák
6b3df86555
knot: update to 3.1.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a56e478f5)
2022-09-07 14:22:25 +02:00
Jan Hák
3276368343
knot: update to 3.1.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 60a80b31fb)
2022-09-07 14:22:20 +02:00
Jan Hák
6d9ac1d6b9
knot: update to version 3.1.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 175087bf25)
2022-09-07 14:22:16 +02:00
Jan Hák
346b90d7f1
knot: update to version 3.1.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2d2f1e5644)
2022-09-07 14:22:10 +02:00
Jan Hak
1e66309244
knot: update to version 3.1.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 7aee9d1308)
2022-09-07 14:22:04 +02:00
Michal Vasilek
7ac5407235
knot: update to version 3.1.0
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 81e0fcb76f)
2022-09-07 14:21:58 +02:00
Karel Kočí
e2885b9ddd
vim: variants conflict with each other
This adds conflicts between the variants,
because they provide the same files, and it should not be
possible to install them side by side. Otherwise, it might happen that
half files would be from one variant and the other half from the
other.

Also, adds provides as if you request to install ``vim`` and
``vim-full``, then the request could be satisfied even they collide,
because ``vim-full`` provides ``vim`` package.

Signed-off-by: Karel Kočí <cynerd@email.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
(cherry picked from commit 46c058468a)
2022-08-24 08:25:54 +02:00
Jo-Philipp Wich
ca195ccafa cgi-io: update to latest Git HEAD
901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17)
2022-08-10 23:55:37 +02:00
Šimon Bořek
f81c55e870
luajit: patch: PPC/e500 SPE: use soft float instead of failing
makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca)
2022-08-06 19:44:06 +02:00
Josef Schlehofer
e2ce67c8d4
bind: update to version 9.16.31
Release notes:
https://downloads.isc.org/isc/bind9/9.16.31/doc/arm/html/notes.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-08-02 16:43:23 +02:00
Michael Heimpold
5a399f1448 cyrus-sasl: install pkg-config file and fine-tune installed files
Installing the .pc files helps other programs to detect
the presence of libsasl2.

While at, reduce the glob pattern a little bit to not
include unneeded symlinks.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c9ce769b1a)
2022-07-18 14:41:32 +02:00
Michal Vasilek
c14c054328
postfix: fix download failure
cdn.postfix.johnriley.me serves a certificate for a different domain
name.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit d4feef97e6)
2022-07-17 15:04:04 +02:00
Petr Štetiar
0bab8ae2a7 libarchive: fix ext2fs build race error condition
libarchive looks for ext2fs headers during configure, and if it finds
them it will expect to find them during compile, or on the rare occasion
when they aren't it will fail:

 libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory

As we just need headers for some type constants, let's re-use headers
from tools/e2fsprogs package which are always available.

Reported-by: Adam Dov <adov@maxlinear.com>
Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com>
References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 797945dfaa)
2022-07-13 08:47:54 +02:00
Florian Eckert
742ef3c120
Merge pull request #18846 from nemesisdesign/monitoring-openwrt-19
[19.07] openwisp-monitoring: added 0.1.1
2022-07-04 09:09:05 +02:00
Federico Capoano
3ecffb63c7 openwisp-monitoring: added 0.1.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae)
2022-07-01 18:50:08 -04:00
Hannu Nyman
5cc4212d7f
haveged: update to 1.9.18
Update haveged to version 1.9.18

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8579494bbb)
2022-07-01 19:01:29 +02:00
Florian Eckert
cdc90be2f8
Merge pull request #18829 from nemesisdesign/openwrt-19.07
[19.07] openwisp-config: update to 1.0.1
2022-07-01 10:18:11 +02:00
Federico Capoano
f645f5b3a2 openwisp-monitoring: added 0.1.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae)
2022-06-30 13:58:47 -04:00
Josef Schlehofer
7d08804e27
syslog-ng: update to version 3.37.1
- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111)
2022-06-25 06:52:17 +02:00
Stijn Tintel
cf0d586c7f
Revert "lxc: export systemd cgroups after install"
The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b950.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2022-06-24 12:20:43 +02:00
Michal Vasilek
70b0ff8a48
lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b950
reverted in 039912dec5

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da7356539)
2022-06-24 12:19:14 +02:00
Josef Schlehofer
f172d67c96
bind: update to version 9.16.30
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-06-24 11:46:35 +02:00
Michal Vasilek
90ff2ed162 libgd: install pkgconfig file
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-06-23 12:35:30 -06:00
Rosen Penev
c6a780c7bf
luajit: backport softfloat ppc support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 24c0007ea2)
2022-06-23 05:08:17 +02:00
Sergey V. Lobanov
998fac7cfa
luajit: fix build on macos (ldconfig issue)
fix ldconfig build issue. This patch is a backport from upstream:
18c9cf7d37

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 42c4d25455)
2022-06-22 14:38:23 +02:00
W. Michael Petullo
f08dae84f8
openldap: drop use of HTTP in favor of HTTPS
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit bab2f020ee)
2022-06-10 13:56:56 +02:00
Josef Schlehofer
685893c968
beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532
1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf250)
2022-06-10 13:54:51 +02:00
Yanase Yuki
e0a2e6f41c
beep: restore a dependency definition to the previous one on x86 target
Commit 9bcea2de2c causes a dependency
problem with some out-of-tree packages which expect "DEPENDS:=+kmod-pcspkr".

To fix this problem, this commit restores a dependency definition to
the previous one on x86 target.

Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
(cherry picked from commit 8b1216fb49)
2022-06-10 13:54:49 +02:00
Yanase Yuki
02d4a7161e
beep: fix dependency to support non-x86 target and kmod-gpio-beeper
Beep is a target-independent software that can handle buzzers controlled by kmod-gpio-beeper.

This change is useful for some non-x86 enterprise APs and development boards
that have a buzzer connected to GPIO.

Compile-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch
Run-tested: ath79, ELECOM WAB-I1750-PS, 3fab4ac + device support patch

Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
(cherry picked from commit 9bcea2de2c)
2022-06-10 13:54:45 +02:00
Yanase Yuki
21ee1aa46a
beep: add missing PKG_MIRROR_HASH
Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>
(cherry picked from commit ac52356c0b)
2022-06-10 13:54:40 +02:00
Josef Schlehofer
b4f1cdbdd6
Merge pull request #18696 from BKPepe/netatalk-1907
[19.07] netatalk: re-introduce 3.1.13 and backport pending fixes
2022-06-08 17:30:21 +02:00
Šimon Bořek
cc81050c66
netatalk: backport pending PR to fix segfaults
This commit backports pending PR, which solves segfaults:
- https://github.com/Netatalk/Netatalk/pull/174

To fix issues with segfaults described here:
- https://github.com/openwrt/packages/issues/18571
- https://github.com/Netatalk/Netatalk/issues/175

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit ab768578cd06364cc9327a1718631d16e8aa3e20)
2022-06-06 13:39:18 +02:00
Josef Schlehofer
1f7164ea83
Revert "Revert "netatalk: update to version 3.1.13""
This can be finally re-reverted, so we can use version 3.1.13, which
fixes multiple security vulnerabilities, but it segfaults almost
immediately. There is currently pending pull request, which fixes this,
and multiple users confirmed that it works on different GNU/Linux distributions.

This reverts commit bfe255064e.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-06-06 13:38:54 +02:00
Michael Heimpold
1f7513c2fb
Merge pull request #18671 from turris-cz/libxml_2.9.14_backport
libxml2: backport 2.9.14 version bump
2022-06-02 21:28:55 +02:00
Michael Heimpold
1ad2e67d4c
libxml2: update to 2.9.14
This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab)
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-06-02 15:27:28 +02:00
Michael Heimpold
0da04ff0b7
libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 81fd836f97)
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-06-02 15:27:22 +02:00
Michael Heimpold
a3557e5362
libxml2: update to 2.9.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 6b932d3ff7)
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-06-02 15:26:05 +02:00
Michael Heimpold
a23bfc9774
libxml2: update to 2.9.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 10e867d026)
[remove no longer needed CVE-2019-19956 patch (fixed in libxml2 2.9.10)]
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-06-02 15:12:45 +02:00
Daniel Golle
6dbc752fdd
db47: don't depend on libxml2 at run-time
libxml2 seems to be required only during build, hence no need to
depend on it in run-time.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1f3585a387)
2022-06-02 14:44:29 +02:00
Lars Kruse
d7b0f7674d muninlite: update to new upstream release (2.1.2)
Signed-off-by: Lars Kruse <devel@sumpfralle.de>
2022-06-01 13:54:41 -07:00
Kim B. Heino
00386dbb9f muninlite: update to new upstream release (2.1.1)
Signed-off-by: Kim B. Heino <b@bbbs.net>
2022-06-01 13:54:41 -07:00
Lars Kruse
324087f5bf muninlite: update to new upstream release (2.1.0)
Signed-off-by: Lars Kruse <devel@sumpfralle.de>
2022-06-01 13:54:41 -07:00
Francois Dechery
ff14d38093 muninlite: Bump PKG_RELEASE
Signed-off-by: Francois Dechery <wxopwx@gmail.com>
2022-06-01 13:54:41 -07:00
Francois Dechery
8ee79c95e1 muninlite: Fixes munin xinetd service not launching.
Signed-off-by: Francois Dechery <wxopwx@gmail.com>
2022-06-01 13:54:41 -07:00
Lars Kruse
f5ae7f7718 muninlite: remove patch "hostname"
Since muninlite 2.0 the unpatched upstream also uses
/proc/sys/kernel/hostname.  Thus the patch is not necessary anymore.

Signed-off-by: Lars Kruse <devel@sumpfralle.de>
2022-06-01 13:54:41 -07:00
Lars Kruse
b85f7ea6e9 muninlite: remove unused sections from Makefile
Signed-off-by: Lars Kruse <devel@sumpfralle.de>
2022-06-01 13:54:41 -07:00
Lars Kruse
e2788641aa muninlite: update to 2.0.1
* follow upstream ressources to github
* rename /usr/sbin/munin-node to /usr/sbin/muninlite
  (following the chane of upstream)
* change plugin directory from /usr/sbin/munin-node-plugin.d/
  to /etc/munin/plugins (compatible to upstream / munin-node)
* all patches (except one OpenWrt-specific patch) were merged
  upstream

Signed-off-by: Lars Kruse <devel@sumpfralle.de>
2022-06-01 13:54:41 -07:00
Federico Capoano
f0e94f3add openwisp-config: update to 1.0.0
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2022-06-01 13:53:15 -07:00
Josef Schlehofer
bfe255064e Revert "netatalk: update to version 3.1.13"
We received a report from Turris user on Turris support department that
netatalk version 3.1.13 does not work properly.

Process afpd says: INTERNAL ERROR Signal 11
because of that Apple Time Machine does not work as it should

This was already reported to netatalk by different people on various
GNU/Linux distributions like CentOS, AlmaLinux [1] [2]

netatalk developer states [3]:
```
Generally, at this point I can only advice to stop using Netatalk. There
are more pending CVEs that I currently don't have the bandwidth to work on.
```

[1] https://sourceforge.net/p/netatalk/bugs/669/
[2] https://sourceforge.net/p/netatalk/bugs/670/
[3] https://sourceforge.net/p/netatalk/mailman/message/37638871/

This reverts commit 165c5625a3.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-05-20 12:20:47 -07:00
Michal Vasilek
a44cb1e277
lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b950)
2022-05-15 07:30:35 +02:00
Michal Vasilek
58a5dd8fd7 postgresql: security update to 11.16
* fixes CVE-2022-1552

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-14 21:34:11 -07:00
Michal Vasilek
58036e0498
youtube-dl: update to 2021.12.17
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163)
2022-05-06 19:11:10 +02:00
Josef Schlehofer
6aeedcd383
youtube-dl: update to version 2021.6.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fbe3079179)
2022-05-06 19:11:05 +02:00
Matthias Schiffer
c21547330a
ecdsautils: update to v0.4.1
This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e582)
2022-05-05 18:53:44 +02:00
Josef Schlehofer
9377a39b19
bind: update to version 9.16.28
Changelog:
https://downloads.isc.org/isc/bind9/9.16.28/RELEASE-NOTES-bind-9.16.28.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-04-24 15:15:19 +02:00
Luiz Angelo Daros de Luca
9c39582d99 ruby: update to 2.6.10
Fixes from 2.6.9:
- CVE-2021-41817: Regular Expression Denial of Service Vulnerability of
  Date Parsing Methods
- CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse

Fixes from 2.6.10:
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

After this release, Ruby 2.6 reaches EOL.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-04-23 10:31:00 +02:00
Luiz Angelo Daros de Luca
cae913febb
sane-backends: revert BUILDONLY flag
BUILDONLY was disabling SANE backends (drivers) build.

Closes #14484

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit bf4340e19e)
2022-04-22 13:00:48 +02:00
Josef Schlehofer
1c5e4c80f4 zabbix: update to version 4.0.37
- Fixes CVE-2020-15803, CVE-2021-27927

- SourceForge does not provide tarball for version 4.0.37 and it was
necessary to use Zabbix CDN to download it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-04-16 17:33:54 -04:00
Hannu Nyman
5a842639dc nano: provide nano-full with most features enabled
Provide a new variant, nano-full, that enables almost
all functionality of nano. Only libmagic file type detection
has been left out.

Ship with a minimal /etc/nanorc that the user can modify.
nanorc documentation at
https://www.nano-editor.org/dist/latest/nanorc.5.html

Provide color highlighting for the uci config files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6a51794638)
2022-03-24 20:32:07 +02:00
Daniel Golle
165c5625a3
netatalk: update to version 3.1.13
Please update to this latest release as soon as possible as this
releases fixes the following major security issues: CVE-2021-31439,
CVE-2022-23121, CVE-2022-23122, CVE-2022-23123, CVE-2022-23124,
CVE-2022-23125 and CVE-2022-0194.

For a summary of news and a detailed list of changes see the
ReleaseNotes[1].

[1]: https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 951ef67479)
2022-03-24 18:20:59 +00:00
Sungbo Eo
7b9c8fd487
coova-chilli: add dependency for miniportal
If miniportal option is enabled, some haserl scripts are provided which
present a simple login web page. To make it functional haserl is required.

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
(cherry picked from commit 532088818a)
2022-03-23 10:27:22 +01:00
Sungbo Eo
6732d0573d
coova-chilli: clean up Makefile
- add missing configs to PKG_CONFIG_DEPENDS and sort it
- remove redundant INSTALL_DIR

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
(cherry picked from commit 2c71fb2065)
2022-03-23 10:27:16 +01:00
Sungbo Eo
6ac4167c73
coova-chilli: remove dnslog option
dnslog feature has been removed since v1.4.

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
(cherry picked from commit 95954b84f5)
2022-03-23 10:27:12 +01:00
Rosen Penev
384c9dc68f
coova-chili: Fix version
Upstream was sloppy when cutting the release.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit df20377ee9)
2022-03-23 10:26:51 +01:00
Rosen Penev
944bae08d0
coova-chilli: Update to 1.5
Remove upstreamed patches.

Added patch to fix compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 68b5a71883)
2022-03-23 10:26:40 +01:00
Josef Schlehofer
c2f4c302ca
Merge pull request #18127 from jefferyto/python-3.7.13-openwrt-19.07
[openwrt-19.07] python3: Update to 3.7.13, refresh patches
2022-03-23 09:11:02 +01:00
Jeffery To
3398ed29b0
python3: Update to 3.7.13, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-22 02:16:36 +08:00
Noah Meyerhans
e8dc42753c bind: bump to 9.16.27
Fixes security issues:

 * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
			isc__nm_process_sock_buffer() to be called recursively,
			which in turn left TCP connections hanging in the
			CLOSE_WAIT state blocking indefinitely when
			out-of-order processing was disabled.

 * CVE-2021-25220 -- The rules for acceptance of records into the cache
			have been tightened to prevent the possibility of
			poisoning if forwarders send records outside
			the configured bailiwick.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2022-03-18 10:39:38 -07:00
Josef Schlehofer
17e7ca6e2e
syslog-ng: update to version 3.36.1
- Bump version in config file

Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.36.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110d46eb37)
2022-03-12 06:51:56 +01:00
Michal Vasilek
79db9a8e24
expat: import patches for CVEs
* import patches for CVEs from alpine 3.13

CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-23852, CVE-2022-23990
CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 584c0c4378)
2022-02-24 15:09:35 +01:00
Rosen Penev
448eb6e4b9
expat: update to 2.2.10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c69160e6ae)
2022-02-24 15:09:18 +01:00
Jo-Philipp Wich
31098bd6b2
htpdate: drop www.freebsd.org from default server list
The FreeBSD project stopped publishing HTTP date headers and seeks to
limit further resource taxing by distributed htpdate clients using the
www.freebsd.org host as default time source.

Fixes: #17924
Reported-by: Allan Jude <allanjude@freebsd.org>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit e871318002)
2022-02-23 23:09:29 +01:00
Hannu Nyman
4c461f9e85 nano: update to 6.2
Update nano to 6.2.
Remove inactive second maintainer.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a3f14c5114)
[removed AUTORELEASE]
2022-02-22 19:23:58 +02:00
Hannu Nyman
8129d30e36 nano: update to 6.1
Update nano to version 6.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 717efb8c96)
[removed aurorelease]
2022-02-09 18:30:46 +02:00
Michal Vasilek
e234ea1ae4 ruby: update to 2.6.9
* fixes CVE-2021-41817 and CVE-2021-41819

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-02-06 08:32:42 -03:00
Josef Schlehofer
7a1df415a0
Merge pull request #17778 from turris-cz/bind-19.07
bind: update to version 9.16.25
2022-02-02 21:19:21 +01:00
Josef Schlehofer
c0c89af7c4
bind: update to version 9.16.25
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-02 18:47:36 +01:00
Paul Spooren
56cf18027b
CI: fix runtime testing for non master branch
The runtime testing always ran on master branch aka snapshots since the
branch wasn't passed over to the container execution!

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit f535d77090)
2022-02-02 18:45:13 +01:00
Josef Schlehofer
b61f1d4850
Merge pull request #17756 from BKPepe/nss-cve-2021-43527
nss: backport patch for CVE-2021-43527
2022-02-02 18:23:45 +01:00
Hannu Nyman
5578d60f9a nano: Add a plus variant with more features
Nano is by default built as "tiny" with most features disabled.
That is suitable for basic tasks in routers with small flash.

Add a new nano-plus variant that enables selected additional
features in the build config:
 * multiple files (multibuffer)
 * Unicode/utf8
 * justify
 * .nanorc support
 * help
 * also some key bindings get enabled as "tiny" configure option
   is removed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 85cb71d8d8)
2022-02-01 23:44:21 +02:00
Josef Schlehofer
864ffb6ca1
nss: backport patch for CVE-2021-43527
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-31 11:50:25 +01:00
Josef Schlehofer
0af741cd16
prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dcedbe8027)
2022-01-31 00:07:19 +01:00
Rosen Penev
20e42ca81e
prosody: fix shellcheck warnings
Remove paxctl stuff. pax is not packaged in OpenWrt.

Add reload support.

Install lua cfg file as 644. It's needed to be readable as prosody user

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eb46e231cd)
2022-01-31 00:07:13 +01:00
Rosen Penev
0319712eda
prosody: update to 0.11.7
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 68a3a06e98)
2022-01-31 00:07:07 +01:00
Vieno Hakkerinen
22a3a54a9c
prosody: update to 0.11.5
Signed-off-by: Vieno Hakkerinen <vieno@hakkerinen.eu>
(cherry picked from commit bc500293e3)
2022-01-31 00:07:01 +01:00
Sergio E. Nemirowski
199860fa3a
prosody: /etc/prosody permissions fix
Signed-off-by: Sergio E. Nemirowski <sergio@outerface.net>
(cherry picked from commit 838306cb37)
2022-01-31 00:06:56 +01:00
Rosen Penev
498bcd4e25
prosody: Update to 0.11.3
Several Makefile rearrangements for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 73d29b9fd7)
2022-01-31 00:06:51 +01:00
Josef Schlehofer
057803706e
tvheadend: fix conffiles section
The previous one was wrong, and it did not work. It could be checked
inside compiled package in control.tar.gz that there was missing
``conffiles`` file with content `/etc/config/tvheadend`

It is also possible to verify that the config is not overwritten on the router
by running ``opkg install tvheadend --force-reinstall``

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 752d1ffc28)
2022-01-25 09:03:07 +01:00
Josef Schlehofer
765307772f domoticz: backport patch to fix compilation with uClibc-ng
This helps to compile domoticz on arc target.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-18 18:07:49 -08:00
Stijn Tintel
572392a8ac domoticz: bump to 4.10717
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 7e50722145)
2022-01-18 18:07:49 -08:00
Rosen Penev
8d91ba86a9 domoticz: Fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8c77bcc19f)
2022-01-18 18:07:49 -08:00
James White
7bb0a7e929
netdata: Update init script to use -D rather than -nd
The current init script is using the deprecated -nd flag. This updates netdata to be started with -D.

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit cf9d5a8870)
2022-01-13 10:39:36 +01:00
Sebastian Kemper
6317eabad7
apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit da4b1ca8d6)
2022-01-13 10:11:55 +01:00
Hannu Nyman
4af8afe6cc haveged: update to 1.9.17
Update havged to version 1.9.17.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e065ccda94)
(Autorelease removed)
2022-01-09 19:03:57 +02:00
Josef Schlehofer
0e3869c2ad
Merge pull request #17476 from BKPepe/buildonly
treewide: add missing BUILDONLY
2022-01-03 19:58:33 +01:00
Rosen Penev
f299c29a45
treewide: add missing BUILDONLY
Fixes Makefile warnings:

WARNING: skipping X -- package has no install section

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5a7148d112)
2022-01-02 10:02:23 +01:00
Karel Kočí
64d0238a1b
zsh: drop bash syntax in postinst
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit c09d6042fe)
2021-12-17 23:48:23 +01:00
Karel Kočí
ea3e54accd
zsh: fix invalid postrm script and little refactor of scripts
The postrm script was missing shebang. Postrm scripts are packaged and
executed directly and not sourced by default script (as in case of prerm
and postinst).

Also move some indents around to not confuse reader. The section in
postinst was indented to same level as grep "condition" but is on same
level as initial grep (not part of that "condition").

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit d2d193d818)
2021-12-17 23:48:16 +01:00
Hannu Nyman
5a9b5ee78c nano: update to version 6.0
Update nano editor to version 6.0

Version 6.0 enable toggling the display of the line numbers with
the shortcut key M-N (Alt-n). Also the cmdline option "-l" works.
Remove earlier patch regarding that.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

(backported from commits 0571f5400, 9023845d5 and ae7f62d63)
2021-12-16 20:35:01 +02:00
Petr Štetiar
7db6f87334
Merge pull request #17250 from ynezz/ynezz/cares-fix-CVE-2021-3672
[19.07] libs/c-ares: fix domain hijacking CVE-2021-3672
2021-12-12 12:11:24 +01:00
Daniel Golle
a135aedaf1
Merge pull request #17267 from BKPepe/postgresql-update
[19.07] postgresql: security update to version 11.14
2021-12-12 11:06:51 +00:00
Josef Schlehofer
e1a2d908c3
msmtp: update to version 1.8.1.9
Changelog:
https://marlam.de/msmtp/news/msmtp-1-8-19/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 173faad334)
2021-12-04 09:19:56 +01:00
Josef Schlehofer
535f4804b6
postgresql: security update to version 11.14
Patch 001-configure_fixes does not apply anymore.
Other patches were refreshed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-12-04 01:04:48 +01:00
Petr Štetiar
e93fc5a20f libs/c-ares: fix domain hijacking CVE-2021-3672
Missing input validation of host names returned by Domain Name Servers
in the c-ares library can lead to output of wrong hostnames (leading to
Domain Hijacking).

I've just taken patch from the advisory[1] and rebased it onto 1.15.0
version.

1. 809d5e8..44c009b.patch

Fixes: CVE-2021-3672
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2021-12-02 13:54:42 +01:00
Josef Schlehofer
45218f2059
msmtp: update to version 1.8.17
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 18261fcd31)
2021-12-01 00:26:04 +01:00
Josef Schlehofer
d216572bb1
syslog-ng: update to version 3.35.1
Also bump the version in syslog-ng config file.
Removes this warning:

Nov 16 14:19:41 turris syslog-ng[15159]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.35 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.33'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d2fd36e28)
2021-11-30 23:59:49 +01:00
Florian Eckert
5c88f28c94
Merge pull request #17209 from peci1/patch-1
ddns-scripts: Fix wrong whitespace in preinst and postinst scripts
2021-11-30 12:40:50 +01:00
Hirokazu MORIKAWA
1d5b64958b icu: Fix memory bug w/ baseName
CVE-2021-30535 : Double free in ICU
https://nvd.nist.gov/vuln/detail/CVE-2021-30535
https://security-tracker.debian.org/tracker/CVE-2021-30535

ICU-21587 : Fix memory bug w/ baseName
https://github.com/unicode-org/icu/pull/1698

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-29 01:42:37 -08:00
Martin Pecka
e1feccd5ae
ddns-scripts: Fix wrong whitespace in preinst and postinst scripts
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
2021-11-26 08:34:12 +01:00
Josef Schlehofer
c559096e03 bind: update to version 9.16.23
Changelog:
https://downloads.isc.org/isc/bind9/9.16.23/RELEASE-NOTES-bind-9.16.23.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-11-18 08:40:52 -08:00
Josef Schlehofer
020756ecc2
Merge pull request #17114 from paper42/cve-2019-19906-19
[19.07] cyrus-sasl: patch CVE-2019-19906
2021-11-15 00:24:00 +01:00
Michal Vasilek
af8fe2363d
cyrus-sasl: patch CVE-2019-19906
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit f7717bd382)
2021-11-13 16:11:23 +01:00
Michael Heimpold
1b3135bfd2
Merge pull request #17110 from thg2k/pr/19_php72_ini_1
[19.07] php7: Update and clean up distributed php7.ini
2021-11-12 07:39:46 +01:00
Giovanni Giacobbi
903d79b387
php7: Clean up and update distributed php.ini for php 7.2.34
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 7.2.34
- Added '~E_DEPRECATED' to 'error_reporting'

Directives removed that no longer exist as of PHP 7.2.34:
- zend.ze1_compatibility_mode
- y2k_compliance
- register_globals
- register_long_arrays
- magic_quotes_gpc
- magic_quotes_runtime
- magic_quotes_sybase
- always_populate_raw_post_data

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-11-11 10:19:24 +00:00
Josef Schlehofer
496f50a754
syslog-ng: update to version 3.34.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8e88ef51e)
2021-10-31 07:30:31 +01:00
Josef Schlehofer
61741b3249 ffmpeg: update to version 3.4.9 (security fix)
Fixes:
CVE-2020-13904
CVE-2020-2044
CVE-2020-20453
CVE-2020-22015
CVE-2020-22019
CVE-2020-22033
CVE-2020-22021
CVE-2020-22037
CVE-2020-35965
CVE-2021-38114
CVE-2021-38171
CVE-2021-38291

Refresh patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-30 01:13:24 -07:00
Noah Meyerhans
9abe24fb49 bind: Bump to 9.16.22
The following CVEs are addressed:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously
  be abused by an attacker to significantly degrade resolver performance.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2021-10-28 21:15:16 -07:00
Josef Schlehofer
cb4433c4ba tvheadend: update libhdhomerun
Recently, silicondust (developers of hdhomerun) did some cleanup and
removed old versions for hdhomerun library.

```
WGET            http://download.silicondust.com/hdhomerun/libhdhomerun_20150826.tgz
http://download.silicondust.com/hdhomerun/libhdhomerun_20150826.tgz:
2021-10-26 05:15:14 ERROR 404: Not Found.
```

And because of that, it is not possible to compile tvheadend, it ends
with following error:

```
In file included from src/input/mpegts/tvhdhomerun/tvhdhomerun.c:25:0:
src/input/mpegts/tvhdhomerun/tvhdhomerun_private.h:27:10: fatal error: libhdhomerun/hdhomerun.h: No such file or directory
 #include <libhdhomerun/hdhomerun.h>
          ^~~~~~~~~~~~~~~~~~~~~~~~~~
compilation terminated.
```

Let's fix it by updating libdhdhomerun to newer version.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-27 23:15:29 -07:00
Josef Schlehofer
18af9b9e21 bind: update to version 9.16.21
- Remove patch, which is part of this release, it was backported from
  upstream

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-24 20:37:33 -07:00
Olivier Poitrey
bb0ed00885 nextdns: Update to version 1.37.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-10-22 10:13:59 -07:00
Alexandru Ardelean
30935b23b6
Merge pull request #16903 from jefferyto/python-package-host-dependencies-openwrt-19.07
[openwrt-19.07] python-packages: Fix host package build dependencies
2021-10-18 09:25:33 +03:00
Stan Grishin
d77d598161
Merge pull request #16906 from stangri/openwrt-19.07
[19.07] vpn-policy-routing: downgrade to 0.2.1-13
2021-10-17 08:07:23 -07:00
Stan Grishin
c493a603cd vpn-policy-routing: downgrade to 0.2.1-13
* there are reports that newer versions don't work on 19.07.x
* revert to older README to describe this older version

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 7bb2ccd4e1)
2021-10-17 14:30:52 +00:00
Jeffery To
20a9e8700b
python-dateutil: Add missing HOST_PYTHON3_PACKAGE_BUILD_DEPENDS
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-10-17 01:08:02 +08:00
Jeffery To
e933f6f749
python-importlib-metadata: Pin setuptools-scm version
While a pinned/working version of setuptools-scm is installed (by
python-zipp) by the time this package is compiled, pinning the version
in this package is still the correct thing to do.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-10-17 01:01:52 +08:00
Stan Grishin
a669e1e6da
Merge pull request #16900 from stangri/openwrt-19.07
[19.07] simple-adblock: update to 1.8.8-1
2021-10-15 15:29:08 -07:00
Stan Grishin
a5de193e54 simple-adblock: update to 1.8.8-1
* update 'check' function

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit d11f310230)
2021-10-15 21:52:29 +00:00
Alexandru Ardelean
1afb4019fd
Merge pull request #16879 from turris-cz/19.07-zipp
python-zipp: pin setuptools-scm version
2021-10-14 10:50:19 +03:00
Stan Grishin
e1388e24e0
Merge pull request #16885 from stangri/openwrt-19.07
[19.07] https-dns-proxy: update to 2021-09-27
2021-10-13 22:08:32 -07:00
Stan Grishin
af3643f9b0 https-dns-proxy: update to 2021-09-27
* update to [2021-09-27](da2501f542)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit f8d16338da)
2021-10-14 04:58:18 +00:00
Michal Vasilek
f2af6941fa tor: update to 0.4.5.10
* 0.4.4 is not an LTS series, people running tor relays with 0.4.4 will
  be evicted from the tor network. 0.4.5 is an LTS series
* fix building without OpenSSL engine support (from e30f0480c8)
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-13 18:29:46 +03:00
Josef Schlehofer
746fa830c6
python-zipp: pin setuptools-scm version
The recent version of setuptools-scm depends on tomli, which has some build issues.
Older one works.

Suggested-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-10-13 12:39:34 +02:00
Eneas U de Queiroz
70bb6f15e8 perl: perlmod.mk: use flock when hostpkg/perl used
Avoid parallel relinking and usage of the host perl binary by wrapping
its usage around flock calls.

Sometimes, two packages will try to relink the static host perl binary
at the same time.  Neither of them will have the other's module linked
in, and one of them will unavoidably clobber the other one's binary.

This will lead to errors when a package will not be able to find a
module that was supposed to be installed.

To fix that, an exclusive flock is used when relinking, with a 900
seconds timeout to avoid locking up the build process forever.

This is not enough because the binary may be concurrently used to build
another module package; perl is used in Configure, Compile, and Install
procedures.  If timing is right, a package will fail with a "permission
denied" error.

So a shared flock call is added in Configure, Compile, and Install
definitions for host and target, with a shorter, 300 seconds timeout.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1e18c4324f)
2021-10-08 09:48:01 -07:00
Hannu Nyman
15305d2f2e nano: update to 5.9
Update nano editor to version 5.9.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38143e6f8b)
(cherry picked from commit e155b3d293)
2021-10-08 18:37:02 +03:00
Hannu Nyman
ece1d7bfce haveged: update to 1.9.15
Update haveged to version 1.9.15.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 1f3f63f5de)
2021-10-08 18:36:52 +03:00
Glenn Strauss
2d35019d6b lighttpd: update to lighttpd 1.4.55 release hash
update lighttpd in openwrt-19.07 branch from lighttpd 1.4.54 to 1.4.55

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2021-10-06 00:16:45 -07:00
Rosen Penev
dd89b28442
Merge pull request #16569 from turris-cz/19.07/tor-0.4.4.9
tor: update to version 0.4.4.9
2021-09-18 15:05:14 -07:00
Josef Schlehofer
8c3d6a2e17
Merge pull request #16196 from miska/snort3-19.07
net/snort3: Include default configs and snort2lua
2021-09-17 16:20:57 +02:00
Stijn Tintel
b101f744c2 tcpreplay: avoid host lib leakage
On hosts that have pcapnav-config installed, there is host lib leakage.
From config.log:

LNAVLIB='-L/usr/lib64 -lpcapnav -lpcap'
LNAV_CFLAGS='-I/usr/include'

Fix this by disabling pcapnav-config, which isn't available anyway.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit e4b8fec79c)
2021-09-10 13:12:34 -07:00
Alexandru Ardelean
be17f97265 tcpreplay: bump to version 4.3.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 7436d944fa)
2021-09-10 13:12:34 -07:00
Rosen Penev
6e4e0d5e9d tcpreplay: add libdnet support
On Arch Linux, tcpreplay is picking up the host dnet-config and adding
OS paths, thereby breaking compilation. The easiest solution is to add
libdnet support as the previous commit fixes dnet-config on OpenWrt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f9f216a066)
2021-09-10 13:12:34 -07:00
Rosen Penev
e7167f4702 tcpreplay: fix compilation with Arch Linux
It tries to link to host libraries for some reason. Add autoreconf to
fix. Also remove redundant prefixes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 87177eef75)
2021-09-10 13:12:34 -07:00
Alexandru Ardelean
668aa95dfb tcpreplay: bump to version 4.3.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c7153f22a7)
2021-09-10 13:12:34 -07:00
Michal Vasilek
6dc494fddf ntfs-3g: patch CVE-2019-9755
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-10 13:11:44 -07:00
Olivier Poitrey
02ce5303d5 nextdns: Update to version 1.37.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-09 12:48:00 -04:00
Jo-Philipp Wich
4b79a343fe
Merge pull request #16581 from jow-/openwrt-19.07
cgi-io: update to latest Git HEAD
2021-09-08 22:22:35 +02:00
Josef Schlehofer
7a7b8a257b bind: update to version 9.16.20
1. Fixes: CVE-2021-25218

2. Add patch to bump API version, which was forgotten by BIND devs
Related to https://kb.isc.org/docs/map-zone-format-incompatibility-in-bind-9-16-20-and-9-17-17
Pointed out in https://www.openwall.com/lists/oss-security/2021/08/20/2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-09-08 13:19:09 -07:00
Jo-Philipp Wich
d8ef698a9f cgi-io: update to latest Git HEAD
98cef9d Retry splice() syscall on EINTR

Fixes: https://github.com/openwrt/luci/issues/5342
Fixes: https://bugs.openwrt.org/index.php?do=details&task_id=4006
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit db8e0fdea4)
2021-09-08 22:13:08 +02:00
Petr Štetiar
6c5169b395 cgi-io: update to version 2020-10-27
Contains following list of changes:

 ab4c3471b261 tests: add cram based unit tests
 7b4e3241e1bd tests: add cgi-io built with clang sanitizers
 21831f45d16d Disable session ACLs during unit testing
 2f525417b5df Add initial GitLab CI support
 57f1c4f18cb6 Add .gitignore
 09f9ac5066ee Fix off-by-one in postdecode_fields
 ed8ce0d5d28b Add fuzzing of utility functions
 a61581819800 Add fuzzing of multipart_parser
 6b0615b728ed Refactor utility functions into static library
 a0ed2c9a7a72 Fix clang compiler errors
 232659da19a4 Fix possible NULL dereference
 8e5719b37a67 Fix warnings reported by clang-10 static analyzer
 b99aa8a64cca Remove Makefile

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 351e4e01c5)
2021-09-08 22:13:08 +02:00
Petr Štetiar
daaacfd24e cgi-io: move into out of tree project
No functional changes, just moved the sources into out of tree
project[1] so it's going to be easier to do CI with unit testing,
fuzzing etc.

1. https://git.openwrt.org/?p=project/cgi-io.git;a=shortlog

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 08be327942)
2021-09-08 22:13:08 +02:00
Christian Lachner
d5a7aa1861 haproxy: Update HAProxy to v2.0.25
- This update fixes CVE-2021-40346; see: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-09-08 07:33:31 -07:00
Josef Schlehofer
17f5a0cc83
python3: update to version 3.7.12
Fixes: CVE-2013-0340 (Windows and MacOS only) and smtplib multiple CRLF injection
Changelog: https://www.python.org/downloads/release/python-3712/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-09-08 13:06:36 +02:00
Josef Schlehofer
dd6be653dd
tor: update to version 0.4.4.9
Fixes:
- CVE-2021-34548
- CVE-2021-34549
- CVE-2021-34550

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-09-08 11:54:19 +02:00
Rosen Penev
508c15acb7
irssi: update to 1.2.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 752656c6be)
2021-09-08 11:44:16 +02:00
Olivier Poitrey
93cfd1679a nextdns: Update to version 1.37.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 14:57:58 -07:00
Olivier Poitrey
6f3cd160d2 nextdns: Update to version 1.37.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 11:31:27 -07:00
Dennis Schüsselbauer
72f35e712e acme: Fix uhttpd restart to load new certificates
Fixes issue #16256

Bump PKG_RELEASE to 4.

Signed-off-by: Dennis Schüsselbauer <scde@users.noreply.github.com>

(cherry picked from commit d69534751e)
2021-09-06 14:29:41 -07:00
Josef Schlehofer
684b71f0cd
click: update to version 7.0
- Change URL of the website and for PKG_SOURCE_URL
- Change TITLE and description
- Remove PKG_BUILD_DEPENDS, PKG_UNPACK as they are not necessary
- Add src package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 25e8b2cda2)
2021-09-05 14:16:26 +02:00
Eneas U de Queiroz
5bd73795e8
dnsdist: fix default SSL lib spelling
This is cosmetic only, since openssl is the first one being defined, but
it avoids a warning in scripts/config, after upgrading to kconfig-v5.6:
tmp/.config-package.in:102839:warning: choice default symbol
'DNSDIST_OPENSSSL' is not contained in the choice

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit dbe11776ed)
2021-09-02 12:12:58 +02:00
Rosen Penev
4006aeabad
Merge pull request #16518 from jefferyto/golang-packages-remove-strip-ldflags-openwrt-19.07
[openwrt-19.07] treewide: Remove GO_PKG_LDFLAGS for stripping binaries
2021-09-01 17:16:20 -07:00
Jeffery To
1dd040f9ca
treewide: Remove GO_PKG_LDFLAGS for stripping binaries
The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.

When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.

This removes these flags for all relevant packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-09-02 06:36:01 +08:00
Peter Stadler
82a3613ec8 nginx: add PROVIDES nginx-ssl to nginx-all-module
fix issue when installing luci-ssl-nginx

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-09-01 14:25:17 -07:00
Josef Schlehofer
b35c3984e1
Revert "net/miniupnpd: ext_ip_reserved_ignore support"
This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.

[1] https://github.com/openwrt/packages/issues/15258
[2] https://github.com/miniupnp/miniupnp/issues/542
[3] https://github.com/miniupnp/miniupnp/pull/511

This reverts commit b76aa99194.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 107f3376b5)
2021-08-28 09:05:30 +02:00
Rosen Penev
857e98768f
Merge pull request #16410 from paper42/git-2.26.3-19
[19.07] git: update to 2.26.3
2021-08-27 01:05:32 -07:00
Michal Vasilek
72d806d181
apr: patch CVE-2021-35940
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 0777e40b74)
2021-08-25 06:06:48 +02:00
Rosen Penev
844cde96b8
Merge pull request #16444 from paper42/postgresql-fix-hardening
[19.07] postgresql: disable PIC
2021-08-24 19:04:13 -07:00
Stan Grishin
a7691fdfb0
Merge pull request #16455 from rs/nextdns-1.36.0-openwrt-19.07
[19.07] nextdns: Update to version 1.36.0
2021-08-24 17:07:57 -07:00
Olivier Poitrey
9d3ad065b2 nextdns: Update to version 1.36.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-08-24 23:40:31 +00:00
Michal Vasilek
4b091361ef
postgresql: disable PIC
with PIC enabled, build fails with
ld: access/gist/gistproc.o: in function `rtree_internal_consistent':
gistproc.c:(.text+0x188): relocation truncated to fit: R_AARCH64_LD64_GOTPAGE_LO15 against symbol `DirectFunctionCall2Coll' defined in .text section in utils/fmgr/fmgr.o
ld: gistproc.c:(.text+0x188): warning: too many GOT entries for -fpic, please recompile with -fPIC
ld: final link failed: symbol needs debug section which does not exist
collect2: error: ld returned 1 exit status

Related-to: 8e9ad7bb51
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-24 12:48:19 +02:00
Rosen Penev
9da0165a7d
Merge pull request #16411 from paper42/file-5.38-19
[19.07] file: update to 5.38
2021-08-23 05:58:04 -07:00
Michal Vasilek
0573fb59ab
file: update to 5.38
* fixes CVE-2019-18218

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-23 12:25:13 +02:00
Josef Schlehofer
5982af9ed5
Merge pull request #16412 from paper42/tar-cve-19
[19.07] tar: fix CVE-2021-20193
2021-08-22 09:34:58 +02:00
Etienne Champetier
b03fe54e0e https-dns-proxy: patch CMakeList.txt to use OpenWrt CFLAGS
This fixes compilation issues with ASLR PIE enabled

We were compiling with '-g -DDEBUG'

https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 374e1dd56e)
2021-08-20 21:04:03 -04:00
Michal Vasilek
8ff2671b22
tar: fix CVE-2021-20193
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-20 16:17:56 +02:00
Michal Vasilek
3862bb3e6d
mc: add a missing Syntax file
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 312caff03b)
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-20 12:02:52 +02:00
Michal Vasilek
47e2ef579e
git: update to 2.26.3
* fixes CVE-2021-21300

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-20 11:29:43 +02:00
Josef Schlehofer
4689c49144
Merge pull request #16398 from paper42/mc-1907
[19.07] mc: update to 2.8.27
2021-08-19 17:33:36 +02:00
Michal Vasilek
b39f185bdf
mc: update to 2.8.27
* fixes CVE-2021-36370
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-18 15:05:33 +02:00
Eneas U de Queiroz
865ae46492 unixodbc: use 'install' when copying host binaries
'cp' fails with a text file busy error if it tries to overwrite an
executable file that is running.  'install' unlinks the file first, so
it will not cause the problem.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 47f98d7030)
2021-08-14 13:45:53 -07:00
Eneas U de Queiroz
67f403b5e6 perl: perlmod.mk: use 'install' for host binaries
When installing a host perl module, the host perl binary in the staging
dir is replaced by using 'cp'.  However, if the binary is running in a
parallel job, cp will fail with a text file busy error.  Use
$(INSTALL_BIN), which unliks the file first to avoid the error.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 19c7496648)
2021-08-14 13:45:07 -07:00
Stan Grishin
6c12530346
Merge pull request #16254 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: update to 2021-07-29-1
2021-08-03 22:14:19 -07:00
Jan Hak
5051c4bb00
knot: update to version 3.0.8
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5f374929cf)
2021-08-02 05:56:08 +02:00
Jan Hak
e0f5b4e289
knot: update to version 3.0.7
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 8d66f49bae)
2021-08-02 05:56:08 +02:00
Jan Hak
de894d37a6
knot: update to version 3.0.6
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d578f60818)
2021-08-02 05:56:08 +02:00
Jan Hak
0c3d97bf57
knot: update to version 3.0.5
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d92a2cd21b)
2021-08-02 05:56:08 +02:00
Hauke Mehrtens
c6ae1c6a0f
Merge pull request #15108 from neheb/ksmbd
ksmbd updates for 19.07
2021-08-01 16:09:24 +00:00
Stan Grishin
210e3d9167 https-dns-proxy: update to 2021-07-29-01
* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 13:11:58 +00:00
Olivier Poitrey
a0e39ca02c nextdns: Update to version 1.35.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-30 12:40:19 +03:00
Dirk Brenken
92abb99170
adblock: bugfix 4.0.7-9
* fix regex to prepare google safesearch domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-07-28 08:01:44 +02:00
Rosen Penev
0872827d2d librouteros: don't build docs
Fixes compilation without host pod2man.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e41fd1794b)
2021-07-25 22:19:29 +03:00
Michal Hrusecky
f31271fed3
net/snort3: Include default configs and snort2lua
Include default configuration files to have something to start from.
Also include snort2lua to help convert snort2 rules to snort3 to also
help with bootstrapping the configuration.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-22 14:17:54 +02:00
Josef Schlehofer
de84e781e5
syslog-ng: update to version 3.33.2
Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4b06f9ff4c)
2021-07-22 07:51:50 +02:00
George Iv
242dbcebaf yggdrasil: bump to 0.4.0
- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit e135c4c867)
2021-07-20 20:57:40 -07:00
Rosen Penev
d1c39e3d90
Merge pull request #16166 from stangri/19.07-vpnbypass
[19.07] vpnbypass: update to 1.3.2-1
2021-07-20 20:56:00 -07:00
Stan Grishin
df79c0614c vpnbypass: updates to 1.3.2-1
bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-20 21:23:49 +00:00
Josef Schlehofer
3f432b66ae
Merge pull request #16095 from turris-cz/bind-update
bind: update to version 9.16.18
2021-07-16 16:59:08 +02:00
Luiz Angelo Daros de Luca
f795536f48 ruby: update to 2.6.8
This release includes security fixes like:

CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
CVE-2021-31799: A command injection vulnerability in RDoc

We ordinally do not fix Ruby 2.6 except security fixes, but this release
also includes some regressed bugs and build problem fixes.

Ruby 2.6 is now under the state of the security maintenance phase, until
the end of March of 2022. After that date, maintenance of Ruby 2.6 will
be ended.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-07-16 15:57:54 +02:00
Rosen Penev
b031b21430
Merge pull request #16133 from jefferyto/addrwatch-fixes-openwrt-19.07
[openwrt-19.07] addrwatch: Update to 1.0.2 and various fixes
2021-07-15 11:42:18 -07:00
Jeffery To
a673a23268
addrwatch: Various fixes
Makefile changes include:

* Include syslog output module

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  374cfd2cab

* 004-more-specific-library-linking.patch - from
  27b57d9da3

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 20:40:13 +08:00
Jeffery To
1f9aa31eab
addrwatch: fix broken conffiles
This is 704e733e51 but applied for
addrwatch only.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:05:33 +08:00
Rosen Penev
531d59dbc7
addrwatch: update to 1.0.2
Switch to standard tarball to avoid autoreconfig.

Fix license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Add PKG_INSTALL for consistency with other packages.

Removed upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f1a7d509b5)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:42 +08:00
Rosen Penev
ce1781155d
addrwatch: Add missing limits header for PATH_MAX
Fixes compilation on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8003eea2b9)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-07-15 16:03:28 +08:00
Rosen Penev
879838998e luajit: for powerpc, add FPU dependency
powerpc support as of 2.1 does not work with soft float.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d23ca0010c)
2021-07-14 19:26:19 -07:00
Rosen Penev
be2f1b2c00 luajit: fix compilation with host clang
It errors out with this section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0e620f1fa1)
2021-07-14 19:26:19 -07:00
Donald Hoskins
29c5a802c4 [LuaJIT] Allow MIPS64 support
Signed-off-by: Donald Hoskins <grommish@gmail.com>
(cherry picked from commit d325fbffbe)
2021-07-14 19:26:19 -07:00
Rosen Penev
e5e5c88919 luajit: do not install static libraries to InstallDev
The dynamic library change removed static libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 51de4b2e35)
2021-07-14 19:26:19 -07:00
Rosen Penev
dd62736784 luajit: use dynamic buildmode
Reduces package size with about 50%

Fixes: https://github.com/openwrt/packages/issues/10848

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d9487590c6)
2021-07-14 19:26:19 -07:00
Rosen Penev
d617e7b143
Merge pull request #16062 from miska/snort3
snort3: Backport update to the stable version
2021-07-14 19:23:31 -07:00
James Vorderbruggen
192aea109a yggdrasil: allow HTTPS connections
Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>
(cherry picked from commit ffff347396)
2021-07-14 12:33:34 -07:00
George Iv
7248e1b957 yggdrasil: bump to 0.3.16
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 76b642b50f)
2021-07-14 12:33:34 -07:00
George Iv
fe9b2579f9 yggdrasil: bump to 0.3.15
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 6b2b730181)
2021-07-14 12:33:34 -07:00
William Fleurant
8687d79f84 yggdrasil: Ygg-over-ygg bugfix
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 1d78e7dc31)
2021-07-14 12:32:59 -07:00
George Iv
35531bcb26 yggdrasil: bump to 0.3.14
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 860f1a1113)
2021-07-14 12:32:59 -07:00
William Fleurant
3232f27243 yggdrasil: bump to 0.3.13
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 0642927d5d)
2021-07-14 12:32:59 -07:00
William Fleurant
2136fafe39 yggdrasil: bump to 0.3.12
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit be4fe496ce)
2021-07-14 12:32:58 -07:00
George Iv
05816dbfd8 yggdrasil: Change package configuration to UCI
Signed-off-by: George Iv <57254463+zhoreeq@users.noreply.github.com>
(cherry picked from commit 6857fd45c8)
2021-07-14 12:32:58 -07:00
William Fleurant
325bf6bc75 yggdrasil: fixes build name and version #10309
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit bd415bc7bf)
2021-07-14 12:32:58 -07:00
William Fleurant
7087b16140 yggdrasil: uci firewall Section name and cover both IP versions
- rename the section instance to yggdrasil (feat. request)
- allow zone to cover both ip4 and ip6 fam

Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 2baab77b77)
2021-07-14 12:32:58 -07:00
William Fleurant
56b6518c88 yggdrasil: bump to 0.3.11
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry picked from commit 06bdd7aebf)
2021-07-14 12:32:58 -07:00
Rosen Penev
c37ed20609
Merge pull request #16109 from nxhack/1907_libuv
[19.07] libuv: fix CVE-2021-22918
2021-07-12 23:15:11 -07:00
Josef Schlehofer
b83f6f9af3
syslog-ng: disable mqtt
For now, disable mqtt as it was automatically enabled as the build
system finds compiled libpaho-mqtt-c and requires dependency.

---
Here is the output:
Package syslog-ng is missing dependencies for the following libraries:
libpaho-mqtt3c.so.1
---

This is a new feature since syslog-ng 3.33.1 and if anyone is interested
in it, it can be enabled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e319e89fde)
2021-07-12 16:17:59 +02:00
Hirokazu MORIKAWA
c0e93ddff3 libuv: fix CVE-2021-22918
idna: fix OOB read in punycode decoder

libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.

libuv/libuv@b7466e3
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-12 15:13:13 +09:00
Josef Schlehofer
39a92140d1
syslog-ng: update to version 3.33.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.1

- Bump version in config
It fixes:
WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.33 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.31'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2b4be08a8c)
2021-07-12 06:17:27 +02:00
Josef Schlehofer
21ab2ee937
Merge pull request #16087 from turris-cz/19.07/lxc-update-gpg-keyserver
lxc: add patch to switch GPG server
2021-07-11 20:44:23 +02:00
Josef Schlehofer
dd32c2cbee
czmq: disable nss
While bumping czmq to version 4.2.1 from master branch into OpenWrt
19.07, it automatically detects nss when compiled before czmq.

These steps can verify this:

make package/nss/compile V=s
make package/czmq/compile V=s

Then czmq requires many dependencies:
Package czmq is missing dependencies for the following libraries:
libnspr4.so
libnss3.so
libnssutil3.so
libplc4.so
libplds4.so
libsmime3.so
libsoftokn3.so
libssl3.so

And this fails. If you are using SDK and wants to have just a few
packages then czmq gets compiled if any of those packages are not
present in build system.

This was also mentioned in the release notes for czmq 4.2.1:
https://github.com/zeromq/czmq/releases/tag/v4.2.1

> Note for packagers: NSS can now be used and linked against to avoid using
an internal embedded reimplementation of SHA. It is enabled by default if
present.

NSS was disabled before, so let's disable it.

This is required only for OpenWrt 19.07 as this is done differently in OpenWrt 21.02 and OpenWrt
master and czmq is compiled there.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-11 19:48:56 +02:00
Rosen Penev
b7d2b9163c
apache: update to 2.4.48
Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(partially cherry picked from commit 6dfd07097d)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[removed patch, which is not in OpenWrt 19.07 branch, used integer in
PKG_RELEASE instead of autorelease]
2021-07-11 12:04:10 +02:00
Jan Pavlinec
a16402770c
czmq: update to version 4.2.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 39b4c64545)
2021-07-10 23:08:20 +02:00
Josef Schlehofer
1cd6a5f019
bind: update to version 9.16.18
Changelog:
https://downloads.isc.org/isc/bind9/9.16.18/doc/arm/html/notes.html#notes-for-bind-9-16-18

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-10 23:02:20 +02:00
Josef Schlehofer
b86ca1563b
lxc: add patch to switch GPG server
By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.

Use the same GPG server as LXC is using by default in the newer
releases.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-10 17:38:41 +02:00
Michal Hrusecky
dc621a9b19
snort3: Backport stable version from 21.02
Update snort3 from beta to the stable version available in 21.02 version
of feeds.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-07 12:39:31 +02:00
Michal Hrusecky
5d189c1013
libdaq3: New package, dependency of snort3
Backport from 21.02 in order to satisfy dependencies of snort3 to allow
upgrade to stable version of snort3 from beta available now.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-07 12:36:20 +02:00
Josef Schlehofer
d6b64bb653
msmtp: update to version 1.8.15
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110abfb9f6)
2021-07-06 17:12:16 +02:00
Josef Schlehofer
a896cbac26
Merge pull request #16051 from BKPepe/openwrt-19.07
python3: update to version 3.7.11
2021-07-06 16:20:02 +02:00
Josef Schlehofer
a2ab062439
youtube-dl: update to version 2021.4.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 701ded952a)
2021-07-06 09:29:06 +02:00
Josef Schlehofer
118b0cb9d6
youtube-dl: update to version 2021.2.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a7523a9fab)
2021-07-06 09:28:59 +02:00
Josef Schlehofer
b18aab0d13
python3: update to version 3.7.11
Fixes: CVE-2021-3426

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-06 09:15:33 +02:00
Rosen Penev
5837c5a00a
Merge pull request #16004 from commodo/python-dateutil-setuptools-scm
[19.07] python-dateutil: pin setuptools-scm version to 5.0.2
2021-07-03 15:17:09 -07:00
Rosen Penev
e23bd114be
Merge pull request #16023 from rs/nextdns-1.34.2-openwrt-19.07
[19.07] nextdns: Update to version 1.34.2
2021-07-03 15:15:49 -07:00
Olivier Poitrey
9bcac7859a nextdns: Update to version 1.34.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-02 18:54:53 +00:00
Florian Eckert
608db2d141
Merge pull request #15663 from Ansuel/fix-ddns-script
[19-07] ddns-scripts: standardize required params declaration
2021-07-02 08:57:15 +02:00
Ansuel Smith
2294d252b3
ddns-scripts: standardize required params declaration
The luci app scan the script and search for params in the form of
$required_params.
This script use the form "${required_params}" and cause confusion
with the luci app by hiding needed values. Fix this by using the
standard way to declare required params following other ddns scripts.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2021-07-02 03:38:51 +02:00
Alexandru Ardelean
730e14da79 python-dateutil: pin setuptools-scm version to 5.0.2
This is known to still work with Python2.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-06-30 17:24:26 +03:00
Alexandru Ardelean
d1aac139a6 Revert "python-dateutil: disable setuptools-scm for build"
This reverts commit 29da5d65b6.

That fix doesn't work fully correct as the egg directory has version 0.0.0.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-06-30 17:23:00 +03:00
Alexandru Ardelean
29da5d65b6 python-dateutil: disable setuptools-scm for build
Fixes https://github.com/openwrt/packages/issues/15988

It seems that the newer setuptools-scm package (6.0.1) has some
Python3-only syntax.
For the 19.07 release, where Python2 is still around this causes the
python-dateutil package to fail to build.

See https://github.com/pypa/setuptools_scm/issues/541

However, removing 'setuptools-scm' from the build also works.
This change does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-06-30 10:28:31 +02:00
Rosen Penev
113377ae73
Merge pull request #15974 from rs/nextdns-1.33.11-openwrt-19.07
[19.07] nextdns: Update to version 1.33.11
2021-06-26 12:44:24 -07:00
Olivier Poitrey
b955b69435 nextdns: Update to version 1.33.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-06-26 18:00:29 +00:00
Hannu Nyman
0f5fbe1f5b nano: update to 5.8
Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6f2ac237a1)
2021-06-17 19:05:04 +03:00
Karl Palsson
ce1ae404c3 net/mosquitto: Update to 1.6.15
This is a security release

Full release notes: https://mosquitto.org/blog/2021/06/version-2-0-11-released/

Fixes a remotely triggered memory leak

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-06-11 15:54:19 +00:00
David Bauer
476b8b82bb
Merge pull request #15806 from blocktrron/pr-xr-usb-serial-1907
xr_usb_serial_common: fix build
2021-06-08 17:25:37 +02:00
David Bauer
73c0984779 xr_usb_serial_common: add PKG_MIRROR_HASH
The CI complained about a missing PKG_MIRROR_HASH.

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-06-08 17:18:02 +02:00
David Bauer
7100f40063 xr_usb_serial_common: fix build
Building the xr_usb_serial module fails for recent 4.14 kernel with
CONFIG_PM enabled:

xr_usb_serial_common.c:1574:15: error: 'ASYNCB_INITIALIZED' undeclared
(first use in this function); did you mean 'RCU_INITIALIZER'?

Use tty_port_initialized in order to determine the status of the TTY
port.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 69cf7836df)
2021-06-08 17:11:41 +02:00
Rosen Penev
465ddb5b22
Merge pull request #15770 from DeathCamel58/libnet-1.2.x-libnet-config-fix
[19.07] libnet-1.2.x: Export `libnet-config` in development environments
2021-06-06 12:50:20 -07:00
Rosen Penev
f7d4a6753b
Merge pull request #15780 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: update to 2021-06-03-1
2021-06-05 14:29:07 -07:00
Stan Grishin
6ab17abdea https-dns-proxy: update to 2021-06-03-1
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-04 23:34:20 +00:00
Dylan Corrales
bdbf33f697 libnet: Export libnet-config in development enviornments
Affects `libnet-1.2.x`

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>
2021-06-03 15:20:44 -04:00
Dirk Brenken
1c90bc08ae
banip: remove logd dependency
* removed logd dependency, see openwrt#13820 for reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-06-03 07:02:42 +02:00
Rosen Penev
ad6476b4fe
Merge pull request #15728 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default
2021-06-01 22:09:08 -07:00
Stan Grishin
2b0cb41c0d https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-02 04:32:40 +00:00
Josef Schlehofer
e8c0e3c207
netdata: update to version 1.30.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1d532fa545)
2021-05-31 00:27:24 +02:00
Rosen Penev
e23677d865
Merge pull request #15717 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup
2021-05-29 15:00:04 -07:00
Stan Grishin
b28e2c763a https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-05-29 20:12:27 +00:00
W. Michael Petullo
2543c33b0b
syslog-ng: update to 3.32.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f93ef64793)
2021-05-14 21:49:09 +02:00
Hannu Nyman
e05c97a191 nano: update version to 5.7
Upgrade nano editor to version 5.7.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 765e986857)
2021-05-01 23:52:23 +03:00
Olivier Poitrey
91e1399cf3 nextdns: Update to version 1.32.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-30 17:26:53 -07:00
Noah Meyerhans
9fd4ed8afa bind: bump to 9.16.15
Fixes the following security issues:

* CVE-2021-25216 - A specially crafted GSS-TSIG query could cause a buffer
                   overflow in the ISC implementation of SPNEGO.
* CVE-2021-25215 - named crashed when a DNAME record placed in the ANSWER
                   section during DNAME chasing turned out to be the final
                   answer to a client query.
* CVE-2021-25214 - Insufficient IXFR checks could result in named serving a
                   zone without an SOA record at the apex, leading to a
                   RUNTIME_CHECK assertion failure when the zone was
                   subsequently refreshed. This has been fixed by adding an
                   owner name check for all SOA records which are included
                   in a zone transfer.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2021-04-29 17:33:12 -07:00
Moritz Warning
aebeefcd5a zerotier: update to 1.6.5
Minor ZeroTier update. Refreshed patches.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-04-28 17:21:17 -07:00
Josef Schlehofer
18b564ef5a
Merge pull request #15509 from hswong3i/openwrt-19.07-SQUID_enable-ssl-crtd
[openwrt-19.07][cherry-pick] squid: Enable dynamic SSL certificate generation
2021-04-28 10:06:26 +02:00
Wong Hoi Sing Edison
ad6712d42f
squid: Enable dynamic SSL certificate generation
Maintainer: @neheb / @BKPepe / @zhanhb
Compile tested: ipq806x, generic, netgear_r7800, master
Run tested: ipq806x, generic, netgear_r7800, openwrt-19.07

Description:

Squid now only support HTTPS proxy in TCP tunnel mode (e.g. `ssl_bump splice all`):

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    ssl_bump splice all

In order to operate in SSL Bump mode, we need to compile with `--enable-ssl-crtd` for following configuration:

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    sslcrtd_program /usr/lib/squid/security_file_certgen -s /car/cache/squid/ssl_db -M 4MB
    ssl_bump stare all
    ssl_bump bump all

This PR switch the `SQUID_enable-ssl-crtd` into `default y`, therefore default enable SSL Bump mode.

Signed-off-by: Wong Hoi Sing Edison <hswong3i@pantarei-design.com>
(cherry picked from commit dbda77686d)
2021-04-28 11:30:32 +08:00
Karl Palsson
439da3db8b mosquitto: fix log_type config support
As pointed out in https://github.com/openwrt/packages/issues/15506

The remainder of that patch isn't appropriate for 1907 however.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-26 09:29:57 +00:00
Rosen Penev
221785358d ksmbd-tools: update to 3.3.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2e7c403fff)
2021-04-24 02:19:52 -07:00
Josef Schlehofer
3412c7a456
dnscrypt-proxy2: sync blocked-names to upstream one
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d53d2df283)
2021-04-24 10:02:26 +02:00
James Long
139217f8a6
dnscrypt-proxy2: upgrade to 2.0.45
Signed-off-by: James Long <james@jclong.net>
(cherry picked from commit 6467b6535b)
2021-04-24 10:02:19 +02:00
Dirk Brenken
27678dc75a
adblock: fix polish source URL
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-22 15:16:03 +02:00
Rosen Penev
e426ad56be
Merge pull request #15477 from rs/nextdns-1.32.0-openwrt-19.07
[19.07] nextdns: Update to version 1.32.0
2021-04-20 17:29:37 -07:00
Olivier Poitrey
6027afee17 nextdns: Update to version 1.32.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 15:08:39 +00:00
Rosen Penev
afed88b48f
Merge pull request #15468 from rs/nextdns-1.12.5-openwrt-19.07
[19.07] nextdns: Update to version 1.12.5
2021-04-19 18:59:37 -07:00
Olivier Poitrey
f1e6b878f2 nextdns: Update to version 1.12.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 01:38:38 +00:00
Hannu Nyman
11dc840326 irqbalance: upgrade to version 1.8.0
Upgrade irqbalance to version 1.8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6631cfaa61)
2021-04-18 18:29:02 +03:00
Rosen Penev
2871541167
pulseaudio: update to 14.0
Remove upstreamed OpenSSL patch.

Update MESON_ARGS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 325c565040)
2021-04-18 15:27:28 +02:00
Rosen Penev
3bdf75bd2d
pulseaudio: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ca2da3f315)
2021-04-18 15:27:24 +02:00
Rosen Penev
ba0558e8a5
pulseaudio: fix compilation with ICONV_FULL
Reordered check to check external iconv first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 67f8f57d06)
2021-04-18 15:27:19 +02:00
Jeffery To
1248994b9f
pulseaudio: Update ARM NEON/VFP detection
With openwrt/openwrt@8dcc108760, the ARM
FPU compiler options are no longer part of CONFIG_TARGET_OPTIMIZATION.

This updates various packages that look for NEON/VFP support to search
CONFIG_CPU_TYPE instead.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-04-18 15:26:55 +02:00
Rosen Penev
4021cb65a0
pulseaudio: do not build NEON with unsupported platforms
Unfortunately, meson's check is totally broken.

Fortunately, it's fairly easy to workaround.

Fixes compilation with all ARM platforms that don't support NEON.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 91e80e5442)
2021-04-18 15:24:04 +02:00
Rosen Penev
8eb7d95ba8
pulseaudio: add lto and gc-sections to reduce size
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 45e58e1cc3)
2021-04-18 15:24:00 +02:00
Rosen Penev
15fb6ec36e
pulseaudio: fix pkgconfig paths
Turns out, packages like mpd that use pkgconfig to find pulseaudio
end up using host paths.

Fixes compilation with at least mpd.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 21f67bf599)
2021-04-18 15:23:56 +02:00
Rosen Penev
eac2ca1c65
pulseaudio: update to 13.0
Converted to use meson for compilation speed.

Removed libwrap dependency. Upstream no longer supports it.

Removed intltool and glib2 host dependencies. They seem to be no
longer needed.

Removed upstream patch.

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 78d84d4c9c)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[rebased on commit from master branch]
2021-04-18 15:23:35 +02:00
Rosen Penev
f0aa4486a6
pulseaudio: Backport upstream patch
Fixes compilation with recent alsa-libs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 123373b1b7)
2021-04-18 15:16:00 +02:00
Rosen Penev
e5701228c1
Merge pull request #15384 from VolunteerComputingHelp/openwrt-19.07
Transfer of boinc 7.16.16 from 21.02 to 19.07
2021-04-17 09:05:05 -07:00
Josef Schlehofer
8ca4ab69e0
Merge pull request #15413 from luizluca/19.07/ruby-2.6.7
[19.07] ruby: update to 2.6.7
2021-04-13 14:55:18 +02:00
Luiz Angelo Daros de Luca
5c16a052f5 ruby: update to 2.6.7
Fixes two CVEs:

CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability in WEBrick
CVE-2021-28965: XML round-trip vulnerability in REXML

After this release, ruby 2.6 is now in security maintenance phase.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-12 23:00:46 -03:00
Tiago Gaspar
807e088bbc
netdata: disable shared memory totals by default
Fix log spam:
daemon.err netdata[2090]: PROCFILE: Cannot open file '/proc/sysvipc/shm'
This is caused by a non existant /proc/sysvipc/shm because of the
CONFIG_PROC_STRIPPED option that is enabled by default in the kernel
generic target config

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 5f65d87bb7)
2021-04-11 09:58:49 +02:00
Stan Grishin
09ba055839 https-dns-proxy: bugfix: race condition with dnsmasq
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 22:38:48 -07:00
Steffen Moeller
0072fc5336 boinc: Transfer v7.16.16 from 21.02 to 19.07
Intentionally unchanged from 43d21e650d,
i.e. the pull request #14862 from neheb/boi

Signed-off-by: Steffen Moeller <moeller@debian.org>
2021-04-10 20:36:10 +02:00
Dirk Brenken
ba1a801f74
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:38:16 +02:00
Dirk Brenken
1cf2e3530d
Merge pull request #15254 from dibdot/19.07
[19.07] travelmate: minimal change to fix cp detection
2021-04-09 18:34:08 +02:00
Dirk Brenken
74c8fb403f
travelmate: minimal change to fix cp detection
* fix cp detection proposed by @ChristianKuehnel
* add/adapt mikrotik login script provided by @Christian Kuehnel

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-09 18:21:17 +02:00
Karel Kočí
56e1674efc
rpcd-mod-lxc: add postinst to reload rpcd on update/installation
This is dependency of luci-app-lxc and when users install that package
it is no way clear that they have to reload rpcd to get it working
correctly. Without it container listing does not work.
In general this reload should be in this package simply because other
rpcd-mod-* packages reload rpcd as well.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 54b6116d7d)
2021-04-09 10:46:16 +02:00
Rosen Penev
560a0ea2bf ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:43 -07:00
Kirill Nikolaev
0863ab3237 ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:43 -07:00
Rosen Penev
9355f9503d ksmbd: update to 3.3.7
Major change are:

Fix an issue that directories appear as files when using windows
backup.
Fix xfstests generic/241 failure on life test.
Update ksmbd shutdown and debug print on/off using ksmbd.control in
cifsd.rst.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 851b9b252f)
2021-04-06 21:56:43 -07:00
Rosen Penev
2c328f3d8a ksmbd: update to 3.3.6
Major changes are:

Fix kernel oops from fuse+ntfs driver.
Fix the issue of change the directory to the file using Nautilus
client.
Fix ksmbd build break with the latest linux-5.12-rc1.
Fix potential memleak and use after free.
Fix use after free from KASAN(racy issue)

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8e3a4adea3)
2021-04-06 21:56:43 -07:00
Martin Blumenstingl
08d1a66e3d ksmbd: update to 3.3.5
Major changes for version 3.3.5 are:
- Add support for version 4 dos attribute structure of samba.
- Implement maximal allowed desired access.
- Fix several error handling.
- Fix a few smbtorture failures.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 71aef26ecb)
2021-04-06 21:56:43 -07:00
Rosen Penev
52d3ce0f6d ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1a8f3659)
2021-04-06 21:54:34 -07:00
Rosen Penev
f275b3f418 ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d95edf16ef)
2021-04-06 21:54:34 -07:00
Martin Blumenstingl
ba329c4ea5 ksmbd-tools: update to 3.3.5
Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 58f91090f5)
2021-04-06 21:54:33 -07:00
Sven Roederer
055b1cd581 nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:55 -07:00
Josef Schlehofer
e88b4d873b
netdata: update to version 1.29.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbfdc)
(cherry picked from commit 4322399166)
2021-04-06 22:52:50 +02:00
Josef Schlehofer
f6bc822ff3
syslog-ng: update to version 3.31.2
Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e968e)
2021-04-06 22:52:14 +02:00
Dirk Brenken
fdd4afe6ac
adblock: fix init status command
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-04-01 20:55:45 +02:00
Rosen Penev
65b578bfa2
Merge pull request #15295 from lucize/librefix
[19.07] libreswan: update cu 3.32
2021-03-28 14:48:00 -07:00
Lucian Cristian
5a8a7aeab1 libreswan: update cu 3.32
CVE and NSS fix

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-03-28 23:10:05 +03:00
Nikos Mavrogiannopoulos
7436ea3fb1
Merge pull request #15252 from ja-pa/gnutls-security-fix-19.07
[OpenWrt 19.07] gnutls: patch security issue
2021-03-26 21:55:20 +01:00
Rosen Penev
7e815fe4e2
Merge pull request #15255 from ja-pa/mariadb-10.2.37-openwrt-19.07
[OpenWrt 19.07] mariadb: update to version 10.2.37
2021-03-26 13:24:25 -07:00
Rosen Penev
05474882bc
Merge pull request #15256 from cartender/pr_libftdi1_19
[19.07] libftdi1: Improve build binary reproducibility
2021-03-26 13:23:13 -07:00
Giovanni Giacobbi
7af60cc3e2
libftdi1: Improve build binary reproducibility
The library embeds the result of "git describe" inside the source code, making the binary result dependent of the particular commit being used in the build root when building inside a git working copy.

As this is unnecessary information, remove this option and fallback to the default "unknown", which is also the value compiled by tools that do not clone but export the openwrt base tree.

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-03-26 10:48:39 +00:00
Josef Schlehofer
58ded3ff4c
Merge pull request #15214 from BKPepe/aiohttp-19.07
python-aiohttp: backport fix for CVE-2021-21330
2021-03-26 00:48:13 +01:00
Stan Grishin
aa3e95ac69 https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:10 -07:00
Jan Pavlinec
abb3c7ede0
mariadb: update to version 10.2.37
Fixes CVE-2021-27928

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 14:30:51 +01:00
Jan Pavlinec
cb6509e882
gnutls: patch security issue
Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-25 10:34:58 +01:00
Rosen Penev
e2d1af1a29
Merge pull request #15221 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for additional Force DNS ports
2021-03-22 11:56:50 -07:00
Josef Schlehofer
41388ed8a2
php: add fix for updated ICU 68+
Recently, I updated icu for issues with node feed, but it broke
compiling of php7.

Error:
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: error: 'TRUE' undeclared (first use in this function)
  collator_sort_internal( TRUE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:349:26: note: each undeclared identifier is reported only once for each function it appears in
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c: In function 'zif_collator_asort':
/foo/target-aarch64_cortex-a53_musl/php-7.2.34/ext/intl/collator/collator_sort.c:543:26: error: 'FALSE' undeclared (first use in this function); did you mean 'FILE'?
  collator_sort_internal( FALSE, INTERNAL_FUNCTION_PARAM_PASSTHRU );
                          ^~~~~
                          FILE
make[3]: *** [Makefile:1031: ext/intl/collator/collator_sort.lo] Error 1

More details:
https://github.com/php/php-src/commit/8eaaabd

Backport of patch from PHP7.3 didn't work for me, but this one was suggested that
Homebrew is using it and it works for me. However, PHP7.2 is EoL.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 13:57:13 +01:00
Stan Grishin
3530635214 https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:14 +00:00
Josef Schlehofer
44b301125f bind: update to version 9.16.13
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-21 20:35:45 -07:00
Josef Schlehofer
612fbeb58f
nnn: update to version 3.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 53f54c45e4)
2021-03-22 02:06:16 +01:00
Josef Schlehofer
1952a1c2ae
python-aiohttp: backport fix for CVE-2021-21330
More details:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-03-22 01:41:14 +01:00
Hirokazu MORIKAWA
13ab7af3f0
icu: update to 68.2
Maintainer: me
Compile tested: head r15324-920b692, aarch64, x86_64
Run tested: (qemu-5.2.0) aarch64

Description:
Update to 68.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit d6317132dd)
2021-03-22 00:31:59 +01:00
Hirokazu MORIKAWA
2120a3cf51
icu: update to 68.1
It updates to CLDR 38. New features including locale-dependent smart unit preferences (road distance, temperature, etc.) and locale ID canonicalization conformant with CLDR.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4f3a8c1535)
2021-03-22 00:31:51 +01:00
Rosen Penev
10712797f0
icu: fix compilation under CentOS 7
CentOS 7's GCC is quite old and does not put max_align_t under std.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6255a77128)
2021-03-22 00:31:43 +01:00
Hirokazu MORIKAWA
79ddd03288
icu: update to 67.1
Unicode 13 & CLDR 37. Bug fixes for date and number formatting, enhanced support for user preferences in the locale identifier. LocaleMatcher code and data improved. Number skeletons have a new “concise” form that can be used in MessageFormat strings.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit e3be3aadc1)
2021-03-22 00:31:34 +01:00
Rosen Penev
813f8d7db2
Merge pull request #15165 from gladiac1337/haproxy-2.0.21-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.21
2021-03-19 15:51:45 -07:00
Christian Lachner
227597c970 haproxy: Update HAProxy to v2.0.21
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:38:26 +01:00
Tianling Shen
a8a4059284 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa50)
2021-03-18 23:22:48 -10:00
Tianling Shen
01ab015a9a msgpack-c: add new package
This is needed by tmate.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cfc965b107)
2021-03-18 23:22:48 -10:00
Rosen Penev
97beb7d365
minidlna: update to 1.3.0
Fixes two CVEs relating to UPnP.

Removed libuuid dependency. It is not used.

Remove clock_gettime hack. It seems to have been fixed.

Removed upstream patches.

Refreshed the other ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f568979648)
2021-03-18 10:23:08 +01:00
Hannu Nyman
d1eec4ad47
Merge pull request #15149 from ja-pa/tor-0.4.4.8-openwrt-19.07
[openwrt 19.07] tor: update to version 0.4.4.8 (security fix)
2021-03-17 19:55:45 +02:00
Jan Pavlinec
0494d8706b
tor: update to version 0.4.4.8
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-17 10:52:33 +01:00
Florian Eckert
1656b49bfe
Merge pull request #15136 from TDT-AG/pr/2021015-openwrt-19.07-mwan3
mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
2021-03-16 14:14:24 +01:00
Florian Eckert
40d56e46b1 mwan3: remove mwan3 ubus call on mwan3 iface hotplug ACTION
With this change, the interface status is no longer read from the mwan3 ubus.
The status of the interface is read directly from the status directory.
This was already implemented in the master with the
commit c07f5230be.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-15 14:15:42 +01:00
Karl Palsson
b66d262d75 net/mosquitto: bump to 1.6.14
This is a minor security fix for outgoing bridges and the client
library.

Full details: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 10:41:31 +00:00
Paul Spooren
e573dac5f1 CI: backport GitHub action CI
The CI is working fine with OpenWrt snapshots and 21.02, so backport it.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-03-12 09:21:44 -10:00
Olivier Poitrey
81fa8cf893 nextdns: Update to version 1.11.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-03-09 21:24:18 +02:00
Rosen Penev
2170d8ed62
Merge pull request #15054 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: better processing of custom user files
2021-03-08 12:26:46 -08:00
Stan Grishin
af02206e25 vpn-policy-routing: better processing of custom user files
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:35:01 +00:00
Rosen Penev
5c58de5e63
libpam: update to 1.5.1
Fix installed paths. After e52d0487e88c3c8c57e1310d1a02b18eae0d142e
upstream, this bug was exposed.

Instead of working around it, fix the patch.

After this, everything consistently gets installed to ipkg-install/usr.

Minor Makefile reorganization.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b75f250f3b)
2021-03-07 13:55:07 +01:00
Rosen Penev
86a70892d8
libpam: update to 1.5.0
Fixes CVE-2020-27780

Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0f317e9fbd)
2021-03-07 13:54:58 +01:00
Rosen Penev
ef17e4a30c
libpam: update to 1.4.0
Remove upstreamed patch and add a new one to fix compilation.

Add some more configure options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a05db1acfe)
2021-03-07 13:54:46 +01:00
Hannu Nyman
85d122fdc7 nano: update to 5.6.1
Update nano editor to version 5.6.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0f4138db0b)
2021-03-06 10:29:08 +02:00
Rosen Penev
a6a27c904a ninja: update to 1.10.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f25f29c740)
2021-03-04 23:49:55 -08:00
Rosen Penev
b4adde5872 ninja: fix typo
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 52569b80fa)
2021-03-04 23:49:55 -08:00
Rosen Penev
7fd6802244 ninja: use for CMake
CMake supports Ninja for faster compilation and less bugginess when it
comes to parallel compilation. That is, some CMake packages currently
have PKG_BUILD_PARALLEL set where it is not needed with ninja.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54449e9c66)
2021-03-04 23:49:54 -08:00
Rosen Penev
1299b07ee8 ninja: update to 1.10.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0f317d6536)
2021-03-04 23:49:54 -08:00
Florian Eckert
8c63f6331c
Merge pull request #14661 from TDT-AG/pr/20210203-19.07-keepalived
keepalived: backport fixes
2021-03-03 10:01:24 +01:00
Rosen Penev
7c74a5d732
Merge pull request #14988 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: update to 0.3.2-18
2021-03-02 01:56:59 -08:00
Stan Grishin
86bb11e973 vpn-policy-routing: update to 0.3.2-18
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-01 21:38:44 +00:00
Alexandru Ardelean
2faeeb18eb
python-maho-mqtt: bump to versio 1.5.1
Docs say it also supports MQTT 5.0.
Added to description.
Updated title as on pypi.org

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit ee0e11c1ab)
2021-03-01 00:48:56 +01:00
Rosen Penev
8dd29ea1b4
Merge pull request #14962 from EricLuehrsen/unbound_1131_1907
[openwrt-19.07] unbound: update to 1.13.1
2021-02-28 15:02:10 -08:00
Eric Luehrsen
5c95dda730 unbound: update to 1.13.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-02-28 16:01:03 -05:00
Dirk Brenken
8fa04c0de8
Merge pull request #14918 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: bugfix: netflix user file missing redirect
2021-02-27 06:21:20 +01:00
Stan Grishin
3abe9d0aef vpn-policy-routing: bugfix: netflix user file missing redirect
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 22:03:41 +00:00
Rosen Penev
a4372ab6fb
Merge pull request #14903 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: update user netflix file
2021-02-25 21:12:28 -08:00
Stan Grishin
904d911c55 vpn-policy-routing: update user netflix file
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 02:16:44 +00:00
Hannu Nyman
2666b3d00d nano: update to version 5.6
Upgrade nano to version 5.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit dffdfe4ac8)
2021-02-25 16:58:50 +02:00
Rosen Penev
4ed9be1987
Merge pull request #14888 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: custom user scripts improvements
2021-02-24 16:53:41 -08:00
Stan Grishin
7d26130b33 vpn-policy-routing: custom user scripts improvements
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-24 19:44:10 +00:00
Jan Hak
7d9d8616cf
libedit: update to version 20210216-3.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit fd7f43ae46)
2021-02-24 10:20:48 +01:00
Jan Hák
ca01f389de
libedit: update to version 20193112-3.1
Signed-off-by: Jan Hák <jhak@jhak.nic.cz>
(cherry picked from commit 58a5c548eb)
2021-02-24 10:20:41 +01:00
Dirk Brenken
8550232147
adblock: update blocklist sources
* change adguard url
* remove malwaredomains (discontinued)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-02-23 15:46:43 +01:00
Rosen Penev
04f8ded56d
Merge pull request #14869 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: update to version 0.3
2021-02-23 05:12:03 -08:00
Jan Hak
39f3941cd4
knot: update to version 3.0.4
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 341fffb8dd)
2021-02-23 12:25:02 +01:00
Jan Hak
1662ca26ba
knot: update to 3.0.3
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5cd9378653)
2021-02-23 12:24:57 +01:00
Jan Hák
9389a5dd1f
knot: disable embedded xdp
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 1f9d6fbb26)
2021-02-23 12:24:52 +01:00
Jan Hák
7619ff0dfc
knot: update to 3.0.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit a54828926d)
2021-02-23 12:24:47 +01:00
Daniel Salzman
5ddcc2e050
knot: disable libnghttp2 autodetection
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
(cherry picked from commit 67e3c594de)
2021-02-23 12:24:43 +01:00
Jan Hak
fb103be86b
knot: update to version 3.0.1
definition of PSELECT_COMPAT could be removed many years ago, is no longer needed

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 4069bb1e72)
2021-02-23 12:24:38 +01:00
Josef Schlehofer
523011bf49 screen: backport fix for CVE-2021-26937
Security reports:
- https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html
This issue can be reproduced even on OpenWrt
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982435

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c250298fa3)
2021-02-23 06:11:38 -05:00
Josef Schlehofer
8e1b62d4bb openvswitch: update to version 2.11.6 (security fix)
Fixes CVEs:
- CVE-2020-35498
- In DPDK: CVE-2015-8011 and CVE-2020-27827
- In LLDP: CVE-2019-14818, CVE-2020-10722, CVE-2020-10723 and CVE-2020-10724

Removed patches:
- 0001-compat-Include-confirm_neigh-parameter-if-needed.patch because they
are included in this release as it was backported
- 0010-acinclude-Fix-build-with-kernels-with-prandom-moved-.patch
included in this release as it was backported

Other patches were refreshed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-02-23 17:14:37 +08:00
Stan Grishin
5e24f6db6d vpn-policy-routing: update to version 0.3
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-23 01:20:14 +00:00
Rosen Penev
3be5d565cf
Merge pull request #14710 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for force DNS/DNS hijacking
2021-02-22 16:27:00 -08:00
Josef Schlehofer
0d0e4b96b4
netdata: update to version 1.29.2
Release notes:
https://github.com/netdata/netdata/releases/tag/v1.29.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e8021bf14d)
2021-02-22 19:53:46 +01:00
Josef Schlehofer
2980cb8dbb
netdata: update to version 1.29.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d0736d5e73)
2021-02-22 19:53:41 +01:00
Josef Schlehofer
da74b6448f
Merge pull request #14845 from jefferyto/python-3.7.10-openwrt-19.07
[openwrt-19.07] python3: Update to 3.7.10, refresh patches
2021-02-22 18:46:34 +01:00
Jeffery To
f05ba1bbca
python3: Update to 3.7.10, refresh patches
Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
  as a query args separator

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-02-22 21:05:28 +08:00
Moritz Warning
7be89f1f34
zerotier: bump to 1.6.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-21 08:48:36 +01:00
Rosen Penev
d5e0fd68d9
Merge pull request #14785 from nmeyerhans/openwrt-19.07+bind-9.16.12
bind: bump to 9.16.12
2021-02-18 17:10:31 -08:00
Noah Meyerhans
fcf72948ae bind: bump to 9.16.12
Includes fix for security issues:

* CVE-2020-8625: BIND servers are vulnerable if they are running an
  affected version and are configured to use GSS-TSIG features.

