Compare commits

...

1560 commits

Author SHA1 Message Date
Moritz Warning
9883948b58 zerotier: update to 1.10.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
21f2df0881 zerotier: update to 1.10.1
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
d9727496b5 zerotier: update to 1.8.9
Replace patch with Makefile options
to disable Rust components that
cannot be build with OpenWrt.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
2d1bc4aa9a zerotier: fix segfault on ARM platforms
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
e1bc87354e zerotier: update to 1.8.8
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Moritz Warning
6825848905 zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-11-15 14:35:06 +08:00
Tianling Shen
1f1536ca20
yq: Update to 4.30.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4d667ec8e8)
2022-11-14 22:21:16 +08:00
Tianling Shen
daf3fab7b2
yq: Update to 4.30.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2cba6e5f73)
2022-11-14 22:21:12 +08:00
Tianling Shen
b45c3deae9
treewide: fix procd service inactive
Exit directly will result procd service inactive and uci
configuration changes are no longer monitored.

Reported-by: Lvc Revincx <revincx233@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b1651c5d54)
2022-11-13 23:10:06 +08:00
Tianling Shen
73fdd5701a
v2raya: Update to 1.5.9.1698.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3c43f65ae9)
2022-11-13 23:09:41 +08:00
Tianling Shen
2619b4dc1e
v2raya: Update to 1.5.8.1
1. Switched to use prebuilt web files to get rid of massive Node.js.
2. Increased nofile limitation to avoid "too many open files" error.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d629a6f8b2)
2022-11-13 23:09:36 +08:00
Tianling Shen
5bec58203f
v2rayA: Update to 1.5.7
- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98)
2022-11-13 23:09:30 +08:00
Tianling Shen
06ff8383bc
v2raya: fix panic in go 1.18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7aa127e208)
2022-11-13 23:09:24 +08:00
Tianling Shen
d52b6e2f17
v2rayA: Update to 1.5.6.2
Manually added new env variable `XDG_DATA_HOME` which won't be passed
by procd by default.

Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c7b5e7ed67)
2022-11-13 23:09:19 +08:00
Tianling Shen
21f7aef991
v2raya: init: convert arguments into env variables
Suggested by upstream, to provide forward compatibility.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8465053a58)
2022-11-13 23:09:14 +08:00
Tianling Shen
28b5968ab5
v2rayA: Update to 1.5.5
Breaking changes:
The database has been replaced with boltdb to try to solve the problem
of database corruption.

Note that the data will not be migrated, but the previous data will be
retained. If you need the previous data, just downgrade v2rayA (v1.5.4).

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 21e98e952f)
2022-11-13 23:09:10 +08:00
Tianling Shen
07a54c6a86
v2raya: Update to 1.5.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d48b22fb90)
2022-11-13 23:09:08 +08:00
Tianling Shen
20bfd00c35
v2raya: Update to 1.5.3
- Added missing conffiles
- Refreshed init srcipt to adapt the new arguments
- Renamed package name to lowercase (suggestion from upstream)
- Updated dependencies and license

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 16e453e4ac)
2022-11-13 23:08:56 +08:00
Tianling Shen
6bca9cc98e
v2rayA: Update to 1.5.2
Refreshed init script to adapt new arguments accepted by the program.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 60c917089f)
2022-11-13 23:08:41 +08:00
Tianling Shen
e56960b81e
v2rayA: add new package
v2rayA is a Linux web GUI client of Project V which supports V2Ray,
Xray, Shadowsocks, ShadowsocksR, Trojan and Pingtunnel.

Wiki: https://github.com/v2rayA/v2rayA/wiki

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90ec599f9e)
2022-11-13 23:08:33 +08:00
Tianling Shen
11d3b49514 xray-core: Update to 1.6.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4194268e3f)
[Update geodata to latest version, based on e5c3c3409]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-11-12 18:49:13 +02:00
Tianling Shen
68426efcd8 xray-core: Update to 1.6.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e606ea7e78)
2022-11-12 18:49:13 +02:00
Tianling Shen
ead837f1cc xray-core: Update to 1.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b16b07409f)
2022-11-12 18:49:13 +02:00
Tianling Shen
ee096621de xray-core: Update to 1.6.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a0126b15c5)
[Update geodata to latest version, based on f8c25627eb]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 05d1265cb7)
2022-11-12 18:49:13 +02:00
Tianling Shen
ee4565763e xray-core: Update to 1.5.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ddd4082d30)
2022-11-12 18:49:13 +02:00
Jeffery To
5d660d0b6b
syncthing: Update to 1.19.2
Includes patch based on upstream change[1] to fix compilation with Go
1.18.

Fixes https://github.com/openwrt/packages/issues/18267.

[1]: e30898ddb3

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b7ff2df5e)
(cherry picked from commit 961c73ca7c)
2022-11-10 12:33:56 +01:00
Josef Schlehofer
90b2aa9371
golang: update to version 1.18.8
Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c33c2d8869)
2022-11-10 09:16:14 +01:00
Josef Schlehofer
b4c70db428
ffmpeg: libffmpeg-full package should provide libffmpeg package, too
The previous solution overwrote the provide from ``define
Package/libffmpeg/Default``, but that's not what was wanted.
Thus libffmpeg-full should provide three packages libffmpeg,
libffmpeg-mini and libffmpeg-audio-dec

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c333c0e522)
2022-11-09 15:13:12 +01:00
Jeffery To
aeeb0d7515
golang: Update to 1.18.4
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 60168651a2)
2022-11-09 14:46:06 +01:00
Jeffery To
2e6b8f0165
golang: Update to 1.18.3
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 112cf09031)
2022-11-09 14:46:02 +01:00
Jeffery To
d53bb3ccc5
golang: Update to 1.18.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 659f87d5d4)
2022-11-09 14:45:58 +01:00
Jeffery To
a084693cf1
golang: Update to 1.18.1
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

This also adds -buildvcs=false to omit VCS information in Go programs.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8c0477a895)
2022-11-09 14:45:54 +01:00
Jeffery To
2c9cc2c9fb
golang: Update to 1.18, update patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 478666b00b)
2022-11-09 14:45:44 +01:00
Josef Schlehofer
6f98c3dba8 golang: update to version 1.17.13
Fixes:
CVE-2022-32189

Release notes:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10?pli=1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-09 14:31:49 +01:00
Magnus Kessler
1a94de24a5
tailscale: update to version 1.24.2
Signed-off-by: Magnus Kessler <Magnus.Kessler@gmx.net>
(cherry picked from commit b557e9f0d1)
2022-11-07 12:48:21 +01:00
Wes Morgan
9e96244194
tailscale: update to 1.18.2
Signed-off-by: Wes Morgan <git@wesmorgan.me>
(cherry picked from commit efb908b032)
2022-11-07 12:47:45 +01:00
Josef Schlehofer
934831644d
pulseadio: fix conffiles for pulseadio-daemon-avahi package
Fixes: 60ac7dd751 ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7ae66ec7ca)
2022-11-05 21:22:11 +01:00
Josef Schlehofer
ae4c51d946
pulseaudio: change homepage URLs to freedesktop.org
The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 00e3918069)
2022-11-05 21:21:57 +01:00
Josef Schlehofer
d285ac95ad
pulseaudio: use AUTORELEASE variable
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 364054fbe7)
2022-11-05 21:21:45 +01:00
Josef Schlehofer
c9f7d98c91
pulseaudio: daemons should conflict to each other
It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5a5bb15949)
2022-11-05 21:21:21 +01:00
Josef Schlehofer
f65a718a12
pulseaudio: simplify and rework Makefile
There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 60ac7dd751)
2022-11-05 21:21:17 +01:00
Szabolcs Hubai
159944ac6c mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon
The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc59 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>
(cherry picked from commit abe35e89f6)
2022-11-05 18:57:00 +01:00
Tianling Shen
02bf1fd5b3 rclone: Update to 1.60.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90e037b5e5)
2022-11-03 20:27:12 -07:00
Tianling Shen
b89d0299bc yq: Update to 4.29.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d1f2b96b7e)
2022-11-03 20:27:00 -07:00
Scott Roberts
6711badf07
zabbix: add variants for SSL support
opkg does not offer ssl varients:
zabbix-agentd
zabbix-sender
zabbix-get
zabbix-proxy
zabbix-server

resolve this by adding ssl varients.

Signed-off-by: Scott Roberts <ttocsr@gmail.com>
(cherry picked from commit cd48d03f01)
(cherry picked from commit e0502e477c)
2022-11-01 11:02:21 +01:00
Rosen Penev
f90a7c92da
coova-chili: fix compilation with kernel 5.10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eba4abb65d)
2022-10-29 11:59:21 +02:00
Rosen Penev
1c2258e95f
ptunnel-ng: fix compilation with kernel 5.15
Some header change requires to include musl's headers first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 468863128f)
2022-10-29 06:47:58 +02:00
Rosen Penev
1793655e61
libpfring: update to 8.0.0
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f8f2146b1b)
2022-10-29 06:45:23 +02:00
Rosen Penev
a91983bb2f
coova-chilli: update to 1.6
Remove usptreamed patches.

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c05077a499)
2022-10-29 06:40:47 +02:00
Rosen Penev
29cffa947d
xtables-addons: update to 3.19
Fixes compilation with kernel 5.15.

Fixed changed binary name.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e5af506795)
(cherry picked from commit 4a5633b6b5)
2022-10-29 05:57:55 +02:00
Josef Schlehofer
4f101b38b0
ffmpeg: add conflicts and provides
Motivation of this change is that full variants provides the mini
variant and as well audio-dec package, thus you can not install both as
it fails with the following output:

Collected errors:
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavcodec.so.58.91.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavdevice.so.58.10.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavformat.so.58.45.100
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56
	But that file is already provided by package  * libffmpeg-full
 * check_data_file_clashes: Package libffmpeg-audio-dec wants to install file /usr/lib/libavutil.so.56.51.100
	But that file is already provided by package  * libffmpeg-full
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Let's change it to:
Installing libffmpeg-audio-dec (4.3.4-1) to root...
Collected errors:
 * check_conflicts_for: The following packages conflict with libffmpeg-audio-dec:
 * check_conflicts_for:         libffmpeg-full *
 * opkg_install_cmd: Cannot install package libffmpeg-audio-dec.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9693bd47c5)
2022-10-28 13:49:11 +02:00
Christian Marangi
18aa13a251
atlas-probe: fix SIGSEGV error on 32bit system
Changes to time_t cause SIGSEGV error on 32bit system and cause ripe
atlas malfunction. (registration successful but no traffic)
Also introduce minor patch to fix some compilation warning.

While at it move PKG_RELEASE to AUTORELEASE macro.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 14c5dfe4c1)
2022-10-27 16:04:15 +02:00
Josef Schlehofer
85b8f7c981
libwebsockets: fix recursive dependency
While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138:	symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122:	symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a4e8cbb89a)
2022-10-27 14:24:59 +02:00
Josef Schlehofer
1222d44448
libwebsockets: OpenSSL and mbedTLS variants should conflict
They provide the same files, but they don't conflict to each other, this
means that users can install them side by side.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 676c5c72b5)
2022-10-25 14:29:35 +02:00
Josef Schlehofer
19cb57bf12
libwebsockets: full variant provides OpenSSL
For some time, it is not possible to install ttyd and mosquitto-ssl at the
same time, so let's solve it that libwebsockets-full provides
libwebsockets-openssl. This allows to install ttyd and mosquitto at
the same time.

Also, we need to add conflict, because we should not have installed
libwebsockets-openssl and libwebsockets-full at the same time as they
provides the same files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 77e682a11c)
2022-10-25 14:29:32 +02:00
Josef Schlehofer
480833d673
lighttpd: backport patch to fix dummy Sec-WebSocket-Key
It was requested in https://gitlab.nic.cz/turris/os/packages/-/issues/873

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit de49362d35)
2022-10-25 14:05:48 +02:00
Michal Hrusecky
fadd38f27d
mariadb: Drop unused rundir fix socket dir perms
We had been creating "rundir" but it was never used, probably leftover
from some removed function. At the same time, we were setting quite
strict rights to the socket directory (while comments sugested
otherwise).

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 8f6831b64b)
2022-10-25 06:47:43 +02:00
Josef Schlehofer
a341405111
Merge pull request #19667 from miska/mariadb-21.02
[21.02] mariadb: Update to the latest version 10.4.26
2022-10-23 09:44:53 +02:00
Josef Schlehofer
f00b449d17 python3: update to version 3.9.15
Release notes:
- https://www.python.org/downloads/release/python-3915/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-10-21 15:34:02 -07:00
Michal Hrusecky
eb2a5c0981
mariadb: Update to the latest version 10.4.26
Keeping the major version, bumping just a minor version. It includes
various bug fixes and security fixes.  For details, see:

* https://mariadb.com/kb/en/mariadb-10426-release-notes/
* https://mariadb.com/kb/en/mariadb-10425-release-notes/
* https://mariadb.com/kb/en/mariadb-10424-release-notes/
* https://mariadb.com/kb/en/mariadb-10423-release-notes/

While at it, also switching to AUTORELEASE and refreshing patches.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
2022-10-21 23:55:50 +02:00
Michal Vasilek
d16d6e58d2 ddns-scripts: fix cloudflare&digitalocean provides
Fixes mistake in dbe79e409d, the
cloudflare PROVIDES got mixed up with digitalocean.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 001564ed83)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 15:52:26 +02:00
Michal Vasilek
687e137335 ddns-scripts: add PROVIDES for old package names
* ddns-scripts-services: provide ddns-scripts_service
* ddns-scripts-cloudflare: provide ddns-scripts_digitalocean.com-v2
* ddns-scripts-freedns: provide ddns-scripts_freedns_42_pl
* ddns-scripts-godaddy: provide ddns-scripts_godaddy.com-v1
* ddns-scripts-noip: provide ddns-scripts_no-ip_com
* ddns-scripts-nsupdate: provide ddns-scripts_nsupdate
* ddns-scripts-route53: provide ddns-scripts_route53-v1
* ddns-scripts-cnkuai: provide ddns-scripts_cnkuai_cn

https://github.com/openwrt/packages/pull/13509 renamed many ddns-scripts
packages, but didn't include a PROVIDES for the old package names to
make updates work well.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit dbe79e409d)
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Remove PKG_RELEASE version bump
2022-10-18 13:39:22 +02:00
Michal Vasilek
db71747697
tailscale: fix -version
tailscale version, tailscaled -version and the web UI reported the wrong
version number which doesn't cause any issues, but it can be confusing.

This is fixed by specifying the version in go ldflags similar to how
it's done in many other go packages and the official tailscale Dockerfile.

version.Long version can not be specified in GO_PKG_LDFLAGS_X because it
contains a space and GO_PKG_LDFLAGS_X is always split at a space.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 738f44be4f)
2022-10-18 09:05:00 +02:00
Stijn Tintel
0b16e3f359
keepalived: fix build with IPVS disabled
The genhash binary is only built when IPVS is enabled, so make its
installation depend on IPVS being enabled.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 624d2278e7)
2022-10-15 14:23:39 +02:00
Florian Eckert
81af8d6703
keepalived: update to version 2.2.4
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3f5b2d8cb3)
2022-10-15 14:23:15 +02:00
Florian Eckert
fba60ea134
keepalived: update to version 2.2.2
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bdcb3d5905)
2022-10-15 14:23:09 +02:00
Daniel Golle
e3a168a838
postgresql: update to version 13.8
Update to 13.8 maintainance release of the PostgreSQL 13 release.
This release contains a variety of fixes from 13.7, among also a fix
addressing CVE-2022-2625.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-10-13 20:41:55 +01:00
Daniel Golle
d80638646f
perl-net-dns: update to version 1.35
**** 1.35 Oct 4, 2022

    Improve SVCB error reporting.

Fix rt.cpan.org #144328
    accept_reply test fails with matched consecutive "random"
    generated packet->id

Fix rt.cpan.org #144299
    Spelling errors.

**** 1.34 May 30, 2022

    Improve robustness of EDNS option compose/decompose functions.
    Simplify code in Makefile.PL.

Fix rt.cpan.org #142426
    Avoid "Useless use of a constant in void context" warning.

**** 1.33 Dec 16, 2021
Fix rt.cpan.org #137768
    Test t/05-SVCB.t on Perl 5.18.0 fails with deep recursion.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 93a7806578)
(cherry picked from commit b9338331be)
2022-10-13 20:41:16 +01:00
Daniel Golle
63e359c3db
pcsc-lite: update to version 1.9.8
1.9.8: Ludovic Rousseau
11 June 2022
- Install install_spy.sh & uninstall_spy.sh scripts in docdir
- SCardTransmit(): do not fail if receive buffer is "too large"
- SCardControl(): do not fail if receive buffer is "too large"
- fix some memory leaks on shutdown
- use a better random number generator
- Some other minor improvements

1.9.7: Ludovic Rousseau
13 May 2022
- disable strict compilation by default
- fix 3 warnings

1.9.6: Ludovic Rousseau
11 May 2022
- do not fail reader removal in some specific cases (USB/Thunderbolt port)
- improve documentation regarding /etc/reader.conf.d/
- SCardGetStatusChange: speedup the case DISABLE_AUTO_POWER_ON
- configure:
  . add --disable-strict option
   By default the compiler arguments are now:
   -Wall -Wextra -Wno-unused-parameter -Werror ${CFLAGS}
  . fail if flex is not found
- fix different data races
- pcscdaemon: -v displays internal constants values:
  MAX_READERNAME & PCSCLITE_MAX_READERS_CONTEXTS
- Some other minor improvements

1.9.5: Ludovic Rousseau 4 December 2021
 - pcscd: autoexit even if no client connects
 - Fix variable substitution in systemd units
 - fix potential race conditions with powerState handling
 - Add and use tag TAG_IFD_DEVICE_REMOVED
 - UnitaryTests: port code to Python 3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5c22f49175)
(cherry picked from commit db667b5b0f)

pcsc-lite: update to verion 1.9.9

 1.9.9: Ludovic Rousseau
 11 September 2022
  - SCardEstablishContext() may return SCARD_W_SECURITY_VIOLATION if refused by Polkit
  - Fix SCardReleaseContext() failure on orphan handles
  - Fix SCardDisconnect() on orphan handle
  - pcsc-spy: log the pioSendPci & pioRecvPci SCardTransmit() parameters
  - Improve the log from pcscd: log the return code in text instead of hex
  - Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a8698d5ede)
2022-10-13 20:40:34 +01:00
Daniel Golle
dfd9236250
lvm2: update to 2.03.15
Version 2.03.15 - 07th February 2022
====================================
  Remove service based autoactivation. global/event_activation = 0 is NOOP.
  Improve support for metadata profiles for --type writecache.
  Use cache or active DM device when available with new kernels.
  Introduce function to utilize UUIDs from DM_DEVICE_LIST.
  Increase some hash table size to better support large device sets.