Disable backtrace functionality, as it is unreliable across
architectures and generally only supported by upstream on amd64

Remove a patch that has been incorporated upstream

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
2021-02-18 15:46:39 -08:00
Rosen Penev
9395507160
Merge pull request #14778 from BKPepe/ksmbd-19.07-drop-arc4-dependency
ksmbd: remove kmod-crypto-arc4 dependency
2021-02-17 12:58:29 -08:00
Josef Schlehofer
feb1a188e5
ksmbd: remove kmod-crypto-arc4 dependency
This kernel module is already set for target/linux/generic/config-4.14
in OpenWrt 19.07 branch. This solves a problem that this package can not
be installed on the router:

 * satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-fs-ksmbd:
 * 	kmod-crypto-arc4
 * opkg_install_cmd: Cannot install package kmod-fs-ksmbd.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-02-17 20:32:55 +01:00
Hauke Mehrtens
90af10d015
Merge pull request #14647 from neheb/k9
[19.07] ksmbd(-tools): update to 3.3.4
2021-02-16 22:26:50 +00:00
Rosen Penev
f1459a2856
Merge pull request #14714 from 1715173329/ttyd-bp
[19.07] ttyd: force enable authentication for login
2021-02-14 16:06:57 -08:00
John Audia
2f7026e65c htop: update to 3.0.5-1
Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 476f70e9a0)
2021-02-14 20:05:44 +02:00
Josef Schlehofer
ad186135ac
python-paho-mqtt: Update to version 1.5.0
Try to fix license according to SPDX.
Add PKG_LICENSE_FILES.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f8e36f9fd6)
[use pypi.mk for Python package]
2021-02-12 16:12:19 +01:00
Philip Prindeville
9b248e0448
Merge pull request #14715 from pprindeville/isc-dhcp-stable-fix-coredump
isc-dhcp: seeing crashes when attempting to update dynamic dns
2021-02-10 12:34:19 -07:00
Philip Prindeville
3f0dbcdae1 isc-dhcp: seeing crashes when attempting to update dynamic dns
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-02-10 12:00:53 -07:00
Tianling Shen
95fa96bda2
ttyd: force enable authentication for login
Currently, we called `/usr/libexec/login.sh` as login command, but unfortunately the auth
is disabled by default in it[1], and this is really serious as it could be a free "backdoor"
for any spoiler who has conntectd to the router via LAN or wireless.

In my option, it shouldn't be exposed to anyone without auth, so I set the default login
command to `/bin/login`. And for those who really want that, they can do it themselves.

1. `login.sh` adjusts whether use authentication or not from system config named ttylogin,
which is set to disabled by default. See package/base-files/files/bin/config_generate#L243.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

Backported from f45bb2981d
2021-02-10 19:20:09 +08:00
Stan Grishin
1a4184c076 https-dns-proxy: support for force DNS/DNS hijacking
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-10 05:59:24 +00:00
Karl Palsson
b1fec2b7b5 mosquitto: bump to 1.6.13
Includes various fixes: (2.0.7 + 1.6.13 dual release)
https://mosquitto.org/blog/2021/02/version-2-0-7-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-02-08 15:20:53 +00:00
Rosen Penev
d2daab3d33
Merge pull request #14681 from jonathanunderwood/openwrt-19.07-getdns-no-static-linking
[19.07] getdns: disable static linking of getdns utilities
2021-02-07 15:19:51 -08:00
Jonathan G. Underwood
5954e5695b getdns: disable static linking of getdns utilities
This fixes issue #13361.

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2021-02-07 14:42:38 +00:00
Rosen Penev
89d14ff29c
Merge pull request #14670 from jonathanunderwood/openwrt-19.07-cherry-pick
[19.07] getdns: cherry pick recent fixes from master
2021-02-06 14:34:29 -08:00
Rosen Penev
63db81b46e
Merge pull request #14677 from mwarning/zt2
zerotier: update to 1.6.3
2021-02-06 14:33:43 -08:00
Moritz Warning
db69f0b57c zerotier: update to 1.6.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-06 22:06:37 +01:00
Harris K Kusuma
1cec6bcfa1 getdns: Fix TLS V1.3 Ciphersuites option in Stubby
Description :
Fix typo in CMAKE getdns included files, so Stubby can use TLS v1.3 with chipersuites options ON.

This solve issue that's written in here :
https://github.com/getdnsapi/stubby/issues/240
https://github.com/getdnsapi/stubby/issues/257

Signed-off-by: Harris K Kusuma <igharris.kk@gmail.com>
2021-02-06 12:02:26 +00:00
Rosen Penev
d7b42dcaa4 getdns: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-06 12:02:16 +00:00
Florian Eckert
798c3ba3f9 keepalived: fix config typo
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a8a1fbfa0d)

* Update PKG_RELEASE to 5
2021-02-05 09:25:02 +01:00
Florian Eckert
d41a0b75aa keepalived: add script security param to fix warning
Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 1b1ba71063)
2021-02-05 09:25:02 +01:00
Rosen Penev
dbc66a08f3
ksmbd: update to 3.3.4
Manually added from master.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-04 00:23:59 -08:00
Rosen Penev
86c8807120
ksmbd-tools: update to 3.3.4
Manually updated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-03 17:26:48 -08:00
Florian Eckert
dee2e818b9 keepalived: set default run directory for pid file on build
This fixes a runtime startup error on system which does not have a
toplevel runtime directory for the pid file. On openwrt the pid is
located at /var/run and not on /run. To fix that add a configure option to
move the pid location to /var/run.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bc98aaa3f7)

* Patch adapted for the branch so that it can be applied correctly
2021-02-03 10:04:59 +01:00
Rosen Penev
2888560b93
Merge pull request #14632 from stangri/19.07-simple-adblock
[19.07] simple-adblock: remove dependency on jsonfilter & old code
2021-02-02 19:40:16 -08:00
Stan Grishin
cf79695645 simple-adblock: remove dependency on jsonfilter & old code
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-02 22:11:20 +00:00
Josef Schlehofer
bee91a9d88 sudo: backport patches for CVE-2021-3156
This security vulnerability is known as Baron Samedit [1] and there is a
research by Qualys [2] and they discovered it. Unfortunately or
fortunately, there isn't present sudoedit on OpenWrt.

Two patches were applied cleanly and the other two required manual
intervention. Those were backported from version 1.9.5p2

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156
[2] https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-01-28 10:09:00 -10:00
Rosen Penev
4949dcdc50
Merge pull request #14575 from Andy2244/samba4-fix-#13758
[19.07] samba4: fix for #13758
2021-01-26 14:53:53 -08:00
Andy Walsh
46d327a59b samba4: fix for #13758
* fix for possible exploit #13758
* sanetize all external template/config inputs
* fix some shellcheck warnings

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-01-26 12:24:57 +01:00
Rosen Penev
7a1ccfc0e6
Merge pull request #14565 from rs/nextdns-1.10.1-openwrt-19.07
[19.07] nextdns: Update to version 1.10.1
2021-01-25 23:07:17 -08:00
Michael Heimpold
308369a6f0
Merge pull request #14558 from cartender/pr/19_fix_php7_conf_ac
php7: Fix prepare target incorrectly referencing 'configure.in' instead of 'configure.ac'
2021-01-25 23:54:21 +01:00
Olivier Poitrey
e8d15424b4 nextdns: Update to version 1.10.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-01-25 17:55:29 +00:00
Giovanni Giacobbi
11e9a2e179
php7: Fix prepare target incorrectly referencing 'configure.in' instead of 'configure.ac'
Package release version unchanged as it does not impact the build result in any way.

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-01-25 10:38:19 +00:00
Josef Schlehofer
aae5144e73
msmtp: update to version 1.8.14
Release notes for 1.8.1.3:
https://marlam.de/msmtp/news/msmtp-1-8-13/

Release notes for 1.8.1.4:
https://marlam.de/msmtp/news/msmtp-1-8-13/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ff76e24e5a)
2021-01-24 23:10:53 +01:00
Josef Schlehofer
8e54decfa2
youtube-dl: update to version 2021.1.16
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5d839fc06b)
2021-01-24 10:31:31 +01:00
Josef Schlehofer
3b582ebd3f
youtube-dl: update to version 2020.12.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 87e15391cd)
2021-01-24 10:31:25 +01:00
Rosen Penev
ee88c06fbd
Merge pull request #14501 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: bugfix: high CPU utilization
2021-01-22 17:42:24 -08:00
Rosen Penev
ce5a4eaea2
Merge pull request #14499 from nemesisdesign/openwrt-19.07
openwisp-config: update to version 0.5.0
2021-01-18 23:39:47 -08:00
Stan Grishin
46253b17d4 https-dns-proxy: bugfix: high CPU utilization
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-01-18 15:28:06 +00:00
Federico Capoano
cc38c62ad2 openwisp-config: update to version 0.5.0
Full changelog available at https://github.com/openwisp/openwisp-config/releases/tag/0.5.0

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 9f7b8088c3)

# Conflicts:
#	admin/openwisp-config/Makefile
2021-01-18 09:55:30 -05:00
Rosen Penev
50725c4c86 Revert "libzip: update to 1.7.3"
This reverts commit d8f0ebaa3d.

Versions 1.7.2 and above mandate CMake 3.1.7, making this unsuitable
for backporting.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-01-17 02:00:09 -08:00
Michael Heimpold
d8f0ebaa3d
libzip: update to 1.7.3
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1335121067)
2021-01-15 13:44:00 -08:00
Michael Heimpold
9a0a7f928a
libzip: update to 1.7.1 (closes #12512)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fa566417ca)
2021-01-15 13:44:00 -08:00
Michael Heimpold
5fc9220434
libzip: update to 1.6.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5a6054d477)
2021-01-15 13:44:00 -08:00
Michael Heimpold
9174036e4c
libzip: update to 1.6.0
Also remove upstreamed patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3b622a612c)
2021-01-15 13:43:59 -08:00
Sebastian Kemper
92f095b21c
libzip: fix musl-fts failure
musl doesn't support fts. But with the extra package musl-fts installed,
libzip picks up the fts header and fails at the linking stage:

zipcmp.c:(.text.startup+0x130): undefined reference to `fts_open'
/home/sk/tmp/openwrt/staging_dir/toolchain-mips_24kc_gcc-8.3.0_musl/lib/gcc/mips-openwrt-linux-musl/8.3.0/../../../../mips-openwrt-linux-musl/bin/ld: zipcmp.c:(.text.startup+0x172): undefined reference to `fts_read'

So with musl-fts we need to link in libfts. To address that this commits
patches the cmake setup to check if fts is available in libc itself or
in any external libfts.

So when musl-fts is installed on the system the setup will be the
following:

musl: use libfts
uclibc: use fts from libc
glibc: like uclibc

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 0c381f7c7a)
2021-01-15 13:43:59 -08:00
Michael Heimpold
a0d9d76b23
libzip: add package
This introduces libzip which is e.g. a dependency for upcoming upgrade
of PHP to version 7.4.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit a4a98d5efe)
2021-01-15 13:43:59 -08:00
Hannu Nyman
93d3bfd080 nano: update to 5.5
Update nano editor to version 5.5

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit be75f77973)
2021-01-15 15:55:51 +02:00
Rosen Penev
1224d6c213
idevicerestore: update to 1.0.0
Switched to upstream tarballs as they are now available

Removed autoreconf as a result.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 18f3410ac4)
2021-01-14 17:03:50 -08:00
Rosen Penev
9cfae98a7a
idevicerestore: update to 2020-04-20
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b112de71e1)
2021-01-14 17:03:50 -08:00
Rosen Penev
23f85f8fa5
idevicerestore: update to 2020-02-17
Fix compilation under glibc.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 355d8b1388)
2021-01-14 17:03:50 -08:00
Rosen Penev
cb2d403463
idevicerestore: Update to 2019-12-26
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 905c7c62fb)
2021-01-14 17:03:49 -08:00
Rosen Penev
202469750f
idevicerestore: Add package
Allows to flash an iOS device without using iTunes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9fbe1c247e)
2021-01-14 17:03:49 -08:00
Rosen Penev
646461e2bd
libirecovery: update to official tarball
Removed autoreconf as a result.

Unfortunately, the two versions are not identical. Bumped PKG_RELEASE
to deal with it.

Disable static libraries as they're fairly useless.

Adjusted filepaths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4e203a1949)
2021-01-14 17:03:07 -08:00
Rosen Penev
4f3b1aa38b
libirecovery: fix version
The hash was correct but not the source version. No idea how this happened

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7c7a922cb0)
2021-01-14 17:03:06 -08:00
Rosen Penev
e871dcf6b9
libirecovery: Update to 1.0.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bedf33b7e2)
2021-01-14 17:03:06 -08:00
Rosen Penev
4175b8074e
libirecovery: Add package
Needed for idevicerestore

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0b51b4c469)
2021-01-14 17:03:06 -08:00
Christian Lachner
7707d2d78c haproxy: Update HAProxy to v2.0.20
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-01-11 17:38:14 +02:00
Rosen Penev
7ee0a565be
Merge pull request #14457 from rs/nextdns-1.9.6-openwrt-19.07
[19.07] nextdns: Update to version 1.9.6
2021-01-10 17:28:50 -08:00
Olivier Poitrey
8cc7aef3ce nextdns: Update to version 1.9.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-01-10 23:25:34 +00:00
Josef Schlehofer
67a324b5ef
syslog-ng: update to version 3.30.1
Bump version also in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e0f76cfa82)
2021-01-10 11:10:31 +01:00
Rosen Penev
208bf92b6b
Merge pull request #14427 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP support
2021-01-06 19:58:49 -08:00
Stan Grishin
9e29bd4dee https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP codepoint support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-01-06 17:53:15 +00:00
Hannu Nyman
6d2ea90c31 haveged: update to 1.9.14
Update haveged to version 1.9.14.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6dac6bd886)
2021-01-03 20:08:36 +02:00
Rosen Penev
64b8dade4b
usbmuxd: update to 1.1.1
Switched to upstream tarballs as they are now available.

Removed autoreconf as a result.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e480fa8b33)
2021-01-01 17:54:47 -08:00
Rosen Penev
42f2270664
usbmuxd: enable systemd support
This is needed as the options loop is totally broken and doesn't accept
both -f and -z together.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7ae3bac516)
2021-01-01 17:54:46 -08:00
Rosen Penev
13485a4e56
usbmuxd: Update to 2020-01-20
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a83e56eba3)
2021-01-01 17:54:46 -08:00
Rosen Penev
c5aae4a768
usbmuxd: Update to latest master
usbmuxd must be ran for many of the idevice tools. Added an init
script to make this easier.

Added myself as maintainer.

Fix PKG_CVE_ID.

Added config directory.

Placed in a submenu for easier readability.

Add extra tool

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fb7ed3d996)
2021-01-01 17:54:46 -08:00
Rosen Penev
0d0820d43b
usbmuxd: Update to latest git version
Fixes compilation with libimobiledevice.

Small cleanups for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9b21f69404)
2021-01-01 17:54:26 -08:00
Rosen Penev
46ecb7d584
imobiledevice: backport iOS 14 backup patch.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 35baa6e96f)
2021-01-01 17:52:43 -08:00
Rosen Penev
c71f4a82e6
libimobiledevice: update to 1.3.0
Upstream created proper tarballs. Switch to those.

Removed autoreconf as a result.

Adjusted filepaths.

Removed upstreamed patch.

Disabled static libraries as they're not useful.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4831939255)
2021-01-01 17:52:43 -08:00
Rosen Penev
2ca8db4277
libimobiledevice: update to 2020-02-19
Added config directory patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1435e5f4)
2021-01-01 17:52:43 -08:00
Rosen Penev
2e2775dbc2
libimobiledevice: Update to 2020-01-20
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 18b8c65774)
2021-01-01 17:52:22 -08:00
Rosen Penev
cbda7d9083
libimobiledevice: Update to latest master
Added patch to fix Wformat warning.

Fixed license information.

Removed outdated iconv dependency

Placed in a submenu for readability.

Added myself as maintainer.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 517005ca51)
2021-01-01 17:52:22 -08:00
Rosen Penev
f988eff7af
libimobiledevice: Update to 2019-11-29
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ff321480a5)
2021-01-01 17:51:59 -08:00
Rosen Penev
b856f627bc
libusbmuxd: update to 2.0.2
Upstream created proper tarballs. Switched to those.

Removed autoreconf as a result.

Adjusted filenames.

Got rid of static compiles as they're pretty useless.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 38ea3e84f8)
2021-01-01 17:51:04 -08:00
Rosen Penev
d59f1c90db
libusbmuxd: Several fixes
Add myself as maintainer.

Add PKG_CPE_ID.

Add submenu for easier readability.

Install extra tool.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 09799e54c6)
2021-01-01 17:51:03 -08:00
Rosen Penev
a17c2aec3b
libusbmuxd: Update to 2.0.1
The release of checkra1n necessitated a new release.

Removed inactive maintainer.

Fixed license info.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 062cf276a2)
2021-01-01 17:51:03 -08:00
Espen Jürgensen
5fc564827b
libplist: add missing pkgconfig files in libplist 2.2
Closes #12571.

Same fix as Debian, see:
137716df3f (commitcomment-40099153)

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>
(cherry picked from commit ca1bbd228f)
2021-01-01 17:49:33 -08:00
Rosen Penev
7660f6fa28
libplist: update to 2.2.0
Upstream finally got a proper tarball. Switched to that.

Remove autoreconf as it's no longer needed.

Adjusted new filepaths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d082258c3e)
2021-01-01 17:49:32 -08:00
Rosen Penev
8c28123e7d
libplist: Several fixes
Add myself as maintainer.

Add PKG_CPE_ID.

Switch to submenu for easier readability.

Change libplist-utils name to the utility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 130b770a8b)
2021-01-01 17:49:21 -08:00
Rosen Penev
a604344224
libplist: Update to 2.1.0
The release of checkra1n necessitated a new release.

Removed inactive maintainer.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a856d6604b)
2021-01-01 17:49:20 -08:00
Rosen Penev
3645d28763
libplist: Switch to normal releases
Also added the capability to use uclibcxx instead of libstdcpp.

Several size optimizations.

Fixed up Makefile to be up to standards.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5049588c46)
2021-01-01 17:48:59 -08:00
Michael Heimpold
cafbae7121 php7: drop patch for openssl deprecated API (fixes #14357)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-12-30 00:30:05 +01:00
Josef Schlehofer
4d1e525fcd
netdata: update to version 1.28.0
Refreshed patches and removed one backported patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6c5e3e5cca)
2020-12-26 02:15:54 +01:00
Dirk Brenken
0563feebc6
adblock: backport fixes
* set PROCD_RELOAD_DELAY correctly
* source changes:
  - add new source 'games_tracking' (https://www.gameindustry.eu)
  - change malwaredomains source mirror
  - remove malwarelist source (source is empty)
  - remove youtube source (does not work at all)
* add check for gnu-sort

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-12-23 21:20:28 +01:00
John Audia
40c1005f2c htop: update to 3.0.4-1
Build-tested: x86/64
Run-tested: ipq806x (R7800)

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 8b5af4ed6f)
2020-12-22 15:28:33 +02:00
Aaron Goodman
6bd3f5c377 mwan3: use ping -I for ipv6 after tunnel kernel fix
Now that tunnels have been fixed with openwrt commit
c9c7b4b3945c01c2aadf3ef5d9a77c8200db80f1 for stable branch 19.07
ping with src ip is no longer needed.

fixes #13655

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* Update commit message
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-12-22 11:24:21 +01:00
Rosen Penev
2a7bbad223 noddos: remove
According to https://github.com/openwrt/packages/issues/14248 , this
is totally abandoned. The website isn't even up anymore.

Fixes: https://github.com/openwrt/packages/issues/14248

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(backported from commit eb9d5bbf39)
2020-12-21 20:02:08 +02:00
Rosen Penev
9f0c6921b4
Merge pull request #14280 from commodo/openwrt-19.07-ulogd
[19.07] ulogd: backports from master
2020-12-20 09:11:45 -08:00
Rosen Penev
182264c5bd ulogd: Add back autoreconf
Compile fails at times, probably because of the patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0fa6b85686)
2020-12-20 11:44:49 +02:00
Sebastian Fleer
6106d1f287 ulogd2: Build IPFIX module
add ulogd_output_IPFIX.so to ulogd-mod-extra

Signed-off-by: Sebastian Fleer <dev@dwurp.de>
(cherry picked from commit 3a06581ad7)
2020-12-20 11:44:41 +02:00
Rosen Penev
c8730e9515 ulogd2: Backport upstream patches
IPFIX support was requested.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 79c881200f)
2020-12-20 11:44:35 +02:00
Alexandru Ardelean
5845691cba net: ulogd2: add myself as maintainer
Since this package has been abandoned, I don't mind taking it over.
If there are issues with it, I can also investigate, and be a point-man.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 2a5fb656f2)
2020-12-20 11:44:29 +02:00
Rosen Penev
df1c29679e
nut: fix _ handling
Taken from https://github.com/openwrt/packages/issues/13359

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4d39346fb4)
2020-12-19 22:27:45 -08:00
Yousong Zhou
e04535e997 qemu: bump PKG_RELEASE
This is a fixup for 391267fc ("qemu: add patch for qga guest-shutdown
command")
2020-12-20 09:22:23 +08:00
Rosen Penev
d7f8eab535
Merge pull request #14271 from stangri/19.07-simple-adblock
[19.07] simple-adblock: config update
2020-12-19 02:29:44 -08:00
Stan Grishin
3eb2e140eb simple-adblock: config update
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-12-18 22:05:12 -06:00
Rosen Penev
e7d814a2b0
Merge pull request #14251 from Andy2244/samba-4.11.17
[19.07] samba4: update to 4.11.17
2020-12-17 14:38:38 -08:00
Rosen Penev
d5632c4d79
Merge pull request #14252 from Andy2244/wsdd2-2020-11-19-(19.07)
[19.07] wsdd2: update to git 2020-11-19
2020-12-17 14:38:10 -08:00
Andy Walsh
dc529c8cdd wsdd2: update to git 2020-11-19
* update to git 2020-11-19
* cleanup comments
* use uppercase for none mdns option

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-12-17 21:04:33 +01:00
Andy Walsh
adb2143388 samba4: update to 4.11.17
* update to 4.11.17
* fix CVE-2020-1472, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-12-17 20:51:58 +01:00
John Audia
304888a373 htop: update to 3.0.3-1
Build-tested: x86/64
Run-tested: ipq806x (R7800)

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit e9ec8d8153)
2020-12-17 17:05:29 +02:00
John Audia
0266f31c9d htop: update to 3.0.2-1
Build-tested: x86/64
Run-tested: ipq806x (R7800)

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit dee2300132)
2020-12-17 17:05:29 +02:00
Yousong Zhou
391267fc9f qemu: add patch for qga guest-shutdown command
Corresponds to commit 33bbecea in master branch

Ref: https://github.com/openwrt/packages/issues/14244
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-12-17 17:12:44 +08:00
Florian Eckert
01196979d8
Merge pull request #14235 from TDT-AG/pr/20201215-owrt1907-lcd4linux-fix
[openwrt-19.07] utils/lcd4linux: fix package source
2020-12-16 10:27:09 +01:00
Martin Schiller
4626c3bd6d utils/lcd4linux: fix package source
The former svn source is not available any more.
Change package source to openwrt sources server.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
2020-12-15 09:05:30 +01:00
Rosen Penev
a6ccc44c5d
Merge pull request #14213 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix - config update
2020-12-14 13:37:32 -08:00
Stan Grishin
dc015ffe27 simple-adblock: bugfix - config update
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-12-12 15:58:36 -06:00
Stan Grishin
9ca6bdaa05 https-dns-proxy: update binary to 2020-08-21
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-12-09 23:33:08 -10:00
Rosen Penev
13d999882b
zerotier: add patch to avoid including sys/auxv.h
It seems it's not needed and not supported under uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e632e189fd)
2020-12-09 17:14:22 -08:00
Jitao Lu
061f81ff6d miniupnpd: Don't override ipv6_listening_ip
Fixes: https://github.com/openwrt/packages/issues/14145
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit c89a1f3e8b)
2020-12-08 23:22:46 -08:00
Hannu Nyman
2974079d3d nano: update to 5.4
Update nano editor to version 5.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b7d8a0a028)
2020-12-04 16:32:39 +02:00
Jitao Lu
e82884cafb
miniupnpd: Pass ipv6 addr to ipv6_listening_ip
Unlike ipv4, this option is supposed to be an IP address, otherwise, an
error occurs on startup:

    can't parse "br-lan" as valid IPv6 listening address

Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit 7077fd8c79)
2020-12-03 17:58:39 -08:00
Rosen Penev
33bd6b6afa
Merge pull request #14115 from mwarning/zt
zerotier: update to 1.6.2
2020-12-02 15:50:32 -08:00
Moritz Warning
ace81238c1 zerotier: update to 1.6.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2020-12-02 19:01:33 +01:00
Chen Minqiang
808a67b35d
net/miniupnpd: ext_ip_reserved_ignore support
This add an option to ignore ext_ip reserved
Enable this option in config by default.

Fixes: #13773

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit b76aa99194)
2020-11-29 17:26:32 -08:00
Marco Martins
1adf9d9794
miniupnpd: Added chain rule to filter table so udp stun incoming connections rules works
Signed-off-by: Marco Martins <marcomartins86@gmail.com>
(cherry picked from commit 773b87977e)
2020-11-29 17:26:32 -08:00
Rosen Penev
4ed18c40e6
miniupnpd: update to 2.2.0
Replace daemon patch with upstream solution.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4d824243e6)
2020-11-29 17:26:30 -08:00
Chen Minqiang
16cceb118a
net/miniupnpd: check by /etc/init.d/miniupnpd running
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit 67b4871322)
2020-11-29 17:25:38 -08:00
Rosen Penev
93d44081c3
miniupnpd: default to IGDv1
It seems even modern stuff doesn't support v2 correctly. The miniupnp
suite does but other stacks seem to lack support. Default to v1 to
avoid the headache.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7891124d6c)
2020-11-29 17:25:06 -08:00
Dirk Brenken
49fb6862d2
adblock: reporting fixes/tweaks
* prevents the creation of an invalid json structure
* add more space to the domain column on cli
* removed test.sh script from package

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-29 13:51:48 +01:00
Rosen Penev
613d4e19c6
Merge pull request #14029 from aaronjg/xtables-addons-fix
xtables-addons: fix compilation error
2020-11-25 21:17:20 -08:00
Aaron Goodman
12b0f8c1ab xtables-addons: patch for 4.14 route_me_harder fix
backport xtables-addons: 0ab324790015a6396be5678b6dffeeaa1cd28299

build: adjust for changed signature of ip_route_me_harder

(Cf. commit 46d6c5ae953cc0be38efd0e469284df7c4328cf8 in Linux.)

Original author: Jan Engelhardt <jengelh@inai.de>

Backported by: Aaron Goodman <aaronjg@stanford.edu>
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-11-25 19:33:34 -05:00
Rosen Penev
a453361e7f
Merge pull request #13943 from jjm2473/openwrt-19.07-fix-libtirpc-clang
libs/libtirpc: fix host compile with clang 12.0.0
2020-11-25 14:32:15 -08:00
Rosen Penev
fb9077a72a
Merge pull request #13983 from rs/nextdns-1.9.4-openwrt-19.07
[19.07] nextdns: Update to version 1.9.4
2020-11-23 17:37:28 -08:00
Olivier Poitrey
591601446b nextdns: Update to version 1.9.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-11-23 22:15:03 +00:00
Rosen Penev
889c46a79e
Merge pull request #13981 from rs/nextdns-1.9.3-openwrt-19.07
[19.07] nextdns: Update to version 1.9.3
2020-11-23 13:50:22 -08:00
Olivier Poitrey
c65dc2c45d nextdns: Update to version 1.9.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-11-23 17:01:54 +00:00
Rosen Penev
446bec6991
Merge pull request #13937 from jjm2473/openwrt-19.07-fix-vim-clang
vim: fix host compile with clang 12.0.0
2020-11-18 13:16:41 -08:00
Dirk Brenken
fb76302091
travelmate: refine scan interface determination
* preferably use the logical wlan interface for scanning
  (as already done in travelmate 2.0)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-18 20:21:06 +01:00
Liangbin Lian
c68be0b846 libs/libtirpc: fix host compile with clang 12.0.0
1.clang ld not supports symvers
2.macos has not mutex_lock, use pthread_mutex_lock instead
3.macos not define SO_PEERCRED, use LOCAL_PEERCRED instead

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 1a9323064c)
2020-11-19 00:28:29 +08:00
Liangbin Lian
1f5670bdff vim: fix host compile with clang 12.0.0
fix autoconf script using 'exit' without including 'stdlib.h'

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2020-11-18 22:52:04 +08:00
Rosen Penev
b77fabe014
Merge pull request #13911 from ja-pa/libexif-sec-19.07
[OpenWrt 19.07] libexif: update to 0.6.22
2020-11-14 20:23:11 -08:00
W. Michael Petullo
e74565a0bb
libexif: update to 0.6.22
Aside from updating the package, this modifies the Makefile to pull the
sources from GitHub rather than SourceForge. The exif project recently
moved to GitHub.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 818f2d9dff)

Fixes:
CVE-2018-20030, CVE-2020-13114, CVE-2020-13113, CVE-2020-13112, CVE-2020-0093, CVE-2019-9278, CVE-2020-12767, CVE-2016-6328, CVE-2017-7544

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-11-13 10:49:42 +01:00
Florian Eckert
68eb1943cc mwan3: add missing dependency
Add missing rpcd dependency.

Fixes #13896

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-11 09:40:01 +01:00
Brian J. Murrell
b038148cc0 mwan3: Remove fork/exec for head
Instead, let sed do the work since it's already being used.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[ update PKG_VERSION ]
2020-11-11 09:39:46 +01:00
Christian Lachner
c5d61945fc haproxy: Update HAProxy to v2.0.19
- Update haproxy download URL and hash
- Fix uclibc patch offset

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-11-08 17:47:02 +02:00
Michael Heimpold
5b3870890d php7: update to 7.2.34
This fixes:
  - CVE-2020-7069
  - CVE-2020-7070

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-11-07 21:44:02 +01:00
Rosen Penev
2bd627ec7d
Merge pull request #13828 from jgora/jgora
xtables-addons: Support IPTV Timeshift. Backport to openwrt-19.07 branch
2020-11-02 12:23:35 -08:00
Jose Olivera
d1d53a3acc xtables-addons: Support IPTV Timeshift
Solves Issue #10373 and PR #10428

Signed-off-by: Jose Olivera <oliverajeo@gmail.com>
(bumped PKG_RELEASE)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-02 10:00:51 +01:00
Josef Schlehofer
05efc24fd6
youtube-dl: update to version 2020.11.1.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 275817a694)
2020-11-02 00:35:49 +01:00
Josef Schlehofer
5db211c621
youtube-dl: update to version 2020.9.20
Release notes: https://github.com/ytdl-org/youtube-dl/releases/tag/2020.09.20

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d2b4c4e63e)
2020-11-02 00:35:43 +01:00
Josef Schlehofer
7b1ac92830
youtube-dl: update to version 2020.9.14
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cc6f4ab7eb)
2020-11-02 00:35:37 +01:00
Josef Schlehofer
3a61338ab4
bind: update to version 9.16.8
- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d442033941)
2020-11-02 00:35:03 +01:00
Stijn Tintel
2331de4ec7
libftdi1: disable building documentation
This fixes the following build failure:

[ 66%] Generating ../doc/xml/ftdi_8c.xml
warning: Tag 'PERL_PATH' at line 2083 of file 'Doxyfile' has become obsolete.
         To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
warning: Tag 'MSCGEN_PATH' at line 2105 of file 'Doxyfile' has become obsolete.
         To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
[ 72%] Generating ftdi1_doc.i
Traceback (most recent call last):
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 457, in <module>
    main()
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 453, in main
    convert(args[0], args[1], not options.func_def, options.quiet)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 430, in convert
    p = Doxy2SWIG(input, include_function_definition, quiet)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 72, in __init__
    f = my_open_read(src)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 44, in my_open_read
    return open(source)
FileNotFoundError: [Errno 2] No such file or directory: '/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/doc/xml/ftdi_8c.xml'

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c131843663)
2020-10-28 21:36:37 -07:00
Rosen Penev
73c7bcb639
libftdi1: Fix pkgconfig paths properly
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0dac4b74ca)
2020-10-28 21:36:23 -07:00
Rosen Penev
82208ceca8
libftdi1: Apply pkgconfig fixes to libftdipp1 as well
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 762a0eeb79)
2020-10-28 21:36:15 -07:00
Rosen Penev
58b6d0ee5a
libftdi1: Partially add back InstallDev
The pkgconfig file needs changing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 180134d04c)
2020-10-28 21:35:59 -07:00
Rosen Penev
55e7acc25e
libftdi1: Remove faulty change from last patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 79168cc259)
2020-10-28 21:35:42 -07:00
Rosen Penev
45e7e13dc0
libftdi1: Don't build examples
Add PKG_BUILD_PARALLEL for faster compilation.

Replace InstallDev section with CMAKE_INSTALL

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2e12e13a3b)
2020-10-28 21:35:28 -07:00
Rosen Penev
089699b1ee
tinyproxy: convert to procd
The path changed since 274506803a

Fixed.

Also took the time to convert to procd.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c14ba8bd77)
2020-10-29 01:51:52 +01:00
Rosen Penev
39ce334617
tinyproxy: update to 1.10.0
Added license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Refreshed patches.

Updated URLs.

Ran init script through shellcheck.

Fixes: CVE-2017-11747, CVE-2012-3505
Fixes: #13793

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 274506803a)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added fixed CVEs and Github Issue]
2020-10-29 01:49:24 +01:00
Olivier Poitrey
b07f752e79 nextdns: Update to version 1.8.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-26 20:45:25 +02:00
Mengyang Li
99e77a716b openconnect: allow specify --protocol from config
openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>
2020-10-25 21:45:31 +01:00
Dirk Brenken
37303e1f04
adblock: update 4.0.7-2
* switch all safesearch providers to dynamic ips (derived from cname)
* made the new safesearch approach compatible with bind-nslookup
* removed 3.x config compatibility code

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4b0d029bb5)
2020-10-23 21:14:44 +02:00
Dirk Brenken
5dbbb7ebf4
adblock: update 4.0.7
* fix aria2c download options
* fix report engine with empty domains
* fix safesearch ips of safe.duckduckgo.com (get ips dynamically)
* fix safesearch ips of safesearch.pixabay.com (get ips dynamically)
* add regional blocklist for italy
* shellcheck adjustments
* add test.sh for CI testing

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d36fd57662)
2020-10-23 21:14:24 +02:00
Vladimir Ulrich
0c9206469c zoneinfo: Updated to the latest release
Also updated compability options to build in supported by musl format

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 4315b0e4f2)
2020-10-20 17:58:43 +03:00
Vladimir Ulrich
a9162448c4 zoneinfo: Updated to the latest release
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 416dd1fa40)
2020-10-20 17:58:30 +03:00
Vladimir Ulrich
abcbc5e1ca zoneinfo: Updated to the latest release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 8850e94dfb)
2020-10-20 17:58:18 +03:00
Matthias Schiffer
a2673dc53c
fastd: fix buffer leak when receiving invalid packets
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-10-19 22:10:59 +02:00
Josef Schlehofer
51bf00834f
logrotate: update to version 3.17.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ba8a34e0d9)
2020-10-18 10:49:57 +02:00
Rosen Penev
8715cef64b
logrotate: update to 3.16.0
Fixes compilation with GCC10.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 528d95564d)
2020-10-17 10:22:30 +02:00
Dirk Brenken
e2567b210f
Merge pull request #13688 from dibdot/trm-19.07
[19.07] travelmate: bugfix single radio mode
2020-10-16 21:32:45 +02:00
Josef Schlehofer
96aa854a62
Merge pull request #13687 from jefferyto/python-3.7.9-openwrt-19.07
[openwrt-19.07] python3: Update to 3.7.9, refresh/remove backported patches
2020-10-16 20:15:58 +02:00
Jeffery To
acb77d5beb
python3: Update to 3.7.9, refresh/remove backported patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-10-17 01:35:19 +08:00
Dirk Brenken
4af889f207
travelmate: bugfix single radio mode
* fix the re-connection handling in single radio mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-10-16 19:31:40 +02:00
Josef Schlehofer
cb3bab1808
netdata: update to version 1.26.0
Disable ebpf plugin as in OpenWrt there is no package libbpf.
- With that, I need to introduce patch, which is not merged into netdata,
yet. Without it, I still got during cross-compilation this error:
checking for externaldeps/libbpf/libbpf.a... configure: error: cannot check for file existence when cross compiling

- And yes, the flag was there.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5ba339b49a)
2020-10-16 18:06:02 +02:00
Josef Schlehofer
70bb0b4c81
bind: update to version 9.16.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ededaf2977)
2020-10-16 17:46:00 +02:00
Rosen Penev
0f7f9c96a8
Merge pull request #13679 from odmdas/freeradius3-backport-19.07
[19.07] freeradius3: backport latest changes to 19.07
2020-10-15 13:29:40 -07:00
Alexey Dobrovolsky
d05698faeb freeradius3: move "release_" from PKG_VERSION
The substring "release_" does not reflect the version number.
In addition, package names will be shorter.

(backported from commit 11aa0b9)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-10-15 20:51:08 +03:00
Alexey Dobrovolsky
93360e6256 freeradius3: add meta-package for default modules
This meta-package contains only dependencies for modules needed in
FreeRADIUS default configuration.

This commit adds missing description and install sections.

(backported from commit 7737abf)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-10-14 21:35:07 +03:00
Josef Schlehofer
fbddfd5b53
Merge pull request #13659 from ja-pa/python3-urllib3-19.07
[OpenWrt 19.07]python-urllib3: update to version 1.25.10 (security fix)
2020-10-14 13:15:10 +02:00
Jan Pavlinec
2f7338b621
python-urllib3: update to version 1.25.10 (security fix)
Fixes:
CVE-2020-26137

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-14 12:20:18 +02:00
Rosen Penev
567a378dc1
Merge pull request #13635 from rs/nextdns-1.8.6-openwrt-19.07
[19.07] nextdns: Update to version 1.8.6
2020-10-11 15:13:11 -07:00
Olivier Poitrey
50a67ed74b nextdns: Update to version 1.8.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-11 21:19:41 +00:00
Josef Schlehofer
2ad15b0375
Merge pull request #13624 from mlichvar/chrony-update-3.5.1
[19.07] chrony: update to 3.5.1
2020-10-10 23:50:30 +02:00
Miroslav Lichvar
b48575ef4d chrony: update to 3.5.1
Fixes CVE-2020-14367.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-10 16:45:15 +02:00
Josef Schlehofer
35e6986a09
nextdns: mark /etc/config/nextdns as configuration file
Conffile was set for OpenWrt master, but it is not present in OpenWrt
19.07. When /etc/config/nextdns is not set as conffile, it gets
overwritten by each update of nextdns and the user needs to set up it again.

This can be simply reproduced by these steps:
opkg update
opkg install nextdns
edit or add smth to /etc/config/nextdns, save it
then do: opkg install nextdns --force-reinstall
And /etc/config/nextdns gets overwritten by default values

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-10-10 10:12:53 +02:00
Stan Grishin
418e3b2948 simple-adblock: config update file fix
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-10-09 17:30:45 -10:00
Rosen Penev
b564c07a5b
Merge pull request #13602 from nxhack/1907_libuv_cve
[19.07] libuv: update to 1.40.0
2020-10-08 01:43:26 -07:00
Hirokazu MORIKAWA
9ac587ca8f libuv: update to 1.40.0
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-10-08 17:18:19 +09:00
Hannu Nyman
613d210856 nano: update to 5.3
Update nano editor to version 5.3.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4690a1f1c9)
2020-10-07 18:24:27 +03:00
Josef Schlehofer
992746571f
btrfs-progs: update to version 5.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f775fa89ca)
2020-10-07 14:56:02 +02:00
Josef Schlehofer
cedba1ca2f
btrfs-progs: update to version 5.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0c12882a65)
2020-10-06 16:05:16 +02:00
Fabian Lipken
25b2751f85
python-pytz: update to 2019.03
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 0f2cf9ebd6)
2020-10-05 18:08:35 +02:00
Dirk Brenken
f3b424139f
adblock: refresh blocklist sources
* rename 'smarttv' to 'smarttv_tracking'
* added 'firetv_tracking' and 'android_tracking' (thanks @panache67)
* added 'gaming' (thanks @hasanlo in openwrt forum)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c01beb0679)
2020-10-04 19:41:50 +02:00
Rosen Penev
996e225329
Merge pull request #13549 from gladiac1337/haproxy-2.0.18-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.18
2020-10-02 13:58:24 -07:00
Josef Schlehofer
ec628b10d9
syslog-ng: bump version in config file
This fixes issues:
syslog-ng[3895]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.29 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.26'

Fixes: 06f3ac21b4 ("syslog-ng: update to
version 3.29.1")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1607774df4)
2020-10-02 13:58:48 +02:00
Karel Kočí
d0a74afad1
syslog-ng: tweak shell code of network_localhost little bit
We can get rid of pipe with -n flag to sysctl.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry picked from commit 7b7d074c8d)
2020-10-02 13:58:43 +02:00
Josef Schlehofer
f705a5a931
python-sentry-sdk: Update to version 0.12.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fd9ebe3d70)
2020-10-02 11:17:49 +02:00
Christian Lachner
2976a5a0ea haproxy: Update HAProxy to v2.0.18
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-10-02 09:20:06 +02:00
Rosen Penev
6ab6a7a897
Merge pull request #13468 from ja-pa/tor-update-0.4.4.5-19.07
[OpenWrt 19.07]tor: update to version 0.4.4.5
2020-10-01 14:43:22 -07:00
Josef Schlehofer
45ee6c340f
Merge pull request #13542 from miska/mariadb-owrt-19.07
[19.07] mariadb: Update to the latest version from 10.2 branch
2020-10-01 14:22:49 +02:00
Jan Pavlinec
eec7bd6468
tor: update to version 0.4.4.5
Disable ac_cv_func_mallinfo because of arc arch.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-01 13:17:18 +02:00
Michal Hrusecky
91af4cf723
mariadb: Update to the latest version from 10.2 branch
Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2020-10-01 10:19:20 +02:00
Rosen Penev
a661e8d248
Merge pull request #13532 from flyn-org/openwrt-19.07
gstreamer1: enable build options necessary for most applications
2020-09-30 13:40:51 -07:00
Josef Schlehofer
9461ae47a1
Werkzeug: Update to version 0.16.0
- Remove PKG_BUILD_DEPENDS as it is no longer necessary.
- The Python3 is already included in DEPENDS.
- Remove PKG_BUILD_DIR and PKG_UNPACK was for dual Python version.
- Change TITLE and description
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 267796c316)
2020-09-30 18:31:26 +02:00
Daniel Golle
f9d9ae8c83
Flask: update to version 1.1.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 90790b6b8f)
2020-09-30 18:30:19 +02:00
Josef Schlehofer
4a833e3a8b
Flask: Update to version 1.1.1
- Change TITLE and URL to better one
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 19e12971b8)
2020-09-30 18:29:28 +02:00
W. Michael Petullo
a4534f1605 gstreamer1: enable build options necessary for most applications
Commit eee7ce2b changed gstreamer1's build options, and this broke
some applications.

First, -Doption-parsing=false is intended for very specific embedded
applications rather general packages. Please see:

https://github.com/openwrt/packages/pull/8847
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/388

Second, -Dregistry=false seems to break plugin discovery. Symptoms of
this include broken applications and gst-inspect-1.0 listing zero plugins.

Fixes #13531.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 10aa094d7f)
2020-09-30 10:18:29 -05:00
Josef Schlehofer
8a71cdd6ab
python-ifaddr: update to version 0.1.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 98eb81ccd6)
2020-09-30 09:28:29 +02:00
Rosen Penev
543f0e14de
Merge pull request #13529 from rs/nextdns-1.8.5-openwrt-19.07
[19.07] nextdns: Update to version 1.8.5
2020-09-29 12:22:57 -07:00
Olivier Poitrey
05ea7dfc63 nextdns: Update to version 1.8.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-09-29 18:19:36 +00:00
Josef Schlehofer
0b5d44bdb0
Merge pull request #13464 from ja-pa/ipmitool-security-fix-19.07
[OpenWrt 19.07] ipmitool: fix CVE-2020-5208
2020-09-29 16:37:07 +02:00
Alexander Couzens
9069ad9252
ipmitool: fix CVE-2020-5208
All patches has been applied upstream.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

(cherry picked from commit b2a9219f73)
2020-09-29 16:14:14 +02:00
Olivier Poitrey
826fc8921a nextdns: Update to version 1.8.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-09-26 10:52:41 -10:00
Nikos Mavrogiannopoulos
ac7f782850 openconnect: updated to 8.10 to address CVE-2020-12823
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-23 18:09:07 +02:00
Josef Schlehofer
3f0e266378
python-zeroconf: update to version 0.28.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1c2f729c9d)
2020-09-23 16:43:08 +02:00
Josef Schlehofer
fe7ceaa653
python-zeroconf: update to version 0.24.4
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8ed94a07fc)
2020-09-23 16:41:55 +02:00
Florian Eckert
925dfc1d1a
Merge pull request #13466 from aaronjg/openwrt-19.07
mwan3: fix typo in mwan3_set_sticky_iptables [19.07] [bugfix]
2020-09-23 08:30:52 +02:00
Aaron Goodman
49459505e7 mwan3: fix typo in mwan3_set_sticky_iptables
fixes #13443

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-09-22 19:18:19 -04:00
Nikos Mavrogiannopoulos
cae961784e ocserv: include ocserv-worker
Resolves: #13465

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-22 21:24:56 +02:00
Stan Grishin
2af61c9a40 vpnbypass: README update, code cleanup
Signed-off-by: Stan Grishin <stangri@melmac.net>

update

Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-09-21 23:03:13 -10:00
Nikos Mavrogiannopoulos
b00feac4b5 ocserv: updated to 1.1.1 2020-09-21 23:11:21 +02:00
Alexey Kuznetsov
c614914da0
miniupnpd: add miniupnpd ipv6_disable option, #11971 close
Signed-off-by: Alexey Kuznetsov <axet@me.com>
(cherry picked from commit 9b6537b487)
2020-09-20 17:56:12 -07:00
Rosen Penev
e4dd67d81d
Merge pull request #13434 from stangri/19.07-simple-adblock
[19.07 simple-adblock: add config auto-update feature
2020-09-20 04:14:12 -07:00
Stan Grishin
70e57317b7 simple-adblock: add config auto-update feature
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-09-20 00:16:50 +00:00
Hannu Nyman
94866d76ab collectd: update to 5.12.0
Update collectd to version 5.12.0.

* Refresh patches
* Remove upstreamed patch 920-fix-ubi-data-source-type.patch
* Backport a patch from upstream to fix a missing define
  (920-backport-netlink-reg-noerror.patch)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 28747825df)
2020-09-19 19:44:55 +03:00
Florian Eckert
b60fa2de9e collectd: update PKG_RELEASE
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6d34208c57)
2020-09-19 19:42:59 +03:00
Florian Eckert
aeefbbe340 collectd: remove quotation on interval this is an number
The value is a number and not a string.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit d2d6220476)
2020-09-19 19:42:59 +03:00
Florian Eckert
b0ad32a3ec collectd: move include line
Currently the init script generates a config file from uci, that has the
include line before the interval line. This means, that anything happening
in the include directory does not yet see the changed Interval.

Moving the include line before the uci generation process fix this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 50f56c2ede)
2020-09-19 19:42:58 +03:00
Florian Eckert
fbe7abcd57 collectd: update PKG_RELEASE
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5afad91d36)
2020-09-19 19:42:58 +03:00
Florian Eckert
f53b79cedb collectd: fix ubi data source type
Currently the values are stored in the ubi plugin as data source type
`counter`. But this makes no sense, because the values change very slowly
and I don't want to know the rate of change. It is better to store the
value as data source type `gauge`. Then I can see the current value.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e7054e7e79)
2020-09-19 19:42:25 +03:00
Florian Eckert
67a403bfe3 collectd: add ubi uci and plugin info
Add uci binding for ubi plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a481a2006c)
2020-09-19 19:42:25 +03:00
Florian Eckert
37335cf653 collectd: enable ubi plugin
Enable ubi plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 46f2476875)
2020-09-19 19:40:51 +03:00
Rosen Penev
03425a0d2f
zmq: fix compilation when libbsd is present
Limit libbsd support to glibc.

Remove wrong python variable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bb9dd1468d)
2020-09-16 16:02:45 -07:00
W. Michael Petullo
8bb1d13a97
pigeonhole: update to 0.5.11
This fixes an error in the previous package when building against recent
OpenWrt releases:

In file included from /builder/shared-workdir/build/sdk/staging_dir/target-x86_64_musl/usr/include/dovecot/lib.h:50,
                 from ext-variables-common.c:4:
ext-variables-common.c: In function 'ext_variables_load':
ext-variables-common.c:91:14: error: expected ')' before 'PRIuSIZE_T'
       "(>= %"PRIuSIZE_T" bytes)",

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c502f261d3)
2020-09-15 18:53:21 -07:00
Jan Pavlinec
86da3bbeb4
zmq: update to version 4.3.3 (security fix)
Fixes
CVE-2020-15166

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c2ffadb928)
2020-09-15 18:39:01 -07:00
Rosen Penev
e72b474698
zmq: fix the installed files
the versioned so files are needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 183236698c)
2020-09-15 18:38:53 -07:00
Rosen Penev
48339ba105
zmq: fix pkgconfig file
It seems upstream broke it. This in turn broke depending packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5bb13435b7)
2020-09-15 18:38:42 -07:00
Rosen Penev
ef30f8bf80
zmq: update to 4.3.2
Remove upstreamed patches.

Add uClibc++ patch for those that need it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e169e2f9c8)
2020-09-15 18:38:23 -07:00
Rosen Penev
a7d129fc2d
zmq: switch to building with CMake
Faster compilation.

Before:

time make package/zmq/compile -j 12
Executed in   24.98 secs   fish           external
   usr time   97.41 secs  263.00 micros   97.40 secs
   sys time   12.51 secs   34.00 micros   12.51 secs

After:

time make package/zmq/compile -j 12
Executed in   18.17 secs   fish           external
   usr time   85.22 secs  248.00 micros   85.22 secs
   sys time    9.23 secs   32.00 micros    9.23 secs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit da3409bc3d)
2020-09-15 18:37:03 -07:00
Michael Heimpold
f69efea1d9
Merge pull request #13397 from ja-pa/libxml2-patch-19.07
[OpenWrt 19.07] libxml2: patch security issues
2020-09-15 19:26:13 +02:00
Jan Pavlinec
a4cbd04df9
libxml2: patch security issues
Fixes
CVE-2019-19956
CVE-2020-24977
CVE-2019-20388
CVE-2020-7595

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-15 10:47:25 +02:00
Michael Heimpold
c2c88df230
Merge pull request #13392 from etactica/u2pnpd-1907
[19.07] u2pnpd: convert to procd
2020-09-14 21:58:45 +02:00
Karl Palsson
207660987c net/u2pnpd: convert init to procd
Drops pid files, no longer needed with procd management.
Now properly reloads on reload_config after UCI changes.

Signed-off-by: Karl Palsson <karlp@etactica.com>

[ Fixed two shellcheck warnings and bump PKG_RELEASE ]
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-09-14 17:00:17 +00:00
Josef Schlehofer
f99f60d7b7
Merge pull request #13385 from odmdas/odmdas-freeradius3-radtest-19.07
[19.07] freeradius3: enable radtest utility and adapt it to OpenWrt
2020-09-14 04:52:37 +02:00
Alexey Dobrovolsky
2d410422c5 freeradius3: fix hostname invocation in radtest
Canonical radtest start results in an error:

$ radtest bob hello localhost 0 testing123
/usr/bin/radtest: line 1: hostname: not found
(0) Error parsing "stdin": Failed to get value

hostname command is not present in OpenWrt.
Instead, hostname can be obtained from file /proc/sys/kernel/hostname.

added: 005-get-hostname-from-proc-in-radtest.patch

(backported from commit 8b2792a)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-09-14 01:36:30 +03:00
Alexey Dobrovolsky
066ac03921 freeradius3: enable radtest utility
radtest utility is used in many manuals to check the operation of
radius server.

At the moment all parameters must be specified at startup, for example:

$ radtest bob hello localhost 0 testing123 0 localhost

(backported from commit 6480acd)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-09-14 00:32:08 +03:00
Rosen Penev
7c618f7dee
Merge pull request #13382 from Andy2244/samba_4-11-12
[19.07] samba4: update to 4.11.12
2020-09-13 13:07:52 -07:00
Andy Walsh
338fa663ca samba4: update to 4.11.12
* update to 4.11.12
* fix optional modules not included on module build (vfs_btrfs, vfs_linux_xfs_sgid)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-09-13 18:22:21 +02:00
Josef Schlehofer
399e1a0bf4
youtube-dl: update to version 2020.9.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit b4eafd5009)
2020-09-12 18:39:37 +02:00
Josef Schlehofer
7825df65f6
msmtp: update to version 1.8.12
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dd0ba4a55b)
2020-09-12 18:39:27 +02:00
Jan Pavlinec
eb8130508e
dovecot: disable zstd
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a5c9ef50dc)
2020-09-12 11:57:05 +02:00
Josef Schlehofer
538647a261
syslog-ng: update to version 3.29.1
Changelog: https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.29.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 06f3ac21b4)
2020-09-12 11:44:39 +02:00
Michael Heimpold
473ca554f5 php7: update to 7.2.33
This fixes:
  - CVE-2020-7068

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-09-10 20:52:44 +02:00
Hannu Nyman
0fca98812b
Merge pull request #13356 from rs/nextdns-1.8.3-openwrt-19.07
[19.07] nextdns: Update to version 1.8.3
2020-09-10 20:35:21 +03:00
Olivier Poitrey
62171036b2 nextdns: Update to version 1.8.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-09-10 17:25:37 +00:00
Jan Pavlinec
953de3ca85 gnutls: update to version 3.6.15 (security fix)
Fixes:
CVE-2020-24659

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-09 23:24:06 +02:00
Rosen Penev
154d6b954c
Merge pull request #13336 from rs/nextdns-1.8.2-openwrt-19.07
[19.07] nextdns: Update to version 1.8.2
2020-09-08 22:47:10 -07:00
Josef Schlehofer
bddc3186c2
Merge pull request #13334 from ja-pa/python-rsa-fix-19.07
[OpenWrt 19.07] python-rsa: downgrade to version 4.5 for python2
2020-09-08 16:03:20 +02:00
Jan Pavlinec
d515d9c353
dovecot: update to version 2.3.11.3 (security fix)
Fixes:
CVE-2020-12100
CVE-2020-12673
CVE-2020-12674

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 8ae394430a)
2020-09-08 15:54:04 +02:00
Olivier Poitrey
a2634c2646 nextdns: Update to version 1.8.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-09-08 10:33:53 +00:00
Jan Pavlinec
1cf41a88c5
python-rsa: downgrade to version 4.5 for python2
Note:
This fixes error introduced in 7af8eaad11
Version 4.6 doesn't support python2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-08 12:16:38 +02:00
Rosen Penev
eae1bb397f
Merge pull request #13310 from EricLuehrsen/unbound_20200904_1907
[19.07] unbound: improve odhcpd rapid update robustness
2020-09-05 13:26:47 -07:00
Eric Luehrsen
54847cc7c1 unbound: improve odhcpd rapid update robustness
cherry-pick: bce5f44f5af6510db484389b8cc0636f6de08877
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-09-05 10:19:38 -04:00
John Audia
d17720f042 htop: update to 3.0.1-1
Build-tested: x86/64
Run-tested: ipq806x (R7800)

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 1d989fc64d)
2020-09-04 18:52:55 +03:00
John Audia
d953d80bf2 htop: update to 3.0.0-1
new upstream, new release taken from ChangeLog[1]:
 New maintainers - after a prolonged period of inactivity from Hisham,
 the creator and original maintainer, a team of community maintainers
 have volunteered to take over a fork at https://htop.dev and
 https://github.com/htop-dev to keep the project going.

1. https://github.com/htop-dev/htop/blob/master/ChangeLog

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit acbdaf863f)
2020-09-04 18:52:45 +03:00
Rosen Penev
af4cd94a2e htop: fix compilation with GCC10
Patch taken from upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de6471014a)
2020-09-04 18:52:34 +03:00
Jan Pavlinec
7af8eaad11
python-rsa: update to version 4.6 (security fix)
Fixes CVE-2020-13757

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e211927f3)
2020-09-03 13:35:34 -07:00
Jan Hak
8b0457c55e
knot: update to version 2.9.6
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 60a35cd1c6)
2020-09-02 13:27:44 +02:00
Rosen Penev
8e384b5eea
Merge pull request #13269 from ja-pa/git-security-update-19.07
[OpenWrt 19.07] git: update to version 2.26.2 (security fix)
2020-09-01 07:09:08 -07:00
Jan Pavlinec
f2edf8c537
git: update to version 2.26.2 (security fix)
Fixes CVE-2020-11008

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-01 14:09:32 +02:00
Rosen Penev
59078a0982
Merge pull request #13266 from jefferyto/pip-locked-openwrt-19.07
[openwrt-19.07] python,python3: Use locked for host pip
2020-08-31 14:09:00 -07:00
Jeffery To
99d0878d0a
python,python3: Use locked for host pip
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-08-31 23:23:41 +08:00
Hannu Nyman
791e0bc764 nano: update to 5.2
Update nano editor to version 5.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 3ce7595136)
2020-08-25 23:06:05 +03:00
Jan Pavlinec
3c6b45ab38
clamav: update to version 0.102.4 (security fix)
Fixes
CVE-2020-3481

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5d7164aaba)
2020-08-24 13:28:58 +02:00
Jan Pavlinec
0202fdc277
clamav: update to version 0.102.3 (security fix)
Fixes:
CVE-2020-3341
CVE-2020-3327

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 168efe753d)
2020-08-24 13:28:40 +02:00
Lucian Cristian
c5c0e2e337
clamav: update to 0.102.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 24eeea366d)
2020-08-24 13:27:55 +02:00
Noah Meyerhans
9700cea704
bind: New upstream version 9.16.6
Several security issures are addressed:

 - CVE-2020-8620 It was possible to trigger an assertion failure by sending
   a specially crafted large TCP DNS message.
 - CVE-2020-8621 named could crash after failing an assertion check in
   certain query resolution scenarios where QNAME minimization and
   forwarding were both enabled. To prevent such crashes, QNAME minimization is
   now always disabled for a given query resolution process, if forwarders are
   used at any point.
 - CVE-2020-8622 It was possible to trigger an assertion failure when
   verifying the response to a TSIG-signed request.
 - CVE-2020-8623 When BIND 9 was compiled with native PKCS#11 support, it
   was possible to trigger an assertion failure in code determining the
   number of bits in the PKCS#11 RSA public key with a specially crafted
   packet.
 - CVE-2020-8624 update-policy rules of type subdomain were incorrectly
   treated as zonesub rules, which allowed keys used in subdomain rules to
   update names outside of the specified subdomains. The problem was fixed by
   making sure subdomain rules are again processed as described in the ARM.

Full release notes are available at
https://ftp.isc.org/isc/bind9/9.16.6/doc/arm/html/notes.html#notes-for-bind-9-16-6

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit cf61f7f8ef)
2020-08-24 10:33:04 +02:00
Tiago Gaspar
256a631d9c
bind: update to 9.16.4
This update fixes the following CVE's:
- CVE-2020-8618
- CVE-2020-8619

More info on bug fixes and feature changes in:
https://downloads.isc.org/isc/bind9/9.16.4/doc/arm/html/notes.html

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit b8f8af8a30)
2020-08-24 10:32:59 +02:00
Rosen Penev
b495c557fd
Merge pull request #13187 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix: update config; use command -v
2020-08-21 17:48:25 -07:00
Stan Grishin
ac79fde24b simple-adblock: bugfix: update config; use command -v
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-08-21 23:29:18 +00:00
Jan Pavlinec
4e1bfa7488
nspr: update to version 4.27
Note:
new version required by nss 3.55

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit eed2fad8a2)
2020-08-21 16:05:57 +02:00
Lucian Cristian
120ff2c631
nspr: nspr add -flto to compile
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit df7392149c)
2020-08-21 16:05:52 +02:00
Rosen Penev
847ed6e0f7
nspr: fix compilation with newer musl
Include proper sgidefs define.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 93f8cbebe0)
2020-08-21 16:05:48 +02:00
Lucian Cristian
2f58b610dd
nspr: update to 4.25
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 6acb26cd66)
2020-08-21 16:05:43 +02:00
Jan Pavlinec
fab10b8df4
nss: update to version 3.55 (security fix)
Fixes
CVE-2020-12403
CVE-2020-12401
CVE-2020-6829
CVE-2020-12400

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 46a0c332a4)
2020-08-21 16:05:10 +02:00
Lucian Cristian
7c3b05d336
nss: update to 3.53
also enable parallel build as now is safe

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit c155685843)
2020-08-21 16:05:05 +02:00
Lucian Cristian
46d315d316
nss: fix build for mips64
disable arm32_neon on unsupported target

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit d254f0527d)
2020-08-21 16:04:57 +02:00
Lucian Cristian
638b1642e2
nss: revert -flto change
it seems that it can lead to segfault in libfreebl3.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 630c19f648)
2020-08-21 16:04:51 +02:00
Lucian Cristian
be95fcb789
nss: add -flto and makefile cleanup
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 47570b4cf5)
2020-08-21 16:04:45 +02:00
Lucian Cristian
f0e6ceff3a
nss: update to 3.52
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 867fa4c68c)
2020-08-21 16:04:40 +02:00
Lucian Cristian
e5d7327224
nss: update to 3.51.1
also refresh patches

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 5fadec5c0e)
2020-08-21 16:04:33 +02:00
Lucian Cristian
e713f74b76
nss: update to 3.51
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit edd2690815)
2020-08-21 16:04:27 +02:00
Lucian Cristian
d2efcd926c
nss: update to 3.50
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 8633c2bc54)
2020-08-21 16:04:22 +02:00
Lucian Cristian
6a3d052726
nss: update to 3.49.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 8f2023aa9c)
2020-08-21 16:04:17 +02:00
Rosen Penev
5e371c2d5f
libffi: fix build failure on powerpc platforms
This is an upstream backport.

Currently on the buildbots, having libffi unavailable leads to long
range build failures.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0dcde0115e)
2020-08-21 15:26:51 +02:00
Rosen Penev
0413252f32
libffi: update to 3.3
Remove autoreconf. autotools files are no longer patched.

Add PKG_BUILD_PARALLEL for faster compilation.

Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f63305980f)
2020-08-21 15:26:46 +02:00
Rosen Penev
70faa62f38
libffi: do not build in a special directory
There's no need. It also breaks host builds.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 001e9f5081)
2020-08-21 15:26:41 +02:00
Karl Palsson
9ec9bea25b net/mosquitto: Update to 1.6.12
Security release.  From the changelog:

- In some circumstances, Mosquitto could leak memory when handling PUBLISH
  messages. This is limited to incoming QoS 2 messages, and is related
  to the combination of the broker having persistence enabled, a clean
  session=false client, which was connected prior to the broker restarting,
  then has reconnected and has now sent messages at a sufficiently high rate
  that the incoming queue at the broker has filled up and hence messages are
  being dropped. This is more likely to have an effect where
  max_queued_messages is a small value. This has now been fixed. Closes
  https://github.com/eclipse/mosquitto/issues/1793

Changelog: https://mosquitto.org/blog/2020/08/version-1-6-12-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-08-19 15:29:30 +00:00
Rosen Penev
2f78670748 python3: fix rebasing error
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-15 22:45:40 -07:00
Rosen Penev
769d51fa93 python: fix host compilation with clang
Matched rpath parameter with Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-15 15:23:21 -07:00
Rosen Penev
37857a3f2f python3: fix host compilation with clang
Matched rpath parameter with Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b40c40151c)
2020-08-15 15:21:32 -07:00
Rosen Penev
457bed5287
Merge pull request #13132 from jjm2473/lvm2-fix-mac-sh-for-1907
lvm2: fix CE in mac (backport)
2020-08-15 01:44:52 -07:00
Liangbin Lian
b28c614d37 lvm2: fix CE in mac
command-count.h generated by makefile was wrong
when using default shell in mac,
set shell to bash to fix it.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 9bb0962d6e)
2020-08-15 15:58:22 +08:00
Matthias Schiffer
59d39c09d8 openvswitch: backport patch to fix build against kernel 4.14.193
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-08-15 09:20:04 +08:00
Dirk Brenken
03e8f0e0c5
adblock: refresh blocklist sources
* remove 'dshield' and 'sysctl' (discontinued)
* switch 'malwaredomains', 'shallalist' and 'winhelp' to https
* add a second regional list for poland (provided by matx1002)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5ba498f7c8)
2020-08-14 19:53:12 +02:00
Rosen Penev
bef08d8f7f
rtl_433: update to 20.02
Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license information.

Removed upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1b88b5f7c2)
2020-08-14 13:59:08 +02:00
Hannu Nyman
c34df45439 nano: update to 5.1
Update nano to version 5.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 02f9ec4adc)
2020-08-12 22:57:36 +03:00
Hannu Nyman
4a2d5aed78 nano: update to 5.0
Update nano editor to version 5.0.
http://git.savannah.gnu.org/cgit/nano.git/tree/NEWS

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 409633f0dd)
2020-08-12 22:57:32 +03:00
Hannu Nyman
490dfa34a4 irqbalance: update to 1.7.0
Update irqbalance to version 1.7.0
Refresh patches.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a32b41d3f0)
2020-08-12 22:54:40 +03:00
Karl Palsson
58e39c4b25 mosquitto: update to 1.6.11
Full release notes: https://mosquitto.org/blog/2020/08/version-1-6-11-released/

Variety of generally minor bugfixes, mostly in the broker.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-08-12 14:01:39 +00:00
Rosen Penev
2666e3b772
Merge pull request #13092 from jefferyto/golang-1.13.15-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.15
2020-08-11 16:21:20 -07:00
Jeffery To
6970bc7436
golang: Update to 1.13.15
This includes a fix for CVE-2020-16845 (encoding/binary: ReadUvarint and
ReadVarint can read an unlimited number of bytes from invalid inputs).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-08-12 04:42:02 +08:00
Hannu Nyman
f91521f756 nlbwmon: add hotplug script to reload after interface ifup
Add a hotplug script to reload nlbwmon's config after interface
ifup actions.

That should improve the detection of the IPv6 LAN address
that can get enabled a bit later in the boot process.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 25dfa20780)
2020-08-09 19:43:59 +03:00
Hannu Nyman
b6185d4026 nlbwmon: add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Adapted from treewide commit 0ec746ccb6 for just nlbwmon.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-08-09 19:42:37 +03:00
Rosen Penev
e6cad65f09
Merge pull request #13054 from micmac1/apa2446-19.07
[19.07] apache: security bump to 2.4.46
2020-08-08 12:42:02 -07:00
Rosen Penev
92aff96a2f
Merge pull request #13056 from odmdas/odmdas-freeradius3-Makefile-19.07
[19.07] freeradius3: add missing conffiles to Makefile
2020-08-08 12:40:46 -07:00
Alexey Dobrovolsky
3fb559e8b0 freeradius3: add missing conffiles to Makefile
Config files
/etc/freeradius3/policy.d/accounting
/etc/freeradius3/policy.d/filter
/etc/freeradius3/proxy.conf
/etc/freeradius3/sites-available/default
and link
/etc/freeradius3/sites-enabled/default
are in the freeradius3 package and are mentioned in the main config file
/etc/freeradius3/radiusd.conf
Thus, they must be explicitly specified in the Makefile.

File
/etc/freeradius3/sites/default
is not included in the package, is not created during installation,
is not mentioned in the main config file and should therefore be excluded
from the Makefile.

Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
(cherry picked from commit f6974b8f3c)
2020-08-08 18:51:24 +03:00
Sebastian Kemper
f5a57e42ca apache: security bump to 2.4.46
From CHANGES_2.4:

SECURITY: CVE-2020-11984 (cve.mitre.org)
  mod_proxy_uwsgi: Malicious request may result in information disclosure
  or RCE of existing file on the server running under a malicious process
  environment. [Yann Ylavic]

SECURITY: CVE-2020-11993 (cve.mitre.org)
  mod_http2: when throttling connection requests, log statements
  where possibly made that result in concurrent, unsafe use of
  a memory pool. [Stefan Eissing]

SECURITY:
  mod_http2: a specially crafted value for the 'Cache-Digest' header
  request would result in a crash when the server actually tries
  to HTTP/2 PUSH a resource afterwards.
  [Stefan Eissing, Eric Covener, Christophe Jaillet]

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-08-08 16:19:45 +02:00
Sebastian Kemper
61f3bd507c apache/apr/apr-util: remove maintainer
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-08-08 16:19:34 +02:00
Sebastian Kemper
234fe24e48 apache: revisit suEXEC setup
When adding suEXEC to the apache package, Alpine's package [1] served as
a template. Not enough attention was paid to the details.

Alpine uses a different layout. So for OpenWrt to use /var/www as
DocumentRoot does not make sense. /var is also volatile on OpenWrt. This
commit removes the configure argument. The default is htdocsdir.

This also does away with uidmin/gidmin 99. The default is 100, which is
fine.

Finally, the suexec binary is moved from /usr/sbin to
/usr/lib/apache2/suexec_dir. Upstream recommends installing suexec with
"4750" (see [2]) and the group set to the user's group. While that would
be possible, it would cause a few headaches on OpenWrt. The group would
need to be changed first in a post-install script and a call to chmod
would need to be made afterward, to make the binary SUID again.

It's easier to hide the SUID binary away from others in a directory.
This way we don't need to use chmod in the post-install script.

[1] https://github.com/alpinelinux/aports/tree/master/main/apache2
[2] https://httpd.apache.org/docs/2.4/suexec.html

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-08-08 16:19:22 +02:00
Sebastian Kemper
d5096a76f5 apache: create log directory o=
Hides away the contents of the log directory from others.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-08-08 16:19:10 +02:00
Rosen Penev
30e81c3db1
Merge pull request #13046 from EricLuehrsen/unbound_20200806_1907
[19.07] unbound: retrofit master for scripts robustness
2020-08-08 00:15:36 -07:00
Eric Luehrsen
47288133f0 unbound: update to 1.11.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-08-07 01:10:27 -04:00
Eric Luehrsen
d00237135d unbound: improve startup and dhcp script robustness
- prevent rapid overlap in DHCP script updates
- check and allow localhost forwards with specific applications
- add option for rate limiting inbound queries
- change UCI list to table format with Unbound conf references

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-08-07 01:10:26 -04:00
Eric Luehrsen
f73ed87a12 unbound: add dns assistants on local host
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-08-07 01:08:36 -04:00
Jan Pavlinec
d4be5de1c6
tor-hs: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5906bfecd5)
2020-08-06 13:43:15 +02:00
Alexander Ryzhov
c856721aaa
libzdb: fix headers path
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry picked from commit 6fa5a63675)
2020-08-06 11:46:10 +02:00
Alexandru Ardelean
650da029bc
libs: libzdb: bump to version 3.2.1
Patches require a bit of rework:
- dropped 010-missing-header.patch
- add 010-do-not-run-test-progs.patch
- re-updated 020-filterh-use-host-built-version.patch
  - Makefile.in gets regenerated from PKG_FIXUP:=autoreconf
- added PKG_FIXUP:=autoreconf ; it's easier to patch automake stuff that
  big configure scripts

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit dcdceb526e)
2020-08-06 11:45:55 +02:00
Rosen Penev
43db5293ce
libzdb: update to 3.2
Removed most patches. The last was upstreamed and the others can be worked
around using Makefile.

Removed inactive maintainer.

Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license information.

Massive reorganization of Makefile for consistency between packages.

Removed --with-sql options. These are totally broken when cross compiling.
Leaving them out works just as well.

Added cpp patch as the test needs a header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 496ee7f91b)
2020-08-06 11:45:47 +02:00
Rosen Penev
7c5fe897f6
v4l-utils: bring back getsubopt patch
During the update to 1.20.0, this patch was mistakenly removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8df4e29cff)
2020-08-06 11:27:10 +02:00
Rosen Penev
e9a4d689fc
libv4l: update to 1.20.0
Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd74a7cb87)
2020-08-06 11:27:05 +02:00
Rosen Penev
59f45c6cc6
libv4l: update to 1.16.8
Fixed license information.

Update argp dependency to be for non glibc.

Added PKG_BUILD_PARALLEL for faster compilation.

Added --as-needed linker flag for slightly smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0cd1a9b537)
2020-08-06 11:27:01 +02:00
Rosen Penev
01ae3c69ba
libv4l: fix compilation under kernel 4.14
The last patch used a macro unavailable with older kernel headers.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 13278007f9)
2020-08-06 11:26:57 +02:00
Rosen Penev
896359e4c9
libv4l: fix compilation with newer musl
This is using the input_event struct directly, instead of using the proper
defines.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ffb7da67a3)
2020-08-06 11:26:52 +02:00
Ted Hess
e0deb2c5f9
libv4l: Update to 1.16.6. Fix missing includes patch
Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 67b8da50c1)
2020-08-06 11:26:47 +02:00
Rosen Penev
d9e221d6c9
libv4l: Add missing INTL dependency
Needed for FULL NLS. Not bumping PKG_RELEASE as this is no-op.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dcba53b40b)
2020-08-06 11:26:37 +02:00
Karl Palsson
cd2de9dc51 net/pagekitec: Update to v0.91.200718
This fixes misleading errors in the status file, and increases buffer
sizes to match the python implementation.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-08-05 16:34:24 +00:00
Rosen Penev
54e8263c21
Merge pull request #13022 from stangri/19.07-simple-adblock
[19.07] simple-adblock: README and config update
2020-08-04 18:42:36 -07:00
Stan Grishin
d7b38d736d simple-adblock: README and config update
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-08-04 22:50:49 +00:00
Rosen Penev
9f9152e3e7
Merge pull request #13006 from ja-pa/tor-backport-conf
[OpenWrt 19.07] tor: backport uci config
2020-08-03 15:59:08 -07:00
Hannu Nyman
bb1c980227
Merge pull request #13005 from commodo/netatalk-fix-clang-19.07
[19.07] netatalk: fix compile error in mac os
2020-08-03 12:51:27 +03:00
Rosen Penev
0d8f39a36b
tor: fix init scripts
pidfile should not be set. tor handles it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-08-03 11:45:03 +02:00
Jan Pavlinec
a21ffc8eb9
tor: update init script
Changes:
-add uci config
-create pid file by procd
-add reload function

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-08-03 11:43:12 +02:00
Liangbin Lian
30f5119a4f netatalk: fix compile error in mac os
fix compile error in mac os when dtrace installed.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2020-08-03 12:28:36 +03:00
Josef Schlehofer
8658203e68
gerbera: fix conffiles
In OpenWrt master branch, there is just /etc/config/gerbera.
It was reported to me that if there is an update of gerbera in OpenWrt
19.07, it overwrites /etc/gerbera/config. So, I removed file extension.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-30 08:45:13 +02:00
Josef Schlehofer
83e58b67de
youtube-dl: update to version 2020.7.28
Become the only maintainer of this package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7046a31ab9)
2020-07-29 08:27:16 +02:00
Josef Schlehofer
98480822ef
youtube-dl: update to version 2020.6.16.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c8187f7f16)
2020-07-28 18:11:25 +02:00
Josef Schlehofer
f384d8d78b
youtube-dl: update to version 2020.6.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ec0b891b62)
2020-07-28 18:11:20 +02:00
Josef Schlehofer
65d98a79f0
youtube-dl: update to version 2020.5.29
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 32333c5d92)
2020-07-28 18:11:15 +02:00
Josef Schlehofer
010b5e6fbc
youtube-dl: update to version 2020.5.8
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit b8d7ff754a)
2020-07-28 18:11:07 +02:00
Florian Eckert
25c3d34de3
Merge pull request #12950 from TDT-AG/pr/openwrt-19.07-mwan3
mwan3: backport version 2.8.12 to stable branch openwrt-19.07
2020-07-28 07:31:03 +02:00
Florian Eckert
b32500958b mwan3: update version to 2.8.12
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 85e91377cf)
2020-07-28 07:24:58 +02:00
Florian Eckert
5f934c6678 mwan3: unify variable check
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 981d1eb83a)
2020-07-28 07:24:49 +02:00
Florian Eckert
138d02cfcb mwan3: remove lock file entirely
Removing the lock file ist not necessary

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit ab747fe0fb)
2020-07-28 07:24:41 +02:00
Florian Eckert
520eeb0804 mwan3: revert: also cleanup lock on mwan3 stop
This reverts commit cde2a77ed3.

Applying this change has shown that it is even quicker to provoke the
race condtition on simultan mwan3 commands execution.
By reversing the change we have the same behaviour as before.

But the race condition on mwan3 execute at the same time still exists.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit b5bd6d757b)
2020-07-28 07:24:32 +02:00
Florian Eckert
294e7503b5 mwan3: fix race condition on mwan3 restart
This adjustment of the locks fixes the race condition when a mwan3
hotplug script and a mwan3 command are running at the same time.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2dac1bcdc9)
2020-07-28 07:24:12 +02:00
Rosen Penev
e8e290e0f8 gerbera: enable matroska and ffmpeg
The latter requires BUILD_PATENTED, as in master.

Backported linking patches for libebml and libmatroska.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-27 13:05:18 -07:00
Rosen Penev
f73b1da1a5 libmatroska: update to 1.6.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a661c24bca)
2020-07-27 13:04:35 -07:00
Rosen Penev
16d65196a0 libmatroska: add
Needed for gerbera's matroska support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d265c88ebe)
2020-07-27 13:04:35 -07:00
Rosen Penev
18b9aeb4c8 libebml: update to 1.4.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b6ed48dcbc)
2020-07-27 13:04:35 -07:00
Rosen Penev
39abfa8d76 libebml: add
Needed for libmatroska.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 116f11e54c)
2020-07-27 13:04:35 -07:00
Dirk Brenken
f994812858
Merge pull request #12934 from dibdot/mc-19.07
mc [19.07]: update to 4.8.25
2020-07-27 19:55:10 +02:00
Florian Eckert
5bfc1c9cfd mwan3: update version to 2.8.11
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit f601e6cfa4)
2020-07-27 12:20:46 +02:00
Florian Eckert
e02cac8152 mwan3: add online and uptime to detail output
Add also online time value and uptime time value from netifd to the
detail output view.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit b0acbf057e)
2020-07-27 12:20:37 +02:00
Florian Eckert
538d2fd7c3 mwan3: add workaround for procd change
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 058a2b6f30)
2020-07-27 12:20:27 +02:00
Florian Eckert
b340df6824 mwan3: also cleanup lock on mwan3 stop
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit cde2a77ed3)
2020-07-27 12:19:59 +02:00
Florian Eckert
b5ed0033c8 mwan3: fix rtmon routing table function generation
If the uci option family is not set in the interface section, then there
is no default value set as in the `config_load / config_get` API.
The problem here is that if the family is not set, the default value ipv4
is normaly assumed. But the comparison fails here because the value is empty
and therefore the dedicated routing table for this interface is not compared
with the other routes from the main table and so not updated.

To fix this set the default value for this config option which is`false`
for enabled and `ipv4` for family.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bcd13ba95c)
2020-07-27 12:19:50 +02:00
Florian Eckert
2c89e14c31 mwan3: fix IPv6 routing add handling
This fixes routing handling. Introduced with the last version update.
The following message disappears on the shell
when mwan3 is called with 'mwna3 restart`.

`Error: Invalid gateway address.`

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fully unset variable and handle ipv4 as well]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 8e3e6f8dde)
2020-07-27 12:19:41 +02:00
Florian Eckert
447d51edbf mwan3: fix idx calculation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[aaronjg@stanford.edu: fix syntax error]
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit a796b7a84e)
2020-07-27 12:19:32 +02:00
Aaron Goodman
37e2f88208 mwan3: version bump
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit ca8bc3d115)
2020-07-27 12:19:21 +02:00
Aaron Goodman
b9e3461250 mwan3: cleanup duplicate ipv4 and ipv6 logic
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 30a46bdc9e)
2020-07-27 12:19:12 +02:00
Aaron Goodman
db46d3ab03 mwan3: don't send iptable setup failures to /dev/null
silencing failing rules makes debugging more difficult

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 702a104f9c)
2020-07-27 12:19:03 +02:00
Aaron Goodman
383555d076 mwan3: add default rule for ipv6 in example config
default rule only applied to ipv4 with dest_ip 0.0.0.0/0
and error was hidden when trying to apply it in ip6table

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 2a5e9be83e)
2020-07-27 12:18:52 +02:00
Aaron Goodman
dc25b38f13 mwan3: don't try to use ipv6 if not installed
fix issue  #11826

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit a0d66d4eeb)
2020-07-27 12:18:40 +02:00
Aaron Goodman
ec45ff8052 mwan3: be more efficient with sleep after killing trackers
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 84a53b7c79)
2020-07-27 12:18:29 +02:00
Aaron Goodman
d6b051b8c0 mwan3: don't add single ipv4 to connected list if already covered by a cidr
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit da9a626f78)
2020-07-27 12:18:18 +02:00
Florian Eckert
f834ba0fce mwan3: update version to 2.8.9
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2594258c4b)
2020-07-27 12:18:00 +02:00
Florian Eckert
2f2044ecb0 mwan3: cleanup function mwan3_create_iface_route
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit d0c248a7da)
2020-07-27 12:17:51 +02:00
Florian Eckert
db3c8326fe mwan3: fix shellcheck warning SC2086
Add double quote to prevent globbing and word splitting where there is
no regression.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit feae9e5742)
2020-07-27 12:17:40 +02:00
Florian Eckert
7d0f2cdb63 mwan3: fix shellcheck warning SC2166
Replace -o boolean check with ||.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit c0fdfaa174)
2020-07-27 12:17:31 +02:00
Florian Eckert
c0b111feab mwan3: remove unused variable complained by shellcheck
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 644d9a25df)
2020-07-27 12:17:22 +02:00
Florian Eckert
3443eb3c7d mwan3: fix shellcheck warning SC2039
Replace all `==` with `=`.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0ed7524f81)
2020-07-27 12:17:11 +02:00
Florian Eckert
be8f287aaa mwan3: move redirect error output to trash
This suppress the following output on `mwan3 restart`:
> Dump terminated

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit facf8ea299)
2020-07-27 12:17:01 +02:00
Hannu Nyman
7bd52ba5ff
Merge pull request #12937 from rs/nextdns-1.7.1-openwrt-19.07
[19.07] nextdns: Update to version 1.7.1
2020-07-26 17:54:20 +03:00
Olivier Poitrey
08111b9c74 nextdns: Update to version 1.7.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-07-26 14:42:57 +00:00
Dirk Brenken
3272114cc9
mc: update to 4.8.25
* refreshed patches
* release news: http://midnight-commander.org/wiki/NEWS-4.8.25

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-07-26 09:50:12 +02:00
Josef Schlehofer
a2b02f67d6
netdata: update to version 1.23.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2de28dd95b)
2020-07-25 09:43:22 +02:00
Daniel Engberg
80a38c595a
admin/netdata: Update to 1.22.1
Update netdata to 1.22.1
Disable cloud functionality
Shoehorn patches from FreeBSD's ports repo
Remove cloud notifications and netdata's self-update feature
json-c is no longer optional

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry picked from commit 626c304d67)
2020-07-24 15:20:08 +02:00
Josef Schlehofer
76b143e007
netdata: update to version 1.20.0
- Add libuv dependency which is now required. Otherwise during
compiling, I have received this error:

configure: error: libuv required but not found. Try installing 'libuv1-dev' or 'libuv-devel'.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8aa816c816)
2020-07-24 15:20:04 +02:00
Rosen Penev
e4b35d65cb
Merge pull request #12896 from ja-pa/tor-0.4.2.8
[OpenWrt 19.07] tor: update to version 0.4.2.8 (security fix)
2020-07-23 13:15:24 -07:00
Rosen Penev
f29fdc7c24
liblz4: fix previous patch
Previous patch was incomplete.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2860cf169a)
2020-07-21 15:01:18 -07:00
Rosen Penev
b40a139fbc
meson: allow compilation in a subdirectory
Small tweak to get it to build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e74498c97a)
2020-07-21 14:36:11 -07:00
Rosen Penev
9d03a1ea50
liblz4: add patch removing distutils requirement
Allows meson to compile on systems that lack distutils.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit cb44cd60c4)
2020-07-21 14:11:06 -07:00
Rosen Penev
5f22b6c381
liblz4: convert to meson
Faster compilation

Before:

Executed in   13.68 secs   fish           external
   usr time   12.51 secs    0.00 micros   12.51 secs
   sys time    1.78 secs  345.00 micros    1.78 secs

After:

Executed in    9.60 secs   fish           external
   usr time   10.66 secs  281.00 micros   10.66 secs
   sys time    1.39 secs   36.00 micros    1.39 secs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c639477965)
2020-07-21 14:11:05 -07:00
Jan Pavlinec
345cb18d4c
tor: update to version 0.4.2.8 (security fix)
Fixes
CVE-2020-15572

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-07-21 14:49:29 +02:00
Rosen Penev
da4a052962
mocp: disable ffmpeg
The recent update to ffmpeg broke this.

Instead, use the relevant libraries separately.

Added AAC support. AAC is very common and was recently fixed to be
compatible with BUILD_PATENTED.

Explicitly pass all configure arguments, to avoid future breakage.

Remove autoreconf. autotools files are not being patched.

Add PKG_BUILD_PARALLEL for speed.

Other minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd77091337)
2020-07-21 13:46:06 +02:00
Rosen Penev
9b0e858c0e mpd: update to 0.21.25
pulseaudio-daemon depends on alsa-lib, which depends on @AUDIO_SUPPORT.
Enables -full on platforms lacking AUDIO_SUPPORT.

Simplified LDFLAGS slighly.

Removed pointless ICU dependency. I managed to patch meson.build to fix
iconv compilation. The original error was that without the header, it
was prefixing the iconv check with __buildin_ , which does not work
with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-20 23:21:40 -07:00
Ian Cooper
7b269ec49d
dovecot: remove incorrect PKG_BUILD_DEPENDS
The package Makefile contains a PKG_BUILD_DEPENDS=libiconv
line, which apart from being incorrect if libiconv-full is
specified in the build configuration, is also unnecessary,
since the package Makefile already includes nls.mk which
sets PKG_BUILD_DEPENDS appropriately.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
(cherry picked from commit 645bea6d88)
2020-07-20 17:14:56 -07:00
Rosen Penev
14c248274b
faad2: update to 2.9.2
Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ad1203ebb9)
2020-07-20 16:55:48 -07:00
Rosen Penev
f593c37cd7
xz: update to 5.2.5
Switched to smaller xz archive.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8c5d0c673d)
2020-07-20 16:51:41 -07:00
Rosen Penev
97842ae445
zstd: fix compilation without host distutils
This is the case in debian.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ec3798645d)
2020-07-20 16:50:23 -07:00
Rosen Penev
00f29de5f8
zstd: update to 1.4.5
Switch to zst archives for smaller size.

Removed patches in favor of a better solution for uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8c23fef9da)
(changed to gz since 19.07 has no zstd support)
2020-07-20 16:49:24 -07:00
Rosen Penev
1dc0c3b798
zstd: remove lto and as-needed flags
The former can be implemented as a meson argument.

The latter is already default.

No compiled difference, therefore no PKG_RELEASE bump.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3c9dbc1429)
2020-07-20 16:47:37 -07:00
Rosen Penev
01abd5d37b
zstd: convert to meson
Allows faster build with ninja. Unfortunately, the LTO stage slows it
massively.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 779a4dca67)
2020-07-20 16:47:06 -07:00
Rosen Penev
6ae076fd14
aria2: Build with MIPS16
All the computationally expensive stuff is in the libraries, not the
package itself.

Saves several kilobytes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a5e7d0a904)
2020-07-20 16:40:07 -07:00
Xingwang Liao
2cdf132b94
aria2: Update to 1.35.0
* remove OpenSSL patch, it has already merged to the source.

Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry picked from commit 2384acdc9d)
2020-07-20 16:40:07 -07:00
Rosen Penev
5200d6449f
libvorbis: update to 1.3.7
Switched to CMake for the faster compilation and the simpler Makefile.

Minor Makefile cleanups.

Before:

time make package/libvorbis/compile -j 12
Executed in   24.40 secs   fish           external
   usr time   21.17 secs    0.00 micros   21.17 secs
   sys time    3.05 secs  426.00 micros    3.05 secs

After:

time make package/libvorbis/compile -j 12
Executed in    9.19 secs   fish           external
   usr time   11.29 secs    0.00 micros   11.29 secs
   sys time    1.43 secs  421.00 micros    1.43 secs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ef247cf5d)
2020-07-20 16:38:54 -07:00
Josef Schlehofer
e798f539c9
msmtp: update to version 1.8.11
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dd44bf2e7a)
2020-07-20 16:28:45 +02:00
Josef Schlehofer
780c453772
msmtp: update to version 1.8.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e193db6b69)
2020-07-20 16:28:39 +02:00
Josef Schlehofer
0821c5001e
squid: update to version 4.12
- Fixes CVEs:

CVE-2019-12519
CVE-2019-12520
CVE-2019-12521
CVE-2019-12523
CVE-2019-12524
CVE-2019-12525
CVE-2019-12526
CVE-2019-12527
CVE-2019-12528
CVE-2019-12529
CVE-2019-12824
CVE-2019-12854
CVE-2019-13345
CVE-2019-18676
CVE-2019-18677
CVE-2019-18678
CVE-2019-18679

CVE-2020-8449
CVE-2020-8450
CVE-2020-11945
CVE-2020-14058
CVE-2020-15049

- Remove patch for cross-compilation
The patch should not be included in the OpenWrt at all without any
commit message/description.
Is not needed and there should be used HOST variables instead of BUILD variables (e.g.
   HOSTCXX)
However, the BUILDCXX is set in Makefile to HOSTCXX

- Renumber glibc patch and refresh it

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3401e29aa7)
2020-07-20 16:26:45 +02:00
Jonathan Elchison
5658fd93f8
squid: fix 'localhet' typo in squid.conf
Signed-off-by: Jonathan Elchison <JElchison@Gmail.com>
(cherry picked from commit 2ba6546dd8)
2020-07-20 16:26:08 +02:00
Rosen Penev
3b285bfaaa
quasselc: fix compilation with newer glib2
Needed to fix LDFLAGS variable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 030cc5570c)
2020-07-20 16:04:39 +02:00
Rosen Penev
2c6155c9c3
gkrellmd: update to 2.3.11
Added nls.mk as this is now required.

Fixed license information.

Several small fixes and cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4426e4c69b)
2020-07-20 16:03:33 +02:00
Rosen Penev
fa49751a8b
sumo: Update to 1.3.1
Converted to CMake for simplicity.

Added upstream patch to use sleep_for instead of deprecated usleep.

Added patch to fix compilation with musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a9abe60ef4)
2020-07-20 13:48:27 +02:00
Rosen Penev
de41dcbf27
Merge pull request #12881 from jefferyto/python3-backport-patches-openwrt-19.07
[openwrt-19.07] python3: Backport security fixes
2020-07-20 03:24:29 -07:00
Jeffery To
ddb0af4061
python3: Backport security fixes
This backports fixes for security issues, including:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2019-20907: Infinite loop in the tarfile module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-20 17:39:42 +08:00
Rosen Penev
cf03cb1806
Merge pull request #12877 from jefferyto/golang-1.13.14-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.14
2020-07-19 14:40:04 -07:00
Jeffery To
1a527963c9
golang: Update to 1.13.14
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-20 03:11:51 +08:00
Hannu Nyman
54b76dfd7d haveged: update to 1.9.13
Update haveged to version 1.9.13.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 28cf201290)
2020-07-18 14:15:11 +03:00
Josef Schlehofer
984a32fff2
libvorbisidec: update to version 20180319
Fixes CVE-2018-5147

- Change PKG_SOURCE_URL
fatal: unable to access 'https://git.xiph.org/tremor.git/': Failed to connect to git.xiph.org port 443: Connection refused
because they changed the URL of the repository
- Removes PKG_SOURCE_SUBDIR and PKG_SOURCE
Those are already defaults
- Fix indentation in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 406d0d9f3f)
2020-07-17 11:10:19 +02:00
Josef Schlehofer
fb687b5420
dnscrypt-proxy2: update to version 2.0.44
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 01ff758894)
2020-07-17 11:10:06 +02:00
Josef Schlehofer
4c2ecb413e
Merge pull request #12676 from BKPepe/bind-openwrt19.07
[19.07] bind: update to version 9.16.x
2020-07-16 10:18:36 +02:00
Yousong Zhou
5ed85c0389 openvswitch: bump to version 2.11.3
Two patches were backported to fix issue openwrt/packages#12737

  0002-compat-Fix-ipv6_dst_lookup-build-error.patch
  0003-compat-Backport-ipv6_stub-change.patch

One was deleted as it is now part of 2.11.3

  0005-datapath-conntrack-fix-include-for-IP6_DEFRAG_CONNTR.patch

Other patches refreshed

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-07-14 20:06:44 +08:00
Rosen Penev
67755a8ea6
Merge pull request #12732 from TDT-AG/pr/20200706-mwan3
mwan3: sync with master branch
2020-07-12 17:59:25 -07:00
Rosen Penev
a9045767b0
Merge pull request #12767 from jonathanunderwood/openwrt-19.07
[19.07] stubby: remove libbsd dependency and fix compilation with deprecated OpenSSL APIs
2020-07-08 23:04:26 -07:00
Rosen Penev
6a0eeda77f getdns: fix compilation without deprecated OpenSSL APIs
Since DSA is enabled, dsa.h is needed. Normally this header is included
implicitly with engine.h but with OPENSSL_API_COMPAT >= 0x10100000L ,
this is not so.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-09 06:49:30 +01:00
Rosen Penev
805c1344e5 getdns: properly remove libbsd support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-07-09 06:49:30 +01:00
Rosen Penev
5c4ead1f12
Merge pull request #12756 from jefferyto/python3-maxminddb-fix-build-openwrt-19.07
[openwrt-19.07] python3-maxminddb: Fix build when using newer setuptools
2020-07-08 11:04:23 -07:00
Rosen Penev
dfeb14462d
Merge pull request #12755 from jefferyto/python-host-platform-openwrt-19.07
[openwrt-19.07] python3: Use default _PYTHON_HOST_PLATFORM
2020-07-08 11:03:38 -07:00
Peter Wagner
cc0eb59f42 ntpd: update to version 4.2.8p15 (security fix)
Fixes:
CVE-2020-11868
CVE-2018-8956
CVE-2020-13817
CVE-2020-1502

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2020-07-08 19:11:22 +02:00
Jeffery To
fe32da0841
python3-maxminddb: Fix build when using newer setuptools
This package fails to build with newer setuptools, because setuptools
removed the (deprecated) Features feature in v46.0.0[1].

This adapts a commit[2] to remove the use of this feature. (Changes to
code formatting prevent the original commit/patch to be used.)

[1]: aff64ae89e/CHANGES.rst (v4600)
[2]: 3aac426e35

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-08 17:30:57 +08:00
Jeffery To
4b0c1f8714
python3: Use default _PYTHON_HOST_PLATFORM
This lets the Python build process set _PYTHON_HOST_PLATFORM instead of
forcing an explicit value.

Also:

* Save the target _PYTHON_HOST_PLATFORM value during Build/InstallDev
  for use when building target Python packages (in python3-package.mk).

* Use the (mostly) default PYTHON_FOR_BUILD value, instead patch
  configure to remove the platform triplet from the sysconfigdata file
  name.

* Remove the "CROSS_COMPILE=yes" make variable (there is no indication
  that this variable is necessary).

* Force host pip to build packages from source instead of downloading
  binary wheels.

  Previously, host pip can download universal (platform-independent)
  wheels but not platform-specific wheels, because of the custom
  _PYTHON_HOST_PLATFORM value. (Packages that do not have universal
  wheels would be compiled from source.)

  With a correct _PYTHON_HOST_PLATFORM, host pip can install
  platform-specific wheels as well. However, the pre-built shared object
  (.so) files in these wheels will have the host's platform triplet in
  their file names. When target Python packages are built (using the
  target's _PYTHON_HOST_PLATFORM), Python will not use these shared
  object files.

  By forcing host pip to build packages from source, the built shared
  object files will not have the platform triplet in their file names.
  (Host Python has been patched to remove the platform triplet from file
  names.) This allows these packages to be used when building target
  Python packages.

  (The net effect of this complete change is that platform-dependent
  packages will continue to be compiled from source, while
  platform-independent packages will now also be compiled from source.)

Fixes https://github.com/openwrt/packages/issues/12680.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-07-08 17:12:33 +08:00
Rosen Penev
e1846e05e3
Merge pull request #12722 from jonathanunderwood/openwrt-19.07-getdns-1.6.0
[19.07] getdns: update to version 1.6.0
2020-07-06 15:37:16 -07:00
Michiel Blokzijl
86d2bfe022 mwan3: Fix mwan3 start not doing anything Due to a missing config load function call, mwan3 start runs ifup for an empty list of interfaces, thus not calling ifup at all.
This commit introduces the missing config_load call.

Signed-off-by: Michiel Blokzijl <code@m01.eu>
(cherry picked from commit acfbd98ce0)
2020-07-06 08:58:45 +02:00
Florian Eckert
b74d5e9c17 mwan3: update version to 2.8.7
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8030814267)
2020-07-06 08:58:45 +02:00
Florian Eckert
4f394c2590 mwan3: set status to unknown in rpcd if status file not found
If the status file is not found then set then return the value unknown.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e30f16beef)
2020-07-06 08:58:45 +02:00
Florian Eckert
f7749c663b mwan3: switch to procd init script
This enables the procd handling for mwan3 on config change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a6dc75428c)
2020-07-06 08:58:45 +02:00
Aaron Goodman
0498a2b357 mwan3: address reviewer comments on 5147dfc7
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 38be40843b)
2020-07-06 08:58:45 +02:00
Aaron Goodman
cc1bb3e8b9 mwan3: Use /128 for ipv6 if no other source address was found
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 4efaa44b21)
2020-07-06 08:58:45 +02:00
Aaron Goodman
74b6f10845 mwan3: Allow user to specify rules based on source interface
Add an option for adding rules based on source interface.
The default 0.0.0.0/0 src and destination ip addresses has been removed. It is unclear
how the 'any' family of rules would have worked, as it appears each rule always required an
ipv4 or ipv6 address src and destination address.  With this change, the any family will work
again.

I also cleaned up a bunch of repeated code around adding the iptables rules for
ipv4/ipv6/any in making the change.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 5147dfc73a)
2020-07-06 08:58:45 +02:00
Aaron Goodman
c14e74a5a8 mwan3: Do not mangle outgoing ipv6 pings
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit cf38136b00)
2020-07-06 08:58:45 +02:00
Aaron Goodman
465baa46c3 mwan3: version bump to 2.8.6
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit b7d1f81f10)
2020-07-06 08:58:45 +02:00
Aaron Goodman
19bebd3d89 mwan3: force busybox ping
openwrt 19.07 uses iputils 20101006-1

This ancient version of iputils has a bug where the -I option is not respected.

https://github.com/iputils/iputils/issues/55
https://github.com/iputils/iputils/issues/56
https://bugs.openwrt.org/index.php?do=details&task_id=1486

Thus, we should force using busybox ping at "/bin/ping" until the iputils
version gets an upgrade in the next major release

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 35a86bdc11)
2020-07-06 08:58:45 +02:00
Aaron Goodman
ffce45e365 mwan3: don't add ipv6 link local address to routing tables
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit aafdd0730c)
2020-07-06 08:58:45 +02:00
Aaron Goodman
a3c399d01f mwan3: reduce calls to `ip route list'
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit 02ebd831c1)
2020-07-06 08:58:45 +02:00
Brian J. Murrell
4af28cc681 mwan3: Update Makefile
Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit b017fe34dd)
2020-07-06 08:58:45 +02:00
Brian J. Murrell
0693f0c9e3 mwan3: Don't use /128 address for ping source
An interface can have both a /64 and a /128 from a provider.

In such a case, use the address from the /64 to do the ping check, not
the /128.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit 49cf5eac5c)
2020-07-06 08:58:45 +02:00
Jonathan G. Underwood
7434c91c50 stubby: add build dependency on check package
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-07-05 20:40:35 +01:00
Rosen Penev
97aa95766a
Merge pull request #12723 from jonathanunderwood/openwrt-19.07-stubby-0.3.0
[19.07] stubby: update to version 0.3.0
2020-07-05 09:34:56 -07:00
Jonathan G. Underwood
140e2ea19e stubby: update to version 0.3.0
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-07-05 12:34:31 +01:00
Jonathan G. Underwood
048a39258d getdns: update to version 1.6.0
This update also:
    - enables parallel builds
    - moves to the CMake build system
    - removes the redundant InstallDev stanza

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-07-05 12:30:53 +01:00
Rosen Penev
1c29c1d86d
Merge pull request #12698 from Andy2244/samba-4_11_11-(19.07)
[19.07] samba4: update to 4.11.11
2020-07-03 07:04:17 -07:00
Andy Walsh
0c03b71b88 samba4: update to 4.11.11
* update to 4.11.11
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)
* fix python3 host paths, ensure we use build hostpkg tools
* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-07-03 02:12:16 +02:00
Dirk Brenken
a375ee0cc2
Merge pull request #12694 from BKPepe/mc-19.07
[19.07] mc: fix mouse handling
2020-07-02 14:00:17 +02:00
Josef Schlehofer
28b5a2b046
mc: fix mouse handling
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-07-02 10:52:26 +02:00
Josef Schlehofer
9b3ce06b98
travis: improve build config
Build config validation showed up 1 warning, 1 info
- deprecated sudo
- missing os

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 651b9f9bf1)
2020-07-01 23:04:12 +02:00
Josef Schlehofer
2461e79787
travis: Use Ubuntu 20.04 LTS - Focal Fossa
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 995822b5f7)
2020-07-01 23:04:01 +02:00
Josef Schlehofer
d7bec1b0f0
travis: Use Ubuntu (Bionic Beaver) 18.04 LTS
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f2c7a00ef4)
2020-07-01 23:03:55 +02:00
Josef Schlehofer
a80754337d
travis: use mpc85xx-p2020 sdk instead of ar71xx
Target ar71xx is deprecated and removed in the master branch and makes SDK
not available anymore. Travis fails because of that.
It was superseded by target ath79. These devices have 4 MB flash and/or 32 MB RAM.

However, ath79 is being used by CircleCI if you have it configured for
your repository and if you are contributing to this repository. It
is not good to have two CI for the same target. Let's use powerpc.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4526fb3eae)
2020-07-01 23:03:43 +02:00
Josef Schlehofer
2a9998771c
travis: Download SDK from OpenWrt instead of LEDE
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 25fc446ffb)
2020-07-01 23:03:28 +02:00
Ian Cooper
b80db2c800
bind: add nslookup alternative to busybox nslookup
Add alternative to busybox nslookup. Busybox throws an error when
the host does not have an AAAA record.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
(cherry picked from commit 4cb5aa57fd)
2020-07-01 15:42:09 +02:00
Josef Schlehofer
3c3a1f7618
bind: update to version 9.16.3
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a75391575b)
2020-07-01 15:42:04 +02:00
Jan Pavlinec
177623c5fe
bind: update to version (security fix)
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c8be44062e)
2020-07-01 15:41:57 +02:00
Noah Meyerhans
b73f479ea4
bind9: update to 9.16.1
Add libuv dependency

Fix optional libxml and c-json dependency handling

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 72654d20d5)
2020-07-01 15:41:31 +02:00
Rosen Penev
3eb3221210
Merge pull request #12657 from jefferyto/python-3.7.8-openwrt-19.07
[openwrt-19.07] python3: Update to 3.7.8, refresh/rework patches
2020-06-30 14:35:12 -07:00
Jeffery To
d78bdbd8ad
python3: Update to 3.7.8, refresh/rework patches
This contains a fix for CVE-2020-8492 (Denial of service in
urllib.request.AbstractBasicAuthHandler)[1].

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: https://docs.python.org/release/3.7.8/whatsnew/changelog.html#python-3-7-8-release-candidate-1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-06-30 21:20:18 +08:00
Karel Kočí
c7495a2008
syslog-ng: detect disabled IPv6 on loopback and fallback to IPv4
Binding in default to IPv6 is preferable but it can be disabled in
kernel and that prevents syslog-ng to start. This setup should not be
that common but syslog is very important service and should survive
that.

This introduces new plugin defining source generator
`network_localhost`. This is used instead of original network source.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry picked from commit 43a8f7072e)
2020-06-30 14:46:23 +02:00
Rosen Penev
587e387af7
Merge pull request #12628 from jonathanunderwood/openwrt-19.07-stubby-fix-tls-port
[19.07] stubby: fix handling of tls_port config option
2020-06-28 19:54:51 -07:00
Rosen Penev
cd080dded6
miniupnpd: added libcap dependency
As miniupnpd is running as root, libcap can be used to limit its
capabilities.

libcap is very small, so this isn't a problem.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ba49c96808)
(switched to use libcap as -ng is not available)
2020-06-28 14:01:25 -07:00
Rosen Penev
b418029e41
miniupnpd: update to 2.1.20200510
Use the newly introduced configure script.

Use PKG_INSTALL for consistency between packages.

Use PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2b5028458e)
2020-06-28 14:00:39 -07:00
David Ehrmann
231e47185e
miniupnpd: suppress grep and uci errors
If miniupnpd is installed but disabled or not running, the hotplug
script will query uci for keys that don't exist and grep a temporary
config file that doesn't exist, resulting in the following errors:

uci: Entry not found
grep: /var/etc/miniupnd.conf: No such file or directory

These would arise when an interface is brought up or down, and are
more confusing than helpful, especially when miniupnpd is disabled.

Suppress these errors.

Signed-off-by: David Ehrmann <ehrmann@gmail.com>
(cherry picked from commit 6ef2b5400b)
2020-06-28 14:00:39 -07:00
Kevin Darbyshire-Bryant
5cb388497e
miniupnpd: improve hotplug & interface handling
The existing interface selection/detection code was incomprehensible at
worst and convoluted at best.  The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice.  Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.

Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.

For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 295d77943c)
2020-06-28 14:00:24 -07:00
Jonathan G. Underwood
f49c2c71ca stubby: fix handling of tls_port config option
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2020-06-27 17:00:34 +01:00
Toke Høiland-Jørgensen
0ea1e213e7
Merge pull request #12616 from andersk/acme-19.07
Backport acme fixes from #11968 to 19.07
2020-06-26 11:21:12 +02:00
David Yang
f51ec94f86 acme: Bump release version
Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
David Yang
f7e03d1271 acme: Handle ecc cert correctly
Error was:
  The domain 'example.com' seems to have a ECC cert already, please add '--ecc' parameter if you want to use that cert.

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
David Yang
0e5b273241 acme: Handle log message correctly
Error was:
  logger: unrecognized option: renew

Signed-off-by: David Yang <mmyangfl@gmail.com>
2020-06-25 23:37:16 -07:00
Rosen Penev
17e12ad796
Merge pull request #12614 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: re-add conffiles and add description to Makefile
2020-06-25 22:18:04 -07:00
Stan Grishin
4344723f8c https-dns-proxy: re-add conffiles and add description to Makefile
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-26 03:09:39 +00:00
Rosen Penev
1d369c9e6a
Merge pull request #12597 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: bugfix: remove eDNS support
2020-06-25 14:22:18 -07:00
Stan Grishin
2c4644bf9b https-dns-proxy: bugfix: remove eDNS support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-25 19:40:52 +00:00
Rosen Penev
02f5b9ced0
Merge pull request #12588 from rs/nextdns-1.7.0-openwrt-19.07
[19.07] nextdns: Update to version 1.7.0
2020-06-24 22:05:00 -07:00
Olivier Poitrey
8044a7014d nextdns: Update to version 1.7.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-06-25 00:22:43 +00:00
Hannu Nyman
e1b8d033e0 irqbalance: fix socket directory and create it
Irqbalance defines /run/irqbalance dir for its socket
communication between irqbalance and its UI. /run does not exist
in OpenWrt (although it is defined by the Linux FHS), so the
socket creation fails. Although we do not compile UI and thus
the issue is not critical to us, fix the directory location.

Additionally, the creation is originally handled by a systemd
init script that we do not use.

* patch source to define dir as /var/run/irqbalance
* create the dir in the procd init script.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry-picked from 4f0c847828)
2020-06-24 18:33:39 +03:00
Huangbin Zhan
4a129a996c treewide: add conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry-picked irqbalance section from from 0ec746ccb6)
2020-06-24 18:32:19 +03:00
Ian Cooper
ca6751a7d0 irqbalance: fix compilation for USE_GLIBC and BUILD_NLS cases
The package Makefile was not taking into consideration that the build
may be using BUILD_NLS with libintl-full and libiconv-full and was
trying to link the wrong versions of these libraries in this case.

The necessary flags are added by nls.mk to TARGET_LDFLAGS and can be
passed to irqbalance's configure script for setting the GLIB2_LIBS
variable instead of the explicit static link to the libiconv stub.

The PKG_BUILD_DEPENDS line should be modified so as to add to and not
override the definition set by nls.mk, which will ensure the right
version of libiconv and libintl is built beforehand.

A DEPENDS:= line should be added to the package definition using the
variables defined in nls.mk, which will add the appropriate version
of libintl and libiconv (vanilla or -full versions)

If USE_GLIBC is true, then libpthread needs to be explicitly passed
to the configure script in the GLIB2_LIBS variable for linking.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>

(cherry-picked from 88c25e87a1)
2020-06-24 18:32:14 +03:00
Hannu Nyman
9bdd0f113d haveged: update to 1.9.12
Update haveged to version 1.9.12

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6392d50c31)
2020-06-21 23:24:50 +03:00
Daniel Engberg
7222143b4d
Merge pull request #12563 from Andy2244/ksmbd-3.2.0_ksmbd-tools-3.2.6-(19-07)
[19.07] Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"
2020-06-20 21:11:26 +02:00
Andy Walsh
45e78b34a7 Revert "ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6"
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

This reverts commit d88405ba84.
2020-06-20 19:26:12 +02:00
Christian Lachner
1b1c2c598e haproxy: Update HAProxy to v2.0.15
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-06-20 09:04:47 +03:00
Josef Zila
fd3648a7b4
transmission: add access to web interface files to procd jail
Signed-off-by: Josef Zila <josefzila@gmail.com>
(cherry picked from commit 9a82c952b4)
2020-06-18 14:53:16 -07:00
Rosen Penev
054b87df40
transmission: add a disabled notification
Helps to see that transmission must be enabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89fc95c4fc)
2020-06-18 14:52:37 -07:00
Rosen Penev
8cb9367313
transmission: update to 3.0
remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 93485dd317)
2020-06-18 14:51:49 -07:00
Rosen Penev
de86c989a0
upmpdcli: update to 0.4.6
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0d72b95b0b)
2020-06-15 11:06:24 -07:00
Rosen Penev
9e108dcc79
upmpdcli: Update to 1.4.2
Fixed license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed upstreamed patch.

Ran init script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b2d016d352)
2020-06-15 11:05:57 -07:00
Hannu Nyman
c82f631142 haveged: update to 1.9.11
Update haveged to version 1.9.11

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ca30b0ff91)
2020-06-14 21:15:50 +03:00
Rosen Penev
3ca1e63db2
Merge pull request #12509 from lipnitsk/openwrt-19.07
perl: fix build failure in GCC10
2020-06-13 18:43:51 -07:00
Ken Wong
445c3d8f86 perl: fix build failure in GCC10
The perl Configure file was matching GCC 10 against "1*" and treating it
as GCC 1, causing ABI breakage and segfaults.

Cherry-pick the upstream patch which fixes it to check against (e.g)
"1.*" instead, which will make it work for hundreds more GCC versions
to come.

https://github.com/Perl/perl5/commit/6bd6308fcea3541
 "Adapt Configure to GCC version 10"

Also includes the previous commit just adding GCC 8 and 9 to one case:
https://github.com/Perl/perl5/commit/ae195500577d707
 "Add gcc-8 and gcc-9 for FORTIFY_SOURCE"

Signed-off-by: Ken Wong <xinxijishuwyq@gmail.com>
(cherry picked from commit 65578a43f0)
2020-06-13 15:22:51 -07:00
Etienne Champetier
668fb65674
Merge pull request #12505 from EricLuehrsen/unbound_ifauto_1907
[openwrt-19.07] unobund: make option interface_auto default on
2020-06-13 18:14:25 -04:00
Etienne Champetier
bc71ad7b3f
Merge pull request #12507 from stangri/19.07-simple-adblock
[19.07] simple-adblock: racially-neutral names
2020-06-13 18:10:40 -04:00
Rosen Penev
3ca5acd880
Merge pull request #12503 from Andy2244/samba-4.11.9-(19-07)
[19.07] samba4: update to 4.11.9
2020-06-13 14:39:09 -07:00
Rosen Penev
e2045ed7ac
Merge pull request #12502 from Andy2244/ksmbd-3.2.0_ksmbd-tools-3.2.6-(19-07)
[19.07] ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6
2020-06-13 14:38:30 -07:00
Rosen Penev
53ebb4394e
Merge pull request #12501 from Andy2244/rpcsvc-proto-1907
[19.07] rpcsvc-proto: update to 1.4.1
2020-06-13 14:38:17 -07:00
Rosen Penev
21fd28f333
Merge pull request #12500 from Andy2244/libtirpc-1.2.6-(19-07)
[19.07] libtirpc: update to 1.2.6
2020-06-13 14:37:42 -07:00
Rosen Penev
e5f75f5009
Merge pull request #12499 from Andy2244/softethervpn5-9674-(19-07)
[19.07] Softethervpn5: update to 5.01.9674
2020-06-13 14:37:21 -07:00
Rosen Penev
64647b723d
Merge pull request #12498 from Andy2244/wsdd2-4-(19-07)
[19.07] wsdd2: update to git 2020-05-06
2020-06-13 14:37:07 -07:00
Andy Walsh
456fc88c4e libtirpc: update to 1.2.6
* update to 1.2.6
* Add HOST_BUILD_PARALLEL for faster compilation

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 23:33:29 +02:00
Andy Walsh
b61848fd0f wsdd2: update to git 2020-05-06
* update to git 2020-05-06
* run init script through shellcheck
* fix infinite loop when BI_PARM is never set
* Fix '-b' option parsing

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 23:26:25 +02:00
Stan Grishin
de09918aca simple-adblock: racially-neutral names
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-13 20:39:11 +00:00
Eric Luehrsen
5fcf2cb092 unbound: make option interface_auto default on
Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-13 15:16:51 -04:00
David Bauer
950646f6c0 unbound: bump PKG_RELEASE
Fixes commit da76aeb24c ("unbound: expose interface-auto to UCI")

Signed-off-by: David Bauer <mail@david-bauer.net>
2020-06-13 15:16:50 -04:00
Eric Luehrsen
ba19244b84 unbound: suggest matched domain option for dnsmasq link
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-13 15:16:50 -04:00
Andy Walsh
72b0ea4b5d samba4: update to 4.11.9
* update to 4.11.9
* remove merged upstream patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'
* fixes CVE-2020-10700, CVE-2020-10704

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:39:26 +02:00
Andy Walsh
d88405ba84 ksmbd: update to 3.2.0, ksmbd-tools: update to 3.2.6
* ksmbd: update to 3.2.0
* ksmbd-tools: update to 3.2.6
* refresh patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:36:06 +02:00
Andy Walsh
1a0db6a217 softethervpn5: update to 5.01.9674
* update to 5.01.9674

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:29:55 +02:00
Andy Walsh
91be274719 rpcsvc-proto: update to 1.4.1
* update to 1.4.1

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-06-13 20:25:03 +02:00
Dirk Brenken
c0dce1d3a6
adblock: update 4.0.6
* add anti_ad blocklist source
* made SafeSearch provider configurable, you can limit
  SafeSearch to certain providers
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5ab2de1ff)
2020-06-13 08:36:08 +02:00
Rosen Penev
0ff5cb54e5
mpd: update to 0.21.24
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d7b593f695)
2020-06-11 16:33:53 -07:00
Dirk Brenken
982e7e2fa2
adblock: update 4.0.5-5
* add regional list source for czech/slovak
* add regional list source for korea
* adapt oisd_nl changes, switch to adb-syntax domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0a5e61ecb6)
2020-06-11 16:30:11 +02:00
Rosen Penev
2cd263070a
Merge pull request #12472 from zhanhb/less-alternatives-19
[19.07] less: update ALTERNATIVES
2020-06-10 01:58:23 -07:00
Huangbin Zhan
e2bd118b30 less: update ALTERNATIVES
Avoid conflict with busybox

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit d866393)
2020-06-10 10:53:27 +08:00
Rosen Penev
533ea65220
Merge pull request #12454 from stangri/19.07-simple-adblock
[19.07] simple-adblock: remove obsolete dshield.org links from config
2020-06-08 13:50:47 -07:00
Stan Grishin
53fc73b57e simple-adblock: remove obsolete dshield.org links from config
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-06-08 17:35:48 +00:00
Hannu Nyman
4d5ca641fd
Merge pull request #12449 from jefferyto/golang-1.13.12-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.12
2020-06-08 18:05:04 +03:00
Jeffery To
a93ea48b2c
golang: Update to 1.13.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-06-08 16:25:01 +08:00
Kevin Darbyshire-Bryant
49685b6bef collectd: sqm_collect: tidy interval string handling
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit c2c91ea99e)
2020-06-07 18:33:31 +03:00
Kevin Darbyshire-Bryant
9a38e786f8 collectd: sqm_collectd: improve error handling
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 947c85bff0)
2020-06-07 18:33:05 +03:00
Kevin Darbyshire-Bryant
f89580290c collectd: Improve sqm_collectd error reporting
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit a809dc6f3b)
2020-06-07 18:32:53 +03:00
Kevin Darbyshire-Bryant
8dcc144b9e collectd: sqm_collectd improve interface name filter
Increase the range of characters that get substituted by '_' so the
shell doesn't complain about illegal variable names.

Primarily done to catch '.' and '-' but who knows what funnies will
appear in i/f names.

It's a shame that busybox ash doesn't understand :alnum:

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit c8640d1f68)
2020-06-07 18:32:45 +03:00
Hannu Nyman
18128f79d2 collectd: bump PKG_RELEASE
Bump PKG_RELEASE on behalf of 38235de9c

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 03162ee920)
2020-06-07 18:29:56 +03:00
Kevin Darbyshire-Bryant
7ceb83acf1 collectd: SQM collect data from some qdiscs
Add a script that can collect data from mq (multi queue) and cake
qdiscs.

Script is reliant on collectd's 'exec' module.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 38235de9c3)
2020-06-07 18:29:47 +03:00
Florian Eckert
9f20fbba58 collectd: add syslog json plugin
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bb666cc9ff)
2020-06-07 18:29:38 +03:00
Kevin Darbyshire-Bryant
fdf5d41b5e rrdtool1: modify logarithmic scale labelling
The y-axis graph labels in logarithmic mode display in 'scientific'
notation eg: '1e+00' for 0, '1e+01' for 10, '1e+02' for 100 and so on.
This IMO is a pain in the backside for non scientific humans to read.

Modified output to display numbers up to 99,999 in conventional decimal
format and to revert to scientific notation for larger, thus the same
display space is taken.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit edc41b26ab)
2020-06-07 18:21:24 +03:00
Jan Hak
e667100a92
knot: update to version 2.9.5
Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 9d81b6e4ca)
2020-06-06 22:30:41 +02:00
Josef Schlehofer
aef8cb50ff
knot: disable libcap-ng
Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 41957d6967)
2020-06-06 22:30:32 +02:00
Jan Hak
550fa7c286
knot: update to version 2.9.3
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 87d6c26c73)
2020-06-06 22:30:16 +02:00
Paulo Machado
1fe19e712f linuxptp: fix build failure
Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
(cherry picked from commit 5f64b2d1e4)
2020-06-05 21:43:10 -07:00
Gabor Seljan
267b490878
sslh: use tls option instead of deprecated ssl
Upstream will drop support for the ssl option in the next future version.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
(cherry picked from commit 46c253dfca)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[package bump]
2020-06-05 21:59:59 +02:00
Rosen Penev
8f935f38bf
Merge pull request #12361 from rs/nextdns-1.6.4-openwrt-19.07
[19.07] nextdns: Update to version 1.6.4
2020-06-05 12:23:37 -07:00
Nikos Mavrogiannopoulos
37f5ae61b4 gnutls: updated to 3.6.14
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-06-04 06:05:39 +02:00
Rosen Penev
3efdcd8089
mpd: enable id3tag for all builds
2cedae0aa9 enabled mp3 support for mini,
while keeping id3tag for full. This makes no sense as id3tag is used
specifically for mp3 files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4ed61c1f68)
2020-06-03 13:05:26 -07:00
Hannu Nyman
b934e4b41c
Merge pull request #12334 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
2020-06-03 18:21:49 +03:00
David Bauer
e760909455 unbound: expose interface-auto to UCI
This exposes the interface-auto option to UCI.

By default, interface-auto is disabled.
This leads to the DNS reply possibly originating from
a different address then the request was sent to.

Devices with a packet filter might not receive the reply in this case.

Enabling interface-auto ensures the reply is sent with the
source-address the request was sent to.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit da76aeb24c)
2020-06-03 16:10:54 +02:00
Rosen Penev
0d94836087
Merge pull request #12382 from neheb/gst-p
[19.07] gstreamer update
2020-06-02 17:55:22 -07:00
Rosen Penev
1d9283083b
gst1-plugins-bad: don't add webp support
Not present in 19.07.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-06-02 15:07:57 -07:00
Rosen Penev
3f922137d0
Merge pull request #12383 from neheb/pige
[19.07] update pigeonhole
2020-06-02 14:29:31 -07:00
Rosen Penev
92778390ba
gst1-libav: update to 1.16.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0133aebed4)
2020-06-02 14:11:17 -07:00
Rosen Penev
216f42ee88
gst1-plugins-ugly: update to 1.16.2
Switched to meson.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 714a18e1bb)
2020-06-02 14:11:05 -07:00
Rosen Penev
c20a65698f
gst1-plugins-bad: update to 1.16.2
Switched to meson.

Fixed license information.

Several Makefile cleanups for consistency between packages.

Enabled and added packages for a bunch of plugins.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ae5ef832d1)
2020-06-02 14:10:57 -07:00
Rosen Penev
eeb2c01d96
gst1-plugins-good: update to 1.16.2
Switch to meson.

No more static libraries as meson makes you choose.

Enabled speex and shout2 as the libraries are available.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 077536f00f)
2020-06-02 14:10:46 -07:00
Rosen Penev
83df5f091b
gst1-plugins-base: update to 1.16.2
Switched to meson.

Fixed license information.

No more static libraries as meson makes you choose.

Added several CONFIG_DEPENDS entries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9cbde8ad8b)
2020-06-02 14:10:23 -07:00
Rosen Penev
eee7ce2b49
gstreamer1: update to 1.16.2
Switched to meson.

Fixed license information.

Rearranged some stuff for consistency between packages.

Removed static libraries. It seems meson only supports either one or the
other.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit cb058bf961)
2020-06-02 14:09:49 -07:00
Rosen Penev
3025f6c322
pigeonhole: Update to 0.5.9
Dovecot was updated but not pigeonhole. This is important as the API broke

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de66ac26f6)
2020-06-02 14:06:59 -07:00
W. Michael Petullo
114823c7c9
pigeonhole: reflect license of LGPL-2.1-or-later
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit cfcdade87d)
2020-06-02 14:06:53 -07:00
W. Michael Petullo
59ca872267
pigeonhole: update to 0.5.8
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 10a1877e57)
2020-06-02 14:06:42 -07:00
W. Michael Petullo
41cb012030
gst1-libav: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 39e223f019)
2020-06-02 13:59:54 -07:00
W. Michael Petullo
c187321ac5
gst1-plugins-ugly: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 6dc84b2082)
2020-06-02 13:59:28 -07:00
Rosen Penev
16b7bb0662
gst1-plugins-bad: Make HLS crypto explicit
It's normally set to auto. When nettle is missing, it tries to use the
other libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 49b5de830e)
2020-06-02 13:59:28 -07:00
W. Michael Petullo
c835240069
gst1-plugins-bad: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ac93280d53)
2020-06-02 13:59:27 -07:00
W. Michael Petullo
a0bf86150e
gst1-plugins-good: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 158f2e6252)
2020-06-02 13:59:27 -07:00
W. Michael Petullo
990a211840
gst1-plugins-base: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit e4f3f8b027)
2020-06-02 13:59:27 -07:00
W. Michael Petullo
ca4a06a25d
gstreamer1: update to 1.16.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 0934faf567)
2020-06-02 13:59:22 -07:00
Karl Palsson
2358915938 net/mosquitto: bump to 1.6.10
Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/

Fixes openssl 3.0 support,
Minor fixes, nothing standout as applicable specifically to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-06-02 10:26:47 +00:00
Rosen Penev
620838fc91
ola: fix compilation with GCC4
The configure script confusingly sets CXXFLAGS to gnu++11 but does
not use that to check the important stuff. Fix that.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f7687833e)
2020-05-31 14:02:47 -07:00
Jan Pavlinec
142fd306eb
dovecot: update to version 2.3.10.1 (security fix)
Fixes:
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d863e26817)
2020-05-31 13:56:12 -07:00
Dirk Brenken
c09244b012
adblock: update 4.0.5-4
* remove dumb list cache
* start adblock processing after adding/removing
  list sources via CLI
* add regional list source for france

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ab44d8146a)
2020-05-31 18:31:26 +02:00
Olivier Poitrey
f0fd4c1512 nextdns: Update to version 1.6.4
Refactor the package so init script is installed from the binary instead
of an init script embedded in the package.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-31 00:18:32 -07:00
Dirk Brenken
45313e42f9
adblock: update 4.0.5-3
* fix oisd_nl source parser (format has been changed)
* enable safesearch support for kresd (ip based)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7f6763359c)
2020-05-30 06:15:02 +02:00
Rosen Penev
6e27e51969
Merge pull request #12348 from adrianschmutzler/fixmake
[19.07] treewide: use relative include paths for python Makefiles
2020-05-28 19:11:38 -07:00
Rosen Penev
a9b5867e29
Merge pull request #12294 from neheb/keab
[19.07] backport kea changes
2020-05-28 15:17:01 -07:00
Jeffery To
d85c355aa1 treewide: use relative include paths for python Makefiles
This updates the include paths for python(3)-package.mk to be relative
to the package Makefile. If not, in certain cases this will print errors
like the following one:

ERROR: please fix feeds/openwrt/net/freeradius3/Makefile
   - see logs/feeds/openwrt/net/freeradius3/dump.txt for details

In the dump.txt there is the following:

Makefile:42: /mylocalpath/feeds/packages/lang/python/python3-package.mk: No such file or directory
make[1]: *** No rule to make target '/mylocalpath/feeds/packages/lang/python/python3-package.mk'.  Stop.

The relative path is used already in 19.07 for most of the packages, and
has been updated for the packages at hand in master as well:

302f4d17e3 ("libmraa,libupm: Disable default Python package build recipe")
1bc2f4f3c6 ("treewide: Remove Python variants for non-Python packages")

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2020-05-28 15:57:01 +02:00
Rosen Penev
07d541c145 Merge pull request #12339 from ja-pa/transmission-fix-19.07
[openwrt-19.07] transmission: init script check syscall list for seccomp
2020-05-27 02:54:55 -07:00
Jan Pavlinec
615d909a22
transmission: init script check syscall list for seccomp
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-27 11:26:36 +02:00
Stan Grishin
18efcda210 simple-adblock: bugfix: proper error reporting on failed downloads; lists update script
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-27 00:26:13 +00:00
Rosen Penev
d5062122ef
Merge pull request #12292 from neheb/spoof
[19.07] spoofer backports
2020-05-26 14:08:58 -07:00
Rosen Penev
4ceab639bc
Merge pull request #12269 from neheb/gerb56
[19.07] gerbera: add taglib support
2020-05-26 13:24:32 -07:00
Rosen Penev
9aa0d8cf7f
Merge pull request #12330 from rs/nextdns-1.6.3-openwrt-19.07
[19.07] nextdns: Update to version 1.6.3
2020-05-26 13:03:59 -07:00
Olivier Poitrey
6e6e5fa2ad nextdns: Update to version 1.6.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 19:31:36 +00:00
Hannu Nyman
b43a7d4b1b
Merge pull request #12326 from rs/nextdns-1.6.0-openwrt-19.07
[19.07] nextdns: Update to version 1.6.0
2020-05-26 21:08:19 +03:00
Olivier Poitrey
474296dcb1 nextdns: Update to version 1.6.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-26 17:58:33 +00:00
Rosen Penev
5507a02e24
Merge pull request #12313 from aleksander0m/aleksander/mm-mtu-19.07
modemmanager: set interface MTU based on bearer settings
2020-05-26 01:55:44 -07:00
Aleksander Morgado
ede1a8221b modemmanager: set interface MTU based on bearer settings
Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 41552c1cc2)
2020-05-26 10:28:56 +02:00
Rosen Penev
c6eea20bc8
giflib: remove host build
It's completely unused and breaks under CentOS7.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 23be4f9d7c)
2020-05-25 12:56:27 -07:00
Rosen Penev
b4cf130cba libtasn1: fix host build under old GCC
prereq-build.mk says that GCC 4.8 and above is supported. GCC 4.8
defaults to std=gnu89, breaking the build. GCC5 defaults to gnu99.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6d100823e9)
2020-05-24 23:30:51 -07:00
Rosen Penev
5a1699aebd
kea: do not build static host binaries
Errors on some systems. No real change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1950340c69)
2020-05-24 19:47:13 -07:00
Tiago Gaspar
bb42a250b4
kea: Update kea to the latest stable verion (1.6.2).
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 0f4cc2e339)
2020-05-24 19:47:00 -07:00
Rosen Penev
1d30a273e1
kea: Remove openssl host dependency
OpenSSL is already built as part of tools (LibreSSL actually) and can be
used instead for the host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c037c8d988)
2020-05-24 19:46:50 -07:00
Tiago Gaspar
f22e122e64
kea: update package to 1.6.0
Update kea to the latest stable verion (1.6.0).

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 03cf093332)
2020-05-24 19:46:39 -07:00
Tiago Gaspar
6f19b894d6
kea: remove dependency and reduce file size
Remove boost-python3 dependency and reduce file size of the compiled
kea-libs

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 74603fe5ea)
2020-05-24 19:46:30 -07:00
Tiago Gaspar
87f4d6ba2c
kea: fix kea-admin dependency
Fix kea-admin dependency where if procps-ng-ps wasn't available busybox
would output an error casuse it does't support showing a processe's PID

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 9314a96765)
2020-05-24 19:46:22 -07:00
Tiago Gaspar
1360d1f88c
kea: fix and improve makefile
Fix an issue where the Makefile wouldn't allow kea to show up in the
menuconfig Also added some description to the packages

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 95307f2a4b)
2020-05-24 19:46:13 -07:00
Rosy Song
07538f535a
kea: remove python3 dependency of kea-admin
fix #9495

Signed-off-by: Rosy Song <rosysong@rosinson.com>
(cherry picked from commit 444420423f)
2020-05-24 19:46:07 -07:00
Rosen Penev
efde7c454e
kea: Fix compilation without deprecated OpenSSL APIs
Forgot to add this one to the last pull request.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54d7bc119d)
2020-05-24 19:45:58 -07:00
Rosen Penev
09ea6f0325
kea: Don't install to STAGING_DIR_HOST
STAGING_DIR_HOST is for packages under tools/ , not host packages.

Reorganized Makefile for consistency between packages.

Added PKG/HOST_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d93fd61d62)
2020-05-24 19:45:50 -07:00
Rosen Penev
fb58e3b8c4
spoofer: remove host build + cleanups
The host build is not used by anything.

Added PKG_INSTALL for consistency between packages.

Added PKG_BUILD_PARALLEL for faster compilation.

Added missing protobuf/host build dependency. This was previously
specified as a host dependency, which is wrong.

Removed pointless std parameter.  It's only useful for old G++ versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63107fa8c0)
2020-05-24 19:38:43 -07:00
Rosen Penev
deccad8925
spoofer: Update to 1.4.5
Needed for the new protobuf update.

Cleaned up Makefile.

Got rid of HOST_BUILD_DEPENDS. This package does not have a host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4c42eb0b45)
2020-05-24 19:38:34 -07:00
Dirk Brenken
15257f5b6d
adblock: limit domain name length
* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0b6ea12560)
2020-05-24 21:49:26 +02:00
Hannu Nyman
246fc735b6 nano: update to 4.9.3
Update nano version to 4.9.3
Minor bugfix release.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38be46a7ae)
2020-05-24 20:43:30 +03:00
Rosen Penev
673e76b1ca
Merge pull request #12275 from micmac1/mar19run
[19.07] mariadb: use default umask for rundir
2020-05-24 03:55:11 -07:00
Sebastian Kemper
39db22ec95 mariadb: use default umask for rundir
rundir needs to be accessible for clients, hence o= is not the proper
permission for rundir. This commit breaks out rundir from the awk script
and sets it up with default umask.

This also removes chmod call and instead tells mkdir to create the
directories with the proper permissions directly.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-24 10:41:11 +02:00
Rosen Penev
8362f46fe4 gerbera: backport init and config changes from master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-23 17:35:20 -07:00
Rosen Penev
225eeb9a6b gerbera: add taglib support
Gives audio metadata support to gerbera.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-05-23 17:35:20 -07:00
Rosen Penev
074444794c libupnp: enable reuseaddr
Helps applications restart safely.

Disabled optssdp. Not used by anything.

Disabled scriptsupport. Not used by anything.

Made all configure options explicit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8e065c147f)
Added some extra stuff from master.
2020-05-23 17:35:20 -07:00
Rosen Penev
51efb1723e taglib: update to 1.12-beta-1
It seems 1.11.1 is old and has CVEs.

Removed boost hack since upstream removed boost support.

Removed outdated InstallDev hacks.

Added PKG_CPE_ID.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b0dc454c0e)
2020-05-23 17:34:56 -07:00
Rosen Penev
778f14f51f taglib: fix taglib-config paths
It seems gerbera uses this instead of pkgconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2016b7b799)
2020-05-23 16:57:00 -07:00
Rosen Penev
e74a456c0e taglib: add
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 350317d673)
2020-05-23 16:56:01 -07:00
Dirk Brenken
c8d2ed2cbc
adblock: release 4.0.5
* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9f91ecc47)
2020-05-23 21:21:54 +02:00
Rosen Penev
a41e068db8
sslh: update to 1.20
Fixed maintainer entry.

Added patch fixing compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ded3ad41b8)
2020-05-21 17:28:35 -07:00
Hannu Nyman
23251b93a9
Merge pull request #12247 from jefferyto/python-setuptools-site-patch-openwrt-19.07
[openwrt-19.07] python-setuptools,python3-setuptools: Fix error when installing from source
2020-05-21 18:10:31 +03:00
Jeffery To
32fb2ba0d6 python-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-21 22:07:17 +08:00
Jeffery To
6dac29693f python3-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 70a7f736c5)
2020-05-21 20:15:24 +08:00
Josef Schlehofer
49ac1e8b74 bind: update to version 9.14.12
Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-20 11:25:23 -07:00
Josef Schlehofer
99998e218a
syslog-ng: update to version 3.27.1
snmp-dest was moved to afsnmp

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d4db36ea09)
2020-05-20 19:02:02 +02:00
Philip Prindeville
64ebad3fd9
syslog-ng: restore service "reload" to actually working
Commit 44a16ca broke syslog-ng such that it no longer works with
logrotate, for example.  Yes, you can manually stop and start the
service, but (1) you shouldn't have to and (2) it creates a window
where you potentially lose messages if the syslog UDP socket
overruns.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit c27f4ca53b)
2020-05-20 19:01:56 +02:00
Philip Prindeville
0e80f0486b
syslog-ng: including user settings after system settings
Initially we included user-specific settings last, so that they
could turn off or replace system settings... otherwise we only get
to change what's NOT explicitly set by the system.  This is overly
constraining.

Restore the original functionality of allowing the user to
override settings defined by the distribution's configuration.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit f8443ae829)
2020-05-20 19:01:35 +02:00
Yousong Zhou
98d4126c4a qemu: ignore configure option --disable-ipv6
Fixes: https://github.com/openwrt/packages/issues/12194
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a3033406ea)
2020-05-20 23:34:14 +08:00
Yousong Zhou
50148ea080 openvswitch: fix file generation in /etc/modules.d
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 1091badd83)
2020-05-20 23:34:11 +08:00
Josef Schlehofer
676e6ddd6f
Merge pull request #12216 from BKPepe/19.07-unbound
[19.07] unbound: update to version 1.10.1 (security fix)
2020-05-20 08:38:48 +02:00
Hannu Nyman
149a084773
Merge pull request #12231 from jefferyto/python-openssl-ca-certs-openwrt-19.07
[openwrt-19.07] python-openssl,python3-openssl: Add dependency on ca-certs
2020-05-20 08:19:17 +03:00
Jeffery To
c062120822 python-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-20 04:37:53 +08:00
Jeffery To
c32e08f308 python3-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d2b0cc523d)
2020-05-20 04:36:07 +08:00
Josef Schlehofer
828ba37e06
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:28:40 +02:00
Hannu Nyman
2ccdae9a45
Merge pull request #12206 from micmac1/mar-1907-10413
[19.07] mariadb: minor version bump with CVE fixes and backports
2020-05-18 08:48:54 +03:00
Sebastian Kemper
115f7eeb07 mariadb: install config files readable for all
Backport from master.

Until now $(INSTALL_CONF) is used for configuration files that go into
/etc/mysql. This commit replaces that with $(INSTALL_DATA). The
configuration files are not only parsed by the server, but also by the
clients (which can be anybody).

This also removes a comment about a cron job from one of the
configuration files. There is no cron job.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:08:28 +02:00
Sebastian Kemper
4f0d108359 mariadb: move mysql_upgrade to the client package
Backport from master.

It's really a client. It connects to the running server as a client, to
upgrade the DBs. And it depends on both mysql and mysqlcheck.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:03:40 +02:00
Sebastian Kemper
9dda3cc87f mariadb: bump to 10.2.32
Fixes:

  CVE-2020-2752
  CVE-2020-2812
  CVE-2020-2814
  CVE-2020-2760

Upstream added support files for auth_pam plugin. This commit adds them
to the package.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-05-18 00:01:00 +02:00
Hannu Nyman
5e9f5cd769
Merge pull request #12187 from jefferyto/golang-1.13.11-default-platform-options-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.11, set default platform options
2020-05-16 23:36:22 +03:00
Jeffery To
d3762591da golang: Set/reset default platform options for target Go compiler
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.

This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit da3fb97b9c)
2020-05-17 03:30:36 +08:00
Jeffery To
f52fbe1d49 golang: Update to 1.13.11
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-17 03:30:36 +08:00
Michael Heimpold
2e6bd4cb86 php7: update to version 7.2.31
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:57:30 +02:00
Rosen Penev
191aac1741
Merge pull request #12171 from rs/nextdns-1.5.8-openwrt-19.07
[19.07] nextdns: Update to version 1.5.8
2020-05-14 20:45:21 -07:00
Olivier Poitrey
07164dec74 nextdns: Update to version 1.5.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-05-14 23:41:04 +00:00
Rosen Penev
504a5f1b81
Merge pull request #12169 from jefferyto/arm-aarch64-vfp-neon-openwrt-19.07
[openwrt-19.07] treewide: Backport VFP/NEON fixes/updates
2020-05-14 09:07:03 -07:00
Jeffery To
a12555cc06 treewide: Enable VFP/NEON optimizations for aarch64
For speexdsp, support for NEON on aarch64 was added in 1.2.0[1].

[1]: https://github.com/xiph/speexdsp/pull/8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dec17eb36c)
2020-05-14 22:45:07 +08:00
Jeffery To
595342148e treewide: Update ARM NEON/VFP detection
With openwrt/openwrt@8dcc108760, the ARM
FPU compiler options are no longer part of CONFIG_TARGET_OPTIMIZATION.

This updates various packages that look for NEON/VFP support to search
CONFIG_CPU_TYPE instead.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 2d99ee3004)
[adapted patch for pulseaudio using autotools build]
2020-05-14 22:45:03 +08:00
Rosen Penev
5f5d63e791
Merge pull request #12158 from Robby-/openwrt-19.07-eaptlstmpdir
[19.07] freeradius3: Fix to init script.
2020-05-13 14:22:09 -07:00
Eiji MATSUMOTO
0feb9ad314 freeradius3: Fix to init script.
To use eap tls, 'tmpdir' must be created before server starts.
This 'tmpdir' is used to store and verify client certificate,
and therefore radiusd do 'chmod go-rwx'.

If 'tmpdir' does NOT exists, server failed to start and default
'tmpdir' is '/tmp/radiusd'. So init script MUST create default
'tmpdir' like other directories.

Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>
2020-05-13 09:45:09 +02:00
Hannu Nyman
d8b9b0c92a
Merge pull request #12141 from EricLuehrsen/unbound_1907_1100
[openwrt-19.07] unbound: update to 1.10.0
2020-05-11 15:09:03 +03:00
Eric Luehrsen
8668e83d51 unbound: update to 1.10.0
cherry-pick: f779ef48cd
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-05-10 23:45:17 -04:00
Kevin Darbyshire-Bryant
2e01dd8382
miniupnpd: make hotplug work again
hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common
doesn't pull in the functions defined in /etc/rc.common thus since
'enabled' isn't defined the following sequence always fails:

enabled miniupnpd || exit 0

Unfortunately sourcing /etc/rc.common doesn't appear to work so come up
with some alternatives.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-05-10 14:57:29 -07:00
Rosen Penev
468f6fa13c
Merge pull request #12127 from aleksander0m/aleksander/mm-qmi-19.07
ModemManager and libqmi stable releases in 19.07
2020-05-10 01:02:04 -07:00
Aleksander Morgado
1c8e2e0c24 modemmanager: release 1.12.10
https://lists.freedesktop.org/archives/modemmanager-devel/2020-May/007828.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 3feeacc051)
2020-05-10 09:27:27 +02:00
Rosen Penev
cea4fbe30a modemmanager: fix compilation under uClibc-ng
Needs nls.mk as a result of the glib2 change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 311e2d76bb)
2020-05-10 09:27:12 +02:00
Aleksander Morgado
86fedfd522 libqmi: update version to 1.24.12
https://lists.freedesktop.org/archives/libqmi-devel/2020-May/003296.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 6584192deb)
2020-05-10 09:27:01 +02:00
Matthias Schiffer
af5ada4574
wifidog-ng: remove incorrect PKG_BUILD_DIR override
As wifidog-ng builds a kernel module, it must use a PKG_BUILD_DIR in
KERNEL_BUILD_DIR instead of BUILD_DIR, otherwise old build artifacts may
be incorrectly reused when switching between different targets of same
architecture without a full clean.

Instead of fixing up the override, just remove it and instead move the
kernel.mk include above package.mk, so PKG_BUILD_DIR is set up correctly
by default.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 25babf817f)
2020-05-09 14:04:19 +02:00
Rosen Penev
b8912fe4e3
Merge pull request #12111 from jefferyto/ddns-scripts-backport-fixes-openwrt-19.07
[openwrt-19.07] ddns-scripts: Backport fixes
2020-05-08 14:11:04 -07:00
Hannu Nyman
41fa224428
Merge pull request #12107 from rs/nextdns-1.5.7-openwrt-19.07
[19.07] nextdns: Update to version 1.5.7
2020-05-08 16:14:03 +03:00
Jeffery To
b8ce0e9599 ddns-scripts: Increment PKG_RELEASE and internal version number
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-08 15:47:24 +08:00
Zheng Luo
9437c31c86 ddns-scripts: cloudflare.com-v4: Fix grep patterns.
Related commit: 0080bb4b

Use `\s*` instead of ` \?` to match 0 or multiple spaces.

Signed-off-by: Zheng Luo <cherrotluo@gmail.com>
(cherry picked from commit 88b03577c4)
2020-05-08 15:43:55 +08:00
Michael Gray
b7958778ab ddns-scripts: cloudflare.com-v4: Fix success check for new response format
JSON response now has spaces between parameters. Accept this new format and the old one.

Signed-off-by: Michael Gray <michael.gray@lantisproject.com>
(cherry picked from commit 0080bb4bba)
2020-05-08 15:38:17 +08:00
Rosen Penev
98f12a896a ddns-scripts: fix logging bug
Fixes issue #11282, this patch was provided by PaulFertser on the #openwrt
IRC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bf68826897)
2020-05-08 15:37:09 +08:00
Rosen Penev
a6a2c8d139 ddns-scripts: use HTTP for IPv6 dyndns URL
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit da57ac0f39)
2020-05-08 15:36:45 +08:00
Rosen Penev
d040b2471c ddns-scripts: remove HTTPS from dyndns URL
HTTPS support is not provided by default.

Also fixed a mistakenly added ].

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fdfe5a7607)
2020-05-08 15:36:36 +08:00
Rosen Penev
ab7dfd76b6 ddns-scripts: use new DDNS URL for dyndns.org
https://github.com/openwrt/packages/issues/8360

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a0fa14360c)
2020-05-08 15:36:23 +08:00
Rosen Penev
c2943b13f9 ddns-scripts: update ddnss.de response
https://github.com/openwrt/packages/issues/8013

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4128151843)
2020-05-08 15:35:14 +08:00
Paul Tobias
4d050bac76 ddns-scripts: Use https for domains.google.com
Without https the update fails with:

```
 132954       : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED'
 132954       : DDNS Provider answered:
<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&amp;myip=CENSORED">here</A>.
</BODY>
</HTML>
 132954 ERROR : IP update not accepted by DDNS Provider
```

Signed-off-by: Paul Tobias <tobias.pal@gmail.com>
(cherry picked from commit 21f5cdd2fa)
2020-05-08 15:33:29 +08:00
Algin Maduro
4938c148ca nextdns: Update to version 1.5.7
Signed-off-by: Algin Maduro <1469047+mad-it@users.noreply.github.com>
2020-05-07 23:41:42 +00:00
Josef Schlehofer
501c782f7a
youtube-dl: update to version 2020.5.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0ebb5ebe4c)
2020-05-07 01:55:46 +02:00
Rosen Penev
f79cb0907a
gerbera: add
This is a proper replacement for MiniDLNA with none of its problems.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a62bc1cd6a)
2020-05-07 01:54:49 +02:00
Rosen Penev
cfde14a8cf
Merge pull request #12080 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: support phys-dev policies
2020-05-04 22:24:53 -07:00
Stan Grishin
2ce218bdce vpn-policy-routing: support phys-dev policies
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-04 22:47:47 +00:00
Rosen Penev
7ac37c1a8e
Merge pull request #12070 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: bugfix: remove non-ASCII from log; update README
2020-05-03 14:32:53 -07:00
Hannu Nyman
fa37e396d1
Merge pull request #12057 from stangri/19.07-vpnbypass
[19.07] vpnbypass: bugfix: remove non-ASCII from system log; update README
2020-05-03 22:52:50 +03:00
Stan Grishin
9eb229c097 vpn-policy-routing: bugfix: remove non-ASCII from log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-03 19:45:40 +00:00
Stan Grishin
0ae7e11d73 vpnbypass: bugfix: remove non-ASCII from system log; update README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-05-02 22:35:43 +00:00
Nikos Mavrogiannopoulos
1d5350fb48 openconnect: updated to 8.09
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:38:22 +02:00
Nikos Mavrogiannopoulos
b10a73c9a3 ocserv: updated to 1.0.1
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-05-01 19:37:18 +02:00
Josef Schlehofer
04af75b945
youtube-dl: update to version 2020.3.24
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0085b928f7)
2020-05-01 11:49:25 +02:00
Rosen Penev
72e4e36a35
Merge pull request #11999 from jefferyto/bash-import-patches-openwrt-19.07
[openwrt-19.07] bash: Import upstream patches
2020-04-29 12:20:31 -07:00
Dirk Brenken
e92ac8abee
travelmate: fix captive portal detection
* made captive portal detection more bullet proof, fixes #11990

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1aa4518dfc)
2020-04-29 14:53:53 +02:00
Jeffery To
c0f9062736 bash: Import upstream patches
Source:
https://ftp.gnu.org/gnu/bash/bash-5.0-patches/
(bash50-003 to bash50-017)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dc5f2df6a4)
2020-04-29 17:19:13 +08:00
Rosen Penev
f5cb61cee5
Merge pull request #11992 from Robby-/openwrt-19.07-freeradius3_update_3_0_21
[19.07] freeradius3: Update to 3.0.21
2020-04-29 02:11:50 -07:00
Josef Schlehofer
37812cd96a
Merge pull request #11994 from jefferyto/python-2.7.18-openwrt-19.07
[openwrt-19.07] python: Update to 2.7.18, refresh patches
2020-04-29 10:56:52 +02:00
Josef Schlehofer
caecc597f0
expat: Update to version 2.2.9
Fixes CVE-2019-15903

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 71814007a6)
2020-04-29 10:34:10 +02:00
Jeffery To
e34d0baee9 python: Update to 2.7.18, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 05:33:21 +08:00
Robby K
28faf9676f freeradius3: Update to 3.0.21
Latest stable release.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:03:51 +02:00
Robby K
cb10971c14 freeradius3: Updated patches/004-fix-target-python-header-detection.patch to remove the rlm_python3 specific changes as it is no longer needed to compile and updated the Makefile to reflect this due to the following change/commit in freeradius:
307678b268

This is in preparation for the 3.0.21 update.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:03:17 +02:00
Robby K
4c9d290938 freeradius3: Refreshed patches/002-disable-session-cache-CVE-2017-9148.patch in preparation for the 3.0.21 update.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:02:37 +02:00
Robby K
fe6f04346f freeradius3: Fix the ordering in the Makefile.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-04-28 20:02:03 +02:00
Florian Eckert
0d795d2028 mwan3: fix whitespace issue
fixes #11965

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3c34b151f6)
2020-04-28 17:10:32 +02:00
Brian J. Murrell
b7959a8d38 mwan3: Ping IPv6 hosts using address not interface
Pinging IPv6 hosts using an interface as a source specifier seems
troublesome.  See https://bugs.openwrt.org/index.php?do=details&task_id=2897
for more detail.

Use the desired source interface's IP address instead.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit 6721587e8b)
2020-04-28 17:10:32 +02:00
Florian Eckert
2ac0a05d6c mwan3: change license to SPDX compatible identifier
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6d638c3e23)
2020-04-28 17:10:32 +02:00
Florian Eckert
928ac2a20a mwan3: update version to 2.8.2
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 14dd084662)
2020-04-28 17:10:32 +02:00
Florian Eckert
1ea75a8fa5 mwan3: add httping_ssl option
Till now we could only ping http targets on port 80. With this change by
adding the config boolean config option httping_ssl we could also ping
https ping targets on port 443.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a689e168aa)
2020-04-28 17:10:32 +02:00
Florian Eckert
c2cd3f0997 mwan3: fix variable naming
The variable IPT is not valid at this point. Set the variable usage to IPT4
fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 581d7df844)
2020-04-28 17:10:32 +02:00
Hannu Nyman
5bf733c2d2
Merge pull request #11986 from jefferyto/python-target-build-tools-openwrt-19.07
[openwrt-19.07] python,python3: Fix host build tool names recorded in target files
2020-04-28 12:58:06 +03:00
Jeffery To
c1394a6a7f python: Fix host build tool names recorded in target files
Python will record the values of CC, CXX, AR, and RANLIB (and other
configure options) used during compilation. pip will use these programs
when asked to compile extension modules on the target device.

* If ccache is used during build, CC and CXX will be ccache_cc and
  ccache_cxx, respectively, which are not available on-device (#11912).

* If an external toolchain is used during build, the values of these
  variables will contain the external toolchain prefix, which may not be
  available on target.

* If the normal toolchain is used during build, AR and RANLIB will
  contain the toolchain prefix, but the names of ar and ranlib on-device
  do not contain the prefix; they are named "ar" and "ranlib".

This changes the values of these variables in Python's files to match
the names available on-device, and without any toolchain prefix.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-28 17:20:50 +08:00
Jeffery To
3d2dc69200 python3: Fix host build tool names recorded in target files
Python will record the values of CC, CXX, AR, and READELF (and other
configure options) used during compilation. pip will use these programs
when asked to compile extension modules on the target device.

* If ccache is used during build, CC and CXX will be ccache_cc and
  ccache_cxx, respectively, which are not available on-device (#11912).

* If an external toolchain is used during build, the values of these
  variables will contain the external toolchain prefix, which may not be
  available on target.

* If the normal toolchain is used during build, AR and READELF will
  contain the toolchain prefix, but the names of ar and readelf
  on-device do not contain the prefix; they are named "ar" and
  "readelf".

This changes the values of these variables in Python's files to match
the names available on-device, and without any toolchain prefix.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f81ab895e)
2020-04-28 13:56:47 +08:00
Rosen Penev
99abc1bd89
Merge pull request #11976 from br101/pingcheck-update
pingcheck: Update and add script directories
2020-04-27 15:27:27 -07:00
Bruno Randolf
aa353e13da pingcheck: Update and add script directories
- Update to version with longer interface names.

- Add /etc/pingcheck/(on|off)line.d/ directories with an example
  script. Closes #11263

Signed-off-by: Bruno Randolf <br1@einfach.org>
2020-04-27 16:15:27 +01:00
Rosen Penev
411633e52f mpd: update to 0.21.23
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 332e6d4e26)
2020-04-26 20:06:14 -07:00
Michael Heimpold
63a7426cda Merge branch 'BKPepe-19.07-php7' into openwrt-19.07 (fixes #11923)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-04-25 21:18:16 +02:00
Michael Heimpold
d2a02ee24c Merge branch '19.07-php7' of https://github.com/BKPepe/packages into
a local branch for conflict resolving.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-04-25 21:16:19 +02:00
Michael Heimpold
f2143f6ebc php7: fix dependencies for mysqlnd (fixes #11113)
When during the build the openssl extension is also selected, then
the mysqlnd extension depends on it, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 50b1cd3757)
2020-04-25 21:11:43 +02:00
Hannu Nyman
6d9bfa5a88
Merge pull request #11948 from dvtirol/rlm_rest-19.07
OpenWrt 19: freeradius3: Support building freeradius3-mod-rest
2020-04-25 09:56:00 +03:00
Tobias Girstmair
742944560c freeradius3: Support building freeradius3-mod-rest
Signed-off-by: Tobias Girstmair <tobias.girstmair@tirol.gv.at>
2020-04-24 21:22:31 +02:00
Hannu Nyman
f3bf2e9dd7
Merge pull request #11946 from jefferyto/python-pip-pep517-pyc-fix-openwrt-19.07
[openwrt-19.07] python-pip,python3-pip: Fix error when installing packages that require compilation
2020-04-24 19:30:16 +03:00
Jeffery To
cbb850712a python-pip: Fix error when installing packages that require compilation
This addresses one of the issues raised in #11912.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-24 23:31:44 +08:00
Jeffery To
5b66075571 python3-pip: Fix error when installing packages that require compilation
This addresses one of the issues raised in #11912.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 11bc05763d)
2020-04-24 23:29:34 +08:00
Dirk Brenken
ad75f69013
travelmate: refine logical interface selection
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9eebb43159)
2020-04-24 08:34:46 +02:00
Josef Schlehofer
eccacec551
less: add ALTERNATIVES
This package can not be installed if you have installed less from
busybox.

Collected errors:
 * check_data_file_clashes: Package less wants to install file /bin/less
        But that file is already provided by package  * busybox
 * opkg_install_cmd: Cannot install package less.

To avoid this error, I moved it from /bin/less to /usr/bin/less.

If you install it now, it changes symlink from busybox to /usr/bin/less
/bin/less -> busybox*
/bin/less -> /usr/bin/less*

When you remove it, it changes symlink back to busybox.

That's why postint and postrm scripts are no longer needed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0ae161ecb6)
2020-04-23 09:26:56 +02:00
Rosen Penev
3ab2a1c518
Merge pull request #11938 from aleksander0m/aleksander/modem-updates-19.07
libqmi and MM updates for stable 19.07
2020-04-22 22:31:46 -07:00
Aleksander Morgado
8b46bb9dfa modemmanager: release 1.12.8
https://lists.freedesktop.org/archives/modemmanager-devel/2020-March/007729.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 052d9274ef)
2020-04-23 06:45:39 +02:00
Aleksander Morgado
9c337b7baf modemmanager: release 1.12.6
https://lists.freedesktop.org/archives/modemmanager-devel/2020-February/007713.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit d121e270e8)
2020-04-23 06:45:31 +02:00
Aleksander Morgado
2c1fbf5eca libqmi: update version to 1.24.10
https://lists.freedesktop.org/archives/libqmi-devel/2020-April/003275.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 5f995ccb47)
2020-04-23 06:44:12 +02:00
Aleksander Morgado
a6f66a0785 libqmi: update to version 1.24.8
https://lists.freedesktop.org/archives/libqmi-devel/2020-March/003248.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit b3fe4254ab)
2020-04-23 06:44:06 +02:00
Nicholas Smith
920c439465 libqmi: bump libqmi version
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
(cherry picked from commit e9813262f9)
2020-04-23 06:43:59 +02:00
Rosen Penev
1b0b8ffa7a
Merge pull request #11928 from jefferyto/golang-1.13.10-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.10
2020-04-22 12:54:27 -07:00
Dirk Brenken
a15e7212df
travelmate: release 1.5.4
* add 'status_service' as workaround to init for 19.07
* fix 'wifionice' auto-login script
* fix autologin script matching
* change wifi scanning to logical interface name,
  no longer use the radio device

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 59cca01a23)
2020-04-22 21:08:34 +02:00
Jeffery To
f6bb9f3c2b golang: Update to 1.13.10
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-23 02:41:32 +08:00
Hannu Nyman
6e5ca4ddf4
Merge pull request #11925 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix: start downloads on cold boot/fresh install
2020-04-22 20:57:38 +03:00
Stan Grishin
c725bb1b4c simple-adblock: bugfix: start downloads on cold boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-22 17:46:07 +00:00
Josef Schlehofer
09738290a3
php7: update to version 7.2.30
Fixes:
CVE-2020-7066
CVE-2020-7064

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-22 18:05:21 +02:00
tripolar
059e949eec
Merge pull request #11882 from yousong/wget1907
[19.07] acme: depends on wget-ssl
2020-04-18 19:56:05 +02:00
Yousong Zhou
fb64ef9d36 acme: depends on wget-ssl
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d917d662ae)
2020-04-18 23:38:25 +08:00
Yousong Zhou
ba4c4e681e wget: make the ssl variant provides wget-ssl
This is to address the need for specifying dependency on a wget
implementation with ssl support.

Now we have a game of names for opkg

 1. uclient-fetch: minimal version by openwrt project
 2. wget-nossl: gnu wget w/o ssl support
 3. wget-ssl: for the moment since this commit, gnu wget w/ ssl support
 4. wget: uclient-fetch, wget-nossl, or wget-ssl
 5. gnu-wget: wget-nossl or wget-ssl

By the time we provide some dummy package like uclient-fetch-ssl and
make it also provide wget-ssl, I guess by then we will also need
gnu-wget-ssl...

Ref: https://github.com/openwrt/packages/issues/11534
Ref: https://github.com/openwrt/packages/pull/9941
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 585e4a38fe)
2020-04-18 23:36:43 +08:00
Karel Kočí
406b052f73 wget: do not provide itself
The package wget should not say that it provides itself.

This also make gnu-wget provide general so it is not written in Makefile
twice.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 75f2be7d50)
2020-04-18 23:36:33 +08:00
Dirk Brenken
ea5c497c23
adblock: filter spurious line endings in sources
* prevent processing of spurious line endings
  that confuses (g)awk

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e291d68055)
2020-04-18 15:36:02 +02:00
Josef Schlehofer
b7e94479a6
git: update to version 2.26.1
Fixes: CVE-2020-5260

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0551a5b030)
2020-04-18 12:21:48 +02:00
Josef Schlehofer
5b38ccf0dd
git: update to version 2.25.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3e0e16ec75)
2020-04-18 12:21:42 +02:00
Josef Schlehofer
cc818e5809
git: update to version 2.25.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 12bd25596c)
2020-04-18 12:21:41 +02:00
Rosen Penev
04d228f9e6
libupnp: remove patch that should not be there
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-18 00:58:59 -07:00
Rosen Penev
3f931a4fd5
minidlna: fix patches from last backport
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-17 20:50:12 -07:00
Rosen Penev
4dc6dfa770
libxslt: update to 1.1.34
Fixes all known CVEs.

Various Makefile cleanups for consistency between packages.

Added PIC explicitly (was implicit). Removed two extra features.

Removed autoreconf and added PKG_BUILD_PARALLEL for faster compilation.

Roughly matched host configure args with target ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b289809735)
2020-04-17 15:34:36 -07:00
Rosen Penev
3385d1fd93
libyaml-cpp: Update to 0.63
Several Makefile cleanups for consistency.

Added ABI_VERSION.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dc41b0a6dc)
2020-04-17 15:33:52 -07:00
Rosen Penev
20d95578ee
wavemon: update to 0.9.1
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34ec8facc5)
2020-04-17 15:23:00 -07:00
Kevin Darbyshire-Bryant
83ff6c38f2
miniupnpd: fix sh syntax error
Add "use_stun" default to prevent sh: out of range error introduced by
c61614a84

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 0f1e7d32af)
2020-04-17 15:21:56 -07:00
Rosen Penev
1fe1c80d66
miniupnpd: convert to procd
Massive cleanup of the shell script. Many issues were fixed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c61614a849)
2020-04-17 15:21:35 -07:00
DENG Qingfang
c02c42849e
miniupnpd: update to 2.1.20191006
Removed upstreamed patch:
100-build-on-OpenWrt.patch

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit fcf72ceec4)
2020-04-17 15:21:25 -07:00
Rosen Penev
66363912db
minidlna: update to latest master
Fixes several issues relating to IPv6.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-17 15:19:50 -07:00
Rosen Penev
a3480774ad
liblz4: Update to 1.9.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a6c88c19d7)
2020-04-17 15:14:14 -07:00
Rosen Penev
2caba16718
liblz4: Remove deprecated utime function
Optionally fixes compilation with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4372ed15cc)
2020-04-17 15:14:07 -07:00
Jan Pavlinec
a38f59d39f
measurement-kit: update to version 0.10.11
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 73a73dfa09)
2020-04-17 15:11:46 -07:00
Bruno Randolf
8561243645
websocketpp: Fix compile with Boost 1.70+
Fix compilation for newer Boost versions, same as in the websocketpp 'develop'
branch: https://github.com/zaphoyd/websocketpp/pull/814

Signed-off-by: Bruno Randolf <br1@einfach.org>
(cherry picked from commit e1bb99f836)
2020-04-17 15:08:38 -07:00
Rosen Penev
7bfe304622
faad2: update to 2.9.1
It seems upstream abandoned sourceforge.

Add license information.

Fix CVE tag. It seems the mass CVE patch placed many wrong CVEs.

Add PKG_BUILD_PARALLEL for faster compilation.

Do not build patented functionality when BUILD_PATENTED is missing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ff62511ab2)
2020-04-17 15:04:35 -07:00
Rosen Penev
f91af9d77b
mpc: update to 0.33
Small Makefile cleanups.

Ran script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4fba03d6d1)
2020-04-17 14:57:55 -07:00
Andre Heider
c80bc7765c
mpc: update to v0.32 and build with meson
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 0469c0715b)
2020-04-17 14:57:36 -07:00
Rosen Penev
a39c4e8e04
libupnpp: link against libm under glibc
Fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4ba3e9cd8d)
2020-04-17 14:52:28 -07:00
Rosen Penev
b3a09f0397
libupnpp: update to 0.17.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e76f23715e)
2020-04-17 14:52:18 -07:00
Rosen Penev
fc2203bb73
libupnpp: Update to 0.17.1
Fixed up license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f6033cf841)
2020-04-17 14:52:11 -07:00
Michael Heimpold
175b26d8bd
u2pnpd: update to 0.5
This update fixes #11452 since LFS detection support was added upstream.
While at, update SPDX license tag to latest standard.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2600255ecb)
2020-04-17 14:50:50 -07:00
Rosen Penev
caf43f42a1
libupnp: update to 1.8.7
remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7ad02ef9e0)
2020-04-17 14:49:43 -07:00
Dirk Brenken
696d9bdf20
adblock: fix gawk incompatibility
* fix gawk incompatibility in reporting

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c11aaead91)
2020-04-17 07:02:15 +02:00
Rosen Penev
b32a40afea
Merge pull request #11843 from neheb/py3
[19.07]meson: use python3
2020-04-15 14:56:27 -07:00
Luiz Angelo Daros de Luca
45ca5d87de ruby: update to 2.6.6
This release includes security fixes, specially:

* CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix)
* CVE-2020-10933: Heap exposure vulnerability in the socket library

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-15 17:07:05 -03:00
Jo-Philipp Wich
84f6fab447 mac-telnet: fix mirror hash
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9de7945541)
2020-04-15 09:56:20 +02:00
Jo-Philipp Wich
2633415b27 mac-telnet: install uci as config file
Also mark it as configuration file while being at it.

Fixes: #11846
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8399121e60)
2020-04-15 09:41:08 +02:00
Jo-Philipp Wich
4418e49a4e mac-telnet: mark uci as conffile
Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9f231909eb)
2020-04-15 09:41:07 +02:00
Francesco G
d12b473616
transmission: add init file STOP directive
Transmission should stop early on system shutdown to avoid
for example fstab unmount disks when transmission is writing.

Signed-off-by: Francesco G <gfrancesco@users.noreply.github.com>
(cherry picked from commit 4fcc44bc89)
2020-04-14 14:21:30 -07:00
Daniel Golle
54372522f6
transmission: add syscalls to seccomp filter
Syscalls observered when running on arm32. Add them to seccomp rule.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3724ed3d68)
2020-04-14 14:20:18 -07:00
Richard Yu
10b93cd531
transmission: add service triggers and bump PKG_RELEASE
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit c6c8ceb0b4)
2020-04-14 14:20:11 -07:00
Richard Yu
0ba4820b83
transmission: update config options
add missing 'peer_id_ttl_hours' and remove 'scrape_paused_torrents'
which is not exist in transmission wiki.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 53fd02d62c)
2020-04-14 14:20:04 -07:00
Rosen Penev
125f6ff9ec meson: use python3
meson supports python 3.5.3 and up only.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-04-14 03:44:34 -07:00
Andre Heider
803c5ef05f
libid3tag: add pkg-config file
Required for meson to find this library in a sane way.

- In OpenWrt 19.07, there were recently updated mpd to its the latest
version available (current 0.21.22) with transition to meson.
Because of that mpd fails to build due to:

Run-time dependency id3tag found: NO (tried pkgconfig)

This commit fixes it

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 1b37a1d2a8)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message for OpenWrt 19.07]
2020-04-14 10:37:48 +02:00
Dirk Brenken
e91c9b8b1c
adblock: fix another reporting bug
* add a final sort step, this fixes dns reporting with
  multiple pcap files as input

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d8d456a55)
2020-04-13 06:20:13 +02:00
Josef Schlehofer
67be4858ca meson: update to version 0.54.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5f19c28578)
2020-04-12 19:47:16 -07:00
Rosen Penev
7a2b9425da ninja: updated to 1.10.0
Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1c4e99cc4e)
2020-04-12 19:46:41 -07:00
Rosen Penev
66f4186547 libmpdclient: update to 2.18
Fix URLs and other small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a5a69057a1)
2020-04-12 19:45:38 -07:00
Andre Heider
ccd2d77540 libmpdclient: build with meson
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 8a7d276618)
2020-04-12 19:45:29 -07:00
Rosen Penev
2a5a89bcc2 mpd: update to 0.21.22
Removed upstreamed patches. Only the first was really needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5e0264be7d)
2020-04-12 19:29:10 -07:00
Rosen Penev
5f7f5a205f mpd: allow AAC decoding with mini variant
This is possible as libfaad no longer has patented functionality based on
BUILD_PATENTED.

AAC is a very popular format, so it makes sense to have some kind of
version included.

The ffmpeg package does not provide and cannot provide AAC decoding
without BUILD_PATENTED, therefore enabled FAAD for all variants.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c7d98c3626)
2020-04-12 19:29:01 -07:00
Rosen Penev
eda73f9279 mpd: link against libpthread under glibc
Fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2b0b0ab7f5)
2020-04-12 19:28:49 -07:00
Rosen Penev
10ddb21781 mpd: update to 0.21.20
Updated patches to latest patchset and removed upstreamed ones.

Ran init script through shellcheck. Restart using SIGHUP.

Added logging from stderr as any kind of logging is missing in --no-daemon
mode.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3be4778840)
2020-04-12 19:28:32 -07:00
Rosen Penev
debe4d4d9c mpd: fix ffmpeg AIFF and AMR support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 96521b6a8d)
2020-04-12 19:28:25 -07:00
Rosen Penev
ab7ae0a657 mpd: replace mpg123 with libmad
libmad is almost half the size of libmpg123. The docoding is done with
integers instead of floats.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5bd4ef4035)
2020-04-12 19:28:16 -07:00
Rosen Penev
8346ace9a6 mpd: fix compilation with uClibc-ng
With mpd's build system, it requires either an iconv built into the libc
or icu. Since uClibc-ng as configured by OpenWrt currently has no iconv,
use icu for it to work around the problem. This is the simplest solution.