Version 2.03.16 - 18th May 2022
===============================
  Fix segfault when handling selection with historical LVs.
  Add support --vdosettings with lvcreate, lvconvert, lvchange.
  Filtering multipath devices respects blacklist setting from multipath
  configuration.
  lvmdevices support for removing by device id using --deviceidtype and
  --deldev.
  Display writecache block size with lvs -o writecache_block_size.
  Improve cachesettings description in man lvmcache.
  Fix lossing of delete message on thin-pool extension.

Mostly bug fixes and minor improvements.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 63408123df)
(cherry picked from commit 4e70f5caef)
2022-10-13 20:37:31 +01:00
Florian Eckert
8046d36f33
libudev-zero: update to version 1.0.1
The new version includes all previously locally backported patches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 669e4a9542)
2022-10-13 20:37:21 +01:00
Daniel Golle
0039c8e637
libp11: update to version 0.4.12
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d3b5074476)
2022-10-13 20:37:16 +01:00
Daniel Golle
4a5f0ea5b9
libksba: update to version 1.6.1
Update to stable release 1.6.1.
See commit log since version 1.6.0 for changes[1].

[1]: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=shortlog;h=d3c1e063d708a46ef39152256f8b1ea466b61be0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit df589ce880)
2022-10-13 20:37:10 +01:00
Daniel Golle
41f615400a
libinput: update to version 1.19.4
This release includes a fix for CVE-2022-1215, a format string
vulnerabilty in the evdev device handling. For details, see
https://gitlab.freedesktop.org/libinput/libinput/-/issues/752

Peter Hutterer (2):
      evdev: strip the device name of format directives
      libinput 1.19.4

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23638c7ffb)
(cherry picked from commit b95dbe4187)
2022-10-13 20:36:38 +01:00
Daniel Golle
0daf580ff5
libevdev: update to version 1.13.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 630f5b1608)
2022-10-13 20:36:27 +01:00
Daniel Golle
48f44bcc58
gpgme: update to version 1.18.0
Noteworthy changes in version 1.17.0 (2022-02-07)
 -------------------------------------------------

 * New context flag "key-origin".  [#5733]
 * New context flag "import-filter".  [#5739]
 * New export mode to export secret subkeys.  [#5757]
 * Detect errors during the export of secret keys.  [#5766]
 * New function gpgme_op_receive_keys to import keys from a keyserver
   without first running a key listing.  [#5808]
 * Detect bad passphrase error in certificate import.  [T5713]
 * Allow setting --key-origin when importing keys.  [T5733]
 * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
   "pinentry", and "socketdir" in gpgme_get_dirinfo.  [T5727,T5613]
 * Under Unix use poll(2) instead of select(2), when available.
   [T2385]
 * Do not use --flat_namespace when linking for macOS.  [T5610]
 * Fix results returned by gpgme_data_* functions.  [T5481]
 * Support closefrom also for glibc.  [rM4b64774b6d]
 * cpp,qt: Add support for export of secret keys and secret subkeys.
   [#5757]
 * cpp,qt: Support for adding existing subkeys to other keys.  [#5770]
 * qt: Extend ChangeExpiryJob to change expiration of primary key
   and of subkeys at the same time. [#4717]
 * qt: Expect UTF-8 on stderr on Windows.  [rM8fe1546282]
 * qt: Allow retrieving the default value of a config entry.  [T5515]

 Noteworthy changes in version 1.17.1 (2022-03-06)
 -------------------------------------------------

 * qt: Fix a bug in the ABI compatibility of 1.17.0.  [T5834]

 Noteworthy changes in version 1.18.0 (2022-08-10)
 -------------------------------------------------

 * New keylist mode to force refresh via external methods.  [T5951]
 * The keylist operations now create an import result to report the
   result of the locate keylist modes.  [T5951]
 * core: Return BAD_PASSPHRASE error code on symmetric decryption
   failure.  [T5939]
 * cpp, qt: Do not export internal symbols anymore.  [T5906]
 * cpp, qt: Support revocation of own OpenPGP keys.  [T5904]
 * qt: The file name of (signed and) encrypted data can now be set.  [T6056]
 * cpp, qt: Support setting the primary user ID.  [T5938]
 * python: Fix segv(NULL) when inspecting contect after exeception.  [T6060]

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d7799595bd)
(cherry picked from commit 00bfb4f151)
2022-10-13 20:27:13 +01:00
Hauke Mehrtens
a471198392
gpgme: Fix compile with glibc 2.34
This backports a patch from upstream gpgme to fix compilation with glibc 2.34.

It fixes the following build problem:
posix-io.c: In function '_gpgme_io_spawn':
posix-io.c:577:23: error: void value not ignored as it ought to be
  577 |             while ((i = closefrom (fd)) && errno == EINTR)
      |                       ^
make[5]: *** [Makefile:947: posix-io.lo] Error 1

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit dafb96c148)
2022-10-13 20:27:03 +01:00
Daniel Golle
120bd98229
gawk: update to version 5.2.0
For changes see ChangeLog file[1].

[1]: https://git.savannah.gnu.org/cgit/gawk.git/plain/ChangeLog?h=gawk-5.2.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cd20631bc7)
2022-10-13 20:26:58 +01:00
Daniel Golle
4c320b8a1e
exfatprogs: update to 1.1.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54b8e21fe7)
(cherry picked from commit 97e87c471c)
(cherry picked from commit b1585a5375)
(cherry picked from commit 3caf9ce16b)
2022-10-13 20:26:40 +01:00
Daniel Golle
5b1511daf1
exim: update to version 4.96
Exim version 4.96
-----------------

JH/01 Move the wait-for-next-tick (needed for unique message IDs) from
      after reception to before a subsequent reception.  This should
      mean slightly faster delivery, and also confirmation of reception
      to senders.

JH/02 Move from using the pcre library to pcre2.  The former is no longer
      being developed or supported (by the original developer).

JH/03 Constification work in the filters module required a major version
      bump for the local-scan API.  Specifically, the "headers_charset"
      global which is visible via the API is now const and may therefore
      not be modified by local-scan code.

JH/04 Fix ClamAV TCP use under FreeBSD. Previously the OS-specific shim for
      sendfile() didi not account for the way the ClamAV driver code called it.

JH/05 Bug 2819: speed up command-line messages being read in.  Previously a
      time check was being done for every character; replace that with one
      per buffer.

JH/06 Bug 2815: Fix ALPN sent by server under OpenSSL.  Previously the string
      sent was prefixed with a length byte.

JH/07 Change the SMTP feature name for pipelining connect to be compliant with
      RFC 5321.  Previously Dovecot (at least) would log errors during
      submission.

JH/08 Remove stripping of the binaries from the FreeBSD build.  This was added
      in 4.61 without a reason logged. Binaries will be bigger, which might
      matter on diskspace-constrained systems, but debug is easier.

JH/09 Fix macro-definition during "-be" expansion testing.  The move to
      write-protected store for macros had not accounted for these runtime
      additions; fix by removing this protection for "-be" mode.

JH/10 Convert all uses of select() to poll().  FreeBSD 12.2 was found to be
      handing out large-numbered file descriptors, violating the usual Unix
      assumption (and required by Posix) that the lowest possible number will be
      allocated by the kernel when a new one is needed.  In the daemon, and any
      child procesees, values higher than 1024 (being bigger than FD_SETSIZE)
      are not useable for FD_SET() [and hence select()] and overwrite the stack.
      Assorted crashes happen.

JH/11 Fix use of $sender_host_name in daemon process.  When used in certain
      main-section options or in a connect ACL, the value from the first ever
      connection was never replaced for subsequent connections.  Found by
      Wakko Warner.

JH/12 Bug 2838: Fix for i32lp64 hard-align platforms. Found for SPARC Linux,
      though only once PCRE2 was introduced: the memory accounting used under
      debug offset allocations by an int, giving a hard trap in early startup.
      Change to using a size_t.  Debug and fix by John Paul Adrian Glaubitz.

JH/13 Bug 2845: Fix handling of tls_require_ciphers for OpenSSL when a value
      with underbars is given.  The write-protection of configuration introduced
      in 4.95 trapped when normalisation was applied to an option not needing
      expansion action.

JH/14 Bug 1895: TLS: Deprecate RFC 5114 Diffie-Hellman parameters.

JH/15 Fix a resource leak in *BSD.  An off-by-one error resulted in the daemon
      failing to close the certificates directory, every hour or any time it
      was touched.

JH/16 Debugging initiated by an ACL control now continues through into routing
      and transport processes.  Previously debugging stopped any time Exim
      re-execs, or for processing a queued message.

JH/17 The "expand" debug selector now gives more detail, specifically on the
      result of expansion operators and items.

JH/18 Bug 2751: Fix include_directory in redirect routers.  Previously a
      bad comparison between the option value and the name of the file to
      be included was done, and a mismatch was wrongly identified.
      4.88 to 4.95 are affected.

JH/19 Support for Berkeley DB versions 1 and 2 is withdrawn.

JH/20 When built with NDBM for hints DB's check for nonexistence of a name
      supplied as the db file-pair basename.  Previously, if a directory
      path was given, for example via the autoreply "once" option, the DB
      file.pag and file.dir files would be created in that directory's
      parent.

JH/21 Remove the "allow_insecure_tainted_data" main config option and the
      "taint" log_selector.  These were previously deprecated.

JH/22 Fix static address-list lookups to properly return the matched item.
      Previously only the domain part was returned.

JH/23 Bug 2864: FreeBSD: fix transport hang after 4xx/5xx response. Previously
      the call into OpenSSL to send a TLS Close was being repeated; this
      resulted in the library waiting for the peer's Close.  If that was never
      sent we waited forever.  Fix by tracking send calls.

JH/24 The ${run} expansion item now expands its command string elements after
      splitting.  Previously it was before; the new ordering makes handling
      zero-length arguments simpler.  The old ordering can be obtained by
      appending a new option "preexpand", after a comma, to the "run".

JH/25 Taint-check exec arguments for transport-initiated external processes.
      Previously, tainted values could be used.  This affects "pipe", "lmtp" and
      "queryprogram" transport, transport-filter, and ETRN commands.
      The ${run} expansion is also affected: in "preexpand" mode no part of
      the command line may be tainted, in default mode the executable name
      may not be tainted.

JH/26 Fix CHUNKING on a continued-transport.  Previously the usabliility of
      the the facility was not passed across execs, and only the first message
      passed over a connection could use BDAT; any further ones using DATA.

JH/27 Support the PIPECONNECT facility in the smtp transport when the helo_data
      uses $sending_ip_address and an interface is specified.
      Previously any use of the local address in the EHLO name disabled
      PIPECONNECT, the common case being to use the rDNS of it.

JH/28 OpenSSL: fix transport-required OCSP stapling verification under session
      resumption. Previously verify failed because no certificate status is
      passed on the wire for the restarted session. Fix by using the recorded
      ocsp status of the stored session for the new connection.

JH/29 TLS resumption: the key for session lookup in the client now includes
      more info that a server could potentially use in configuring a TLS
      session, avoiding oferring mismatching sessions to such a server.
      Previously only the server IP was used.

JH/30 Fix string_copyn() for limit greater than actual string length.
      Previously the copied amount was the limit, which could result in a
      overlapping memcpy for newly allocated destination soon after a
      source string shorter than the limit.  Found/investigated  by KM.

JH/31 Bug 2886: GnuTLS: Do not free the cached creds on transport connection
      close; it may be needed for a subsequent connection.  This caused a
      SEGV on primary-MX defer.  Found/investigated by Gedalya & Andreas.

JH/32 Fix CHUNKING for a second message on a connection when the first was
      rejected.  Previously we did not reset the chunking-offered state, and
      erroneously rejected the BDAT command.  Investigation help from
      Jesse Hathaway.

JH/33 Fis ${srs_encode ...} to handle an empty sender address, now returning
      an empty address.  Previously the expansion returned an error.

HS/01 Bug 2855: Handle a v4mapped sender address given us by a frontending
      proxy.  Previously these were misparsed, leading to paniclog entries.

Also contains commit 51be321b27 "Fix PAM auth. Bug 2813" addressing
CVE-2022-37451.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f2763b95af)
2022-10-13 20:26:18 +01:00
Daniel Golle
f1cd282c01
cryptsetup: update to version 2.5.0
Update to new major release of cryptsetup. For details, please see
the release notes[1].

[1]: https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.5/v2.5.0-ReleaseNotes
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 80439f802c)
2022-10-13 20:26:13 +01:00
Daniel Golle
e7bd06cc9a
cryptsetup: fix library paths by calling autoreconf
Use PKG_FIXUP:=autoreconf when building cryptsetup to prevent
accidental linkage against host libraries.

Fixes: #19011
Reported-by: @dreirund
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ad0ac5198d)
2022-10-13 20:26:08 +01:00
Daniel Golle
fb5b7e9cc7
ccid: update to version 1.5.0
1.5.0 - 27 January 2022, Ludovic Rousseau
   - Add support of
     - ACS ACR1281U
     - Circle CCR7125 ICC
     - Circle CIR125 ICC
     - Circle CIR125-DOT ICC
     - Circle CIR215 CL with iProduct 0x2100
     - Circle CIR315 DI
     - Circle CIR315 with idProduct: 0x0324
     - Circle CIR315 with idProduct: 0x7004
     - Circle CIR415 CL
     - Circle CIR515 ICC
     - Circle CIR615 CL
     - Circle CIR615 CL & 1S
     - ELYCTIS CL reader
     - Nitrokey Nitrokey 3
     - Thales Shield M4 Reader
   - Add support of simultaneous slot access on multi slots readers
   - Use FeliCa instead of Felica on SONY request
   - Fix SafeNet eToken 5110 SC issue
   - Allow vendor control commands for Omnikey 5427 CK
   - always compute readTimeout to use a value greater than default 3 seconds
   - Check the bSeq value when receiving a CCID frame
   - Avoid logging errors when a reader is removed
   - Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0dd218a2fb)
2022-10-13 20:26:03 +01:00
Daniel Golle
b9dc5e5da7
auc: update to 0.3.1
Sync auc with main branch.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6c9ab0e426)
(cherry picked from commit f1969ab584)
(cherry picked from commit 36525086ce)
(cherry picked from commit fd36c91db8)
2022-10-13 20:25:19 +01:00
Michal Vasilek
ed66ae5f08 python3: update to 3.9.14
* fixes CVE-2021-28861
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-10-11 17:55:28 +02:00
Stan Grishin
dd9a7eb3b3
Merge pull request #19581 from stangri/openwrt-21.02-curl
[21.02] curl: error out if wolfSSL is not usable
2022-10-10 08:20:16 -07:00
Petr Štetiar
a1d76d41c3 curl: error out if wolfSSL is not usable
When we explicitly declare, that we would like to have curl built with
wolfSSL support using `--with-wolfssl` configure option, then we should
make sure, that we either endup with curl having that support, or it
shouldn't be available at all, otherwise we risk, that we end up with
regressions like following:

  configure:25299: checking for wolfSSL_Init in -lwolfssl
  configure:25321: x86_64-openwrt-linux-musl-gcc -o conftest [snip]
  In file included from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/dsa.h:33,
                   from target-x86_64_musl/usr/include/wolfssl/wolfcrypt/asn_public.h:35,
                  from target-x86_64_musl/usr/include/wolfssl/ssl.h:35,
                   from conftest.c:47:
  target-x86_64_musl/usr/include/wolfssl/wolfcrypt/integer.h:37:14: fatal error: wolfssl/wolfcrypt/sp_int.h: No such file or directory
       #include <wolfssl/wolfcrypt/sp_int.h>
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
  compilation terminated.

and in the end thus produce curl without https support:

 curl: (1) Protocol "https" not supported or disabled in libcurl

So fix it, by making the working wolfSSL mandatory and error out in
configure step when that's not the case:

 checking for wolfSSL_Init in -lwolfssl... no
 configure: error: --with-wolfssl but wolfSSL was not found or doesn't work

References: #19005, #19547
Upstream-Status: Accepted [https://github.com/curl/curl/pull/9682]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 9140f366ef)
2022-10-10 15:12:12 +00:00
Josef Schlehofer
110ff0b4cb
Merge pull request #19569 from 1715173329/y2
[openwrt-21.02] yq: Update to 4.28.1
2022-10-09 21:37:09 +02:00
Tianling Shen
cee79fda43
yq: Update to 4.28.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 40f0e263bf)
2022-10-09 17:01:02 +08:00
Hirokazu MORIKAWA
82629531b7 node: bump to v14.20.1
The following CVEs are fixed in this release:
* CVE-2022-32212: DNS rebinding in --inspect on macOS (High)
* CVE-2022-32213: bypass via obs-fold mechanic (Medium)
* CVE-2022-35256: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (Medium)
More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-10-08 06:16:28 +02:00
Stan Grishin
dfdc5c6fc9
Merge pull request #19548 from ynezz/ynezz/openwrt-21.02-fix-broken-libcurl
[21.02] fix broken libcurl by backporting curl: fix compilation with wolfSSL
2022-10-07 17:33:43 -07:00
Rosen Penev
f4cc6adcfe curl: fix compilation with wolfSSL
options.h header is needed after bump of libwolfssl to version 5.5.1,
otherwise libcurl autodetection for libwolfssl availability fails and
libcurl is then compiled without https support.

Fixes: #19547
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 317575755a)
(cherry picked from commit ef545e0317)
Signed-off-by: Petr Štetiar <ynezz@true.cz> [commit verbosity]
2022-10-07 14:23:46 +02:00
Petr Štetiar
5c73747ff6
Merge pull request #19536 from ynezz/ynezz/openwrt-21.02-wolfssl-CVE-2022-39173
[21.02] treewide: fix security issues by bumping all packages using libwolfssl
2022-10-06 13:34:38 +02:00
Eneas U de Queiroz
2d6bf3f6dd
libgd: avoid recursive and redundant dependencies
Change the CONFLICTS line from the libgd-full to libgd to fix a
recursive dependency.

While at it, remove the redundant +LIBGD_TIFF:libtiff
+LIBGD_FREETYPE:libfreetype dependencies from Package/libgd/default.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 085eb34fbf)
2022-10-06 11:45:50 +02:00
Nick Hainke
415118b6b3 tor: update to 0.4.7.10
Release Notes:
https://forum.torproject.net/t/urgent-stable-release-0-4-5-14-0-4-6-12-and-0-4-7-10

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b9cf0cdce6)
[fix commit title]
Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-10-05 23:31:28 +02:00
Petr Štetiar
c8447b8a38 treewide: fix security issues by bumping all packages using libwolfssl
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 845d81ca09)
(cherry picked from commit f624e41f38)
2022-10-05 21:37:47 +02:00
Michael Heimpold
0b9b8e5ae6
Merge pull request #19518 from mhei/21.02-php8-update-8.0.24
[21.02] php8: update to 8.0.24
2022-10-04 17:35:32 +02:00
Michael Heimpold
b7fdf56f99
Merge pull request #19517 from mhei/21.02-php7-update-7.4.32
[21.02] php7: update to 7.4.32
2022-10-04 17:35:16 +02:00
Michael Heimpold
0498d79d74 php8: update to 8.0.24
This fixes:
    - CVE-2022-31629
    - CVE-2022-31628

Also refresh patch to apply cleanly.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-04 12:33:48 +02:00
Michael Heimpold
64f2ed8fbf php7: update to 7.4.32
This fixes:
    - CVE-2022-31628
    - CVE-2022-31629

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-10-04 07:41:38 +02:00
Karl Palsson
47d63847e1 libs/cjson: bump to 1.7.15
This is a bugfix release.
Full release notes available at: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:30:46 +00:00
Karl Palsson
ac6980d6f3 mosquitto: bump to 2.0.15
Changelog: https://mosquitto.org/blog/2022/08/version-2-0-15-released/
Changelog: https://mosquitto.org/blog/2021/11/version-2-0-14-released/

2.0.15 is bigger security and bugfix release.  2.0.14 had a couple of
  minor changes and was skipped for OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2022-09-26 09:28:48 +00:00
Ptilopsis Leucotis
58befda000 mosquitto: add missing 'persistence' section in config
Section 'Persistence' in 'luci-app-mosquitto' is unusable without 'persistence'
section in config file.

Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
2022-09-26 09:28:25 +00:00
Noah Meyerhans
894e2763ac bind: bump to 9.18.7
Fixes multiple security issues:

CVE-2022-38178 - Fix memory leak in EdDSA verify processing

CVE-2022-3080 - Fix serve-stale crash that could happen when
			stale-answer-client-timeout was set to 0 and there was
			a stale CNAME in the cache for an incoming query

CVE-2022-2906 - Fix memory leaks in the DH code when using OpenSSL 3.0.0
			and later versions. The openssldh_compare(),
			openssldh_paramcompare(), and openssldh_todns()
			functions were affected

CVE-2022-2881 - When an HTTP connection was reused to get
			statistics from the stats channel, and zlib
			compression was in use, each successive
			response sent larger and larger blocks of memory,
			potentially reading past the end of the allocated
			buffer

CVE-2022-2795 - Prevent excessive resource use while processing large
			delegations

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 58bcd3fad37eaf56d4dbeecc0c73abe464e7e987)
2022-09-23 18:06:44 -07:00
Tianling Shen
dfdb769f83 yq: Update to 4.27.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fca4f1b830)
2022-09-23 13:42:47 -07:00
Glenn Strauss
f3ab672f40 lighttpd: update to lighttpd 1.4.67 release hash
* update to lighttpd 1.4.67 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit f750089d26)
2022-09-23 13:42:24 -07:00
Glenn Strauss
c7e8e074d0 lighttpd: update to lighttpd 1.4.66 release hash
* update to lighttpd 1.4.66 release hash

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 5eaf000c83)
2022-09-23 13:42:24 -07:00
Michal Vasilek
79fc23ce05
knot-resolver: update to 5.5.3
* fixes CVE-2022-40188

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 5d2fd88693)
2022-09-23 00:43:29 +02:00
Tianling Shen
5f5a782da4 libtorrent-rasterbar: Update to 2.0.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c741bf64cd)
2022-09-22 01:21:28 -07:00
Josef Schlehofer
50684ca9f3
Merge pull request #19408 from paper42/knot-3.2.1-21
[21.02] knot: update to version 3.2.1
2022-09-21 09:38:56 +02:00
Jan Hák
0e72180bb2
knot: update to version 3.2.1
Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 023df0992a)
2022-09-19 13:43:56 +02:00
Michal Vasilek
690d8dfab5
python-flask-socketio: update to 5.3.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7fd9d010a2)
2022-09-16 14:45:45 +02:00
Rafał Miłecki
d7c47ba5ed ksmbd-tools: add package with hotplug.d script for auto sharing
One of common use cases for SMB3 server in routers is sharing hotplugged
drives. Users make many attempts setting that up which often are not
optimal.

This script handles it in the cleanest way by using:
1. hotplug.d mount subsystem
2. runtime config in the /var/run/config/

It provides a working basic solution that can be later adjusted by
modifying provided hotplug script.

A pretty much idential solution was part of the samba36 package. It was
added in the OpenWrt commit ef1efa756e0d0 ("samba36: add package with
hotplug.d script for auto sharing") as an answer for feature required by
the Rosinson company.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit d0406d4c95)
2022-09-10 16:05:51 +02:00
Rafał Miłecki
065ea581b8 ksmbd-tools: append config from /var/run/config/ for runtime shares
Dynamically created shares shouldn't be stored in the /etc/config/
because of:
1. Flash wearing
2. Risk of inconsistent state on reboots

With this change all automation/hotplug.d scripts can store runtime in
the /var/run/config/samba. It's useful e.g. for USB drives that user
wants to be automatically shared.

Also: automated scripts should never call "uci [foo] commit" as that
could flush incomplete config. This problem also gets solved.

Identical feature was added to samba36 in the OpenWrt commit
5a59e2c059866 ("samba36: append config from /var/run/config/ for runtime
shares") but wasn't ported to ksmbd until now.

Cc: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c9cba61989)
2022-09-10 16:05:36 +02:00
Josef Schlehofer
131ddf2370
syslog-ng: update to version 3.38.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.38.1

- Update the configuration file to use version 4.0 as mentioned in the
  release notes to try the latest changes

Fixes: CVE-2022-38725

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 34b7af9e08)
2022-09-08 09:58:34 +02:00
Tianling Shen
e86c4376d3 yq: Update to 4.27.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 90a76f6467)
2022-09-03 14:05:04 -07:00
Josef Schlehofer
51077c1094
Merge pull request #19219 from ErwanMAS/backport_modifications_master
tinc: backport  from master modifications
2022-08-30 16:17:20 +02:00
Erwan MAS
b9f45b9ded
tinc: add creation of hosts directory for each network configuration
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
(cherry picked from commit fb99d50c1e)
2022-08-30 10:50:56 +02:00
Etienne Champetier
4af55248a4
tinc: use 'uci_get_state' instead of 'uci -P /var/state get'
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 440d3c0450)
2022-08-30 10:50:46 +02:00
Petr Štetiar
3d2af69629
syslog-ng: fix OOM issues by adding support for logrotate
With heavy system logging which goes by default into `/var/log/messages`
log file which is usually placed in tmpfs/RAM one can trigger OOM killer
fairly easily, thus killing random processes and in some cases making
system unusable.

This is likely happening due to the fact, that Linux by default uses 1/2
of available RAM for tmpfs, which might be for example an issue on low
RAM devices with ath10k wireless.

So let's fix it by adding logrotate functionality which should limit the
size of `/var/log/messages` log file to 1M by default, but could be
tweaked by config knob if needed be.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 660fa63faf)
2022-08-27 14:41:20 +02:00
Josef Schlehofer
df67597ab6
python-uci: update to version 0.9.0
- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e340fe8a12)
2022-08-26 16:56:01 +02:00
Alexandru Ardelean
b7b0c80a5f
Merge pull request #19223 from commodo/django-21.02
[21.02] django: bump to version 3.2.15
2022-08-24 12:27:40 +03:00
Josef Schlehofer
7662d4801b
libgd: add conflicts to each other
The full variant should conflict with the default variant. This prevents that
libgd and libgd-full could be installed side by side, and also, the full
variant should provide the libgd. Otherwise, if you install libgd-full,
you can not install vnstat.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 42b36b7180)
2022-08-24 08:25:38 +02:00
Karel Kočí
7bdf878cd7
vim: variants conflict with each other
This adds conflicts between the variants,
because they provide the same files, and it should not be
possible to install them side by side. Otherwise, it might happen that
half files would be from one variant and the other half from the
other.

Also, adds provides as if you request to install ``vim`` and
``vim-full``, then the request could be satisfied even they collide,
because ``vim-full`` provides ``vim`` package.

Signed-off-by: Karel Kočí <cynerd@email.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
(cherry picked from commit 46c058468a)
2022-08-24 08:25:33 +02:00
Josef Schlehofer
70ac536827
pciutils: backport patch to fix compilation with older binutils
While building pciutils 3.8.0 for OpenWrt 21.02 includes target
mvebu/cortex-a9, mvebu/cortex-a53 and powerpc/8540, it fails because of
this error:

-I<turris1x/ws/build/staging_dir/toolchain-powerpc_8548_gcc-8.4.0_musl/include>   -c -o filter.o filter.c
{standard input}: Assembler messages:
{standard input}:6: Error: multiple versions [`pci_filter_init@@LIBPCI_3.8'|`pci_filter_init@LIBPCI_3.3'] for symbol `pci_filter_init_v38'
{standard input}:8: Error: multiple versions [`pci_filter_parse_slot@@LIBPCI_3.8'|`pci_filter_parse_slot@LIBPCI_3.3'] for symbol `pci_filter_parse_slot_v38'
{standard input}:10: Error: multiple versions [`pci_filter_parse_id@@LIBPCI_3.8'|`pci_filter_parse_id@LIBPCI_3.3'] for symbol `pci_filter_parse_id_v38'
{standard input}:12: Error: multiple versions [`pci_filter_match@@LIBPCI_3.8'|`pci_filter_match@LIBPCI_3.3'] for symbol `pci_filter_match_v38'
make[4]: *** [<builtin>: filter.o] Error 1
make[4]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/lib'>
make[3]: *** [Makefile:70: lib/libpci.so.3.8.0] Error 2
make[3]: Leaving directory '<turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0'>
make[2]: *** [Makefile:88: <turris1x/ws/build/build_dir/target-powerpc_8548_musl/pciutils-3.8.0/.built]> Error 2
make[2]: Leaving directory '<turris1x/ws/build/feeds/packages/utils/pciutils'>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f08dadd517)
2022-08-23 21:14:35 +02:00
Jan Hák
3db217c3c7
liburcu: update to version 0.13.2
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 754ba8920b)
2022-08-22 14:33:14 +02:00
Jan Hák
0e633485cf
knot: update to version 3.2.0
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 74e2bfdd27)
2022-08-22 14:23:21 +02:00
Alexandru Ardelean
ec98bccb1d django: bump to version 3.2.15
Fixes: https://nvd.nist.gov/vuln/detail/CVE-2022-36359

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-22 09:27:42 +03:00
Paul Spooren
f50a80b79c
CI: checkout HEAD commit rather than merge commit
GitHub CI actions/checkout uses a merge commit which isn't compatible
with our formality checks. Instead checkout the pull request HEAD.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 13c1f2bcda)
2022-08-21 23:33:12 +02:00
Paul Spooren
29ad225700
CI: migrate formal checks from CircleCI to GitHub
Run the formal checks like SoB message via the GitHub CI.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 1b46af0e59)
2022-08-21 23:28:21 +02:00
Marko Ratkaj
edf1bf7ef0
squid: bump to 4.17
Signed-off-by: Marko Ratkaj <markoratkaj@gmail.com>
(cherry picked from commit 15132b85b7)
2022-08-21 19:28:48 +02:00
Rosen Penev
2fed0daa7f
squid: update to 4.16
Fixes compilation with GCC11.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ad4c04283e)
2022-08-21 19:28:44 +02:00
Fabian Lipken
8b198ed582
dnscrypt-proxy2: update to version 2.1.2
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 2c617bbe22)
2022-08-21 16:31:56 +02:00
Lucian Cristian
859cd297b2
pciutils: update to 3.8.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit c5ec5c70b3)
2022-08-20 23:34:05 +02:00
Tianling Shen
7c4018dcf1 rclone: Update to 1.59.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5c4b54de56)
2022-08-18 19:53:29 -07:00
Jonathan Pagel
ca82b6fcd8 telegraf: Update to version 1.23.4
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e4555e03ee)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-08-18 18:04:08 +02:00
Jonathan Pagel
7020b3a299 telegraf: Add influxdb2 output plugin to package version small
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a5e96189c3)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-08-18 17:42:26 +02:00
Jan Hák
4740fd060b
knot: update to 3.1.9
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 39a08a7aaf)
2022-08-17 23:28:26 +02:00
Alexandru Ardelean
7b6094381a
numpy: bump to version 1.20.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 731bb0265d)
2022-08-13 12:34:45 +02:00
Liangbin Lian
5b5685f90a
rclone: fix init script on CIDR format ipaddr
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 7af716f12d)
2022-08-13 11:35:14 +02:00
Josef Schlehofer
9daf44b788
Merge pull request #19140 from BKPepe/gcc-21.02
gcc: update to allow compiling different versions
2022-08-13 10:08:32 +02:00
Josef Schlehofer
da99ae7ec5
python-websockets: update to version 10.3
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce1679a07f)
2022-08-13 07:57:10 +02:00
Lucian Cristian
baad17e96f
libreswan: update to 4.6
this update also fixes a CVE

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit ec252c20cc)
2022-08-12 05:49:20 +02:00
Lucian Cristian
f47ecdc42f
libreswan: update to 4.5
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit b2efa063d2)
2022-08-12 05:49:12 +02:00
Rosen Penev
f303e87a1e
nss: update to 3.67
Switch to AUTORELEASE for simplicity.

Disable parallel compilation as there's something wrong with NSS' build
system. Reliably fails with make -j 12 on a ryzen 3600.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1b9e204700)
2022-08-11 21:56:21 +02:00
Lucian Cristian
5824b879bf
nss: update to 3.65
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 0f5eadf362)
2022-08-11 21:56:16 +02:00
Jo-Philipp Wich
b6b777ef5b cgi-io: update to latest Git HEAD
901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17)
2022-08-10 23:54:52 +02:00
W. Michael Petullo
33f72bb63e
gcc: update to allow compiling different versions
This is based on the toolchain GCC, and aims to share as much of its
Makefile and patches with that definition. The package requires one
additional patch:

(1) 003-dont-choke-when-building-32bit-on-64bit.patch, which fixes the
`error: size of array 'test_real_width' is negative` error that occurs
when building a 32-bit GCC on a 64-bit host. (Search the Internet for
examples of this error appearing.)

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ceaa6e840e)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added gcc version 9.3.0, downgraded gcc to 10.2.0, removed gcc version
11.3.0 as it is now in sync with OpenWrt 21.02]
2022-08-09 23:06:39 +02:00
Tianling Shen
f00e63dba2 yq: Update to 4.27.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 82a45b28b7)
2022-08-09 21:39:14 +03:00
Eneas U de Queiroz
8f2b0830c1
gcc: enable parallel building
Even though PKG_BUILD_PARALLEL is set for the package, the package calls
$(MAKE) without $(PKG_JOBS), so it was always built with only one job.