Added a patch to use boost's rounding functions. They are more appropriate
and work with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c00f83241b)
2020-04-12 19:27:25 -07:00
Rosen Penev
b061fc6bee mpd: update to 0.21.19
Changed URLs to HTTPS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41834a33ac)
2020-04-12 19:27:17 -07:00
Andre Heider
82ae5f3bc4 mpd: update to v0.21.16 and build with meson
One patch was dropped (probably not required anymore).

Old options have been dropped and new ones added. The order is as found
in meson_options.txt. mpd-mini and mpd-full retained their feature sets.

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 5aaa1e7da4)
2020-04-12 19:27:06 -07:00
Jeffery To
fc2a591b53 treewide: Use default PKG_BUILD_DIR when possible
This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.

Specifically, the line is removed if the assigned value is:

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

  The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
  if it is set, so now this is identical to the default value.

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)

  if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
  the same as the previous case

* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)

  This is the same as the default PKG_BUILD_DIR when there is no
  BUILD_VARIANT.

* $(BUILD_DIR)/[name]-$(PKG_VERSION)

  where [name] is a string that is identical to PKG_NAME

[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 53e1692ae9)
2020-04-12 19:24:15 -07:00
Rosen Penev
3c59551d85 nsd: Update to 4.2.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6ba95fdac4)
2020-04-12 19:19:43 -07:00
Rosen Penev
048937c407 xmlrpc-c: Update to 1.51.03
Small Makefile reorganization.

Switch BUILD_PARALLEL to 1. Seems to work now.

Added nanosleep patch that replaces usleep usage.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 473356a562)
2020-04-12 19:18:10 -07:00
Jianhui Zhao
59d23790e4 libuwsc: update to 3.3.2
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
(cherry picked from commit 46ec912121)
2020-04-12 19:17:05 -07:00
Val Kulkov
2ec415e686 monit: update to the latest release
Remove SSL patch that has been made obsolete by upstream updates.

Update monit package to the latest release: v5.26.0. This release
supports TLSv1.3 and fixes a few bugs and vulnerabilities.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
(cherry picked from commit 9980d766ac)
2020-04-12 19:15:43 -07:00
Etienne Champetier
9eca2ae771 monit: enable / fix IPv6 detection during build
thanks to @val-kulkov for noticing

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 7cc74e4d8b)
2020-04-12 19:15:34 -07:00
Jo-Philipp Wich
4e3d6eca20 nlbwmon: update to latest Git HEAD
34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 53c48fae15)
2020-04-11 23:24:18 +02:00
Dirk Brenken
31412a2b4d
adblock: update 4.0.4
* add 'ca-bundle' dependency
* fix a sort bug in report engine
* fix potential bugs in the f_extconf function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d6634b611a)
2020-04-11 21:54:51 +02:00
Hannu Nyman
2944d7142d
Merge pull request #11820 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: bugfix: memory leak
2020-04-11 10:48:23 +03:00
Stan Grishin
210b760d3e https-dns-proxy: bugfix: memory leak
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-11 00:25:26 +00:00
Jo-Philipp Wich
4542b5219a nlbwmon: update to latest Git HEAD
e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d81d777a0f)
2020-04-11 00:31:18 +02:00
DENG Qingfang
559ff1828d nlbwmon: bump to latest git
e921ca0a Add further commonly used protocols to the protocol file.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5e140462e4)
2020-04-11 00:31:18 +02:00
Richard Yu
45bb9056ae nlbwmon: add procd reload trigger for nlbwmon config
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit d551758310)
2020-04-11 00:31:18 +02:00
Rosen Penev
6199615960 mosh: use mips16 and remove configure patch
MIPS16 is not needed here.

Removed configure patch and replaced with a configure var.

Removed autoreconf as configure is no longer being patched.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1ead64489b)
2020-04-08 01:39:06 -07:00
Rosen Penev
376d0b76fd mosh: Fix compilation with libcxx
Partial backport of upstream patch.``

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3bfbb7d1db)
2020-04-08 01:38:59 -07:00
Rosen Penev
913f95a4bd mosh: Add protobuf host build dependency
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fcdd1fb57)
2020-04-08 01:38:50 -07:00
Jakub Tymejczyk
d0bf136301 mosh: add package
Maintainer: Jakub Tymejczyk <jakub@tymejczyk.pl>
Compile tested: ramips, Xiaomi Router 3G, fc54256
Run tested: ramips, Xiaomi Router 3G, 0f54d96

Description:
Mosh is "Remote terminal application that allows roaming, supports
intermittent connectivity, and provides intelligent local echo and line
editing of user keystrokes".

Project's site: https://mosh.org

Makefile and patch taken from: https://github.com/mchwalisz/mosh-openwrt
updated by me

Signed-off-by: Jakub Tymejczyk <jakub@tymejczyk.pl>
(Makefile cleanup and size optimizations)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ac5cf0b98)
2020-04-08 01:38:43 -07:00
Dirk Brenken
9e581d5785
Merge pull request #11800 from dibdot/adblock-19.07
[19.07] adblock: release 4.0.3
2020-04-08 09:36:03 +02:00
Dirk Brenken
5e69c99619
adblock: release 4.0.3
* new package dependencies: coreultis-sort and
  a download util with SSL support
* focus on speed (multicore-support) to handle quite big lists
* include more than 40 pre-configured blocklist sources in a compressed
  json file (/etc/adblock/adblock.sources.gz)
* dynamic SafeSearch support for google, bing, duckduckgo,
  yandex, youtube and pixabay (CNAME (bind) & IP (dnsmaq, unbound))
* DNS backend autodetection
* Download Utility autodetection
* Report Interface autodetection
* Easy cron wrapper to set an adblock related auto-timer for
  automatic blocklist updates
* raw domain/blocklist support (e.g. for dnscrypt support)
* re-add restrictive Jaillist support
* rework online doc
* Complete LuCI rewrite (migrated to client side JS)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-04-08 07:02:40 +02:00
Rosen Penev
f207f2bf3b
Merge pull request #11802 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
2020-04-07 18:39:30 -07:00
Stan Grishin
af1e0a533a simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-04-07 21:55:37 +00:00
Hannu Nyman
b7f2b61da4 nano: update to 4.9.2
Update nano editor to version 4.9.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f11833d46c)
2020-04-07 18:06:37 +03:00
Jan Pavlinec
c5a7fba5ce
graphicsmagic: update to version 1.3.35 (security fix)
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 171993f5a5)
2020-04-06 17:09:57 -07:00
Rosen Penev
574a5af56c
Merge pull request #11772 from micmac1/19.07-apache-2443
[19.07] apache: security bump to 2.4.43
2020-04-06 14:08:34 -07:00
Rosen Penev
fa572d1358
meson: update to 0.53.2
Switched to PyPI.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ccb70a3407)
2020-04-06 22:03:06 +02:00
Rosen Penev
75c1baa9fd
meson: update to 0.53.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 66bf801f3a)
2020-04-06 22:03:01 +02:00
Andre Heider
c7e1a34531
meson: fix building host binaries with ccache
With CONFIG_CCACHE, $HOSTCC is 'ccache gcc' while $TARGET_CC points to a
single wrapper script. Compiling target binaries with ccache works, but
doesn't for host binaries, because we need to supply an argv array for
argc > 1 in the meson cross file.

Always pass an array for the c and c++ compiler, and while at it, do it
for the target as well - just to be on the safe side if that ever
changes.

Fixes #10982.

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit f5c8565d1b)
2020-04-06 22:02:48 +02:00
Javier Marcet
eeeadde02c
python-requests: update to version 2.23.0
Package python-idna was updated 2 weeks ago in OpenWrt 19.07.
It causes an issue:

pkg_resources.ContextualVersionConflict: (idna 2.9 (/usr/lib/python3.7/site-packages), Requirement.parse('idna<2.9,>=2.5'), {'requests'})

This is fixed in 2.23.0.

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit d62e8b9f3c)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
2020-04-06 18:16:17 +02:00
Josef Schlehofer
ca555a0549
dnscrypt-proxy2: update to version 2.0.42
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 296a58491b)
2020-04-06 03:09:11 +02:00
Sebastian Kemper
8a4d0b206d apache: security bump to 2.4.43
This minor version bump fixes:

CVE-2020-1934
CVE-2020-1927

Upstream added cross-compile compatibility to apxs, so we can drop a sed
script. Upstream also added the OpenWrt layout, so we can drop our local
copy.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-04-05 21:08:04 +02:00
Hannu Nyman
626bda56d0 nano: update to 4.9.1
Update nano editor to version 4.9.1

 2020.03.31 - GNU nano 4.9.1 "Sapperdeflap"
 Two bugs introduced in version 4.9 are fixed: the cursor
 getting misplaced when undoing line cuts, and filtering
 of the whole buffer to a new buffer not working.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f5c47a2606)
2020-04-05 19:23:20 +03:00
Hannu Nyman
a10dd9369b
Merge pull request #11755 from gladiac1337/haproxy-2.0.14-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.14
2020-04-03 16:46:56 +03:00
Christian Lachner
7e48c36cc9 haproxy: Update HAProxy to v2.0.14
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.14.html)
- This fixes CVE-2020-11100 (http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=b9cac598021e2b0d4ae2cfecf9825a3469328093)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-04-03 09:32:58 +02:00
Hannu Nyman
c8eb843fba
Merge pull request #11729 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: separation between auto/all proto; mwan3 compatibility; README update
2020-04-01 09:07:01 +03:00
Stan Grishin
153892633c vpn-policy-routing: separation between auto/all proto; compatibility with mwan3; README update
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-31 23:05:46 +00:00
Nikos Mavrogiannopoulos
92a4c69336 gnutls: updated to 3.6.13
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-03-31 23:06:15 +02:00
Hannu Nyman
0d9a89370d
Merge pull request #11699 from stangri/19.07-simple-adblock
[19.07] simple-adblock: support multiple dnsmasq instances + internal refactoring
2020-03-29 10:00:52 +03:00
Stan Grishin
9923323db1 simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-29 05:13:18 +00:00
Rosen Penev
7fba38e3f6
avahi: update to 0.8
Clean up Makefile slightly.

Update configure options for the new version.

Remove first patch and update the other one.

Use a different solution for the stack protector on certain platforms.

Run script through shellcheck. Small quote fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9290d41077)
2020-03-27 19:48:53 -07:00
Rosen Penev
0da04e56db
avahi: convert to procd
Add license information.

Small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f41612bc9c)
2020-03-27 19:48:47 -07:00
Rosen Penev
97a0abf467
avahi: Fix pkgconfig files to be cross compile friendly
libdir should not point to the host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 736ebb16b6)
2020-03-27 19:48:40 -07:00
Rosen Penev
ca7da040e7
flac: Update to 1.33
Some adjustments to the configure flags.

Removed upstreamed patches.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b82bdd3f0e)
2020-03-27 19:47:49 -07:00
Rosen Penev
4bd47a5eb6
msmtp: remove myself as maintainer
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 842b9f0f4d)
2020-03-27 19:41:35 -07:00
Rosen Penev
7ccf6f2356
msmtp: Update to 1.8.7
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9a67d3bfb3)
2020-03-27 19:41:10 -07:00
Rosen Penev
efab88dc3a
msmtp: Update to 1.8.6
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 04b9f209a0)
2020-03-27 19:40:19 -07:00
Rosen Penev
97fcfe9554
mpg123: Update to 1.25.13
Fixed license information.

Small Makefile rearrangements for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaca589342)
2020-03-27 19:37:51 -07:00
Rosen Penev
2dbdb7de3f
screen: update to 4.8.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 318d2dd74b)
2020-03-27 19:36:13 -07:00
Rosen Penev
c133dc75de
screen: Update to 4.7.0
Remove all patches. They have all been merged upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 29b39264d6)
2020-03-27 19:36:13 -07:00
Rosen Penev
a677166dd9
zstd: Fix compilation with uClibc-ng
Upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54266c99b2)
2020-03-27 19:33:20 -07:00
Rosen Penev
6c5b9424e3
zstd: Update to 1.4.4
More speed improvements.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaccad695e)
2020-03-27 19:33:13 -07:00
Hannu Nyman
18efffaf9d nano: update to 4.9
Update nano editor to version 4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 09fd4445b3)
2020-03-26 21:38:57 +02:00
Jan Pavlinec
c983b08446 tor: update to version 0.4.2.7 (security fix)
Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-03-26 08:52:55 -10:00
Hannu Nyman
fb0996711e collectd: disable onewire plugin, BROKEN since 2009
Mark the onewire plugin as disabled, as the plugin
has been marked BROKEN since it was introduced in 2009 by
https://git.openwrt.org/?p=openwrt/svn-archive/packages.git;a=commitdiff;h=0de38b88d6ba8c52b8386d3059baba7dca22961f

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 286557e906)
2020-03-26 20:10:12 +02:00
Hannu Nyman
afccb8069f collectd: disable dpdk_telemetry module
Explicitly disable the new dpdk_telemetry module to fix
compilation in buildbot.
(other dpdk modules are aleady disabled)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b936fc4e0d)
2020-03-26 20:09:59 +02:00
Hannu Nyman
45dfd3b51e collectd: update to 5.11.0
* Update collectd to version 5.11.0
* Refresh patches

Release notes:
https://github.com/collectd/collectd/releases/tag/collectd-5.11.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 1d11a0c892)
2020-03-26 20:09:24 +02:00
Toke Høiland-Jørgensen
9ba7b1799c acme: Backport two bug fixes from master
This backports the following bug-fix commits from the master branch:

c6b4d7f367 ("acme: Include empty 'dns' config option by default")
983cc995a3 ("acme: Correctly handle domain state dir for ECC certificates")

Fixes #11675.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2020-03-26 16:39:10 +01:00
Yousong Zhou
40c5dd0ba1 openvswitch: depend on IPV6 for intree kmods
Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 88dcd09487)
2020-03-26 15:54:43 +08:00
Yousong Zhou
ec0a9d4d01 openvswitch: rework skipping intree kmod build for unsupported kernels
This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.

Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.

One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built.  This may contradict expectation if the warning was not noticed
by them

Resolves openwrt/packages#9274

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522)
2020-03-26 15:54:13 +08:00
Rosen Penev
d8c836f6a5 fish: update to 3.1.0
Remove upstreamed patches.

Added missing libatomic dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bee0bfe862)
2020-03-25 21:08:46 -07:00
Rosen Penev
aae54e90ca fish: Fix compilation with libcxx
cxxabi.h is a useless header that libcxx does not include.

Remove indent on postint script. It should be on the same as the above
section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a135cbb9f1)
2020-03-25 21:08:38 -07:00
Rosen Penev
2ea76a6767 fish: Convert to CMake
CMake is faster and allows to simplify the Makefile slightly. It also
creates a slightly smaller package for some reason.

Fixed license information.

Ran postinst through shellcheck. It was using bashisms.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from faa8962178)
2020-03-25 21:08:13 -07:00
Marc Benoit
33eda8575b syncthing: configuration cleanup & hardening
Run the service under an unprivileged
user account

The following parameters are now configurable
  niceness
  max concurrency (defaults to number of CPUs)
  user

Added flags "-no-browser"
Disabled in-place upgrades (disabled in the
build already)

Redirected stderr/stdout to syslog

Added support for "reload_config"

Increased "term_timeout" to 15s to give it
plenty of time to shut down gracefully

Properly handled non-existing directories

Removed a softlink that assumes a specific naming
convention in syncthing

Added a comment that using external storage is a
recommend configration

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
[increased package release]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a9443eb0eb)
Tested-by: Marc Benoit <marcb62185@gmail.com>
2020-03-25 08:28:24 -10:00
Paul Spooren
e4c685e5bd syncthing: bump to 1.4.0
Release information:
https://github.com/syncthing/syncthing/releases/tag/v1.4.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 3a651638ce)
Tested-by: Marc Benoit <marcb62185@gmail.com>
2020-03-25 08:28:24 -10:00
Paul Spooren
b8dafa4750 syncthing: fixup version detection
Since upstream commit dc92994 the LDFLAGS used for settings the version
(and build host and user) changed resulting in "unknown" versions in
syncthing.

Correct version detection is important for syncthing to assure
compatibility with other running instances. The "unknown" version fails
to communicate and sync with correctly compiled instances.

This patch updates the syncthing Makefile to inject the correct
variables and thereby fixes the version detection in syncthing.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b85e387cc2)
Tested-by: Marc Benoit <marcb62185@gmail.com>
2020-03-25 08:28:24 -10:00
Sven Roederer
f7308a55fa strongswan: add conffiles for swanctl util
Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb74)
2020-03-25 19:26:11 +02:00
Eneas U de Queiroz
ba76d4274e strongswan: quote 'comment' parameter in Config.in
Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc2)
2020-03-25 19:26:11 +02:00
Karl Palsson
1cd3f5fdc2 net/pagekitec: support status reporting json file
Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:47 +00:00
Karl Palsson
1688807f18 net/pagekitec: Update to newest version
Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-03-24 13:18:28 +00:00
Hannu Nyman
407438796b
Merge pull request #11647 from jefferyto/byobu-5.133-openwrt-19.07
[openwrt-19.07] byobu: Update to 5.133
2020-03-23 21:11:09 +02:00
Hannu Nyman
97e68c1cbd
Merge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07
[openwrt-19.07] python-pyasn1-modules: Update to 0.2.8
2020-03-23 21:10:54 +02:00
Hannu Nyman
3c6d37bfa3
Merge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07
[openwrt-19.07] python-idna: Update to 2.9
2020-03-23 21:10:36 +02:00
Hannu Nyman
72ccf67264
Merge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07
[openwrt-19.07] python-pycparser: Update to 2.20
2020-03-23 21:10:12 +02:00
Hannu Nyman
2c86818705
Merge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07
[openwrt-19.07] python-enum34: Update to 1.1.10
2020-03-23 21:09:57 +02:00
Hannu Nyman
897b76d324
Merge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07
[openwrt-19.07] python-zope-interface: Update to 4.7.2, refresh patch
2020-03-23 21:09:08 +02:00
Hannu Nyman
72731c08c8
Merge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07
[openwrt-19.07] python-twisted: Fix several request smuggling attacks
2020-03-23 21:08:12 +02:00
Hannu Nyman
7fa2405217
Merge pull request #11636 from jefferyto/golang-1.13.9-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.9
2020-03-23 21:04:56 +02:00
Jeffery To
34a77ee37a byobu: Update to 5.133
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 847d9f18cc)
2020-03-24 01:55:00 +08:00
Jeffery To
db63e12089 python-pyasn1-modules: Update to 0.2.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a6f1e7689b)
2020-03-24 01:49:04 +08:00
Jeffery To
4da9026f2a python-idna: Update to 2.9
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 111d7ae088)
2020-03-24 01:40:32 +08:00
Jeffery To
a6b32c675c python-pycparser: Update to 2.20
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 931dcfe3aa)
2020-03-24 01:34:49 +08:00
Jeffery To
364c24dd2b python-enum34: Update to 1.1.10, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 48af5b2abb)
2020-03-24 01:27:22 +08:00
Jeffery To
da05e08291 python-enum34: Update to 1.1.9, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87150b43a8)
2020-03-24 01:26:52 +08:00
Jeffery To
4e5642de1a python-zope-interface: Update to 4.7.2, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a178662fce)
2020-03-24 01:08:08 +08:00
Jeffery To
261d6cbaaa python-twisted: Fix several request smuggling attacks
This backports a patch[1] to fix several request smuggling attacks.

This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

[1]: 4a7d22e490

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-03-23 23:22:39 +08:00
Jeffery To
0b654d52e9 golang: Update to 1.13.9
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-03-23 21:55:51 +08:00
Josef Schlehofer
8677a0e3e5
libredblack: pass CFLAGS properly
Fixes build with enabled ASLR PIE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a615a821d9)
2020-03-23 12:32:11 +01:00
Hannu Nyman
ad782ffff6
Merge pull request #11615 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: support for dnsmasq noresolv option
2020-03-21 09:47:01 +02:00
Rosen Penev
fc16e964c0
Merge pull request #11617 from nxhack/19_07_icu_66_1
[openwrt-19.07] icu: update to 66.1 & fix CVE-2020-10531
2020-03-20 16:01:09 -07:00
Stan Grishin
6abb6bb2a0 https-dns-proxy: support for dnsmasq noresolv option
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-03-20 21:22:39 +00:00
Hirokazu MORIKAWA
2509b0e894 icu: update to 66.1
ICU 66 updates to Unicode 13, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 36.1 with Unicode 13 updates and bug fixes.

Create symbolic link to current version.

FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-03-19 16:26:30 +09:00
Josef Schlehofer
df7e27dfed
youtube-dl: update to version 2020.3.8
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5d565db222)
2020-03-19 00:07:19 +01:00
Karel Kočí
0b81029405
haveged: move init script from 13 to 01
This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 1ef38f45d9)
2020-03-17 08:53:35 +01:00
Rosen Penev
2085b990ff
libarchive: update to 3.4.2
Switch to normal tarballs. Remove autoreconf as a result.

Several Makefile cleanups for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c22dd1bf74)
2020-03-16 22:20:43 +01:00
Hannu Nyman
8bd2d5e538
Merge pull request #11566 from BKPepe/python3-update-19.07
[19.07] python3: update to version 3.7.7
2020-03-16 20:22:12 +02:00
Yousong Zhou
f043afe468 openvswitch: fix PIE build against 4.14 kernel
Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437)
2020-03-16 15:30:22 +08:00
Josef Schlehofer
5827a1ed2c
x264: add CONFIGURE_VARS and MAKE_FLAGS when NASM is not selected
- Remove dot in TITLE
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit faac2352e2)
2020-03-15 22:08:40 +01:00
Rosen Penev
5746e4a2b3
nfs-kernel-server: Fix compile with uClibc-ng
NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e)
2020-03-14 17:36:20 -07:00
Martin Schiller
17924b1283
xtables-addons: disable ASLR PIE
This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60)
2020-03-14 02:51:44 +01:00
Josef Schlehofer
fd4da96672
python3: update to version 3.7.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-14 00:47:42 +01:00
Alexandru Ardelean
3b9648db39 django: bump to version 1.11.29
Includes several CVE fixes.
- CVE-2020-7471 in 1.11.28
- CVE-2020-9402 in 1.11.29

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-03-11 09:28:32 +02:00
Rosen Penev
55176058f5
Merge pull request #11540 from neheb/softee
[19.07]softethervpn: Update to rtm version 4.29-9680
2020-03-10 20:29:30 -07:00
Rosen Penev
dc524aa2aa
softethervpn: disable PIC
Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e269)
2020-03-09 13:57:45 -07:00
Rosen Penev
381153d597
softethervpn: Fix openssl header patch
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335)
2020-03-09 13:57:32 -07:00
Rosen Penev
aba0dd8729
softethervpn: Add missing OpenSSL header
Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f)
2020-03-09 13:57:12 -07:00
Philipp Schuster
f09028fcdb
softethervpn: Update to rtm version 4.29-9680
Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b)
2020-03-09 13:56:40 -07:00
Rosen Penev
b546ff127c
stubby: fix init script
The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c647)
2020-03-09 13:55:24 -07:00
Rosen Penev
c5219c8af3
stubby: makefile and init script cleanup
Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf5225323)
2020-03-09 13:55:23 -07:00
Karel Kočí
9b64ae0bad
btrfs-progs: fix check for btrfs in btrfs scan
The previous implementation always succeeded so no scan was performed.
This now fixes that and it correctly scans for BTRFS  devices if BTRFS
support is in kernel.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2020-03-09 15:29:16 +01:00
Josef Schlehofer
2f5fce8209
syslog-ng: update to version 3.26.1
- Bump version also in the config file
- Move logread to /sbin location instead of /usr/sbin
Because package logd in OpenWrt's ubox Makefile uses /sbin folder and LuCI has
the same path hardcoded in
modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json and using
different location results that LuCI is not able to load log data as it
is not found.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fe165eeb94)
2020-03-08 07:54:25 +01:00
Hannu Nyman
79186664e2
Merge pull request #11526 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.7
2020-03-07 15:51:09 +02:00
Rosen Penev
43c5aba9e6
Merge pull request #11524 from micmac1/1907arc_aio2
[19.07] mariadb: add dependency on libaio for arc as well
2020-03-07 02:18:23 -08:00
W. van den Akker
62d9ba9a02
Shorewall6: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:40:39 +01:00
W. van den Akker
e14ee24803
Shorewall: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:40:18 +01:00
W. van den Akker
84cca11fa0
Shorewall6-lite: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:58 +01:00
W. van den Akker
803ab2f445
Shorewall-lite: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:35 +01:00
W. van den Akker
7b67a0b91d
Shorewall-core: Bump to 5.2.3.7.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-03-07 10:39:17 +01:00
Sebastian Kemper
c84786237c mariadb: add dependency on libaio for arc as well
Now that libaio compiles on arc targets we need to add the dependency to
libaio on these targets as well.

resolves #9298

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-03-07 10:09:53 +01:00
Josef Schlehofer
b2f00d8b7e
youtube-dl: update to version 2020.3.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-06 10:42:52 +01:00
Josef Schlehofer
c4795d941d
youtube-dl: update to version 2020.3.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-06 10:42:45 +01:00
Etienne Champetier
c81415a803
Merge pull request #11501 from Bloup1net/phantap19.07
phantap: add to 19.07
2020-03-04 20:25:07 -05:00
Hirokazu MORIKAWA
408f666e64 libuv: update to 1.34.2
https://github.com/openwrt/packages/pull/11320#issuecomment-594032207

luv, libwebsockets, ttyd, netdata are build OK.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-03-04 11:14:26 -08:00
Jo-Philipp Wich
b97f33e026 cgi-io: fix compilation against uClibc
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ed965cf16f)
2020-03-04 09:52:49 +01:00
Jo-Philipp Wich
68aa303efb cgi-io: use O_TMPFILE for uploads and attempt to directly link target file
Create an anonymous inode in /tmp using O_TMPFILE and attempt to link the
file in place using linkat(). Only fall back to the old file copy when
linking the tempfile fails.

Avoids double memory use if both the temporary upload file and the
destination file are located in /tmp.

Ref: https://github.com/openwrt/luci/issues/3654
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f4a7e9532)
2020-03-04 09:52:49 +01:00
Jo-Philipp Wich
7f00eebab0 cgi-io: use dynamic memory for post decoding, support proc files
Allocate dynamic buffer memory for decoding post data and allow post
requsts up to 128KB compared to the previos 1KB limit.

Also support downloading /proc and /sys files by falling back to
chunked transfer encoding when the file size cannot be determined.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 39087eba18)
2020-03-04 09:52:49 +01:00
Hannu Nyman
ce9229d2e0
Merge pull request #11500 from fantom-x/irqbalance-backport
Irqbalance: backport to 19.07
2020-03-04 07:24:10 +02:00
Marc Benoit
bbc1b30254 irqbalance: support reload_config & start later
Added support for reload_config

This service does not need to start so early (even
before the netwrok is up). Start it after
the device is mostly up and operational.

Compile-tested on: ipq806x
Runtime-tested on: ipq806x

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b6078559cd)
2020-03-03 18:05:52 -05:00
Marc Benoit
cdd892c9b3 irqbalance: add support of interval and banirq
Added the ability to change sampling interval
and provide a list of IRQ's to ignore
via /etc/config/irqbalance

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b7a99b2334)
2020-03-03 18:05:36 -05:00
Marc Benoit
cceb2c3adb irqbalance: upgrade to 1.6.0
Upgraded from 1.2.0 to 1.6.0 to pick up
all the latest fixes and improvements

irqbalance made glib2 mandatory since 1.3.0, but is
using very little of it. glib2 linked statically
to minimize the impact.

1.2.0 size: 33,619
1.6.0 size: 99,539

~# irqbalance --version
	irqbalance version 1.6.0

~# ldd /usr/sbin/irqbalance
	/lib/ld-musl-armhf.so.1 (0xb6f5f000)
	libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb6f43000)
	libc.so => /lib/ld-musl-armhf.so.1 (0xb6f5f000)

~# opkg info irqbalance
	Package: irqbalance
	Version: 1.6.0-6
	Depends: libc
	Status: install user installed
	Architecture: arm_cortex-a7_neon-vfpv4
	Installed-Time: 1582839249

Compile-tested: ipq806x/R7800 & ipq40xx/GL-B1300
Run-tested:     ipq806x/R7800 & ipq40xx/GL-B1300

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit bdcb872a40)
2020-03-03 18:04:56 -05:00
Diana Dragusin
801a908a17 phantap: add to 19.07
Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>
2020-03-03 03:42:33 -08:00
Rosen Penev
ca93667c8f
Merge pull request #11482 from BKPepe/libaio_update
[OpenWrt 19.07] libaio: Update to 0.3.112
2020-03-02 12:02:01 -08:00
Rosen Penev
61b732e62f
libaio: Update to 0.3.112
Replace inactive maintainer with myself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7cd204e99e)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[compile tested on powerpc_8540]
2020-03-02 16:24:08 +01:00
Karl Palsson
abdbeb350e mosquitto: bump to 1.6.9
Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/

Nothing of particular relevant to OpenWrt, just general fixes.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2020-03-02 10:04:06 +00:00
Marc Benoit
a7d3b91ce9 syncthing: enable via config, lower priority, cleanup
Added the ability to enable/disable via a config file;
the default is enabled for backwards compatibility.

This is an additional service, so running it the
same priority as dnsmasq, etc does not make sense.

Added USE_PROCD=1

"done" starts at "START=95", so this should start earlier

Added STOP=10 to stop syncthing early

Compile-tested on: ipq806x, ipq40xx
Runtime-tested on: ipq806x, ipq40xx

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit 6f6877460a)
2020-03-01 15:36:00 -10:00
Rosen Penev
0b9578a1de
Merge pull request #11472 from fantom-x/syncthing-19.07
syncthing: backport to 19.07
2020-03-01 16:26:17 -08:00
Paul Spooren
653014528d syncthing: bump to 1.3.4
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 7c1d6571ca)
Tested-By: Marc Benoit <marcb62185@gmail.com> [19.07: R7800/GL-B1300]
2020-03-01 12:21:01 -05:00
Paul Spooren
56af7bcf19 syncthing: add package
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 373d3b2420)
Tested-By: Marc Benoit <marcb62185@gmail.com> [19.07: R7800/GL-B1300]
2020-03-01 12:20:21 -05:00
Karl Palsson
99efce0cd2 pagekite: add simple websockets and update syntax
Syntax now matches preferred upstream style.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson
42c7a7adbe pagekite: avoid redundant information in syslog
Patch from upstream: 7b45878185

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Karl Palsson
13e8c6ffed pagekite: bump to v0.91.200218
pings the front ends less aggressively, reducing cpu usage on the host.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2020-02-26 11:45:08 +00:00
Nikos Mavrogiannopoulos
c3ff03a34c ocserv: updated to 0.12.6
Fixes: #11174

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-02-26 06:07:40 +01:00
Nikos Mavrogiannopoulos
8b1101bbde gnutls: updated to 3.6.12
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-02-26 06:06:57 +01:00
Michael Heimpold
95c72d8aba php7: update to 7.2.28
This fixes:
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-25 22:35:15 +01:00
Yousong Zhou
61970ece51 xl2tpd: fix building failure caused by pfc
Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b)
2020-02-25 11:57:24 +08:00
Yousong Zhou
7fe2073756 xl2tpd: bump to version 1.3.15
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4)
2020-02-25 11:57:24 +08:00
Hannu Nyman
e9ea875a1b zip: remove package
zip has 12 year old source code that would require work to make
the binary actually work.

> root@router1:/# zip
> zip error: Not supported (uzoff_t not same size as zoff_t)

As the binary does not work, lets remove the package to
avoid confusion for the end-users.

Reference to #10985 and #11089 as well as
https://github.com/openwrt/openwrt/commit/ad8c2d6099a7da5192ee6e2c52a8303642271

Adapted from: c1201a999b

(note: The package was renamed in master from zip to infozip
a few weeks ago due to buildbot's relutance to compile zip in
master and 19.07 ever since host zip was added as a build tool.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-02-23 06:20:35 +02:00
Josef Schlehofer
11b2c1ea1e
nnn: update to version 3.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2078a7707b)
2020-02-22 15:53:39 +01:00
Josef Schlehofer
47dc62ba2d
nnn: update to version 2.9
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d511e2d863)
2020-02-22 15:53:34 +01:00
Josef Schlehofer
201ec14702
youtube-dl: update to version 2020.2.16
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 983be45ad7)
2020-02-22 15:50:28 +01:00
Josef Schlehofer
7153a1f7f5
youtube-dl: update to version 2020.1.24
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f0390a40b9)
2020-02-22 15:50:22 +01:00
Josef Schlehofer
3a4d88f5dc
youtube-dl: update to version 2020.1.15
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[use pypi.mk]
(cherry picked from commit 588ec4add4)
2020-02-22 15:49:40 +01:00
Marcos Del Sol Vives
2c0a307eeb acme: update to 2.8.5
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
[ fix for 19.07 branch ]
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2020-02-19 15:40:52 +01:00
Rosen Penev
e29cc586f2
Merge pull request #11381 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.6
2020-02-18 14:50:45 -08:00
W. van den Akker
1c7b7cfdfa
Shorewall6: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:26 +01:00
W. van den Akker
481e63febb
Shorewall: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:36:09 +01:00
W. van den Akker
4f0e5c49d3
Shorewall6-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:50 +01:00
W. van den Akker
7c8f5fd70b
Shorewall-lite: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:35:33 +01:00
W. van den Akker
1fbf3e1795
Shorewall-core: Bump to version 5.2.3.6
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-02-18 16:34:58 +01:00
Rosen Penev
3cf36f1458
Merge pull request #11375 from jefferyto/golang-1.13.8-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.8
2020-02-18 02:18:48 -08:00
Jeffery To
12b84e6acd golang: Update to 1.13.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-02-18 17:59:12 +08:00
Rosen Penev
156dd4ad0f
Merge pull request #11360 from gladiac1337/haproxy-2.0.13-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.13
2020-02-17 18:28:59 -08:00
Christian Lachner
2f5b209873 haproxy: Update HAProxy to v2.0.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-02-17 11:00:48 +01:00
Rosen Penev
bd24f9bb34
ffmpeg: disable x86 asm for old CPU types
This is a workaround for NASM being totally broken.

I have two patches, one for master and another for 19.07 that upstream is
not merging.

https://patchwork.ozlabs.org/patch/1221696/
https://patchwork.ozlabs.org/patch/1221697/

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 013162d079)
2020-02-16 19:51:45 -08:00
Ian Leonard
dbef699276
ffmpeg: update to 3.4.7
Signed-off-by: Ian Leonard <antonlacon@gmail.com>
(cherry picked from commit 948c4da0af)
2020-02-16 19:51:37 -08:00
Rosen Penev
c53055aa1e
ffmpeg: Fix fdkaac patches
The patch created patch files in the ffmpeg build directory, which did
absolutely nothing. Properly backported them.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9af78c5498)
2020-02-16 19:51:22 -08:00
Rosen Penev
9d6855be1f
ffmpeg: Fix pkgconfig files to be more cross compile friendly
Before:

prefix=/usr
exec_prefix=${prefix}
libdir=/usr/lib
includedir=/usr/include

After:

prefix=/usr
exec_prefix=/usr
libdir=${exec_prefix}/lib
includedir=${prefix}/include

Numbered the other patch file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7477663489)
2020-02-16 19:50:47 -08:00
Rosen Penev
1e97faf115
zabbix: remove configure patch
Allows removing autoreconf.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f846ced1c8)
2020-02-16 19:47:33 -08:00
Rosen Penev
2058e86fad
zabbix: Fix compilation with uClibc-ng
This is similar to a patch that was previously carried.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8bc32479ea)
2020-02-16 19:47:25 -08:00
Rosen Penev
403c981699
Merge pull request #11356 from neheb/boostkkk
[19.07]boost: reintroduce uClibc-ng patch
2020-02-16 07:36:34 -08:00
Michal Hrušecký
2b15682dad
sshpass: add new package
Signed-off-by: Michal Hrušecký <michal.hrusecky@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 18ccf174d6)
2020-02-16 12:25:35 +01:00
Rosen Penev
76947a8be5 boost: reintroduce uClibc-ng patch
It's all fixed upstream. Backported a combination of three patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-16 00:19:30 -08:00
Rosen Penev
78d7c8aef5
knot: Do not try to build under ARC
liburcu does not support ARC.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ec47ca837)
2020-02-15 22:07:30 -08:00
Rosen Penev
b4febf32c5
liburcu: Don't build under ARC, not even InstallDev
This should finally get rid of buildbot failures.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 13810e0980)
2020-02-15 22:07:11 -08:00
Alexander Ryzhov
fc59357297
perl: define $sysroot for extensions
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fed1b3b11b)
2020-02-15 22:05:28 -08:00
Rosen Penev
5c856ff558
perl: Don't build InstallDev under ARC
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2628584ffd)
2020-02-15 22:05:20 -08:00
Rosen Penev
c7e1106d18
nss: Fix compilation with uClibc-ng
_GNU_SOURCE is needed for fdopen, sigaction, and probably more.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7940093fd0)
2020-02-15 22:04:23 -08:00
Rosen Penev
bdca0e7bf8
measurement-kit: Fix compilation with uClibc-ng
The define in the codebase is wrong. Fixed in the Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a5b7a461d3)
2020-02-15 22:03:09 -08:00
Jan Pavlinec
8e746461f8
measurement-kit: update to version 0.10.9
Changes:
-enable geoip
-add geoip db package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3ee1b8eae5)
2020-02-15 22:02:53 -08:00
Rosen Penev
659b1b8074
boost: Fix embarassing ARC typo
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-02-15 21:55:30 -08:00
Rosen Penev
8640d243ee
Merge pull request #11296 from Andy2244/samba4-update-4.11.6-(19.07)
[19.07] samba4: update to 4.11.6, add new UCI option
2020-02-10 13:29:10 -08:00
Rosen Penev
a0c00a2139
Merge pull request #11297 from Andy2244/ksmbd-update-3.1.3-(19.07)
[19.07] ksmbd: update to 3.1.3, ksmbd-tools: update to 3.2.1, add smb1 support, add avahi support package
2020-02-10 13:28:43 -08:00
Andy Walsh
f5be481a4f ksmbd: update to 3.1.3, ksmbd-tools: update to 3.2.1, add smb1 support, add avahi support package
* ksmbd: update to 3.1.3
* ksmbd-tools: update to 3.2.1
* add new package build option "KSMBD_SMB_INSECURE_SERVER"
* enable smb1 support to kmod by default
* add new UCI option "allow_legacy_protocols" to section [globals]
* add avahi support package "ksmbd-avahi-service"

* ksmbd: release 3.1.3 version
* ksmbd: lock SMB2_QUERY_INFO_HE request with read lock
* ksmbd: fix potential racy between query_dir and ksmbd_vfs_empty_dir
* ksmbd: fix racy issue between deleting file and checking empty directory
* ksmbd: don't register interface which are member of bridge
* ksmbd: SO_REUSEADDR is no property of tcp_setsockopt
* ksmbd: release 3.1.2 version
* ksmbd: fix read caching buffer size as max_read_size
* ksmbd: fix the infinite loop of handling FSCTL_QUERY_ALLOCATED_RANGES
* ksmbd: use compounding for smb2 flush
* ksmbd: downgrade error message to debug in get_file_all_info
* ksmbd: rename usmbd to ksmbd.mountd in trvis-ci
* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: update README file

* ksmbd-tools: release 3.2.1 version
* ksmbd-tools: revert "remove glib2.0 dependancy" patch
* ksmbd-tools: release 3.2.0 version
* ksmbd-tools: update how to restart ksmbd in README file
* Revert "ksmbd-tools: disable tbuf and rbuf caching by default"
* ksmbd-tools: disable tbuf and rbuf caching by default
* ksmbd-tools: replace usmbd prefix with ksmbd prefix
* ksmbd-tools: update README file
* ksmbd-tools: fix warning ignoring return value of 'fread'
* ksmbd-tools: downgrade unsupported command print to debug
* ksmbd-tools: remove GLIB_LIBS in Makefiles
* ksmbd-tools: rename usmbd, smbuseradd, smbshareadd to ksmbd.mountd, ksmbd.adduser and ksmbd.addshare
* ksmbd-tools: fix null pointer dereference in _list_remove
* ksmbd-tools: fix the sanity check fails depending on the password length
* ksmbd-tools: fix build error(not found glib.h)
* ksmbd-tools: remove glib-2.0 dependancy
* ksmbd-tools: update README to add libglib2.0-dev for Ubuntu preprequisite packages

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 15:02:51 +01:00
Andy Walsh
1a503986f1 samba4: update to 4.11.6, add new UCI option
* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-10 14:54:48 +01:00
Rosen Penev
4906850936
dnsdist: fix compilation on PIE ARM64
$(FPIC) evaluates to -fpic on ARM64, breaking compilation:

The dnsdist build system handles it properly anyway. Added --with-pic to
make it explicit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7ddb2ddc45158669990374968da87a62a2e9e2e2)
2020-02-09 18:51:09 -08:00
Rosen Penev
f815a74160 Merge pull request #11281 from micmac1/apache-19.07-up
[19.07] apr/apr-util/apache/subversion: sync with master
2020-02-09 14:51:27 -08:00
Rosen Penev
9be5706a7c
Merge pull request #11245 from Robby-/openwrt-19.07-rlmpython_and_fixproxycfgconflict
[19.07] freeradius3: Fix proxy.conf file conflict and enable the rlm_python and rlm_python3 modules
2020-02-08 17:43:52 -08:00
Sebastian Kemper
9e551f1b3e apache: add postinstall script
This script notifies users about the changes that recently went into the
package, to prevent surprises.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:47:48 +01:00
Sebastian Kemper
019b8fd057 subversion: fix build failure
Since commit a62c0e5 apu-1-config is no longer being stipped down with
regards to being called with "--link-libtool". Example:

 $ ./staging_dir/target-mips_24kc_musl/usr/bin/apu-1-config --link-libtool
 -L/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/lib -R/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/lib -laprutil-1
 $

Before the mentioned commit the "-R" argument was stripped off. And when the
Makefile adds this to TARGET_LDFLAGS this then ends up in the compiler test, as
an argument for the compiler, causing build failure:

checking whether the C compiler works... no
configure: error: in `/builder/shared-workdir/build/sdk/build_dir/target-arm_mpcore+vfp_musl_eabi/subversion-1.13.0':
configure: error: C compiler cannot create executables

config.log shows what's wrong:

configure:3140: x86_64-openwrt-linux-musl-gcc -Os -pipe ... <snip> ... -R/home/sk/tmp/sdk/master-x86-64/staging_dir/target-x86_64_musl/usr/lib -laprutil-1     conftest.c  >&5
x86_64-openwrt-linux-musl-gcc: error: unrecognized command line option '-R'

This commit does away with these flags, they're not needed anyway. FPIC
is also removed, because it's detrimental to the applications [1] and
unnecessary as well.

Fixes: #11139

[1] https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:39:49 +01:00
Sebastian Kemper
8b238c8402 subversion: add libsqlite3 depend
apr-util was updated. It doesn't provide the depend on libsqlite3
anymore, so this needs to be added to the subversion package now.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 23:39:26 +01:00
Sebastian Kemper
623ae46141 apache: bump to 2.4.41 & sync with master
This is a squash of the following cherry-picked commits:

14f4f0bef0
4e6bdd8a49
c8aba5113b
2d188fd37f
31e0d618e5
39e68309e8
a1472254db
d6476f30bb
258967b0d2
e94a08298e
6bd63d24f0
66bb68a7b6
d44ad09fcd

Short summary:

- version is bumped to 2.4.41
- httpd is renamed to apache2 to avoid overwriting of other servers (for
  instance busybox's httpd)
- the name apache2 is now also used for directories, for instance
  /etc/apache2 instead of /etc/apache
- a simple init script it added (/etc/init.d/apache2)
- a user "apache" is added upon package installation and used by default
- adds the Apache modules (in the main package as well as in additional
  packages)
- Makefile and patches are updated and cleaned
- adds myself as maintainer
- improves the cross-compile setup (via configure variables, patches &
  sed scripts)
- apxs is fixed up so that external modules can be added easily

For more details please check the individual commits provided above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 22:14:48 +01:00
Sebastian Kemper
4cba41ac1d apr-util: sync with master
This is a squash of the following cherry-picked commits:

27c4723936
03124bf4b4
141bd55316
40c7e95210
1d25dcde24
ea5b746e58
a62c0e599b
a16b294805
c24f5d258b
f6c218e74d

Short summary:

- adds external modules (crypto-openssl dbd-mysql dbd-odbc dbd-pgsql
  dbd-sqlite3 dbm-gdbm ldap)
- Makefile and patches are updated and cleaned
- adds myself as maintainer
- improves the cross-compile setup (via configure variables sed scripts)

For more details please check the individual commits provided above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 21:58:31 +01:00
Sebastian Kemper
391f5f087e apr: bump to 1.7.0 & sync with master
This is a squash of the following cherry-picked commits:

40a29bf055
40c7e95210
893a804c95
12037b3f29
193c3913b6
430ab5f9b3
0c6d461cc9
86396c6a49

Short summary:

- version is bumped to 1.7.0
- Makefile and patches are updated and cleaned
- adds myself as maintainer
- improves the cross-compile setup (via configure variables, patches &
  sed scripts)

For more details please check the individual commits provided above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-08 21:39:29 +01:00
Hannu Nyman
04da60f179 nano: update to 4.8
Update nano editor to version 4.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 7bc96280d3)
2020-02-08 11:26:09 +02:00
Michael Heimpold
3cf0c61f2e php7: update to 7.2.27
This fixes:
  - CVE-2020-7059
  - CVE-2020-7060

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-07 21:09:24 +01:00
Robby K
c417bddda7 freeradius3: Enable the rlm_python and rlm_python3 modules.
Signed-off-by: Robby K <robbyke@gmail.com>
2020-02-07 17:18:50 +01:00
Robby K
4d16e3ae3f freeradius3: Fix proxy.conf file conflict.
It was provided by both the freeradius3 and freeradius3-mod-realm packages.
Now provided by the freeradius3 package only.

Signed-off-by: Robby K <robbyke@gmail.com>
2020-02-07 17:18:33 +01:00
Alexander Traud
da2071507d
syslog-ng: listen not globally but just locally
Beside that, listen not only on IPv4 but also on IPv6 = Dual Stack.

Signed-off-by: Alexander Traud <pabstraud@compuserve.com>
(cherry picked from commit a4553b2efe)
2020-02-06 13:51:09 +01:00
Jan Pavlinec
268ea7a78c
python-importlib-metadata: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-02-06 10:34:41 +01:00
Rosen Penev
90e596693d
shadow: update to 4.8.1
Fixed license information.

Removed patch requiring autoreconf and replaced with a configure variable.

Removed faulty patch that broke systems without a disabled crypt size hack.
Replaced with using a SED command as well as bcrypt, which works in musl.

Removed su patch and converted it to a SED command in the Makefile.

Added new shadow utilities.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 87e5ded04c)
2020-02-04 15:46:20 +01:00
Rosen Penev
4332642902
Merge pull request #11213 from adde88/openwrt-19.07
[19.07] hcxtools: update to latest version
2020-02-03 17:06:07 -08:00
Rosen Penev
f8999d9634
Merge pull request #11229 from jefferyto/golang-env-fixes-openwrt-19.07
[openwrt-19.07] golang: Improve build isolation from user environment
2020-02-03 14:05:06 -08:00
Jeffery To
1d7cda2edc golang: Improve build isolation from user environment
* Set GOENV=off when building Go compiler and packages, to ignore user's
  environment configuration file
* Set GOCACHE when building host Go
* Unset GOTMPDIR, to use the buildroot temp directory instead of temp
  directories in build_dir

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 3b5f1c73fb)
2020-02-04 04:16:17 +08:00
Hannu Nyman
6ac7439092
Merge pull request #11226 from micmac1/sqlite3-19.07
[19.07] sqlite3: update to version 3.31.1
2020-02-03 21:22:41 +02:00
Josip Kelečić
0263d22733 sqlite3: update to version 3.31.1
Signed-off-by: Josip Kelečić <josip.kelecic@sartura.hr>
2020-02-03 19:54:06 +01:00
Andreas Nilsen
f828174de0 hcxtools: update to 5.3.0 + changes to Makefile to include latest binaries being compiled
Signed-off-by: Andreas Nilsen <adde88@gmail.com>

hcxdumptool: forgot to add new openssl dependency

Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2020-02-03 17:32:15 +01:00
Josef Schlehofer
afb4bb4c2b
dnscrypt-proxy2: update to version 2.0.39
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 561b535c36)
2020-02-03 10:00:12 +01:00
Josef Schlehofer
ba9262f04c
dnscrypt-proxy2: update to version 2.0.36
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8eb0d55475)
2020-02-03 10:00:06 +01:00
Rosen Penev
3c95786ac8
Merge pull request #11219 from jefferyto/golang-1.13.7-openwrt-19.07
[openwrt-19.07] golang: Update to 1.13.7, add PKG_CPE_ID to Makefile
2020-02-02 14:06:19 -08:00
Jeffery To
9a792f41c9 golang: Update to 1.13.7, add PKG_CPE_ID to Makefile
This update includes fixes for[1]:
* CVE-2020-7919 - doesn't appear to be published publicly yet
* CVE-2020-0601 - a Windows-related issue

[1]: https://github.com/golang/go/issues?q=milestone%3AGo1.13.7+label%3ACherryPickApproved

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 0dc4fa6efb)
2020-02-03 05:02:27 +08:00
Hannu Nyman
98499ee44f
Merge pull request #11214 from Andy2244/wsdd2-fix_typos-(19.07)
[19.07] wsdd2: fix typos
2020-02-02 20:19:25 +02:00
Dirk Brenken
24c1ebc2bd
Merge pull request #11216 from dibdot/19.07-2
[19.07] adblock: update 3.8.15
2020-02-02 15:42:24 +01:00
Dirk Brenken
8dffab34b4
adblock: update 3.8.15
* remove 'reg_cz' list (abandoned)
* add 'notracking' list (provided by @rcarmo)
* 19.07-only: fix/bring back status message

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-02-02 15:36:04 +01:00
Andy Walsh
00a1294d0f wsdd2: fix typos
* fix typos (WG_PARM, reload_trigger)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-02-02 15:06:34 +01:00
Andreas Nilsen
da3df8f6c2 hcxdumptool: update to 6.0.1
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2020-02-02 14:04:28 +01:00
Michael Heimpold
e73b2a0a07
Merge pull request #11203 from micmac1/19.07-xml2
[19.07] libxml2: fix libxslt host build
2020-02-01 22:54:41 +01:00
Sebastian Kemper
0eb7b3e4ed libxml2: install xml2-config with host triplet
Currently only xml2-config is installed, for both the normal libxml2
package as well as the host package. The problem with that is that due
to multilib considerations the build host may have xml2-config installed
with a host triplet prefix, like x86_64-pc-linux-gnu-xml2-config (and
xml2-config as a symbolic link to it). Gentoo for instance sets it up
like this.

Packages may actually search for a prefixed xml2-config before searching
for xml2-config. An example would be Asterisk:

checking for x86_64-pc-linux-gnu-xml2-config... /usr/bin/x86_64-pc-linux-gnu-xml2-config

This then introduces wrong information into the build, for instance
bad includes:

~/tmp/openwrt $ /usr/bin/x86_64-pc-linux-gnu-xml2-config --cflags
-I/usr/include/libxml2

When the intention is to use OpenWrt's own (host) libxml2 one would like
to see this output used instead:

~/tmp/openwrt $ ./staging_dir/hostpkg/bin/xml2-config --cflags
-I/home/sk/tmp/openwrt/staging_dir/hostpkg/include/libxml2

This commit addresses this by installing xml2-config with a suitable
prefix and creating a symbolic link xml2-config. This is done for both
the host package and the normal package. The latter also needs this fix
because the target may use the same triplet as the host system (for
instance x86_64 cross-compiling for x86_64).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-01 15:39:19 +01:00
Sebastian Kemper
6e5977094e libxml2/host: revert xml2-config prefix fix
Commit 218f0229a4594b32d9db6ad0678cdce7e2663e27 added a workaround for a
problem. The host compile overwrote xml2-config in
"$(STAGING_DIR)/host/bin". The workaround fixed the issue for regular
target packages. But it didn't leave a proper xml2-config script for
host packages.

Times have changed. Host packages are now installed in
"$(STAGING_DIR_HOSTPKG). So there is no longer any danger of the host
package overwriting the xml2-config script for target packages. So
revert the mentioned commit, leaving us with two proper xml2-config
scripts, one for target package builds and one for host package builds.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-02-01 15:37:57 +01:00
Olivier Poitrey
752070f843 nextdns: Update to version 1.4.23
Changelog:

* Fix OpenWRT with existing forwarder + fix dnsmasq restore issue
* Refactor service execution to better report errors
* Refactor merlin tz setup so it does not need to curl on boot
* Improve upgrade command for install.sh
* Do not mask curl error on install
* Fix timezone logging issue with Merlin
* Add support for Merlin John's fork
* Add raspbian support to installer
* Fix upgrade not reinstalling service
* Limit the aarch64 fix to merlin
* Reset DHCP DNS to self on Merlin router setup
* Fix memory issue with aarch64 based router
* Update Go version
* Allow override of detected env
* Setup timezone correctly on Merlin init script
* Don't ignore curl error on install
* Fix Asus Merlin John’s fork trust store issue
* Fix synology auto setup
* Fix report client info not enabled with setup-router option
* Add support for edgeos DHCP lease file locations
* Fix signal handling when running as a service
* Fix exit menu keyboard shortcut
* Do not fail on upgrade if uninstall failed
* Fix exit menu in installer
* Remove failing upx (for now)
* Make sure nextdns keeps running once ssh session is closed
* Add auto setup of Synology with DHCP server enabled
* Use router's DNS to discover more names
* Get A/AAAA from both answer and addition sections
* Ignore certain invalid names during discovery
* Fix activate with setup-router
* Fix serveral install issues
* Add exponential backoff to mdns probe retry
* Correctly end dhcp lease probing when discovery is cancelled
* Store DHCP/MDNS discovered addrs separately to avoid ping/pong
discovery
* Add DHCP lease support to client discovery
* Do not report mdns listen unreachable error as start will retry
* Reimplement mdns client discovery
* Fix installer GOARCH detection with arm6+
* Fix bin install on platforms needing sudo
* Correctly detect edgeos and ddwrt as routers
* Fix install.sh sudo
* Disable upx as it break many platforms
* Fix installer regression with merlin
* Fix mips64 detection
* Fix OpenWRT detection
* Fix UPX post build script
* Fix install with John's Asuswrt-Merlin fork
* Fix more DDWRT
* Fix DDWRT support
* Fix merlin service add/remove
* Use UPX to compress binaries typicially used on routers
* Revert "Remove direct dep on reflect"
* Use letters for installer menus
* Fix install script for upgrades not working if binary is running
* Do not return an error on mdns listen if at least one interface worked
* Fix installer for synology
* Fix pfSense support
* Remove the logs for each server on each connect
* Move install instructions to wiki
* Fix install.sh uid detection with merlin
* Fix install.sh for arm6+
* Add Synology init system support
* Fix install.sh
* Add a generic router setup that just changes the listen to public
* Update README
* Add auto setup support for EdgeOS
* Restore per OS install instruction in readme during installer beta
* Refactor install.sh
* Remove dep on golang.org/x/net/ipv[4|6]
* Remove direct dep on reflect
* Rewrite the zeroconf code to use dnsmessage instead miekg/dns
* Add auto setup support for DD-WRT
* Improve arch detection
* Add auto setup support for OpenWRT
* Add automatic router setup support
* Fix service
* Remove dep en seq on sysv style init scripts
* Add Entware init system support
* Report init system used on install and in UA
* Add EdgeOS support
* Reads /etc/hosts before forwarding queries to the upstream
* Fix localhost resolution with Linux arch empty /etc/hosts
* Use /etc/hosts file to resolve listen address and list on all IPs
listed
* Add support for multiple router firmware
* Fix hardened privacy disabling dual stack
* Add a config set sub command and refactor commands handling
* Add support for activate on freebsd
* Fix inverted MAC matching
* Add unit test for conf prefix match #35
* Activate uses listen address instead of static 127.0.0.1
* Improve FreeBSD integration
* Add FreeBSD support
* Fix a typo
* Use zip for windows archive

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Edited PKG_RELEASE to 1
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a3b028b357)
2020-02-01 09:58:58 +02:00
Hannu Nyman
266917ae52
Merge pull request #11197 from Ansuel/backport
Backport
2020-02-01 09:28:04 +02:00
Ansuel Smith
2c4e6a5390
uwsgi: backport master changes to 19.07
To support new luci version uwsgi has been changed.
Backport this changes to 19.07

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-31 23:13:34 +01:00
Ansuel Smith
8b5c2901c0
nginx: backport master changes to 19.07
Currently luci is broken in 19.07.
Changes done to fix this problem didn't merge in the
19.07 release.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-31 23:13:34 +01:00
Rosen Penev
f7b3d00620
Merge pull request #11184 from micmac1/19.07-maria-10.2.31
[19.07] mariadb: security bump to 10.2.31
2020-01-30 16:30:01 -08:00
Rosen Penev
cff7a04a6a
Merge pull request #11176 from jefferyto/python-fix-float-byte-order-openwrt-19.07
[openwrt-19.07] python,python3: Fix float byte order detection
2020-01-30 16:27:49 -08:00
Sebastian Kemper
265e444d32 mariadb: security bump to 10.2.31
Addresses CVE-2020-2574.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2020-01-30 21:33:58 +01:00
Eneas U de Queiroz
36a1c0c5ae
python-certify: bump to 2019.11.28
This is a regular Mozilla CA bundle update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c799f2a913)
2020-01-30 14:59:51 -03:00
Jeffery To
ad50eb7c0a python3: Fix float byte order detection
This backports patches from bpo-34585[1] to fix byte order detection of
floats.

Fixing byte order detection allows the repr() of floats to be
shorter[2]. sys.float_repr_style should be 'short' instead of 'legacy'
on supported platforms.

See #11134.

[1]: https://bugs.python.org/issue34585
[2]: https://docs.python.org/3.8/whatsnew/3.1.html#other-language-changes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-30 19:12:25 +08:00
Jeffery To
a76dd0635c python: Fix float byte order detection
This backports patches from bpo-34585[1] to fix byte order detection of
floats.

Fixing byte order detection allows the repr() of floats to be shorter (a
feature backported to Python 2.7 from Python 3.1[2]).
sys.float_repr_style should be 'short' instead of 'legacy' on supported
platforms.

See #11134.

[1]: https://bugs.python.org/issue34585
[2]: https://docs.python.org/2.7/whatsnew/2.7.html#python-3-1-features

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from a0da5aec7f)
Omitted PKG_RELEASE change
2020-01-30 19:07:37 +08:00
Rosen Penev
30d0c2ee0f python: Replace utime with utimes
Optionally fixes compilation with uClibc-ng.

Based on the surrounding code, this looks like an oversight.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

(cherry picked from 608df65a62)
Adjusted PKG_RELEASE
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-30 19:04:39 +08:00
Sebastian Kemper
1ec76dd7ca libxslt/host: depend on libxml2/host
The host build requires libxml2-dev. This commit adds the dependency for
libxml2/host, as the host system may not have it installed. This also
avoids using the host's xml2-config (in /usr/bin for instance) while
linking to libraries in staging_dir/hostpkg.

ldd staging_dir/hostpkg/bin/xsltproc | grep xml2
	libxml2.so.2 => /home/sk/tmp/openwrt/staging_dir/hostpkg/lib/libxml2.so.2 (0x00007fcc0644c000)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from 05f0beb6a8)
2020-01-28 09:31:40 -08:00
Jan Pavlinec
4689c0998b libxslt: patch security issues
Fixes:
CVE-2019-13117
CVE-2019-13118

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from f77c53cff1)
2020-01-28 09:31:18 -08:00
Florian Eckert
db7c84f672 libxslt: add host build
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 48ad713a14)
2020-01-28 09:29:33 -08:00
Rosen Penev
4d2cbcadc5
Merge pull request #11149 from nickberry17/add_mm_to_19
backport ModemManager and dependencies to 19.07
2020-01-28 01:57:06 -08:00
Nicholas Smith
cac10393e2 modemmanager: add ModemManager to packages
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
2020-01-28 11:52:04 +10:00
Nicholas Smith
c9cf3c2778 libqmi: add libqmi to packages
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
2020-01-28 11:51:42 +10:00
Nicholas Smith
5f27a47010 libmbim: add libmbim to packages
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
2020-01-28 11:51:25 +10:00
Rosen Penev
cd81e4f06f
Merge pull request #11143 from Andy2244/smbd-rename_ksmbd-update-3.1.1-(19.07)
[19.07] smbd: update to 3.1.1, rename to "ksmbd", "ksmbd-tools"
2020-01-27 15:48:22 -08:00
Rosen Penev
f5f35a72a1
Merge pull request #11144 from Andy2244/wsdd2-rename_ksmbd-(19.07)
[19.07] wsdd2: update for renamed smbd->ksmbd
2020-01-27 15:48:09 -08:00
Andy Walsh
e6c686454c
glib2: fix mips16 build, add size reducing static link, fpic CFLAGS
* allows building as mips16 (fixes broken mips16/32 mixed static linking)
* add some static link related flags to reduce target binary size

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from a558b20944)
2020-01-27 15:46:16 -08:00
Rosen Penev
ef940752d2
glib2: Disable Werror
On GCC9, it throws a Wformat-nonliteral error. Unfortunately, there's no
easy was to fix it as it is fortify-headers where the warning ultimately
comes from.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from abdec8939e)
2020-01-27 15:45:32 -08:00
Andy Walsh
fd5a51ac04 wsdd2: update for renamed smbd->ksmbd
* update for renamed smbd->ksmbd
* fix build warning for global network.sh include

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-27 22:16:27 +01:00
Andy Walsh
82b463b19f smbd: update to 3.1.1, rename to "ksmbd", "ksmbd-tools"
* rename smbd->ksmbd (upstream name change)
* ksmbd-tools: build with static glib2 (usmbd = ~90kb, smbuseradd = ~40kb)
* new etc folder location = /etc/ksmbd/smb.conf
* new database name = /etc/ksmbd/ksmbdpwd.db
* fixes "map to guest = Bad User" while userdb is also used
* fixes missing ipv6 support
* update/rename to "luci-app-ksmbd"
* remove UCI samba compatibility code for section names (ksmbd uses [share] + [globals] not [sambashare] + [global])

* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: release 3.1.0 version
* ksmbd: fix over 80 character warnings
* ksmbd: rename smbd-tools to ksmbd-tools in travis.yml
* ksmbd: fix password db file location in travis.yml
* ksmbd: rename smbd prefix function to ksmbd
* ksmbd: rename smbd prefix source files to ksmbd
* Revert "smbd: set connection status with SMBD_SESS_EXITING instead of direct destory"
* ksmbd: rename smbd to ksmbd in .travis.yml
* smbd: rename module name to ksmbd.ko
* smbd: set connection status with SMBD_SESS_EXITING instead of direct destory
* smbd: previous session with same user and same password should be deleted
* smbd: only use global session table in smb2 session
* smbd: add support for ipv6
* smbd: fix empty macro issue from smbd_debug
* cifsd: fix printing of file names in find_next

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-27 22:03:28 +01:00
Hannu Nyman
1e43dc8f81
Merge pull request #11123 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
2020-01-26 22:39:33 +02:00
Rosen Penev
045e54e6b6
Merge pull request #11129 from Robby-/openwrt-19.07-freeradius3_update_3_0_20
[19.07] freeradius3: Update to 3.0.20
2020-01-26 10:48:13 -08:00
Jiri Slachta
885c9ed6cb
Merge pull request #11126 from micmac1/19.07-tiff
[19.07] tiff: update version to 4.1.0
2020-01-26 18:27:49 +01:00
Robby K
b3c1a67ff1 freeradius3: Update to 3.0.20
Latest stable release, contains security fixes for EAP-PWD (side-channel leak), logrotate settings (CVE-2019-10143) and a DoS issue due to multithreaded BN_CTX access (CVE-2019-17185).

Also refreshed patches/002-disable-session-cache-CVE-2017-9148.patch due to the following changes/commits in freeradius:
bf1a1eda23
a3c46544b3

Signed-off-by: Robby K <robbyke@gmail.com>
2020-01-26 14:43:06 +01:00
Jiri Slachta
eee4d0830d tiff: update version to 4.1.0
Signed-off-by: Jiri Slachta <jiri@slachta.eu>
2020-01-26 09:11:27 +01:00
Stan Grishin
a9fd019a3d https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-01-25 21:14:56 -07:00
Rosen Penev
eab36f8a67
avrdude: Fix GPIO path building
%ud is a GNU extension. It's not really supported elsewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 536c6b8be7)
2020-01-23 21:33:46 -08:00
Rosen Penev
9cb0c7f4a0
Merge pull request #10990 from BKPepe/django-19.07
[OpenWrt 19.07] django: update to version 1.11.27
2020-01-22 18:41:20 -08:00
Rosen Penev
5afe3fd1df
Merge pull request #11078 from ddast/radicale_add_urllib_dep
radicale-py3: Add python3-urllib dependency
2020-01-20 14:55:29 -08:00
Dennis Dast
ea93089afd radicale-py3: Add python3-urllib dependency
Depend on python3-urllib instead of python3-email (python3-urllib has
python3-email as a dependency).

Signed-off-by: Dennis Dast <mail@ddast.de>
2020-01-20 20:59:41 +01:00
Matt Merhar
72af40f2ba
nut: fix other/otherflag custom variables in nut-server.init
This allows custom config parameters to be added to the generated config
files, enabling the original intended functionality per
https://openwrt.org/docs/guide-user/services/ups/software.nut.

Example usage from /etc/config/nut_server:

config driver 'apc'
	option driver 'snmp-ups'
	option snmp_version 'v3'
	option port '172.16.100.5'
	list other 'secLevel'
	list other 'secName'
	list other 'authPassword'
	list otherflag 'notransferoids'

config other 'other_secLevel'
	option value 'authNoPriv'

config other 'other_secName'
	option value 'some_username'

config other 'other_authPassword'
	option value 'some_password'

config other 'otherflag_notransferoids'
	option value '1'

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry-picked from 0b04dd34a0)
2020-01-19 21:22:35 -08:00
Sebastian Kemper
e1aa905ab9
nut: update OpenSSL 1.1.0 patch
Replaces OpenWrt patch with upstream patch. Also removes
0002-Fix-check-for-empty-string.patch as this is included in upstream
OpenSSL 1.1.0 patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from 7d4f1b8589)
2020-01-19 21:22:32 -08:00
Sebastian Kemper
154da8aa02
nut: fix CGI setup
This commit makes

 - the libgd dependency (as well as specifying libs and includes)
 - the configure argument "--with-cgi"

dependant on whether the package nut-web-cgi is selected.

nut-web-cgi is also added to PKG_CONFIG_DEPENDS.

Resolves: #10641

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from cdd660a41d)
2020-01-19 21:21:51 -08:00
Hannu Nyman
7b07ac9e3d
Merge pull request #11063 from EricLuehrsen/openwrt-19.07-unbound
[openwrt-19.07] unbound: improve dependencies for okpg
2020-01-19 22:49:31 +02:00
Eric Luehrsen
bc4f3c11cb unbound: improve dependencies for okpg
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
cherry pick 6505154a74
2020-01-19 15:35:09 -05:00
Rosen Penev
895200940a
Merge pull request #11061 from cotequeiroz/afalg_1.1.0-19.07
[19.07] afalg_engine: bump to v1.1.0
2020-01-19 12:17:06 -08:00
Eneas U de Queiroz
1410d6b737
afalg_engine: bump to v1.1.0
This version is up to 20% faster than 1.0.1.
Build without cryptouser information, which is not available in 19.07.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-01-19 16:16:25 -03:00
Josef Schlehofer
162974f809
btrfs-progs: update to version 5.4.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c864563372)
2020-01-19 11:55:42 +01:00
Josef Schlehofer
072fcb5ce4
libseccomp: add seccomp-syscalls.h to InstallDev
In the version 2.4.2, there was introduced a new header file.
Ship it to InstallDev

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-19 11:37:57 +01:00
Hannu Nyman
3ab34b50db
Merge pull request #11051 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.5
2020-01-19 00:08:39 +02:00
W. van den Akker
5022caf869
Shorewall6-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:47 +01:00
W. van den Akker
0b890cf4b5
Shorewall6: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:28 +01:00
W. van den Akker
1201cdcd5f
Shorewall: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:07 +01:00
W. van den Akker
4cb0ff8314
Shorewall-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:35 +01:00
W. van den Akker
c2a5aa1a54
Shorewall-core: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:13 +01:00
Eneas U de Queiroz
8ba3c7b19d
afalg_engine: fix ENGINES location, zero-copy
Use a fixed ENGINES_DIR location, instead of trying to read it from the
openssl Makefile.

It also fixes the zero-copy config option not being passed down to the
cmake options.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 6a5f7920e9)
2020-01-17 15:37:26 -08:00
Eneas U de Queiroz
776216a652 afalg_engine: add new package
This is an alternate AF_ALG engine for openssl, based on the devcrypto
engine, but using the AF_ALG interface instead of /dev/crypto.

It is different than the AF_ALG engine that ships with OpenSSL:
  - it uses sync calls, instead of async
  - it suports more algorithms

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0e0bd6da4b)
2020-01-17 09:40:32 -03:00
Stijn Tintel
995226d95d strongswan: bump to 5.8.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:37 +02:00
Paul Fertser
243673b2d0 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:32 +02:00
Stijn Tintel
3880d65a07 strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:28 +02:00
Jan Pavlinec
ba43556aed
libarchive: update to version 3.4.1 (security fix)
Fixes CVE-2019-19221

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from df634dcc92)
2020-01-16 14:35:18 -08:00
Eneas U de Queiroz
ff87e8dbfa
oniguruma: bump to version 6.9.4
This version adds a new RegSet API, and fixes the following:
 - CVE-2019-19012
 - CVE-2019-19203
 - CVE-2019-19204
 - CVE-2019-19246
 - some problems (found by libFuzzer test)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 94895ec818)
2020-01-16 14:34:14 -08:00
Stan Grishin
3030d0fc1a vpn-policy-routing: bugfix: remove conflict with vpnbypass
Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 05603822d3)
2020-01-16 20:00:31 +02:00
Rosen Penev
d0bdd32524
Merge pull request #11021 from jefferyto/golang-updates-openwrt-19.07
[openwrt-19.07] golang: Updates
2020-01-14 12:11:06 -08:00
Jeffery To
2dbc88762c golang: Update to 1.13.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 01:26:40 +08:00
Jeffery To
fdd202bd1e golang: Fix selection of GOARM value
This fixes how GOARM is selected for arm platforms, based on support for
VFP/VFPv3 rather than CPU version.

Fixes #10967.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 00:58:28 +08:00
Josef Schlehofer
6a64b7affe libseccomp: update to version 2.4.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-13 22:58:48 +01:00
Josef Schlehofer
a50eeb01fc
django: update to version 1.11.27
Fixes: CVE-2019-19844

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-11 23:15:13 +01:00
Eric Luehrsen
8f3dcbcee6 unbound: fix TLS forwards with optional suffix
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit b101dd76fb)
2020-01-11 23:03:47 +02:00
Jan Pavlinec
ffdbf4e7c3
measurement-kit: update to version 0.10.8
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 744e2dd19d)
2020-01-11 09:20:17 +01:00
Jan Pavlinec
8f037084bc
measurement-kit: update package
Changes:
-add InstallDev section
-remove uclibc patch (issue fixed in upstream)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit df853b2d20)
2020-01-11 09:20:08 +01:00
Jan Pavlinec
8f2eb8f2da
measurement-kit: update to version 0.10.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 2949906ec4)
2020-01-11 09:20:02 +01:00
Rosen Penev
3dfabe79f3
smbd: Update to 3.0.2
Fixes a nasty stack corruption issue and a big endian fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 232a271f40)
2020-01-10 19:05:10 -08:00
Rosen Penev
670f336d79
transmission: Sync with master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-10 18:07:42 -08:00
Alexandru Ardelean
e847333d15 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

(cherry picked from commit ed0e77f3c3)
Reference to discussion at
c61579b564 (commitcomment-36665837)
Adjusted python PKG_RELEASE items to current situation
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2020-01-10 18:57:16 +02:00
Yousong Zhou
1f293771cd openvswitch: bump PKG_RELEASE
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 13:03:25 +08:00
Yousong Zhou
dc097661c5 openvswitch: backport patch to fix compilation
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:59:37 +08:00
Yousong Zhou
74e160df22 openvswitch: fix building failure caused by dst_ops api change
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:56:32 +08:00
Yousong Zhou
a4a54d0f3b openvswitch: bump to version 2.11.1
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:57:17 +08:00
Rosen Penev
d974cd3673
Merge pull request #10920 from Rixerx/openwrt-19.07
[19.07] zabbix: update to 4.0.16
2020-01-05 17:15:37 -08:00
Rosen Penev
26c23f3b9e
Merge pull request #10881 from mstorchak/stubby-19.07
[19.07] stubby: switch to ca-bundle
2020-01-05 15:38:13 -08:00
Sebastian Kemper
9adadfd8ec
sqlite3: bump to version 3.30.1
Fixes CVE-2019-16168

In other news:

- adds ABI_VERSION
- prefers INSTALL_DATA over CP
- removes gratuitous trailing slashes

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from commit 33fecfefec)
2020-01-04 23:21:19 +01:00
Sebastian Kemper
3bfc11ea22
sqlite3: bump to 3.29.0
Fixes CVE-2019-5018
Also drops upstreamed patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 2f7fbde7d6)
2020-01-04 23:19:54 +01:00
DENG Qingfang
e2bca1026b
nginx: update to 1.16.1
Fixes:
when using HTTP/2 a client might cause excessive memory
consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5ffc744018)
2020-01-04 23:13:48 +01:00
Jan Pavlinec
74e9ca74fd
tor: add respawn to init script
Note:
In some cases when tor daemon starts before
than the router is connected to the Internet.
Tor will exit and you have to run it manually.
This should fix this case.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5bce9c3e1d)
2020-01-04 20:53:01 +01:00
Jan Pavlinec
b85cbaf7e5
tor: update to version 0.4.2.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a339e0ede3)
2020-01-04 20:52:49 +01:00
Josef Schlehofer
2da2cf43b8
youtube-dl: update to version 2020.1.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-01-04 20:50:31 +01:00
Rosen Penev
9ec8652533
Merge pull request #10940 from Andy2244/samba-4.11.4-(19.07)
[19.07] samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
2020-01-03 16:32:02 -08:00
Rosen Penev
7472cc7427
Merge pull request #10938 from Andy2244/smbd-rename-3.0.1-(19.07)
[19.07] smbd: rename from cifsd, update to 3.0.1
2020-01-03 16:15:54 -08:00
Rosen Penev
396c5fc9bf
Merge pull request #10939 from Andy2244/wsdd2-init-update-(19.07)
[19.07] wsdd2: update to git (2019-12-15), bind to 'lan' only, update init for smbd
2020-01-03 16:09:13 -08:00
Rosen Penev
bff3204973
Merge pull request #10937 from Andy2244/libtirpc-1.2.5-(19.07)
[19.07] libtirpc: update to 1.2.5
2020-01-03 16:08:32 -08:00
Andy Walsh
85066d81d0 samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

extra:
* add rpcsvc-proto package _(don't rely on nfs-utils/host for headers, rpcgen anymore)_
* add libasn1 host build _(samba4 is looking for the bins)_

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 01:08:11 +01:00
Andy Walsh
28e84aacf7 wsdd2: update to git (2019-12-15), bind to 'lan' only, update init for smbd
* update to git (2019-12-15)
* bind to 'lan' interface only
* update init for renamed cifsd->smbd
* make smbd/samba compatible _(avoid testparm dependency)_
* only start if needed
* add meta data _(vendor, model, sku)_
* update smb.conf procd location
* lower restart delay
* remove outdated patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 01:01:43 +01:00
Andy Walsh
8bc58d175e smbd: rename from cifsd, update to 3.0.1
* follow upstream rename to 'smbd' and 'smbd-tools'
* config is '/config/smbd' and '/etc/smbd/smb.conf'
* smbd: update to 3.0.1
* smbd: fixes delete access on readonly shares
* smbd: add patch to keep version metadata in kmod
* smbd: remove synchrous kill_server patches
* smbd-tools: update to 3.0.1
* smbd-tools: userspace service is now 'usmbd'
* smbd-tools: userspace tools are: 'smbuseradd', 'smbshareadd' with /etc/smbd/smbdpwd.db
* smbd-tools: split package into server/utils (reduce size)
* smbd-tools: fix init (luci save&apply)
* smbd-tools: remove kill_server related timeouts
* smbd-tools: add low memory options to template, to prevent oom

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 00:55:40 +01:00
Andy Walsh
71d639a45f libtirpc: update to 1.2.5
* update to 1.2.5
* remove upstream merged patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 00:48:23 +01:00
Krystian Kozak
3a82973ae8 zabbix: update to 4.0.16
Updated to 4.0.16 LTS version.

Compile tested: Yes, x86_64
Run tested: Yes, x86_64

Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>
2020-01-01 11:19:49 +01:00
Hannu Nyman
34938d03f6
Merge pull request #10903 from stangri/19.07-vpn-policy-routing
[19.07] vpn-policy-routing: initial release
2019-12-31 17:23:20 +02:00
Josef Schlehofer
a015cc1bd8
youtube-dl: update to version 2019.12.25
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-31 03:45:59 +01:00
Stan Grishin
86b48645fa vpn-policy-routing: initial release
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-12-30 07:40:38 -07:00
Hannu Nyman
d22c35e588 nano: update to 4.7
Update nano to version 4.7

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c62f8962ba)
2019-12-29 15:20:25 +02:00
Rosen Penev
10a7a87638
Merge pull request #10897 from jefferyto/golang-format-ldflags-openwrt-19.07
[openwrt-19.07] golang: Format TARGET_LDFLAGS for gcc
2019-12-29 04:36:16 -08:00
Jeffery To
fc313e772b golang: Format TARGET_LDFLAGS for gcc
go invokes the external linker by calling gcc, so -zxxx options in
TARGET_LDFLAGS (in golang-package.mk) need to be formatted as -Wl,z,xxx.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from dbd6f224c3)
2019-12-29 18:51:15 +08:00
Hannu Nyman
8df00a88e7
Merge pull request #10892 from cshoredaniel/pr-19.07-radicale2-doc-passlib-bcrypt
[19.07] radicale2: Document suggested use of passlib and bcrypt
2019-12-28 23:52:37 +02:00
Hannu Nyman
3b5c73f85b
Merge pull request #10893 from cshoredaniel/pr-19.07-update-passlib-1-7-2
[19.07] passlib: Update passlib to 1.7.2
2019-12-28 23:51:39 +02:00
Daniel F. Dickinson
64d4fc6e6c radicale2: Document suggested use of passlib and bcrypt
PKG_RELEASE not bumped because this only affects package description.
We document that passlib and bcrypt are needed if one wishes to use
bcrypt encryption of passwords.  These have not been added as dependencies
as Radicale2 can have a frontend webserver authenticate users rather than
radicale itself.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-12-28 16:18:22 -05:00
Rosen Penev
9f39817c73
Merge pull request #10888 from mwarning/zerotier
zerotier: backport from master
2019-12-28 11:39:29 -08:00
Moritz Warning
479b45b8ab zerotier: update to 1.4.6
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning
f0c5a95a4f zerotier: make sure the /var/lib exists
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning
38a3ed1c75 zerotier: change license to BSL 1.1
Business Source License.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning
e42648f3c8 zerotier: update to release 1.4.4
Also allow path to local.conf to be set and enable linker optimisations
to save a few bytes.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning
70f4c1d197 zerotier: udpate to 1.4.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
DENG Qingfang
61291196d3 zerotier: fix linking to libnatpmp and build with uclibc
Makefile always checks the existence of host's NAT-PMP header,
which results in internal NAT-PMP code being used if it's missing.

Add a patch to make it check targets' header instead.

Use aligned_alloc() instead of valloc() in case of uclibc.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-12-28 14:48:33 +01:00
Moritz Warning
1961985f86 zerotier: update to zerotier 1.4.0
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning
7b5cc70faa zerotier: keep configuration file on update
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Daniel F. Dickinson
bcdb9d00a5 passlib: Update passlib to 1.7.2
Relevant bits of upstream changelog

New Features

    argon2: Support more hashes
    scrypt: Now uses python 3.6 stdlib’s hashlib.scrypt() as backend, if present (issue 86).

Bugfixes

    Python 3.8 compatibility fixes
    passlib.apache.HtpasswdFile: improve compatibility with Apache 2.4's htpasswd
    passlib.totp: fix some compatibility issues with older TOTP clients (issue 92)
    Fixed error in argon2.parsehash() (issue 97)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-12-27 14:06:39 -05:00
Maxim Storchak
ed6e1024b7 stubby: switch to ca-bundle in 19.07
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2019-12-27 19:31:13 +02:00
Rosen Penev
73a965aea0
Merge pull request #10875 from jefferyto/golang-ldflags-fix-openwrt-19.07
[openwrt-19.07] golang: Fix ldflags when GO_PKG_LDFLAGS is set
2019-12-26 13:53:13 -08:00
Jeffery To
db9a8a1e74 golang: Fix ldflags when GO_PKG_LDFLAGS is set
go build/install supports multiple -ldflags arguments, but they are not
combined; for each package, the latest match on the command line is
used.[1]

Previously, the main executable would not be affected by the default
ldflags if GO_PKG_LDFLAGS or GO_PKG_LDFLAGS_X were set. (The default
ldflags instructs go to use the external linker.)

This fixes golang-package.mk so that the default ldflags take effect in
all cases.

[1]: https://golang.org/cmd/go/#hdr-Compile_packages_and_dependencies

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 4827bc7509)
2019-12-26 21:09:01 +08:00
Rosen Penev
a258499976
Merge pull request #10865 from nxhack/libuv_1_32_0
[openwrt-19.07] libuv: update to 1.32.0
2019-12-23 17:57:39 -08:00
Hirokazu MORIKAWA
a23285c002 libuv: update to 1.32.0
[openwrt-19.07] libuv: update to 1.32.0

update to 1.32.0
Update is required to build the latest node.js v12.x.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2019-12-24 10:54:22 +09:00
Rosen Penev
b710855ef1
Merge pull request #10762 from leonghui/wiki-link-update-19.07
[19.07] treewide: replace old wiki links
2019-12-22 21:43:53 -08:00
Hannu Nyman
07cda0edc8
Merge pull request #10862 from gladiac1337/haproxy-2.0.12-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.12
2019-12-22 14:18:25 +02:00
Christian Lachner
02985327b8 haproxy: Update HAProxy to v2.0.12
- Update haproxy download URL and hash
- Remove @neheb's obsolete-ssl patch as it was upstreamed, see:
  (http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=6445d988ec8def9d0f80de0eda9c5763d39facc1)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-12-22 10:36:04 +01:00
Eric Luehrsen
ef82bba488
unbound: update to 1.9.6
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 173f2d6c9f)
2019-12-21 23:35:37 +01:00
Josef Schlehofer
c9cb6a0b18
dnscrypt-proxy2: Update to version 2.0.34
Repository was renamed to github.com/DNSCrypt/dnscrypt-proxy

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cddf39cbd1)
2019-12-21 21:57:59 +01:00
DENG Qingfang
b8bd94ef81
mtr: update to 0.93
Update mtr to 0.93
Add size optimization options
ath79 ipk size: 31.9k -> 31.4k

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit ad5615737a)
2019-12-21 21:54:33 +01:00
Jan Hak
5fe674a86e
knot: update to version 2.9.2
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit ca729cd43c)
2019-12-21 21:53:34 +01:00
Josef Schlehofer
20d3d99a50
meson: Update to version 0.52.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce027362c4)
2019-12-21 21:53:29 +01:00
Jan Pavlinec
c1b410d7a5
lmdb: use toolchain AR for compilation
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 7c82793719)
2019-12-21 21:53:13 +01:00
Karel Kočí
38c0db06bd
shadow: change default encryption method from DES to SHA512
Busybox in default uses SHA512 as well.

On big ditribution this default is sourced from PAM. That means that
shadow reads pam settings and uses that. OpenWrt in most cases does not
have PAM installed and in such case shadow fallbacks to its own default
which is DES. This just changes that default to SHA512 which is
consistent with rest of the system.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit f27ce05a58)
2019-12-21 21:53:08 +01:00
Josef Schlehofer
4a8f7d1242
netdata: Update to version 1.19.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dbf7b965b7)
2019-12-21 21:52:57 +01:00
Josef Schlehofer
39dce33acc
syslog-ng: Update to version 3.25.1
Bump version in config

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ac4870f205)
2019-12-21 21:52:43 +01:00
Josef Schlehofer
cbb329ac78
btrfs-progs: Update to version 5.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 101791a236)
2019-12-21 21:52:32 +01:00
Hannu Nyman
94c4f61b5c
Merge pull request #10856 from BKPepe/python3-19.07
[OpenWrt 19.07] python3: Updated to version 3.7.6
2019-12-21 20:07:36 +02:00
Rosen Penev
198d01f78e
Merge pull request #10852 from gekmihesg/19.07-restic-rest-server
[19.07] restic-rest-server: add package
2019-12-21 07:03:10 -08:00
Rosen Penev
0f18984d4e
Merge pull request #10853 from gekmihesg/19.07-restic
[19.07] restic: add package
2019-12-21 07:02:43 -08:00
Josef Schlehofer
c5d6ffaf1c
python3: Updated to version 3.7.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-12-21 14:35:31 +01:00
Markus Weippert
34b31493e8 restic: add package
Signed-off-by: Markus Weippert <markus@gekmihesg.de>
2019-12-21 10:20:15 +01:00
Markus Weippert
a018b51492 restic-rest-server: add package
Signed-off-by: Markus Weippert <markus@gekmihesg.de>
2019-12-21 10:19:26 +01:00
Rosen Penev
9fffb2b688
icu: Backport C++11 math patch
Fixes compilation with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 93d049951d)
2019-12-19 20:34:21 -08:00
Rosen Penev
fff198e7ff
Merge pull request #10753 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: switch to https-dns-proxy package name
2019-12-18 16:14:44 -08:00
Rosen Penev
e3de8dd087
Merge pull request #10822 from cshoredaniel/pr-19.07-remove-msmtp-scripts
msmtp-scripts: [19.07] Remove as abandoning upstream; msmtp-queue works
2019-12-18 15:56:21 -08:00
Jan Pavlinec
90ef9c18ce
git: update to version 2.24.1 (security fix)
Fixes
CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,
CVE-2019-1352, CVE-2019-1353, CVE-2019-1354, CVE-2019-1387, and
CVE-2019-19604

And fix deprecated PKG_CPE_ID

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 06d36ca794)
2019-12-19 00:22:59 +01:00
Josef Schlehofer
dc2c25ccf4
git: Update to version 2.24.0
Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 887b4e90e6)
2019-12-19 00:22:54 +01:00
Lucian Cristian
96c667a128
nspr: update to 4.24
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 07f62dbe46)
2019-12-18 23:49:45 +01:00
Lucian Cristian
ad246b3633
nspr: update to 4.23
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit d9bb633a49)
2019-12-18 23:49:40 +01:00
Lucian Cristian
8f48dc3341
nspr: update to 4.22
drop upstreamed patches

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit af9209fb31)
2019-12-18 23:49:34 +01:00
Lucian Cristian
78e241c54b
nss: update to 3.48
also package libnssckbi.so

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 4ad6e14ac8)
2019-12-18 23:47:54 +01:00
Lucian Cristian
7e51bdee04
nss: update to 3.47.1 and fix xscale
also refresh patches

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 3bacf6e9cb)
2019-12-18 23:47:49 +01:00
Lucian Cristian
da51495aa8
nss: update to 3.47
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 8013893745)
2019-12-18 23:47:43 +01:00
Lucian Cristian
5b1beec9d9
nss: update to 3.46.1
and clean some comments

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 4da3baea35)
2019-12-18 23:47:36 +01:00
Lucian Cristian
d4d798baad
nss: update to 3.46
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 257351976f)
2019-12-18 23:47:31 +01:00
Rosen Penev
0b2a73d15b
nss: Replace usleep with nanosleep
usleep is deprecated and is optionally not available with uClibc-ng.

Added PKG_LICENSE_FILES.

Added PKG_CPE_ID for proper CVE tracking.

Other minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1f1cec28b7)
2019-12-18 23:46:54 +01:00
Lucian Cristian
666cce12c0
nss: update to 3.45
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 80c7a5c119)
2019-12-18 23:46:49 +01:00
Lucian Cristian
01b9bf1a18
nss: update to 3.44.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 9a4dae73b4)
2019-12-18 23:46:42 +01:00
Nikos Mavrogiannopoulos
ceeac3b37d vpnc-script: bumped release version
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-12-18 21:25:14 +01:00
Michael Heimpold
13de8da3b3 php7: update to 7.2.26
This fixes:
  - CVE-2019-11046
  - CVE-2019-11044
  - CVE-2019-11045
  - CVE-2019-11050
  - CVE-2019-11047

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d5c18b1d5e)
2019-12-18 21:23:12 +01:00
Nikos Mavrogiannopoulos
b46f4ecd37 vpnc-script: enable reconnect
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-12-18 21:21:37 +01:00
Jo-Philipp Wich
f57ca519ac cgi-io: close pipe descriptors early
In the command read side, close the superfluous write end of the pipe
early to ensure that EOF is reliably detected. Without that change, splice
calls to read from the pipe will occasionally hang until the CGI process
is eventually killed due to timeout.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit dde503da13)
2019-12-18 17:11:14 +01:00
Jo-Philipp Wich
9e434da4e0 cgi-io: implement exec action
Implement a new "cgi-exec" applet which allows to invoke remote commands
and stream their stdandard output back to the client via HTTP. This is
needed in cases where large amounts of data or binary encoded contents
such as tar archives need to be transferred, which are unsuitable to be
transported via ubus directly.

The exec call is guarded by the same ACL semantics as rpcd's file plugin,
means in order to be able to execute a command remotely, the ubus session
identified by the given session ID must have read access to the "exec"
function of the "cgi-io" scope and an explicit "exec" permission rule for
the invoked command in the "file" scope.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "command" specifiying the commandline
to invoke.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required ACL rules to grant exec access to
both the "date" and "iptables" commands. The "date" rule specifies the
base name of the executable and thus allows invocation with arbitrary
parameters while the latter "iptables" rule merely allows one specific
set of arguments which must appear exactly in the given order.

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "exec", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/bin/date", "exec" ],
            [ "/usr/sbin/iptables -n -v -L", "exec" ]
        ]
   }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit b2a890f6ad)
2019-12-18 17:11:11 +01:00
Daniel F. Dickinson
59ca5bda32 msmtp-scripts: Remove as abandoning upstream; msmtp-queue works
I am upstream for msmtp-scripts and have decided to abandon the project.  Therefore
remove msmtp-scripts from OpenWrt -- there is already msmtp-queue which is 'good enough'
for the use cases where msmtp-scripts had any relevance.

This backports to 19.07 so that it doesn't become something folks are depending on.
Due to changes in lock behaviour it never worked in 18.04.x, so ditching it now
keeps it from being picked up again by the userbase.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-12-18 07:45:54 -05:00
Stan Grishin
a84d8ddcef https-dns-proxy: switch to https-dns-proxy package name
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-12-17 14:49:00 -07:00
Michael Heimpold
80c42c968e
Merge pull request #10809 from etactica/mb-1907
[19.07] libmodbus update to 3.1.6
2019-12-17 20:31:53 +01:00
Michael Heimpold
7ebd7011cc libmodbus: update to 3.1.6
Also fix the license information: in older versions the test programs
were GPL 3 licensed, but meanwhile it changed to BSD license.
But since this package only packages the library itself, we can
safely focus only on the LGPL here which covers the library itself.

While at, fix a minor nitpick during library symlink installation.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-12-17 14:35:54 +00:00
Jan Pavlinec
a70432b785 tor: update to 0.4.1.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 390da39191)
2019-12-16 19:37:08 +02:00
Jan Pavlinec
9147f9d722 tor: update to version 0.4.1.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 1ac69ffc59)
2019-12-16 19:36:41 +02:00
Rosen Penev
2c434727b7
Merge pull request #10801 from gladiac1337/haproxy-2.0.11-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.11
2019-12-16 07:53:20 -08:00
Christian Lachner
90180becff haproxy: Update HAProxy to v2.0.11
- Update haproxy download URL and hash
- Remove obsolete patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-12-16 08:00:51 +01:00
Leong Hui Wong
18e9050e3a treewide: update wiki links
Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
2019-12-14 15:36:57 +08:00
Rosen Penev
10d2e63dd3
Merge pull request #10776 from rs/nextdns-1.3.1_19.07
[OpenWRT 19.07] nextdns: update to version 1.3.1
2019-12-13 07:20:57 -08:00
Olivier Poitrey
d400528629 nextdns: update to version 1.3.1
- IPv6 support
- Fix HTTP/2 negociation
- Improve endpoint fallback
- Add support for unencrypted DNS
- Many other fixes and features

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-12-13 01:01:25 -08:00
Marcin Jurkowski
b4f3e50856 collectd: add vmem uci config
Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
(cherry picked from commit 3763b238e7)
2019-12-12 22:07:29 +02:00
Dirk Brenken
3a65e659db
adblock: bugfix 3.8.14
* fix some whitelist issues (see
https://forum.openwrt.org/t/adblock-support-thread/507/1101)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5369d0dbbf)
2019-12-11 16:32:53 +01:00
Karl Palsson
111e84674e net/pagekitec: Update to 20191211 version
While outwardly a major update, this mainly pulls in fixes related to
openssl verson changes that ensure this continues running on OpenWrt

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-12-11 15:10:53 +00:00
Dirk Brenken
a82cbd5846
adblock: bugfix 3.8.13
* remove 'ransomware' blocklist by abbuse.ch (discontinued)
  from default adblock config
* fix/switch 'someonewhocares' config to https only
* fix curl download parameters to follow redirects and
  suppress needless output
* made the tmp directory of sort operations configurable,
  set 'adb_sorttmp' accordingly (only supported by 'coreutils-sort')

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 21a85fef22)
2019-12-10 20:27:50 +01:00
Andre Heider
c61579b564
meson: add new package
This adds a host as well as a target package.

meson.mk is provided to build packages using meson.

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit d83cba79c1)
2019-12-10 12:02:56 +01:00
Andre Heider
fd5ef39e83
ninja: add new package
This adds a host as well as a target package.

ninja.mk is provided to execute ninja.

The two patches have been taken from upstream to fix compile issues.

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 5ead78be5a)
2019-12-10 12:02:50 +01:00
Josef Schlehofer
c1dd9499b1
golang: Update to 1.13.5
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 791729cfc06ab6608018c15ce84d7f6e37ba3f5a)
2019-12-09 23:28:07 +01:00
Daniel Golle
e67c395464 transmission: bump PKG_RELEASE
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-12-09 02:40:23 +01:00
Rosen Penev
8acf58bf6b geth: Update to 1.9.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from cbcfc7a3e2)
2019-12-08 14:35:21 -08:00
Rosen Penev
54cbc535da geth: Update to 1.9.6
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from c5b7a6958b)
2019-12-08 14:34:51 -08:00
Josef Schlehofer
710c325be9
nnn: Update to version 2.8.1
Removed findutils-xargs dependency due to added busybox support in version 2.8

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2c22dcd3dc)
2019-12-07 14:24:13 +01:00
Jan Pavlinec
b88b43dd12
python-more-itertools: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from 4bade3b2f7)
2019-12-06 15:41:53 -08:00
Stijn Tintel
bc30298f53
motion: fix streaming
Streaming was broken since version 4.2. Backport upstream fix.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry-picked from 34718f5c1d)
2019-12-05 10:09:14 -08:00
Stijn Tintel
77d230b524
motion: add basic procd init script
Disable the init script by default to avoid log pollution; motion is
very verbose when it cannot open the configured camera.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry-picked from eaa1d5aa18)
2019-12-05 10:09:14 -08:00
Rosen Penev
b1b53e61c6
motion: Update to 4.2.2
Removed webp support. motion picks it up now that it's in the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1236cab60d)
2019-12-05 10:09:14 -08:00
Hannu Nyman
3507167719
Merge pull request #10682 from hnyman/collectd-backport
[19.07] Collectd: backport changes from master to 19.07
2019-12-04 19:52:16 +02:00
Karl Palsson
2591e8220a mosquitto: bump to version 1.6.8
This is a bugfix release.
Full changelog available at:
https://mosquitto.org/blog/2019/11/version-1-6-8-released/

Many smaller fixes in various areas, nothing particularly standout as of
special interest to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-12-03 13:12:59 +00:00
Rosen Penev
12be725fa6
Merge pull request #10697 from jefferyto/byobu-1.130-openwrt-19.07
[openwrt-19.07] byobu: Update to 5.130
2019-12-02 13:29:42 -08:00
Nikos Mavrogiannopoulos
1781209bed gnutls: fixed pkg-hash to the right one
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-12-02 17:41:58 +01:00
Nikos Mavrogiannopoulos
1c28d8cc2b openconnect: updated to 8.05
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-12-02 17:26:55 +01:00
Nikos Mavrogiannopoulos
b551c53299 gnutls: updated to 3.6.11
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-12-02 17:14:24 +01:00
Jeffery To
6aebfb2dfc byobu: Update to 5.130
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 51a047b96f)
2019-12-02 21:23:34 +08:00
Jeffery To
879a1e25bf byobu: Update to 5.129
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 492cbd53cb)
2019-12-02 21:23:18 +08:00
Hannu Nyman
0116633d02 nano: update to 4.6
Update nano editor to version 4.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 421dae85a3)
2019-12-01 14:21:13 +02:00
Dirk Brenken
3dd9ef2f17
banip: update 0.3.11
* fix ssh daemon autodetection
* fix 'sshd' logfile parsing

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e97f350a00)
2019-11-30 21:27:42 +01:00
Hannu Nyman
a9b5f06578 collectd: update to 5.10.0
Update collectd to 5.10.0
* leave new plugins as disabled for now (procevent, sysevent)
* refresh patches. Remove unenecessary version fix

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry-picked for 19.07. PKG_RELEASE=2 as cpufreq was already backported)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:19:10 +02:00
Hannu Nyman
e33b3f8cab collectd: adjust reaction to ntp time at boot time
Adjust the reaction to a polling interval timestamp that references
to a past time.

Past timestamps can happen when ntpd adjusts router's time after network
connectivity is obtained after boot. Collectd shows warnings for each plugin
as it tries to enter new values with the same timestamp as the previous one.

This patch adjusts the next polling time to be now+2 seconds for the main
loop and for the plugin-specific read loops. That avoids the warnings, but
does not overreact in case there are shorter polling intervals or the time
gets adjusted for other reasons.

Additionally some debug statements are aded, but they are visible only
when --enable-debug configure option is used in Makefile.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Hannu Nyman
a681b766e8 collectd: update to 5.9.2
Update collectd to 5.9.2

Mainly bug fixes:
dfb9dd09fe/ChangeLog

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
bbf35c7360 collectd: bump PKG_PACKAGE version
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
e7ed367020 collectd: add reload and service trigger
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
ac29330c5b collectd: add logfile plugin definitions
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
5dd077e951 collectd: add iptables uci config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
6884430d49 collectd: add network uci config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
df7d418c97 collectd: add curl uci config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
53e546854a collectd: add apcups uci config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
eb67983518 collectd: add new memory config values
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
0f9ae62e2c collectd: add new cpu config values
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Yousong Zhou
4d54186f17 collectd: use uname to get default Hostname
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Yousong Zhou
2bd0a56f09 collectd: log stderr output
Collectd without log type plugin loaded will write log lines to stderr.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked for 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
c4083af7b7 collectd: enable threshold plugin
The only action the Threshold plugin takes itself is to generate and
dispatch a notification. Other plugins can register to receive
notifications and perform appropriate further actions.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked for 19.07, line numbers adjusted)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Florian Eckert
1920eb60fe collectd: move jshn.sh include to remove warning
Redmine-patch-id: 3680
If I build an image with the imagebuilder I get the following output
during image building:

../root-x86/etc/init.d/collectd: line 4: /usr/share/libubox/jshn.sh:
No such file or directory

To remove this messsage move include to the needed postion, so that the
message does not occur during image building on the host system anymore.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked, modified to match 19.07)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-30 19:15:12 +02:00
Hannu Nyman
00803ffc91 collectd: enable cpufreq module for ipq40xx and brcm2708_bcm2709
As some ipq40xx CPUs support frequency scaling, enable building
collectd-mod-cpufreq for ipq40xx (for private builds) and
its package architecture brcm2708_bcm2709 (for buildbot)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5e0d5c9c7f)
2019-11-30 13:01:21 +02:00
Hannu Nyman
e6ced27690
Merge pull request #10676 from gladiac1337/haproxy-2.0.10-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.10
2019-11-29 17:29:01 +02:00
Christian Lachner
5dd5b33653 haproxy: Update HAProxy to v2.0.10
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.10.html)
- This fixes CVE-2019-19330 (See: https://nvd.nist.gov/vuln/detail/CVE-2019-19330)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-29 12:22:04 +01:00
Daniel Golle
a79d6df674 transmission: sync with master branch
Fixes to init-script were not cherry-picked properly, sync it with
version found in master branch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2019-11-28 18:38:11 +01:00
Rosen Penev
7c1c00735c
Merge pull request #10646 from Andy2244/softethervpn5-9672_19.07
[19.07] softethervpn5: update to 5.01.9672
2019-11-26 14:23:50 -08:00
Matthias Schiffer
03b412db2e
luasrcdiet: add package (moved from luci-base package)
We use luasrcdiet in Gluon as well. Move it from the luci feed to packages.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 46d68b8699)
2019-11-26 19:52:28 +01:00
Andy Walsh
a881ab43c9 softethervpn5: update to 5.01.9672
* 5.01.9672 release
* Cedar: handle UDP acceleration and R-UDP versions
* Mayaqua: implement R-UDP version 2, powered by ChaCha20-Poly1305
* Cedar: implement UDP acceleration version 2, powered by ChaCha20-Poly1305
* Cedar: serve new web management interface
* Cedar: implement detailed protocol info
* Mayaqua: add Windows Server 2019 to the supported operating systems list
* Cedar: various fixes
* Cedar: add "DisableIPsecAggressiveMode" option
* Make install dir for unit files configurable
* Protocol.c: adapt ClientConnectGetSocket() for new proxy functions
* Wpc.c: adapt WpcSockConnectEx() for new proxy functions
* Protocol: add ProxyCodeToCedar()
* Move generic proxy stuff from Cedar to Mayaqua
* Proto_OpenVPN.c: improve OvsProcessData(), fix out-of-bounds access found by Coverity
* Proto_OpenVPN.c: fix segmentation fault in OvsProceccRecvPacket()
* Addressing the UDP reflection amplification attack: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1001
* Mayaqua.h: include <stdarg.h> for "va_list" on Illumos
* Protocol.c: fix bug in ClientConnectGetSocket() causing custom HTTP header not to work
* Mayaqua: move HTTP functions from "Network" to "HTTP"
* Move GetMimeTypeFromFileName() and related structure to Mayaqua
* Mayaqua.h: include <stdio.h> for "FILE"
* Mayaqua.h: include <stddef.h>, for "wchar_t"
* Bump mixin-deep in /src/bin/hamcore/wwwroot/admin/default
* - Fixed the problem occurs when RPC messages between Cluster Members exceed 64Kbytes. - Fixed the RADIUS PEAP client to use the standard TLS versioning. - Implementation of a function to fix the MAC address of L3 VPN protocol by entering e.g. "MAC: 112233445566" in the "Notes" field of the user information. - Implementation of a function to fix the virtual MAC address to be assigned to the L3 VPN client as a string attribute from RADIUS server when authentication.
* Updating built-in Win32 libraries - OpenSSL 1.1.1 -> 1.1.1d - zlib 1.2.3 -> 1.2.11
* Update strtable_cn.stb
* Avoid using hardcoded paths in log file enumeration
* Fix buffer overflow during NETBIOS name resolution
* Update SEVPN.sln
* Create strtable_pt_br.stb
* ci: display error if vpntest failed
* Fix several compile warnings on MS VC++ 2008.
* Enables crash minidump for Win32 vpntest. Minidump files will be saved to the 'C:\Users\<username>\AppData\Local\Temp\vpn_debug' (for normal user) or 'src\bin\vpn_debug\' (for administrator user).
* OpenVPN: use new protocol interface
* Add interface for easy protocol implementation
* add "no-deprecated" to openssl builds "no-deprecated" is widely used in openwrt devices
* Fix LibreSSL support
* Switch to OpenSSL THREADID API
* travis-ci: update openssl, libressl
* enable sonar-scan in travis-ci builds
* Virtual: fix race condition in DHCP server which resulted in multiple clients receiving the same IP
* Mayaqua: Fix compilation without deprecated OpenSSL APIs
* Mayaqua: Replace GNU specific sys/poll.h header with POSIX poll.h
* systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-26 15:50:20 +01:00
Rosen Penev
21c52897bd
Merge pull request #10638 from Andy2244/cifsd-tools_update-2019-11-25_19.07
cifsd-tools: update to git (2019-11-25) [19.07]
2019-11-25 20:15:21 -08:00
Rosen Penev
d0e97caca6
Merge pull request #10631 from jefferyto/python-pyopenssl-19.1.0-openwrt-19.07
[openwrt-19.07] python-pyopenssl: Update to 19.1.0
2019-11-25 11:14:29 -08:00
Andy Walsh
b98dcdc342 cifsd-tools: update to git (2019-11-25)
* cifsd-tools: fix Assignment of a signed value which has type 'long'
* init: convert hide_dot_files to yes/no option
* 'read only = no' seems bugged for cifsd/smb.conf, so fix via 'writeable = yes'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-25 17:14:16 +01:00
Dirk Brenken
a45dd88502
adblock: update 3.8.12
* fix possible dns restart issue with DNS File Reset (race condition)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 219abdc5a1)
2019-11-25 09:51:15 +01:00
Rosen Penev
88c37cb6fe
transmission: Disable webseeding
It causes 100% CPU usage in certain situations. Just disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6d9ee2ec86)
2019-11-24 19:09:01 -08:00
Rosen Penev
e8438eb67a
transmission: Fix tracker issue with some firewalls
Some firewalls mandate a minimum size of 4k for SYN packets, which
transmission does not do by default. Upstream issue here:

https://github.com/transmission/transmission/issues/964

Cleanup:

Fixed license info.

Removed two unnecessary patches.

Ran shell script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 730a1697fe)
2019-11-24 19:08:20 -08:00
Josef Schlehofer
4a82137613 php7: Update to version 7.2.25
- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bc48abd2a)
2019-11-24 22:04:15 +01:00
W. Michael Petullo
36358e7e38 php7: mark /etc/config/php7-fastcgi as conffile
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 5bc9bb04c5)
2019-11-24 22:03:41 +01:00
Michael Heimpold
3be4577ee9 php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)
PHP7 fails to load xmlreader.so (php7-mod-xmlreader) module without
dom.so (php7-mod-dom) module loaded:

-snip-
PHP Warning:  PHP Startup: Unable to load dynamic library 'xmlreader.so'
 (tried: /usr/lib/php/xmlreader.so (Error relocating /usr/lib/php/xmlreader.so:
 dom_node_class_entry: symbol not found), /usr/lib/php/xmlreader.so.so (Error
 loading shared library /usr/lib/php/xmlreader.so.so: No such file or
 directory)) in Unknown on line 0
^C
-snap-

However, this dependency only exists when during build also php7-mod-dom
is selected.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit b8c22fc1ec)
2019-11-24 22:03:11 +01:00
Stefaan Ghysels
7aadc71300 php7: bump to 7.2.23
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
(cherry picked from commit dacda44755)
2019-11-24 22:02:30 +01:00
Jeffery To
fc33728724 python-pyopenssl: Update to 19.1.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from aff03aee1f)
2019-11-25 04:40:19 +08:00
Rosen Penev
d4aa51b246
Merge pull request #10619 from Andy2244/samba4_19.07_22-11-2019
samba4: add UCI option 'disable_async_io' [19.07]
2019-11-22 08:34:04 -08:00
Rosen Penev
d74673aeb2
Merge pull request #10617 from Andy2244/cifsd_22-11-2019_19.07
cifsd: update to git (2019-11-22) [19.07]
2019-11-22 08:27:33 -08:00
Andy Walsh
5b2010ce80 samba4: add UCI option 'disable_async_io'
* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 14:15:12 +01:00
Andy Walsh
e6564936ec cifsd: update to git (2019-11-22)
cifsd: fix uninitialized fp could be freed
cifsd: fix potential uninitialized spnego_blob could be freed
cifsd: smbd: replace spinlock_irqsave with spinlock
cifsd: smbd: avoid the lack of client's send credits

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-22 14:09:23 +01:00
Jan Pavlinec
fd254a04c8
bind: update to version 9.14.8 (security fix)
Fixes CVE-2019-6477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 46ca2c7)
2019-11-22 08:48:19 +01:00
Rosen Penev
89d4f92b89
Merge pull request #10606 from rs/nextdns-1.1.5_19.07
[OpenWRT 19.07] nextdns: Update version 1.1.5 + add per host config option
2019-11-21 09:35:50 -08:00
Olivier Poitrey
db06f7ee2a nextdns: Update version 1.1.5 + add per host config option
* Update nextdns to version 1.1.5 which adds IPv6 dual stack support.
* Add the ability to configure per host configuration id from uci.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-21 02:42:12 -08:00
Josef Schlehofer
d1bab6ef8a
nnn: Add a new package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 32cbfce051)
2019-11-21 09:17:03 +01:00
Josef Schlehofer
52515c819e
unbound: Update to version 1.9.5
Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 24667753a2)
2019-11-21 09:02:42 +01:00
Rosen Penev
b79cb96dc1
Merge pull request #10603 from Andy2244/cifsd-19.07
cifsd: add package cifsd [backport]
2019-11-20 16:45:32 -08:00
Andy Walsh
ff0e3bf719 cifsd: add package cifsd [backport]
* adds cifsd (cifs kernel server) + tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-20 22:24:29 +01:00
Jan Hak
ffbe240f0f
knot: update to version 2.9.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry-picked from commit 559672d)
2019-11-20 18:11:40 +01:00
Rosen Penev
2850866230
Merge pull request #10586 from commodo/openwrt-19.07-django1
django: bump to version 1.11.26
2019-11-19 11:14:34 -08:00
Hannu Nyman
7a52e8e342
Merge pull request #10580 from gladiac1337/haproxy-2.0.9-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.9
2019-11-19 19:14:37 +02:00
Dirk Brenken
6106619bde
travelmate: update 1.5.3
* some init tweaks
* use the usual wifi wrapper for reloads
* compatibility fix for latest wifi-related changes
  in master (dynamic wireless radio reconfiguration)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 05c3153bb7)
2019-11-19 10:27:47 +01:00
Alexandru Ardelean
2969a1842d django: bump to version 1.11.26
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-11-19 10:49:50 +02:00
Dirk Brenken
58dd5a94ba
adblock: update 3.8.11
* some more init tweaks
* update/cleanup readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bc299d03f2)
2019-11-18 21:36:12 +01:00
Christian Lachner
f28dfa39ea haproxy: Update HAProxy to v2.0.9
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-18 09:19:53 +01:00
Etienne Champetier
a907174c3a prometheus-node-exporter-lua: bump version
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 50b825e7fa)
2019-11-17 18:28:41 -08:00
Zoltan Haindrich
928915f4a6 prometheus-node-exporter-lua: an unavaliable wifi interface may have stopped the scraper from functioning
Signed-off-by: Zoltan Haindrich <kirk@rxd.hu>
(cherry picked from commit 7bec619f53)
2019-11-17 18:28:13 -08:00
Andre Heider
0e69b14733 prometheus-node-exporter-lua: respawn the process
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit a3af4c3691)
2019-11-17 18:28:13 -08:00
Andre Heider
56e0861f77 prometheus-node-exporter-lua: add a config reload trigger
Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit d8e637d064)
2019-11-17 18:28:12 -08:00
Andre Heider
ee353e6036 prometheus-node-exporter-lua: switch config to openwrt interface names
Drop the config knob 'listen_address' and introduce 'listen_interface'
and 'listen_ipv6' instead.

'listen_interface' takes an openwrt interface name ('loopback', 'lan',
'wan' etc, or "*" for all), from which the primary IP is used to listen
on. If 'listen_ipv6' is set to '1', the IPv6 adress will be used, IPv4
elsewise.

procd interface triggers are now combined with this, so if the listen
interface is not yet configured when the init script is executed, the
process start is defered, and the trigger takes care of that once
the interface is ready.

Fixes #7670

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 48568ad9f9)
2019-11-17 18:28:12 -08:00
Rosen Penev
41503554d0
Merge pull request #10577 from jefferyto/python-zope-interface-4.7.1-openwrt-19.07
[openwrt-19.07] python-zope-interface: Update to 4.7.1, refresh patch
2019-11-17 18:11:45 -08:00
Rosen Penev
209ecba6be
Merge pull request #10575 from jefferyto/python-twisted-19.10.0-openwrt-19.07
[openwrt-19.07] python-twisted: Update to 19.10.0, refresh patches
2019-11-17 18:11:27 -08:00
Rosen Penev
4c8f47b5a7
Merge pull request #10567 from rs/nextdns-1.1.3_19.07
[19.07] nextdns: update to 1.1.3
2019-11-17 17:52:47 -08:00
Olivier Poitrey
6c42cc8f6d nextdns: update to 1.1.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-17 17:42:26 -08:00
Carey Sonsino
87e9963eba
dcwapd: Update init script to use procd
consolidate shell scripts into init script
remove "litter" from uci file
update default UCI values

Signed-off-by: Carey Sonsino <careys@edgewaterwireless.com>
Signed-off-by: Carey Sonsino <csonsino@gmail.com>
(cherry-picked from 0d5b50c4b)
2019-11-17 14:15:35 -08:00
Jeffery To
1f417d7ed0 python-zope-interface: Update to 4.7.1, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5e8feda04a)
2019-11-18 04:49:46 +08:00
Hannu Nyman
55f6874ed8
Merge pull request #10573 from jefferyto/python-pyasn1-0.4.8-openwrt-19.07
[openwrt-19.07] python-pyasn1: Update to 0.4.8
2019-11-17 22:44:11 +02:00
Jeffery To
87ccd3ddbd python-twisted: Update to 19.10.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c56770a570)
2019-11-18 04:35:45 +08:00
Jeffery To
7504b410a6 python-pyasn1: Update to 0.4.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from b99abe8dd8)
2019-11-18 04:07:32 +08:00
Toke Høiland-Jørgensen
1feef55c94 acme: Add dependency on luci-compat for luci-app-acme
Fixes #10564.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-11-17 16:19:13 +01:00
Toke Høiland-Jørgensen
a25797e58d acme: Update to upstream 2.8.3
Upstream release message:
"Letsencrypt CA recent changed the CDN provider, which resulted in hanging issues.
Any downstream package should update.
This is important."

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-11-17 16:19:05 +01:00
Toke Høiland-Jørgensen
bbaed850a3 acme: Log acme.sh command invocation
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
2019-11-17 16:18:57 +01:00
Yousong Zhou
d71c1fbe0d acme: depends on gnu-wget
Fixes openwrt/packages#9456

Ref: https://github.com/openwrt/packages/issues/9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-11-17 16:18:47 +01:00
Rosen Penev
b151af8f45 acme: Update to 2.8.1
Fix license info to use SPDX name.

Switched to wget instead of curl to avoid having a dependency on 2 SSL
libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-17 16:18:43 +01:00
Yousong Zhou
71e06448ed wget: provides gnu-wget
So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-11-17 16:18:03 +01:00
Richard Yu
0031c87468 ttyd: update to 1.5.2 and add init script
Signed-off-by: Richard Yu <yurichard3839@gmail.com>

cherry picked from commit 9e325b47cb
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-17 15:53:07 +02:00
Shuanglei Tao
56a8ebb769 ttyd: update to 1.5.1
Signed-off-by: Shuanglei Tao <tsl0922@gmail.com>

cherry picked from commit 6181693bad
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-17 15:51:56 +02:00
Rosen Penev
f00d0a0185 boost: Fix fiber compilation for mips
The issue was that the pause instruction was emitted through an asm
directive which was not correct for some mips platforms.

Simplified boost-fiber-exclude as a result.

Removed uClibc-ng math patch. It was not correct as it broke float and
long double support (std variants use function overloads). A different
solution was applied upstream. As it's quite annoying to backport, just
wait until a new release comes with that change. ARC as a platform is
barely supported anyways.

Swapped asio patch for the upstream submission, which is unfortunately, in
limbo.

Refreshed remaining patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f795779c0a)
2019-11-16 18:14:11 -08:00
Rosen Penev
6371fc55d9 boost: Remove several host libraries
The facebook people have been working on removing Boost dependencies from
their projects. This is the current state.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ddd4109c1c)
2019-11-16 18:13:52 -08:00
Rosen Penev
6002ef66b5 boost: Remove thread dependency from context
thread is only used when the C++ mutex header is missing. AFAIK, this is
the case on Windows and not on Linux. Certainly not in OpenWrt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 260d4a346a)
2019-11-16 18:12:52 -08:00
Rosen Penev
4674e8f480
Merge pull request #10556 from rs/feature_nextdns_19_07
nextdns: add DNS over HTTPS with NextDNS integration
2019-11-15 14:11:54 -08:00
Olivier Poitrey
35a9ef61ea nextdns: add DNS over HTTPS with NextDNS integration
Maintainer: @rs

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2019-11-15 13:47:05 -08:00
Dirk Brenken
c1575ecf5c
banip: update 0.3.10
* add missing logd dependency
* check if logd is enabled during runtime
* some more init tweaks

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit de149441a4)
2019-11-15 16:58:04 +01:00
Florian Eckert
0f67fc96d8 mwan3: sync PKG_RELEASE number and PKG_VERSION with master
Since the merge of the luci master branch into the luci openwrt.19.07 branch,
the ubus API was not in sync anymore. So all commits from the master
branch where backported into the openwrt-19.07 branch. But this could
not be done linear. There were already some fixes cherry-picked from the
master and the version does not match anymore. This commit syncronized
the PKG_VERSION and the PKG_RELEASE again to make clear that the
version in master and openwrt-19.07 are even again and have so the
same software version until to this commit.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-11-15 09:59:09 +01:00
Daniel A. Maierhofer
62c9688adc mwan3: Add missing IPs to wanb
Maintainer: Florian Eckert @feckert
Compile tested: not needed
Run tested: x86_64

Description:
Only two of the four IPs defined for wan are found in wanb, adding it so it is the same.

Signed-off-by: Daniel A. Maierhofer <git@damadmai.at>
(cherry picked from commit 1e97156adc)
2019-11-15 09:57:20 +01:00
Florian Eckert
aa5a583869 mwan3: update version to 2.8.0
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e100de8bd8)
2019-11-15 09:56:29 +01:00
Florian Eckert
e842ea3941 mwan3: add netifd up info to mwan3 ubus status output
Add the netifd up status output to the mwan3 ubus status output.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 27db561752)
2019-11-15 09:51:50 +01:00
Florian Eckert
f20b96e4a5 mwan3: add enabled info to mwan3 ubus status
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit cfba93a203)
2019-11-15 09:49:39 +01:00
Florian Eckert
0c25f7a51c mwan3: add interface uptime netifd value to ubus mwan3 status output
Add missing netifd uptime info to ubus status call.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bfa849c14e)
2019-11-15 09:40:15 +01:00
Florian Eckert
3371703487 mwan3: rename downtime to offline
Rename downtime ubus output from mwan3 to offline.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6c2cd78c6f)
2019-11-15 09:39:41 +01:00
Florian Eckert
aa05eb448b mwan3: rename uptime to online
Rename uptime ubus output from mwan3 to online.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3be40786f5)
2019-11-15 09:39:17 +01:00
Yousong Zhou
2a64b3a440 collectd: remove the patch scaling ping_droprate from 0-1 to 0-100
Upstream project's behaviour of reporting this data source in range 0-1
is used by at least CentOS 7 collectd 5.8.1, very likely the same
behaviour is also in widely use by other distributions.

The change is important for providing consistent experience across
collectd deployments on different environments

Ref: https://github.com/collectd/collectd/pull/3244
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 2f66fa5c23)
Ref: https://github.com/openwrt/luci/issues/3308
2019-11-14 11:10:26 +00:00
yurtesen
84756e7f60 mwan3: Fix json_load fails with some data
Sometimes the return value of `ubus -S call network.interface.wan status`
cause `json_load` to return `Failed to parse message data` error.

To avoid this, the JSON data always should be quoted with double quotes.

Signed-off-by: Evren Yurtesen <eyurtese@abo.fi>
Removed quoatation marks from commit heading
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Update the version string from 2.8.1 (master) to 2.7.15 (openwrt-19.07)
(cherry picked from commit 94e0c78826)
2019-11-14 07:52:27 +01:00
Hauke Mehrtens
168c2928f9 io: Add TARGET_LDFLAGS to fix PIE
Add the OpenWrt TARGET_LDFLAGS to the compile command to activate PIE support
for the io tool when it is activated globally in OpenWrt.

Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
(cherry-picked from b46d21a54e)
2019-11-13 23:43:46 +01:00
Hauke Mehrtens
0441927b24 io: Fix printing 4 bytes memory on 64 bit systems
On 64 bit Linux systems long is 8 bytes long, on 32 bit Linux systems it
is 4 bytes long. Here we want to print 4 bytes and not 8 bytes, use int
instead of long.

This fixes printing 4 bytes on 64 bit systems.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry-picked from 9936e16b72)
2019-11-13 23:43:40 +01:00
Hauke Mehrtens
1f082d84dd io: Open /dev/mem with O_SYNC for uncached access
Only when /dev/mem is opened with O_SYNC the write and *read* is done
uncached. We saw wrong values read out from the hardware without setting
O_SYNC, the busybox devmem tool showed different values, when O_SYNC is
also set for the io tool, it reads out the same values as devmem.
When looking at the drivers/char/mem.c file in the kernel it is behaving
differently based on the O_DSYNC flag.

Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>
(cherry-picked from 90df0f3e24)
2019-11-13 23:43:36 +01:00
DENG Qingfang
39001de7b0 pcre: remove unnecessary dependency on C++ lib
Add libpcrecpp to PKG_CONFIG_DEPENDS to properly trigger
reconfiguration, avoiding unnecessary dependency.

This reverts commit 17090fecf1.
This reverts commit ec138f51ab.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry-picked from 41814de0fc)
2019-11-12 20:16:00 -08:00
Kenneth J. Miller
e91e3fd6ad ntpd: Fix libevent dependencies
Add required libevent2-pthreads dependency for all ntpd
subpackages.

Remove keygen-specific libevent2-core support as it is
automatically selected by the libevent2-pthreads dependency.

nptd: Bump PKG_RELEASE

Fixes: openwrt/packages#10307

Signed-off-by: Kenneth J. Miller <ken@miller.ec>
(cherry picked from commit ded6468744)
2019-11-12 14:51:29 +01:00
Hannu Nyman
d71f8c3c29
Merge pull request #10525 from jefferyto/python-six-1.13.0-openwrt-19.07
[openwrt-19.07] python-six: Update to 1.13.0
2019-11-11 19:36:54 +02:00
Jeffery To
daebf4aba9 python-six: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5be603a836)
2019-11-11 18:39:36 +08:00
Josef Schlehofer
aa4c5e7de6
Revert "Revert "perl-www-curl: curl 7.66.0 compatibility""
This is required as curl 7.66.0 was cherry-picked to openwrt-19.07 3
days ago. Otherwise, compilation of perl-www-curl fails.

This reverts commit ec6cd9b9c3.
2019-11-10 20:40:19 +01:00
Dirk Brenken
c75917c8a9
banip: update 0.3.9
* fix 'enabled' service check

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e38810f38e)
2019-11-10 19:10:07 +01:00
Dirk Brenken
49e57eadb3
banIP: update 0.3.8
* limit firewall hotplug trigger to certain wan 'INTERFACE' as well,
  to prevent possible race conditions during boot

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0dee2a92de)
2019-11-10 19:09:07 +01:00
Dirk Brenken
1fc8c2c4ea
adblock: update 3.8.10
* fix broken unbound integration

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit be7a89cecb)
2019-11-10 19:07:57 +01:00
Rosen Penev
840d6ddab4
Merge pull request #10515 from gladiac1337/haproxy-2.0.8-up2-owrt-19.07
[openwrt-19.07] haproxy: Update patches for HAProxy v2.0.8 + migrate to procd
2019-11-10 10:00:53 -08:00
Jan Hák
e0ca91a2fe
knot: update to version 2.9.0
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from commit f9e3d4e0fa)
2019-11-10 18:33:59 +01:00
Jan Hák
734a005187
knot: update to version 2.8.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from commit 8a82181c27)
2019-11-10 18:33:42 +01:00
Lucian Cristian
145bd2d19e
dovecot: update to 2.3.8
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry-picked from commit 962716aad7)
2019-11-10 18:32:04 +01:00
Jan Hák
f7cc8ad37b
libedit: update to 20191025-3.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from commit 440c27a4a5)
2019-11-10 18:31:41 +01:00
Josef Schlehofer
50dfcd79f5
dnscrypt-proxy2: Update to version 2.0.29
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 69316134c3)
2019-11-10 18:30:46 +01:00
Josef Schlehofer
a6f026ff5b
python-zipp: fix python-more-itertools dependency
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 426ed75dbe)
2019-11-10 18:30:30 +01:00
Jan Pavlinec
0faf7bfcc2
python-zipp: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit f0a79ca148)
2019-11-10 18:30:19 +01:00
Josef Schlehofer
e9748d34f5
bind: Update to version 9.14.7
Fixes CVE-2019-6475 and CVE-2019-6476

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 7b9af101f6)
2019-11-10 18:29:29 +01:00
Jakub Piotr Cłapa
91da56a942
perl: fixed host compilation of static perl on MacOS
All symbols on MacOS are prefixed with an underscore which
interfered with the filtering mechanism (added in perl 5.28)
for extension libraries to be linked into static perl.

Signed-off-by: Jakub Piotr Cłapa <jpc@loee.pl>
(cherry-picked from commit 3954356)
2019-11-10 18:28:23 +01:00
Jan Pavlinec
bb00671ad4
libmaxminddb: update to version 1.4.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 62a9110bc5)
2019-11-10 18:24:33 +01:00
Josef Schlehofer
d60dbbed2c
clamav: Update to version 0.101.4
Change deprecated options to a new one:
DetectBrokenExecutables to AlertBrokenExecutables
ArchiveBlockEncrypted to AlertEncrypted

Fixes: CVE-2019-12900 and CVE-2019-12625

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-10 17:00:43 +01:00
Christian Lachner
c58d563120 haproxy: Rework hotplug script for HAProxy
- Migrated init-script to procd.
- Removed the old hotplug script as it is unnecessary and
  caused long boot-times for r7800 and possibly others.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-10 11:04:48 +01:00
Christian Lachner
98a4cd0fd8 haproxy: Update patches for HAProxy v2.0.8
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.8.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-10 11:04:14 +01:00
Rosen Penev
ec6cd9b9c3
Revert "perl-www-curl: curl 7.66.0 compatibility"
This reverts commit 3d98d7fd05.

This was a bad backport.
2019-11-09 11:30:15 -08:00
Hannu Nyman
522aea0cad Revert "haproxy: Update patches for HAProxy v2.0.8"
This reverts commit 76a2da3fd4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-09 10:16:33 +02:00
Hannu Nyman
22bcd9e784 Revert "haproxy: Rework hotplug script for HAProxy"
This reverts commit c9ee50d190.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-11-09 10:16:02 +02:00
Hannu Nyman
b2febcc246
Merge pull request #10442 from gladiac1337/haproxy-2.0.8-up-owrt-19.07
[openwrt-19.07] haproxy: Update patches for HAProxy v2.0.8 + fix hotplug script
2019-11-09 09:42:01 +02:00
Dirk Brenken
7a1f32f704
banip: update 0.3.7
* fix a logical glitch in the hotplug event handler
* properly handle fatal iptables errors - even in subshells

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 49b43b81e8)
2019-11-08 19:19:18 +01:00
Dirk Brenken
848589d758
banip: update 0.3.6
* more startup tweaks
* re-use f_log function in helper scripts
* small fixes / polish up for forthcoming 19.07 release

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 72fba3a17b)
2019-11-08 19:18:52 +01:00
Dirk Brenken
7401166ea8
banip: update 0.3.5
* fix race condition in download utility detection during boot
* fix multiple possible bugs in ipset creation
* prevent parallel service starts
* refine service trigger handling
* add ssh daemon auto detection
* print to stdout if 'logger' is not available

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fcea2f75c3)
2019-11-08 19:18:27 +01:00
Dirk Brenken
be9e82b017
travelmate: update 1.5.2
* print to stdout if 'logger' is not available
* add support to set the service nice level (default is 0)
* small fixes / polish up for forthcoming 19.07 release

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0d406b2a42)
2019-11-08 19:11:28 +01:00
Dirk Brenken
fff155b2bf
adblock: update 3.8.9
* more startup tweaks
* re-use f_log function in helper scripts
* small fixes / polish up for forthcoming 19.07 release

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2c3cb6f1d1)
2019-11-08 19:08:52 +01:00
Dirk Brenken
bc89112c27
adblock: update 3.8.8
* print to stdout if 'logger' is not available
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9c82e9e282)
2019-11-08 19:08:43 +01:00
Hannu Nyman
d6d1100c1e
Merge pull request #10504 from Andy2244/samba-4.9.15-(openwrt-19.07)
[openwrt-19.07] samba4: update to 4.9.15
2019-11-08 19:58:07 +02:00
Andy Walsh
32a8209c55 samba4: update to 4.9.15
* update to 4.9.15
* fixes CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
* update smb.conf.template (aio, sendfile)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2019-11-08 16:03:10 +01:00
Zachary Cook
349d73b2c3 sqm-scripts: Add required new depends for luci-app-sqm
The new luci-compat package is required to be able to run luci-app-sqm, see:
d5dff8f9a5

Signed-off-by: Zachary Cook <zachcook1991@gmail.com>
2019-11-08 12:20:13 +01:00
Toke Høiland-Jørgensen
5c51d658cf sqm-scripts: Bump to v1.4.0
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2019-11-08 12:20:07 +01:00
Jan Pavlinec
94c4c1304a
libarchive: update to version 3.4.0
Changes:
remove backported patches
add bsdtar libopenssl variant
switch to github codeload
polish tab/spaces

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 8f3378e86d)
2019-11-08 11:00:09 +01:00
Rosen Penev
31a01e46c7
Merge pull request #10414 from stangri/19.07-https-dns-proxy
[19.07] https_dns_proxy: implement dnsmasq integration
2019-11-06 14:54:01 -08:00
Yousong Zhou
6d5e468f2d circleci: skip compiling packages not enabled
E.g. some packages are target, or arch specific, skip compiling them if
they cannot be enabled for current sdk.  This should reduce false
positives for packages like docker-ce etc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 4f3244db40)
2019-11-06 14:26:00 +00:00
Paul Spooren
ef4de15df8 build: only install changed packages
Installing all packages via ./scripts/feeds install -a produces a lot of
error messages, it is also possible to only install the packages which
were touched by the PR.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b8931afc94)
2019-11-06 14:25:38 +00:00
Josef Schlehofer
3f3c613ac5
btrfs-progs: Update to version 5.3.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 93254e6)
2019-11-05 23:48:01 +01:00
Josef Schlehofer
bfcdf4e202
syslog-ng: Update to version 3.24.1
Bump version also in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 72f8cda)
2019-11-05 23:14:00 +01:00
Josef Schlehofer
6f6c5d17c0
youtube-dl: Update to version 2019.10.29
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit fe5d1cdb93)
2019-11-05 22:50:54 +01:00
Josef Schlehofer
af20f836e0
youtube-dl: Update to version 2019.10.22
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit c16b416356)
2019-11-05 22:50:43 +01:00
Alexandru Ardelean
e31921f2af
net: seahub: remove inexistent deps
This looks like something was not cherry-picked, or was cherry-picked
incorrectly. Those packages don't exist.

Warnings are:
```
WARNING: Makefile 'package/feeds/packages/seafile-seahub/Makefile' has a dependency on 'django-simple-captcha', which does not exist
WARNING: Makefile 'package/feeds/packages/seafile-seahub/Makefile' has a dependency on 'django-statici18n', which does not exist
WARNING: Makefile 'package/feeds/packages/seafile-seahub/Makefile' has a dependency on 'django-webpack-loader', which does not exist
```

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-11-05 22:32:33 +01:00
Rosen Penev
16657121a1
Merge pull request #10458 from jefferyto/python-cffi-1.13.2-openwrt-19.07
[openwrt-19.07] python-cffi: Update to 1.13.2
2019-11-04 09:28:13 -08:00
Jeffery To
e1d9652edc python-cffi: Update to 1.13.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c21eee0df4)
2019-11-04 23:45:03 +08:00
Jeffery To
07835fc26e golang: Update to 1.13.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 37facb63f5cc9906f4b32791b572506f68e0d79e)
2019-11-04 22:55:53 +08:00
Rosen Penev
3d4c934584 sispmctl: Reduce ipk size
Do not install static libraries or symlinks as actual files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 238d6e1f90)
2019-11-03 10:31:56 -08:00
Rosen Penev
248c3d01fa sispmctl: Update to 4.2
Added license file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 5decb769f4)
2019-11-03 10:31:56 -08:00
Luiz Angelo Daros de Luca
c7bd76919f libgphoto2: libgphoto2_port.pc needed by dev
'pkg-config --exists libgphoto2' fails without libgphoto2_port.pc.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry-picked from c8fbe26c53)
2019-11-03 10:31:56 -08:00
Peter Liedholm
22ab1fcefe telldus-core: Doxygen in-file was not found.
Signed-off-by: Peter Liedholm <PeterFromSwe884@gmail.com>
(cherry-picked from 2a36c0421e)
2019-11-03 10:31:56 -08:00
Rosen Penev
42c85958fd treewide: Replace MD5SUM with HASH
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 5ae85b7952)
2019-11-03 10:31:55 -08:00
Sebastian Kemper
5bc62e00aa vim/host: fix build failures
Indeterminably vim/host fails on the build bots:

objects/fileio.o: In function `readfile':
fileio.c:(.text+0x5b3f): undefined reference to `libiconv_close'
fileio.c:(.text+0x61ad): undefined reference to `libiconv_close'
fileio.c:(.text+0x62f6): undefined reference to `libiconv'
fileio.c:(.text+0x6794): undefined reference to `libiconv_close'
objects/fileio.o: In function `buf_write_bytes':
fileio.c:(.text+0xa1fe): undefined reference to `libiconv'
fileio.c:(.text+0xa54a): undefined reference to `libiconv'
objects/fileio.o: In function `buf_write':
fileio.c:(.text+0xaf48): undefined reference to `libiconv_close'
objects/mbyte.o: In function `my_iconv_open.part.18':
mbyte.c:(.text+0x2ced): undefined reference to `libiconv_open'
mbyte.c:(.text+0x2d3a): undefined reference to `libiconv'
mbyte.c:(.text+0x2d5f): undefined reference to `libiconv_close'
objects/mbyte.o: In function `convert_setup_ext':
mbyte.c:(.text+0x33bf): undefined reference to `libiconv_close'
objects/mbyte.o: In function `string_convert_ext':
mbyte.c:(.text+0x363c): undefined reference to `libiconv'
collect2: error: ld returned 1 exit status
link.sh: Linking failed
Makefile:1949: recipe for target 'vim' failed

This is addressed by pulling in libiconv/host. Also configure switches
are added that keep external dependencies to a minimum, for instance
avoiding to link to X11 or gettext.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from dc727a2430)
2019-11-03 10:31:55 -08:00
Christian Lachner
c9ee50d190 haproxy: Rework hotplug script for HAProxy
- The old hotplug script caused long boot-times for r7800 and
  possibly others. The new script is now only triggered by iface
  changes for wan and lan interfaces.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-03 12:36:27 +01:00
Christian Lachner
76a2da3fd4 haproxy: Update patches for HAProxy v2.0.8
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.8.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-11-03 12:36:18 +01:00
Jeffery To
58ed21040c
python,python3: Add PYPI_SOURCE_NAME to pypi.mk
This adds a new (optional) variable, PYPI_SOURCE_NAME, to pypi.mk.

For some PyPi packages (e.g. aiohttp_cors, click, django-compressor),
the name of the package and the source tarball name are slightly
different (usually by capitalisation or hyphen/underscore change).

This new variable is to make this difference explicit. PYPI_NAME is
meant for the "official" package name, whereas PYPI_SOURCE_NAME is meant
for the source tarball name.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 1bacdd52f7)
2019-11-02 20:21:46 +01:00
Alexander Ryzhov
c8113fcd05 google-authenticator-libpam: fix install section
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry-picked from 422e8d9d1c)
2019-11-02 11:57:15 -07:00
Jeffery To
866b42c60e
python,python3: Add pypi makefile
This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit add4c42191)
2019-11-02 19:01:21 +01:00
Dirk Brenken
4900b2cb2d
adblock: update 3.8.7
* prevent forced parallel adblock service starts
* refine service trigger

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a9aae9095f)
2019-11-02 06:18:49 +01:00
Stan Grishin
0d146c2317 https-dns-proxy: implement dnsmasq integration
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-31 12:55:23 -07:00
Alexandru Ardelean
807c557cf9 django: bump to version 1.11.25
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e9e687a1f1)
2019-10-30 23:16:57 +08:00
Alexandru Ardelean
4574e8fcb9 python-cffi: bump to version 1.13.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from dff2fe2963)
2019-10-30 05:49:55 +08:00
Luiz Angelo Daros de Luca
702c655874 ruby: update to 2.6.5
2.6.5 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.6.4 fixes:
* Multiple jQuery vulnerabilities in RDoc

Changelog: https://github.com/ruby/ruby/compare/v2_6_3...v2_6_5

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit d3d0c28149)
2019-10-27 16:09:43 -03:00
Josef Schlehofer
4a852e9df4
btrfs-progs: Update to version 5.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 8262696cc4)
2019-10-25 11:52:56 +02:00
Jeffery To
bda873d0e0 circleci: Use 19.07 snapshot SDK
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-25 02:44:25 +02:00
Jeffery To
e16eabc026 circleci: Add 19.07 GPG/usign public keys, verify keys
This also updates the user id comments for GPG keys and untrusted
comments for usign keys.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 89d6f51c98978bbdb61c6ada9d2264cf7dca854c)
2019-10-25 02:44:25 +02:00
Alexandru Ardelean
f18bc652c7
django-ranged-response: update packaging format + add python3 variant
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Not updating deps here, since that will be done in the next changeset that
will convert packages to the Python[3] packaging format.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 70ebc7a2f4)
2019-10-24 21:33:37 +02:00
Rosen Penev
88aec0826e
Merge pull request #10342 from gladiac1337/haproxy-2.0.8-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.8
2019-10-23 09:02:44 -07:00
Josef Schlehofer
629b8fb60e
flup: add Python3 variant and src package
- Add PKG_LICENSE_FILES
- Reorder things in Makefile
- Add dependency python3-logging otherwise I cannot import
flup.server.ajp
flup.server.scgi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit a5b2ba9b4d)
2019-10-23 15:34:59 +02:00
Christian Lachner
a6ace8b6db haproxy: Update HAProxy to v2.0.8
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-10-23 15:13:47 +02:00
Josef Schlehofer
6f392ad0cb
django-statici18n: fix changes in merge 2019-10-23 09:16:42 +02:00
Josef Schlehofer
c4782e6e8b
django-web-pack-loader: fix changes in merge conflict 2019-10-23 09:15:47 +02:00
Dirk Brenken
0acc2e7a2c
travelmate: update 1.5.1
* fix section naming in wireless & travelmate config
* check/enable disabled 'wifi-device' sections
* fix LuCI frontend issues (separate PR)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7554f5d891)
2019-10-23 06:23:04 +02:00
Eneas U de Queiroz
db4cbf71a5
django: move django* packages under django submenu
This changes the python[3]-django dependencies in packages to be
non-selecting, and adds an MDEPENDS line so that the *-src packages get
placed inside the django menu as well.

Added MENU:= to the src-package definitions in python[3]-package.mk,
so it does not import that setting from the binary package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 90527d75af)
2019-10-23 01:59:52 +02:00
Alexandru Ardelean
19e137162d
django-simple-captcha: update packaging format + add python3 variant
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Also, changing here is the download URL to github's codeload, since that
one offers .tar.gz archives.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 545cff8b63)
2019-10-23 01:57:51 +02:00
Alexandru Ardelean
b686fa3f48
python-qrcode: update Eneas' email as per prev request
The email change was part of a previous request from a different PR series.
In this series, the change is the only thing left to do (from what the
original changeset intended to do).

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f5eb040e6b)
2019-10-23 01:55:16 +02:00
Josef Schlehofer
7c48116933
python-qrcode: add Python3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 6c7a31ec5e)
2019-10-23 01:55:00 +02:00
Alexandru Ardelean
cb04554620
seafile-seahub: use python-pillow as dep
The pillow package has been updated to the Python[3] packaging format, and
now the package names are `python-pillow` & `python3-pillow`.
This change updates seafile-seahub to use it.

Not updating other packages as they will be converted to Python[3]
packaging format.

And not bumping PKG_RELEASE here as it will be done in the last commit that
updates deps for seafile-seahub.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit cc33edc138)
2019-10-23 01:53:03 +02:00
Alexandru Ardelean
44b5bcbad1
net: seafile-seahub: update maintainer & license file
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 5fd0baac09)
2019-10-23 01:52:23 +02:00
Alexandru Ardelean
7257bb05a9
django-restframework: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 441f486081)
2019-10-23 01:51:26 +02:00
Alexandru Ardelean
d386164ae7
django-postoffice: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 15272fcc65)
2019-10-23 01:51:12 +02:00
Alexandru Ardelean
2a8c5fe35e
django-picklefield: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 6a7f547a38)
2019-10-23 01:50:56 +02:00
Alexandru Ardelean
74f3bf88df
django-jsonfield: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 7bbc5131f2)
2019-10-23 01:50:43 +02:00
Alexandru Ardelean
03852aa990
django-formtools: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit e4d8127cae)
2019-10-23 01:50:29 +02:00
Alexandru Ardelean
8df3e1ae45
django-compressor: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 35cddd9b6f)
2019-10-23 01:50:17 +02:00
Alexandru Ardelean
c3710fadac
django-appconf: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 3392fbc6fc)
2019-10-23 01:50:05 +02:00
Alexandru Ardelean
f54d326bc4
seafile-seahub: whitespace update
Just un-indent the package definition a bit.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 0b29c86969)
2019-10-23 01:49:48 +02:00
Alexandru Ardelean
dcadf6baac
django-constance: convert to python pkg format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1b2936a2d0)
2019-10-23 01:49:35 +02:00
Alexandru Ardelean
f8ff5017d2
django: convert to python pkg format + add python3 variant
This also updates all dependencies to use the new `python-django` package.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f026dba26e)
2019-10-23 01:49:15 +02:00
Alexandru Ardelean
88c3765a69
seafile-seahub: de-couple build a bit more
seafile-seahub's build is a mess.
It hijacks some OpenWrt mk files into the build.

This can be avoided by provided some of the required parameters via
env-vars and patching the env-vars into the build.
Which is what this patch does.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit cf99755444)
2019-10-23 01:45:21 +02:00
Alexandru Ardelean
b9a352b256
seafile-seahub: move all prefix-ed python packages to var
The change is mostly organizational.
More packages will be moved to have python- or python3- prefixes.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1c5f5b61d3)
2019-10-23 01:45:06 +02:00
Sven Roederer
3525e3e55c collectd: build RouterOS modules
This allows collectd to get data of Mikrotik devices in a improved way than via SNMP.

closes #10327

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
cherry-pick does not apply cleanly changed PKG_RELEASE number.
(cherry picked from commit 4261f45734)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2019-10-22 14:45:49 +02:00
Alexandru Ardelean
d735b2be96 python-pillow: bump to version 6.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-22 10:54:39 +02:00
Josef Schlehofer
3569a3b029 pillow: add Python3 variant and update to 6.1.0
- Add @commodo as maintainer

Co-Authored-By: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-22 10:54:22 +02:00
Rosen Penev
2eee84205e klish: Remove unused libstdcpp dependency
This is not a C++ project.

Added PKG_BUILD_PARALLEL for faster compilation.

Cleaned up Makefile to modern standards.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b288514308)
2019-10-21 14:19:03 -07:00
Josef Schlehofer
6bdd506fce
youtube-dl: Update to version 2019.10.16
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 07d5595)
2019-10-21 21:01:57 +02:00
Sven Roederer
137069f90e
librouteros: add package
librouteros is a library to communicate with RouterOS, the operating system of MikroTik's
RouterBoards. It uses the API port provided by those systems to connect and talk to the
devices.

API connections must be explicitly enabled. To do so, issue the following command:

> /ip service enable api

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry-picked from commit abaca50b57)
2019-10-21 21:01:40 +02:00
Hannu Nyman
c9916f8cc7
Merge pull request #10323 from jefferyto/python-2.7.17-openwrt-19.07
[openwrt-19.07] python: Update to 2.7.17, refresh patches
2019-10-21 21:53:43 +03:00
Rosen Penev
1596e7555c
Merge pull request #10311 from stangri/19.07-vpnbypass
[19.07] vpnbypass: bugfix: PROCD command not found on stop
2019-10-21 09:12:14 -07:00
Jeffery To
18a7c29f55 python: Update to 2.7.17, refresh patches
Patches already merged and so removed:
* 011-fix-ssl-build-use-have-npn.patch
* 019-bpo-36216-Add-check-for-characters-in-netloc-that-normalize-to-separators-GH-12216.patch
* 020-bpo-36216-Only-print-test-messages-when-verbose-GH-12291.patch
* 021-2.7-bpo-35121-prefix-dot-in-domain-for-proper-subdom.patch
* 022-bpo-30458-Disallow-control-chars-in-http-URLs-GH-13315.patch
* 023-bpo-35907-Avoid-file-reading-as-disallowing-the-unnecessary-URL-scheme-in-urllib-GH-11842.patch
* 027-bpo-38243-Escape-the-server-title-of-DocXMLRPCServer.patch
* 028-bpo-34155-Dont-parse-domains-containing-GH-13079.patch

Patches no longer necessary and so removed:
* 017_lib2to3_fix_pyc_search.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 83b300aa83)
2019-10-21 23:42:32 +08:00
Josef Schlehofer
0882737b4a
python3: Update to version 3.7.5
setuptools: Updated to version 41.2.0
pip: Updated to version 19.2.3

Removed patches:
- 017: code was refactored
- 02{5,6,7,8}: those patches were backported from upstream and they are
included in 3.7.5

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-21 15:19:32 +02:00
Jeffery To
d97f776050 python-ipaddress: Update to 1.0.23
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 21858952976aad8ad92cbe76351c5535c39a3f2f)
2019-10-21 21:10:59 +08:00
Jeffery To
2dfbcb7b99 python-automat: Update to 0.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 57b4938babc41aa6e80709e4ba29bc6bec6a9472)
2019-10-21 21:10:38 +08:00
Jeffery To
5e981bfffe python-attrs: Update to 19.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 8c3f7dcc36a7b8af2069bbbd67cb745ac4b21dec)
2019-10-21 21:10:14 +08:00
Jeffery To
b89bf0470d python-cryptography: Update to 2.8
With this update, the package no longer depends on python-asn1crypto[1].

[1]: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#28---2019-10-16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 23f308123c39236c6ceeaa7ffa8ecf18fda29e4d)
2019-10-21 13:44:25 +02:00
Jeffery To
bf66776f93
python-cffi: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 141ead6bd7)
2019-10-21 13:43:25 +02:00
Stan Grishin
7fc6b591e3 vpnbypass: bugfix: PROCD command not found on stop
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-20 21:25:48 -07:00
Josef Schlehofer
e4f1737056
git: Update to version 2.23.0
Refresh patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d8d736711d)
2019-10-21 03:33:24 +02:00
Josef Schlehofer
45f3e75558
dnscrypt-proxy2: Update to version 2.0.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 4370331d79)
2019-10-21 03:33:04 +02:00
Josef Schlehofer
99d8282016
netdata: Update to version 1.18.1
Enable PKG_BUILD_PARALLEL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 603ead3ad8)
2019-10-21 03:32:43 +02:00
Josef Schlehofer
a1a665c7e2
golang: Update to version 1.13.3
Fixes CVE-2019-17596

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 10d55f6)
2019-10-21 03:31:56 +02:00
Dirk Brenken
0b3bd00861
travelmate: update 1.5.0
* add WPA3 support
* fix service status message
* refine trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ab51b1ba34)
2019-10-20 07:24:28 +02:00
Dirk Brenken
6da95de9ef
adblock: minor update 3.8.6-2
* fix service status message
* refine readme regarding reload cron job (provided by @novoid)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit a94610c88f)
2019-10-20 07:20:30 +02:00
Josef Schlehofer
a454ee3cd6
bind: Update to version 9.14.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 61dcd6849f)
2019-10-20 02:06:08 +02:00
Josef Schlehofer
98519844ac
bind: Update to version 9.14.5
Add PKG_LICENSE_FILES

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 8ca1525a8d)
2019-10-20 02:05:55 +02:00
Rosen Penev
0974ded57c
libssh2: Remove old artifacts from autotools platform
Removed PKG_FIXUP. It has no meaning with CMake.

Replaced PKG_INSTALL with CMAKE_INSTALL. Consequentially, removed
InstallDev section.

Added ABI_VERSION to force package rebuilds when it increases.

Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license tag.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit 6a1cd83265)
2019-10-20 00:32:06 +02:00
Rosen Penev
55ce4621cf
libssh2: Don't build tests
Speeds up build and fixes OpenSSL support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit a447e1c6b2)
2019-10-20 00:31:52 +02:00
Jan Pavlinec
ed0bc1713c
libssh2: update to version 1.9.0 (security fix)
Changes:
Fix CVE-2019-13115
Remove old patches
Switch to cmake

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 9c1a23d977)
2019-10-20 00:31:40 +02:00
Jan Pavlinec
fe3c979d61
irssi: update to version 1.2.2 (security fix)
Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit b42159dea3)
2019-10-20 00:24:00 +02:00
Josef Schlehofer
1c04ac8ece
sudo: Update to version 1.8.28p1
- Refreshed patches
- Remove inactive maintainer

Fixes: CVE-2019-14287

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 35b215dfff)
2019-10-19 23:04:48 +02:00
Rosen Penev
068c774beb rtorrent: Switch to using static libtorrent
rtorrent is the only user of libtorrent. Statically link to save space.

Added usleep patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 358495f118)
2019-10-19 12:07:57 -07:00
Rosen Penev
09ee71062e rtorrent: Update to 0.9.8
Switch to codeload. A lot simpler.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 84c92f215d)
2019-10-19 12:06:25 -07:00
Rosen Penev
df85170032 rtorrent: Enable IPv6 support
Other Makefile cleanups as well.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 343e2a07e4)
2019-10-19 12:06:12 -07:00
Rosen Penev
ae7ad28287 libtorrent: Switch to static library.
libtorrent is only used by rtorrent. Switch to a static library to save
space.

Removed libsigc++ dependency. It seems it's not needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from e56fada5a8)
2019-10-19 12:05:08 -07:00
Rosen Penev
aa3107b960 libtorrent: Update to 0.13.8
Removed upstreamed patches.

Small change to IPv6 configure flag.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from a328861269)
2019-10-19 12:04:56 -07:00
Rosen Penev
07ee41dba2 libtorrent: Enable IPv6 and clean up Makefile
This was not touched since I took maintainership.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 655eed48dc)
2019-10-19 12:04:45 -07:00
Rosen Penev
0b0d20a75c libsigcxx: Remove
It's no longer needed with libtorrent. No other package depends on it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ad758ba286)
2019-10-19 12:02:38 -07:00
Rosen Penev
6e4c17eabf gptfdisk: Switch to using uClibc++
Added patches sent upstream to fix usage with uClibc++.

Cleaned up license information.

Added several size optimizations.

Several other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-19 12:00:44 -07:00
Josef Schlehofer
b4d6806a30
netdata: Update to version 1.18.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit bd5207a)
2019-10-19 17:05:27 +02:00
Rosen Penev
d92c307c61 knxd: Makefile cleanups
argp-standalone is only needed for non GLIBC targets.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed unnecessary C/LDFLAGS.

Remove libstdcpp depends. It's included with libfmt.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 5a7ac1d83b)
2019-10-17 16:39:03 -07:00
Rosen Penev
d55ec7ca09 espeak: Compile with uClibc++
Several Makefile cleanups.

Added PKG_BUILD_PARALLEL for faster compilation.

Several size optimizations applied.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 21e195f657)
2019-10-17 16:39:03 -07:00
Rosen Penev
8774958556 libzmq: Remove uClibc++ support
libzmq is used by fbzmq, which absolutely requires libstdcpp since it's a
C++14 project. There's no point in using two libc++.

Cleaned up Makefile for consistency between packages.

Added nanosleep patch for platforms that are missing usleep.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ad11587c40)
2019-10-17 16:39:03 -07:00
Rosen Penev
5ca357ef48
Merge pull request #10265 from ewsi/feature_dcwifi_openwrt-19.07
[19.07] dcwifi: Add Dual Channel Wi-Fi component packages
2019-10-17 13:20:09 -07:00
Rosen Penev
357ea160b1 crtmpserver: Switch to CMake and uClibc++
Smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-16 19:21:02 -07:00
Carey Sonsino
82a2e3f55f dcwifi: Add Dual Channel Wi-Fi component packages
dcstad: Dual Channel Wi-Fi Station Daemon
dcwapd: Dual Channel Wi-Fi Access Point Daemon
libdcwproto: Dual Channel Wi-Fi Protocol Library
libdcwsocket: Dual Channel Wi-Fi Socket Library
macremapper: MAC Address Remapper Linux Kernel Module
mrmctl: Userland tool to get/set remap rules

Signed-off-by: Carey Sonsino <careys@edgewaterwireless.com>
Signed-off-by: Carey Sonsino <csonsino@gmail.com>
2019-10-16 16:55:38 +00:00
Josef Schlehofer
0183071b22
Merge pull request #10253 from jefferyto/python-pyasn1-modules-0.2.7-openwrt-19.07
[openwrt-19.07] python-pyasn1-modules: Update to 0.2.7
2019-10-15 21:49:44 +02:00
Jeffery To
a0c1c2da6a python-pyasn1-modules: Update to 0.2.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5848f67e41)
2019-10-16 02:15:00 +08:00
Rosen Penev
f745880429
Merge pull request #10236 from jefferyto/gammu-fix-lib-symlinks-openwrt-19.07
[openwrt-19.07] gammu: Fix lib symlinks
2019-10-14 19:16:00 -07:00
Jeffery To
236e6a08cf gammu: Remove python dependency, fix lib symlinks
This removes the python dependency from the package; according to the
maintainer[1][2] the software does not depend on python.

This also fixes the symlinks for libGammu.so and libgsmsd.so.
Previously, the symlinks were overwritten by $(INSTALL_BIN) with copies
of their sources.

[1]: https://github.com/openwrt/packages/issues/8893#issuecomment-539136531
[2]: https://github.com/openwrt/packages/issues/8893#issuecomment-539152794

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 027ed92f6e)
2019-10-15 01:17:48 +08:00
Rosen Penev
708fac7b3b gammu: Update to 1.41
Remove upstreamed patch.

Switched conditional dependency to python3 in preparation for deprecating
Python 2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from 99bbb8af31)
2019-10-15 01:17:04 +08:00
Rosen Penev
c3fb7d3a7d
Merge pull request #10203 from ynezz/upstream/19.07/cgi-io-backports
[openwrt-19.07] cgi-io backports
2019-10-14 01:03:45 -07:00
Jeffery To
2685ba269f shinit: Add package
This package adds support for /etc/shinit and ~/.shinit files, which
contain commands to be run at the start of all interactive shells.
(/etc/profile and ~/.profile are read for login shells only.)

This is useful for those who regularly open non-login, interactive
shells, for example users of GNU Screen or tmux.

(This is based on a patch[1] I submitted for OpenWrt master, but there
does not appear to be much interest in merging the change.)

(This package uses the ENV shell variable, of which the POSIX standard
has a brief description[2]. The dash manpage[3] also describes how the
ENV variable is handled. (dash is the basis for busybox ash.))

[1]: https://patchwork.ozlabs.org/patch/1094493/
[2]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#tag_18_05_03
[3]: https://manpages.debian.org/buster/dash/dash.1.en.html#Invocation

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c04dff7965)
2019-10-12 04:39:31 +08:00
Petr Štetiar
6a4c0cab44 cgi-io: iron out extra compiler warnings
Fixes following errors:

 main.c:458:37: error: comparison of integer expressions of different signedness: ‘int’ and ‘size_t’ {aka ‘long unsigned int’} [-Werror=sign-compare]
 main.c:463:17: error: comparison of integer expressions of different signedness: ‘int’ and ‘long unsigned int’ [-Werror=sign-compare]
 main.c:518:35: error: comparison of integer expressions of different signedness: ‘ssize_t’ {aka ‘long int’} and ‘size_t’ {aka ‘long unsigned int’} [-Werror=sign-compare]
 main.c:157:3: error: ignoring return value of ‘read’, declared with attribute warn_unused_result [-Werror=unused-result]
 main.c:763:3: error: ignoring return value of ‘chdir’, declared with attribute warn_unused_result [-Werror=unused-result]

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit bb6cdb804c)
2019-10-11 16:13:29 +02:00
Petr Štetiar
6677274844 cgi-io: cmake: enable extra compiler warnings
Spotting issues during compilation is cheaper.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 4e7411a8d0)
2019-10-11 16:13:20 +02:00
Petr Štetiar
0698c1ab29 cgi-io: cmake: fix libraries lookup
In order to make it compile properly in more environments.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit fd47e99be4)
2019-10-11 16:13:11 +02:00
Ansuel Smith
af5585ac88 cgi-io: fix read after end errors
Currently cgi-io try to read data after the data ended.
- Adds "-" to whitelist char
- In main_upload is tried to consume the buffer while it's already readed by the while loop before

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 535b2b6bd8)
2019-10-11 14:33:24 +02:00
Jo-Philipp Wich
92bea7f8e9 cgi-io: use splice() to stream backup archive
This improves the I/O performance when outputting large backups.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit a8b4a28372)
2019-10-11 14:33:24 +02:00
Jo-Philipp Wich
a1e87b4e0e cgi-io: pass appropriate HTTP error codes to failure()
Instead of always replying with a generic 500 internal server error code,
use more appropriate codes such as 403 to indicate denied permissions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8c22db6531)
2019-10-11 14:33:23 +02:00
Jo-Philipp Wich
13075d4d51 cgi-io: add download operation
Add a new `cgi-download` applet which allows to retrieve the contents
of regular files or block devices.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "path" containing the file path to
download.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required acl rules to grant download access
to files or block devices:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "download", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/etc/config/*", "read" ],
            [ "/dev/mtdblock*", "read" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ab2a2b080d)
2019-10-11 14:33:23 +02:00
Jo-Philipp Wich
0fc83858fc cgi-io: use different acl scopes for path and command permissions
Use the `cgi-io` scope to check for permission to execute the requested
command (`upload`, `backup`) and the `file` scope to check path
permissions.

The reasoning of this change is that `cgi-io` is usually used in
conjunction with `rpcd-mod-file` to transfer large file data out
of band and `rpcd-mod-file` already uses the `file` scope to manage
file path access permissions. After this change, both `rpc-mod-file`
and `cgi-io` can share the same path acl rules.

Write access to a path can be granted by using an ubus call in the
following form:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/var/lib/uploads/*", "write" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit c8a86c8c8e)
2019-10-11 14:31:49 +02:00
Jo-Philipp Wich
76d741c990 cgi-io: require whitelisting upload locations
Introduce further ACL checks to verify that the request-supplied
upload location may be written to. This prevents overwriting things
like /bin/busybox and allows to confine uploads to specific directories.

To setup the required ACLs, the following ubus command may be used
on the command line:

ubus call session grant '{
  "ubus_rpc_session": "d41d8cd98f00b204e9800998ecf8427e",
  "scope": "cgi-io",
  "objects": [
    [ "/etc/certificates/*", "write" ],
    [ "/var/uploads/*", "write" ]
  ]
}'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 22be9a1c01)
2019-10-11 14:04:11 +02:00
Rosen Penev
c6f2699f96
Merge pull request #10183 from jefferyto/python-attrs-19.2.0-openwrt-19.07
[openwrt-19.07] python-attrs: Update to 19.2.0
2019-10-09 12:50:28 -07:00
Dirk Brenken
5c54504498
banip: update 0.3.1
* the WAN auto detection now supports multiple interfaces, too
* no longer filter out possible LAN devices
* add a new DoH (DNS over HTTPS) blocklist source with public
  DoH DNS server addresses, to effectively block client side DoH
  communication, e.g. via Firefox or Chrome

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 70ab67649b)
2019-10-09 19:40:04 +02:00
Dirk Brenken
bfdbf137ea
banip: update 0.3.0
* new 'ca-bundle' dependency as all https connections
  are now validated by default
* automatically select the download utility: 'aria2', 'curl',
  'uclient-fetch' with libustream-* or wget are supported
* track & ban failed LuCI login attempts as well
* add a small log/banIP background monitor to block
  SSH/LuCI brute force attacks in realtime (disabled by default)
* add a config version check (please update your default config!)
* made the automatic wan detection more stable
* fix the IPv6 logfile parser
* fix the service status message
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ff8b853a6d)
2019-10-09 19:39:19 +02:00
Karl Palsson
6b8870a353 net/mosquitto: drop obsolete libuuid dependency
libuuid was dropped as a dependency in mosquitto 1.6.0

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-10-09 13:50:14 +00:00
Alexander Ryzhov
3d98d7fd05 perl-www-curl: curl 7.66.0 compatibility
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry-picked from 7910715d86)
2019-10-08 14:57:26 -07:00
Hirokazu MORIKAWA
bdbdd1d749 icu: update to 65.1
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 23adefbb7b)
2019-10-08 14:54:56 -07:00
Rosen Penev
d1f0d0f2cc fbzmq: Update to 2019.10.07.00
Added patch that adds libfolly boost dependencies.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 7a5326dd29)
2019-10-08 14:49:09 -07:00
Rosen Penev
1220667338 fbthrift: Update to 2019.10.07.00
Added patch to remove boost-thread dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from dbfea329d3)
2019-10-08 14:48:51 -07:00
Rosen Penev
90643b6193 librsocket-cpp: Update to 2019-10-07
Added patch to remove boost-thread dependency.

Added size optimizations.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8ceee72c77)
2019-10-08 14:48:28 -07:00
Rosen Penev
2defef0a61 libwangle: Update to 2019.10.07.00
Added patch to remove boost-thread dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from caf1a153d3)
2019-10-08 14:48:00 -07:00
Rosen Penev
02a7ae6572 libfizz: Update to 2019.10.07.00
Add patch removing boost-thread dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from cc1b52c44a)
2019-10-08 14:47:40 -07:00
Rosen Penev
fbc1c29a7d libfolly: Update to 2019.10.07.00
Added patch to remove boost-thread.

Removed uClibc-ng patch. libfolly no longer builds there.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b9000043bf)
2019-10-08 14:47:17 -07:00
Jeffery To
863c1a41b4 python-attrs: Update to 19.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-09 05:21:03 +08:00
Hannu Nyman
3b1cf245fe nano: update to 4.5
Update nano editor to version 4.5.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit bfd66f2d23)
2019-10-07 18:20:40 +03:00
Hannu Nyman
7af62d891a
Merge pull request #10165 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
2019-10-07 18:09:35 +03:00
Josef Schlehofer
9fd74cbb02
unbound: Update to version 1.9.4
Fixes CVE-2019-16866

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 1caf170daf)
2019-10-07 01:12:20 +02:00
Stan Grishin
aac235151b simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-06 09:34:03 -07:00
Hannu Nyman
68fecc3d65
Merge pull request #10158 from gladiac1337/haproxy-2.0.7-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.7
2019-10-05 17:17:33 +03:00
Christian Lachner
62e42b4720 haproxy: Update HAProxy to v2.0.7
- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.7.html)

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-10-05 14:05:19 +02:00
Hannu Nyman
51abacee5e
Merge pull request #10152 from jefferyto/python-bpo-38243-34155-openwrt-19.07
[openwrt-19.07] python,python3: Fix CVE-2019-16056, CVE-2019-16935
2019-10-05 11:27:32 +03:00
Hannu Nyman
3ebf25c608
Merge pull request #10144 from stangri/19.07-simple-adblock
[19.07] simple-adblock: bugfix and improvements (check description)
2019-10-05 11:25:57 +03:00
Jeffery To
18add705fa python,python3: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-05 00:04:39 +08:00
Jeffery To
1d6436623a python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:46:39 +08:00
Stan Grishin
fe2114d785 simple-adblock: bugfix and improvements (check description)
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-10-03 18:42:14 -07:00
Hannu Nyman
bb1c19ffb8 haveged: convert to procd
Convert haveged init script to use procd

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4f717a6f65)
2019-10-01 23:14:14 +03:00
Hannu Nyman
c9ca6037a7 haveged: update to 1.9.8
Update haveged to 1.9.8

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e5b308308b)
2019-10-01 22:10:30 +03:00
Nuno Goncalves
55ae829a14 watchcat: make compatible with updated busybox ash array handling (closes #10127)
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2019-10-01 19:42:53 +02:00
Eneas U de Queiroz
4bbeb730a5
python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit acf7c540ca)
2019-09-30 16:42:59 -03:00
Eneas U de Queiroz
d9b708fa38
oniguruma: update to release 6.9.3
This release incorporates fixes for CVE-2019-13224 and CVE-2019-13225,
and "fixed many problems (found by libfuzzer programs)."

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit b7d0a82a7f)
2019-09-30 16:30:10 -03:00
Josef Schlehofer
faf6ec5800
python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:02:40 +02:00
Rosen Penev
7c74b6c45a
Merge pull request #10112 from commodo/django-sec-19.07
django: Update to 1.11.24
2019-09-30 00:48:10 -07:00
Rosen Penev
33ee8d1ec3 django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 64a02079da)
2019-09-30 10:27:06 +03:00
William Fleurant
d0fff76c2e
yggdrasil: bump to 0.3.9
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 7296ff1b5c)
2019-09-29 19:04:31 -07:00
Josef Schlehofer
f2a06eb9dc
golang: Update to version 1.13.1
Fixes CVE-2019-16276

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 65b7bd6cc0)
2019-09-29 20:42:52 +02:00
Josef Schlehofer
6a25e7f5ff
youtube-dl: Update to version 2019.9.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 9ed0d76b34)
2019-09-29 20:42:42 +02:00
Josef Schlehofer
e59ac33808
dnscrypt-proxy2: Update to version 2.0.27
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit b9fbb90fd4)
2019-09-29 20:42:31 +02:00
Jan Pavlinec
dda4bd1f90
expat: update to version 2.2.7 (security fix)
Fixes:
CVE-2018-20843

Changes:
add PKG_CPE_ID
switch to xz
remove maintainer

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 70c62ef2d7)
2019-09-29 10:00:51 +02:00
Claudius Ellsel
05ad389f41
adblock: More cosmetic changes and more detailed installation instructions to README.md
Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 6121af755d)
2019-09-29 08:01:02 +02:00
Claudius Ellsel
df4452ade3
adblock: Cosmetic changes to README.md
Add code blocks for easier reading and change "dns" to "DNS".

Signed-off-by: Claudius Ellsel <claudius.ellsel@live.de>
(cherry picked from commit 088a14e5ce)
2019-09-29 07:59:37 +02:00
Johannes Rothe
bbc6a303a1
travelmate: add support for optional args in auto-login script
This can be helpful for example in hotels where you need to
enter a new user/password combination every week.

Signed-off-by: Johannes Rothe <mail@johannes-rothe.de>
(cherry picked from commit a7f87f939d)
2019-09-29 07:58:00 +02:00
Jeffery To
2c829c973b
golang: Use new -trimpath option when compiling Go packages
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 22ee6e86a0)
2019-09-29 00:42:22 +02:00
Xingwang Liao
c7f1bdc592
golang: Update to 1.13
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry-picked from commit 0849e32659)
2019-09-29 00:42:09 +02:00
Josef Schlehofer
da75f8612a
netdata: Update to version 1.17.1
Patch 002 - Force Python3 is no longer applying, let's try to throw it
away to see if it is still necessary

Patch 003 - Was backported from the master branch and it was included in
Netdata version 1.17.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 5e89816)
2019-09-28 11:39:48 +02:00
Rosen Penev
4c05bd2481
Merge pull request #10097 from neheb/boooo
[19.07]Update boost and other fixes
2019-09-27 16:07:32 -07:00
Richard Yu
2d6c0988bc
dump1090: update to 3.7.2
and use GitHub release tarball instead of git

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry-picked from a6a0f4edee)
2019-09-27 13:07:43 -07:00
Rosen Penev
11e9b5e969
dump1090: Update to version 3.7.1
Repository was moved.

Also cleaned up Makefile slightly.

Ran init script through shellcheck.

Added PKG_BUILD_PARALLEL for faster compilation.

Added several CFLAGS and LDFLAGS for smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f3245e6c7d)
2019-09-27 13:07:18 -07:00
Rosen Penev
f3473adf5f
cmdpad: Fix compilation with musl
When passing -Wimplicit-function-declaration

Also got rid of std=gnu89. It's easy to patch out.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1b5e4883a4)
2019-09-27 13:05:38 -07:00
Rosen Penev
2b1f19c992
gammu: Update to 1.40.0
Cleaned up Makefile for consistency between packages.