Fix this by adding $(PKG_JOBS) to the $(MAKE) call, and calling make
install only after make all is finished.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1f91016ac3)
2022-08-08 17:36:19 +02:00
Dirk Neukirchen
bd1fcf1d52
gcc: add cc symlink
fixes #14755

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 55cb4d1aee)
2022-08-08 17:36:11 +02:00
Johnny Vogels
245360575b Pulseaudio: update to 14.2; avahi-variant: Restore Bluez functionality
Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>

Pulseaudio: update to 14.2; avahi-variant: Restore Bluez functionality

Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
2022-08-07 19:00:12 -07:00
Josef Schlehofer
2e4d12f902
Merge pull request #19121 from autobakterie/libgpg-error_1-45
libgpg-error: update to 1.45
2022-08-06 20:03:49 +02:00
Šimon Bořek
ec0bd2b964
luajit: patch: PPC/e500 SPE: use soft float instead of failing
makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca)
2022-08-06 19:43:34 +02:00
W. Michael Petullo
e3645778a8
libgpg-error: update to 1.45
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c4842bdd20)
2022-08-06 16:05:54 +02:00
W. Michael Petullo
62cd173b3a
libgpg-error: update to 1.43
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d6000af907)
2022-08-06 16:05:53 +02:00
ZiMing Mo
2b03f2baef rclone: update to 1.59.0
Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
(cherry picked from commit 05df1fe4f1)
2022-08-03 20:33:27 +02:00
Hannu Nyman
a179f2f597 nano: update to 6.4
Update nano editor to version 6.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0aed202180)
2022-08-02 21:04:25 +03:00
Rosen Penev
a4b1fa64e6 ksmbd: update to 3.4.5
Major changes are:

Add support for smbd-direct multi-desctriptor.
Add support for dkms.
Add support for key exchange.
Fix seveal bugs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-08-02 11:01:06 +02:00
Rosen Penev
ca85d7742d ksmbd-tools: update to 3.4.5
Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-08-02 11:01:06 +02:00
Rosen Penev
9c6950e518 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-08-02 11:01:06 +02:00
Fritz D. Ansel
a5c7be289f ksmbd: set stoplevel
to allow graceful stop of the daemon

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
(cherry picked from commit 28ed2b82c5)
2022-08-02 11:01:06 +02:00
Jonathan Pagel
8ad4a70310 telegraf: Update to version 1.23.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 281d156a35)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-25 18:37:59 -07:00
Jan Hák
5e6363ada4
knot: update to 3.1.8
- Release notes:
https://www.knot-dns.cz/2022-04-28-version-318.html

- Refreshed patch to avoid offset

Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message, refresh patch]
(cherry picked from commit db12181940)
2022-07-25 16:49:26 +02:00
Gerard Ryan
705a45a575 dockerd: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
13e721e57c docker: Update to v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
01c440a8aa libnetwork: Update to f6ccccb for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
9b643a0700 containerd: Update to v1.6.6 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Gerard Ryan
1e53195c7a runc: Update to v1.1.2 for Docker v20.10.17
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-07-24 17:35:30 -07:00
Nick Hainke
40d9e5a45c dawn: update to 2022-07-24
edca4d2 network: rework network status callbacks

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 28ca76d29b)
2022-07-24 13:18:21 +02:00
Nick Hainke
0c15d77f89 dawn: update to 2022-07-22
10fb043 network: dump detail on ping pong received

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1f60c23296)
2022-07-22 21:55:07 +02:00
Alexandru Ardelean
72147f3b94
Merge pull request #18965 from commodo/django-update-21-02
[21.02] django: bump to version 3.2.14
2022-07-22 14:44:32 +03:00
Nick Hainke
412a04b488 dawn: update to 2022-07-21
bb362db datastorage: fix ap_array_unlink_entry always returns NULL
47e98ef network: ping pong keepalive for tcp connections
eba0354 network: add timeout for client connections

In the dawn config the con_timeout needs to be added:
  option con_timeout '60'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 204fd77bbc)
2022-07-21 18:45:49 +02:00
Jeffery To
8a03e65655 golang: Update to 1.17.12
Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-07-20 02:38:16 -07:00
Tianling Shen
b519ab08e5 yq: Update to 4.26.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4df4b8eae7)
2022-07-18 19:44:54 +02:00
Tianling Shen
5c8f038b70 xray-core: Update to 1.5.9
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 25922c6afd)
2022-07-18 19:44:06 +02:00
Nick Hainke
8ea0a73b81 dawn: update to 2022-07-18
e596ff1 ubus.c: only add nr entries matching our own SSID

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bb0d45ed35)
2022-07-18 18:24:19 +02:00
Alexandru Ardelean
c45f72086c django: bump to version 3.2.14
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-18 17:42:45 +03:00
Michal Vasilek
57d7325a88
postfix: fix download failure
cdn.postfix.johnriley.me serves a certificate for a different domain
name.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit d4feef97e6)
2022-07-17 15:03:54 +02:00
Nick Hainke
c1b43cf1c9 dawn: update to 2022-07-16
0689b5e ubus: add missing lock for ubus hearing_map
4b7db09 CONFIGURE.md: fix typo
b3f61d4 CONFIGURE.md: adjust documentation about log levels

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit eef9ee0b83)
2022-07-16 19:52:33 +02:00
Eneas U de Queiroz
5d6ea25959 libuwsc: fix compiltation with wolfSSL
wolfssl/options.h needs to be included before the other wolfssl headers
to enable OpenSSL API required to build the package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8fb3fd3dac)
2022-07-15 13:14:58 -07:00
Jonathan Pagel
efb51fc258 telegraf: Update to version 1.23.2
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 591f8cad33)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:06 +02:00
Jonathan Pagel
a7514c233d telegraf: Update to version 1.23.1
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 9b1cdb7b52)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-07-14 20:42:06 +02:00
Eneas U de Queiroz
e399927bee
xr_usb_serial_common: bump to 2022-03-30
This is the latest commit that touches the xr_usb_serial_common-1a dir.
The changes are restricted to whitespace fixes and kernel version
adaptations:
ecc6ebe xr_usb: Use tty_driver_kref_put for kernel 5.15 and above
caf6d25 xr_usb: Use tty_alloc_driver for kernel 5.15 and above
a42b7e6 xr_usb: Compilation fixes for kernel 5.14
497adb7 #39 fix compilation for newer linux kernels
9103471 xr_usb: fix some whitespace errors

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit eadab32450)
2022-07-14 12:47:04 +02:00
Rosen Penev
f63ff5f018
fio: update to 3.29
Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d1edd7677a)
2022-07-14 12:08:23 +02:00
Petr Štetiar
c38d5976e8 libarchive: fix ext2fs build race error condition
libarchive looks for ext2fs headers during configure, and if it finds
them it will expect to find them during compile, or on the rare occasion
when they aren't it will fail:

 libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory

As we just need headers for some type constants, let's re-use headers
from tools/e2fsprogs package which are always available.

Reported-by: Adam Dov <adov@maxlinear.com>
Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com>
References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 797945dfaa)
2022-07-13 08:47:35 +02:00
Hirokazu MORIKAWA
2ac03c2372 node: July 7th 2022 Security Releases
Update to v14.20.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-07-10 22:38:30 +02:00
Jeffery To
580926cb6c python-cryptography: Fix failing build
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d7883)
2022-07-07 09:54:10 -07:00
Etienne Champetier
50547b6d51
nft-qos: simplify ifname retrieval
network_get_device should be enough, and since https://git.openwrt.org/?p=openwrt/openwrt.git;a=commitdiff;h=4b9a67362d70c544b85078b8d5c661f43f7472d9
uci network config interface sections use 'device' instead of 'ifname',
rendering the fallback useless

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 76b750d720)
2022-07-06 13:30:33 +02:00
Stijn Segers
d5738504d0
unbound: update to 1.16.0
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
(cherry picked from commit 695e0dbaa4)
2022-07-05 04:54:30 +02:00
Florian Eckert
6b1d459373
Merge pull request #18828 from nemesisdesign/openwrt-21.02
[21.02] openwisp-config: update to 1.0.1
2022-07-04 09:21:50 +02:00
Florian Eckert
0105c8d49b
Merge pull request #18847 from nemesisdesign/monitoring-openwrt-21
[21.02] openwisp-monitoring: added 0.1.1
2022-07-04 09:21:03 +02:00
Federico Capoano
1a63a03305 openwisp-monitoring: added 0.1.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae)
2022-07-01 18:52:02 -04:00
Federico Capoano
f689115b4b openwisp-config: update to 1.0.1
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit abb75e3a7b)
2022-07-01 18:44:25 -04:00
Florian Eckert
b44b37050d
Merge pull request #18839 from TDT-AG/pr/collectd-fix-smart
collectd: fix smart plugin segfault
2022-06-30 16:42:42 +02:00
Florian Eckert
ebe9833ea0 collectd: smart: add patch to check udev_enumerate_scan_devices return value
The function udev_enumarte_scan_devices returns a value less than 0 on
failure. If this is the case then we terminate the read for this smart
information.

This change was already send upstream. And could be delete in feature
collectd versions.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 896a0f0db6)
2022-06-30 14:45:26 +02:00
Florian Eckert
2773123201 collectd: remove not needed fix
This was not a real fix but a workaround. It is no longer clear to me
why this was necessary. Deleting the patch restores the upstream
behaviour of the collected for the smart plugin. I have tested it and on
my system the hard disk to be monitored is recognised.

root@system ~ # cat /sys/class/block/sda/uevent
MAJOR=8
MINOR=0
DEVNAME=sda
DEVTYPE=disk

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9ea1cf6ed)
2022-06-30 14:45:20 +02:00
Florian Eckert
6570249dc5
Merge pull request #18838 from 1715173329/y2
[openwrt-21.02] yq: Update to 4.25.3
2022-06-30 11:45:57 +02:00
Tianling Shen
e23edff2f0
yq: Update to 4.25.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 15aff10231)
2022-06-30 16:23:09 +08:00
Sebastian Kemper
405dcf239b protobuf: fix 022aef6
The cherry-pick done in 022aef6 includes changing the build setup from
cmake to ninja, but it was overlooked that this was actually reverted in
2e654b1.

The ninja build results in headers not being installed for the host pkg,
so protobuf-c/host can't be build.

This commit reverts the package back to cmake.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2022-06-26 11:30:14 +02:00
Josef Schlehofer
20fab250dd
syslog-ng: update to version 3.37.1
- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111)
2022-06-25 06:51:48 +02:00
Stijn Tintel
a37c65902b
Revert "lxc: export systemd cgroups after install"
The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b950.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 039912dec5)
2022-06-24 12:20:35 +02:00
Michal Vasilek
af27e76540
lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b950
reverted in 039912dec5

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da7356539)
(cherry picked from commit 345ae974bc)
2022-06-24 12:18:43 +02:00
Lucian Cristian
883fded23d
libreswan: update to 4.4
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit b8c2ab47e1)
2022-06-23 23:34:00 +02:00
Lucian Cristian
e9130a712f
libreswan: update to 4.3
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 7087177bb0)
2022-06-23 23:33:49 +02:00
W. Michael Petullo
8c4ec7faa3
nfdump: update to 1.6.24
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d3b96a4b26)
2022-06-23 23:31:11 +02:00
Josef Schlehofer
92d379f752
knot-resolver: update to version 5.5.1
Changelog for versions:
- 5.4.4 [1]
- 5.5.0 [2]
- 5.5.1 [3]

[1] https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html
[2] https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html
[3] https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html

And refresh patch to avoid offset

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f74754fac1)
2022-06-23 20:14:38 +02:00
Michael Heimpold
79af866bae
Merge pull request #18795 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.20
2022-06-23 07:37:40 +02:00
Michael Heimpold
8d5bfb3110
Merge pull request #18794 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.30
2022-06-23 07:37:11 +02:00
Rosen Penev
7be6cc19e0
luajit: backport softfloat ppc support
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 24c0007ea2)
2022-06-23 05:08:08 +02:00
Sergey V. Lobanov
0f1599d2b4
luajit: fix build on macos (ldconfig issue)
fix ldconfig build issue. This patch is a backport from upstream:
18c9cf7d37

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 42c4d25455)
2022-06-22 14:37:52 +02:00
Michael Heimpold
fc32551652 php8: update to 8.0.20
This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-06-22 00:03:28 +02:00
Michael Heimpold
adb76ab12a php7: update to 7.4.30
This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-06-21 23:38:26 +02:00
Stan Grishin
1248b48da7
Merge pull request #18699 from stangri/openwrt-21.02-curl
[21.02] curl: bump to 7.83.1
2022-06-21 12:42:04 -06:00
Tianling Shen
1acfe6ed2a xray-core: Update to 1.5.8
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c6103fe402)
2022-06-21 20:21:31 +03:00
Nick Hainke
64da0fdd54 dawn: update to 2022-06-13
88c78b4 memory_utils: fix reallocation

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4a9eaecf58)
2022-06-14 20:10:28 +02:00
Nick Hainke
9cab118229 dawn: update to 2022-06-11
4cf9d0b treewide: code and documentation cleanup
48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling.
7b615b6 treewide: improve beacon/probe logging
185f31b treewide: improve beacon request handling
0c2e713 datastorage/ubus: Add "soft" kicking algorithm
38f60c5 treewide: RSSI / RCPI handling updates
aba3e81 documentation: Parameter defaults and documentation
3979fdf treewide: cleanup code
e3b3753 scoring: improve scoring algorithm
33f380f treewide: cleanup code
b42193f kicking: improve kicking algorithm
16deab3 treewide: improve mutex handling
31f0a37 test: cleanup tests and add some test scripts
43ca8b8 treewide: fix bugs from Coverity Scan
8ae2a42 utils/storage: improve descriptions
9a9b4dd ubus: Simplify loops and scans in generating hearing map
c833064 treewide: rework mutex
1df5bc5 (master) network: cleanup and improve network handling
3bd349a utils: cleanup
a855087 utils/storage: cleanup
439fe95 ubus/datastorage/msghandler: cleanup
335ace2 datastorage: improve linked list
40ebf48 ubus/datastorage: cleanup
c13c285 utils: cleanup
0e4fc50 documentation: Heavily revised Markdown documentation files

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0c74ab9a79)
2022-06-14 20:10:28 +02:00
Nick Hainke
a43077742d dawn: update to 2022-06-09
850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f78)
2022-06-14 20:10:28 +02:00
Jonathan Pagel
cae6530b91 telegraf: update to version 1.23.0
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e8f6600851)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-06-13 19:42:02 -07:00
Rosen Penev
df56b54ba5
libprotobuf-c: update to 1.4.0
Remove patch. Upstream fixed it.

Add AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 40d2b7c43e)
2022-06-13 11:26:10 +02:00
Rosen Penev
526b90e5cb
protobuf: update to 3.17.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0c3ee90b07)
2022-06-13 09:56:34 +02:00
Rosen Penev
d3e4427a47
protobuf: update to 3.17.2
Refreshed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 11acce8fa9)
2022-06-13 09:56:27 +02:00
Glenn Strauss
cde73af87b
lighttpd: update to lighttpd 1.4.65 release hash
* update to lighttpd 1.4.65 release hash
* specify lua version w/ -Dlua_version=lua to avoid patching meson.build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit db8205e545)
2022-06-13 09:20:04 +02:00
Hannu Nyman
a47793efde irqbalance: upstream patch to fix segfault
Apply post-1.9.0 patch from upstream to fix a segfault.
savedptr can be NULL, so guard for that.

Fixes #18741

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ab7a23102e)
2022-06-12 20:33:53 +03:00
Hannu Nyman
7ab65a4bc8 irqbalance: upstream patch to fix irq-module relation
Apply post-1.9.0 patch from upstream to fix the irq-->module
relation detection.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 358c2293fa)
2022-06-12 20:33:49 +03:00
Jottr Doe
f015d68639
mosh-full: Add perlbase-text dependency
Fixes https://github.com/openwrt/packages/issues/18182

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit 17d7efe7e7)
2022-06-12 10:40:06 +02:00
Jottr Doe
082c0bafc6
mosh-full: Sort dependencies alphabetically
Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit eaa37d2e8d)
2022-06-12 10:40:02 +02:00
Josef Schlehofer
ce0446269c
beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532
1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf250)
2022-06-10 13:54:12 +02:00
Tianling Shen
bce5bf2d1e xray-core: increase nofile limitation
This fixes "too many open files" error caused by max-file limitation
when xray processes large traffic.

Reported-by: Terry Ding <terryding77@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d98fd52865)
2022-06-09 11:00:47 -07:00
Tianling Shen
b07d877b0f xray-core: Update to 1.5.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a60ebb597a)
[Removed upstreamed patch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-06-09 11:00:47 -07:00
John Audia
aa5d781934 htop: update to 3.2.1
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6d73b8a09a)
2022-06-07 20:37:47 +03:00
Stan Grishin
baaa3ef00a curl: bump to 7.83.1
* https://curl.se/changes.html#7_83_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b0f213a726)
2022-06-06 22:53:34 +00:00
Jeffery To
851e74107f golang: Update to 1.17.11
Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 15:09:00 -07:00
Josef Schlehofer
819ca44fad
Merge pull request #18695 from jefferyto/python-3.9.13-openwrt-21.02
[openwrt-21.02] python3: Update to 3.9.13
2022-06-06 15:33:10 +02:00
Šimon Bořek
8ad1582871 netatalk: backport pending PR to fix segfaults
This commit backports pending PR, which solves segfaults:
- https://github.com/Netatalk/Netatalk/pull/174

To fix issues with segfaults described here:
- https://github.com/openwrt/packages/issues/18571
- https://github.com/Netatalk/Netatalk/issues/175

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-06-06 14:26:05 +01:00
Jeffery To
d53270bef3
python3: Update to 3.9.13
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 20:47:16 +08:00
Josef Schlehofer
3d1254a6dc
CircleCI: Add 21.02 GPG and usign public keys and update to Debian 10
Debian 9 (stretch) comes with Python 3.5 by default and End of Life is going to be
on 30th June 2022, let's update it to Debian 10 (buster).

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 599e41c14b)
2022-06-06 09:47:14 +02:00
Hannu Nyman
b2b5fb407d irqbalance: remove local patch for socket directory
Upstream has finally patched the UI communication socket
creation to happen only if the irqbalance UI is enabled.

As we do not use the irqbalance UI, we can remove
our local fix implemented by 4f0c847828.
(If you want to enable irqbalance UI, the fix is still needed.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8e71e0ad97)
2022-06-05 20:05:27 +03:00
Hannu Nyman
336e603bdc irqbalance: update to 1.9.0
Update irqbalance to version 1.9.0
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e9002ff3d9)
2022-06-05 20:05:24 +03:00
Rosen Penev
904442b998
protobuf-c: don't build shared host library
No point and can avoid rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89c2971c6e)
2022-06-03 16:31:14 +02:00
Rosen Penev
022aef6add
protobuf: update to 3.15.6
Remove upstreamed patch.

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1d0d8e057c)
2022-06-03 16:22:02 +02:00
Federico Capoano
4ebb81b254 openwisp-config: update to 1.0.0
Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
2022-06-01 13:53:20 -07:00
Tianling Shen
3eb6ac98eb xray-core: fix build in go 1.17
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2022-06-01 13:52:27 -07:00
Tianling Shen
bdb503f30b xray-core: Update to 1.5.6
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f5980d589)
2022-06-01 13:52:27 -07:00
Tianling Shen
fa067f114c yq: Update to 4.25.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 31f9d48ff3)
2022-06-01 13:52:19 -07:00
Michael Heimpold
49df855b02
Merge pull request #18653 from mhei/21.02-libxml2-update
[21.02] libxml2: update to 2.9.14
2022-06-01 07:38:59 +02:00
Michael Heimpold
f7a2a22249 libxml2: update to 2.9.14
This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab)
2022-05-31 22:04:10 +02:00
Michael Heimpold
9afd6ff023
Merge pull request #18630 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.19
2022-05-30 23:07:47 +02:00
Michael Heimpold
790036b75e php8: update to 8.0.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-05-29 11:02:54 +02:00
Hirokazu MORIKAWA
174f05eb08 node: bump to v14.19.3
Updates OpenSSL to 1.1.1o (No impact in openwrt)
Upgrade npm to v6.14.17.
etc...

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-05-26 19:22:55 -07:00
Andreas Erhard
ba9ed60fab vpnc: Update to 0.5.3+git20220517
The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb8cd43b765ba65e70a036820c03de83)
2022-05-25 18:58:47 -07:00
Christian Lachner
d686016f0b haproxy: Update HAProxy to v2.2.24
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2022-05-25 17:05:19 -07:00
Eneas U de Queiroz
89f637f877
audit: Fix compilation with kernel 5.15
Linux 5.15 does not have the linux/ipx.h header.

The patch is a partial cherry-pick (skipped ChangeLog) of upstream
commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx
header file existing").

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 7be14da0d5)
2022-05-20 23:06:45 +02:00
Jeffery To
7f94a82dbf bluez: Update to 5.64, update/refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d3cdfa3c30)
2022-05-20 12:15:05 -07:00
Rosen Penev
cfca43bd7c bluez: fix compilation with glibc
sync() is implemented now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit df8a0f324d)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-20 12:15:05 -07:00
Rosen Penev
50f3d089fb bluez: update to 5.62
Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3ee221d016)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-20 12:15:05 -07:00
Rosen Penev
30777cc241 bluez: update to 5.60
Switch to AUTORELEASE for simplicity.

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5c467bb76f)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-20 12:15:05 -07:00
Gerard Ryan
ad377dbf21 docker: Update to v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b05dac5671)
2022-05-20 12:13:21 -07:00
Gerard Ryan
9832944ccd dockerd: Update to v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 81dd38677b)
2022-05-20 12:13:21 -07:00
Gerard Ryan
36343b2949 libnetwork: Updated to 339b97 for docker v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 127aa63898)
2022-05-20 12:13:21 -07:00
Gerard Ryan
ba72423a4d containerd: Update to v1.6.4 for docker v20.10.16
* Overrode `PREFIX` to have the old behaviour

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 9a7e3c0b7b)
2022-05-20 12:13:21 -07:00
Gerard Ryan
7a4a0d384a runc: Update to v1.1.1 for docker v20.10.16
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 8cf4c156c4)
2022-05-20 12:13:21 -07:00
W. Michael Petullo
3970ec5f9f openldap: update to 2.4.58
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f200ccd6fc)

* remove a dead mirror
* use https
* fixes CVE-2021-27212

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-20 12:10:42 -07:00
David Bauer
5e9713802c usteer: update to latest HEAD
7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a)
2022-05-19 12:49:46 +02:00
Stan Grishin
04c1963e8d
Merge pull request #18362 from stangri/openwrt-21.02-https-dns-proxy
[21.02] https-dns-proxy: 2021-11-22-3: add support for Canary Domains
2022-05-19 12:00:48 +03:00
Jonathan Pagel
4e823fa9c7 telegraf: Update to version 1.22.4
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit f43a5f03bb)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-05-18 09:15:22 +02:00
Jeffery To
4882d012e2
Merge pull request #18544 from hexian000/openwrt-21.02
[openwrt-21.02] privoxy: update to 3.0.33 and fix the init script
2022-05-17 11:07:28 +08:00
Jeffery To
f46bbe6234 golang: Update to 1.17.10
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-05-16 06:27:16 -07:00
Jeffery To
32cb5b461c ci: Look for changed packages in the PR branch only
Fixes https://github.com/openwrt/packages/issues/15267.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac37)
2022-05-16 11:20:29 +02:00
He Xian
d110d19c5d privoxy: update to 3.0.33 and fix the init script
1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b9578)
2022-05-15 17:17:58 +08:00
Michal Vasilek
010e155408
lxc: export systemd cgroups after install
otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b950)
2022-05-15 07:29:51 +02:00
Michal Vasilek
07a36f7881 postgresql: security update to 13.7
* fixes CVE-2022-1552
* refresh a patch

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-05-14 21:34:19 -07:00
Nick Hainke
cece6220fb dawn: update to 2022-05-09
7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0)
2022-05-13 13:16:11 +03:00
Andy Dodd
28bbcf072f docker: Update to 20.10.14
Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit cd99c4cafb)
2022-05-11 17:51:41 -04:00
Andy Dodd
1c6913f8e3 dockerd: Update to 20.10.14, and update version checking mechanism
a7a7c732c0
changed package pinning from commit hash to version for some dependencies
(but not all, libnetwork is still referenced by commit)

Support the version-based pinning mechanism in addition to commit-based

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit c3166c5a22)
2022-05-11 17:51:41 -04:00
Andy Dodd
32570305ca containerd: Update to 1.5.11
Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit a134a23a07)
2022-05-11 17:51:41 -04:00
Michal Vasilek
631704f1d3 runc: update to 1.0.3
* fixes CVE-2021-43784

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a4423995a)
2022-05-11 17:51:41 -04:00
Jeffery To
b25da4c4bb
Merge pull request #18324 from jamesmacwhite/21.02-adguardhome-v0.107.6
[21.02] adguardhome: Update v0.107.6
2022-05-11 03:56:02 +08:00
Dirk Brenken
41e71ddf13
adblock: list maintenance
* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf)
2022-05-10 17:56:26 +02:00
Dirk Brenken
d16ebf9011
adblock: 4.1.3-8
* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec6069)
2022-05-10 17:56:13 +02:00
Dirk Brenken
852ad561d8
adblock: 4.1.3-7
* removed discontinued source 'gaming'
* changed url of source 'reg_kr'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bed70d5f4b)
2022-05-10 17:56:01 +02:00
Dirk Brenken
2e80f6fecd
adblock: 4.1.3-6
* remove discontinued sources: shallalist, stalkerware
* fix a logical glitch in startup trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 81d468489f)
2022-05-10 17:55:47 +02:00
Rosen Penev
c67ffde468
adblock: make reproducible
Need to get rid of the timestamp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5d095a1366)
2022-05-10 17:55:27 +02:00
John Audia
7e0a011f9f htop: update to 3.2.0
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit b4043d9225)
2022-05-09 23:35:01 +03:00
Michal Vasilek
88b89e8d42
youtube-dl: update to 2021.12.17
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163)
2022-05-06 19:10:20 +02:00
Josef Schlehofer
746f2e1f23
youtube-dl: update to version 2021.6.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fbe3079179)
2022-05-06 19:10:15 +02:00
David Bauer
614135653f usteer: update to latest HEAD
46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da6)
2022-05-06 08:43:09 +02:00
Matthias Schiffer
b9c04bf803
ecdsautils: update to v0.4.1
This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e582)
2022-05-05 18:47:40 +02:00
Josef Schlehofer
93aca6dfbe
hwdata: update to version 0.359
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 600eecbac6)
2022-05-04 18:12:02 +02:00
Rui Salvaterra
f573a9937b
tor: bump to 0.4.7.7 stable
The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)
2022-05-03 17:47:54 +02:00
Rui Salvaterra
c566bd79c9
tor: bump to 0.4.6.10 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790)
2022-05-03 17:47:50 +02:00
Rui Salvaterra
3848847039
tor: bump to 0.4.6.9 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 72974bed43)
2022-05-03 17:47:45 +02:00
Rui Salvaterra
f9d6632e6c
tor: bump to 0.4.6.8 stable
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 2997d2dcf5)
2022-05-03 17:47:41 +02:00
Rui Salvaterra
e963482cc6
tor: bump to 0.4.6.7
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit c12cb0cdde)
2022-05-03 17:47:36 +02:00
Rui Salvaterra
6556cf1030
tor: bump to 0.4.6.6 stable
Run-tested on mvebu/cortexa9 (tor-basic) without issues.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a45b962eef)
2022-05-03 17:47:27 +02:00
Tianling Shen
64f2b6bf6b rclone: Update to 1.58.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)
2022-05-01 09:21:16 -07:00
Tianling Shen
afd4a7beff libtorrent-rasterbar: Update to 2.0.6
Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b154)
2022-04-30 11:23:27 -07:00
Rosen Penev
b65afe72b1 libtorrent-rasterbar: update to 2.0.5
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 637ecf8c6a)
2022-04-30 11:23:27 -07:00
Rosen Penev
e15215463e libtorrent-rasterbar: update to 2.0.4
Backport patch fixing compilation with boost 1.77

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 19fcff0910)
2022-04-30 11:23:27 -07:00
Rosen Penev
77a328df70 libtorrent-rasterbar: update to 1.0.2
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fe4fe7d6e)
2022-04-30 11:23:27 -07:00
Tianling Shen
1a39f53112 yq: Update to 4.25.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 514ca20255)
2022-04-30 14:00:02 +02:00
Jonathan Pagel
53ff5a192a telegraf: upgrade to version 1.22.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit c5b668df5b)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-30 12:15:55 +02:00
Alexandru Ardelean
8b60367e15 django: bump to version 3.2.13
Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-29 15:27:56 -07:00
Hannu Nyman
12877669d5 nano: update to 6.3
Update nano editor to version 6.3

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e076a9a40d)
2022-04-29 19:15:31 +03:00
Jan Hák
95c0d6633b
knot: update to 3.1.7
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)
2022-04-28 23:37:30 +02:00
Michael Heimpold
5c04009ae7
Merge pull request #18392 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.18
2022-04-28 07:28:30 +02:00
Michael Heimpold
a4cf6a8857 php8: update to 8.0.18
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-26 21:16:47 +02:00
Jonathan Pagel
0d142ffd23 telegraf: Update to version 1.22.2
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a93b3baba1)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-26 10:54:16 +02:00
Tianling Shen
587caf22a7 xray-core: Update to 1.5.5
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee)
2022-04-25 23:31:00 -07:00
Nick Hainke
87f14264fe prometheus-node-exporter-lua: improve ubnt-manager
It is costly in transmissions to add all information to each metric.
Instead, only use the "device" as a label and add all other important
labels to the "uptime" metric.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 9f3064a11c)
2022-04-25 14:23:20 +02:00
Jeffery To
bccdd3c8d0
Merge pull request #18365 from turris-cz/ffmpeg
ffmpeg: update to version 4.3.4
2022-04-25 17:20:11 +08:00
Josef Schlehofer
959860dc47
git: update to version 2.34.3
Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d)
2022-04-25 11:18:43 +02:00
Josef Schlehofer
4bbef65e25
Merge pull request #18369 from jefferyto/golang-1.17.9-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.9
2022-04-25 11:11:25 +02:00
Jeffery To
636342ee43
golang: Update to 1.17.9
Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-25 13:52:56 +08:00
Stan Grishin
eada42ae27 https-dns-proxy: 2021-11-22-3: add support for Canary Domains
Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cb3b47be433f43838a109c326152ef86354fa8da)
2022-04-25 01:12:33 +00:00
Josef Schlehofer
51231fc5c6
ffmpeg: update to version 4.3.4
Changelog: https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n4.3.4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-04-24 15:19:36 +02:00
Luiz Angelo Daros de Luca
45426fa3d1 ruby: update to 3.0.4
Fixes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2022-04-23 10:31:37 +02:00
Petr Štetiar
4d34758b66 ci: use openwrt/gh-action-sdk@v4
[ Upstream commit b1355832a0 ]

In order to use feeds from GH mirror for GH actions, thus saving a lot
of resources being wasted.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-04-22 19:42:58 +02:00
Jeffery To
2a18d4fb3a
Merge pull request #18298 from jamesmacwhite/21.02-ooniprobe-v3.14.2
[21.02] ooniprobe v3.14.2
2022-04-23 01:28:55 +08:00
Niels Widger
edc9829bdc delve: Update to 1.8.2
See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
2022-04-22 17:45:13 +02:00
David Bauer
fe3e0493d1 usteer: update to latest HEAD
f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6b)
2022-04-22 02:15:19 +02:00
Matt Merhar
8995d3f025 python3-speedtest-cli: update to 2.1.3
This includes a fix for a breaking change in the Speedtest API.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 77ebd65f49)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 19:55:53 +02:00
James White
c41d8cadb8 adguardhome: Update v0.107.6
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73e)
2022-04-18 08:47:15 +01:00
James White
827c375331 ooniprobe: Update 3.14.2
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf)
2022-04-18 07:46:32 +01:00
Jan Pavlinec
04a580232b ooniprobe: update to version 3.10.1
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3f62bd9df1)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:35 +01:00
Jan Pavlinec
a33113111f ooniprobe: update to version 3.9.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit eda48170ec)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:26 +01:00
Jan Pavlinec
9f90da7366 ooniprobe: update to version 3.9.0
Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 354523d5b5)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:18 +01:00
Jan Pavlinec
918ca913b7 ooniprobe: update to version 3.8.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b2921628ab)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:11 +01:00
Jan Pavlinec
a11f9a412a ooniprobe: update to version 3.7.0
Changes:
-add Configure stage to prebuild resources

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17b18d825c)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:43:05 +01:00
Jan Pavlinec
915fed2604 ooniprobe: update to version 3.5.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3b25f4561f)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 07:42:58 +01:00
Tianling Shen
78bcd00c13 yq: Update to 4.24.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bedad06107)
2022-04-17 09:58:02 +02:00
Tianling Shen
8406439bdc yq: Update to 4.24.4
Updated GO_PKG due to upstream changes.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 07a29d211a)
2022-04-17 09:58:02 +02:00
Nick Hainke
754c075a8a prometheus-node-exporter-lua: fix ubnt-manager collector
Update the version and add ubnt-manager to the build section.

Fixes: 76f27975a9 (" prometheus-node-exporter-lua: add ubnt-manager collector ")

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 42e841039b)
2022-04-16 18:07:41 -04:00
Nick Hainke
8ac019e769 prometheus-node-exporter-lua: add ubnt-manager collector
Ubnt-manager-collector collects statistics from airos devices configured
in ubnt-manager.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 76f27975a9)
2022-04-16 18:07:41 -04:00
Nick Hainke
406abcbcc3 ubnt-manager: add ubnt-manager
This app makes it easier to work with AirOS devices. So far, only monitoring is implemented.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e4a8d3fc29)
2022-04-16 18:07:41 -04:00
Peter van Dijk
216a37d655 pdns-recursor: add patch for CVE-2022-27227
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-04-14 18:54:40 -07:00
Peter van Dijk
f618daa55f pdns: add patch for CVE-2022-27227
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
2022-04-14 18:54:40 -07:00
Michael Heimpold
8d1a786d5b
Merge pull request #18284 from mhei/21.02-php7-pecl-redis-update
[21.02] php7-pecl-redis: update to 5.3.7
2022-04-11 20:34:33 +02:00
Hannu Nyman
427f2f995a haveged: update to 1.9.18
Update haveged to version 1.9.18

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8579494bbb)
2022-04-11 18:26:39 +03:00
Michael Heimpold
25a2c9f702 php7-pecl-redis: update to 5.3.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-10 15:57:12 +02:00
Michael Heimpold
277f406b27
Merge pull request #18279 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.17
2022-04-10 15:53:53 +02:00
Michael Heimpold
4bc363a5b9
Merge pull request #18280 from mhei/21.02-php7-pecl-http-update
[21.02] php7-pecl-http: update to 3.2.5
2022-04-10 15:53:34 +02:00
Michael Heimpold
3094dfadde php7-pecl-http: update to 3.2.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-09 13:50:53 +02:00
Michael Heimpold
77dcb4c906 php8: update to 8.0.17
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-04-09 11:37:10 +02:00
Jonathan Pagel
e74e59d04f telegraf: Update to version 1.22.1
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 86b8b30683)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-04-09 09:34:00 +02:00
Florian Eckert
14d7e1608d keepalived: fix libip6tc dependency
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Rebase commit: nftables is not available
(cherry picked from commit eed4277d5c)
2022-04-08 09:04:35 +02:00
Florian Eckert
3fbe10e598 keepalived: add missing CONFIG_ prefix to PKG_CONFIG_DEPENDS elements
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Rebase commit: nftables is not available
(cherry picked from commit 209bcc649a)
2022-04-08 09:04:10 +02:00
Jeffery To
ef44037b76
Merge pull request #18229 from jamesmacwhite/adguardhome-v0.107.5-21.02
[21.02] Update adguardhome to latest stable v0.107.5
2022-04-08 01:18:04 +08:00
Alexandru Ardelean
b3d1cd75a4
Merge pull request #18225 from rs/nextdns-1.37.11-openwrt-21.02
[21.02] nextdns: Update to version 1.37.11
2022-04-06 09:08:13 +03:00
James White
bbb13556dc adguardhome: Update adguardhome to v0.107.5
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit b08aa72bad)
2022-04-03 09:00:50 +01:00
James White
19e621a432 adguardhome: Bump adguardhome to v0.107.3 stable
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 435733a899)
2022-04-03 09:00:41 +01:00
James White
d86d6d02b4 adguardhome: Update to v0.107.2 stable
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit a02d4f646f)
2022-04-03 09:00:31 +01:00
Olivier Poitrey
9fa3942a8d nextdns: Update to version 1.37.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-04-02 20:59:22 +00:00
Tianling Shen
894f58ceb7 yq: Update to 4.24.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3cbdc7e422)
2022-04-02 06:54:13 -07:00
Rosen Penev
fbcaa8bce8 ksmbd-tools: revert update to 3.4.4
This reverts commit 362c8c4df3.