Switched to CMAKE_INSTALL to get rid of the InstallDev section.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2e2929366b)
2019-09-27 13:03:45 -07:00
Rosen Penev
34ac8a8e73
ykpers: Update to 1.20.0
Cleaned up Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from db6e6ac24a)
2019-09-27 13:00:22 -07:00
Rosen Penev
8e95b05074
zstd: Update to 1.4.3
Bugfix release.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 133a02a115)
2019-09-27 12:58:40 -07:00
Rosen Penev
154e0c40cd
mpd: Add SoundCloud support for full variant
The libyajl cleanup commit revealed that it was not being installed
correctly. Now that it is, mpd picks it up properly.

Enabled SoundCloud support for the full variant. Disabled for the mini.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 835bc1df03)
2019-09-27 12:56:20 -07:00
Michal Čihař
3efd435bc6
mpd: enable pulseaudio in full package
Signed-off-by: Michal Čihař <michal@cihar.com>
(cherry-picked from 2ed62adc59)
2019-09-27 12:55:53 -07:00
Rosen Penev
7f957cf8ac
yajl: Update to modern standards
Replaced git:// link with https:// which gets through firewalls easier.

Replaced archive with .xz. The one currently in the mirrors has the wrong
hash. .xz is also smaller than .gz.

Eliminated already default CMake option.

Eliminated Build/InstallDev with CMAKE_INSTALL.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2abbc83c9d)
2019-09-27 12:54:50 -07:00
Hirokazu MORIKAWA
d97123b729
node: fix http/2 DoS
This is a security release.

Node.js, as well as many other implementations of HTTP/2,
have been found
vulnerable to Denial of Service attacks.
See https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
for more information.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 81bccf9068)
2019-09-27 12:44:16 -07:00
Hirokazu MORIKAWA
976fd4e9c1
node: fix host build error on macOS
fix host build error on macOS
reference: https://github.com/openwrt/packages/issues/9616

Related: https://github.com/openwrt/packages/issues/7171
(This correspondence is necessary to build with macOS.)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from c69d5a0241)
2019-09-27 12:43:43 -07:00
Rosen Penev
0164259db0
opencv: Update to 4.1.1
Update Makefile to modern standards.

Switched to local tarballs..xz archives are smaller. The .gz archive that
codeload comes with is 85MB.

Replaced PKG_INSTALL with CMAKE_INSTALL to get rid of Build/InstallDev.

Added PKG_BUILD_PARALLEL for faster compilation.

Removed inactive maintainer.

Added uClibc-ng patches to fix compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from f8cd4f094a)
2019-09-27 12:38:40 -07:00
Rosen Penev
5b903f68eb
Merge pull request #10084 from BKPepe/sentrysdk-1907
[OpenWrt 19.07] python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:37 -07:00
Rosen Penev
d203688738
boost: Switch to blacklist of targets for context
Works around a buildbot bug.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from dc3220736d)
2019-09-27 10:17:24 -07:00
Rosen Penev
c4a7a2c3da
boost: Update host libraries
It seems newer versions of fbthrift require more libraries.

Also added AR7, RB532, and Lantiq ASE to fiber exclusion.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1f77459ace)
2019-09-27 10:14:21 -07:00
Carlos Miguel Ferreira
e3c1765598
boost: Package Version Update (1.71.0) + bugfixes
This commit updates Boost to version 1.71.0 and disables Boost.Context
 for arc and mips64 architectures, since either jump_fcontext or
 getcontext are undefined for those architectures.

It also fixes a bug were Boost.Fiber was not properly disabled for
mips32 and mips64 architectures.

Boost.Coroutine2 option was removed since it was redundant. By selecting
the Coroutine package, Coroutine2 is also installed.

Boost.Fiber has been disabled for target brcm47xx_generic and brcm47xx_legacy
due to misssing opcode support from instruction set.

Boost 1.71.0 brings a new header-only library
 - Boost.Variant2 [1]
   -> A never-valueless, strong guarantee implementation of
      std::variant, from Peter Dimov.

More info about Boost 1.71.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_71_0/libs/variant2/doc/html/variant2.html
[2]: https://www.boost.org/users/history/version_1_71_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
(cherry-picked from 0cd9824623)
2019-09-27 10:13:59 -07:00
Rosen Penev
884c89b5e9
jamvm: Don't compile on ARM64
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccd2b767d)
2019-09-27 10:10:33 -07:00
Rosen Penev
2bc353a35e
fbzmq: Size optimizations
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76b57b0e6c)
2019-09-27 10:06:55 -07:00
Rosen Penev
d4f1b24ea9
fbthrift: Update to 2019-09-22
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 7139cddccf)
2019-09-27 10:06:12 -07:00
Rosen Penev
7319d940fb
libwangle: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43a8e02bb8)
2019-09-27 10:04:46 -07:00
Rosen Penev
8a5cb085b6
librsocket-cpp: Update to 2019-09-22
Added URLs.

Added needed Boost patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 164e706f9d)
2019-09-27 10:02:55 -07:00
Rosen Penev
95b7c86794
libfizz: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0f209e988c)
2019-09-27 10:01:01 -07:00
Rosen Penev
db0248cf67
libfolly: Update to 2019.09.22.00
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d28d9aa4dc)
2019-09-27 09:59:15 -07:00
Jan Pavlinec
a0d4cc9170
treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ceadbcbb64)
2019-09-26 19:36:27 -07:00
Jan Pavlinec
937b19ebb7
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Rosen Penev
e09985075e
libgd: Properly disable iconv support
HAVE_ICONV and HAVE_ICONV_H are two different headers that both need to
evaluate to false. Added the extra CONFIGURE_VARS.

This can be verified by passing -Werror=implicit-function-declaration

Added PKG_LICENSE_FILES

Updated homepage URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from bf2f1a0263)
2019-09-26 19:36:27 -07:00
Jan Pavlinec
fac472e28a
samba4: update to version 4.9.13 (security fix)
Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ad16f2a851)
2019-09-26 19:36:26 -07:00
Oever González
8671765883
samba4: remove double quotes for renice
The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.

The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.

Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from c45974d0a3)
2019-09-26 19:36:26 -07:00
Andy Walsh
cd597524d1
samba4: add python2 host dependency
* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from c02ef3ae7f)
2019-09-26 19:36:26 -07:00
Rosen Penev
d3db014eb1
samba4: Run init script through shellcheck
Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d03b88b5b0)
2019-09-26 19:36:26 -07:00
Andy Walsh
8a20820a9b
samba4: revert to 4.9.11
* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from 2f2a4bccd9)
2019-09-26 19:36:25 -07:00
Eneas U de Queiroz
8cfab80332
logrotate: move config option to menu
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from f6c9e2bacd)
2019-09-26 19:36:25 -07:00
Rosen Penev
14f80a7302
logrotate: Add ACL support
Various Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 788318625d)
2019-09-26 19:36:25 -07:00
Sven Eckelmann
1142f52078
treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from bbb1ea7345)
2019-09-26 19:36:25 -07:00
Florian Eckert
605383751e
keepalived: update version to 2.0.18
Update version to 2.0.18

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 333324f973)
2019-09-26 19:36:24 -07:00
Florian Eckert
05f4ae9250
keepalived: fix shellcheck warnings
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 7a207f87af)
2019-09-26 19:36:24 -07:00
Nikos Mavrogiannopoulos
4b3ddb1382
ocserv: updated to 0.12.4
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
(cherry-picked from cefb2f03e2)
2019-09-26 19:36:24 -07:00
Florian Eckert
6154afb3cf
stunnel: fix some shellcheck warnings
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 6713d1d771)
2019-09-26 19:36:24 -07:00
Florian Eckert
1a93b5512f
stunnel: update version to 5.55
Update version to 5.55

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from a17e90591c)
2019-09-26 19:36:23 -07:00
Sven Eckelmann
186dc60443
ap51-flash: upgrade package to latest release 2019.0
* improved Zyxel firmware detection
* introduced optional MAC address filtering
* added support for:

  - Plasma Cloud PA300
  - Plasma Cloud PA1200
  - Plasma Cloud PA2200

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from 22062b10c6)
2019-09-26 19:36:23 -07:00
Luiz Angelo Daros de Luca
8f2dccc568
hplip: bump to 3.19.6
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry-picked from fdeb5f8171)
2019-09-26 19:36:23 -07:00
Rosen Penev
e02387b95e
geth: Update to 1.9.1
Remove Upstreamed patch.

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 03b1d7c4d4)
2019-09-26 19:36:23 -07:00
Rosen Penev
07f47d6ea5
jamvm: Add host build
Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2972cc98eb)
2019-09-26 19:36:22 -07:00
Rosen Penev
68124fc18a
classpath: Add jamvm/host build dependency
This is needed for compilation. A Java compiler is also needed but that
must be handled elsewhere.

Fixed up license information.

URLs to HTTPS.

Other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1862f908eb)
2019-09-26 19:36:22 -07:00
Rosen Penev
22abd241cf
libshout: Update to 2.4.3
Removed inactive maintainer.

Rearranged Makefile for consistency between packages.

Added --without-pic to avoid both -fPIC and -fpic.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 9bacdfa9a2)
2019-09-26 19:36:22 -07:00
Rosen Penev
7a28475b8b
libtasn1: Update to 4.14
Fixes CVE-2018-1000654

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8482407d7c)
2019-09-26 19:36:21 -07:00
Russell Senior
4e2e2ed8f8
patch: rename CVE-2019-13638 patch to mollify uscan
Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from 604102a865)
2019-09-26 19:36:21 -07:00
Russell Senior
89b362e22b
patch: apply upstream patch for CVE-2019-13638
GNU patch through 2.7.6 is vulnerable to OS shell command injection that
can be exploited by opening a crafted patch file that contains an ed style
diff payload with shell metacharacters. The ed editor does not need to be
present on the vulnerable system. This is different from CVE-2018-1000156.

https://nvd.nist.gov/vuln/detail/CVE-2019-13638

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from b82198ff47)
2019-09-26 19:36:21 -07:00
Russell Senior
d91bbb1971
tools/patch: apply upstream patch for CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in
certain cases other than input files. This affects inp.c and util.c.

https://nvd.nist.gov/vuln/detail/CVE-2019-13636

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from c8142f1ac1)
2019-09-26 19:36:21 -07:00
Rosen Penev
d084083e42
Merge pull request #10086 from adde88/openwrt-19.07
Openwrt 19.07
2019-09-26 13:32:03 -07:00
Andreas Nilsen
1e48632e08 hcxtools: Update to v5.2.2
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-09-26 19:47:29 +02:00
Andreas Nilsen
80002c1b99 hcxdumptool: Update to v5.2.2
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-09-26 19:47:08 +02:00
Josef Schlehofer
de686dc0e8
python-sentry-sdk: Update to version 0.12.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 18:24:21 +02:00
Karl Palsson
1f1444ed2c net/mosquitto: bump to 1.6.7
Fixes compatibility with newer libwebsockets versions.
Fixes performance issues with websockets
Fixes potential crash on config reload
Fixes CVEs: CVE-2019-11778 and CVE-2019-11779
Various MQTTv5 fixes.
Skips releases with critical regressions

Changelog for 1.6.7:
https://mosquitto.org/blog/2019/09/version-1-6-7-released/

Changelog for 1.6.5:
https://mosquitto.org/blog/2019/09/version-1-6-5-released/

Changelog for 1.6.6:
https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-09-25 16:13:23 +00:00
Hannu Nyman
83e7e3af8d
Merge pull request #10064 from stangri/19.07-simple-adblock
[19.07] simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
2019-09-25 19:13:00 +03:00
Hannu Nyman
55c6121536
Merge pull request #10072 from gladiac1337/haproxy-2.0.6-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.6
2019-09-25 19:11:40 +03:00
Christian Lachner
aacc401495 haproxy: Update HAProxy to v2.0.6
- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-09-25 11:53:08 +02:00
W. Michael Petullo
b43de99d0e pigeonhole: update to 0.5.7.2
Fixes CVE-2019-11500.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry-picked from 707c683fba)
2019-09-24 15:08:52 -07:00
Josef Schlehofer
0f33ce200d dovecot: Update to version 2.3.7.2
Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 5275c4156b)
2019-09-24 15:07:47 -07:00
Jan Pavlinec
6bab28e8d7
usbip: disable ASLR PIE
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit ff216608a0)
2019-09-24 21:58:31 +02:00
Stan Grishin
17a58fa39d simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-09-24 09:12:08 -07:00
Rosen Penev
b15b698e38 libredblack: Pass CFLAGS
CFLAGS were not being passed. This was breaking builds with ASLR.

Pass proper PIC command to gcc with $(fPIC).

Don't install static libraries. Keep those for InstallDev only.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbcf61d9d3)
2019-09-23 12:00:10 -07:00
Rosen Penev
d9d25ba673 libredblack: Update to 1.3
Technically the same version, but this uses the normal tarball instead of
a random GitHub repository.

Cleaned up Makefile as a result.

Removed Python dependency. rbgen is not used for the package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6e8cb556e4)
2019-09-23 11:59:51 -07:00
Rosen Penev
459918c530 keyutils: Pass OpenWrt CFLAGS directly.
Needed for compilation with PKG_ASLR_PIE.

Replaced Build/Compile with PKG_INSTALL.

Adjusted install paths for consistency.

Added license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccc3b6d44a)
2019-09-23 11:59:03 -07:00
Rosen Penev
3fdf5bf2ee libpbc: Pass CFLAGS properly
This was breaking ASLR builds.

Fixed license tag.

Added PKG_BUILD_PARALLEL for faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43f811ad5b)
2019-09-23 11:58:50 -07:00
Rosen Penev
efe8842b51 crconf: Pass CFLAGS properly
CFLAGS were not being passed, breaking ASLR builds.

Switched to using PKG_SOURCE_DATE for the version.

Added PKG_BUILD_PARALLEL for faster compilation.

Added license information.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 35a258a55c)
2019-09-23 11:58:27 -07:00
Rosen Penev
f10bea0e44 madplay: Pass CFLAGS properly
CFLAGS were not being passed which was breaking ASLR builds.

Fixed license header.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL for consistency.

Passed proper $(FPIC) value.

Several other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76c0bea36b)
2019-09-23 11:58:16 -07:00
Rosen Penev
fd31ee0a93 atftp: Update to 0.7.2
Fixes issue where CFLAGS were not being passed. This was breaking ASLR
builds.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL. Changed install paths based on PKG_INSTALL paths.

Added --disable-debug to make sure debug code is disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 946dfed856)
2019-09-23 11:57:51 -07:00
Rosen Penev
278fcd09a7 v4l2rtspserver: Update to 0.1.8
Updated live555 to 2019.08.28

Add TARGET_CFLAGS to LIVE555 CFLAGS to fix compilation with ASLR.

Several other Makefile cleanups and optimizations.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 523eeaed54)
2019-09-23 11:57:32 -07:00
Rosen Penev
b0a8ff354e
Merge pull request #10019 from dibdot/adblock-19.07
[19.07] adblock: update 3.8.6
2019-09-17 13:31:25 -07:00
Dirk Brenken
2c7118e1d7
adblock: update 3.8.6
* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-17 13:59:08 +02:00
Karel Kočí
c004f8a7a6
python-intelhex: add new package
This is Python library to parse, generate and in general handle files
in Intel HEX format.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 306e276a3b)
2019-09-17 08:44:59 +02:00
Karel Kočí
4aa305c99d
bigclown-firmware-tool: update to version 1.4.1
This release updates: bcf create --from

There are no dependencies changes introduced by upstream and changes are
of limited character.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7741e5db4b)
2019-09-17 08:43:21 +02:00
Karel Kočí
c23b682767
bigclown-firmware-tool: add new package
This is tool to flash/manage firmware in Bigclown modules.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 7950442dff)
2019-09-17 08:43:09 +02:00
Karel Kočí
b5a451cfe4
bigclown-mqtt2influxdb: update to version 1.2.0
This version introduces new option -d that makes service not to exit on
error. This is brutal solution but is required to protect against
service failure when remote resource is down.

bigclown-mqtt2influxdb is service moving data from MQTT to InfluxDB and
both of those services can and potentially are remote. The original
implementation where it failed when service goes down is not ideal
because network outage or target server outage can later require this
service restart.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commti 508e2b865a)
2019-09-17 08:42:09 +02:00
Karel Kočí
c35c9d6932
python-schema: update to version 0.7.1
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7bb6d72a47)
2019-09-17 08:41:40 +02:00
Hannu Nyman
b2f6a65e19
Merge pull request #9999 from flyn-org/openldap-19.07
openldap: update to 2.4.48
2019-09-15 19:43:34 +03:00
Rosen Penev
18975d4fa3
Merge pull request #9998 from flyn-org/libgcrypt-19.07
libgcrypt: Update to 1.8.5
2019-09-15 07:23:20 -07:00
Rosen Penev
3875601317
Merge pull request #10000 from cshoredaniel/pr-19.07-p910nd-non-root-backport
[19.07] p910nd: Run as non-root by default
2019-09-15 07:16:27 -07:00
Rosen Penev
335240c842
Merge pull request #10002 from cshoredaniel/pr-19.07-uwsgi-cgi-backport
[19.07] uwsgi-cgi: use python3 hostpkg not system python3
2019-09-15 07:16:19 -07:00
Rosen Penev
cfc39afc95
Merge pull request #10001 from cshoredaniel/pr-19.07-msmtp-scripts-backport
[19.07] msmtp-scripts: Backport fix for run-time failure
2019-09-15 07:15:58 -07:00
Daniel F. Dickinson
0e78a105c8 uwsgi-cgi: use python3 hostpkg not system python3
On a Debian system without python3-distutils install, uwsgi-cgi was
failing to build because it couldn't import sysconfig from distutils.
OpenWrt packages should be using the OpenWrt python not the system
python. In addition we need to use python3 not python2, even when
both are available.

(cherry-pick c387d0923c from master)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:46:05 -04:00
Daniel F. Dickinson
875eb10d11 p910nd: Run as non-root by default
We add the necessary Makefile, hotplug, config, and init bits
so that p910nd daemon runs as user:group p910nd:lp by default.
This eliminates an unnecessary root daemon.

The hotplug script sets the permissions of the USB lp
device(s) to read-write owner and group and no access to
anyone else, and sets owner root, group lp.

This is allows sufficient privileges to p910nd
to do it's job.

(cherry-pick 932c76fa74)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:44:08 -04:00
Daniel F. Dickinson
0ff1a55891 msmtp-scripts: Backport to fix runtime failure
This commit syncs msmtp-scripts with master as current
openwrt-19.07 is broken.

Cherry-picks and squashes the following commits from
master.

6d8cff9a msmtp-scripts: Fix LICENSE information
d163eaea msmtp-scripts: Overhaul and update like upstream
3c15d410 msmtp-scripts: Make conn_test default nc
b9cc3cf2 msmtp-scripts: Fix spool/lock dir permissions
f76408af msmtp-scripts: Add msmtprc permission docs

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:40:17 -04:00
Daniel F. Dickinson
2c51c7b18e msmtp: msmtp-scripts: Backport "Enable PROVIDES and ALTERNATIVES"
Backports needed change from master for the next commit (a
combined cherry-pick and squash of required fixes to msmtp-scripts,
due to msmtp-scripts being broken on openwrt-19.07).

Use the PROVIDES mechanism so that msmtp and msmtp-nossl can be be
+depended-on and avoid generating a file level conflict.  Also use
alternatives for msmtp-mta and msmtpq-ng-mta with msmtp-mta since
we can only have one sendmail at a time.

(cherry-pick f76408af48)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-09-14 16:39:52 -04:00
W. Michael Petullo
ecc6de6e22 openldap: update to 2.4.48
Fixes CVE-2019-13565.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:30:58 -04:00
Rosen Penev
68092405c2 libgcrypt: Update to 1.8.5
Fixed up license information. Only the library is packaged.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-09-14 12:29:27 -04:00
Rosen Penev
1d0c66755e
Merge pull request #9966 from dibdot/openwrt-19.07
[19.07] banip: update 0.2.1
2019-09-12 14:14:18 -07:00
Michael Heimpold
41fb159a38 php7: update to 7.2.22
While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5805da860e)
2019-09-12 21:52:27 +02:00
Josef Schlehofer
5be09b19ab
btrfs-progs: Update to version 5.2.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit c42b279)
2019-09-12 11:08:24 +02:00
Daniel Engberg
0b2e2f2411
Merge pull request #9968 from BKPepe/1907-yt
[OpenWrt 19.07] youtube-dl: Update to version 2019.9.12.1
2019-09-12 00:21:53 +02:00
Josef Schlehofer
03f9fa5b7a
youtube-dl: Update to version 2019.9.12.1
- Move PKG_MAINTAINER above PKG_LICENSE
- PKG_HASH and PKG_BUILD_DIR should be together in one section

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-11 23:55:31 +02:00
Dirk Brenken
3f89abbf0d
banip: update 0.2.1
* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
  directory), always create and re-use backups if available.
  To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
  to detect break-in events
* always update the black-/whitelist with logfile parsing results
  in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics
* Change .*GPL.*+ licenses to SPDX compatible identifier

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-09-11 06:21:20 +02:00
Dirk Brenken
1ad19c6bfa
adblock: update 3.8.5
* use raw procd interface trigger as last resort, if the
  adblock config is not available during startup
* fix selective subdomain whitelisting for dnsmasq
* fix a kresd restart issue with 'DNS File Reset'
* fix a suspend/resume cornercase
* disable the tld compression, if the number of blocked domains
  is greater than 'adb_maxtld' (default: 100000)
* made the fw portlist configurable (default '53 853 5353')
* preliminary support for inotify-like autoload features
  of dns backends like kresd in future Turris OS. If 'adb_dnsinotify'
  is set to 'true', all adblock related restarts and the
  'DNS File Reset' will be disabled

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 45cb0e1023)
2019-09-09 14:57:14 +02:00
Sebastian Kemper
54b33157a6 glib2: don't use libelf during host build
Since commit 2e490e7e46a4f6fbf66fa930a25c2991e24c0f83 tools/libelf
installs a pkgconfig file, which in turn is picked up during the glib2
host build. On the build bots the same occurs, although it so happens
that (sometimes?) libelf.h is not found and the host build fails. This
may be a timing issue specific to the build bots, as the header is in
fact installed by tools/libelf and I can't reproduce this here on my own
computer.

In any case, libelf (if detected) is only used by gresource. gresource
can be used without it. gresource is not used by OpenWrt's build system
(also not in openwrt/packages). So adding "--disable-libelf" to the host
configure args is not detrimental in any way and works around the issue
described above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-09-09 09:39:49 +02:00
Josef Schlehofer
20bd9b78e1
lighttpd: Makefile polishing
- Correct SPDX License Identifier
- Move MAINTAINER, SUBMENU to more appropriate place
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e06086c4c)
2019-09-07 13:31:02 +02:00
Josef Schlehofer
19039dc4ae
lighttpd: Update to version 1.4.54
Fixes CVE-2019-11072

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80c721c6a)
2019-09-07 13:30:44 +02:00
Jan Hák
52a2936597 knot: update to 2.8.3
Added lmdb dependency

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 0b19979301)
2019-09-06 16:37:07 -07:00
Jan Hák
abb9ac3e9c knot: upgrade to vetsion 2.8.2
Upgrade of Knot DNS package to version 2.8.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 30627a9928)
2019-09-06 16:36:45 -07:00
Rosen Penev
89b0c039b0 measurement-kit: Fix compilation with uClibc-ng
nextafter is not included in std with uClibc-ng. Don't use the std version

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from e613acffad)
2019-09-06 16:35:46 -07:00
Rosen Penev
7a07957baa libgpg-error: Fix compilation with GAWK 5.0
Patch from Upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-06 16:24:42 -07:00
Matthias Schiffer
421b922fde
fastd: fix init script for multiple VPN instances
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit b7ff8b8087)
2019-09-04 22:50:12 +02:00
Sebastian Kemper
3d7ae8dd26 pulseaudio: fix recursive dependencies
Since OpenWrt commit e82a4d9cfb ("config: regenerate *_shipped sources")
a few recursive dependencies have been discovered that were not visible
before.

$ make menuconfig
tmp/.config-package.in:103098:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:103098:	symbol PACKAGE_baresip-mod-pulse depends on PACKAGE_baresip-mod-pulse
tmp/.config-package.in:121863:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121863:	symbol PACKAGE_pulseaudio-profiles depends on PACKAGE_pulseaudio-profiles
tmp/.config-package.in:121878:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
qtmp/.config-package.in:121878:	symbol PACKAGE_pulseaudio-tools depends on PACKAGE_pulseaudio-tools

This commit addresses the pulseaudio package's own recursive
dependencies and partially resolves #9300 (baresip will be handled in
telephony repository).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

cherry picked from commit ec3d077287
to correct the errors related to backported config parsing changes.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-09-04 23:16:59 +03:00
Jo-Philipp Wich
b7c7074a4b boost: fix raw kconfig syntax
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

cherry picked from commit af4cacd108
to correct the errors related to kernel config parsing.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-09-04 23:10:52 +03:00
Josef Schlehofer
70baf873b7 boost: Makefile polishing
Corrected License according to SPDX in PKG_LICENSE
Added PKG_LICENSE_FILES
HTTPS in their website
Reordered some stuff

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

cherry picked from commit 79831ee0ab
to correct the errors related to kernel config parsing.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2019-09-04 23:07:44 +03:00
Josef Schlehofer
c1efe44157
syslog-ng: Add GPL license for plugins
- Correct SPDX License Identifier
- Move DEPENDS under URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d4eed8c422)
2019-09-04 16:06:32 +02:00
Josef Schlehofer
30fdebab73
syslog-ng: Update to version 3.23.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 298a91364c)
2019-09-04 16:06:21 +02:00
Josef Schlehofer
24ef2a78e3
python-sqlalchemy: Update to version 1.3.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 2ee4b09760)
2019-09-04 16:06:09 +02:00
Josef Schlehofer
38ba031f26
python-slugify: Update to version 3.0.3
Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d3c2ff35b5)
2019-09-04 16:05:56 +02:00
Josef Schlehofer
43e07c60a0
python-yaml: Update to version 5.1.2
PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 3cfbdbf25b)
2019-09-04 16:05:44 +02:00
Josef Schlehofer
d49bde8ea9
python-voluptuous-serialize: Update to version 2.2.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit af213059f5)
2019-09-04 16:05:31 +02:00
Josef Schlehofer
5fa4f744ac
python-voluptuous: Update to version 0.11.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 0835e5e6dc)
2019-09-04 16:05:20 +02:00
Hannu Nyman
d8e4bd366d
Merge pull request #9911 from jefferyto/python-pyasn1-0.4.7-openwrt-19.07
[openwrt-19.07] python-pyasn1: Update to 0.4.7
2019-09-02 23:12:58 +03:00
Jeffery To
f57f327f06 python-pyasn1: Update to 0.4.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-09-03 02:52:18 +08:00
Hannu Nyman
4fcdefd5c7 haveged: update to 1.9.6
Update haveged to 1.9.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c933ac5dcb)
2019-09-02 20:59:59 +03:00
DENG Qingfang
0ae8fceeda exfat-nofuse: drop BUILD_PATENTED
Microsoft has published technical specification for exFAT [1]
and the driver has been added to Linux staging tree [2].

It's now safe to drop BUILD_PATENTED label.

[1] https://docs.microsoft.com/windows/win32/fileio/exfat-specification
[2] http://lkml.iu.edu/hypermail/linux/kernel/1908.3/04254.html

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from commit 4c9d0c7b56)
2019-09-02 01:49:53 +00:00
Eric Luehrsen
b69c271d0a
unbound: update to 1.9.3
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry-picked from commit c36d8a49fd)
2019-09-01 18:24:05 +02:00
DENG Qingfang
81eb936054
bind: update to 9.14.4
Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry-picked from commit e7d35f6deb)
2019-09-01 18:23:10 +02:00
Alexandru Ardelean
76ea030571
python-dateutil: bump to version 2.8.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 0699a69ba1)
2019-09-01 10:10:38 +02:00
Alexandru Ardelean
6464894728
python-lxml: bump to version 4.4.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 621f5777d3)
2019-09-01 10:10:23 +02:00
Alexandru Ardelean
87fbf41ae8
python-pytz: bump to version 2019.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 16c9fcdda8)
2019-09-01 10:09:45 +02:00
Rosen Penev
725777cc1f
Merge pull request #9869 from gladiac1337/haproxy-2.0.5-openwrt-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.5
2019-08-30 10:11:55 -07:00
Rosen Penev
ebc4de2b09
Merge pull request #9872 from wvdakker/openwrt-19.07
[Openwrt 19.07] Shorewall: Bump to 5.2.3.4
2019-08-30 10:11:11 -07:00
W. van den Akker
434407ab9a
Shorewall6: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 14:10:49 +02:00
W. van den Akker
86f301397d
Shorewall: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 14:10:21 +02:00
W. van den Akker
32171993b5
Shorewall6-lite: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 14:09:40 +02:00
W. van den Akker
2ccf8bd731
Shorewall-lite: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 14:09:15 +02:00
W. van den Akker
05f2522986
Shorewall-core: Bump to version 5.2.3.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2019-08-30 14:08:48 +02:00
Christian Lachner
1741f2cff3 haproxy: Update HAProxy to v2.0.5
- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-08-30 07:55:43 +02:00
Dirk Brenken
dc02cb3da5
travelmate: update 1.4.12
* automatically add open uplinks to your wireless config,
  e.g. hotel captive portals (disabled by default)
* shift net status check in a separate function
* (s)hellcheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d90509b03)
2019-08-30 07:41:13 +02:00
Dirk Brenken
64e9596724
adblock: update 3.8.4
* fix the 'adb_sysver' output
* pass the adblock version information to the helper scripts correctly

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 161597f2fa)
2019-08-30 07:37:54 +02:00
Dirk Brenken
b74b5b1a3b
adblock: update 3.8.3
* fix a dns restart issue if 'flush dns cache' is set
* fix a suspend/resume issue, the status wasn't properly updated
* fix a long standing query issue
* rework return code handling, mostly for debugging
* various cleanups & cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 95189994e7)
2019-08-30 07:37:46 +02:00
Jan Pavlinec
b145ff1a01
lmdb: update to version 0.9.24
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 4841f52)
2019-08-29 14:31:42 +02:00
Jan Pavlinec
b902367ab8
lmdb: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit f311ec0)
2019-08-29 14:31:41 +02:00
Rosen Penev
f92be4e55c
Merge pull request #9823 from adde88/openwrt-19.07
hcxtools: Added both hcxtools and hcxdumptool to openwrt-19.07 branch.
2019-08-27 18:54:59 -07:00
Andreas Nilsen
749684cd25 hcxdumptool: fix missing directory
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-08-26 20:06:56 +02:00
Eric Kinzie
bc0001d5a5
luajit: fix building for 64-bit targets
Host and target architectures need to have the same pointer size.
When building on x86_64, do not force 32-bit host binaries if the target
architecture is also 64-bit.

See http://luajit.org/install.html#cross

Add 64-bit arm (aarch64) to the list of architectures.

Signed-off-by: Eric Kinzie <ekinzie@labn.net>
(cherry-picked from commit 5b0ef0e1b9)
2019-08-26 03:47:52 +02:00
Hannu Nyman
8893b467cc nano: update to 4.4
Update nano editor to 4.4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit d9347059a8)
2019-08-25 20:40:46 +03:00
Andreas Nilsen
c685d079ee hcxtools: Added both hcxtools and hcxdumptool to openwrt-19.07 branch.
Signed-off-by: Andreas Nilsen <adde88@gmail.com>
2019-08-25 18:32:29 +02:00
Josef Schlehofer
10e068f896
dovecot: Improve packaging and include configs
- Add dovenull user, otherwise, dovecot doesn't start
- Build docs to have configuration files for dovecot
- Remove init script as conffile
- Move build options from Makefile to Config.in
- Install section to be more readable
- Refresh patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e27438f140)
2019-08-24 16:53:53 +02:00
Josef Schlehofer
e74803c93e
dovecot: update to version 2.3.7.1
Move PKG_MAINTAINER above PKG_LICENSE to be sync with other packages

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit fcbc1cad2c)
2019-08-24 16:53:42 +02:00
Lucian Cristian
453bedebb2
dovecot: update to 2.3.7
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry-picked from commit 971b20380e)
2019-08-24 16:53:30 +02:00
Eneas U de Queiroz
40e86c8729
python-oauthlib: bump to 3.1.0
This is a feature release including improvement to OIDC and security
enhancements, as well as bugfixes.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit ab990af307)
2019-08-24 16:50:44 +02:00
Jan Pavlinec
fe44318dd6
measurement-kit: update to version 0.10.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from 17ebaf2a3f)
2019-08-24 16:50:23 +02:00
Daniel Engberg
9f44c20ad9
netdata: Add patch to disable optional libraries
Netdata adds optional libraries if found, add patch (PR#6658) to avoid pulling in unnecessary libraries.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry-picked from commit 35a7f8721a)
2019-08-24 16:49:59 +02:00
Daniel Engberg
ffb8f81c77
netdata: Update to 1.16.1, disable https and dbengine
Disable https and dbengine to get rid of openssl and liblz4
Add (lib)json-c as dependency
Disable anonymous statistics sent to Google Analytics

Source: https://github.com/netdata/netdata/blob/master/docs/anonymous-statistics.md

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
(cherry-picked from commit b95f19207e)
2019-08-24 16:49:43 +02:00
Josef Schlehofer
c7714173d7
netdata: update to version 1.16.0
- Add dependencies: libopenssl, liblz4
- Correct SPDX License Identifier
- Change URL of the website

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit b64558b1ba)
2019-08-24 16:49:30 +02:00
Yousong Zhou
5986fe8e63
netdata: netdata.init: fix indentation
(cherry-picked from commit 9ff174097b)
2019-08-24 16:48:57 +02:00
Josef Schlehofer
0d1faf60e5
syslog-ng: update to version 3.22.1
- Bump version in the config and improve a link for documentation
- Disable snmp destination for now

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e07cc32)
2019-08-24 16:48:08 +02:00
Dirk Brenken
3dc3f15d30
adblock: update 3.8.2
* background service: no longer miss "signal" events for the
  dns backend (to trigger adblock)
* fix a dns backend reload issue during switch between
  different blocking modes
* domain query: report found domains only once in
  "null" blocking mode with IPv4 & IPv6 list entries

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 806f5ca9d8)
2019-08-23 06:50:11 +02:00
Dirk Brenken
41a1b013fa
adblock: update 3.8.1
* fix a possible race condition during DNS file reset on slow hardware
* optimize DNS restart behaviour in 'null' blocking mode
* mute useless warnings

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 866878aa78)
2019-08-23 06:49:06 +02:00
Dirk Brenken
641318d5c5
adblock: release 3.8.0
* add support for 'DNS File Reset', where the final DNS blockfile
  will be purged after DNS backend loading (save storage space).
  A small background service will be started to trace/handle
  dns backend reloads/restarts
* add support for the 'null' blocking variant in dnsmasq
  (via addn-hosts), which may provide better response times
  in dnsmasq
* enhance the report & search engine to support
  the new blocking variants. Search now includes
  backups & black-/whitelist as well
* compressed source list backups are now mandatory (default to '/tmp')
* speed up TLD compression
* E-Mail notification setup is now integrated in UCI/LuCI
* update the LuCI frontend to reflect all changes (separate PR)
* drop preliminary dnscrypt-proxy-support (use dnsmasq instead)
* drop additional 'dnsjail' blocklist support (not used by anyone)
* procd cleanups in init
* various shellcheck cleanups
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 504412ccdb)
2019-08-23 06:46:51 +02:00
Etienne Champetier
caecb1d400
Merge pull request #9800 from Rixerx/openwrt-19.07
[OpenWrt 19.07] zabbix: update to 4.0.11
2019-08-22 13:56:38 -07:00
Krystian Kozak
22f1cc9470 zabbix: update to 4.0.11
Updated to 4.0.11 LTS version.

Deleted 003-change-user-and-foreground.patch in according to [ZBX-10611] fixed changing process user owner on startup in foreground when AllowRoot disabled.

Compile tested: Yes, lantiq
Run tested: Yes, lantiq

Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>
2019-08-22 22:19:03 +02:00
Josef Schlehofer
03bc9a0b50
ruamel-yaml: Update to version 0.15.100
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 907287b)
2019-08-21 22:24:30 +02:00
Matthias Schiffer
044c28791b
fastd: update URL and PKG_SOURCE_URL
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2019-08-21 16:17:41 +02:00
Matthias Schiffer
3fe76317d3
libuecc: update URL and PKG_SOURCE_URL
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2019-08-21 16:17:33 +02:00
Jeffery To
999c2a5457 golang: Update to 1.12.9
Includes fixes (in 1.12.8) for:
CVE-2019-14809 - https://nvd.nist.gov/vuln/detail/CVE-2019-14809
CVE-2019-9512 - https://nvd.nist.gov/vuln/detail/CVE-2019-9512
CVE-2019-9514 - https://nvd.nist.gov/vuln/detail/CVE-2019-9514

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-20 22:04:08 +08:00
Josef Schlehofer
acb2db3c0d
clamav: update to version 0.101.3
Correct SPDX License Identifier

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from e19f753be5)
2019-08-19 23:54:08 +02:00
Eneas U de Queiroz
8ed13c5dfc
clamav: don't install dev files into package
This avoids copying /usr/include, unversioned *.so files, pkgconfig,
/usr/lib/*.la, and the build-time libs/cflags configuration utility
clamav-config.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 815e05e38e)
2019-08-19 23:53:54 +02:00
Eneas U de Queiroz
5247c6cdc1
clamav: avoid host pickup of libxml2
If libxml2 is installed in the host, then the host library is used and
compilation fails.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 199ccc9475)
2019-08-19 23:53:40 +02:00
William Fleurant
e63e697a4a
yggdrasil: fix #9712 upstream dependency with branch develop
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 07625bb6a7)
2019-08-18 20:25:52 -07:00
William Fleurant
ac91df4095
yggdrasil: properly call the daemon with procd
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 9436ff4261)
2019-08-18 20:25:30 -07:00
William Fleurant
86ee57f9ca
yggdrasil: match contributing.md order of config section
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from fee12663cb)
2019-08-18 20:25:09 -07:00
William Fleurant
bcf932498e
yggdrasil: package LICENSE filename, update license id name
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from e08d17fbe0)
2019-08-18 20:24:49 -07:00
William Fleurant
9e298312e1
yggdrasil: bump to 0.3.6
Signed-off-by: William Fleurant <meshnet@protonmail.com>
(cherry-picked from 8128ef3793)
2019-08-18 20:24:28 -07:00
Eneas U de Queiroz
0c8ad0cc12
squashfs-tools: need to include sys/sysmacros.h
The inclusion of <sys/sysmacros.h> by <sys/types.h> was deprecated and
removed.  This is causing major, minor, and makedev to be undefined.

The patch is an upstream commit fixing it.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-18 20:22:42 -07:00
Hannu Nyman
d11c13f1cc
Merge pull request #9764 from stangri/19.07-simple-adblock
[19.07] simple-adblock: support for varios DNS resolvers/options
2019-08-18 21:08:00 +03:00
Stan Grishin
3a58c352bf [19.07] simple-adblock: support for varios DNS resolvers/options
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-08-17 06:09:56 -07:00
Rosen Penev
0ea9940a9a
Merge pull request #9762 from jefferyto/host-python-mac-openwrt-19.07
[openwrt-19.07] python,python3: Fix host Python compilation for macOS
2019-08-16 23:00:11 -07:00
Jeffery To
e450748208 python,python3: Fix host Python compilation for macOS
* Remove $$$$(pkg-config --static --libs libcrypto libssl) from
  HOST_LDFLAGS

  Having this leads to an "unknown type name 'u_int'" error on Mac.
  Removing it doesn't appear to affect Python's ability to find
  buildroot LibreSSL.

* Change -Wl,-rpath=... to -Wl,-rpath,... in HOST_LDFLAGS

  The equals sign version is not supported by the Mac linker (appears to
  be an GNU extension). The comma version is supported; -rpath and its
  argument will be separated by a space when passed to the linker.

* Add ac_cv_header_libintl_h=no to HOST_CONFIGURE_VARS for Mac

  Python on Mac doesn't expect to use libintl, but if gettext-full is
  compiled for host, it will try, leading to undefined symbol errors
  during compilation. This prevents configure from finding libintl.h.

Fixes #7171.
Fixes #9621.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-17 05:14:42 +08:00
Josef Schlehofer
68a79b4db5
Merge pull request #9714 from jefferyto/python-twisted-19.7.0-openwrt-19.07
[openwrt-19.07] python-twisted: Update to 19.7.0, refresh patches
2019-08-16 16:50:23 +02:00
Etienne Champetier
9c482e23ea
Merge pull request #9751 from champtar/openwrt-19.07
[19.07] prometheus-node-exporter-lua: add target & system to OpenWrt collector
2019-08-15 22:55:41 -07:00
Etienne Champetier
f07e5b5b2c prometheus-node-exporter-lua: add target & system to OpenWrt collector
Before:
node_openwrt_info{revision="r10756+1-7546be6007",model="GL.iNet GL-AR150",id="OpenWrt",board_name="glinet,gl-ar150",release="SNAPSHOT"} 1

After:
node_openwrt_info{revision="r10756+1-7546be6007",target="ath79/generic",board_name="glinet,gl-ar150",id="OpenWrt",model="GL.iNet GL-AR150",release="SNAPSHOT",system="Atheros AR9330 rev 1"} 1

Fixes #9730, replace #9735

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit a14bed1bc9)
2019-08-15 20:22:08 -07:00
Eneas U de Queiroz
efe5363c6d
coova-chilli: disable parallel build
Parallel building is causing a failure because it executes some
commands, such as patch, more than once.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-15 11:37:48 -07:00
Dirk Brenken
b9cdfdace4
travelmate: update 1.4.11
* fix logical glitch in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 751f312334)
2019-08-15 15:46:12 +02:00
Dirk Brenken
7e8deed020
travelmate: update 1.4.10
* add missing dnsmasq dependency
* add a captive portal auto-login hook (configurable via uci/LuCI),
  you could reference an external auto-login script - see readme
* provide an auto-login script for german ICE hotspots
  (/etc/travelmate/wifionice.login), requires 'curl'
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5a2a4fa20a)
2019-08-15 15:45:42 +02:00
Jeffery To
dec56a3140 python-twisted: Update to 19.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-15 03:22:54 +08:00
Etienne Champetier
39c4e21b6b
Merge pull request #9731 from jefferyto/ci-improvements-openwrt-19.07
[openwrt-19.07] CI fixes and improvement
2019-08-14 11:58:49 -07:00
Petr Štetiar
a6c658db01 circleci: provide prereq output in the build log
Commit 200f2666fb1c ("sdk: fix GCC and Python dangling symlinks") in
master tree has forced prereq build step, which is now failing on the CI
as the Docker CI images are missing Python3 support, so now every build
fails with the following error:

 make: *** [staging_dir/host/.prereq-build] Error 1

which is not helpful due to the silenced output of `make defconfig >
/dev/null`, so let's add `make prereq` build step in order to get
something usable next time.

Reported-by: Karl Palsson <karlp@etactica.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-08-15 02:31:01 +08:00
Petr Štetiar
07d330907c circleci: use Docker image v1.0.4
This new image which is already available contains Python3 support.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-08-15 02:30:54 +08:00
Petr Štetiar
d9212baa45 circleci: make logs of build failures more readable
Due to concurrent build, it's currently not that easy to find the proper
reason for the package build failure, so let's just build the failing
package with -j1 in order to provide more human readable build log
failures.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-08-15 02:30:46 +08:00
Petr Štetiar
775e4f81e7 circleci: add python3 package into Docker image
We've switched to Python3 some time ago so it would make sense to
provide Python3 in the CI image as well.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2019-08-15 02:30:35 +08:00
Karl Palsson
21b11b6eb8 net/mosquitto: bump to 1.6.4
Full changelog here: https://mosquitto.org/blog/2019/08/version-1-6-4-released/

Fixes a regression in persistent session handling, and various other
regressions related to the mqtt5 support.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-08-12 14:11:25 +00:00
Jan Pavlinec
b57190bcab
zeromq: update to version 4.1.7 (security fix)
Fixes:
CVE-2019-13132
Added CPE ID

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 92bf4b4012)
2019-08-09 22:32:02 +02:00
Rosen Penev
18a8d8b64e
gddrescue: Add uClibc-ng support
It turns out, this breaks only when compiling with both uClibc-ng and
uClibc++. If the libc or libc++ gets swapped out, it compiles fine.

libstdcpp is fine because it already undefs these macros. The actual
bug is probably in uClibc-ng but this is a fine workaround.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d6af6a4d75)
2019-08-08 10:27:05 -07:00
Rosen Penev
d0ef3bfa30
fossil: Remove
The maintainer is inactive, in addition to this package being woefully out
of date. It probably does not work properly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 196976cdf0)
2019-08-08 10:25:23 -07:00
Rosen Penev
b9f9c005ae
Merge pull request #9680 from mrstegeman/remove
node-mozilla-iot-gateway: Remove package
2019-08-08 09:47:31 -07:00
Michael Stegeman
07d771ee1b
node-mozilla-iot-gateway: Remove package
As the WebThings Gateway moves into a full-fledged router
distribution, it no longer makes sense to have this as a
standalone package, as it now modifies system-wide settings.

References #9629
References mozilla-iot/gateway#2060
References https://gitlab.labs.nic.cz/turris/turris-os-packages/issues/452

Signed-off-by: Michael Stegeman <michael@stegeman.me>
2019-08-08 08:44:20 -08:00
Rosen Penev
379a8b83ad
Merge pull request #9656 from liudf0716/kcptun
[openwrt-19.07]kcptun: add new package
2019-08-08 09:40:10 -07:00
Dengfeng Liu
c29468ff19 kcptun: add new package
kcptun is a stable & secure tunnel based on kcp with N:M multiplexing.
https://github.com/xtaci/kcptun

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2019-08-08 09:17:33 +08:00
Karl Palsson
09609c73a5 ntpdate: use uci configured servers instead of static list
If we're going to have a list of ntp servers, we should at least respect
them.  Fallback to the original static list if no configured servers are
found.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-08-07 16:27:30 +00:00
Val Kulkov
990c82acf0
subversion: update to the latest release
Update to the latest maintenance release, fixing CVE-2018-11782 and
CVE-2019-0203 among other things.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
(cherry-picked from commit 53f33e5e74)
2019-08-06 23:38:54 +02:00
Karel Kočí
3cc81898b0
btrfs-progs: scan devices in preinit instead of init script
There is no gain to do device scan in init. Commonly we want to always
scan BTRFS devices to ensure that after boot raids are correctly linked.
It should be done before any init script tries to mount any raid FS.

Comparing init scripts and preinit scripts there are I think two primary
considerations. First is if user is expected to restart/reload/stop
given service on will. I think that there is no such reason for this as
user can easily enough just call btrfs utility it self. Second
consideration is if it makes sense to have it optional. This means if we
want to have ability to enable and disable given service. I think that
there is no such need in this case. It is pretty much doing nothing if
you don't have BTRFS FS connected and when you have you probably want to
scan it.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2019-08-06 09:59:45 +02:00
Karel Kočí
e8da8c8016
btrfs-progs: use box version of btrfs tool (busybox like)
This instead of building every tool separately builds one btrfs binary
and additional tools are links to this binary. This is same approach as
busybox is using.

This splits list of tools to two. boxprogs are tools that are boxed to
code btrfs binary and progs are tools that are not.
This also overload default all make target of Build/Compile and instead
builds (unified) btrfs.progs and separate progs.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2019-08-06 09:59:39 +02:00
Josef Schlehofer
af369bfc47
btrfs-progs: Update to version 5.2.1
- Move Depends under URL
- Fix PKG_LICENSE to use correct SPDX License Identifier instead of
deprecated one

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-06 09:59:31 +02:00
Rosen Penev
a0b194199c
libsigar: Add missing header
The new version of musl does not include this header internally anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b97f32ec44)
2019-08-05 12:06:22 -07:00
Rosen Penev
99465dd993
libsigar: Remove deprecated rindex function
Optionally unavailable with uClibc-ng.

Switched to local tarballs. .xz is smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b134eb3800)
2019-08-05 12:06:02 -07:00
Rosen Penev
6c04684b51
mt-st: Add missing header
New version of musl no longer includes this header internally.

Removed several unnecessary variables in Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 4cda68c72b)
2019-08-05 12:02:35 -07:00
Rosen Penev
212710c929
xz: Remove bash dependency
Bash is not needed here. These scripts are POSIX compliant.

This was originally added as the configure script looks for /bin/bash
locally. Passing gl_cv_posix_shell overrides this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d0e3aa7493)
2019-08-05 12:02:15 -07:00
Rosen Penev
b20a71c7b9
Merge pull request #9661 from gladiac1337/haproxy-2.0.3-2
[openwrt-19.07] haproxy: Update all patches for HAProxy v2.0.3
2019-08-05 10:20:18 -07:00
Rosen Penev
94d1ad766e
Merge pull request #9649 from jefferyto/python-pyasn1-0.4.6-openwrt-19.07
[openwrt-19.07] python-pyasn1: Update to 0.4.6
2019-08-05 10:00:52 -07:00
Rosen Penev
4a3e8b55a3
Merge pull request #9651 from jefferyto/python-pyasn1-modules-0.2.6-openwrt-19.07
[openwrt-19.07] python-pyasn1-modules: Update to 0.2.6
2019-08-05 10:00:36 -07:00
Christian Lachner
5b0c337301 haproxy: Update all patches for HAProxy v2.0.3
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.3.html)
- Raise PKG_RELEASE to 2

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-08-05 14:36:21 +02:00
Rosen Penev
6382759425 haproxy: Get rid of bashisms from get-latest-patches.sh
Plus some other shellcheck cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-08-05 14:36:06 +02:00
Rosen Penev
52634db76f
findutils: Add missing header
New version of musl no longer internally includes this header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8ca5cf042d)
2019-08-04 15:35:09 -07:00
Rosen Penev
c205177702
findutils: Fixed up LICENSE information.
Also cleaned some whitespace.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fca20e2b2f)
2019-08-04 15:34:44 -07:00
Jeffery To
f52637d3be python-pyasn1-modules: Update to 0.2.6
Requires python-pyasn1 0.4.6 (#9649).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-05 04:05:06 +08:00
Jeffery To
29289e244c python-pyasn1: Update to 0.4.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-05 03:43:40 +08:00
Rosen Penev
30ef3a22b1
Merge pull request #9642 from noblepepper/gcc-7.4.0
gcc: fix build on x86 targets
2019-08-04 08:46:28 -07:00
Noble Pepper
32203bec95 gcc: fix build on x86 targets
Signed-off-by: Noble Pepper <noblepepper@gmail.com>
2019-08-04 09:51:44 -05:00
Rosen Penev
c997675a65
Merge pull request #9627 from jefferyto/slide-switch-0.9.5-openwrt-19.07
[openwrt-19.07] slide-switch: Update to 0.9.5
2019-08-04 06:47:51 -07:00
Michael Heimpold
42a98950b8 php7: update to 7.2.21
This fixes CVE-2019-11042 and CVE-2019-11041.

Compile and run tested on mxs platform

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-08-04 00:44:31 +02:00
Nikos Mavrogiannopoulos
f849de2d08 gnutls: updated to 3.6.9
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-08-02 21:28:25 +02:00
Jeffery To
b69270f14b slide-switch: Update to 0.9.5
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-08-02 15:53:59 +08:00
Daniel Engberg
10ad59f106
Merge pull request #9624 from micmac1/19.07-maria10226
mariadb (19.07): security bump to 10.2.26
2019-08-02 01:09:04 +02:00
Sebastian Kemper
771bc141c4 mariadb: security bump to 10.2.26
mariadb: security bump to 10.2.26

New upstream release. Addresses:

  CVE-2019-2805
  CVE-2019-2740
  CVE-2019-2739
  CVE-2019-2737
  CVE-2019-2758

Package updates:

  - includes "THIRDPARTY" in PKG_LICENSE_FILES
  - drops client_ed25519 as a dynamic plugin and install it with the lib
    as per upstream decision
  - refreshes patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-08-01 21:57:42 +02:00
Rosen Penev
6deac48e90
ulogd: Backport JSON network patch
It was requested in #9065 .

Cleaned up Makefile slightly.

Removed inactive maintainer.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 23a36b00e2)
2019-07-31 15:33:00 -07:00
Eneas U de Queiroz
4273dfd32f
bcrypt: add python-cffi/host build dependency
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from 86fb008751)
2019-07-31 15:32:17 -07:00
Matthias Schiffer
c708a1c18b
Merge pull request #9567 from blocktrron/openwrt-19.07
[19.07] fastd: fix segmentation fault with musl >1.1.20
2019-07-25 20:48:00 +02:00
David Bauer
c28978b925 fastd: fix segmentation fault with musl >1.1.20
When compiled with musl >1.1.20, fastd will crash in case it can't
resolve a peers hostname. This is due to a changed implementation of
freeaddrinfo in musl 1.1.21 onwards.

This segfault is fixed by not calling freeaddrinfo in case the supplied
pointer is null.

Signed-off-by: David Bauer <mail@david-bauer.net>
2019-07-25 20:21:54 +02:00
Rosen Penev
c00c7171fa
Merge pull request #9544 from jefferyto/prometheus-fix-mips64-build-openwrt-19.07
[openwrt-19.07] prometheus: Fix build for mips64/mips64el
2019-07-25 10:31:38 -07:00
Rosen Penev
d9941a6eeb
netifyd: Don't build on uClibc-ng
This absolutely needs symbols from libresolv, which uClibc-ng does not
support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0a3ebb32a1)
2019-07-24 10:03:22 -07:00
Christian Lachner
4791d22946 haproxy: Update HAProxy to v2.0.3
- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-07-24 17:53:42 +08:00
Rosen Penev
0d05301e18
opendkim: Fix compilation with uClibc-ng
res_nsend and res_send are both not available in uClibc-ng as configured
in OpenWrt. Having this function return an error is the only sensible way
to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b5b776fc9a)
2019-07-23 20:34:59 -07:00
Stepan Henek
eee9c627c8
python-cachelib: package added
Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-22 22:58:31 +02:00
Jeffery To
43a9da0136 prometheus: Fix build for mips64/mips64el
Prometheus uses an older version of fsnotify, which uses a system call
(unix.InotifyInit) that is not implemented for mips64/mips64el.

This patches Prometheus to use a newer version of fsnotify that uses a
different system call (unix.InotifyInit1) that should be available on
all Linux systems.

Fixes #9494.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-07-23 04:30:39 +08:00
Josef Schlehofer
54e3c2280a
python: add patch for CVE-2018-20852
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-22 15:29:46 +02:00
Josef Schlehofer
e4eae2fd9e
Merge pull request #9533 from jefferyto/python-musl-find_library-openwrt-19.07
[openwrt-19.07] python,python3: Fix ctypes.util.find_library()
2019-07-22 15:28:49 +02:00
Jeffery To
2d6700ed38 python,python3: Fix ctypes.util.find_library()
Python's ctypes.util.find_library() function currently doesn't work for
musl libraries/systems[1].

This adds a patch to fix this function, based on a patch from Alpine
Linux[2].

Fixes #9448.

[1]: https://bugs.python.org/issue21622
[2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-07-22 04:52:27 +08:00
Maxim Storchak
d3dbea185c
tgt: update to 1.0.79
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry-picked from 9c5d11a9da)
2019-07-20 11:28:08 -07:00
Jeffery To
91e92c99f2 golang: Update to 1.12.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-07-20 20:54:08 +08:00
Yousong Zhou
d7796a36d9 diffutils: provide diff, cmp as alternatives
Resolves openwrt/packages#6361

Resolves openwrt/packages#9524 by backporting from master b02e4eafd

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-07-20 07:34:03 +00:00
Dirk Brenken
3415e6738b
ddns-scripts: various fixes
* use '$ddns_rundir' in 'get_service_data' for pipe creation, fix #8971
* add missing local variables in 'get_service_data'
* change DNS server verification with drill in 'verify_host_port',
fix/supersed #8935
* remove needless cat calls in 'verify_host_port'
* set cloudfare TTL to min. 120 seconds, fix #7745
* bump/align package version number

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2e06c4ec93)
2019-07-20 08:38:16 +02:00
James Qian
f1d6464537
ddns-scripts: modify deSEC update url
the latest update url format for deSEC is
http(s)://update.dedyn.io/update?username=[USERNAME]&password=[PWD]

Signed-off-by: James Qian <sotux82@gmail.com>
(cherry picked from commit e4951651e2)
2019-07-20 08:37:50 +02:00
Andy Walsh
b0116db6ce
softethervpn5: update to 5.01.9671
* update to 5.01.9671
* switch to release tar's
* add cmake iconv and musl patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-pick from 46c320f18f)
2019-07-19 22:09:57 -07:00
Rosen Penev
bd6832af2e
softethervpn: Really fix iconv support
softethervpn overrides nls.mk by defining its iconv functions. This only
works if the libc has iconv. In addition, it does not allow external
libiconv usage. TARGET_LDFLAGS is also the wrong place to add -liconv.

Removed SSL3 patch. It was needed for OpenSSL 1.0.2 but not anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fb480e297c)
2019-07-19 22:09:11 -07:00
Rosen Penev
9f531cecd5
coova-chili: Fix compilation with newer GCC
Added -Wno-error to fix.

Also added patch to fix compilation without deprecated OpenSSL APIs.

Added PKG_BUILD_PARALLEL for faster compilation.

Switched libcyassl to libwolfssl.

Reorganized makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 266b0ba9d9)
2019-07-19 20:08:29 -07:00
Rosen Penev
bce47d604a
dosfsutils: Properly fix iconv linking
Necessary when using libiconv.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbfe49d7ff)
2019-07-19 20:04:59 -07:00
Rosen Penev
abf1bfb20a
linknx: Update iconv patch to work with libiconv-full
libiconv-full requires a const char for its second parameter. Otherwise
-fpermissive error is thrown.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ee94a1e912)
2019-07-19 20:03:03 -07:00
Rosen Penev
31ede9e5b0
linknx: Fix compilation with libiconv
This applies to uClibc-ng and libiconv-full

Switched to building with uClibc++.

Fixed license information.

Fixed BUILD_DEPENDS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fec9257655)
2019-07-19 20:02:30 -07:00
Rosen Penev
5bc6f6373d
elektra: Fix compilation with uClibc-ng
Add patch that checks for libiconv instead of iconv. nls.mk handles this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 50719a639a)
2019-07-19 20:00:00 -07:00
Rosen Penev
c9323ef7f5
squid: Fix compilation with GCC9
by passing -Werror. Also added -latomic as some platforms need it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from c18cb9e7c5)
2019-07-19 20:00:24 -07:00
Rosen Penev
f586d5e79e
gddrescue: Do not build with uClibc-ng
From the developer:

It seems that uClibc-ng is defining fgetc, fputc, feof, and ferror as
macros and not including them in std.

IMO this is a bug in uClibc-ng (maybe caused by lack of clarity in the
C++ standard), because even the C functions that are alowed to be
defined as macros (putc, getc) should be included in std for
consistency. Just imagine the chaos if std::getc were defined or
undefined depending on how it is implemented.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(9172e2828f)
2019-07-19 20:00:00 -07:00
Rosen Penev
3422ff8d97
flashrom: Add ARC support
Mainly endian definitions are needed.

Removed sys/io.h patch. It's a GNU header unsupported by uClibc-ng.

Cleaned up Makefile slightly.

Added HTTPS everywhere.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 12378cd4d3)
2019-07-19 20:00:00 -07:00
Rosen Penev
ae6b12a6be
open2300: Switch to GitHub fork
It applies the single patch here as well as adding some fixes.

The upstream project is dead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d2af82a6f5)
2019-07-19 19:50:20 -07:00
Rosen Penev
1424b68b87
apinger: Update to latest git revision
This project seems abandoned. Updated to latest version.

Also cleaned up the Makefile quite a bit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from dff6d2639e)
2019-07-19 19:43:26 -07:00
Rosen Penev
77b96a4ae4
fbzmq: Fix compilation with newer GCC
Added -faligned-new to fix compilation.

As fbzmq is passing -Werror, fixed compilation with newer GCC versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 50f8657141)
2019-07-19 19:38:25 -07:00
Hirokazu MORIKAWA
064528047e
node-mozilla-iot-gateway: Remove unnecessary step
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 1314b86231)
2019-07-19 19:37:13 -07:00
champtar
eb1b5cf417
Merge pull request #9504 from jefferyto/circleci-usign-openwrt-19.07
[openwrt-19.07] CircleCI: Add support for usign signatures
2019-07-18 07:52:34 -07:00
Eneas U de Queiroz
1a87b310f0
oniguruma: fix CVE-2019-13224 & CVE-2019-13225
The patches were taken from upstream commits.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-17 17:00:57 -03:00
Jeffery To
2702187c5b CircleCI: Add support for usign signatures
It appears snapshot target builds have switched from GPG signatures
(sha256sums.asc) to usign signatures (sha256sums.sig).

This adds support for verifying these usign signatures. (GPG signatures
will also be verified if found.)

This also restores the alphabetical ordering of packages to be installed
by apt-get.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-07-17 16:25:25 +08:00
Josef Schlehofer
eda5cd792f
python-pyrsistent: add a new package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-16 15:49:12 +02:00
Josef Schlehofer
670926f527
python-cachetools: add a new package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-07-16 15:49:08 +02:00
Dirk Brenken
097633fb1f
adblock: update 3.6.5-2
* clean-up config
  - remove youtube source (not working, false positives)
  - remove urlhaus source (false positives)
  - remove zeus source (discontinued)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d81adc003)
2019-07-15 08:22:49 +02:00
Yousong Zhou
f49b61c2e7 coreutils: add alternatives support
Fixes openwrt/packages#9290

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from commit 9282044851)
2019-07-13 11:07:06 +00:00
Eneas U de Queiroz
b2df2da369
python-oauthlib: update to 3.0.2 (bugfix release)
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 6c4ba3a58d)
2019-07-12 11:54:23 -03:00
Eneas U de Queiroz
6f09843053 wifidog: fix getting ip from interface, cleanup
Patch taken from upstream fixes an Invalid argument error while trying
to get the IP address of an interface.
Makefile was updated to current style.
(cherry-picked from 5ab9f3e357)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-11 11:41:21 -03:00
Josef Schlehofer
62827e7592
python-sentry-sdk: Update to version 0.10.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 4a7b407d70 )
2019-07-11 09:24:08 +02:00
Josef Schlehofer
ca059b8993
python-sentry-sdk: Update to version 0.10.0
- Reorder alphabetically dependencies
- Add python3-logging as a dependency

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit cd13d5d4de)
2019-07-11 09:23:51 +02:00
Eneas U de Queiroz
77b122c207
python-curl: add ssl locking support to wolfssl
Patch was merged upstream.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 8bdb697671 )
2019-07-11 09:23:23 +02:00
Eneas U de Queiroz
07d5a24b16
python-curl: fix compilation with libcurl-wolfssl
This allows compilation when libcurl is build with wolfssl as its SSL
backend.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 3e78945eaf)
2019-07-11 09:23:09 +02:00
Josef Schlehofer
b6688f0e79
python-curl: update to version 7.43.0.3
Patch was accepted.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 3856573)
2019-07-11 09:21:49 +02:00
Josef Schlehofer
e9322993b9
python3-bottle: update to version 0.12.17
Shorter TITLE
- The longer one was not shown in make menuconfig.
Reodered stuff in Makefile
Removed PKG_UNPACK and change PKG_BUILD_DIR

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 0a3e4d8)
2019-07-11 09:20:12 +02:00
Jan Pavlinec
70eae03fe3 irssi: update to version 1.2.1 (security fix)
Fixes CVE-2019-13045

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-07-10 22:10:23 +02:00
Josef Schlehofer
34f8cf530d
python3: Update to version 3.7.4
- Update setuptools to 40.8.0
- Update pip to 19.0.3
- Refreshed patches
- Removed 4 patches (2 of them was included in 3.7.3 and other two are
included in this release)

Makefile python3:
- Move PKG_MAINTAINER above PKG_LICENSE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from ce769db007)
2019-07-10 10:16:47 +02:00
Eneas U de Queiroz
493cc51a4d
python3: use _python_sysroot for cross-compilation
This patch, taken from buildroot, avoids the use of host paths when
compiling third-party extensions.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 523c52f6f2)
2019-07-10 10:16:29 +02:00
Florian Eckert
29596da952
Merge pull request #9433 from TDT-AG/pr/mwan3-19.07-20190709
[19.07] mwan3: add migration script for flush_conntrack config
2019-07-10 09:27:08 +02:00
Florian Eckert
3f088f2535 mwan3: add migration script for flush_conntrack config
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8d3c8dadcf)
2019-07-09 16:05:48 +02:00
Adam Mizerski
779869469a
dnscrypt-proxy2: add init script using procd
Signed-off-by: Adam Mizerski <adam@mizerski.pl>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit cc4ed96063)
2019-07-09 14:44:28 +02:00
Josef Schlehofer
a0665270de
dnscrypt-proxy2: add a new package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from cff7ce4b24 )
2019-07-09 14:44:13 +02:00
Deng Qingfang
b07a9fa83d
bind: update to 9.14.3
Fixed CVE-2019-6471

ChangeLog: https://ftp.isc.org/isc/bind9/9.14.3/CHANGES

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry-picked from 868f29d4ee)
2019-07-09 11:47:09 +02:00
Josef Schlehofer
de44768c5a
python-sqlalchemy: add package with version 1.3.5
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from f5fae3d )
2019-07-09 07:33:28 +02:00
Josef Schlehofer
b21fb60176
bcrypt: Update to version 3.1.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 43c89c56a2)
2019-07-09 07:32:51 +02:00
Josef Schlehofer
58760acd10
bcrypt: Reorder Makefile and change TITLE
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from b728e84ec6 )
2019-07-09 07:32:33 +02:00
Rosen Penev
7af32cf91b
Merge pull request #9418 from noblepepper/gcc-7.4.0
Bump gcc to version 7.4.0, Add config options
2019-07-08 12:30:23 -07:00
Dirk Brenken
96b9828f29
travelmate: update 1.4.9
* fix a corner case issue with auto expiry of the
  'Faulty Station' list (the last run information was not updated)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 59a69ee059)
2019-07-08 16:47:27 +02:00
Noble Pepper
368bde61ab gcc: update to version 7.4.0, Add config options
for coping libc.a, libpthread.a and libstdc++ to target.
Add config option to eliminate need for -lstdc++ and -lgcc_pic
switches when linking statically

Signed-off-by: Noble Pepper <noblepepper@gmail.com>
2019-07-08 06:13:48 -05:00
Karel Kočí
cf6c6d01aa
python-markdown: add a new package
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
[Add me as maintainer]
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 6cdcfd9)
2019-07-07 10:13:38 +02:00
Josef Schlehofer
f00cfce768
python-yaml: update to version 5.1.1
Reorder one thing in Makefile and add two spaces in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-pick from bec7011401 )
2019-07-07 10:09:18 +02:00
Josef Schlehofer
295bd4c237
python-sentry-sdk: add package with version 0.9.5
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
(cherry-pick from 7fb6466435)
2019-07-07 10:08:47 +02:00
Josef Schlehofer
6bbf892b56
python-aiohttp-cors: add package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-pick from commit eb38ddfa13)
2019-07-07 10:08:26 +02:00
Josef Schlehofer
24d035dcfb
youtube-dl: update to version 2019.7.2
Simplify Makefile

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 2d13229b33)
2019-07-07 10:07:46 +02:00
Rosen Penev
cf7cab4976
python-cryptography: Remove NPN
Upstream backport. It seems the holdup is on python-twisted.

Without this, it fails with
SSL_get0_next_proto_negotiated: symbol not found

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit 0859931)
2019-07-07 10:05:58 +02:00
Daniel Danzberger
bd79bfa5ae postgresql: Update to version 11.3
Version 11.3 is the current stable relase.

Changes between 9.3 and 11.3:
- pg_receivexlog, pg_resetxlog and pg_xlogdump have been replaced with pg_resetwal
- ZIC config variable must be set when cross compiling
- disable systemd support
- ecpg is no longer needed for building
- MAKELEVEL must be set to 0 when called from another makefile
- Setting AC_CONFIG_AUX_DIR([config]) is no longer requried
- Decrease build time by removing unnecessary configure checks

Signed-off-by: Daniel Danzberger <daniel@dd-wrt.com>
(cherry-picked from d9bd0c19e4)
2019-07-07 09:44:59 +02:00
Rosen Penev
42bd3a7ef1 libextractor: Add missing header
Fixes compilation with -Wimplicit-function-declaration

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0860268f22)
2019-07-07 09:44:16 +02:00
Vladimir Ulrich
fa0c3b7baa zoneinfo: Updated to the latest release.
Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 5df6ff15be)
2019-07-06 22:31:09 +03:00
Dirk Brenken
b300e4b0a3
Merge pull request #9397 from stangri/openwrt-19.07-simple-adblock
[19.07] simple-adblock: options to filter non-ASCII domains, local compressed storage
2019-07-05 06:40:37 +02:00
Stan Grishin
d75d8ec590 simple-adblock: options to filter non-ASCII domains, local compressed storage
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-07-04 15:42:51 -07:00
Rosen Penev
e0f574d66f
Merge pull request #9366 from gladiac1337/haproxy-2.0.1
[openwrt-19.07] haproxy: Update HAProxy to v2.0.1
2019-07-02 22:34:41 -07:00
Christian Lachner
a3a51a610c haproxy: Change DEPENDS from libncursesw to libncurses
- Change DEPENDS from libncrusesw to libncurses

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-07-03 07:16:13 +02:00
Rosen Penev
3b6080820b openconnect: Fix DTLS with OpenSSL
Backported upstream patches that fix this.

Removed local patch that fixes libp11 with version 0.4.7, which is not
used anymore. Upstream has a different solution.

License fixes and Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6dbbc17b1f)
2019-07-02 09:55:01 -07:00
Rosen Penev
98909efa85 dnscrypt-proxy: Update to latest git revision
Includes a security fix.

Fixed usage with latest libsodium.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 71f9b042d8)
2019-07-02 09:53:03 -07:00
Christian Lachner
e69b801632 haproxy: Update HAProxy to v2.0.1
- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-07-01 20:27:43 +02:00
Dirk Brenken
9e487fc79e
mc: update to 4.8.23
* bump to release 4.8.23, see
https://midnight-commander.org/wiki/NEWS-4.8.23
* (re-)enable VFS support by default

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 81eccbf480)
2019-07-01 16:05:06 +02:00
Dirk Brenken
ad2aa25175
travelmate: update 1.4.8
* optimize the main scan/iwinfo call (performance & system load):
  - remove a needless f_trim function call
  - remove a redundant awk call
  - reduce the scan buffer size and
    make it configurable (trm_scanbuffer, default 1024 bytes)
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8335e6e76c)
2019-07-01 09:37:33 +02:00
Rosen Penev
744071f79f
Merge pull request #9355 from jefferyto/obfs4proxy-0.0.11-openwrt-19.07
[openwrt-19.07] obfs4proxy: Update to 0.0.11
2019-06-29 14:29:19 -07:00
Jeffery To
50f3bbd4a5 obfs4proxy: Update to 0.0.11
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-30 03:19:54 +08:00
Hannu Nyman
ab465c6e98
Merge pull request #9315 from liudf0716/apfree
[19.07] apfree-wifidog: Update to v3.11.1716
2019-06-29 07:58:25 +03:00
Hannu Nyman
19c74aa3ea
Merge pull request #9313 from gladiac1337/haproxy-v2.0.0-19.07
[openwrt-19.07] haproxy: Update HAProxy to v2.0.0 (LTS)
2019-06-25 22:25:35 +03:00
Dengfeng Liu
fdc895289a apfree-wifidog: Update to v3.11.1716
Change log for v3.11.1716:
[IMP] Replaced libhttpd with libevent, therefore commented thread
related parameters in  wifidogx conf file
[IMP] Added REQUEST_TYPE_COUNTERS_V2 to wifidog protocol
[IMP] Sent online and offline client's counter info to auth server

[FIX] Fixed missing setting online_time parameter bug

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
2019-06-25 11:36:45 +08:00
Christian Lachner
01ec3b49a5 haproxy: Update HAProxy to v2.0.0 (LTS)
- Update haproxy download URL and hash
- Add new patches
- Add several CFLAGS (derived from haproxy Makefile) to make the build work with v1.9+
- Update default configuration
- Add check-command (for config) to init-script
- Add prometheus-service from contribs by default
- Add support for uclibc to haproxy with libcrypt disabled
- Minor cleanups

I have been running v2.0 for some time now and it feels as stable as v1.8. v2.0 is the new LTS release.

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2019-06-24 23:08:52 +02:00
Hannu Nyman
aa2bbd6286 collectd: update to 5.9.0
Update collectd to version 5.9.0

* remove backported upstream patches (sensors, modbus)
* remove lua patch that has been been implemented upstream
  (See collectd PR 3144)
* refresh patches and accommodate into upstream path changes
* place the 'stations' datatype for iwinfo in alpbetically
  correct place in types.db
* add libmnl dependency to 'processes' plugin required for the
  new Linux process Delay Accounting capability.
  (Alternatively the capability & requirement might be patched away
   in Makefile.am, HAVE_LIBTASKSTATS from collectd_4ea7a572)

* new plugins (disabled): ampq1, gpu_nvidia, pcie_errors,
                          write_stackdriver, write_syslog

compile-tested: ar71xx/WNDR3700 (all plugins)
run-tested: ar71xx/WNDR3700 (selected plugins)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 08d759f14a)
2019-06-24 20:30:42 +03:00
Jonas Gorski
2e7e4e8b86 znc: update to 1.7.4
Fixes CVE-2019-12816.

Signed-off-by: Jonas Gorski <jonas.gorski@gmail.com>
(cherry picked from commit 9063c9a601)
2019-06-24 14:47:33 +02:00
Daniel Engberg
ed1192991e
Merge pull request #9260 from dibdot/banIP-19.07
[openwrt-19.07] banip: update 0.1.4
2019-06-21 22:41:59 +02:00
Yousong Zhou
8acaac7479 treewide: avoid deref symlinks when installing .so
This change is inspired by commit openwrt/openwrt@38b22b1e ("nghttp2:
deduplicate files in libnghttp2")

The packages in this commit are identified with the following command

	grep -rin -E 'INSTALL_(DATA|BIN)' | grep -F '.so' | grep -F '*'

Some of them do not have symlinks and are not affected, but the change
is still applied for consideration of best practices just in case

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from 9ac5ac81ab)
2019-06-21 02:05:08 +00:00
Jianhui Zhao
e4e62d230a libuhttpd: update to 2.2.2
Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
(cherry-picked from 4e705708ae)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2019-06-21 02:04:36 +00:00
Alexandru Ardelean
9f683f180e seafile-server: fix build with libssp & non-musl libc
Fixes: https://github.com/openwrt/packages/issues/9255

This seems to fail the build for this package only.
So, this change patches the build, to add `-lssp` to the LDFLAGS of this
package, in case the build uses GCC's libssp.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-06-20 09:48:21 -07:00
Rosen Penev
98f8621c99 fbzmq: Switch to HOSTPKG
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:47:24 -07:00
Rosen Penev
45930bc0ed libmstch: Switch HOST to HOSTPKG
HOST should be used by tools only, not for host packages.

Other minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:47:13 -07:00
Rosen Penev
d6902e74bd fbthrift: Install to STAGING_DIR_HOSTPKG
As part of the boost change. Also get rid of various CMake options as
CMake can find everything properly now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:47:03 -07:00
Rosen Penev
ed1204a2d1 libfolly: Fix compilation for older ARM platforms
ARM6 and below do not support the yield instruction. Do not use it there.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:46:53 -07:00
Rosen Penev
070bda03ed boost: Install HOST libraries to HOSTPKG
After talking to @jow on IRC, we found two problems. STAGING_DIR_HOST is
designed for tools, not host packages. Changing this to HOSTPKG allows
CMake and pkgconfig to work properly with fbthrift.

The host-libraries should not be modular like this for host packages.
Changed to eliminate them and to only build the needed ones. This can be
changed as conditions change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:46:45 -07:00
Amol Bhave
c51edb3a53 fbzmq: Add fbzmq library
fbzmq provides a framework for writing services in C++ while leveraging
the features of libzmq (message passing semantics).

Compile tested: nbg6817, master

Maintainer: me

Signed-off-by: Amol Bhave <ambhave@fb.com>
2019-06-20 09:46:31 -07:00
Rosen Penev
10e02addad librsocket-cpp: Update to 2019-06-11
Fix compilation with newer GCC

Added Maintainer.

Reorganized Makefile for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:46:19 -07:00
Rosen Penev
49487e1457 fbthrift: Update to 2019.06.10.00
Rearranged Makefile for consistency between packages.

Added -Dlib_only to save some time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:46:12 -07:00
Rosen Penev
40db10536a libwangle: Update to 2019.06.10.00
Added Maintainer.

Rearranged Makefile for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:46:05 -07:00
Rosen Penev
ea50dc801a libfizz: Update to 2019.06.10.00
Fixes compilation when ChaCha20 is missing from OpenSSL 1.1

Added Maintainer.

Rearranged Makefile for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:45:53 -07:00
Rosen Penev
724c88431c libfolly: Update to 2019.06.10.00
Partially restore uclibc patch. Some parts were upstreamed while others
were not.

Fixes compilation without ChaCha20 support in OpenSSL 1.1 and above.

Depend on libunwind conditionally. libunwind is not supported on all
targets. Depending on it unconditionally makes libfolly and dependent
packages unavailable on those targets.

Added missing Maintainer.

Several Makefile rearrangements for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:45:43 -07:00
Rosen Penev
9b6d60a5ee liblz4: Update to 1.9.1 and switch to codeload
Simplifies the Makefile.

Remove build hacks and use CMake

Use PKG_BUILD_PARALLEL for faster compilation.

Switch to the Compression submenu to group this with the others.

Added lz4 binaries to be installable.

Add Optimization option.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:45:16 -07:00
Rosen Penev
c77cc5387f poco: Do not build on ARC
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-20 09:44:41 -07:00
Hannu Nyman
7a0f588661 nano: update to 4.3
Update nano to 4.3

Release notes at https://nano-editor.org/news.php

2019.06.18 - GNU nano 4.3
* The ability to read from and write to a FIFO has been regained.
* Startup time is reduced by fully parsing a syntax only when needed.
* Asking for help (^G) when using --operatingdir does not crash.
* The reading of a huge or slow file can be stopped with ^C.
* Cut, zap, and copy operations are undone separately when intermixed.
* M-D reports the correct number of lines (zero for an empty buffer).

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 2bdd3856fd)
2019-06-20 14:52:10 +03:00
Karl Palsson
03e1633d11 mosquitto: update to 1.6.3
Fixes multiple issues, primarily of interest to OpenWrt:
* getrandom issues with and without TLS and glibc
See https://github.com/openwrt/packages/issues/9005 and
https://github.com/openwrt/packages/pull/9243

Many many many other fixes related to mqttv5/v3.1.1 interactions and
mqtt5 support options.

Full changelog at: https://mosquitto.org/blog/2019/06/version-1-6-3-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2019-06-19 09:48:44 +00:00
Dirk Brenken
daac83522c
banip: update 0.1.4
* refine 'refresh' mode, add normal processing/download as fallback
* remove needless reload trigger
* fix various ipset warnings
* fix timer in 'refresh' mode
* adapt ssbl regex to new source list format

Signed-off-by: Dirk Brenken <dev@brenken.org>
2019-06-18 23:02:44 +02:00
Hannu Nyman
f1ff67d39d
Merge pull request #9249 from jefferyto/golang-1.12.6-openwrt-19.07
[openwrt-19.07] golang: Update to 1.12.6
2019-06-18 21:12:14 +03:00
Jeffery To
5a7ad42dec golang: Update to 1.12.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-19 01:09:40 +08:00
Rosen Penev
f27e5259fc
Merge pull request #9250 from jefferyto/circleci-openwrt-19.07
[openwrt-19.07] CircleCI: Change BRANCH to "openwrt-19.07"
2019-06-18 09:57:51 -07:00
Jeffery To
b14b593533 CircleCI: Change BRANCH to "openwrt-19.07"
This still uses the snapshot SDK, but should allow CI to continue.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-06-18 19:06:31 +08:00
Daniel Engberg
cb0d4d8558
Merge pull request #9247 from EricLuehrsen/unbound_192_1907
[openwrt-19.07] unbound: update to 1.9.2
2019-06-18 08:37:33 +02:00
Eric Luehrsen
add3e6c699 unbound: improve a few UCI settings
- treat RFC6762 'local.' as nxdomain because avahi and other services
will disable if SOA or NS records appear in central DNS.
- allow two threads to be enabled with the 'heavy traffic' variant of
Unbound packages.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-06-17 23:53:21 -04:00
Eric Luehrsen
936a71739c unbound: update to 1.9.2
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-06-17 23:53:21 -04:00
Eneas U de Queiroz
d80ec47df5 python-certifi: bump to 2019.6.16
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
2019-06-17 16:18:29 -03:00
Deng Qingfang
47117ce9a4 lm-sensors: install libsensors using CP instead of INSTALL_DATA
INSTALL_DATA turns all of the symlinks to files, increasing size.