This does not work with the kmod in tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-04-01 12:17:28 -07:00
Moritz Warning
7157e9b4d6 zerotier: revert to 1.8.4
This reverts commit 89cea2a6e7.
Zerotier 1.8.6 is broken on ipq806x.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-30 19:39:07 -07:00
Josef Schlehofer
3e53f0c881
vala: update to version 0.56.0 (LTS version)
According, to the project website [1], we were not using long-term
version, but stable one. Let's use LTS version.

Changelog can be found on their GitLab [2].

[1] https://wiki.gnome.org/Projects/Vala
[2] https://gitlab.gnome.org/GNOME/vala/raw/0.56/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 189f078a35)
2022-03-30 10:46:36 +02:00
Josef Schlehofer
384f983d53
vala: update to version 0.54.8
Changelog:
https://gitlab.gnome.org/GNOME/vala/raw/0.54/NEWS

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 474414dff1)
2022-03-30 10:45:59 +02:00
Rosen Penev
7be116683d
vala: update to 0.54.2
Remove shared libraries. Allows removing rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 575776cfa5)
2022-03-30 10:45:33 +02:00
Rosen Penev
601bee7bf9
vala: update to 0.52.3
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f42b5288f9)
2022-03-30 10:45:28 +02:00
Rosen Penev
8359d159fe
vala: update to 0.52.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d0b93ea224)
2022-03-30 10:45:23 +02:00
Daniel Golle
78aa0f6cac
pynacl: fix build with updated sodium-minimal patch
Commit 3da874371 ("libsodium: include ed25519_core in minimal build")
broke the build of PyNaCl. Add patch to always include all ed25519
functions which are now always covered even if libsodium is built with
the MINIMAL option.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ccd3b6c0a5)
2022-03-29 20:56:47 +02:00
Jeffery To
e6330a60e7 python3: Update to 3.9.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-27 12:40:55 -07:00
Jonathan Pagel
8142c9baf3 telegraf: Update to version 1.22.0 to openwrt 21.02
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 2c9c485822)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-03-27 12:39:06 -07:00
Tianling Shen
915018e39a rclone: Update to 1.58.0
Added missing call for rclone-config.

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 546af5266b)
2022-03-27 21:44:33 +03:00
Daniel Golle
cd3dc69d6b
gnunet-fuse: update to 0.16.0
Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np()
is now no longer used.
pthread_mutexattr_setkind_np() is deprecated and non-standard.
The standard version is called pthread_mutexattr_settype()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commits
 05eac1796d gnunet-fuse: update to version 0.14.0
 d59731ba61 gnunet-fuse: update to 0.16.0
)
2022-03-26 21:31:54 +00:00
Daniel Golle
add708f030
gnunet: update to version 0.16.2
Sync GNUnet package with master branch.
This is a new major release. It breaks protocol compatibility with the
0.15.x versions. Please be aware that Git master is thus henceforth
(and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network,
and interactions between old and new peers will result in issues.
0.15.x peers will be able to communicate with Git master or 0.16.x
peers, but some services - in particular GNS - will not be compatible.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commits
 deafd6cf3f gnunet: update to v0.14.1
 746bb95552 gnunet: update to version 0.15.3
 23b5b516ae gnunet: fix compilation with big endian
 c3c6a2ff1d gnunet: several improvements
 23f722f905 gnunet: packaging fixes
 2f8e696189 gnunet: update to 0.16.1
 f951f61005 gnunet: improve init script
 033744ac59 gnunet: update to 0.16.2
 65f5f850f3 gnunet: work-around sysupgrade restore missing file ownerships
)
2022-03-26 21:31:49 +00:00
Damiano Renfer
a62591148b
libsodium: update maintainer email address
Signed-off-by: Damiano Renfer <x9w2n7xnu@relay.firefox.com>
(cherry picked from commit 7c529bab91)
2022-03-26 21:31:41 +00:00
Daniel Golle
4f7fcd9279
libsodium: include ed25519_core in minimal build
Functions from ed25519_core are needed for GNUnet to build.
Include them in the minimal build of libsodium so we don't need to
switch to the full build just for that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3da874371b)
2022-03-26 21:31:32 +00:00
Josef Schlehofer
c04905dd90
Merge pull request #18145 from hauke/samba4
[21.02] Samba4 backports from master (Fix CVEs)
2022-03-26 20:46:04 +01:00
Andy Walsh
7deecb5d9f samba4: update to 4.14.12
* update to 4.14.12
* fixes: CVE-2021-44142, CVE-2022-0336

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 1fa70d6a3c)
2022-03-25 12:12:07 +01:00
Andy Walsh
71734db270 samba4: update to 4.14.11; fix AD_DC build
* update to 4.14.11
* fix AD_DC build
* add vfs_widelinks to defaults
* refresh patches
* fixes: #16697, #17692
* fixes: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 7730a65d30)
[Do not add dependency to python3-markdown and python3-dns]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2022-03-25 12:11:03 +01:00
Hannu Nyman
ee69afe6f1 nano: provide nano-full with most features enabled
Provide a new variant, nano-full, that enables almost
all functionality of nano. Only libmagic file type detection
has been left out.

Ship with a minimal /etc/nanorc that the user can modify.
nanorc documentation at
https://www.nano-editor.org/dist/latest/nanorc.5.html

Provide color highlighting for the uci config files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6a51794638)
2022-03-24 20:31:46 +02:00
Daniel Golle
951ef67479
netatalk: update to version 3.1.13
Please update to this latest release as soon as possible as this
releases fixes the following major security issues: CVE-2021-31439,
CVE-2022-23121, CVE-2022-23122, CVE-2022-23123, CVE-2022-23124,
CVE-2022-23125 and CVE-2022-0194.

Local patch '010-gcc10.patch' has been applied upstream and was hence
removed.

For a summary of news and a detailed list of changes see the
ReleaseNotes[1].

[1]: https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-24 17:50:40 +00:00
Josef Schlehofer
08a442fe9f
Merge pull request #18125 from 1715173329/x2
[openwrt-21.02] xray-core: Update to 1.5.4
2022-03-24 08:40:00 +01:00
Josef Schlehofer
cfb44b1472
Merge pull request #18124 from 1715173329/y2
[openwrt-21.02] yq: Update to 4.23.1
2022-03-24 08:39:51 +01:00
Josef Schlehofer
cfc7069b3f
Merge pull request #18123 from jefferyto/python-3.9.11-openwrt-21.02
[openwrt-21.02] python3: Update to 3.9.11, refresh patches
2022-03-23 09:11:14 +01:00
Tianling Shen
c2aeec5ef1
xray-core: Update to 1.5.4
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8fa16f40d)
2022-03-21 23:34:07 +08:00
Tianling Shen
5eb1ab8a6d
yq: Update to 4.23.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8d7b7fbfb4)
2022-03-21 23:32:04 +08:00
Jeffery To
a7a93cfcc8
python3: Update to 3.9.11, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-21 22:03:05 +08:00
David Bauer
762794d143 usteer: add package
This commits adds the new usteer package to the packages feed.

usteer is a daemon for steering wireless clients across frequency
bands as well as between multiple access points on a network.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-03-21 01:30:58 +01:00
Moritz Warning
89cea2a6e7 zerotier: update to 1.8.6
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
f7554858ec zerotier: update to 1.8.4
Also remove patch to fix uClibc-ng,
since it is not in openwrt anymore.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
7673192a9c zerotier: update to 1.8.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Moritz Warning
56c4570589 zerotier: update to 1.8.2
Update und switch back to release source package.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Oskari Rauta
614b4e003a zerotier: update to 1.8.1
Release notes:

1.8.0
 - Upgrade json.hpp dependency to version 3.10.2
 - Check if DNS servers need to be applied on macOS
 - Set MAC address before bringing up Linux TAP link
 - Stop binding to temporary IPv6 addresses
 - Fix for mistakenly using v6 source addresses for v4 routes on some platforms
 - Fix for MacOS MTU capping issue on feth devices
 - Implement a workaround for one potential source of a "coma" bug, which can occur if buggy NATs/routers stop allowing the service to communicate on a given port. ZeroTier now reassigns a new secondary port if it's offline for a while unless a secondary port is manually specified in local.conf. Working around crummy buggy routers is an ongoing effort.
 - A completely rewritten desktop UI for Mac and Windows!

1.8.1
 - Fix an issue that could cause clobbering of MacOS IP route settings on restart.
 - Added additional hardening against address impersonation on networks (also in 1.6.6).
 - MacOS IPv6 no longer binds to temporary addresses as these can cause interruptions if they expire.
 - Remove support for REALLY ancient 1.1.6 or earlier network controllers.
 - Fix numerous UI issues from 1.8.0 (never fully released).

Changed to git as source and added $(AUTORELEASE)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2022-03-21 00:25:10 +01:00
Chao Liu
52fcc9bf62 zerotier: add respawn procd param
Signed-off-by: Chao Liu <git@expiron.dev>
2022-03-21 00:25:10 +01:00
Moritz Warning
1e1d5f5d65 zerotier: add option to copy config
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-03-21 00:25:10 +01:00
Liangbin Lian
748d87c88e zerotier: fix cross compile in macOS
zerotier's Makefile use `uname` to detect target when cross compile
uname should always be 'linux'

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2022-03-21 00:25:10 +01:00
Josef Schlehofer
921af7fdda
Merge pull request #18103 from BKPepe/21.02-haproxy
haproxy: update to version 2.2.22
2022-03-19 04:02:05 +01:00
Josef Schlehofer
ac99fde549
haproxy: update to version 2.2.22
Fixes:
CVE-2022-0711

Changelog:
https://git.haproxy.org/?p=haproxy-2.2.git;a=blob;f=CHANGELOG;h=bfc5d6495e39ace56581663ce820e6909039a286;hb=bfc5d6495e39ace56581663ce820e6909039a286

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-18 21:00:56 +01:00
John Audia
ee4267e97f
tree: bump to 2.0.2
Update to latest upstream release.

Build system: x86_64
Build-tested: bcm2711/RPi4B
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit c333a5b8c5)
2022-03-18 20:49:57 +01:00
Chris Osgood
f01cf663b6 curl: Fix compiling curl wolfSSL IPv6 disabled
Fixes #18082

Signed-off-by: Chris Osgood <chris_github@functionalfuture.com>
(cherry picked from commit 4eb08bacf3)
2022-03-18 17:54:32 +01:00
Noah Meyerhans
185c5e365e bind: bump to 9.18.1
Fixes multiple security issues:

 * CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the
                    fetch had been shut down earlier
 * CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when
                    "synth-from-dnssec" was enabled
 * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
                    isc__nm_process_sock_buffer() to be called recursively,
                    which in turn left TCP connections hanging in the CLOSE_WAIT
                    state blocking indefinitely when out-of-order processing was
                    disabled.
 * CVE-2021-25220 -- The rules for acceptance of records into the cache
                     have been tightened to prevent the possibility of
                     poisoning if forwarders send records outside the
                     configured bailiwick

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 4c6ea5379c)
2022-03-18 08:25:18 -07:00
Rosen Penev
919dd80130
libnetfilter-log: update to 1.0.2
Remove all patches as they have been upstreamed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 28c1c0d24c)
2022-03-17 23:29:36 +01:00
Michael Heimpold
56fbb7f85e
Merge pull request #18083 from mhei/21.02-libxml2-update
libxml2: update to 2.9.13
2022-03-17 21:06:52 +01:00
Michael Heimpold
8e9f102235 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 81fd836f97)
2022-03-17 08:06:45 +01:00
Daniel Golle
793e7ee484 auc: don't segfault on invalid URL
Show error message instead of segfaulting in case of an invalid URL
being read from UCI config.

Fixes: #17971
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c0d2c82528)
2022-03-14 21:29:50 +00:00
Daniel Golle
31e2e7ccb8 auc: fall back to 'sdcard' image
Fallback to use 'sdcard' image in case there is neither 'sysupgrade'
nor 'combined' image available.
This allows using 'auc' on targets where 'sdcard' image is also used
for sysupgrade (such as some mvebu-based devices with eMMC).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6b041752a0)
2022-03-14 21:29:50 +00:00
Daniel Golle
8999b60db9 auc: accept both 'y' and 'Y' as confirmation from user
Accept both 'y' and 'Y' as positive confirmation when asking the user
if auc should proceed with requesting and installing an upgrade.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d27ecdcc49)
2022-03-14 21:29:50 +00:00
Daniel Golle
1adcda368e auc: add '-n' parameter for dry-run
Add option to allow only requesting an image but not actually download
or sysupgrade anything.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 19c135685f)
2022-03-14 21:29:50 +00:00
Paul Spooren
facfdaca20 attendedsysupgrade-common: update to 2021
* Use SPDX
* Use CA (ucert) public key
* Update repo link
* Update maintainer email
* Format description

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a54b9570ad)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-14 21:29:50 +00:00
Stan Grishin
44e763c62e
Merge pull request #18010 from stangri/openwrt-21.02-curl
[21.02] curl: update to 7.82.0
2022-03-14 14:29:14 -07:00
Josef Schlehofer
85b7d29c3e
Merge pull request #18037 from M95D/openwrt-21.02
tvheadend: bind to LAN IP by default
2022-03-14 17:57:29 +01:00
Tianling Shen
aa41482d38 yq: Update to 4.22.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b31615c63c)
2022-03-13 00:01:46 -08:00
Tianling Shen
8518b2d5d4 yq: Update to 4.21.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5529031602)
2022-03-13 00:01:46 -08:00
Josef Schlehofer
f550d90660
syslog-ng: update to version 3.36.1
- Bump version in config file

Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.36.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110d46eb37)
2022-03-12 06:51:24 +01:00
Marius Dinu
b2ec8c84fd tvheadend: bind to LAN IP by default
If config parameter is not set, tvheadend will bind to LAN IP address by default.
Fixes issue #16500 without requiring user modifications to config file. It's also more secure if firewall becomes disabled.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
(cherry picked from commit 95cbfe893b)
2022-03-10 10:43:44 +02:00
Liang Yang
e061d8eff4 dockerd: fix compilation with glibc
Signed-off-by: Liang Yang <ggg17226@gmail.com>
2022-03-09 02:15:07 -08:00
Liang Yang
fd30ce33f4 docker: fix compilation with glibc
Signed-off-by: Liang Yang <ggg17226@gmail.com>
2022-03-09 02:14:45 -08:00
George Iv
a11359b889 yggdrasil: bump to 0.4.3
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit ed49a0bd3a5b482bf35310c9dfdcbb9bf8cefd26)
2022-03-08 22:02:05 -08:00
R4SAS I2P
1d7d46db04 i2pd: Update package
* Update to 2.41.0
* Added use AUTORELEASE

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit c08bb2df62)
2022-03-08 21:59:33 -08:00
R4SAS I2P
c384dbb19b i2pd: add service reload support
Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit b9000cf231)
2022-03-08 21:59:33 -08:00
Thibaut VARÈNE
938187fa2e coova-chilli: remove kmod dep on binary package
There is no reason for the kmod to depend on the binary package
itself, neither for building nor for installing.

That dependency prevents phase1 from building the kmod even though
support is enabled in the binary.

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit 385923321b)
2022-03-08 21:58:59 -08:00
Gerard Ryan
109f2770a1 cache-domains: Fixed hotplug script not running
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-03-08 21:55:35 -08:00
Stan Grishin
6df8f76efc
Merge pull request #18019 from rs/nextdns-1.37.10-openwrt-21.02
[21.02] nextdns: Update to version 1.37.10
2022-03-07 13:35:41 -08:00
Josef Schlehofer
aef82c58d2
Merge pull request #18012 from jefferyto/golang-1.17.8-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.8
2022-03-07 21:40:24 +01:00
Olivier Poitrey
5562cef265 nextdns: Update to version 1.37.10
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2022-03-07 19:48:05 +00:00
Jeffery To
5f20a91711
golang: Update to 1.17.8
Includes fix for CVE-2022-24921 (regexp: stack overflow (process exit)
handling deeply nested regexp).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9704e900da)
2022-03-07 15:44:40 +08:00
Stan Grishin
1a0cb5ce4a curl: update to 7.82.0
* changelog: https://curl.se/changes.html#7_82_0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 38b3a5f857)
2022-03-07 07:16:40 +00:00
Jeffery To
701ca25325
python-twisted: Update to 22.2.0
Includes fix for CVE-2022-21716 (The Twisted SSH client and server
implementation naively accepted an infinite amount of data for the
peer's SSH version identifier.)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 630d6800f2)
2022-03-06 23:37:33 +01:00
Jeffery To
4c07483961
python-twisted: Update to 22.1.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f3816d1c6)
2022-03-06 23:37:28 +01:00
Maarten Aertsen
3e75dc582e mdnsresponder: Fix nullpointer dereference while parsing interface list
This patch was backported from https://github.com/IETF-Hackathon/mDNSResponder/commit/1fb07b9524b4afed3a826c087db4dc48a7bfdb8

(cherry picked from commit a4b33ab169a3ca60cd12c2eb5155e899779d3570)
Signed-off-by: Maarten Aertsen <spam-github@rtsn.nl>
2022-03-06 13:08:52 +01:00
Josef Schlehofer
17a7ed325c
Merge pull request #17986 from CyberMind-FR/crowdsec-firewall-bouncer-remove-crowdsec-depency
[21.02] crowdsec-firewall-bouncer: remove crowdsec package dependency
2022-03-04 14:12:25 +01:00
Kerma Gérald
9722b1ec0b crowdsec-firewall-bouncer: remove crowdsec package dependency
Remove un-necessary crowdsec package dependency, to be able to use
crowdsec-firewall-bouncer independently from crowdsec local installation.
(with remote API)

Fix issue: https://github.com/openwrt/packages/issues/17406

Description:
  using crowdsec-firewall-bouncer on many OpenWRT devices connected
  with my domain LAPI server (which collect many crowdsec machines,
  mostly nginx), it works great. Actually, crowdsec package is not
  mandatory for that usage, it would be great if it was not a dependency.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit ffd97e173c)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-03-04 13:53:47 +01:00
Chao Liu
5b51bb3a5e kcptun: bump to v20210922
Signed-off-by: Chao Liu <git@expiron.dev>
2022-03-02 16:31:47 -08:00
Rosen Penev
81ed00124b samplicator: fix Wformat warning
Wrong type.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 97cbb3d20a)
2022-02-28 11:52:05 +01:00
Nikos Mavrogiannopoulos
da82b8c9c8 ocserv: updated to 1.1.6
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-25 23:53:10 +01:00
Nikos Mavrogiannopoulos
a8b73c2505 openconnect: updated to 8.20
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-25 23:31:00 +01:00
Tianling Shen
e208f42c57 yq: Update to 4.20.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 7254169b12)
2022-02-24 14:33:16 -08:00
Josef Schlehofer
e2bf8e1d80
MarkupSafe: update to version 2.1.0
Changelog:
https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d10b0836d)
2022-02-24 15:47:23 +01:00
Rosen Penev
41fe385fd0 domoticz: update to 2021.1
Remove outdated patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit edfb91f334)
2022-02-24 00:26:13 -08:00
Rosen Penev
e9dee2684b minizip: update to 3.0.2
Add back compat header as domoticz really wants it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 953e23b0e6)
2022-02-24 00:26:13 -08:00
Rosen Penev
697115688f minizip: update to 3.0.1
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ac671880d)
2022-02-24 00:26:13 -08:00
Rosen Penev
adc6fcc88c minizip: update to 3.0.0
Switch to new upstream and switch package name.