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-06-16 17:27:31 -07:00
1610 changed files with 44339 additions and 26537 deletions

View file

@ -5,9 +5,13 @@ FROM debian:9
# v1.0 - Initial version by Etienne Champetier
# v1.0.1 - Run as non-root, add unzip, xz-utils
# v1.0.2 - Add bzr
# v1.0.3 - Verify usign signatures
# v1.0.4 - Add support for Python3
# v1.0.5 - Add 19.07 public keys, verify keys
RUN apt update && apt install -y \
build-essential \
bzr \
curl \
jq \
gawk \
@ -16,27 +20,44 @@ git \
libncurses5-dev \
libssl-dev \
python \
python3 \
signify-openbsd \
subversion \
bzr \
time \
wget \
zlib1g-dev \
unzip \
wget \
xz-utils \
zlib1g-dev \
&& rm -rf /var/lib/apt/lists/*
RUN useradd -c "OpenWrt Builder" -m -d /home/build -s /bin/bash build
USER build
ENV HOME /home/build
# LEDE Build System (LEDE GnuPG key for unattended build jobs)
# OpenWrt Build System (PGP key for unattended snapshot builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-snapshots@openwrt.org>' | grep '^fpr:::::::::54CC74307A2C6DC9CE618269CD84BCED626471F1:$' \
&& echo '54CC74307A2C6DC9CE618269CD84BCED626471F1:6:' | gpg --import-ownertrust
# LEDE Release Builder (17.01 "Reboot" Signing Key)
# OpenWrt Build System (PGP key for 17.01 "Reboot" release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/D52BBB6B.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-17.01@openwrt.org>' | grep '^fpr:::::::::B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:$' \
&& echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
# OpenWrt Release Builder (18.06 Signing Key)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/17E1CE16.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<openwrt-devel@lists.openwrt.org>' | grep '^fpr:::::::::6768C55E79B032D77A28DA5F0F20257417E1CE16:$' \
&& echo '6768C55E79B032D77A28DA5F0F20257417E1CE16:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 19.07 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-19.07@openwrt.org>' | grep '^fpr:::::::::D9C6901F45C9B86858687DFF28A39BC32074BE7A:$' \
&& echo 'D9C6901F45C9B86858687DFF28A39BC32074BE7A:6:' | gpg --import-ownertrust
# untrusted comment: Public usign key for unattended snapshot builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs -o /home/build/usign/b5043e70f9a75cde \
&& echo 'd7ac10f9ed1b38033855f3d27c9327d558444fca804c685b17d9dcfb0648228f */home/build/usign/b5043e70f9a75cde' | sha256sum --check
# untrusted comment: Public usign key for 19.07 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/f94b9dd6febac963' --create-dirs -o /home/build/usign/f94b9dd6febac963 \
&& echo 'b1d09457cfbc36fccfe18382d65c54a2ade3e7fd3902da490a53aa517b512755 */home/build/usign/f94b9dd6febac963' | sha256sum --check

View file

@ -2,12 +2,12 @@ version: 2.0
jobs:
build:
docker:
- image: docker.io/openwrtorg/packages-cci:v1.0.2
- image: docker.io/openwrtorg/packages-cci:v1.0.5
environment:
- SDK_HOST: "downloads.openwrt.org"
- SDK_PATH: "snapshots/targets/ath79/generic"
- SDK_FILE: "openwrt-sdk-ath79-generic_*.Linux-x86_64.tar.xz"
- BRANCH: "master"
- SDK_PATH: "releases/19.07-SNAPSHOT/targets/ath79/generic"
- SDK_FILE: "openwrt-sdk-19.07-SNAPSHOT-ath79-generic_*.Linux-x86_64.tar.xz"
- BRANCH: "openwrt-19.07"
steps:
- checkout:
path: ~/openwrt_packages
@ -64,8 +64,28 @@ jobs:
working_directory: ~/sdk
command: |
curl "https://$SDK_HOST/$SDK_PATH/sha256sums" -sS -o sha256sums
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.asc" -sS -o sha256sums.asc
gpg --with-fingerprint --verify sha256sums.asc sha256sums
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.asc" -fs -o sha256sums.asc || true
curl "https://$SDK_HOST/$SDK_PATH/sha256sums.sig" -fs -o sha256sums.sig || true
if [ ! -f sha256sums.asc ] && [ ! -f sha256sums.sig ]; then
echo_red "Missing sha256sums signature files"
exit 1
fi
[ ! -f sha256sums.asc ] || gpg --with-fingerprint --verify sha256sums.asc sha256sums
if [ -f sha256sums.sig ]; then
VERIFIED=
for KEY in ~/usign/*; do
echo "Trying $KEY..."
if signify-openbsd -V -q -p "$KEY" -x sha256sums.sig -m sha256sums; then
echo "...verified"
VERIFIED=1
break
fi
done
if [ -z "$VERIFIED" ]; then
echo_red "Could not verify usign signature"
exit 1
fi
fi
rsync -av "$SDK_HOST::downloads/$SDK_PATH/$SDK_FILE" .
sha256sum -c --ignore-missing sha256sums
@ -74,6 +94,11 @@ jobs:
working_directory: ~/build_dir
command: |
tar Jxf ~/sdk/$SDK_FILE --strip=1
touch .config
make prepare-tmpinfo scripts/config/conf
./scripts/config/conf --defconfig=.config Config.in
make prereq
rm .config
cat > feeds.conf <<EOF
src-git base https://github.com/openwrt/openwrt.git;$BRANCH
src-link packages $HOME/openwrt_packages
@ -81,13 +106,12 @@ jobs:
EOF
cat feeds.conf
./scripts/feeds update -a > /dev/null
./scripts/feeds install -a > /dev/null
make defconfig > /dev/null
# enable BUILD_LOG
sed -i 's/# CONFIG_BUILD_LOG is not set/CONFIG_BUILD_LOG=y/' .config
- run:
name: Download source, check package, compile
name: Install & download source, check package, compile
working_directory: ~/build_dir
command: |
set +o pipefail
@ -99,6 +123,9 @@ jobs:
echo_blue "=== Found new/modified packages: $PKGS"
for PKG in $PKGS ; do
echo_blue "===+ Install: $PKG"
./scripts/feeds install "$PKG"
echo_blue "===+ Download: $PKG"
make "package/$PKG/download" V=s
@ -121,9 +148,22 @@ jobs:
echo_green "=> Package check OK"
done
make \
-f .config \
-f tmp/.packagedeps \
-f <(echo '$(info $(sort $(package-y) $(package-m)))'; echo -en 'a:\n\t@:') \
| tr ' ' '\n' >enabled-package-subdirs.txt
for PKG in $PKGS ; do
if ! grep -m1 -qE "(^|/)$PKG$" enabled-package-subdirs.txt; then
echo_red "===+ Building: $PKG skipped. It cannot be enabled with $SDK_FILE"
continue
fi
echo_blue "===+ Building: $PKG"
make "package/$PKG/compile" -j3 V=s
make "package/$PKG/compile" -j3 V=s || {
RET=$?
echo_red "===+ Building: $PKG failed, rebuilding with -j1 for human readable error log"
make "package/$PKG/compile" -j1 V=s; exit $RET
}
done
- store_artifacts:

6
.github/workflows/Dockerfile vendored Normal file
View file

@ -0,0 +1,6 @@
ARG ARCH=x86-64
FROM openwrtorg/rootfs:$ARCH
ADD entrypoint.sh /entrypoint.sh
CMD ["/entrypoint.sh"]

26
.github/workflows/ci_helpers.sh vendored Normal file
View file

@ -0,0 +1,26 @@
#!/bin/sh
color_out() {
printf "\e[0;$1m$PKG_NAME: %s\e[0;0m\n" "$2"
}
success() {
color_out 32 "$1"
}
info() {
color_out 36 "$1"
}
err() {
color_out 31 "$1"
}
warn() {
color_out 33 "$1"
}
err_die() {
err "$1"
exit 1
}

39
.github/workflows/entrypoint.sh vendored Executable file
View file

@ -0,0 +1,39 @@
#!/bin/sh
mkdir -p /var/lock/
opkg update
[ -n "$CI_HELPER" ] || CI_HELPER="/ci/.github/workflows/ci_helpers.sh"
for PKG in /ci/*.ipk; do
tar -xzOf "$PKG" ./control.tar.gz | tar xzf - ./control
# package name including variant
PKG_NAME=$(sed -ne 's#^Package: \(.*\)$#\1#p' ./control)
# package version without release
PKG_VERSION=$(sed -ne 's#^Version: \(.*\)-[0-9]*$#\1#p' ./control)
# package source contianing test.sh script
PKG_SOURCE=$(sed -ne 's#^Source: .*/\(.*\)$#\1#p' ./control)
echo "Testing package $PKG_NAME in version $PKG_VERSION from $PKG_SOURCE"
opkg install "$PKG"
export PKG_NAME PKG_VERSION CI_HELPER
TEST_SCRIPT=$(find /ci/ -name "$PKG_SOURCE" -type d)/test.sh
if [ -f "$TEST_SCRIPT" ]; then
echo "Use package specific test.sh"
if sh "$TEST_SCRIPT" "$PKG_NAME" "$PKG_VERSION"; then
echo "Test succesful"
else
echo "Test failed"
exit 1
fi
else
echo "No test.sh script available"
fi
opkg remove "$PKG_NAME" --force-removal-of-dependent-packages --force-remove
done

63
.github/workflows/formal.yml vendored Normal file
View file

@ -0,0 +1,63 @@
name: Test Formalities
on:
pull_request:
jobs:
build:
name: Test Formalities
runs-on: ubuntu-latest
strategy:
fail-fast: false
steps:
- uses: actions/checkout@v2
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Test formalities
run: |
source .github/workflows/ci_helpers.sh
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
info "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
err "Pull request should not include merge commits"
RET=1
fi
author="$(git show -s --format=%aN $commit)"
if echo $author | grep -q '\S\+\s\+\S\+'; then
success "Author name ($author) seems ok"
else
err "Author name ($author) need to be your real name 'firstname lastname'"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert '; then
success "Commit subject line seems ok ($subject)"
else
err "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
success "Signed-off-by match author"
else
err "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET

View file

@ -0,0 +1,101 @@
name: Test Build
on:
pull_request:
jobs:
build:
name: Test ${{ matrix.arch }}
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
arch:
- arc_archs
- arm_cortex-a9_vfpv3-d16
- mips_24kc
- powerpc_464fp
- powerpc_8540
runtime_test: [false]
include:
- arch: aarch64_cortex-a53
runtime_test: true
- arch: arm_cortex-a15_neon-vfpv4
runtime_test: true
- arch: x86_64
runtime_test: true
steps:
- uses: actions/checkout@v2
with:
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | grep -v ".*/src/Makefile" | sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
PACKAGES+=$(echo "$ROOT" | sed -e 's@.*/\(.*\)/@\1 @')
break
fi
done
done
# fallback to test packages if nothing explicitly changes this is
# should run if other mechanics in packages.git changed
PACKAGES="${PACKAGES:-vim tmux bmon}"
echo "Building $PACKAGES"
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
- name: Build
uses: openwrt/gh-action-sdk@v1
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
FEEDNAME: packages_ci
NO_REFRESH_CHECK: 1
- name: Move created packages to project dir
run: cp bin/packages/${{ matrix.arch }}/packages_ci/*.ipk . || true
- name: Store packages
uses: actions/upload-artifact@v2
with:
name: ${{ matrix.arch}}-packages
path: "*.ipk"
- name: Store logs
uses: actions/upload-artifact@v2
with:
name: ${{ matrix.arch}}-logs
path: logs/
- name: Remove logs
run: sudo rm -rf logs/ || true
- name: Register QEMU
if: ${{ matrix.runtime_test }}
run: |
sudo docker run --rm --privileged aptman/qus -s -- -p
- name: Build Docker container
if: ${{ matrix.runtime_test }}
run: |
docker build -t test-container --build-arg ARCH .github/workflows/
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
- name: Test via Docker container
if: ${{ matrix.runtime_test }}
run: |
docker run --rm -v $GITHUB_WORKSPACE:/ci test-container

View file

@ -3,8 +3,8 @@ git:
quiet: true
language: c
dist: trusty
sudo: false
os: linux
dist: focal
cache:
directories:
- $HOME/sdk

View file

@ -5,8 +5,8 @@
set -e
SDK_HOME="$HOME/sdk"
SDK_PATH=https://downloads.lede-project.org/snapshots/targets/ar71xx/generic/
SDK=-sdk-ar71xx-generic_
SDK_PATH=https://downloads.openwrt.org/snapshots/targets/mpc85xx/p2020/
SDK=-sdk-mpc85xx-p2020_
PACKAGES_DIR="$PWD"
echo_red() { printf "\033[1;31m$*\033[m\n"; }

View file

@ -4,7 +4,7 @@
This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.
Installation of pre-built packages is handled directly by the **opkg** utility within your running OpenWrt system or by using the [OpenWrt SDK](https://openwrt.org/docs/guide-developer/obtain.firmware.sdk) on a build system.
Installation of pre-built packages is handled directly by the **opkg** utility within your running OpenWrt system or by using the [OpenWrt SDK](https://openwrt.org/docs/guide-developer/using_the_sdk) on a build system.
## Usage

View file

@ -8,18 +8,20 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=gkrellmd
PKG_VERSION:=2.3.10
PKG_VERSION:=2.3.11
PKG_RELEASE:=1
PKG_SOURCE:=gkrellm-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=http://gkrellm.srcbox.net/releases
PKG_HASH:=8b9ec8baadcd5830c6aff04ba86dc9ed317a15c1c3787440bd1e680fb2fcd766
PKG_MAINTAINER:=Peter Denison <openwrt@marshadder.org>
PKG_LICENSE:=GPL-2.0+
PKG_HASH:=1ee0643ed9ed99f88c1504c89d9ccb20780cf29319c904b68e80a8e7c8678c06
PKG_BUILD_DIR:=$(BUILD_DIR)/gkrellm-$(PKG_VERSION)
PKG_MAINTAINER:=Peter Denison <openwrt@marshadder.org>
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
define Package/gkrellmd
SECTION:=admin
@ -40,14 +42,11 @@ define Package/gkrellmd/conffiles
endef
define Build/Compile
CFLAGS="$(TARGET_CFLAGS) $(EXTRA_CPPFLAGS)" \
LDFLAGS="$(EXTRA_LDFLAGS) " \
$(MAKE) -C $(PKG_BUILD_DIR)/server \
CC="$(TARGET_CC)" \
glib2="yes" \
without-libsensors="yes" \
GLIB2_LIB="$(TARGET_LDFLAGS) -lglib-2.0 -lgmodule-2.0" \
GLIB2_INCLUDE="-I$(STAGING_DIR)/usr/include/glib-2.0 -I$(STAGING_DIR)/usr/lib/glib-2.0/include"
CFLAGS="$(TARGET_CFLAGS) $(TARGET_CPPFLAGS)" \
LDFLAGS="$(TARGET_LDFLAGS) " \
without-libsensors="yes"
endef
define Package/gkrellmd/install

View file

@ -8,17 +8,19 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=htop
PKG_VERSION:=2.2.0
PKG_RELEASE:=2
PKG_VERSION:=3.0.5
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://hisham.hm/htop/releases/$(PKG_VERSION)/
PKG_HASH:=d9d6826f10ce3887950d709b53ee1d8c1849a70fa38e91d5896ad8cbc6ba3c57
PKG_SOURCE_URL:=https://codeload.github.com/htop-dev/htop/tar.gz/$(PKG_VERSION)?
PKG_HASH:=4c2629bd50895bd24082ba2f81f8c972348aa2298cc6edc6a21a7fa18b73990c
PKG_LICENSE:=GPL-2.0
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:htop:htop
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1

View file

@ -9,13 +9,14 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=ipmitool
PKG_VERSION:=1.8.18
PKG_RELEASE:=3
PKG_RELEASE:=4
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=@SF/$(PKG_NAME)
PKG_HASH:=0c1ba3b1555edefb7c32ae8cd6a3e04322056bc087918f07189eeedfc8b81e01
PKG_LICENSE:=BSD-3-clause
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:ipmitool_project:ipmitool
include $(INCLUDE_DIR)/package.mk

View file

@ -0,0 +1,128 @@
From 960dbb956d9f9cb05b719087faed53c88dc80956 Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:33:59 +0000
Subject: [PATCH 06/11] fru: Fix buffer overflow vulnerabilities
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `read_fru_area_section` function only performs size validation of
requested read size, and falsely assumes that the IPMI message will not
respond with more than the requested amount of data; it uses the
unvalidated response size to copy into `frubuf`. If the response is
larger than the request, this can result in overflowing the buffer.
The same issue affects the `read_fru_area` function.
---
lib/ipmi_fru.c | 33 +++++++++++++++++++++++++++++++--
1 file changed, 31 insertions(+), 2 deletions(-)
diff --git a/lib/ipmi_fru.c b/lib/ipmi_fru.c
index cf00effc82a2..af99aa99444c 100644
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -615,7 +615,10 @@ int
read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
uint32_t offset, uint32_t length, uint8_t *frubuf)
{
- uint32_t off = offset, tmp, finish;
+ uint32_t off = offset;
+ uint32_t tmp;
+ uint32_t finish;
+ uint32_t size_left_in_buffer;
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -628,10 +631,12 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
finish = offset + length;
if (finish > fru->size) {
+ memset(frubuf + fru->size, 0, length - fru->size);
finish = fru->size;
lprintf(LOG_NOTICE, "Read FRU Area length %d too large, "
"Adjusting to %d",
offset + length, finish - offset);
+ length = finish - offset;
}
memset(&req, 0, sizeof(req));
@@ -667,6 +672,7 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
}
}
+ size_left_in_buffer = length;
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -707,9 +713,18 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
+ if(rsp->data_len < 1
+ || tmp > rsp->data_len - 1
+ || tmp > size_left_in_buffer)
+ {
+ printf(" Not enough buffer size");
+ return -1;
+ }
+
memcpy(frubuf, rsp->data + 1, tmp);
off += tmp;
frubuf += tmp;
+ size_left_in_buffer -= tmp;
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function
* still attempts to parse what was returned */
@@ -742,7 +757,9 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
uint32_t offset, uint32_t length, uint8_t *frubuf)
{
static uint32_t fru_data_rqst_size = 20;
- uint32_t off = offset, tmp, finish;
+ uint32_t off = offset;
+ uint32_t tmp, finish;
+ uint32_t size_left_in_buffer;
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -755,10 +772,12 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
finish = offset + length;
if (finish > fru->size) {
+ memset(frubuf + fru->size, 0, length - fru->size);
finish = fru->size;
lprintf(LOG_NOTICE, "Read FRU Area length %d too large, "
"Adjusting to %d",
offset + length, finish - offset);
+ length = finish - offset;
}
memset(&req, 0, sizeof(req));
@@ -773,6 +792,8 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
if (fru->access && fru_data_rqst_size > 16)
#endif
fru_data_rqst_size = 16;
+
+ size_left_in_buffer = length;
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -804,8 +825,16 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
+ if(rsp->data_len < 1
+ || tmp > rsp->data_len - 1
+ || tmp > size_left_in_buffer)
+ {
+ printf(" Not enough buffer size");
+ return -1;
+ }
memcpy((frubuf + off)-offset, rsp->data + 1, tmp);
off += tmp;
+ size_left_in_buffer -= tmp;
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function
--
2.27.0

View file

@ -0,0 +1,48 @@
From 910e5782b7d9f222d4e34d3505d0d636ff757103 Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:44:18 +0000
Subject: [PATCH 07/11] fru: Fix buffer overflow in ipmi_spd_print_fru
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `ipmi_spd_print_fru` function has a similar issue as the one fixed
by the previous commit in `read_fru_area_section`. An initial request is
made to get the `fru.size`, which is used as the size for the allocation
of `spd_data`. Inside a loop, further requests are performed to get the
copy sizes which are not checked before being used as the size for a
copy into the buffer.
---
lib/dimm_spd.c | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)
diff --git a/lib/dimm_spd.c b/lib/dimm_spd.c
index 41e30dbb4bda..68f3b4fa1eff 100644
--- a/lib/dimm_spd.c
+++ b/lib/dimm_spd.c
@@ -1621,7 +1621,7 @@ ipmi_spd_print_fru(struct ipmi_intf * intf, uint8_t id)
struct ipmi_rq req;
struct fru_info fru;
uint8_t *spd_data, msg_data[4];
- int len, offset;
+ uint32_t len, offset;
msg_data[0] = id;
@@ -1697,6 +1697,13 @@ ipmi_spd_print_fru(struct ipmi_intf * intf, uint8_t id)
}
len = rsp->data[0];
+ if(rsp->data_len < 1
+ || len > rsp->data_len - 1
+ || len > fru.size - offset)
+ {
+ printf(" Not enough buffer size");
+ return -1;
+ }
memcpy(&spd_data[offset], rsp->data + 1, len);
offset += len;
} while (offset < fru.size);
--
2.27.0

View file

@ -0,0 +1,48 @@
From 4f7778ed232a92bde388f38917b94f458a82c78e Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:51:49 +0000
Subject: [PATCH 08/11] session: Fix buffer overflow in ipmi_get_session_info
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `ipmi_get_session_info` function does not properly check the
response `data_len`, which is used as a copy size, allowing stack buffer
overflow.
---
lib/ipmi_session.c | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/lib/ipmi_session.c b/lib/ipmi_session.c
index 141f0f4ec8dd..b9af1fd75d40 100644
--- a/lib/ipmi_session.c
+++ b/lib/ipmi_session.c
@@ -309,8 +309,10 @@ ipmi_get_session_info(struct ipmi_intf * intf,
}
else
{
- memcpy(&session_info, rsp->data, rsp->data_len);
- print_session_info(&session_info, rsp->data_len);
+ memcpy(&session_info, rsp->data,
+ __min(rsp->data_len, sizeof(session_info)));
+ print_session_info(&session_info,
+ __min(rsp->data_len, sizeof(session_info)));
}
break;
@@ -341,8 +343,10 @@ ipmi_get_session_info(struct ipmi_intf * intf,
break;
}
- memcpy(&session_info, rsp->data, rsp->data_len);
- print_session_info(&session_info, rsp->data_len);
+ memcpy(&session_info, rsp->data,
+ __min(rsp->data_len, sizeof(session_info)));
+ print_session_info(&session_info,
+ __min(rsp->data_len, sizeof(session_info)));
} while (i <= session_info.session_slot_count);
break;
--
2.27.0

View file

@ -0,0 +1,37 @@
From 743dd4faa302f22950e4438cf684e1e398eb47eb Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 16:56:38 +0000
Subject: [PATCH 09/11] channel: Fix buffer overflow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `ipmi_get_channel_cipher_suites` function does not properly check
the final responses `data_len`, which can lead to stack buffer overflow
on the final copy.
---
lib/ipmi_channel.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/lib/ipmi_channel.c b/lib/ipmi_channel.c
index fab2e5483d12..8cd7c59a4273 100644
--- a/lib/ipmi_channel.c
+++ b/lib/ipmi_channel.c
@@ -413,7 +413,10 @@ ipmi_get_channel_cipher_suites(struct ipmi_intf *intf, const char *payload_type,
lprintf(LOG_ERR, "Unable to Get Channel Cipher Suites");
return -1;
}
- if (rsp->ccode > 0) {
+ if (rsp->ccode
+ || rsp->data_len < 1
+ || rsp->data_len > sizeof(uint8_t) + 0x10)
+ {
lprintf(LOG_ERR, "Get Channel Cipher Suites failed: %s",
val2str(rsp->ccode, completion_code_vals));
return -1;
--
2.27.0

View file

@ -0,0 +1,88 @@
From e048e9c65a52f0879d482531e70735c1d314d43a Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 17:06:39 +0000
Subject: [PATCH 10/11] lanp: Fix buffer overflows in get_lan_param_select
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Partial fix for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
The `get_lan_param_select` function is missing a validation check on the
responses `data_len`, which it then returns to caller functions, where
stack buffer overflow can occur.
---
lib/ipmi_lanp.c | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/lib/ipmi_lanp.c b/lib/ipmi_lanp.c
index 65d881bc5890..022c7f1605ed 100644
--- a/lib/ipmi_lanp.c
+++ b/lib/ipmi_lanp.c
@@ -1809,7 +1809,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
/* set new ipaddr */
memcpy(data+3, temp, 4);
printf("Setting LAN Alert %d IP Address to %d.%d.%d.%d\n", alert,
@@ -1824,7 +1824,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
/* set new macaddr */
memcpy(data+7, temp, 6);
printf("Setting LAN Alert %d MAC Address to "
@@ -1838,7 +1838,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (strncasecmp(argv[1], "def", 3) == 0 ||
strncasecmp(argv[1], "default", 7) == 0) {
@@ -1864,7 +1864,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (strncasecmp(argv[1], "on", 2) == 0 ||
strncasecmp(argv[1], "yes", 3) == 0) {
@@ -1889,7 +1889,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (strncasecmp(argv[1], "pet", 3) == 0) {
printf("Setting LAN Alert %d destination to PET Trap\n", alert);
@@ -1917,7 +1917,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (str2uchar(argv[1], &data[2]) != 0) {
lprintf(LOG_ERR, "Invalid time: %s", argv[1]);
@@ -1933,7 +1933,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
if (p == NULL) {
return (-1);
}
- memcpy(data, p->data, p->data_len);
+ memcpy(data, p->data, __min(p->data_len, sizeof(data)));
if (str2uchar(argv[1], &data[3]) != 0) {
lprintf(LOG_ERR, "Invalid retry: %s", argv[1]);
--
2.27.0

View file

@ -0,0 +1,137 @@
From 98b47424cf548f58c4d295fa8235210406ea85ca Mon Sep 17 00:00:00 2001
From: Chrostoper Ertl <chertl@microsoft.com>
Date: Thu, 28 Nov 2019 17:13:45 +0000
Subject: [PATCH 11/11] fru, sdr: Fix id_string buffer overflows
Final part of the fixes for CVE-2020-5208, see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
9 variants of stack buffer overflow when parsing `id_string` field of
SDR records returned from `CMD_GET_SDR` command.
SDR record structs have an `id_code` field, and an `id_string` `char`
array.
The length of `id_string` is calculated as `(id_code & 0x1f) + 1`,
which can be larger than expected 16 characters (if `id_code = 0xff`,
then length will be `(0xff & 0x1f) + 1 = 32`).
In numerous places, this can cause stack buffer overflow when copying
into fixed buffer of size `17` bytes from this calculated length.
---
lib/ipmi_fru.c | 2 +-
lib/ipmi_sdr.c | 40 ++++++++++++++++++++++++----------------
2 files changed, 25 insertions(+), 17 deletions(-)
diff --git a/lib/ipmi_fru.c b/lib/ipmi_fru.c
index af99aa99444c..98bc9840955a 100644
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -3062,7 +3062,7 @@ ipmi_fru_print(struct ipmi_intf * intf, struct sdr_record_fru_locator * fru)
return 0;
memset(desc, 0, sizeof(desc));
- memcpy(desc, fru->id_string, fru->id_code & 0x01f);
+ memcpy(desc, fru->id_string, __min(fru->id_code & 0x01f, sizeof(desc)));
desc[fru->id_code & 0x01f] = 0;
printf("FRU Device Description : %s (ID %d)\n", desc, fru->device_id);
diff --git a/lib/ipmi_sdr.c b/lib/ipmi_sdr.c
index 2a9cbe3087af..62aac08a9002 100644
--- a/lib/ipmi_sdr.c
+++ b/lib/ipmi_sdr.c
@@ -2084,7 +2084,7 @@ ipmi_sdr_print_sensor_eventonly(struct ipmi_intf *intf,
return -1;
memset(desc, 0, sizeof (desc));
- snprintf(desc, (sensor->id_code & 0x1f) + 1, "%s", sensor->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (sensor->id_code & 0x1f) + 1, sensor->id_string);
if (verbose) {
printf("Sensor ID : %s (0x%x)\n",
@@ -2135,7 +2135,7 @@ ipmi_sdr_print_sensor_mc_locator(struct ipmi_intf *intf,
return -1;
memset(desc, 0, sizeof (desc));
- snprintf(desc, (mc->id_code & 0x1f) + 1, "%s", mc->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (mc->id_code & 0x1f) + 1, mc->id_string);
if (verbose == 0) {
if (csv_output)
@@ -2228,7 +2228,7 @@ ipmi_sdr_print_sensor_generic_locator(struct ipmi_intf *intf,
char desc[17];
memset(desc, 0, sizeof (desc));
- snprintf(desc, (dev->id_code & 0x1f) + 1, "%s", dev->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (dev->id_code & 0x1f) + 1, dev->id_string);
if (!verbose) {
if (csv_output)
@@ -2285,7 +2285,7 @@ ipmi_sdr_print_sensor_fru_locator(struct ipmi_intf *intf,
char desc[17];
memset(desc, 0, sizeof (desc));
- snprintf(desc, (fru->id_code & 0x1f) + 1, "%s", fru->id_string);
+ snprintf(desc, sizeof(desc), "%.*s", (fru->id_code & 0x1f) + 1, fru->id_string);
if (!verbose) {
if (csv_output)
@@ -2489,35 +2489,43 @@ ipmi_sdr_print_name_from_rawentry(struct ipmi_intf *intf, uint16_t id,
int rc =0;
char desc[17];
+ const char *id_string;
+ uint8_t id_code;
memset(desc, ' ', sizeof (desc));
switch ( type) {
case SDR_RECORD_TYPE_FULL_SENSOR:
record.full = (struct sdr_record_full_sensor *) raw;
- snprintf(desc, (record.full->id_code & 0x1f) +1, "%s",
- (const char *)record.full->id_string);
+ id_code = record.full->id_code;
+ id_string = record.full->id_string;
break;
+
case SDR_RECORD_TYPE_COMPACT_SENSOR:
record.compact = (struct sdr_record_compact_sensor *) raw ;
- snprintf(desc, (record.compact->id_code & 0x1f) +1, "%s",
- (const char *)record.compact->id_string);
+ id_code = record.compact->id_code;
+ id_string = record.compact->id_string;
break;
+
case SDR_RECORD_TYPE_EVENTONLY_SENSOR:
record.eventonly = (struct sdr_record_eventonly_sensor *) raw ;
- snprintf(desc, (record.eventonly->id_code & 0x1f) +1, "%s",
- (const char *)record.eventonly->id_string);
- break;
+ id_code = record.eventonly->id_code;
+ id_string = record.eventonly->id_string;
+ break;
+
case SDR_RECORD_TYPE_MC_DEVICE_LOCATOR:
record.mcloc = (struct sdr_record_mc_locator *) raw ;
- snprintf(desc, (record.mcloc->id_code & 0x1f) +1, "%s",
- (const char *)record.mcloc->id_string);
+ id_code = record.mcloc->id_code;
+ id_string = record.mcloc->id_string;
break;
+
default:
rc = -1;
- break;
- }
+ }
+ if (!rc) {
+ snprintf(desc, sizeof(desc), "%.*s", (id_code & 0x1f) + 1, id_string);
+ }
- lprintf(LOG_INFO, "ID: 0x%04x , NAME: %-16s", id, desc);
+ lprintf(LOG_INFO, "ID: 0x%04x , NAME: %-16s", id, desc);
return rc;
}
--
2.27.0

View file

@ -8,13 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=monit
PKG_VERSION:=5.25.2
PKG_RELEASE:=2
PKG_VERSION:=5.26.0
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://mmonit.com/monit/dist
PKG_HASH:=aa0ce6361d1155e43e30a86dcff00b2003d434f221c360981ced830275abc64a
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
PKG_HASH:=87fc4568a3af9a2be89040efb169e3a2e47b262f99e78d5ddde99dd89f02f3c2
PKG_LICENSE:=AGPL-3.0
PKG_LICENSE_FILES:=COPYING
@ -63,6 +62,7 @@ endef
CONFIGURE_ARGS += \
--without-pam \
ac_cv_ipv6=$(if $(CONFIG_IPV6),yes,no) \
libmonit_cv_setjmp_available=yes \
libmonit_cv_vsnprintf_c99_conformant=yes

View file

@ -1,6 +1,6 @@
--- a/configure
+++ b/configure
@@ -14390,14 +14390,7 @@ fi
@@ -14436,14 +14436,7 @@ fi
# Find the right directory to put the root-mode PID file in
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking pid file location" >&5
$as_echo_n "checking pid file location... " >&6; }
@ -16,3 +16,21 @@
cat >>confdefs.h <<_ACEOF
--- a/configure.ac
+++ b/configure.ac
@@ -501,14 +501,7 @@ fi
# Find the right directory to put the root-mode PID file in
AC_MSG_CHECKING([pid file location])
-if test -d "/run"
-then
- piddir="/run"
-elif test -d "/var/run"; then
- piddir="/var/run"
-elif test -d "/etc"; then
- piddir="/etc"
-fi
+piddir="/var/run"
AC_DEFINE_UNQUOTED([PIDDIR], "$piddir",
[Define to the pid storage directory.])

View file

@ -1,42 +0,0 @@
diff --git a/src/ssl/Ssl.c b/src/ssl/Ssl.c
index 6501f25..9c24ad5 100644
--- a/src/ssl/Ssl.c
+++ b/src/ssl/Ssl.c
@@ -302,8 +302,8 @@ static boolean_t _retry(int socket, int *timeout, int (*callback)(int socket, ti
#if (OPENSSL_VERSION_NUMBER < 0x10100000L) || defined(LIBRESSL_VERSION_NUMBER)
-static unsigned long _threadID() {
- return (unsigned long)Thread_self();
+static void _threadID(CRYPTO_THREADID *id) {
+ CRYPTO_THREADID_set_numeric(id, (unsigned long)Thread_self());
}
@@ -482,7 +482,7 @@ void Ssl_start() {
instanceMutexTable = CALLOC(locks, sizeof(Mutex_T));
for (int i = 0; i < locks; i++)
Mutex_init(instanceMutexTable[i]);
- CRYPTO_set_id_callback(_threadID);
+ CRYPTO_THREADID_set_callback(_threadID);
CRYPTO_set_locking_callback(_mutexLock);
#endif
if (File_exist(URANDOM_DEVICE))
@@ -496,7 +496,7 @@ void Ssl_start() {
void Ssl_stop() {
#if (OPENSSL_VERSION_NUMBER < 0x10100000L) || defined(LIBRESSL_VERSION_NUMBER)
- CRYPTO_set_id_callback(NULL);
+ CRYPTO_THREADID_set_callback(NULL);
CRYPTO_set_locking_callback(NULL);
for (int i = 0; i < CRYPTO_num_locks(); i++)
Mutex_destroy(instanceMutexTable[i]);
@@ -510,7 +510,7 @@ void Ssl_stop() {
void Ssl_threadCleanup() {
#if (OPENSSL_VERSION_NUMBER < 0x10100000L) || defined(LIBRESSL_VERSION_NUMBER)
- ERR_remove_state(0);
+ ERR_remove_thread_state(NULL);
#endif
}

View file

@ -8,13 +8,15 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=muninlite
PKG_VERSION:=1.0.4
PKG_RELEASE:=9
PKG_VERSION:=2.1.2
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=@SF/$(PKG_NAME)
PKG_HASH:=736482dd6d6849d014d975b1f5794f20dda6e123dbba2d8c2f169c8e787e6f7e
PKG_LICENSE:=GPL-2.0+
PKG_SOURCE_URL:=https://github.com/munin-monitoring/$(PKG_NAME)/releases/download/$(PKG_VERSION)/
PKG_HASH:=5a49da30944f3b85a0030b661a27e84c06c7f640050802e799304b11cc635ffc
PKG_MAINTAINER:=Jonathan McCrohan <jmccrohan@gmail.com>
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=LICENSE
include $(INCLUDE_DIR)/package.mk
@ -24,8 +26,7 @@ define Package/muninlite
CATEGORY:=Administration
DEPENDS:=+xinetd
TITLE:=Munin node implemented in shell
URL:=http://sourceforge.net/projects/muninlite/
PKG_MAINTAINER:=Jonathan McCrohan <jmccrohan@gmail.com>
URL:=https://github.com/munin-monitoring/muninlite
endef
define Package/muninlite/Default/description
@ -35,20 +36,14 @@ endef
define Package/muninlite/install
$(INSTALL_DIR) $(1)/usr/sbin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/munin-node $(1)/usr/sbin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/muninlite $(1)/usr/sbin/
$(INSTALL_DIR) $(1)/etc/xinetd.d
$(INSTALL_DATA) ./files/etc/xinetd.d/munin $(1)/etc/xinetd.d/
$(INSTALL_DATA) ./files/etc/xinetd.d/muninlite $(1)/etc/xinetd.d/
$(INSTALL_DIR) $(1)/etc/munin/plugins
endef
define Package/muninlite/conffiles
/etc/xinetd.d/munin
endef
define Build/Configure
endef
define Build/Compile
$(MAKE) -C $(PKG_BUILD_DIR)
/etc/xinetd.d/muninlite
endef
$(eval $(call BuildPackage,muninlite))

View file

@ -5,6 +5,6 @@ service munin
wait = no
user = root
group = root
server = /usr/sbin/munin-node
server = /usr/sbin/muninlite
disable = no
}

View file

@ -1,10 +0,0 @@
--- a/plugins/df
+++ b/plugins/df
@@ -19,6 +19,6 @@ fetch_df() {
do
PINFO=$(df -P $PART | tail -1);
PNAME=$(echo $PINFO | cut -d\ -f1 | sed 's/[\/.-]/_/g')
- echo "$PNAME.value" $(echo $PINFO | cut -f5 -d\ | sed -e 's/\%//g')
+ echo "$PNAME.value" $(echo $PINFO | sed -e 's/\%//g' -e 's/ */ /g' | cut -f5 -d' ')
done
}

View file

@ -1,11 +0,0 @@
--- a/munin-node.in
+++ b/munin-node.in
@@ -113,7 +113,7 @@ PLUGINS=$RES
# ===== MAIN LOOP =====
FUNCTIONS="list nodes config fetch version quit"
-HOSTNAME=$(hostname -f 2>/dev/null || hostname)
+HOSTNAME=$(/sbin/uci get "system.@system[0].hostname" 2>/dev/null || cat /proc/sys/kernel/hostname)
echo "# munin node at $HOSTNAME"
while read arg0 arg1
do

View file

@ -1,21 +0,0 @@
--- a/plugins/if_
+++ b/plugins/if_
@@ -15,10 +15,14 @@ config_if() {
echo "up.min 0"
echo "up.negative down"
echo "up.cdef up,8,*"
- if ethtool $1 | grep -q Speed; then
- MAX=$(($(ethtool $1 | grep Speed | sed -e 's/[[:space:]]\{1,\}/ /g' -e 's/^ //' -e 's/M.*//' | cut -d\ -f2) * 1000000))
- echo "up.max $MAX"
- echo "down.max $MAX"
+ if [ -n "$(which ethtool)" ]; then
+ if [ -x "$(which ethtool)" ]; then
+ if ethtool $1 | grep -q Speed; then
+ MAX=$(($(ethtool $1 | grep Speed | sed -e 's/[[:space:]]\{1,\}/ /g' -e 's/^ //' -e 's/M.*//' | cut -d\ -f2) * 1000000))
+ echo "up.max $MAX"
+ echo "down.max $MAX"
+ fi
+ fi
fi
}
fetch_if() {

View file

@ -1,12 +0,0 @@
--- a/plugins/uptime
+++ b/plugins/uptime
@@ -4,8 +4,7 @@ config_uptime() {
echo "graph_vlabel uptime in days"
echo "uptime.label uptime"
echo "uptime.draw AREA"
- echo "uptime.cdef uptime,86400,/"
}
fetch_uptime() {
- echo "uptime.value" $(cut -d\ -f1 /proc/uptime)
+ awk '{printf "uptime.value %.2f",$1/86400; print ""}' /proc/uptime
}

View file

@ -1,20 +0,0 @@
--- a/munin-node.in
+++ b/munin-node.in
@@ -72,7 +72,7 @@ RES=""
for PLUG in $PLUGINS
do
if [ "$PLUG" = "if_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
INTERRES=$(echo $INTER | sed 's/\./VLAN/')
RES="$RES if_$INTERRES"
@@ -80,7 +80,7 @@ do
eval "config_if_${INTERRES}() { config_if $INTER $@; };"
done
elif [ "$PLUG" = "if_err_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
INTERRES=$(echo $INTER | sed 's/\./VLAN/')
RES="$RES if_err_$INTERRES"

View file

@ -1,24 +0,0 @@
--- a/munin-node.in
+++ b/munin-node.in
@@ -72,17 +72,17 @@ RES=""
for PLUG in $PLUGINS
do
if [ "$PLUG" = "if_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\|br-\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
- INTERRES=$(echo $INTER | sed 's/\./VLAN/')
+ INTERRES=$(echo $INTER | sed -e 's/\./VLAN/' -e 's/\-/_/')
RES="$RES if_$INTERRES"
eval "fetch_if_${INTERRES}() { fetch_if $INTER $@; };"
eval "config_if_${INTERRES}() { config_if $INTER $@; };"
done
elif [ "$PLUG" = "if_err_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\|br-\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
- INTERRES=$(echo $INTER | sed 's/\./VLAN/')
+ INTERRES=$(echo $INTER | sed -e 's/\./VLAN/' -e 's/\-/_/')
RES="$RES if_err_$INTERRES"
eval "fetch_if_err_${INTERRES}() { fetch_if_err $INTER $@; };"
eval "config_if_err_${INTERRES}() { config_if_err $INTER $@; };"

View file

@ -1,22 +0,0 @@
--- a/plugins/if_
+++ b/plugins/if_
@@ -26,7 +26,7 @@ config_if() {
fi
}
fetch_if() {
- IINFO=$(grep "$1:" /proc/net/dev | cut -d: -f2 | sed -e 's/ / /g')
+ IINFO=$(grep "$1:" /proc/net/dev | cut -d: -f2 | sed -e 's/ */ /g' -e 's/^[ \t]*//')
echo "down.value" $(echo $IINFO | cut -d\ -f1)
echo "up.value" $(echo $IINFO | cut -d\ -f9)
}
--- a/plugins/if_err_
+++ b/plugins/if_err_
@@ -15,7 +15,7 @@ config_if_err() {
echo "trans.warning 1"
}
fetch_if_err() {
- IINFO=$(grep "$1:" /proc/net/dev | cut -d: -f2 | sed -e 's/ / /g')
+ IINFO=$(grep "$1:" /proc/net/dev | cut -d: -f2 | sed -e 's/ */ /g' -e 's/^[ \t]*//')
echo "rcvd.value" $(echo $IINFO | cut -d\ -f3)
echo "trans.value" $(echo $IINFO | cut -d\ -f11)
}

View file

@ -1,20 +0,0 @@
--- a/munin-node.in
+++ b/munin-node.in
@@ -72,7 +72,7 @@ RES=""
for PLUG in $PLUGINS
do
if [ "$PLUG" = "if_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\|br-\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep -E '^ *(ppp|eth|wlan|ath|ra|ipsec|tap|br-)[^:]{1,}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
INTERRES=$(echo $INTER | sed -e 's/\./VLAN/' -e 's/\-/_/')
RES="$RES if_$INTERRES"
@@ -80,7 +80,7 @@ do
eval "config_if_${INTERRES}() { config_if $INTER $@; };"
done
elif [ "$PLUG" = "if_err_" ]; then
- for INTER in $(grep '^ *\(ppp\|eth\|wlan\|ath\|ra\|ipsec\|tap\|br-\)\([^:]\)\{1,\}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
+ for INTER in $(grep -E '^ *(ppp|eth|wlan|ath|ra|ipsec|tap|br-)[^:]{1,}:' /proc/net/dev | cut -f1 -d: | sed 's/ //g');
do
INTERRES=$(echo $INTER | sed -e 's/\./VLAN/' -e 's/\-/_/')
RES="$RES if_err_$INTERRES"

View file

@ -1,10 +0,0 @@
--- a/plugins/irqstats 2007-11-30 11:39:08.000000000 +0100
+++ b/plugins/irqstats 2018-08-29 08:20:50.809468406 +0200
@@ -1,6 +1,6 @@
config_irqstats() {
echo "graph_title Individual interrupts
-graph_args --base 1000 -l 0;
+graph_args --base 1000 -l 0
graph_vlabel interrupts / \${graph_period}
graph_category system"
CPUS=$(grep 'CPU[0-9]' /proc/interrupts | wc -w)

View file

@ -8,20 +8,20 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=netdata
PKG_VERSION:=1.14.0
PKG_RELEASE:=1
PKG_VERSION:=1.30.1
PKG_RELEASE:=2
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>, Daniel Engberg <daniel.engberg.lists@pyret.net>
PKG_LICENSE:=GPL-3.0+
PKG_LICENSE:=GPL-3.0-or-later
PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:my-netdata:netdata
PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/netdata/netdata/releases/download/v$(PKG_VERSION)
PKG_HASH:=f3768f6927e3712dce73794c6943a12f4454410c872eb3dfd19af4f52296187a
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-v$(PKG_VERSION)
PKG_SOURCE_URL:=https://codeload.github.com/netdata/netdata/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=e05f8b59d283fb2844280455b9481a2f9104730fd77f535312ff2fec40a6bc11
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
PKG_FIXUP:=autoreconf
PKG_USE_MIPS16:=0
@ -30,9 +30,9 @@ include $(INCLUDE_DIR)/package.mk
define Package/netdata
SECTION:=admin
CATEGORY:=Administration
DEPENDS:=+zlib +libuuid +libmnl
DEPENDS:=+zlib +libuuid +libuv +libmnl +libjson-c
TITLE:=Real-time performance monitoring tool
URL:=https://my-netdata.io/
URL:=https://www.netdata.cloud/
endef
define Package/netdata/description
@ -52,8 +52,17 @@ CONFIGURE_ARGS += \
--with-math \
--disable-x86-sse \
--enable-lto \
--disable-ebpf \
--without-libcap \
--disable-plugin-nfacct
--disable-https \
--disable-dbengine \
--disable-plugin-nfacct \
--disable-plugin-freeipmi \
--disable-plugin-cups \
--disable-plugin-xenstat \
--disable-backend-prometheus-remote-write \
--disable-unit-tests \
--disable-cloud
define Package/netdata/conffiles
/etc/netdata/
@ -63,13 +72,11 @@ define Package/netdata/install
$(INSTALL_DIR) $(1)/etc/netdata/custom-plugins.d
$(CP) $(PKG_INSTALL_DIR)/etc/netdata $(1)/etc
$(CP) ./files/netdata.conf $(1)/etc/netdata
touch $(1)/etc/netdata/.opt-out-from-anonymous-statistics
$(INSTALL_DIR) $(1)/usr/lib
$(CP) $(PKG_INSTALL_DIR)/usr/lib/netdata $(1)/usr/lib
$(CP) $(1)/usr/lib/netdata/conf.d/fping.conf $(1)/etc
$(CP) $(1)/usr/lib/netdata/conf.d/health_alarm_notify.conf $(1)/etc
rm -rf $(1)/usr/lib/netdata/python.d/python_modules/pyyaml2
rm -rf $(1)/usr/lib/netdata/python.d/python_modules/pyyaml3
rm -rf $(1)/usr/lib/netdata/python.d/python_modules/urllib3
$(CP) $(1)/usr/lib/netdata/plugins.d/tc-qos-helper.sh $(1)/etc
$(INSTALL_DIR) $(1)/usr/sbin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/netdata $(1)/usr/sbin
@ -82,6 +89,7 @@ define Package/netdata/install
rm $(1)/usr/share/netdata/web/images/*.png
rm $(1)/usr/share/netdata/web/images/*.gif
rm $(1)/usr/share/netdata/web/images/*.ico
rm -rf $(1)/usr/share/netdata/web/old
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/netdata.init $(1)/etc/init.d/netdata
endef

View file

@ -27,3 +27,6 @@
[health]
enabled = no
[plugin:proc:ipc]
shared memory totals = no

View file

@ -6,7 +6,7 @@ USE_PROCD=1
APPBINARY=/usr/sbin/netdata
CONFIGFILE=/etc/netdata/netdata.conf
start_service() {
start_service() {
mkdir -m 0755 -p /var/cache/netdata
chown nobody /var/cache/netdata
mkdir -m 0755 -p /var/lib/netdata
@ -14,8 +14,8 @@ CONFIGFILE=/etc/netdata/netdata.conf
mkdir -m 0755 -p /var/log/netdata
chown nobody /var/log/netdata
procd_open_instance
procd_set_param command $APPBINARY -nd -c $CONFIGFILE
procd_set_param command $APPBINARY -D -c $CONFIGFILE
procd_set_param file $CONFIGFILE
procd_set_param respawn
procd_close_instance
}
}

View file

@ -0,0 +1,28 @@
--- a/web/gui/index.html
+++ b/web/gui/index.html
@@ -90,7 +90,9 @@
</div>
<nav class="collapse navbar-collapse navbar-right" role="navigation">
<ul class="nav navbar-nav">
+ <!--
<li title="Nodes view" data-toggle="tooltip" data-placement="bottom"><a onclick="openAuthenticatedUrl('console.html');" class="btn" target="_blank"><i class="fas fa-tv"></i>&nbsp;<span class="hidden-sm hidden-md">Nodes<sup class="beta"> beta</sup></span></a></li>
+ -->
<li id="alarmsButton" title="check the health monitoring alarms and their log" data-toggle="tooltip" data-placement="bottom"><a href="#" class="btn" data-toggle="modal" data-target="#alarmsModal"><i class="fas fa-bell"></i>&nbsp;<span class="hidden-sm hidden-md">Alarms&nbsp;</span><span id="alarms_count_badge" class="badge"></span></a></li>
<li title="change dashboard settings" data-toggle="tooltip" data-placement="bottom"><a href="#" class="btn" data-toggle="modal" data-target="#optionsModal"><i class="fas fa-cog"></i>&nbsp;<span class="hidden-sm hidden-md">Settings</span></a></li>
<li title="check for netdata updates<br/>you should keep your netdata updated" data-toggle="tooltip" data-placement="bottom" class="hidden-sm" id="updateButton"><a href="#" class="btn" data-toggle="modal" data-target="#updateModal"><i class="fas fa-cloud-download-alt"></i> <span class="hidden-sm hidden-md">Update </span><span id="update_badge" class="badge"></span></a></li>
@@ -110,6 +112,7 @@
<div id="navbar-highlight-content" class="navbar-highlight-content"></div>
</div>
+<!--
<div id="sign-in-banner" style="display: none">
<div class="container">
Like what you see?
@@ -120,6 +123,7 @@
</div>
</div>
</div>
+-->
<div id="masthead" style="display: none;">
<div class="container">

View file

@ -1,14 +0,0 @@
--- a/collectors/python.d.plugin/python.d.plugin.in
+++ b/collectors/python.d.plugin/python.d.plugin.in
@@ -1,10 +1,4 @@
-#!/usr/bin/env bash
-'''':;
-if [[ "$OSTYPE" == "darwin"* ]]; then
- export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES
-fi
-exec "$(command -v python || command -v python3 || command -v python2 ||
-echo "ERROR python IS NOT AVAILABLE IN THIS SYSTEM")" "$0" "$@" # '''
+#!/usr/bin/python3
# -*- coding: utf-8 -*-
# Description:

View file

@ -0,0 +1,15 @@
--- a/web/gui/main.js
+++ b/web/gui/main.js
@@ -759,11 +759,7 @@ function renderMyNetdataMenu(machinesArr
if (!isSignedIn()) {
if (!NETDATA.registry.isRegistryEnabled()) {
html += (
- `<div class="info-item" style="white-space: nowrap">
- <span>Please <a href="#" onclick="signInDidClick(event); return false">sign in to netdata.cloud</a> to view your nodes!</span>
- <div></div>
- </div>
- <hr />`
+ ``
);
}
}

View file

@ -0,0 +1,112 @@
--- a/collectors/python.d.plugin/Makefile.am
+++ b/collectors/python.d.plugin/Makefile.am
@@ -145,109 +145,3 @@ dist_third_party_DATA = \
python_modules/third_party/monotonic.py \
python_modules/third_party/filelock.py \
$(NULL)
-
-pythonyaml2dir=$(pythonmodulesdir)/pyyaml2
-dist_pythonyaml2_DATA = \
- python_modules/pyyaml2/__init__.py \
- python_modules/pyyaml2/composer.py \
- python_modules/pyyaml2/constructor.py \
- python_modules/pyyaml2/cyaml.py \
- python_modules/pyyaml2/dumper.py \
- python_modules/pyyaml2/emitter.py \
- python_modules/pyyaml2/error.py \
- python_modules/pyyaml2/events.py \
- python_modules/pyyaml2/loader.py \
- python_modules/pyyaml2/nodes.py \
- python_modules/pyyaml2/parser.py \
- python_modules/pyyaml2/reader.py \
- python_modules/pyyaml2/representer.py \
- python_modules/pyyaml2/resolver.py \
- python_modules/pyyaml2/scanner.py \
- python_modules/pyyaml2/serializer.py \
- python_modules/pyyaml2/tokens.py \
- $(NULL)
-
-pythonyaml3dir=$(pythonmodulesdir)/pyyaml3
-dist_pythonyaml3_DATA = \
- python_modules/pyyaml3/__init__.py \
- python_modules/pyyaml3/composer.py \
- python_modules/pyyaml3/constructor.py \
- python_modules/pyyaml3/cyaml.py \
- python_modules/pyyaml3/dumper.py \
- python_modules/pyyaml3/emitter.py \
- python_modules/pyyaml3/error.py \
- python_modules/pyyaml3/events.py \
- python_modules/pyyaml3/loader.py \
- python_modules/pyyaml3/nodes.py \
- python_modules/pyyaml3/parser.py \
- python_modules/pyyaml3/reader.py \
- python_modules/pyyaml3/representer.py \
- python_modules/pyyaml3/resolver.py \
- python_modules/pyyaml3/scanner.py \
- python_modules/pyyaml3/serializer.py \
- python_modules/pyyaml3/tokens.py \
- $(NULL)
-
-python_urllib3dir=$(pythonmodulesdir)/urllib3
-dist_python_urllib3_DATA = \
- python_modules/urllib3/__init__.py \
- python_modules/urllib3/_collections.py \
- python_modules/urllib3/connection.py \
- python_modules/urllib3/connectionpool.py \
- python_modules/urllib3/exceptions.py \
- python_modules/urllib3/fields.py \
- python_modules/urllib3/filepost.py \
- python_modules/urllib3/response.py \
- python_modules/urllib3/poolmanager.py \
- python_modules/urllib3/request.py \
- $(NULL)
-
-python_urllib3_utildir=$(python_urllib3dir)/util
-dist_python_urllib3_util_DATA = \
- python_modules/urllib3/util/__init__.py \
- python_modules/urllib3/util/connection.py \
- python_modules/urllib3/util/request.py \
- python_modules/urllib3/util/response.py \
- python_modules/urllib3/util/retry.py \
- python_modules/urllib3/util/selectors.py \
- python_modules/urllib3/util/ssl_.py \
- python_modules/urllib3/util/timeout.py \
- python_modules/urllib3/util/url.py \
- python_modules/urllib3/util/wait.py \
- $(NULL)
-
-python_urllib3_packagesdir=$(python_urllib3dir)/packages
-dist_python_urllib3_packages_DATA = \
- python_modules/urllib3/packages/__init__.py \
- python_modules/urllib3/packages/ordered_dict.py \
- python_modules/urllib3/packages/six.py \
- $(NULL)
-
-python_urllib3_backportsdir=$(python_urllib3_packagesdir)/backports
-dist_python_urllib3_backports_DATA = \
- python_modules/urllib3/packages/backports/__init__.py \
- python_modules/urllib3/packages/backports/makefile.py \
- $(NULL)
-
-python_urllib3_ssl_match_hostnamedir=$(python_urllib3_packagesdir)/ssl_match_hostname
-dist_python_urllib3_ssl_match_hostname_DATA = \
- python_modules/urllib3/packages/ssl_match_hostname/__init__.py \
- python_modules/urllib3/packages/ssl_match_hostname/_implementation.py \
- $(NULL)
-
-python_urllib3_contribdir=$(python_urllib3dir)/contrib
-dist_python_urllib3_contrib_DATA = \
- python_modules/urllib3/contrib/__init__.py \
- python_modules/urllib3/contrib/appengine.py \
- python_modules/urllib3/contrib/ntlmpool.py \
- python_modules/urllib3/contrib/pyopenssl.py \
- python_modules/urllib3/contrib/securetransport.py \
- python_modules/urllib3/contrib/socks.py \
- $(NULL)
-
-python_urllib3_securetransportdir=$(python_urllib3_contribdir)/_securetransport
-dist_python_urllib3_securetransport_DATA = \
- python_modules/urllib3/contrib/_securetransport/__init__.py \
- python_modules/urllib3/contrib/_securetransport/bindings.py \
- python_modules/urllib3/contrib/_securetransport/low_level.py \
- $(NULL)

View file

@ -0,0 +1,14 @@
--- a/collectors/python.d.plugin/python_modules/bases/loaders.py
+++ b/collectors/python.d.plugin/python_modules/bases/loaders.py
@@ -10,9 +10,9 @@ PY_VERSION = version_info[:2]
try:
if PY_VERSION > (3, 1):
- from pyyaml3 import SafeLoader as YamlSafeLoader
+ from yaml import SafeLoader as YamlSafeLoader
else:
- from pyyaml2 import SafeLoader as YamlSafeLoader
+ from yaml import SafeLoader as YamlSafeLoader
except ImportError:
from yaml import SafeLoader as YamlSafeLoader

View file

@ -0,0 +1,17 @@
--- a/web/gui/index.html
+++ b/web/gui/index.html
@@ -95,10 +95,14 @@
-->
<li id="alarmsButton" title="check the health monitoring alarms and their log" data-toggle="tooltip" data-placement="bottom"><a href="#" class="btn" data-toggle="modal" data-target="#alarmsModal"><i class="fas fa-bell"></i>&nbsp;<span class="hidden-sm hidden-md">Alarms&nbsp;</span><span id="alarms_count_badge" class="badge"></span></a></li>
<li title="change dashboard settings" data-toggle="tooltip" data-placement="bottom"><a href="#" class="btn" data-toggle="modal" data-target="#optionsModal"><i class="fas fa-cog"></i>&nbsp;<span class="hidden-sm hidden-md">Settings</span></a></li>
+ <!--
<li title="check for netdata updates<br/>you should keep your netdata updated" data-toggle="tooltip" data-placement="bottom" class="hidden-sm" id="updateButton"><a href="#" class="btn" data-toggle="modal" data-target="#updateModal"><i class="fas fa-cloud-download-alt"></i> <span class="hidden-sm hidden-md">Update </span><span id="update_badge" class="badge"></span></a></li>
+ -->
+ <!--
<li title="the netdata wiki home at github<br/>remember to <b>give netdata a <i class=&quot;fas fa-star&quot;></i></b> !" data-toggle="tooltip" data-placement="bottom" class="hidden-xs hidden-sm hidden-md"><a href="https://github.com/netdata/netdata" class="btn" target="_blank"><i class="fab fa-github"></i></a></li>
<li title="follow netdata on twitter" data-toggle="tooltip" data-placement="bottom" class="hidden-xs hidden-sm hidden-md"><a href="https://twitter.com/linuxnetdata" class="btn" target="_blank"><i class="fab fa-twitter"></i></a></li>
<li title="like netdata on facebook" data-toggle="tooltip" data-placement="bottom" class="hidden-xs hidden-sm hidden-md"><a href="https://www.facebook.com/linuxnetdata/" class="btn" target="_blank"><i class="fab fa-facebook"></i></a></li>
+ -->
<li title="import / load a netdata snapshot" data-toggle="tooltip" data-placement="bottom" id="loadButton"><a href="#" class="btn" data-toggle="modal" data-target="#loadSnapshotModal"><i class="fas fa-download"></i>&nbsp;<span class="hidden-sm hidden-md hidden-lg">Import</span></a></li>
<li title="export / save a netdata snapshot" data-toggle="tooltip" data-placement="bottom" id="saveButton"><a href="#" class="btn" data-toggle="modal" data-target="#saveSnapshotModal"><i class="fas fa-upload"></i>&nbsp;<span class="hidden-sm hidden-md hidden-lg">Export</span></a></li>
<li title="print this dashboard to PDF" data-toggle="tooltip" data-placement="bottom" id="printButton"><a href="#" class="btn" data-toggle="modal" data-target="#printPreflightModal"><i class="fas fa-print"></i>&nbsp;<span class="hidden-sm hidden-md hidden-lg">Print</span></a></li>

View file

@ -5,59 +5,42 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-config
PKG_VERSION:=0.4.5
PKG_RELEASE:=2
PKG_RELEASE:=1
PKG_MAINTAINER:=Federico Capoano <f.capoano@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_PROTO:=git
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_SOURCE_VERSION:=0.4.5
PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_SOURCE_VERSION)
PKG_MIRROR_HASH:=017a8ed35ebfda2805426e7da02559d5cc2845ee9ded60fdae8e848d377424fb
PKG_LICENSE:=GPL-3.0
PKG_MIRROR_HASH:=f0b0866b27a7a75bc33c3bbc4780dd99f5ae693226012ae04e63a303172c2c38
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=1.0.0
PKGARCH:=all
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-config/default
TITLE:=Remote configuration management agent ($(2) variant)
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+curl +lua +libuci-lua +luafilesystem $(3)
VARIANT:=$(1)
MAINTAINER:=Federico Capoano <f.capoano@cineca.it>
URL:=http://openwisp.org
define Package/openwisp-config
TITLE:=Remote configuration management agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+curl \
+lua \
+libuci-lua \
+luafilesystem \
+luci-lib-nixio \
+ca-certificates
PKGARCH:=all
URL:=https://openwisp.org
endef
Package/openwisp-config-openssl=$(call Package/openwisp-config/default,openssl,OpenSSL,+ca-certificates +libopenssl)
Package/openwisp-config-mbedtls=$(call Package/openwisp-config/default,mbedtls,mbedTLS,+ca-certificates +libmbedtls)
Package/openwisp-config-cyassl=$(call Package/openwisp-config/default,cyassl,CyaSSL,+ca-certificates +libcyassl)
Package/openwisp-config-nossl=$(call Package/openwisp-config/default,nossl,No SSL)
define Build/Compile
endef
define Package/openwisp-config-$(BUILD_VARIANT)/conffiles
define Package/openwisp-config/conffiles
/etc/config/openwisp
endef
ifeq ($(BUILD_VARIANT),openssl)
CONFIG_OPENWISP_UCI:=ssl
endif
ifeq ($(BUILD_VARIANT),mbedtls)
CONFIG_OPENWISP_UCI:=ssl
endif
ifeq ($(BUILD_VARIANT),cyassl)
CONFIG_OPENWISP_UCI:=ssl
endif
ifeq ($(BUILD_VARIANT),nossl)
CONFIG_OPENWISP_UCI:=nossl
endif
define Package/openwisp-config-$(BUILD_VARIANT)/install
define Package/openwisp-config/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
@ -73,7 +56,7 @@ define Package/openwisp-config-$(BUILD_VARIANT)/install
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.init \
$(1)/etc/init.d/openwisp_config
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp-$(CONFIG_OPENWISP_UCI).config \
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp.config \
$(1)/etc/config/openwisp
$(INSTALL_BIN) \
@ -84,6 +67,10 @@ define Package/openwisp-config-$(BUILD_VARIANT)/install
$(PKG_BUILD_DIR)/openwisp-config/files/lib/openwisp/utils.lua \
$(1)/usr/lib/lua/openwisp/utils.lua
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/lib/openwisp/net.lua \
$(1)/usr/lib/lua/openwisp/net.lua
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-store-unmanaged.lua \
$(1)/usr/sbin/openwisp-store-unmanaged
@ -104,10 +91,11 @@ define Package/openwisp-config-$(BUILD_VARIANT)/install
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-update-config.lua \
$(1)/usr/sbin/openwisp-update-config
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-config/files/sbin/openwisp-get-address.lua \
$(1)/usr/sbin/openwisp-get-address
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp/
endef
$(eval $(call BuildPackage,openwisp-config-openssl))
$(eval $(call BuildPackage,openwisp-config-mbedtls))
$(eval $(call BuildPackage,openwisp-config-cyassl))
$(eval $(call BuildPackage,openwisp-config-nossl))
$(eval $(call BuildPackage,openwisp-config))

View file

@ -0,0 +1,116 @@
# openwisp.org
#
# This is free software, licensed under the GNU General Public License v3.
# See /LICENSE for more information.
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-monitoring
PKG_RELEASE:=1
PKG_MAINTAINER:=Federico Capoano <support@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKG_LICENSE_FILES:=LICENSE
PKG_SOURCE_URL:=https://github.com/openwisp/openwrt-openwisp-monitoring.git
PKG_MIRROR_HASH:=ce2ed94d24f68c58320ca700a088471368e1097754be23ad6053842cf0aaa97e
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=0.1.1
PKGARCH:=all
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-monitoring
TITLE:=OpenWISP Monitoring agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+netjson-monitoring +openwisp-config
URL:=http://openwisp.org
endef
define Package/netjson-monitoring
TITLE:=NetJson Monitoring
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+libubus-lua +lua-cjson +rpcd +rpcd-mod-iwinfo
URL:=http://openwisp.org
endef
define Build/Compile
endef
define Package/openwisp-monitoring/conffiles
/etc/config/openwisp-monitoring
endef
define Package/netjson-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/usr/libexec \
$(1)/usr/lib/lua/openwisp-monitoring \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/sbin/netjson-monitoring.lua \
$(1)/usr/libexec/netjson-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/netjson-monitoring \
$(1)/usr/sbin/netjson-monitoring
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/dhcp.lua \
$(1)/usr/lib/lua/openwisp-monitoring/dhcp.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/interfaces.lua \
$(1)/usr/lib/lua/openwisp-monitoring/interfaces.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/monitoring.lua \
$(1)/usr/lib/lua/openwisp-monitoring/monitoring.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/utils.lua \
$(1)/usr/lib/lua/openwisp-monitoring/utils.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/neighbors.lua \
$(1)/usr/lib/lua/openwisp-monitoring/neighbors.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/resources.lua \
$(1)/usr/lib/lua/openwisp-monitoring/resources.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/wifi.lua \
$(1)/usr/lib/lua/openwisp-monitoring/wifi.lua
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp-monitoring/
endef
define Package/openwisp-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.agent \
$(1)/usr/sbin/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.init \
$(1)/etc/init.d/openwisp-monitoring
$(INSTALL_CONF) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.config \
$(1)/etc/config/openwisp-monitoring
endef
$(eval $(call BuildPackage,openwisp-monitoring))
$(eval $(call BuildPackage,netjson-monitoring))

View file

@ -8,14 +8,14 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=sudo
PKG_VERSION:=1.8.27
PKG_RELEASE:=1
PKG_VERSION:=1.8.28p1
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.sudo.ws/dist
PKG_HASH:=7beb68b94471ef56d8a1036dbcdc09a7b58a949a68ffce48b83f837dd33e2ec0
PKG_HASH:=23ba5a84af31e3b5ded58d4be6d3f6939a495a55561fba92c6941b79a6e8b027
PKG_MAINTAINER:=Gergely Kiss <mail.gery@gmail.com>
PKG_MAINTAINER:=
PKG_LICENSE:=ISC
PKG_LICENSE_FILES:=doc/LICENSE
PKG_CPE_ID:=cpe:/a:todd_miller:sudo

View file

@ -1,6 +1,6 @@
--- a/lib/util/Makefile.in
+++ b/lib/util/Makefile.in
@@ -182,10 +182,10 @@ libsudo_util.la: $(LTOBJS) @LT_LDDEP@
@@ -188,10 +188,10 @@ libsudo_util.la: $(LTOBJS) @LT_LDDEP@
esac
siglist.c: mksiglist

View file

@ -1,6 +1,6 @@
--- a/Makefile.in
+++ b/Makefile.in
@@ -62,7 +62,7 @@ SHELL = @SHELL@
@@ -64,7 +64,7 @@ SHELL = @SHELL@
SED = @SED@
INSTALL = $(SHELL) $(top_srcdir)/install-sh -c

View file

@ -0,0 +1,246 @@
From c21b1fd2a43e67eff4048e624ac77769df951818 Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@sudo.ws>
Date: Sat, 23 Jan 2021 08:43:59 -0700
Subject: [PATCH 1/4] Reset valid_flags to MODE_NONINTERACTIVE for sudoedit.
This is consistent with how the -e option is handled. Also reject -H and -P
flags for sudoedit as was done in sudo 1.7. Found by Qualys, this is part of
the fix for CVE-2021-3156.
---
src/parse_args.c | 18 ++++++++++++------
1 file changed, 12 insertions(+), 6 deletions(-)
diff --git a/src/parse_args.c b/src/parse_args.c
index 260c41f66..883ab80a5 100644
--- a/src/parse_args.c
+++ b/src/parse_args.c
@@ -124,7 +124,10 @@ struct environment {
/*
* Default flags allowed when running a command.
*/
-#define DEFAULT_VALID_FLAGS (MODE_BACKGROUND|MODE_PRESERVE_ENV|MODE_RESET_HOME|MODE_LOGIN_SHELL|MODE_NONINTERACTIVE|MODE_SHELL)
+#define DEFAULT_VALID_FLAGS (MODE_BACKGROUND|MODE_PRESERVE_ENV|MODE_RESET_HOME|MODE_LOGIN_SHELL|MODE_NONINTERACTIVE|MODE_PRESERVE_GROUPS|MODE_SHELL)
+#define EDIT_VALID_FLAGS MODE_NONINTERACTIVE
+#define LIST_VALID_FLAGS (MODE_NONINTERACTIVE|MODE_LONG_LIST)
+#define VALIDATE_VALID_FLAGS MODE_NONINTERACTIVE
/* Option number for the --host long option due to ambiguity of the -h flag. */
#define OPT_HOSTNAME 256
@@ -269,6 +272,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
progname = "sudoedit";
mode = MODE_EDIT;
sudo_settings[ARG_SUDOEDIT].value = "true";
+ valid_flags = EDIT_VALID_FLAGS;
}
/* Load local IP addresses and masks. */
@@ -360,7 +364,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
usage_excl(1);
mode = MODE_EDIT;
sudo_settings[ARG_SUDOEDIT].value = "true";
- valid_flags = MODE_NONINTERACTIVE;
+ valid_flags = EDIT_VALID_FLAGS;
break;
case 'g':
assert(optarg != NULL);
@@ -371,6 +375,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
break;
case 'H':
sudo_settings[ARG_SET_HOME].value = "true";
+ SET(flags, MODE_RESET_HOME);
break;
case 'h':
if (optarg == NULL) {
@@ -421,7 +426,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
usage_excl(1);
}
mode = MODE_LIST;
- valid_flags = MODE_NONINTERACTIVE|MODE_LONG_LIST;
+ valid_flags = LIST_VALID_FLAGS;
break;
case 'n':
SET(flags, MODE_NONINTERACTIVE);
@@ -429,6 +434,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
break;
case 'P':
sudo_settings[ARG_PRESERVE_GROUPS].value = "true";
+ SET(flags, MODE_PRESERVE_GROUPS);
break;
case 'p':
/* An empty prompt is allowed. */
@@ -478,7 +484,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
if (mode && mode != MODE_VALIDATE)
usage_excl(1);
mode = MODE_VALIDATE;
- valid_flags = MODE_NONINTERACTIVE;
+ valid_flags = VALIDATE_VALID_FLAGS;
break;
case 'V':
if (mode && mode != MODE_VERSION)
@@ -505,7 +511,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
if (!mode) {
/* Defer -k mode setting until we know whether it is a flag or not */
if (sudo_settings[ARG_IGNORE_TICKET].value != NULL) {
- if (argc == 0 && !(flags & (MODE_SHELL|MODE_LOGIN_SHELL))) {
+ if (argc == 0 && !ISSET(flags, MODE_SHELL|MODE_LOGIN_SHELL)) {
mode = MODE_INVALIDATE; /* -k by itself */
sudo_settings[ARG_IGNORE_TICKET].value = NULL;
valid_flags = 0;
@@ -568,7 +574,7 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
/*
* For shell mode we need to rewrite argv
*/
- if (ISSET(mode, MODE_RUN) && ISSET(flags, MODE_SHELL)) {
+ if (ISSET(flags, MODE_SHELL|MODE_LOGIN_SHELL) && ISSET(mode, MODE_RUN)) {
char **av, *cmnd = NULL;
int ac = 1;
--
2.25.1
From 75b4169392317cdee95e2ddf1410625e5a1d409b Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@sudo.ws>
Date: Sat, 23 Jan 2021 08:44:00 -0700
Subject: [PATCH 2/4] Don't assume that argv is allocated as a single flat
buffer. While this is how the kernel behaves it is not a portable assumption.
The assumption may also be violated if getopt_long(3) permutes arguments.
Found by Qualys.
---
src/parse_args.c | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/src/parse_args.c b/src/parse_args.c
index 883ab80a5..127853c30 100644
--- a/src/parse_args.c
+++ b/src/parse_args.c
@@ -581,16 +581,16 @@ parse_args(int argc, char **argv, int *nargc, char ***nargv,
if (argc != 0) {
/* shell -c "command" */
char *src, *dst;
- size_t cmnd_size = (size_t) (argv[argc - 1] - argv[0]) +
- strlen(argv[argc - 1]) + 1;
+ size_t size = 0;
- cmnd = dst = reallocarray(NULL, cmnd_size, 2);
- if (cmnd == NULL)
+ for (av = argv; *av != NULL; av++)
+ size += strlen(*av) + 1;
+ if (size == 0 || (cmnd = reallocarray(NULL, size, 2)) == NULL)
sudo_fatalx(U_("%s: %s"), __func__, U_("unable to allocate memory"));
if (!gc_add(GC_PTR, cmnd))
exit(1);
- for (av = argv; *av != NULL; av++) {
+ for (dst = cmnd, av = argv; *av != NULL; av++) {
for (src = *av; *src != '\0'; src++) {
/* quote potential meta characters */
if (!isalnum((unsigned char)*src) && *src != '_' && *src != '-' && *src != '$')
--
2.25.1
From 58e57a748cbbf5cfb6020d615325257760b4b913 Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@sudo.ws>
Date: Sat, 23 Jan 2021 08:43:59 -0700
Subject: [PATCH 3/4] Fix potential buffer overflow when unescaping backslashes
in user_args.
Also, do not try to unescaping backslashes unless in run mode *and*
we are running the command via a shell.
Found by Qualys, this fixes CVE-2021-3156.
---
plugins/sudoers/sudoers.c | 23 ++++++++++++++++++-----
1 file changed, 18 insertions(+), 5 deletions(-)
diff --git a/plugins/sudoers/sudoers.c b/plugins/sudoers/sudoers.c
index 15a002872..1ca779cb3 100644
--- a/plugins/sudoers/sudoers.c
+++ b/plugins/sudoers/sudoers.c
@@ -406,7 +406,7 @@ sudoers_policy_main(int argc, char * const argv[], int pwflag, char *env_add[],
/* If run as root with SUDO_USER set, set sudo_user.pw to that user. */
/* XXX - causes confusion when root is not listed in sudoers */
- if (sudo_mode & (MODE_RUN | MODE_EDIT) && prev_user != NULL) {
+ if (ISSET(sudo_mode, MODE_RUN|MODE_EDIT) && prev_user != NULL) {
if (user_uid == 0 && strcmp(prev_user, "root") != 0) {
struct passwd *pw;
@@ -786,8 +786,8 @@ set_cmnd(void)
if (user_cmnd == NULL)
user_cmnd = NewArgv[0];
- if (sudo_mode & (MODE_RUN | MODE_EDIT | MODE_CHECK)) {
- if (ISSET(sudo_mode, MODE_RUN | MODE_CHECK)) {
+ if (ISSET(sudo_mode, MODE_RUN|MODE_EDIT|MODE_CHECK)) {
+ if (!ISSET(sudo_mode, MODE_EDIT)) {
if (def_secure_path && !user_is_exempt())
path = def_secure_path;
if (!set_perms(PERM_RUNAS))
@@ -825,7 +825,8 @@ set_cmnd(void)
sudo_warnx(U_("%s: %s"), __func__, U_("unable to allocate memory"));
debug_return_int(-1);
}
- if (ISSET(sudo_mode, MODE_SHELL|MODE_LOGIN_SHELL)) {
+ if (ISSET(sudo_mode, MODE_SHELL|MODE_LOGIN_SHELL) &&
+ ISSET(sudo_mode, MODE_RUN)) {
/*
* When running a command via a shell, the sudo front-end
* escapes potential meta chars. We unescape non-spaces
@@ -833,10 +834,22 @@ set_cmnd(void)
*/
for (to = user_args, av = NewArgv + 1; (from = *av); av++) {
while (*from) {
- if (from[0] == '\\' && !isspace((unsigned char)from[1]))
+ if (from[0] == '\\' && from[1] != '\0' &&
+ !isspace((unsigned char)from[1])) {
from++;
+ }
+ if (size - (to - user_args) < 1) {
+ sudo_warnx(U_("internal error, %s overflow"),
+ __func__);
+ debug_return_int(NOT_FOUND_ERROR);
+ }
*to++ = *from++;
}
+ if (size - (to - user_args) < 1) {
+ sudo_warnx(U_("internal error, %s overflow"),
+ __func__);
+ debug_return_int(NOT_FOUND_ERROR);
+ }
*to++ = ' ';
}
*--to = '\0';
--
2.25.1
From 0754533d2445c93a380c362a185b5464c417455e Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@sudo.ws>
Date: Sat, 23 Jan 2021 08:44:00 -0700
Subject: [PATCH 4/4] Fix the memset offset when converting a v1 timestamp to
TS_LOCKEXCL. We want to zero the struct starting at flags, not type (which
was just set). Found by Qualys.
---
plugins/sudoers/timestamp.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/plugins/sudoers/timestamp.c b/plugins/sudoers/timestamp.c
index d315723af..515eadd79 100644
--- a/plugins/sudoers/timestamp.c
+++ b/plugins/sudoers/timestamp.c
@@ -652,8 +652,8 @@ timestamp_lock(void *vcookie, struct passwd *pw)
} else if (entry.type != TS_LOCKEXCL) {
/* Old sudo record, convert it to TS_LOCKEXCL. */
entry.type = TS_LOCKEXCL;
- memset((char *)&entry + offsetof(struct timestamp_entry, type), 0,
- nread - offsetof(struct timestamp_entry, type));
+ memset((char *)&entry + offsetof(struct timestamp_entry, flags), 0,
+ nread - offsetof(struct timestamp_entry, flags));
if (ts_write(cookie->fd, cookie->fname, &entry, 0) == -1)
debug_return_bool(false);
}
--
2.25.1

View file

@ -1,17 +1,17 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=syslog-ng
PKG_VERSION:=3.21.1
PKG_RELEASE:=2
PKG_VERSION:=3.38.1
PKG_RELEASE:=1
PKG_MAINTAINER:=Josef Schlehofer <josef.schlehofer@nic.cz>
PKG_LICENSE:=LGPL-2.1+
PKG_LICENSE_FILES:=COPYING
PKG_LICENSE:=LGPL-2.1-or-later GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING LGPL.txt GPL.txt
PKG_CPE_ID:=cpe:/a:balabit:syslog-ng
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/balabit/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=8d163da5ad79cf3a5f043b2ed0fe18a4888d0d740542703bf2508f0b9996cd25
PKG_SOURCE_URL:=https://github.com/syslog-ng/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=5491f686d0b829b69b2e0fc0d66a62f51991aafaee005475bfa38fab399441f7
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
@ -25,9 +25,9 @@ include $(INCLUDE_DIR)/nls.mk
define Package/syslog-ng
SECTION:=admin
CATEGORY:=Administration
DEPENDS:=+libpcre +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid
TITLE:=A powerful syslog daemon
URL:=https://www.syslog-ng.com/products/open-source-log-management/
DEPENDS:=+libpcre +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid
endef
define Package/syslog-ng/description
@ -48,6 +48,7 @@ define Build/Configure
endef
CONFIGURE_ARGS += \
--disable-afsnmp \
$(call autoconf_bool,CONFIG_IPV6,ipv6) \
--disable-tcp-wrapper \
--disable-spoof-source \
@ -57,6 +58,7 @@ CONFIGURE_ARGS += \
--enable-json=yes \
--enable-http=yes \
--disable-smtp \
--disable-mqtt \
--disable-redis \
--disable-dependency-tracking \
--disable-python \
@ -84,7 +86,11 @@ define Package/syslog-ng/install
$(INSTALL_DATA) ./files/syslog-ng.conf $(1)/etc
touch $(1)/etc/syslog-ng.d/.keep
$(INSTALL_BIN) ./files/logread $(1)/usr/sbin
$(INSTALL_DIR) $(1)/sbin
$(INSTALL_BIN) ./files/logread $(1)/sbin
$(INSTALL_DIR) $(1)/usr/share/syslog-ng/include/
$(CP) -r ./files/scl $(1)/usr/share/syslog-ng/include/
endef
define Package/syslog-ng/postinst

View file

@ -0,0 +1,6 @@
#!/bin/sh
if [ "$(sysctl -n net.ipv6.conf.lo.disable_ipv6)" = "0" ]; then
echo 'network(ip("::1") port(514) transport(udp) ip-protocol(6) )'
else
echo 'network(ip("127.0.0.1") port(514) transport(udp) ip-protocol(4) )'
fi

View file

@ -0,0 +1 @@
@module confgen context(source) name(network_localhost) exec("`scl-root`/network_localhost/detect.sh")

View file

@ -2,11 +2,10 @@
# OpenWrt syslog-ng.conf specific file
# which collects all local logs into a single file called /var/log/messages.
# More details about these settings can be found here:
# https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edition/3.16/release-notes/global-options
# https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
@version: 3.21
@version: 4.0
@include "scl.conf"
@include "/etc/syslog-ng.d/" # Put any customization files in this directory
options {
chain_hostnames(no); # Enable or disable the chained hostname format.
@ -27,7 +26,7 @@ source src {
};
source net {
udp(ip(0.0.0.0) port(514));
network_localhost();
};
source s_network {
@ -60,3 +59,9 @@ log {
# uncomment this line to open port 514 to receive messages
#source(s_network);
};
#
# Finally, include any user settings last so that s/he can override or
# supplement all "canned" settings inherited from the distribution.
#
@include "/etc/syslog-ng.d/" # Put any customization files in this directory

View file

@ -11,3 +11,7 @@ start_service() {
procd_set_param command /usr/sbin/syslog-ng --foreground
procd_close_instance
}
reload_service() {
/usr/sbin/syslog-ng-ctl reload
}

View file

@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=zabbix
PKG_VERSION:=4.0.6
PKG_RELEASE:=2
PKG_VERSION:=4.0.37
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=@SF/zabbix
PKG_HASH:=2890851b3a4b0f70f69ef754aa0d07070b42440f56d280113a9474bc4ed75e5b
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/4.0/
PKG_HASH:=5ae7b197c236cc0eb78f24d10def1b3123fefa29b048ec5ce0b11d5271fc8e9b
PKG_MAINTAINER:=Etienne CHAMPETIER <champetier.etienne@gmail.com>
PKG_LICENSE:=GPL-2.0
@ -21,8 +21,7 @@ PKG_LICENSE_FILES:=COPYING
PKG_CPE_ID:=cpe:/a:zabbix:zabbix
PKG_INSTALL:=1
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_CONFIG_DEPENDS:= \
CONFIG_ZABBIX_GNUTLS \
@ -163,6 +162,9 @@ CONFIGURE_ARGS+= \
$(if $(CONFIG_ZABBIX_GNUTLS),--with-gnutls="$(STAGING_DIR)/usr") \
$(if $(CONFIG_ZABBIX_OPENSSL),--with-openssl="$(STAGING_DIR)/usr")
CONFIGURE_VARS += \
ac_cv_header_sys_sysinfo_h=no
MAKE_FLAGS += ARCH="linux"
define Package/zabbix/install/sbin

View file

@ -1,7 +1,7 @@
#see http://wiki.openwrt.org/doc/howto/zabbix for ready to use templates
#see https://openwrt.org/docs/guide-user/services/network_monitoring/zabbix for ready to use templates
# If you want to know the exact meaning of an UserParameter, you can search in the ieee80211 standard:
# http://standards.ieee.org/getieee802/download/802.11-2012.pdf
# https://standards.ieee.org/standard/802_11-2016.html
# example: for mac80211.ACKFailureCount search for dot11ACKFailureCount (page 2145)
# mac80211 phy discovery (like 'phy0')

View file

@ -1,4 +1,4 @@
#see http://wiki.openwrt.org/doc/howto/zabbix for ready to use templates
#see https://openwrt.org/docs/guide-user/services/network_monitoring/zabbix for ready to use templates
# network interface discovery
# example: {"data":[{"{#IF}":"lo", "{#NET}":"loopback"},{"{#IF}":"br-lan", "{#NET}":"lan"},{"{#IF}":"eth0.1", "{#NET}":"wan"}]}

View file

@ -1,4 +1,4 @@
#see http://wiki.openwrt.org/doc/howto/zabbix for ready to use templates
#see https://openwrt.org/docs/guide-user/services/network_monitoring/zabbix for ready to use templates
# wifi interface discovery
# example: {"data":[{"{#IF}":"wlan0", "{#MODE}":"ap", "{#SSID}":"Openwrt", "{#NET}":"lan", "{#DEV}":"radio0", "{#ENC}":"psk2+ccmp", "{#TYPE}":"mac80211", "{#HWMODE}":"11ng", "{#CHANNEL}":"11", "{#BSSID}":"xx:xx:xx:xx:xx:xx"}]}

View file

@ -1,17 +0,0 @@
--- a/src/libs/zbxnix/daemon.c
+++ b/src/libs/zbxnix/daemon.c
@@ -300,11 +300,14 @@ int daemon_start(int allow_root, const c
if (0 == allow_root && 0 == getuid()) /* running as root? */
{
+#if 0
+/* allow changing user and foreground */
if (0 != (flags & ZBX_TASK_FLAG_FOREGROUND))
{
zbx_error("cannot run as root!");
exit(EXIT_FAILURE);
}
+#endif
if (NULL == user)
user = "zabbix";

View file

@ -1,11 +0,0 @@
--- a/configure.ac
+++ b/configure.ac
@@ -51,7 +51,7 @@ AC_CHECK_HEADERS(stdio.h stdlib.h string
syslog.h time.h errno.h sys/types.h sys/stat.h netinet/in.h \
math.h sys/socket.h dirent.h ctype.h \
mtent.h fcntl.h sys/param.h arpa/inet.h \
- sys/vfs.h sys/pstat.h sys/sysinfo.h sys/statvfs.h sys/statfs.h \
+ sys/vfs.h sys/pstat.h sys/statvfs.h sys/statfs.h \
sys/socket.h sys/loadavg.h arpa/inet.h \
sys/vmmeter.h strings.h vm/vm_param.h \
sys/time.h kstat.h sys/syscall.h sys/sysmacros.h \

View file

@ -0,0 +1,23 @@
--- a/src/libs/zbxsysinfo/common/net.c
+++ b/src/libs/zbxsysinfo/common/net.c
@@ -547,7 +547,7 @@ static int dns_query(AGENT_REQUEST *request, AGENT_RESULT *result, int short_ans
return SYSINFO_RET_FAIL;
}
-#if defined(HAVE_RES_NINIT) && !defined(_AIX)
+#if defined(HAVE_RES_NINIT) && !defined(_AIX) && !defined(__UCLIBC__)
if (-1 == (res = res_nmkquery(&res_state_local, QUERY, zone, C_IN, type, NULL, 0, NULL, buf, sizeof(buf))))
#else
if (-1 == (res = res_mkquery(QUERY, zone, C_IN, type, NULL, 0, NULL, buf, sizeof(buf))))
@@ -643,7 +643,11 @@ static int dns_query(AGENT_REQUEST *request, AGENT_RESULT *result, int short_ans
res_state_local.retrans = retrans;
res_state_local.retry = retry;
+#ifndef __UCLIBC__
res = res_nsend(&res_state_local, buf, res, answer.buffer, sizeof(answer.buffer));
+#else
+ res = res_search(*res_state_local.dnsrch, res, 0, answer.buffer, sizeof(answer.buffer));
+#endif
# ifdef HAVE_RES_U_EXT /* Linux */
if (NULL != ip && '\0' != *ip && AF_INET6 == ip_type)

View file

@ -9,13 +9,13 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=autoconf
PKG_VERSION:=2.69
PKG_RELEASE:=2
PKG_RELEASE:=3
PKG_SOURCE_URL:=@GNU/autoconf
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_HASH:=64ebcec9f8ac5b2487125a86a7760d2591ac9e1d3dbd59489633f9de62a57684
PKG_MAINTAINER:=Heinrich Schuchardt <xypron.glpk@gmx.de>
PKG_LICENSE:=GPL-3.0+
PKG_LICENSE:=GPL-3.0-or-later
PKG_INSTALL:=1

View file

@ -9,13 +9,14 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=automake
PKG_VERSION:=1.15.1
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE_URL:=@GNU/automake
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_HASH:=af6ba39142220687c500f79b4aa2f181d9b24e4f8d8ec497cea4ba26c64bedaf
PKG_MAINTAINER:=Heinrich Schuchardt <xypron.glpk@gmx.de>
PKG_LICENSE:=GPL-3.0+
PKG_LICENSE:=GPL-3.0-or-later
PKG_CPE_ID:=cpe:/a:gnu:automake
PKG_INSTALL:=1

View file

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=diffutils
PKG_VERSION:=3.7
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=@GNU/diffutils
@ -30,6 +30,10 @@ define Package/diffutils
DEPENDS:=+USE_GLIBC:librt
TITLE:=diffutils
URL:=http://www.gnu.org/software/diffutils/
ALTERNATIVES:=\
200:/usr/bin/cmp:/usr/bin/gnu-cmp \
200:/usr/bin/diff:/usr/bin/gnu-diff \
endef
define Package/diffutils/description
@ -43,23 +47,9 @@ CONFIGURE_VARS += \
define Package/diffutils/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/{sdiff,diff3,diff,cmp} $(1)/usr/bin/
endef
define Package/diffutils/preinst
#!/bin/sh
for x in sdiff diff3 diff cmp; do
[ -L "$${IPKG_INSTROOT}/usr/bin/$$x" ] && rm -f "$${IPKG_INSTROOT}/usr/bin/$$x"
done
exit 0
endef
define Package/diffutils/postrm
#!/bin/sh
for x in sdiff diff3 diff cmp; do
/bin/busybox $$x -h 2>&1 | grep -q BusyBox && ln -sf ../../bin/busybox /usr/bin/$$x
done
exit 0
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/{sdiff,diff3} $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/diff $(1)/usr/bin/gnu-diff
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/cmp $(1)/usr/bin/gnu-cmp
endef
$(eval $(call BuildPackage,diffutils))

34
devel/gcc/Config.in Normal file
View file

@ -0,0 +1,34 @@
# gcc library configuration
menu "Libraries"
depends on PACKAGE_gcc
config INCLUDE_STATIC_LIBC
bool "Include static libc on target"
help
Copies libc.a to target device
Increases the size of an already
very large package
default n
config INCLUDE_STATIC_LIBPTHREAD
bool "Include static libptread on target"
help
Copies libpthread.a to target device
Increases the size of an already
very large package
default n
config INCLUDE_STATIC_LIBSTDC
bool "Include static libstdc++ on target"
help
Copies libstdc++.a to target device
Increases the size of an already
very large package
default n
config INCLUDE_STATIC_LINK_SPEC
depends on INCLUDE_STATIC_LIBSTDC
bool "Generate spec file for easy static c++ linking on target"
help
Creates a spec file for gcc to eliminate the need for
-lstdc++, libgcc_pic and -static-libstdc flags when
statically linking c++ programs
default n
endmenu

View file

@ -6,19 +6,63 @@
#
include $(TOPDIR)/rules.mk
define Package/gcc/description
Build a native toolchain for compiling on target
device.
endef
define Package/gcc
SECTION:=devel
CATEGORY:=Development
TITLE:=gcc
MAINTAINER:=Noble Pepper <gccmaintain@noblepepper.com>
DEPENDS:= +binutils +libstdcpp @!arc
MENU:=1
endef
PKG_NAME:=gcc
PKG_VERSION:=5.4.0
PKG_RELEASE:=3
# PKG_VERSION=7.3.0
PKG_VERSION=7.4.0
PKG_RELEASE:=5
PKG_SOURCE_URL:=@GNU/gcc/gcc-$(PKG_VERSION)
PKG_HASH:=608df76dec2d34de6558249d8af4cbee21eceddbcb580d666f7a5a583ca3303a
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_INSTALL:=1
PKG_FIXUP:=libtool
PKG_BUILD_PARALLEL:=1
include $(INCLUDE_DIR)/package.mk
PKG_CPE_ID:=cpe:/a:gnu:gcc
ifeq ($(PKG_VERSION),7.3.0)
PKG_HASH:=832ca6ae04636adbb430e865a1451adf6979ab44ca1c8374f61fba65645ce15c
endif
ifeq ($(PKG_VERSION),7.4.0)
PKG_HASH:=eddde28d04f334aec1604456e536416549e9b1aa137fc69204e65eb0c009fe51
endif
define Package/gcc/config
source "$(SOURCE)/Config.in"
endef
ifeq ($(CONFIG_INCLUDE_STATIC_LIBC),y)
COPY_STATIC_LIBC=cp -a $(TOOLCHAIN_DIR)/lib/libc.a $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)
endif
ifeq ($(CONFIG_INCLUDE_STATIC_LIBPTHREAD),y)
COPY_STATIC_LIBPTHREAD=cp -a $(TOOLCHAIN_DIR)/lib/libpthread.a $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)
endif
ifeq ($(CONFIG_INCLUDE_STATIC_LIBSTDC),y)
COPY_STATIC_LIBSTDC=cp -a $(TOOLCHAIN_DIR)/lib/libstdc++.a $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)
endif
ifeq ($(CONFIG_INCLUDE_STATIC_LINK_SPEC),y)
INSTALL_STATIC_SPEC=g++ -dumpspecs |sed s/--start-group}\ %G\ %L\ /--start-group}\ %G\ %L\ -lstdc++\ -lgcc_pic\ / >/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)/specs
REMOVE_STATIC_SPEC=rm /usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)/specs
endif
include $(INCLUDE_DIR)/package.mk
TARGET_LANGUAGES:="c,c++"
BUGURL=https://dev.openwrt.org/
PKGVERSION=OpenWrt GCC $(PKG_VERSION)
@ -37,43 +81,30 @@ ifneq ($(CONFIG_SOFT_FLOAT),y)
ARM_FLOAT_OPTION:= --with-float=hard
endif
endif
define Package/gcc
SECTION:=devel
CATEGORY:=Development
TITLE:=gcc
MAINTAINER:=Noble Pepper <gccmaintain@noblepepper.com>
DEPENDS:= +binutils +libstdcpp
endef
define Package/gcc/description
build a native toolchain for compiling on target
endef
GMPSRC=gmp-4.3.2
GMPSRC=gmp-6.1.0
define Download/gmp
URL:=ftp://gcc.gnu.org/pub/gcc/infrastructure/
FILE:=$(GMPSRC).tar.bz2
HASH:=936162c0312886c21581002b79932829aa048cfaf9937c6265aeaa14f1cd1775
HASH:=498449a994efeba527885c10405993427995d3f86b8768d8cdf8d9dd7c6b73e8
endef
$(eval $(call Download,gmp))
MPCSRC=mpc-0.8.1
MPCSRC=mpc-1.0.3
define Download/mpc
URL:=ftp://gcc.gnu.org/pub/gcc/infrastructure/
FILE:=$(MPCSRC).tar.gz
HASH:=e664603757251fd8a352848276497a4c79b7f8b21fd8aedd5cc0598a38fee3e4
HASH:=617decc6ea09889fb08ede330917a00b16809b8db88c29c31bfbb49cbf88ecc3
endef
$(eval $(call Download,mpc))
MPFRSRC=mpfr-2.4.2
MPFRSRC=mpfr-3.1.4
define Download/mpfr
URL:=ftp://gcc.gnu.org/pub/gcc/infrastructure/
FILE:=$(MPFRSRC).tar.bz2
HASH:=c7e75a08a8d49d2082e4caee1591a05d11b9d5627514e678f02d66a124bcf2ba
HASH:=d3103a80cdad2407ed581f3618c4bed04e0c92d1cf771a65ead662cc397f7775
endef
$(eval $(call Download,mpfr))
@ -90,11 +121,11 @@ define Build/Prepare
# poor man's fix for `none-openwrt-linux' not recognized when building with musl
cp $(PKG_BUILD_DIR)/config.sub $(PKG_BUILD_DIR)/mpfr/
cp $(PKG_BUILD_DIR)/config.sub $(PKG_BUILD_DIR)/gmp/
chmod u+w $(PKG_BUILD_DIR)/mpc/config.sub
cp $(PKG_BUILD_DIR)/config.sub $(PKG_BUILD_DIR)/mpc/
endef
TARGET_CXX += -std=gnu++03
CONFIGURE_ARGS += CXX_FOR_TARGET="$(TARGET_CXX)" CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
CONFIGURE_ARGS += CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
define Build/Configure
(cd $(PKG_BUILD_DIR); rm -f config.cache; \
@ -118,6 +149,7 @@ define Build/Configure
--disable-libvtv \
--disable-libcilkrts \
--disable-libmudflap \
--disable-libmpx \
--disable-multilib \
--disable-libgomp \
--disable-libquadmath \
@ -128,6 +160,7 @@ define Build/Configure
--prefix=/usr \
--libexecdir=/usr/lib \
--with-local-prefix=/usr \
--with-stage1-ldflags=-lstdc++ \
$(ARM_FLOAT_OPTION) \
$(SOFT_FLOAT_CONFIG_OPTION) \
$(call qstrip,$(CONFIG_EXTRA_GCC_CONFIG_OPTIONS)) \
@ -149,7 +182,7 @@ ifeq ($(CONFIG_SOFT_FLOAT),y)
endif
ENVCFLAGS+="
ENVLDFLAGS:="-Wl,-rpath=/usr/lib -Wl,--dynamic-linker=/usr/lib/$(DYNLINKER) -L/usr/lib"
ENVLDFLAGS:="-Wl,-rpath=/usr/lib -Wl,--dynamic-linker=/usr/lib/$(DYNLINKER) -L/usr/lib, -lstdc++"
define Package/gcc/install
$(INSTALL_DIR) $(1)/usr/bin $(1)/usr/lib $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)
@ -165,6 +198,9 @@ define Package/gcc/install
cp -a $(TOOLCHAIN_DIR)/lib/*.{o,so*} $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)
cp -a $(TOOLCHAIN_DIR)/lib/*nonshared*.a $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)
cp -a $(TOOLCHAIN_DIR)/lib/libm.a $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)
$(COPY_STATIC_LIBC)
$(COPY_STATIC_LIBPTHREAD)
$(COPY_STATIC_LIBSTDC)
rm -f $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)/libgo*
rm -f $(1)/usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)/libcc1*
echo '#!/bin/sh' > $(1)/usr/bin/gcc_env.sh
@ -173,4 +209,14 @@ define Package/gcc/install
chmod +x $(1)/usr/bin/gcc_env.sh
endef
define Package/gcc/postinst
#!/bin/sh
$(INSTALL_STATIC_SPEC)
endef
define Package/gcc/postrm
#!/bin/sh
$(REMOVE_STATIC_SPEC)
endef
$(eval $(call BuildPackage,gcc))

View file

@ -1,8 +1,8 @@
Native GCC that runs on target.
To save disk space, this GCC only supports dynamic linking on the target box,
there are no static libraries shipped except libgcc.a on those architectures
that need it.
To save disk space, this GCC uses dynamic linking on the target box. There
are configuration options to include libstdc++.a, libc.a and libpthread.a
if staticly linked binaries are needed.
For now, this was only tested on arm (EABI) and mips targets. Others to be
done...