Further disable features to avoid extra dependencies.

Build with PIC to avoid build failures with mips16.

Remove no longer needed patch. Upstream fixed it differently.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3b812f93d6)
2022-02-24 00:26:13 -08:00
Michal Vasilek
584c0c4378 expat: import patches for CVEs
* import patches for CVEs from alpine 3.13

CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-23852, CVE-2022-23990
CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-02-23 17:00:09 -08:00
W. Michael Petullo
5f3226dc14
nfdump: update to 1.6.23
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a64e94bd46)
2022-02-23 23:03:55 +01:00
Jo-Philipp Wich
e7715b18bc htpdate: drop www.freebsd.org from default server list
The FreeBSD project stopped publishing HTTP date headers and seeks to
limit further resource taxing by distributed htpdate clients using the
www.freebsd.org host as default time source.

Fixes: #17924
Reported-by: Allan Jude <allanjude@freebsd.org>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit e871318002)
2022-02-22 23:35:29 +01:00
Hannu Nyman
4d0e0f4141 nano: update to 6.2
Update nano to 6.2.
Remove inactive second maintainer.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a3f14c5114)
2022-02-22 19:22:37 +02:00
Josef Schlehofer
45009c3408
unbound: update to version 1.15.0
Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2abe98e134)
2022-02-20 00:47:59 +01:00
Tianling Shen
9ba9579a16 yq: Update to 4.20.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1578ea4383)
2022-02-19 15:35:02 -08:00
Michael Heimpold
abb5b988cb
Merge pull request #17900 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.16
2022-02-19 13:22:38 +01:00
Michael Heimpold
a675d0ca54
Merge pull request #17899 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.28
2022-02-19 13:22:31 +01:00
Michal Hrusecky
a5de4042c1
pcapplusplus: Add new package
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and
crafting of network packets. It is designed to be efficient, powerful
and easy to use. It provides C++ wrappers for the most popular packet
processing engines such as libpcap, WinPcap, DPDK and PF_RING.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2d8e396be3)
2022-02-19 11:34:59 +01:00
Josef Schlehofer
c29cdb2512
Merge pull request #17895 from jefferyto/slide-switch-0.9.7-openwrt-21.02
[openwrt-21.02] slide-switch: Update to 0.9.7
2022-02-18 23:43:52 +01:00
Jan Hoffmann
10a8054925
vnstat2: update to version 2.9
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 948f0d29cc)
2022-02-18 23:25:59 +01:00
Jan Hoffmann
42f35cdda7
vnstat2: add hotplug script for adding interfaces
If an interface doesn't exist yet when vnStat is started, it won't be
monitored, as only existing interfaces can be added to the database via
the vnstat command.

This adds a hotplug script which adds any configured interfaces to the
vnStat database when it goes up.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit f9ea814260)
2022-02-18 23:25:53 +01:00
Jan Hoffmann
f8820d2aeb
vnstat2: fix all interfaces being monitored when none are configured
By default, vnstatd adds all available interfaces on startup when its
database is empty. The --noadd option prevents this, but it breaks
import of legacy databases, and causes vnstatd to exit immediately
after startup, which breaks reloading.

This changes the init script to add the --noadd option when no legacy
databases need to be imported, and patches vnstatd to keep running
even when no interfaces are configured.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit ecae7dedde)
2022-02-18 23:25:49 +01:00
Jan Hoffmann
86f85cde4f
vnstat2: update to version 2.8
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
(cherry picked from commit 73fff7a4ed)
2022-02-18 23:25:44 +01:00
Michael Heimpold
f4a390c59b php7: update to 7.4.28
This fixes:
    - CVE-2021-21708

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-02-18 22:40:53 +01:00
Michael Heimpold
5eb97e05e2 php8: update to 8.0.16
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-02-18 22:36:10 +01:00
Jeffery To
b409127e6e
slide-switch: Update to 0.9.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 12930f4ec3)
2022-02-19 03:36:48 +08:00
Hauke Mehrtens
b0ccc35690
Merge pull request #17866 from neheb/1
[21.02] ksmbd: update to 3.44
2022-02-17 17:57:20 +00:00
Jeffery To
4919a791ae golang: Update to 1.17.7, refresh patch
This includes fixes for:

* CVE-2022-23772: math/big: Rat.SetString may consume large amount of
  RAM and crash

* CVE-2022-23806: crypto/elliptic: IsOnCurve returns true for invalid
  field elements

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 69c53fcb6c)
2022-02-15 16:42:24 -08:00
Marius Dinu
43276c6494 tvheadend: fix first-run
The first-run command should create a new tvheadend configuration including an admin account with no name and no password, but it aborts (-A) too early without saving the files. I reported the bug here: https://tvheadend.org/issues/6140
This workaround fixes the problem by removing the tvheadend -A switch and replacing it with a 10s delay and a kill signal. That should be enough even for slow routers to generate and save the configuration. It is meant to be a temporary fix until tvheadend bug is resolved.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
2022-02-15 13:07:16 -08:00
Rosen Penev
362c8c4df3 ksmbd-tools: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3ffd540b04)
2022-02-14 19:54:11 -08:00
Georgi Valkov
41ca56ff2b ksmbd-tools: Fix ksmbd service is semi-killed at system startup
The configuration for the ksmbd service is auto-generated when
the OpenWRT configuration changes, and also during startup,
hence ksmbd.init has to reload the kernel module. It does that by
calling kill_server, which does not perform cleanup. This results
in ksmbd being killed but not restarted properly during boot.
This patch resolves the issue by using stop_service, which performs
proper cleanup.

https://forum.openwrt.org/t/ksmbd-samba3-4-alternative-ex-cifsd-smbd-package-support-thread/51695/68

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
(cherry picked from commit 4af04cdc05)
2022-02-14 19:54:11 -08:00
Rosen Penev
c4bb2fadc7 ksmbd: update to 3.4.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4adeed4879)
2022-02-14 19:51:24 -08:00
Marcos Del Sol Vives
06ffe5c4da ksmbd: update to 3.4.2
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
(cherry picked from commit 2b48a6952a)
2022-02-14 19:51:24 -08:00
Rosen Penev
c7e0be3a39 ksmbd: update to 3.4.1
Add AUTORELEASE as 19.07 compatibility is not needed.

Add dependency hacks and add comments.

Add upstream patch to get rid of FS_POSIX_ACL requirement.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c732305ad3)
2022-02-14 19:51:24 -08:00
Gerard Ryan
d5f5882681 dockerd: Update to 20.10.12
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-02-12 15:11:00 -08:00
Gerard Ryan
66dda3aa22 docker: Update to 20.10.12
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2022-02-12 15:11:00 -08:00
Tianling Shen
845d2203bd yq: Update to 4.19.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4454f8bb3e)
2022-02-10 15:58:52 -08:00
Rafał Miłecki
4e8267602b dtc: drop package
It has been imported as core package into OpenWrt repository. Its fdtget
is required by sysupgrade on U-Boot devices so it couldn't live in an
extra feed.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit c8d4c89daa)
2022-02-10 23:23:21 +01:00
Jan Hák
845b9a1dfe
knot: update to 3.1.6
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 4de863e418)
2022-02-10 02:00:36 +01:00
Jan Hák
d286939b73
knot: update to 3.1.5
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 2a56e478f5)
2022-02-10 02:00:30 +01:00
Hannu Nyman
38eaee3476 nano: update to 6.1
Update nano to version 6.1.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 717efb8c96)
2022-02-09 18:27:58 +02:00
Tianling Shen
0329b2c11d xray-core: Update to 1.5.3
Removed outdated `alterId` in sample config.

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d8d261fe2d)
2022-02-07 21:26:22 -08:00
Michal Vasilek
d18542ecf7 ruby: update to 3.0.3
* fixes CVE-2021-41817, CVE-2021-41816 and CVE-2021-41819

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 51cf0dc2cc4b159bc80b70c90ed1c1abe1f59936)
2022-02-06 08:54:38 -03:00
Stan Grishin
1431f6231c
Merge pull request #17812 from stangri/openwrt-21.02
[21.02] https-dns-proxy: init script refactoring
2022-02-05 22:12:14 -08:00
Stan Grishin
a507620a18 https-dns-proxy: init script refactoring
* consolidate dnsmasq config manipulation into one function
* more elegant code for PROCD data processing (Thanks @jow-!)

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 88265c4fb9)
2022-02-06 06:01:00 +00:00
Jeffery To
5dcf0b57cd slide-switch: Update to 0.9.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c5e0785795)
2022-02-05 08:18:06 -08:00
Josef Schlehofer
4bd6bc41c9
ffmpeg: update to version 4.3.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a68e9db8d4)
2022-02-05 10:23:28 +01:00
Michal Vasilek
ac4ecdf85e
tinyionice: add package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bb801a5a6f)
2022-02-04 15:36:15 +01:00
Tianling Shen
1a40a0a0b8 yq: Update to 4.18.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c665f0b50c)
2022-02-04 06:28:06 -08:00
Tianling Shen
32e85322c5 yq: Update to 4.17.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 029b37aad0)
2022-02-04 06:28:06 -08:00
Josef Schlehofer
68571069e1
Merge pull request #17737 from JonnyTischbein/telegraf-1.21.3-openwrt_21.02
telegraf: add package version 1.21.3 to openwrt 21.02
2022-02-03 16:24:02 +01:00
Josef Schlehofer
675755537a
apache2: security update to version 2.4.52
Fixes CVEs:
- CVE-2021-44790
- CVE-2021-44224

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6c6c99ffb5)
2022-02-03 12:57:17 +01:00
Noah Meyerhans
74f9ae0286 bind: bump to 9.18.0
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 127ef1207b)
2022-02-02 09:20:10 -08:00
Stan Grishin
b7374630e1
Merge pull request #17764 from stangri/openwrt-21.02
[21.02] https-dns-proxy: update to 2021-11-22-1
2022-02-02 09:12:45 -08:00
Kerma Gérald
b29655996d crowdsec: update from latest upstream release 1.3.0
Changes (from 1.2.3):
https://github.com/crowdsecurity/crowdsec/compare/v1.2.3...v1.3.0

(cherry picked from commit d2fd1f8346)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-02-02 07:24:22 -08:00
Nick Hainke
3b28c6f389 wg-installer: use babeld add_interface function
With commit 385200443554 ("babeld: add add_interface function") babeld
has a new ubus function allowing to dynamically add an interface.

Before the add_interface function, we were required to reload babeld.
The reload influenced the babeld routing. However, the remove part is
still missing and will be added at a later stage.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 40b87aac95)
2022-02-02 11:10:19 +01:00
Kerma Gérald
1026a1fd4e crowdsec-firewall-bouncer: fix name in initd to start the process
crowdsec rename the binary from crowdsec-firewall-bouncer to cs-firewall-bouncer
the initd need the correct binary name to start the process
the link for github source need also to be fixed (only the information one)
fix the BuildDate
updated copyright

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit d6b116cb43)
2022-02-02 08:09:01 +01:00
Hannu Nyman
9137583d3d nano: Add a plus variant with more features
Nano is by default built as "tiny" with most features disabled.
That is suitable for basic tasks in routers with small flash.

Add a new nano-plus variant that enables selected additional
features in the build config:
 * multiple files (multibuffer)
 * Unicode/utf8
 * justify
 * .nanorc support
 * help
 * also some key bindings get enabled as "tiny" configure option
   is removed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 85cb71d8d8)
2022-02-01 23:41:59 +02:00
Stan Grishin
2cd8928796 https-dns-proxy: update to 2021-11-22-1
* update to 2021-11-22 upstream source
* update patch file
* update init script to preserve manual entries
	(fixes https://github.com/stangri/source.openwrt.melmac.net/issues/149)
* update init script service_triggers

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1e5e7ce469)
2022-01-31 22:36:27 +00:00
Nick Hainke
8d8cf26286 dawn: update to 2022-01-17
877e2dc iwinfo: fix get_bandwidth_iwinfo
9ce01ec datastorage: fix multi-SSID
9187665 treewide: improve maintaince
6bf9b6d memory: Tighten up some memory handling to help spot errors
4df0c98 treewide: improve logging

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 7cb73ae3b9)
2022-01-31 15:40:38 +01:00
Josef Schlehofer
f921cc4b74
python-dns: update to version 2.1.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 447c6fd57b)
2022-01-31 06:26:58 +01:00
Josef Schlehofer
df7568303b
prosody: update to version 0.11.13
Fixes CVEs:
- CVE-2022-0217
- CVE-2021-37601
- CVE-2021-32918
- CVE-2021-32920
- CVE-2021-32921
- CVE-2021-32917
- CVE-2021-32919

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dcedbe8027)
2022-01-31 00:05:03 +01:00
Jonathan Pagel
14b623f73f telegraf: Update package to version 1.21.3
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 912bb2c803e7e6d1c0020a59e08fab72d077a7a7)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-31 00:00:08 +01:00
Jonathan Pagel
82c35fa92f telegraf: Move config file to /etc/telegraf.conf because
/etc/config is the default uci folder. Also marking it as
configuration file prevents overwriting it on updates.

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit abb33331e532b1de40adea6553589770b3e9ddb9)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-30 23:59:33 +01:00
Jonathan Pagel
989aecf2bb telegraf: Add package for telegraf
Telegraf is a plugin-driven agent for collecting and sending metrics
and events. It supports various inputs (including prometheus
endpoints) and is able to send data into InfluxDB.
https://www.influxdata.com/time-series-platform/telegraf/

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 0781a15c932187788a69d9a3eb005062fb8eaf7b)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
2022-01-30 23:59:25 +01:00
Bernd Kuhls
299684dd5c
ffmpeg: update to 4.3.2
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
(cherry picked from commit 900a146de3)
2022-01-29 11:30:18 +01:00
Josef Schlehofer
213aaa1f32
clamav: update to version 0.104.2
Backported upstream pending pull request to fix following error:

CMake Error at /foo/staging_dir/host/share/cmake-3.19/Modules/FindPackageHandleStandardArgs.cmake:218 (message):
  Could NOT find CURSES (missing: CURSES_LIBRARY)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit eddbb64bc9)
2022-01-28 17:35:19 +01:00
Lucian Cristian
9c476ee993
clamav: update to 0.104.0
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 44eb2ae619)
2022-01-28 14:16:35 +01:00
Hirokazu MORIKAWA
2941963033 node: January 10th 2022 Security Releases
Update to v14.18.3

January 10th 2022 Security Releases:
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531)
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532)
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533)
Prototype pollution via console.table properties (Low)(CVE-2022-21824)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8278998e48)
2022-01-25 09:50:18 +01:00
Josef Schlehofer
fc835bcaac
tvheadend: fix conffiles section
The previous one was wrong, and it did not work. It could be checked
inside compiled package in control.tar.gz that there was missing
``conffiles`` file with content `/etc/config/tvheadend`

It is also possible to verify that the config is not overwritten on the router
by running ``opkg install tvheadend --force-reinstall``

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 752d1ffc28)
2022-01-25 09:00:53 +01:00
Glenn Strauss
48bf1a0d0d
lighttpd: update to lighttpd 1.4.64 release hash
remove long-deprecated modules

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 3badd76668)
2022-01-24 15:19:03 +01:00
Glenn Strauss
82339309f5
lighttpd: update to lighttpd 1.4.63 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 35dff58b3a)
2022-01-24 15:18:59 +01:00
Glenn Strauss
527f2b920f
lighttpd: update to lighttpd 1.4.62 release hash
depend on libpcre2 instead of libpcre

also remove patches incorporated upstream into lighttpd 1.4.62

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit ddecac45c8)
2022-01-24 15:18:54 +01:00
Josef Schlehofer
4f990b7cd6
tvheadend: fix typo in uriparser
Fixes: 0449c109e7 ("tvheadend: disable
uriparser")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5879260515)
2022-01-24 12:25:45 +01:00
Michael Heimpold
aa2c1a9937
Merge pull request #17677 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.15
2022-01-24 07:45:04 +01:00
Nick Hainke
aeb8aad5c0 wg-installer: fix multiple namespaces
Add flag "--lookup-default-namespace" to signal that wg-installer should
look already established wireguard sessions in the default namespace.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 94efdcf02a)
2022-01-23 18:09:51 +01:00
Michael Heimpold
e29f386508 php8: update to 8.0.15
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-01-22 21:24:37 +01:00
Josef Schlehofer
d7c78f83be
tvheadend: disable uriparser
This avoids to add liburiparser as dependency.