View file

@ -1,3 +1,15 @@
commit 31285a20390a5e53a74a2a71d1b5c82f366ddd5a
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue May 6 11:49:05 2014 +0000
gcc: revert an upstream patch that is causing a regression on powerpc
https://forum.openwrt.org/viewtopic.php?pid=232494#p232494
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40709
Revert of:
commit 275035b56823b26d5fb7e90fad945b998648edf2
@ -14,7 +26,7 @@ Date: Thu Sep 5 14:09:07 2013 +0000
--- a/gcc/reginfo.c
+++ b/gcc/reginfo.c
@@ -665,35 +665,40 @@ choose_hard_reg_mode (unsigned int regno
@@ -637,35 +637,40 @@ choose_hard_reg_mode (unsigned int regno
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)

View file

@ -1,3 +1,13 @@
commit 81cc26c706b2bc8c8c1eb1a322e5c5157900836e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Oct 19 21:45:51 2014 +0000
gcc: do not assume that the Mac OS X filesystem is case insensitive
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 42973
--- a/include/filenames.h
+++ b/include/filenames.h
@@ -43,11 +43,6 @@ extern "C" {

View file

@ -1,38 +0,0 @@
diff -Naurd mpfr-2.4.2-a/mpfr-longlong.h mpfr-2.4.2-b/mpfr-longlong.h
--- -a/mpfr-2.4.2/mpfr-longlong.h 2009-11-30 02:43:08.000000000 +0000
+++ -b/mpfr-2.4.2/mpfr-longlong.h 2009-12-18 12:04:29.000000000 +0000
@@ -1011,7 +1011,15 @@
#endif /* __m88000__ */
#if defined (__mips) && W_TYPE_SIZE == 32
-#if __GNUC__ > 2 || __GNUC_MINOR__ >= 7
+#if (__GNUC__ >= 5) || (__GNUC__ >= 4 && __GNUC_MINOR__ >= 4)
+#define umul_ppmm(w1, w0, u, v) \
+ do { \
+ UDItype _r; \
+ _r = (UDItype) u * v; \
+ (w1) = _r >> 32; \
+ (w0) = (USItype) _r; \
+ } while (0)
+#elif __GNUC__ > 2 || __GNUC_MINOR__ >= 7
#define umul_ppmm(w1, w0, u, v) \
__asm__ ("multu %2,%3" : "=l" (w0), "=h" (w1) : "d" (u), "d" (v))
#else
@@ -1024,7 +1032,16 @@
#endif /* __mips */
#if (defined (__mips) && __mips >= 3) && W_TYPE_SIZE == 64
-#if __GNUC__ > 2 || __GNUC_MINOR__ >= 7
+#if (__GNUC__ >= 5) || (__GNUC__ >= 4 && __GNUC_MINOR__ >= 4)
+typedef unsigned int UTItype __attribute__ ((mode (TI)));
+#define umul_ppmm(w1, w0, u, v) \
+ do { \
+ UTItype _r; \
+ _r = (UTItype) u * v; \
+ (w1) = _r >> 64; \
+ (w0) = (UDItype) _r; \
+ } while (0)
+#elif __GNUC__ > 2 || __GNUC_MINOR__ >= 7
#define umul_ppmm(w1, w0, u, v) \
__asm__ ("dmultu %2,%3" : "=l" (w0), "=h" (w1) : "d" (u), "d" (v))
#else

View file

@ -1,6 +1,18 @@
commit 098bd91f5eae625c7d2ee621e10930fc4434e5e2
Author: Luka Perkov <luka@openwrt.org>
Date: Tue Feb 26 16:16:33 2013 +0000
gcc: don't build documentation
This closes #13039.
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 35807
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -2941,18 +2941,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
@@ -3121,18 +3121,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)

View file

@ -1,28 +0,0 @@
--- a/gcc/calls.c
+++ b/gcc/calls.c
@@ -225,6 +225,12 @@ prepare_call_address (tree fndecl_or_typ
&& targetm.small_register_classes_for_mode_p (FUNCTION_MODE))
? force_not_mem (memory_address (FUNCTION_MODE, funexp))
: memory_address (FUNCTION_MODE, funexp));
+ else if (flag_pic && !flag_plt && fndecl_or_type
+ && TREE_CODE (fndecl_or_type) == FUNCTION_DECL
+ && !targetm.binds_local_p (fndecl_or_type))
+ {
+ funexp = force_reg (Pmode, funexp);
+ }
else if (! sibcallp)
{
#ifndef NO_FUNCTION_CSE
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1779,6 +1779,10 @@ fpie
Common Report Var(flag_pie,1) Negative(fPIC)
Generate position-independent code for executables if possible (small mode)
+fplt
+Common Report Var(flag_plt) Init(1)
+Use PLT for PIC calls (-fno-plt: load the address from GOT at call site)
+
fplugin=
Common Joined RejectNegative Var(common_deferred_options) Defer
Specify a plugin to load

View file

@ -1,23 +0,0 @@
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -8001,9 +8001,17 @@ mask_low_and_shift_p (machine_mode mode,
bool
and_operands_ok (machine_mode mode, rtx op1, rtx op2)
{
- return (memory_operand (op1, mode)
- ? and_load_operand (op2, mode)
- : and_reg_operand (op2, mode));
+ if (!memory_operand (op1, mode))
+ return and_reg_operand (op2, mode);
+
+ if (!and_load_operand (op2, mode))
+ return false;
+
+ if (!TARGET_MIPS16 || si_mask_operand(op2, mode))
+ return true;
+
+ op1 = XEXP (op1, 0);
+ return !(REG_P (op1) && REGNO (op1) == STACK_POINTER_REGNUM);
}
/* The canonical form of a mask-low-and-shift-left operation is

View file

@ -1,33 +0,0 @@
--- a/contrib/regression/objs-gcc.sh
+++ b/contrib/regression/objs-gcc.sh
@@ -106,6 +106,10 @@ if [ $H_REAL_TARGET = $H_REAL_HOST -a $H
then
make all-gdb all-dejagnu all-ld || exit 1
make install-gdb install-dejagnu install-ld || exit 1
+elif [ $H_REAL_TARGET = $H_REAL_HOST -a $H_REAL_TARGET = i686-pc-linux-uclibc ]
+ then
+ make all-gdb all-dejagnu all-ld || exit 1
+ make install-gdb install-dejagnu install-ld || exit 1
elif [ $H_REAL_TARGET = $H_REAL_HOST ] ; then
make bootstrap || exit 1
make install || exit 1
--- a/libjava/classpath/ltconfig
+++ b/libjava/classpath/ltconfig
@@ -603,7 +603,7 @@ host_os=`echo $host | sed 's/^\([^-]*\)-
# Transform linux* to *-*-linux-gnu*, to support old configure scripts.
case $host_os in
-linux-gnu*) ;;
+linux-gnu*|linux-uclibc*) ;;
linux*) host=`echo $host | sed 's/^\(.*-.*-linux\)\(.*\)$/\1-gnu\2/'`
esac
@@ -1247,7 +1247,7 @@ linux-gnuoldld* | linux-gnuaout* | linux
;;
# This must be Linux ELF.
-linux-gnu*)
+linux*)
version_type=linux
need_lib_prefix=no
need_version=no

View file

@ -0,0 +1,20 @@
Fix https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84790.
MIPS16 functions have a static assembler prologue which clobbers
registers v0 and v1. Add these register clobbers to function call
instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3098,6 +3098,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}
+ if (TARGET_MIPS16 && TARGET_USE_GOT)
+ {
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS16_PIC_TEMP);
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS_PROLOGUE_TEMP (word_mode));
+ }
+
if (TARGET_MIPS16
&& TARGET_EXPLICIT_RELOCS
&& TARGET_CALL_CLOBBERED_GP)

View file

@ -1,309 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Fri, 8 May 2015 08:25:47 +0000 (+0000)
Subject: [PATCH 2/13] musl libc config
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=a9173ceabaf29c16f8ef226fbf98af373a4b2ceb
[PATCH 2/13] musl libc config
2015-05-08 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* config.gcc (LIBC_MUSL): New tm_defines macro.
* config/linux.h (OPTION_MUSL): Define.
(MUSL_DYNAMIC_LINKER, MUSL_DYNAMIC_LINKER32,)
(MUSL_DYNAMIC_LINKER64, MUSL_DYNAMIC_LINKERX32,)
(INCLUDE_DEFAULTS_MUSL_GPP, INCLUDE_DEFAULTS_MUSL_LOCAL,)
(INCLUDE_DEFAULTS_MUSL_PREFIX, INCLUDE_DEFAULTS_MUSL_CROSS,)
(INCLUDE_DEFAULTS_MUSL_TOOL, INCLUDE_DEFAULTS_MUSL_NATIVE): Define.
* config/linux.opt (mmusl): New option.
* doc/invoke.texi (GNU/Linux Options): Document -mmusl.
* configure.ac (gcc_cv_libc_provides_ssp): Add *-*-musl*.
(gcc_cv_target_dl_iterate_phdr): Add *-linux-musl*.
* configure: Regenerate.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222904 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/gcc/config.gcc
+++ b/gcc/config.gcc
@@ -575,7 +575,7 @@ case ${target} in
esac
# Common C libraries.
-tm_defines="$tm_defines LIBC_GLIBC=1 LIBC_UCLIBC=2 LIBC_BIONIC=3"
+tm_defines="$tm_defines LIBC_GLIBC=1 LIBC_UCLIBC=2 LIBC_BIONIC=3 LIBC_MUSL=4"
# 32-bit x86 processors supported by --with-arch=. Each processor
# MUST be separated by exactly one space.
@@ -720,6 +720,9 @@ case ${target} in
*-*-*uclibc*)
tm_defines="$tm_defines DEFAULT_LIBC=LIBC_UCLIBC"
;;
+ *-*-*musl*)
+ tm_defines="$tm_defines DEFAULT_LIBC=LIBC_MUSL"
+ ;;
*)
tm_defines="$tm_defines DEFAULT_LIBC=LIBC_GLIBC"
;;
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -32,10 +32,12 @@ see the files COPYING3 and COPYING.RUNTI
#define OPTION_GLIBC (DEFAULT_LIBC == LIBC_GLIBC)
#define OPTION_UCLIBC (DEFAULT_LIBC == LIBC_UCLIBC)
#define OPTION_BIONIC (DEFAULT_LIBC == LIBC_BIONIC)
+#define OPTION_MUSL (DEFAULT_LIBC == LIBC_MUSL)
#else
#define OPTION_GLIBC (linux_libc == LIBC_GLIBC)
#define OPTION_UCLIBC (linux_libc == LIBC_UCLIBC)
#define OPTION_BIONIC (linux_libc == LIBC_BIONIC)
+#define OPTION_MUSL (linux_libc == LIBC_MUSL)
#endif
#define GNU_USER_TARGET_OS_CPP_BUILTINS() \
@@ -50,21 +52,25 @@ see the files COPYING3 and COPYING.RUNTI
} while (0)
/* Determine which dynamic linker to use depending on whether GLIBC or
- uClibc or Bionic is the default C library and whether
- -muclibc or -mglibc or -mbionic has been passed to change the default. */
+ uClibc or Bionic or musl is the default C library and whether
+ -muclibc or -mglibc or -mbionic or -mmusl has been passed to change
+ the default. */
-#define CHOOSE_DYNAMIC_LINKER1(LIBC1, LIBC2, LIBC3, LD1, LD2, LD3) \
- "%{" LIBC2 ":" LD2 ";:%{" LIBC3 ":" LD3 ";:" LD1 "}}"
+#define CHOOSE_DYNAMIC_LINKER1(LIBC1, LIBC2, LIBC3, LIBC4, LD1, LD2, LD3, LD4) \
+ "%{" LIBC2 ":" LD2 ";:%{" LIBC3 ":" LD3 ";:%{" LIBC4 ":" LD4 ";:" LD1 "}}}"
#if DEFAULT_LIBC == LIBC_GLIBC
-#define CHOOSE_DYNAMIC_LINKER(G, U, B) \
- CHOOSE_DYNAMIC_LINKER1 ("mglibc", "muclibc", "mbionic", G, U, B)
+#define CHOOSE_DYNAMIC_LINKER(G, U, B, M) \
+ CHOOSE_DYNAMIC_LINKER1 ("mglibc", "muclibc", "mbionic", "mmusl", G, U, B, M)
#elif DEFAULT_LIBC == LIBC_UCLIBC
-#define CHOOSE_DYNAMIC_LINKER(G, U, B) \
- CHOOSE_DYNAMIC_LINKER1 ("muclibc", "mglibc", "mbionic", U, G, B)
+#define CHOOSE_DYNAMIC_LINKER(G, U, B, M) \
+ CHOOSE_DYNAMIC_LINKER1 ("muclibc", "mglibc", "mbionic", "mmusl", U, G, B, M)
#elif DEFAULT_LIBC == LIBC_BIONIC
-#define CHOOSE_DYNAMIC_LINKER(G, U, B) \
- CHOOSE_DYNAMIC_LINKER1 ("mbionic", "mglibc", "muclibc", B, G, U)
+#define CHOOSE_DYNAMIC_LINKER(G, U, B, M) \
+ CHOOSE_DYNAMIC_LINKER1 ("mbionic", "mglibc", "muclibc", "mmusl", B, G, U, M)
+#elif DEFAULT_LIBC == LIBC_MUSL
+#define CHOOSE_DYNAMIC_LINKER(G, U, B, M) \
+ CHOOSE_DYNAMIC_LINKER1 ("mmusl", "mglibc", "muclibc", "mbionic", M, G, U, B)
#else
#error "Unsupported DEFAULT_LIBC"
#endif /* DEFAULT_LIBC */
@@ -81,24 +87,100 @@ see the files COPYING3 and COPYING.RUNTI
#define BIONIC_DYNAMIC_LINKER32 "/system/bin/linker"
#define BIONIC_DYNAMIC_LINKER64 "/system/bin/linker64"
#define BIONIC_DYNAMIC_LINKERX32 "/system/bin/linkerx32"
+/* Should be redefined for each target that supports musl. */
+#define MUSL_DYNAMIC_LINKER "/dev/null"
+#define MUSL_DYNAMIC_LINKER32 "/dev/null"
+#define MUSL_DYNAMIC_LINKER64 "/dev/null"
+#define MUSL_DYNAMIC_LINKERX32 "/dev/null"
#define GNU_USER_DYNAMIC_LINKER \
CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER, UCLIBC_DYNAMIC_LINKER, \
- BIONIC_DYNAMIC_LINKER)
+ BIONIC_DYNAMIC_LINKER, MUSL_DYNAMIC_LINKER)
#define GNU_USER_DYNAMIC_LINKER32 \
CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER32, UCLIBC_DYNAMIC_LINKER32, \
- BIONIC_DYNAMIC_LINKER32)
+ BIONIC_DYNAMIC_LINKER32, MUSL_DYNAMIC_LINKER32)
#define GNU_USER_DYNAMIC_LINKER64 \
CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER64, UCLIBC_DYNAMIC_LINKER64, \
- BIONIC_DYNAMIC_LINKER64)
+ BIONIC_DYNAMIC_LINKER64, MUSL_DYNAMIC_LINKER64)
#define GNU_USER_DYNAMIC_LINKERX32 \
CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKERX32, UCLIBC_DYNAMIC_LINKERX32, \
- BIONIC_DYNAMIC_LINKERX32)
+ BIONIC_DYNAMIC_LINKERX32, MUSL_DYNAMIC_LINKERX32)
/* Whether we have Bionic libc runtime */
#undef TARGET_HAS_BIONIC
#define TARGET_HAS_BIONIC (OPTION_BIONIC)
+/* musl avoids problematic includes by rearranging the include directories.
+ * Unfortunately, this is mostly duplicated from cppdefault.c */
+#if DEFAULT_LIBC == LIBC_MUSL
+#define INCLUDE_DEFAULTS_MUSL_GPP \
+ { GPLUSPLUS_INCLUDE_DIR, "G++", 1, 1, \
+ GPLUSPLUS_INCLUDE_DIR_ADD_SYSROOT, 0 }, \
+ { GPLUSPLUS_TOOL_INCLUDE_DIR, "G++", 1, 1, \
+ GPLUSPLUS_INCLUDE_DIR_ADD_SYSROOT, 1 }, \
+ { GPLUSPLUS_BACKWARD_INCLUDE_DIR, "G++", 1, 1, \
+ GPLUSPLUS_INCLUDE_DIR_ADD_SYSROOT, 0 },
+
+#ifdef LOCAL_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_LOCAL \
+ { LOCAL_INCLUDE_DIR, 0, 0, 1, 1, 2 }, \
+ { LOCAL_INCLUDE_DIR, 0, 0, 1, 1, 0 },
+#else
+#define INCLUDE_DEFAULTS_MUSL_LOCAL
+#endif
+
+#ifdef PREFIX_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_PREFIX \
+ { PREFIX_INCLUDE_DIR, 0, 0, 1, 0, 0},
+#else
+#define INCLUDE_DEFAULTS_MUSL_PREFIX
+#endif
+
+#ifdef CROSS_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_CROSS \
+ { CROSS_INCLUDE_DIR, "GCC", 0, 0, 0, 0},
+#else
+#define INCLUDE_DEFAULTS_MUSL_CROSS
+#endif
+
+#ifdef TOOL_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_TOOL \
+ { TOOL_INCLUDE_DIR, "BINUTILS", 0, 1, 0, 0},
+#else
+#define INCLUDE_DEFAULTS_MUSL_TOOL
+#endif
+
+#ifdef NATIVE_SYSTEM_HEADER_DIR
+#define INCLUDE_DEFAULTS_MUSL_NATIVE \
+ { NATIVE_SYSTEM_HEADER_DIR, 0, 0, 0, 1, 2 }, \
+ { NATIVE_SYSTEM_HEADER_DIR, 0, 0, 0, 1, 0 },
+#else
+#define INCLUDE_DEFAULTS_MUSL_NATIVE
+#endif
+
+#if defined (CROSS_DIRECTORY_STRUCTURE) && !defined (TARGET_SYSTEM_ROOT)
+# undef INCLUDE_DEFAULTS_MUSL_LOCAL
+# define INCLUDE_DEFAULTS_MUSL_LOCAL
+# undef INCLUDE_DEFAULTS_MUSL_NATIVE
+# define INCLUDE_DEFAULTS_MUSL_NATIVE
+#else
+# undef INCLUDE_DEFAULTS_MUSL_CROSS
+# define INCLUDE_DEFAULTS_MUSL_CROSS
+#endif
+
+#undef INCLUDE_DEFAULTS
+#define INCLUDE_DEFAULTS \
+ { \
+ INCLUDE_DEFAULTS_MUSL_GPP \
+ INCLUDE_DEFAULTS_MUSL_PREFIX \
+ INCLUDE_DEFAULTS_MUSL_CROSS \
+ INCLUDE_DEFAULTS_MUSL_TOOL \
+ INCLUDE_DEFAULTS_MUSL_NATIVE \
+ { GCC_INCLUDE_DIR, "GCC", 0, 1, 0, 0 }, \
+ { 0, 0, 0, 0, 0, 0 } \
+ }
+#endif
+
#if (DEFAULT_LIBC == LIBC_UCLIBC) && defined (SINGLE_LIBC) /* uClinux */
/* This is a *uclinux* target. We don't define below macros to normal linux
versions, because doing so would require *uclinux* targets to include
--- a/gcc/config/linux.opt
+++ b/gcc/config/linux.opt
@@ -28,5 +28,9 @@ Target Report RejectNegative Var(linux_l
Use GNU C library
muclibc
-Target Report RejectNegative Var(linux_libc,LIBC_UCLIBC) Negative(mbionic)
+Target Report RejectNegative Var(linux_libc,LIBC_UCLIBC) Negative(mmusl)
Use uClibc C library
+
+mmusl
+Target Report RejectNegative Var(linux_libc,LIBC_MUSL) Negative(mbionic)
+Use musl C library
--- a/gcc/configure
+++ b/gcc/configure
@@ -27833,6 +27833,9 @@ if test "${gcc_cv_libc_provides_ssp+set}
else
gcc_cv_libc_provides_ssp=no
case "$target" in
+ *-*-musl*)
+ # All versions of musl provide stack protector
+ gcc_cv_libc_provides_ssp=yes;;
*-*-linux* | *-*-kfreebsd*-gnu | *-*-knetbsd*-gnu)
# glibc 2.4 and later provides __stack_chk_fail and
# either __stack_chk_guard, or TLS access to stack guard canary.
@@ -27865,6 +27868,7 @@ fi
# <http://gcc.gnu.org/ml/gcc/2008-10/msg00130.html>) and for now
# simply assert that glibc does provide this, which is true for all
# realistically usable GNU/Hurd configurations.
+ # All supported versions of musl provide it as well
gcc_cv_libc_provides_ssp=yes;;
*-*-darwin* | *-*-freebsd*)
ac_fn_c_check_func "$LINENO" "__stack_chk_fail" "ac_cv_func___stack_chk_fail"
@@ -27961,6 +27965,9 @@ case "$target" in
gcc_cv_target_dl_iterate_phdr=no
fi
;;
+ *-linux-musl*)
+ gcc_cv_target_dl_iterate_phdr=yes
+ ;;
esac
if test x$gcc_cv_target_dl_iterate_phdr = xyes; then
--- a/gcc/configure.ac
+++ b/gcc/configure.ac
@@ -5287,6 +5287,9 @@ AC_CACHE_CHECK(__stack_chk_fail in targe
gcc_cv_libc_provides_ssp,
[gcc_cv_libc_provides_ssp=no
case "$target" in
+ *-*-musl*)
+ # All versions of musl provide stack protector
+ gcc_cv_libc_provides_ssp=yes;;
*-*-linux* | *-*-kfreebsd*-gnu | *-*-knetbsd*-gnu)
# glibc 2.4 and later provides __stack_chk_fail and
# either __stack_chk_guard, or TLS access to stack guard canary.
@@ -5313,6 +5316,7 @@ AC_CACHE_CHECK(__stack_chk_fail in targe
# <http://gcc.gnu.org/ml/gcc/2008-10/msg00130.html>) and for now
# simply assert that glibc does provide this, which is true for all
# realistically usable GNU/Hurd configurations.
+ # All supported versions of musl provide it as well
gcc_cv_libc_provides_ssp=yes;;
*-*-darwin* | *-*-freebsd*)
AC_CHECK_FUNC(__stack_chk_fail,[gcc_cv_libc_provides_ssp=yes],
@@ -5386,6 +5390,9 @@ case "$target" in
gcc_cv_target_dl_iterate_phdr=no
fi
;;
+ *-linux-musl*)
+ gcc_cv_target_dl_iterate_phdr=yes
+ ;;
esac
GCC_TARGET_TEMPLATE([TARGET_DL_ITERATE_PHDR])
if test x$gcc_cv_target_dl_iterate_phdr = xyes; then
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -667,7 +667,7 @@ Objective-C and Objective-C++ Dialects}.
-mcpu=@var{cpu}}
@emph{GNU/Linux Options}
-@gccoptlist{-mglibc -muclibc -mbionic -mandroid @gol
+@gccoptlist{-mglibc -muclibc -mmusl -mbionic -mandroid @gol
-tno-android-cc -tno-android-ld}
@emph{H8/300 Options}
@@ -15340,13 +15340,19 @@ These @samp{-m} options are defined for
@item -mglibc
@opindex mglibc
Use the GNU C library. This is the default except
-on @samp{*-*-linux-*uclibc*} and @samp{*-*-linux-*android*} targets.
+on @samp{*-*-linux-*uclibc*}, @samp{*-*-linux-*musl*} and
+@samp{*-*-linux-*android*} targets.
@item -muclibc
@opindex muclibc
Use uClibc C library. This is the default on
@samp{*-*-linux-*uclibc*} targets.
+@item -mmusl
+@opindex mmusl
+Use the musl C library. This is the default on
+@samp{*-*-linux-*musl*} targets.
+
@item -mbionic
@opindex mbionic
Use Bionic C library. This is the default on

View file

@ -1,43 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 27 May 2015 13:17:11 +0000 (+0000)
Subject: [PATCH 4/13] arm musl support
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=de799bd087ab9a179768fea75bd195a31d3432a4
[PATCH 4/13] arm musl support
On behalf of szabolcs.nagy@arm.com
2015-05-27 Gregor Richards <gregor.richards@uwaterloo.ca>
* config/arm/linux-eabi.h (MUSL_DYNAMIC_LINKER): Define.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@223749 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -77,6 +77,23 @@
%{mfloat-abi=soft*:" GLIBC_DYNAMIC_LINKER_SOFT_FLOAT "} \
%{!mfloat-abi=*:" GLIBC_DYNAMIC_LINKER_DEFAULT "}"
+/* For ARM musl currently supports four dynamic linkers:
+ - ld-musl-arm.so.1 - for the EABI-derived soft-float ABI
+ - ld-musl-armhf.so.1 - for the EABI-derived hard-float ABI
+ - ld-musl-armeb.so.1 - for the EABI-derived soft-float ABI, EB
+ - ld-musl-armebhf.so.1 - for the EABI-derived hard-float ABI, EB
+ musl does not support the legacy OABI mode.
+ All the dynamic linkers live in /lib.
+ We default to soft-float, EL. */
+#undef MUSL_DYNAMIC_LINKER
+#if TARGET_BIG_ENDIAN_DEFAULT
+#define MUSL_DYNAMIC_LINKER_E "%{mlittle-endian:;:eb}"
+#else
+#define MUSL_DYNAMIC_LINKER_E "%{mbig-endian:eb}"
+#endif
+#define MUSL_DYNAMIC_LINKER \
+ "/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}.so.1"
+
/* At this point, bpabi.h will have clobbered LINK_SPEC. We want to
use the GNU/Linux version, not the generic BPABI version. */
#undef LINK_SPEC

View file

@ -1,35 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Fri, 8 May 2015 15:16:50 +0000 (+0000)
Subject: [PATCH 6/13] mips musl support
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=2550b6a866c887472b587bef87d433c51cf1ebc8
[PATCH 6/13] mips musl support
2015-05-08 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* config/mips/linux.h (MUSL_DYNAMIC_LINKER32): Define.
(MUSL_DYNAMIC_LINKER64, MUSL_DYNAMIC_LINKERN32): Define.
(GNU_USER_DYNAMIC_LINKERN32): Update.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222915 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/gcc/config/mips/linux.h
+++ b/gcc/config/mips/linux.h
@@ -37,7 +37,13 @@ along with GCC; see the file COPYING3.
#define UCLIBC_DYNAMIC_LINKERN32 \
"%{mnan=2008:/lib32/ld-uClibc-mipsn8.so.0;:/lib32/ld-uClibc.so.0}"
+#undef MUSL_DYNAMIC_LINKER32
+#define MUSL_DYNAMIC_LINKER32 "/lib/ld-musl-mips%{EL:el}%{msoft-float:-sf}.so.1"
+#undef MUSL_DYNAMIC_LINKER64
+#define MUSL_DYNAMIC_LINKER64 "/lib/ld-musl-mips64%{EL:el}%{msoft-float:-sf}.so.1"
+#define MUSL_DYNAMIC_LINKERN32 "/lib/ld-musl-mipsn32%{EL:el}%{msoft-float:-sf}.so.1"
+
#define BIONIC_DYNAMIC_LINKERN32 "/system/bin/linker32"
#define GNU_USER_DYNAMIC_LINKERN32 \
CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKERN32, UCLIBC_DYNAMIC_LINKERN32, \
- BIONIC_DYNAMIC_LINKERN32)
+ BIONIC_DYNAMIC_LINKERN32, MUSL_DYNAMIC_LINKERN32)

View file

@ -1,209 +0,0 @@
gcc/Changelog:
2015-04-24 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* config.gcc (secure_plt): Add *-linux*-musl*.
* config/rs6000/linux64.h (MUSL_DYNAMIC_LINKER32): Define.
(MUSL_DYNAMIC_LINKER64): Define.
(GNU_USER_DYNAMIC_LINKER32): Update.
(GNU_USER_DYNAMIC_LINKER64): Update.
(CHOOSE_DYNAMIC_LINKER): Update.
* config/rs6000/secureplt.h (LINK_SECURE_PLT_DEFAULT_SPEC): Define.
* config/rs6000/sysv4.h (GNU_USER_DYNAMIC_LINKER): Update.
(MUSL_DYNAMIC_LINKER, MUSL_DYNAMIC_LINKER_E,)
(INCLUDE_DEFAULTS_MUSL_GPP, INCLUDE_DEFAULTS_MUSL_LOCAL,)
(INCLUDE_DEFAULTS_MUSL_PREFIX, INCLUDE_DEFAULTS_MUSL_CROSS,)
(INCLUDE_DEFAULTS_MUSL_TOOL, INCLUDE_DEFAULTS_MUSL_NATIVE): Define.
(LINK_SECURE_PLT_DEFAULT_SPEC): Define.
(CHOOSE_DYNAMIC_LINKER, LINK_TARGET_SPEC, LINK_OS_LINUX_SPEC): Update.
* config/rs6000/sysv4le.h (MUSL_DYNAMIC_LINKER_E): Define.
--- a/gcc/config/rs6000/linux64.h
+++ b/gcc/config/rs6000/linux64.h
@@ -365,17 +365,21 @@ extern int dot_symbols;
#endif
#define UCLIBC_DYNAMIC_LINKER32 "/lib/ld-uClibc.so.0"
#define UCLIBC_DYNAMIC_LINKER64 "/lib/ld64-uClibc.so.0"
+#define MUSL_DYNAMIC_LINKER32 "/lib/ld-musl-powerpc" MUSL_DYNAMIC_LINKER_E ".so.1"
+#define MUSL_DYNAMIC_LINKER64 "/lib/ld-musl-powerpc64" MUSL_DYNAMIC_LINKER_E ".so.1"
#if DEFAULT_LIBC == LIBC_UCLIBC
-#define CHOOSE_DYNAMIC_LINKER(G, U) "%{mglibc:" G ";:" U "}"
+#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{mglibc:" G ";:%{mmusl:" M ";:" U "}}"
#elif DEFAULT_LIBC == LIBC_GLIBC
-#define CHOOSE_DYNAMIC_LINKER(G, U) "%{muclibc:" U ";:" G "}"
+#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{muclibc:" U ";:%{mmusl:" M ";:" G "}}"
+#elif DEFAULT_LIBC == LIBC_MUSL
+#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{mglibc:" G ";:%{muclibc:" U ";:" M "}}"
#else
#error "Unsupported DEFAULT_LIBC"
#endif
#define GNU_USER_DYNAMIC_LINKER32 \
- CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER32, UCLIBC_DYNAMIC_LINKER32)
+ CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER32, UCLIBC_DYNAMIC_LINKER32, MUSL_DYNAMIC_LINKER32)
#define GNU_USER_DYNAMIC_LINKER64 \
- CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER64, UCLIBC_DYNAMIC_LINKER64)
+ CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER64, UCLIBC_DYNAMIC_LINKER64, MUSL_DYNAMIC_LINKER64)
#undef DEFAULT_ASM_ENDIAN
#if (TARGET_DEFAULT & MASK_LITTLE_ENDIAN)
--- a/gcc/config/rs6000/secureplt.h
+++ b/gcc/config/rs6000/secureplt.h
@@ -18,3 +18,4 @@ along with GCC; see the file COPYING3.
<http://www.gnu.org/licenses/>. */
#define CC1_SECURE_PLT_DEFAULT_SPEC "-msecure-plt"
+#define LINK_SECURE_PLT_DEFAULT_SPEC "--secure-plt"
--- a/gcc/config/rs6000/sysv4.h
+++ b/gcc/config/rs6000/sysv4.h
@@ -537,6 +537,9 @@ ENDIAN_SELECT(" -mbig", " -mlittle", DEF
#ifndef CC1_SECURE_PLT_DEFAULT_SPEC
#define CC1_SECURE_PLT_DEFAULT_SPEC ""
#endif
+#ifndef LINK_SECURE_PLT_DEFAULT_SPEC
+#define LINK_SECURE_PLT_DEFAULT_SPEC ""
+#endif
/* Pass -G xxx to the compiler. */
#undef CC1_SPEC
@@ -574,7 +577,8 @@ ENDIAN_SELECT(" -mbig", " -mlittle", DEF
%{R*} \
%(link_shlib) \
%{!T*: %(link_start) } \
-%(link_os)"
+%(link_os)" \
+"%{!mbss-plt: %{!msecure-plt: %(link_secure_plt_default)}}"
/* Shared libraries are not default. */
#define LINK_SHLIB_SPEC "\
@@ -757,17 +761,22 @@ ENDIAN_SELECT(" -mbig", " -mlittle", DEF
#define LINK_START_LINUX_SPEC ""
+#define MUSL_DYNAMIC_LINKER_E ENDIAN_SELECT("","le","")
+
#define GLIBC_DYNAMIC_LINKER "/lib/ld.so.1"
#define UCLIBC_DYNAMIC_LINKER "/lib/ld-uClibc.so.0"
+#define MUSL_DYNAMIC_LINKER "/lib/ld-musl-powerpc" MUSL_DYNAMIC_LINKER_E ".so.1"
#if DEFAULT_LIBC == LIBC_UCLIBC
-#define CHOOSE_DYNAMIC_LINKER(G, U) "%{mglibc:" G ";:" U "}"
+#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{mglibc:" G ";:%{mmusl:" M ";:" U "}}"
+#elif DEFAULT_LIBC == LIBC_MUSL
+#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{mglibc:" G ";:%{muclibc:" U ";:" M "}}"
#elif !defined (DEFAULT_LIBC) || DEFAULT_LIBC == LIBC_GLIBC
-#define CHOOSE_DYNAMIC_LINKER(G, U) "%{muclibc:" U ";:" G "}"
+#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{muclibc:" U ";:%{mmusl:" M ";:" G "}}"
#else
#error "Unsupported DEFAULT_LIBC"
#endif
#define GNU_USER_DYNAMIC_LINKER \
- CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER, UCLIBC_DYNAMIC_LINKER)
+ CHOOSE_DYNAMIC_LINKER (GLIBC_DYNAMIC_LINKER, UCLIBC_DYNAMIC_LINKER, MUSL_DYNAMIC_LINKER)
#define LINK_OS_LINUX_SPEC "-m elf32ppclinux %{!shared: %{!static: \
%{rdynamic:-export-dynamic} \
@@ -889,6 +898,7 @@ ncrtn.o%s"
{ "link_os_openbsd", LINK_OS_OPENBSD_SPEC }, \
{ "link_os_default", LINK_OS_DEFAULT_SPEC }, \
{ "cc1_secure_plt_default", CC1_SECURE_PLT_DEFAULT_SPEC }, \
+ { "link_secure_plt_default", LINK_SECURE_PLT_DEFAULT_SPEC }, \
{ "cpp_os_ads", CPP_OS_ADS_SPEC }, \
{ "cpp_os_yellowknife", CPP_OS_YELLOWKNIFE_SPEC }, \
{ "cpp_os_mvme", CPP_OS_MVME_SPEC }, \
@@ -943,3 +953,72 @@ ncrtn.o%s"
/* This target uses the sysv4.opt file. */
#define TARGET_USES_SYSV4_OPT 1
+/* Include order changes for musl, same as in generic linux.h. */
+#if DEFAULT_LIBC == LIBC_MUSL
+#define INCLUDE_DEFAULTS_MUSL_GPP \
+ { GPLUSPLUS_INCLUDE_DIR, "G++", 1, 1, \
+ GPLUSPLUS_INCLUDE_DIR_ADD_SYSROOT, 0 }, \
+ { GPLUSPLUS_TOOL_INCLUDE_DIR, "G++", 1, 1, \
+ GPLUSPLUS_INCLUDE_DIR_ADD_SYSROOT, 1 }, \
+ { GPLUSPLUS_BACKWARD_INCLUDE_DIR, "G++", 1, 1, \
+ GPLUSPLUS_INCLUDE_DIR_ADD_SYSROOT, 0 },
+
+#ifdef LOCAL_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_LOCAL \
+ { LOCAL_INCLUDE_DIR, 0, 0, 1, 1, 2 }, \
+ { LOCAL_INCLUDE_DIR, 0, 0, 1, 1, 0 },
+#else
+#define INCLUDE_DEFAULTS_MUSL_LOCAL
+#endif
+
+#ifdef PREFIX_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_PREFIX \
+ { PREFIX_INCLUDE_DIR, 0, 0, 1, 0, 0},
+#else
+#define INCLUDE_DEFAULTS_MUSL_PREFIX
+#endif
+
+#ifdef CROSS_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_CROSS \
+ { CROSS_INCLUDE_DIR, "GCC", 0, 0, 0, 0},
+#else
+#define INCLUDE_DEFAULTS_MUSL_CROSS
+#endif
+
+#ifdef TOOL_INCLUDE_DIR
+#define INCLUDE_DEFAULTS_MUSL_TOOL \
+ { TOOL_INCLUDE_DIR, "BINUTILS", 0, 1, 0, 0},
+#else
+#define INCLUDE_DEFAULTS_MUSL_TOOL
+#endif
+
+#ifdef NATIVE_SYSTEM_HEADER_DIR
+#define INCLUDE_DEFAULTS_MUSL_NATIVE \
+ { NATIVE_SYSTEM_HEADER_DIR, 0, 0, 0, 1, 2 }, \
+ { NATIVE_SYSTEM_HEADER_DIR, 0, 0, 0, 1, 0 },
+#else
+#define INCLUDE_DEFAULTS_MUSL_NATIVE
+#endif
+
+#if defined (CROSS_DIRECTORY_STRUCTURE) && !defined (TARGET_SYSTEM_ROOT)
+# undef INCLUDE_DEFAULTS_MUSL_LOCAL
+# define INCLUDE_DEFAULTS_MUSL_LOCAL
+# undef INCLUDE_DEFAULTS_MUSL_NATIVE
+# define INCLUDE_DEFAULTS_MUSL_NATIVE
+#else
+# undef INCLUDE_DEFAULTS_MUSL_CROSS
+# define INCLUDE_DEFAULTS_MUSL_CROSS
+#endif
+
+#undef INCLUDE_DEFAULTS
+#define INCLUDE_DEFAULTS \
+ { \
+ INCLUDE_DEFAULTS_MUSL_GPP \
+ INCLUDE_DEFAULTS_MUSL_PREFIX \
+ INCLUDE_DEFAULTS_MUSL_CROSS \
+ INCLUDE_DEFAULTS_MUSL_TOOL \
+ INCLUDE_DEFAULTS_MUSL_NATIVE \
+ { GCC_INCLUDE_DIR, "GCC", 0, 1, 0, 0 }, \
+ { 0, 0, 0, 0, 0, 0 } \
+ }
+#endif
--- a/gcc/config/rs6000/sysv4le.h
+++ b/gcc/config/rs6000/sysv4le.h
@@ -31,3 +31,5 @@
/* Little-endian PowerPC64 Linux uses the ELF v2 ABI by default. */
#define LINUX64_DEFAULT_ABI_ELFv2
+#undef MUSL_DYNAMIC_LINKER_E
+#define MUSL_DYNAMIC_LINKER_E ENDIAN_SELECT("","le","le")
--- a/gcc/config.gcc
+++ b/gcc/config.gcc
@@ -2416,6 +2416,10 @@ powerpc*-*-linux*)
powerpc*-*-linux*paired*)
tm_file="${tm_file} rs6000/750cl.h" ;;
esac
+ case ${target} in
+ *-linux*-musl*)
+ enable_secureplt=yes ;;
+ esac
if test x${enable_secureplt} = xyes; then
tm_file="rs6000/secureplt.h ${tm_file}"
fi

View file

@ -1,39 +0,0 @@
gcc/Changelog:
2015-04-27 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* config/sh/linux.h (MUSL_DYNAMIC_LINKER): Define.
(MUSL_DYNAMIC_LINKER_E, MUSL_DYNAMIC_LINKER_FP): Define.
--- a/gcc/config/sh/linux.h
+++ b/gcc/config/sh/linux.h
@@ -43,6 +43,28 @@ along with GCC; see the file COPYING3.
#define TARGET_ASM_FILE_END file_end_indicate_exec_stack
+#if TARGET_ENDIAN_DEFAULT == MASK_LITTLE_ENDIAN
+#define MUSL_DYNAMIC_LINKER_E "%{mb:eb}"
+#else
+#define MUSL_DYNAMIC_LINKER_E "%{!ml:eb}"
+#endif
+
+#if TARGET_CPU_DEFAULT & ( MASK_HARD_SH2A_DOUBLE | MASK_SH4 )
+/* "-nofpu" if any nofpu option is specified */
+#define MUSL_DYNAMIC_LINKER_FP \
+ "%{m1|m2|m2a-nofpu|m3|m4-nofpu|m4-100-nofpu|m4-200-nofpu|m4-300-nofpu|" \
+ "m4-340|m4-400|m4-500|m4al|m5-32media-nofpu|m5-64media-nofpu|" \
+ "m5-compact-nofpu:-nofpu}"
+#else
+/* "-nofpu" if none of the hard fpu options are specified */
+#define MUSL_DYNAMIC_LINKER_FP \
+ "%{m2a|m4|m4-100|m4-200|m4-300|m4a|m5-32media|m5-64media|m5-compact:;:-nofpu}"
+#endif
+
+#undef MUSL_DYNAMIC_LINKER
+#define MUSL_DYNAMIC_LINKER \
+ "/lib/ld-musl-sh" MUSL_DYNAMIC_LINKER_E MUSL_DYNAMIC_LINKER_FP ".so.1"
+
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
#undef SUBTARGET_LINK_EMUL_SUFFIX

View file

@ -1,41 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Fri, 15 May 2015 13:20:01 +0000 (+0000)
Subject: [PATCH 9/13] x86 musl support
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=5551c8d927c17f60837f15f8dfe46f945ba3fa9c
[PATCH 9/13] x86 musl support
On behalf of Szabolcs Nagy.
2015-05-15 Gregor Richards <gregor.richards@uwaterloo.ca>
* config/i386/linux.h (MUSL_DYNAMIC_LINKER): Define.
* config/i386/linux64.h (MUSL_DYNAMIC_LINKER32): Define.
(MUSL_DYNAMIC_LINKER64, MUSL_DYNAMIC_LINKERX32): Define.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@223218 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/gcc/config/i386/linux.h
+++ b/gcc/config/i386/linux.h
@@ -21,3 +21,6 @@ along with GCC; see the file COPYING3.
#define GNU_USER_LINK_EMULATION "elf_i386"
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
+
+#undef MUSL_DYNAMIC_LINKER
+#define MUSL_DYNAMIC_LINKER "/lib/ld-musl-i386.so.1"
--- a/gcc/config/i386/linux64.h
+++ b/gcc/config/i386/linux64.h
@@ -30,3 +30,10 @@ see the files COPYING3 and COPYING.RUNTI
#define GLIBC_DYNAMIC_LINKER32 "/lib/ld-linux.so.2"
#define GLIBC_DYNAMIC_LINKER64 "/lib64/ld-linux-x86-64.so.2"
#define GLIBC_DYNAMIC_LINKERX32 "/libx32/ld-linux-x32.so.2"
+
+#undef MUSL_DYNAMIC_LINKER32
+#define MUSL_DYNAMIC_LINKER32 "/lib/ld-musl-i386.so.1"
+#undef MUSL_DYNAMIC_LINKER64
+#define MUSL_DYNAMIC_LINKER64 "/lib/ld-musl-x86_64.so.1"
+#undef MUSL_DYNAMIC_LINKERX32
+#define MUSL_DYNAMIC_LINKERX32 "/lib/ld-musl-x32.so.1"

View file

@ -1,31 +0,0 @@
From: jgreenhalgh <jgreenhalgh@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 27 May 2015 16:46:39 +0000 (+0000)
Subject: [PATCH 3/13] aarch64 musl support
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=b3ff21cf0531be91bc3fb8200296a7633090ec78
[PATCH 3/13] aarch64 musl support
gcc/Changelog:
2015-05-27 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* config/aarch64/aarch64-linux.h (MUSL_DYNAMIC_LINKER): Define.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@223766 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/gcc/config/aarch64/aarch64-linux.h
+++ b/gcc/config/aarch64/aarch64-linux.h
@@ -23,6 +23,9 @@
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux-aarch64%{mbig-endian:_be}%{mabi=ilp32:_ilp32}.so.1"
+#undef MUSL_DYNAMIC_LINKER
+#define MUSL_DYNAMIC_LINKER "/lib/ld-musl-aarch64%{mbig-endian:_be}%{mabi=ilp32:_ilp32}.so.1"
+
#undef ASAN_CC1_SPEC
#define ASAN_CC1_SPEC "%{%:sanitize(address):-funwind-tables}"

View file

@ -1,30 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 22 Apr 2015 14:18:16 +0000 (+0000)
Subject: fixincludes update for musl support
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=2dc727de2e87c2756a514cbb43cea23c99deaa3d
fixincludes update for musl support
On behalf of Szabolcs.Nagy@arm.com
2015-04-22 Gregor Richards <gregor.richards@uwaterloo.ca>
* mkfixinc.sh: Add *-musl* with no fixes.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222327 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/fixincludes/mkfixinc.sh
+++ b/fixincludes/mkfixinc.sh
@@ -19,7 +19,8 @@ case $machine in
powerpc-*-eabi* | \
powerpc-*-rtems* | \
powerpcle-*-eabisim* | \
- powerpcle-*-eabi* )
+ powerpcle-*-eabi* | \
+ *-musl* )
# IF there is no include fixing,
# THEN create a no-op fixer and exit
(echo "#! /bin/sh" ; echo "exit 0" ) > ${target}

View file

@ -1,72 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 22 Apr 2015 14:24:11 +0000 (+0000)
Subject: libstdc++, libgfortran gthr workaround for musl
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=1e5f711c11cb80ce609db9e9c1d8b2da0f7b5b61
libstdc++, libgfortran gthr workaround for musl
On behalf of szabolcs.nagy@arm.com
[libstdc++-v3/]
2015-04-22 Szabolcs Nagy <szabolcs.nagy@arm.com>
* config/os/generic/os_defines.h (_GLIBCXX_GTHREAD_USE_WEAK): Define.
* configure.host (os_include_dir): Set to "os/generic" for linux-musl*.
[libgfortran/]
2015-04-22 Szabolcs Nagy <szabolcs.nagy@arm.com>
* acinclude.m4 (GTHREAD_USE_WEAK): Define as 0 for *-*-musl*.
* configure: Regenerate.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222329 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/libgfortran/acinclude.m4
+++ b/libgfortran/acinclude.m4
@@ -100,7 +100,7 @@ void foo (void);
[Define to 1 if the target supports #pragma weak])
fi
case "$host" in
- *-*-darwin* | *-*-hpux* | *-*-cygwin* | *-*-mingw* )
+ *-*-darwin* | *-*-hpux* | *-*-cygwin* | *-*-mingw* | *-*-musl* )
AC_DEFINE(GTHREAD_USE_WEAK, 0,
[Define to 0 if the target shouldn't use #pragma weak])
;;
--- a/libgfortran/configure
+++ b/libgfortran/configure
@@ -26456,7 +26456,7 @@ $as_echo "#define SUPPORTS_WEAK 1" >>con
fi
case "$host" in
- *-*-darwin* | *-*-hpux* | *-*-cygwin* | *-*-mingw* )
+ *-*-darwin* | *-*-hpux* | *-*-cygwin* | *-*-mingw* | *-*-musl* )
$as_echo "#define GTHREAD_USE_WEAK 0" >>confdefs.h
--- a/libstdc++-v3/config/os/generic/os_defines.h
+++ b/libstdc++-v3/config/os/generic/os_defines.h
@@ -33,4 +33,9 @@
// System-specific #define, typedefs, corrections, etc, go here. This
// file will come before all others.
+// Disable the weak reference logic in gthr.h for os/generic because it
+// is broken on every platform unless there is implementation specific
+// workaround in gthr-posix.h and at link-time for static linking.
+#define _GLIBCXX_GTHREAD_USE_WEAK 0
+
#endif
--- a/libstdc++-v3/configure.host
+++ b/libstdc++-v3/configure.host
@@ -273,6 +273,9 @@ case "${host_os}" in
freebsd*)
os_include_dir="os/bsd/freebsd"
;;
+ linux-musl*)
+ os_include_dir="os/generic"
+ ;;
gnu* | linux* | kfreebsd*-gnu | knetbsd*-gnu)
if [ "$uclibc" = "yes" ]; then
os_include_dir="os/uclibc"

View file

@ -1,6 +1,21 @@
commit 1877bc9d8f2be143fbe530347a945850d0ecd234
Author: Steven Barth <cyrus@openwrt.org>
Date: Mon Jun 22 10:31:07 2015 +0000
gcc/musl: rework SSP-support
Make musl provide libssp_nonshared.a and make GCC link it unconditionally
if musl is used. This should be a no-op if SSP is disabled and seems to be
the only reliable way of dealing with SSP over all packages due to the mess
that is linkerflags handling in packages.
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 46108
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -727,7 +727,9 @@ proper position among the other output f
@@ -861,7 +861,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC

View file

@ -1,61 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 22 Apr 2015 14:11:25 +0000 (+0000)
Subject: libitm fixes for musl support
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=e53a4d49c3d03ab8eaddb073cf972c1c46d75338
libitm fixes for musl support
On behalf of Szabolcs.Nagy@arm.com
2015-04-22 Gregor Richards <gregor.richards@uwaterloo.ca>
* config/arm/hwcap.cc: Use fcntl.h instead of sys/fcntl.h.
* config/linux/x86/tls.h: Only use __GLIBC_PREREQ if defined.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222325 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/libitm/config/arm/hwcap.cc
+++ b/libitm/config/arm/hwcap.cc
@@ -40,7 +40,7 @@ int GTM_hwcap HIDDEN = 0
#ifdef __linux__
#include <unistd.h>
-#include <sys/fcntl.h>
+#include <fcntl.h>
#include <elf.h>
static void __attribute__((constructor))
--- a/libitm/config/linux/x86/tls.h
+++ b/libitm/config/linux/x86/tls.h
@@ -25,16 +25,19 @@
#ifndef LIBITM_X86_TLS_H
#define LIBITM_X86_TLS_H 1
-#if defined(__GLIBC_PREREQ) && __GLIBC_PREREQ(2, 10)
+#if defined(__GLIBC_PREREQ)
+#if __GLIBC_PREREQ(2, 10)
/* Use slots in the TCB head rather than __thread lookups.
GLIBC has reserved words 10 through 13 for TM. */
#define HAVE_ARCH_GTM_THREAD 1
#define HAVE_ARCH_GTM_THREAD_DISP 1
#endif
+#endif
#include "config/generic/tls.h"
-#if defined(__GLIBC_PREREQ) && __GLIBC_PREREQ(2, 10)
+#if defined(__GLIBC_PREREQ)
+#if __GLIBC_PREREQ(2, 10)
namespace GTM HIDDEN {
#ifdef __x86_64__
@@ -101,5 +104,6 @@ static inline void set_abi_disp(struct a
} // namespace GTM
#endif /* >= GLIBC 2.10 */
+#endif
#endif // LIBITM_X86_TLS_H

View file

@ -1,120 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Fri, 8 May 2015 08:30:40 +0000 (+0000)
Subject: [PATCH 0/13] Add musl support to GCC
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=f2d678afa5b8385d763b93772d73d6bf80a9739e
[PATCH 0/13] Add musl support to GCC
2015-05-08 Szabolcs Nagy <szabolcs.nagy@arm.com>
* config/glibc-stdint.h (OPTION_MUSL): Define.
(INT_FAST16_TYPE, INT_FAST32_TYPE, UINT_FAST16_TYPE, UINT_FAST32_TYPE):
Change the definition based on OPTION_MUSL for 64 bit targets.
* config/linux.h (OPTION_MUSL): Redefine.
* config/alpha/linux.h (OPTION_MUSL): Redefine.
* config/rs6000/linux.h (OPTION_MUSL): Redefine.
* config/rs6000/linux64.h (OPTION_MUSL): Redefine.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222905 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/gcc/config/alpha/linux.h
+++ b/gcc/config/alpha/linux.h
@@ -61,10 +61,14 @@ along with GCC; see the file COPYING3.
#define OPTION_GLIBC (DEFAULT_LIBC == LIBC_GLIBC)
#define OPTION_UCLIBC (DEFAULT_LIBC == LIBC_UCLIBC)
#define OPTION_BIONIC (DEFAULT_LIBC == LIBC_BIONIC)
+#undef OPTION_MUSL
+#define OPTION_MUSL (DEFAULT_LIBC == LIBC_MUSL)
#else
#define OPTION_GLIBC (linux_libc == LIBC_GLIBC)
#define OPTION_UCLIBC (linux_libc == LIBC_UCLIBC)
#define OPTION_BIONIC (linux_libc == LIBC_BIONIC)
+#undef OPTION_MUSL
+#define OPTION_MUSL (linux_libc == LIBC_MUSL)
#endif
/* Determine what functions are present at the runtime;
--- a/gcc/config/glibc-stdint.h
+++ b/gcc/config/glibc-stdint.h
@@ -22,6 +22,12 @@ a copy of the GCC Runtime Library Except
see the files COPYING3 and COPYING.RUNTIME respectively. If not, see
<http://www.gnu.org/licenses/>. */
+/* Systems using musl libc should use this header and make sure
+ OPTION_MUSL is defined correctly before using the TYPE macros. */
+#ifndef OPTION_MUSL
+#define OPTION_MUSL 0
+#endif
+
#define SIG_ATOMIC_TYPE "int"
#define INT8_TYPE "signed char"
@@ -43,12 +49,12 @@ see the files COPYING3 and COPYING.RUNTI
#define UINT_LEAST64_TYPE (LONG_TYPE_SIZE == 64 ? "long unsigned int" : "long long unsigned int")
#define INT_FAST8_TYPE "signed char"
-#define INT_FAST16_TYPE (LONG_TYPE_SIZE == 64 ? "long int" : "int")
-#define INT_FAST32_TYPE (LONG_TYPE_SIZE == 64 ? "long int" : "int")
+#define INT_FAST16_TYPE (LONG_TYPE_SIZE == 64 && !OPTION_MUSL ? "long int" : "int")
+#define INT_FAST32_TYPE (LONG_TYPE_SIZE == 64 && !OPTION_MUSL ? "long int" : "int")
#define INT_FAST64_TYPE (LONG_TYPE_SIZE == 64 ? "long int" : "long long int")
#define UINT_FAST8_TYPE "unsigned char"
-#define UINT_FAST16_TYPE (LONG_TYPE_SIZE == 64 ? "long unsigned int" : "unsigned int")
-#define UINT_FAST32_TYPE (LONG_TYPE_SIZE == 64 ? "long unsigned int" : "unsigned int")
+#define UINT_FAST16_TYPE (LONG_TYPE_SIZE == 64 && !OPTION_MUSL ? "long unsigned int" : "unsigned int")
+#define UINT_FAST32_TYPE (LONG_TYPE_SIZE == 64 && !OPTION_MUSL ? "long unsigned int" : "unsigned int")
#define UINT_FAST64_TYPE (LONG_TYPE_SIZE == 64 ? "long unsigned int" : "long long unsigned int")
#define INTPTR_TYPE (LONG_TYPE_SIZE == 64 ? "long int" : "int")
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -32,11 +32,13 @@ see the files COPYING3 and COPYING.RUNTI
#define OPTION_GLIBC (DEFAULT_LIBC == LIBC_GLIBC)
#define OPTION_UCLIBC (DEFAULT_LIBC == LIBC_UCLIBC)
#define OPTION_BIONIC (DEFAULT_LIBC == LIBC_BIONIC)
+#undef OPTION_MUSL
#define OPTION_MUSL (DEFAULT_LIBC == LIBC_MUSL)
#else
#define OPTION_GLIBC (linux_libc == LIBC_GLIBC)
#define OPTION_UCLIBC (linux_libc == LIBC_UCLIBC)
#define OPTION_BIONIC (linux_libc == LIBC_BIONIC)
+#undef OPTION_MUSL
#define OPTION_MUSL (linux_libc == LIBC_MUSL)
#endif
--- a/gcc/config/rs6000/linux.h
+++ b/gcc/config/rs6000/linux.h
@@ -30,10 +30,14 @@
#define OPTION_GLIBC (DEFAULT_LIBC == LIBC_GLIBC)
#define OPTION_UCLIBC (DEFAULT_LIBC == LIBC_UCLIBC)
#define OPTION_BIONIC (DEFAULT_LIBC == LIBC_BIONIC)
+#undef OPTION_MUSL
+#define OPTION_MUSL (DEFAULT_LIBC == LIBC_MUSL)
#else
#define OPTION_GLIBC (linux_libc == LIBC_GLIBC)
#define OPTION_UCLIBC (linux_libc == LIBC_UCLIBC)
#define OPTION_BIONIC (linux_libc == LIBC_BIONIC)
+#undef OPTION_MUSL
+#define OPTION_MUSL (linux_libc == LIBC_MUSL)
#endif
/* Determine what functions are present at the runtime;
--- a/gcc/config/rs6000/linux64.h
+++ b/gcc/config/rs6000/linux64.h
@@ -299,10 +299,14 @@ extern int dot_symbols;
#define OPTION_GLIBC (DEFAULT_LIBC == LIBC_GLIBC)
#define OPTION_UCLIBC (DEFAULT_LIBC == LIBC_UCLIBC)
#define OPTION_BIONIC (DEFAULT_LIBC == LIBC_BIONIC)
+#undef OPTION_MUSL
+#define OPTION_MUSL (DEFAULT_LIBC == LIBC_MUSL)
#else
#define OPTION_GLIBC (linux_libc == LIBC_GLIBC)
#define OPTION_UCLIBC (linux_libc == LIBC_UCLIBC)
#define OPTION_BIONIC (linux_libc == LIBC_BIONIC)
+#undef OPTION_MUSL
+#define OPTION_MUSL (linux_libc == LIBC_MUSL)
#endif
/* Determine what functions are present at the runtime;

View file

@ -1,24 +0,0 @@
--- a/gcc/config/rs6000/linux64.h
+++ b/gcc/config/rs6000/linux64.h
@@ -369,8 +369,8 @@ extern int dot_symbols;
#endif
#define UCLIBC_DYNAMIC_LINKER32 "/lib/ld-uClibc.so.0"
#define UCLIBC_DYNAMIC_LINKER64 "/lib/ld64-uClibc.so.0"
-#define MUSL_DYNAMIC_LINKER32 "/lib/ld-musl-powerpc" MUSL_DYNAMIC_LINKER_E ".so.1"
-#define MUSL_DYNAMIC_LINKER64 "/lib/ld-musl-powerpc64" MUSL_DYNAMIC_LINKER_E ".so.1"
+#define MUSL_DYNAMIC_LINKER32 "/lib/ld-musl-powerpc" MUSL_DYNAMIC_LINKER_E "%{msoft-float:-sf}.so.1"
+#define MUSL_DYNAMIC_LINKER64 "/lib/ld-musl-powerpc64" MUSL_DYNAMIC_LINKER_E "%{msoft-float:-sf}.so.1"
#if DEFAULT_LIBC == LIBC_UCLIBC
#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{mglibc:" G ";:%{mmusl:" M ";:" U "}}"
#elif DEFAULT_LIBC == LIBC_GLIBC
--- a/gcc/config/rs6000/sysv4.h
+++ b/gcc/config/rs6000/sysv4.h
@@ -765,7 +765,7 @@ ENDIAN_SELECT(" -mbig", " -mlittle", DEF
#define GLIBC_DYNAMIC_LINKER "/lib/ld.so.1"
#define UCLIBC_DYNAMIC_LINKER "/lib/ld-uClibc.so.0"
-#define MUSL_DYNAMIC_LINKER "/lib/ld-musl-powerpc" MUSL_DYNAMIC_LINKER_E ".so.1"
+#define MUSL_DYNAMIC_LINKER "/lib/ld-musl-powerpc" MUSL_DYNAMIC_LINKER_E "%{msoft-float:-sf}.so.1"
#if DEFAULT_LIBC == LIBC_UCLIBC
#define CHOOSE_DYNAMIC_LINKER(G, U, M) "%{mglibc:" G ";:%{mmusl:" M ";:" U "}}"
#elif DEFAULT_LIBC == LIBC_MUSL

View file

@ -1,9 +1,16 @@
Use the proper rtx cost model for the selected CPU, even when optimizing
for size. This generates better code.
commit ecf7671b769fe96f7b5134be442089f8bdba55d2
Author: Felix Fietkau <nbd@nbd.name>
Date: Thu Aug 4 20:29:45 2016 +0200
gcc: add a patch to generate better code with Os on mips
Also happens to reduce compressed code size a bit
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -17483,7 +17483,7 @@ mips_option_override (void)
@@ -19790,7 +19790,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */

View file

@ -1,6 +1,27 @@
commit b050f87d13b5dc7ed82feb9a90f4529de58bdf25
Author: Felix Fietkau <nbd@openwrt.org>
Date: Wed Feb 19 19:20:10 2014 +0000
gcc: prevent the use of LDRD/STRD on ARMv5TE
These instructions are for 64-bit load/store. On ARMv5TE, the CPU
requires addresses to be aligned to 64-bit. When misaligned, behavior is
undefined (effectively either loads the same word twice on LDRD, or
corrupts surrounding memory on STRD).
On ARMv6 and newer, unaligned access is safe.
Removing these instructions for ARMv5TE is necessary, because GCC
ignores alignment information in pointers and does unsafe optimizations
that have shown up as bugs in various places.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39638
--- a/gcc/config/arm/arm.h
+++ b/gcc/config/arm/arm.h
@@ -285,7 +285,7 @@ extern void (*arm_lang_output_object_att
@@ -150,7 +150,7 @@ extern tree arm_fp16_type_node;
/* Thumb-1 only. */
#define TARGET_THUMB1_ONLY (TARGET_THUMB1 && !arm_arch_notm)

View file

@ -1,3 +1,11 @@
commit 8570c4be394cff7282f332f97da2ff569a927ddb
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 20:06:12 2011 +0000
fixup arm soft-float symbols
SVN-Revision: 25325
--- a/libgcc/config/arm/t-linux
+++ b/libgcc/config/arm/t-linux
@@ -1,6 +1,10 @@
@ -14,7 +22,7 @@
# difference.
--- a/gcc/config/arm/linux-elf.h
+++ b/gcc/config/arm/linux-elf.h
@@ -60,8 +60,6 @@
@@ -58,8 +58,6 @@
%{shared:-lc} \
%{!shared:%{profile:-lc_p}%{!profile:-lc}}"

View file

@ -1,6 +1,14 @@
commit c96312958c0621e72c9b32da5bc224ffe2161384
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Oct 19 23:26:09 2009 +0000
gcc: create a proper libgcc_pic.a static library for relinking (4.3.3+ for now, backport will follow)
SVN-Revision: 18086
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -887,11 +887,12 @@ $(libgcov-driver-objects): %$(objext): $
@@ -920,11 +920,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
@ -14,7 +22,7 @@
-rm -f $@
objects="$(objects)"; \
@@ -913,7 +914,7 @@ libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_E
@@ -945,7 +946,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
@ -22,8 +30,8 @@
+all: libgcc_eh.a libgcc_pic.a libgcc_s$(SHLIB_EXT)
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
endif
@@ -1108,6 +1109,10 @@ install-shared:
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1151,6 +1152,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a

View file

@ -1,13 +0,0 @@
http://sourceware.org/ml/crossgcc/2008-05/msg00009.html
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -45,7 +45,7 @@
The ARM10TDMI core is the default for armv5t, so set
SUBTARGET_CPU_DEFAULT to achieve this. */
#undef SUBTARGET_CPU_DEFAULT
-#define SUBTARGET_CPU_DEFAULT TARGET_CPU_arm10tdmi
+#define SUBTARGET_CPU_DEFAULT TARGET_CPU_arm9tdmi
/* TARGET_BIG_ENDIAN_DEFAULT is set in
config.gcc for big endian configurations. */

View file

@ -1,6 +1,15 @@
commit 7edc8ca5456d9743dd0075eb3cc5b04f4f24c8cc
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 19:34:36 2011 +0000
add armv4 fixup patches
SVN-Revision: 25322
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -94,10 +94,15 @@
@@ -88,10 +88,15 @@
#define MUSL_DYNAMIC_LINKER \
"/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}.so.1"

View file

@ -1,7 +1,14 @@
commit dcfc40358b5a3cae7320c17f8d1cebd5ad5540cd
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Feb 12 20:25:47 2012 +0000
gcc 4.6: port over the missing patch 850-use_shared_libgcc.patch to prevent libgcc crap from leaking into every single binary
SVN-Revision: 30486
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -131,10 +131,6 @@
#define ENDFILE_SPEC \
@@ -126,10 +126,6 @@
"%{Ofast|ffast-math|funsafe-math-optimizations:crtfastmath.o%s} " \
LINUX_OR_ANDROID_LD (GNU_USER_TARGET_ENDFILE_SPEC, ANDROID_ENDFILE_SPEC)
-/* Use the default LIBGCC_SPEC, not the version in linux-elf.h, as we
@ -26,7 +33,7 @@
-muclibc or -mglibc or -mbionic or -mmusl has been passed to change
--- a/libgcc/mkmap-symver.awk
+++ b/libgcc/mkmap-symver.awk
@@ -132,5 +132,5 @@ function output(lib) {
@@ -136,5 +136,5 @@ function output(lib) {
else if (inherit[lib])
printf("} %s;\n", inherit[lib]);
else

View file

@ -1,3 +1,13 @@
commit 64661de100da1ec1061ef3e5e400285dce115e6b
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun May 10 13:16:35 2015 +0000
gcc: add some size optimization patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 45664
--- a/libgcc/config/t-libunwind
+++ b/libgcc/config/t-libunwind
@@ -2,8 +2,7 @@

View file

@ -1,6 +1,13 @@
commit d8c570a1531035c3e26bcd94741e5f5b9c36b5d9
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Mar 5 00:51:01 2012 +0000
gcc: do not emit references to _savegpr_* and _restgpr_* on powerpc, as they are tricky to deal with wrt. libgcc. they cannot be linked dynamically
SVN-Revision: 30814
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -21500,7 +21500,7 @@ rs6000_savres_strategy (rs6000_stack_t *
@@ -26981,7 +26981,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{

View file

@ -1,11 +0,0 @@
--- a/gcc/defaults.h
+++ b/gcc/defaults.h
@@ -380,7 +380,7 @@ see the files COPYING3 and COPYING.RUNTI
/* If we have named section and we support weak symbols, then use the
.jcr section for recording java classes which need to be registered
at program start-up time. */
-#if defined (TARGET_ASM_NAMED_SECTION) && SUPPORTS_WEAK
+#if 0 && defined (TARGET_ASM_NAMED_SECTION) && SUPPORTS_WEAK
#ifndef JCR_SECTION_NAME
#define JCR_SECTION_NAME ".jcr"
#endif

View file

@ -0,0 +1,22 @@
commit 565988ab47bd9b96b50608564aee2104aeb4b7ae
Author: Felix Fietkau <nbd@nbd.name>
Date: Tue Dec 13 14:20:49 2016 +0100
gcc: rip out transactional memory related bloat from crtbegin
Slightly improves compression for each executable, saving about 4k from
the default ar71xx rootfs
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View file

@ -1,3 +1,24 @@
commit 9dc38e48f7a6f88b7ac7bfaced91f53660204e46
Author: Florian Fainelli <florian@openwrt.org>
Date: Fri Apr 5 12:36:06 2013 +0000
toolchain/gcc: .init and .fini need to pick one ISA
The .init and .fini sections are built by concatenating code
fragments. Putting mips16 code in the middle of a mips32 code block
doesn't work. Make gcc built the magic crt stuff in no-mips16 mode.
This is specific to 4.6-linaro but is probably portable to other gcc
flavors. Adding this to the t-libgcc-mips16 makefile fragment is a
hack not suitable for pushing upstream, but there is no mips/t-linux
or mips/t-uclibc and I am not going to touch gcc/configure for two
lines.
Signed-off-by: Jay Carlson <nop@nop.com>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 36200
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16

View file

@ -1,22 +1,23 @@
commit 99368862e44740ff4fd33760893f04e14f9dbdf1
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Jul 31 00:52:27 2007 +0000
This patch brings over a few features from MirBSD:
Port the mbsd_multi patch from freewrt, which adds -fhonour-copts. This will emit warnings in packages that don't use our target cflags properly
SVN-Revision: 8256
This patch brings over a feature from MirBSD:
* -fhonour-copts
If this option is not given, it's warned (depending
on environment variables). This is to catch errors
of misbuilt packages which override CFLAGS themselves.
* -Werror-maybe-reset
Has the effect of -Wno-error if GCC_NO_WERROR is
set and not '0', a no-operation otherwise. This is
to be able to use -Werror in "make" but prevent
GNU autoconf generated configure scripts from
freaking out.
This patch was authored by Thorsten Glaser <tg at mirbsd.de>
with copyright assignment to the FSF in effect.
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -122,6 +122,9 @@ static int class_dump_flags;
@@ -108,6 +108,9 @@ static int class_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
@ -26,7 +27,7 @@
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -449,6 +452,12 @@ c_common_handle_option (size_t scode, co
@@ -456,6 +459,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
@ -39,7 +40,7 @@
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1034,6 +1043,47 @@ c_common_init (void)
@@ -1084,6 +1093,47 @@ c_common_init (void)
return false;
}
@ -89,18 +90,7 @@
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -431,6 +431,10 @@ Wfloat-conversion
C ObjC C++ ObjC++ Var(warn_float_conversion) LangEnabledBy(C ObjC C++ ObjC++,Wconversion)
Warn for implicit type conversions that cause loss of floating point precision
+Werror-maybe-reset
+C ObjC C++ ObjC++
+; Documented in common.opt
+
Wfloat-equal
C ObjC C++ ObjC++ Var(warn_float_equal) Warning
Warn if testing floating point numbers for equality
@@ -1161,6 +1165,9 @@ C++ ObjC++ Optimization Alias(fexception
@@ -1412,6 +1412,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ Ignore Warn(switch %qs is no longer supported)
@ -109,23 +99,12 @@
+
fhosted
C ObjC
Assume normal C execution environment
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -561,6 +561,10 @@ Werror=
Common Joined
Treat specified warning as error
+Werror-maybe-reset
+Common
+If environment variable GCC_NO_WERROR is set, act as -Wno-error
+
Wextra
Common Var(extra_warnings) Warning
Print extra (possibly unwanted) warnings
@@ -1360,6 +1364,9 @@ fguess-branch-probability
@@ -1510,6 +1510,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities
Enable guessing of branch probabilities.
+fhonour-copts
+Common RejectNegative
@ -135,60 +114,24 @@
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -1699,6 +1699,17 @@ common_handle_option (struct gcc_options
@@ -1954,6 +1954,9 @@ common_handle_option (struct gcc_options
opts, opts_set, loc, dc);
break;
+ case OPT_Werror_maybe_reset:
+ {
+ char *ev = getenv ("GCC_NO_WERROR");
+ if ((ev != NULL) && (*ev != '0'))
+ warnings_are_errors = 0;
+ }
+ break;
+
+ case OPT_fhonour_copts:
+ break;
+
case OPT_Wlarger_than_:
opts->x_larger_than_size = value;
opts->x_warn_larger_than = value != -1;
--- a/gcc/doc/cppopts.texi
+++ b/gcc/doc/cppopts.texi
@@ -163,6 +163,11 @@ in older programs. This warning is on b
Make all warnings into hard errors. Source code which triggers warnings
will be rejected.
+ at item -Werror-maybe-reset
+ at opindex Werror-maybe-reset
+Act like @samp{-Wno-error} if the @env{GCC_NO_WERROR} environment
+variable is set to anything other than 0 or empty.
+
@item -Wsystem-headers
@opindex Wsystem-headers
Issue warnings for code in system headers. These are normally unhelpful
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -251,7 +251,7 @@ Objective-C and Objective-C++ Dialects}.
-Wdisabled-optimization @gol
-Wno-discarded-qualifiers -Wno-discarded-array-qualifiers @gol
-Wno-div-by-zero -Wdouble-promotion -Wempty-body -Wenum-compare @gol
--Wno-endif-labels -Werror -Werror=* @gol
+-Wno-endif-labels -Werror -Werror=* -Werror-maybe-reset @gol
-Wfatal-errors -Wfloat-equal -Wformat -Wformat=2 @gol
-Wno-format-contains-nul -Wno-format-extra-args -Wformat-nonliteral @gol
-Wformat-security -Wformat-signedness -Wformat-y2k @gol
@@ -5382,6 +5382,22 @@ This option is only supported for C and
@@ -6572,6 +6572,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.
+ at item -Werror-maybe-reset
+ at opindex Werror-maybe-reset
+Act like @samp{-Wno-error} if the @env{GCC_NO_WERROR} environment
+variable is set to anything other than 0 or empty.
+
+ at item -fhonour-copts
+ at opindex fhonour-copts
+@item -fhonour-copts
+@opindex fhonour-copts
+If @env{GCC_HONOUR_COPTS} is set to 1, abort if this option is not
+given at least once, and warn if it is given more than once.
+If @env{GCC_HONOUR_COPTS} is set to 2, abort if this option is not
@ -201,22 +144,3 @@
@item -Wstack-protector
@opindex Wstack-protector
@opindex Wno-stack-protector
@@ -7860,7 +7876,7 @@ so, the first branch is redirected to ei
second branch or a point immediately following it, depending on whether
the condition is known to be true or false.
-Enabled at levels @option{-O2}, @option{-O3}, @option{-Os}.
+Enabled at levels @option{-O3}.
@item -fsplit-wide-types
@opindex fsplit-wide-types
--- a/gcc/java/jvspec.c
+++ b/gcc/java/jvspec.c
@@ -629,6 +629,7 @@ lang_specific_pre_link (void)
class name. Append dummy `.c' that can be stripped by set_input so %b
is correct. */
set_input (concat (main_class_name, "main.c", NULL));
+ putenv ("GCC_HONOUR_COPTS=s"); /* XXX hack! */
err = do_spec (jvgenmain_spec);
if (err == 0)
{

Some files were not shown because too many files have changed in this diff Show more