Package tvheadend is missing dependencies for the following libraries:
liburiparser.so.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0449c109e7)
2022-01-22 14:37:57 +01:00
Jeffery To
c7f25b25df python3: Update to 3.9.10, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-20 20:48:55 -08:00
Nick Hainke
b9bfe1ef15 wg-installer: remove unused dependency
Remove the dependency "coreutils-realpath" from
wg-installer-server-hotplug-olsrd.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fab86eb626)
2022-01-20 22:22:53 +01:00
Nick Hainke
9a836f4307 wg-installer: create wireguard key if it does not exist
Check if the key exists which is given by
    option wg_key '/etc/wgserver/wg.key'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 324fa79d7c)
2022-01-20 15:12:22 +01:00
Nick Hainke
317ba6a43e wg-installer: install cronjob
Install a cronjob that removes unused wireguard interfaces every 10
minutes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 432a965689)
2022-01-20 13:57:46 +01:00
Nick Hainke
a430932a7d wg-installer: check if a key is already inserted
Check if a peer is already existing with a given public key. Introduce a
response code for signaling why the server rejected the request.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da48bc3792)
2022-01-20 13:57:46 +01:00
Nick Hainke
0aaa90629c wg-installer: rework code
Use shellcheck to rework the code. Use "export" to return variables from
a function call. Further, fix typos.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 69c81790d1)
2022-01-20 13:57:46 +01:00
Nick Hainke
dea64c08ea wg-installer: cosmetic changes
Use "ip addr" instead of "ip addres" or "ip a".

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 38a9a3e0dc)
2022-01-20 13:57:46 +01:00
Josef Schlehofer
444b64e36c
cryptsetup: update to version 2.4.3
Fixes: CVE-2021-4122

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a2427edf76)
2022-01-19 11:20:07 +01:00
Josef Schlehofer
a259a4aaaa
git: update to version 2.34.1
- Refreshed patches

- Release notes 2.34.0:
2ae0a9cb82/Documentation/RelNotes/2.34.0.txt

- Release notes 2.34.1:
2ae0a9cb82/Documentation/RelNotes/2.34.1.txt

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 042bf16072)
2022-01-19 11:20:01 +01:00
Kerma Gérald
0cdffbaf95 crowdsec: update from upstream latest release 1.2.3
update from latest upstream release 1.2.3
updated copyright

(cherry picked from commit de41b63ca4)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-18 18:06:54 -08:00
Moritz Warning
031fbb16a3 smcroute: update to 2.5.5
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Moritz Warning
fcf1633351 smcroute: update to 2.5.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2022-01-17 21:08:50 -08:00
Jeffery To
0a250df810
Merge pull request #17619 from erdoukki/21.02-2to3
[21.02] 2to3: add package host tool
2022-01-17 19:10:26 +08:00
Nick Hainke
c7470d1d8e wg-installer: switch to ubus call for olsrd hotplug
Use ubus ipc calls to add and remove interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit b89eb0115f)
2022-01-17 09:42:06 +01:00
Nick Hainke
8c3ce87fd2 wg-installer: rework iproute2 commands
- Use ip address add instead of ip a a
- Directly add broadcast address

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit fea27cec05)
2022-01-17 09:42:06 +01:00
Kerma Gérald
3f88edfa54 2to3: add package host tool
2to3 is a Python program that reads Python 2.x source code and applies a
  series of fixers to transform it into valid Python 3.x code. The standard
  library contains a rich set of fixers that will handle almost all code. 2to3
  supporting library lib2to3 is, however, a flexible and generic library, so it
  is possible to write your own fixers for 2to3. lib2to3 could also be adapted
  to custom applications in which Python code needs to be edited automatically.

This tool is necessary for fail2ban package because of issue
  https://github.com/openwrt/packages/issues/17311
  https://github.com/openwrt/packages/pull/17341

Simple 2to3.py script from Debian, thanks to Matthias Klose <doko@ubuntu.com>
From: https://salsa.debian.org/cpython-team/python3-defaults

(cherry picked from commit 2f91e1c9c5)
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-15 20:53:30 +01:00
Paul Spooren
bb09bc37b2 CI: fix runtime testing for non master branch
The runtime testing always ran on master branch aka snapshots since the
branch wasn't passed over to the container execution!

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit f535d77090)
2022-01-15 11:30:59 +01:00
R4SAS I2P
bbd3d70cd4
i2pd: Update to 2.40.0 and update package sources
* Updating i2pd package to 2.40.0
* Rewrite Makefile
* Remove usage of PKG_INSTALL (package's make install)
* Rewrite init.rc configuration and script
* Remove '--service' option from init, which only sets datadir to /var/lib/i2pd
* Use '--datadir' option in init, otherwise datadir changing via uci is not works
* Update patch for i2pd.conf

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit ac27fffff9)
2022-01-15 09:02:21 +01:00
Dirk Neukirchen
19d32003c2
i2pd: remove unneeded functions.sh
its included via rc.common, see
https://openwrt.org/docs/guide-developer/config-scripting

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 266deb5866)
2022-01-15 09:02:15 +01:00
R4SAS I2P
8d150985c4
i2pd: Update to 2.38.0
Remove USE_AVX and USE_AESNI make options as it is correclty handled by
internal code.

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
(cherry picked from commit 1025dd7c76)
2022-01-15 08:59:38 +01:00
Dirk Neukirchen
5ee9fb98dd
i2pd: update to 2.36
remove AVX patches as upstream has integrated and closed
all AVX issues

compiled on :  x86-64, i386 generic
tested on : x86-64 VM, i386 VM

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit fc7d710e62)
2022-01-15 08:59:34 +01:00
Michal Hrusecky
d0bb487412
mariadb: Add sudo dependency
During update we use sudo to start an instance. It probably could be
workarounded, but given the MariaDB size, dependency on sudo shouldn't
be an issue.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 0ffec9bd4b)
2022-01-14 16:30:25 +01:00
Michal Hrusecky
f4d8f9c98f
mariadb: Check and fix datadir owner issues during upgrade
If you are migrating to MariaDB package, you might have old datadir
stored somewhere using different setup with different users. If you
trust us enough to enable autoupgrade, you probably trust us enough to
chown your datadir as well. This can prevent some potential issues.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit b41525cef4)
2022-01-14 16:28:29 +01:00
Josef Schlehofer
e86528676b
Merge pull request #17603 from BKPepe/mariadb-bump
mariadb: update to version 10.4.22
2022-01-14 13:14:53 +01:00
Josef Schlehofer
7a3f41af4d
mariadb: update to version 10.4.22
Fixes: CVE-2021-35604

Removed two patches:
130-c11_atomics.patch - included in upstream now [1]
140-mips-connect-unaligned.patch - included in upstream, too. [2]

[1] f502ccbcb5 (diff-6ef8fc82162068daeab927be94e246b202eb39323a102273b9448219da24172f)
[2] a33c1082da (diff-821e2c7a49184a660339b094f437fcd1e9aea997a86391467a657088234ebca0)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-01-13 14:52:05 +01:00
Hirokazu MORIKAWA
d3e6dc51ee mg: bump to 7.0
This is mg as it appears in OpenBSD 7.0.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2022-01-13 10:41:20 +01:00
Jo-Philipp Wich
15b41a6751
zerotier: add configuration reload trigger
Ensure that the zerotier service is automatically restarted when the uci
configuration is modified.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 04d0e45da1)
2022-01-13 10:40:32 +01:00
James White
2bca94d83e
netdata: Update init script to use -D rather than -nd
The current init script is using the deprecated -nd flag. This updates netdata to be started with -D.

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit cf9d5a8870)
2022-01-13 10:39:28 +01:00
Josef Schlehofer
c7fef6db56
atlas-probe: update to version 2.4.1
Removed patches:
001-fix-stime-glibc-remove.patch - it is included in upstream
003-Fix-compilation-with-gcc11.patch - no longer necessary

Updated patches:
002-Avoid-problems-with-64-bit-time_t.patch

Refreshed patches:
004-Comment-out-librt-testing.patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cf65ca2db0)
2022-01-13 10:18:10 +01:00
Josef Schlehofer
98c1fe435c
atlas-sw-probe: update to version 5040
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ec767eb499)
2022-01-13 10:17:53 +01:00
Kerma Gérald
1a40e3c89c crowdsec-firewall-bouncer: update to 0.0.21
Update crowdsec-firewall-bouncer to latest upstream release version 0.0.21

Makefile rework
- use tagged version for download

Fixes
- set API_KEY in firewall bouncer config file

(cherry picked from commit b4f48b5c23)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-13 10:15:11 +01:00
Kerma Gérald
432140a36e crowdsec: update to 1.2.2
Update crowdsec to latest upstream release version 1.2.2

Makefile rework
- use tagged version for download

(cherry picked from commit 2a34e4987b)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-13 10:15:01 +01:00
Sebastian Kemper
b5443ccdf0
apache: fixup apxs
apxs is used to get information about the apache installation when
building external modules. Currently there are issues:

1.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
apache2
apxs:Error: ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/apr-1-config not found!.

This error is fixed by sed script #2.

2.

./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
cannot open ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/share/apache2/build/config_vars.mk: No such file or directory at ./staging_dir/target-mips_24kc_musl/usr/bin/apxs line 213.

This error is fixed by sed scipt #1.

Both sed scripts taken from buildroot (see [1]).

[1] https://github.com/buildroot/buildroot/blob/master/package/apache/apache.mk

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 83d1cdaf3f)
2022-01-13 10:10:49 +01:00
Sebastian Kemper
19451ec864
apache: security bump to 2.4.51
Fixes (see [1] for details):

  CVE-2021-33193
  CVE-2021-41524
  CVE-2021-41773
  CVE-2021-42013

[1] https://httpd.apache.org/security/vulnerabilities_24.html

Patch 020-openssl-deprecated.patch refreshed.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit da4b1ca8d6)
2022-01-13 10:10:45 +01:00
Nick Hainke
6fe1b64e7a wg-installer: fix shell typo
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 53503c4a3a)
2022-01-12 22:43:41 +01:00
Nick Hainke
f21f39cfd8 wg-installer: allow defining link costs for hotplugs
Add options to set link costs in mesh routing daemons.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee879d3747)
2022-01-12 18:28:12 +01:00
Nick Hainke
9952517460 wg-installer: private key as parameter
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 6a59d41fbf)
2022-01-12 09:13:29 +01:00
Nick Hainke
652ebf1a33 wg-installer: generate new keys for every connection
Generate new keys on every new connection.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8ab044712a)
2022-01-12 09:13:29 +01:00
Jeffery To
5f517cc584 golang: Update to 1.17.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 45208db29bd22238d355f4f8fdcc02fd2045c78a)
2022-01-11 16:23:10 -08:00
Nick Hainke
92e357ebd8 wg-installer: fix using symlinks for conf files
It is useful to symlink babeld and olsrd to /tmp/ if we frequently
write to those config files.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 5e8301d7dc)
2022-01-11 00:52:40 +01:00
Kerma Gérald
caa72e5c54 fail2ban: fix 2to3 error
Issue: 2to3 support has been removed in setuptools since version 58.0.0.

Fix: openwrt/packages#17311

Requirements: 2to3/host openwrt/packages#17429

Add upstream patch: 196c55e931

To install/build for python3 from source, it is necessary to convert to py3
codebase before setup (invoke 2to3 or ./fail2ban-2to3 firstly).
> ./fail2ban-2to3
> python3 setup.py build

(cherry picked from commit ad0e1a1c3c)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-10 21:54:33 +01:00
Nick Hainke
b3764db33c wg-installer: fix cleanup script
The wrong function was called.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e6afcf8f3c)
2022-01-10 14:15:28 +01:00
Hannu Nyman
1e179f92a3 haveged: update to 1.9.17
Update havged to version 1.9.17.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e065ccda94)
2022-01-09 19:01:45 +02:00
Nick Hainke
d364552774 wg-installer: fix get_usage function
The get_usage function always returns 0. The shell syntax was wrong.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit f7cb8b20e1)
2022-01-09 14:13:06 +01:00
Nick Hainke
49f898044c wg-installer: delete old interfaces
Add "wg_check_interfaces" and specify a timeout in the config file.
This allows to delete not used wireguard-interfaces automatically.

For example a cronjob can be installed that calls:
  . /usr/share/wginstaller/wg_functions.sh && wg_check_interfaces

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 36dc9b3f79)
2022-01-09 14:13:06 +01:00
Nick Hainke
335ad2a4d7 wg-installer: fix dependencies
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 62cc627aba)
2022-01-09 14:13:06 +01:00
Nick Hainke
f2745c85a2 wg-installer: fix typo in cleanup function
The delete variable was misspelled leading to devices always being
removed although they had connected neighbors.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0e416dadd1)
2022-01-09 13:49:19 +01:00
Nick Hainke
1de352b603 wg-installer: fix ipv4 meshing via olsr
The ipv4 address space was not allowed.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4302bfd3c8)
2022-01-09 12:20:18 +01:00
Nick Hainke
efb5bdf073 wg-installer: add link-local to client interface
Wireguard has no link-local address on an interface automatically.
Add a link-local to the interface. The server has fe80::1/64 and
the client fe80::2/64.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 625f3c8302)
2022-01-09 12:20:18 +01:00
Nick Hainke
bf1c780af4 wg-installer: add cleanup script
Add script to cleanup unused wireguard interfaces.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 714b51c630)
2022-01-09 10:43:34 +01:00
Nick Hainke
032d0157c3 wg-installer: add ipv4 support
Add base_v4prefix to allow ipv4 mesh connections.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 98d8680a8c)
2022-01-07 08:23:10 +01:00
Jonathan G. Underwood
33d6705d2f
getdns: remove maintainer
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
(cherry picked from commit 4a241581ab)
2022-01-07 00:40:32 +01:00
Rui Salvaterra
b1dfbf975b
getdns: bump to 1.7.0
Remove obsolete patches.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0261cd0972)
2022-01-07 00:40:26 +01:00
Josef Schlehofer
c8ebb1c989
Merge pull request #17504 from jefferyto/radicale2-2.1.12-openwrt-21.02
[openwrt-21.02] radicale2: Update to 2.1.12
2022-01-06 23:16:27 +01:00
Josef Schlehofer
335c2f80b1
Merge pull request #17503 from jefferyto/radicale-1.1.7-openwrt-21.02
[openwrt-21.02] radicale: Update to 1.1.7
2022-01-06 23:16:24 +01:00
Nick Hainke
f755690b0e wg-installer: add hotplug script for olsr
Add hotplug-olsrd to automatically mesh with olsrd via new wireguard
links.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit d35c22951b)
2022-01-06 22:44:48 +01:00
Jeffery To
85b6d750dd
radicale2: Update to 2.1.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b37f409146)
2022-01-05 19:28:02 +08:00
Jeffery To
2415cbb9b7
radicale: Update to 1.1.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8d0018f549)
2022-01-05 19:26:05 +08:00
Rosen Penev
4e1bfe4e9d inadyn: update to 2.9.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b434cd71b9)
2022-01-03 18:04:10 -08:00
Josef Schlehofer
ab94e0709a
Merge pull request #17447 from jefferyto/golang-1.17.5-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.5, add patch
2021-12-29 18:35:09 +01:00
Florian Eckert
7a15a271a6 mwan3: fix mwan3 flush conntrack table call
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e1f321150d)
2021-12-29 14:17:24 +01:00
Jeffery To
2f52958e02
golang: Update to 1.17.5, add patch
Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  https://github.com/golang/go/pull/49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit eac2e91a28)
2021-12-28 15:17:20 +08:00
Hiếu Lê
f7973fc7af
adguardhome: update to 0.107.0
Full changelog available at: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.0

packr has been removed from build dependencies, per
c6888326b0 (diff-2873f79a86c0d8b3335cd7731b0ecf7dd4301eb19a82ef7a1cba7589b5252261L2)

Also added the ability to configure working directory location and moved
the directory to /var. On most setups this should not change anything,
as /var is symlinked to /tmp. The move mostly benefits setups where /var
is configured to be persistent.

The working directory is used by AdGuard to store persistent data like
query logs, filter lists, etc.

Data stored in this directory can get really huge, as such allowing
this directory to be moved elsewhere (ie. an USB drive) is very
beneficial.

Fixes: #17437

Co-authored-by: Dobroslaw Kijowski <dobo90@gmail.com>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>
(cherry picked from commit f44603a131)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[Added fixes in the commit message]
2021-12-27 09:32:36 +01:00
Josef Schlehofer
2eb96bdd4e
Merge pull request #17439 from 1715173329/xr-2102
[openwrt-21.02] xray-core: Update to 1.5.2
2021-12-27 09:30:10 +01:00
Josef Schlehofer
de2186b137
Merge pull request #17438 from 1715173329/yq21
[openwrt-21.02] yq: Update to 4.16.2
2021-12-27 09:30:01 +01:00
Tianling Shen
d5ce7603dd
xray-core: Update to 1.5.2
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 418e59356b)
2021-12-27 14:49:09 +08:00
Tianling Shen
60419af876
xray-core: Update to 1.5.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6d56c80ff9)
2021-12-27 14:49:05 +08:00
Tianling Shen
c8b6cffcd7
yq: Update to 4.16.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c47425fe29)
2021-12-27 14:46:27 +08:00
Dirk Brenken
a21e790948
adblock: 4.1.3-4
* fix backup dir creation in raw mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 25dd0c63af)
2021-12-22 13:22:56 +01:00
Alexandru Ardelean
a877527123 python-lxml: update to version 4.6.5
Fixes: CVE-2021-43818
  https://nvd.nist.gov/vuln/detail/CVE-2021-43818

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-12-21 14:39:09 +01:00
Michael Heimpold
b05719feec
Merge pull request #17405 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.14
2021-12-21 10:49:02 +01:00
Michael Heimpold
944e937d93 php8: update to 8.0.14
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-12-20 16:44:29 +01:00
Alexandru Ardelean
93fa9960c6
Merge pull request #17400 from jefferyto/remove-commodo-openwrt-21.02
[openwrt-21.02] python-packages/seafile: Remove commodo as maintainer
2021-12-20 13:04:59 +02:00
Alexandru Ardelean
4308764d8a
seafile: remove myself as maintainer of these packages
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1e27dd7f8f)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-12-20 17:59:02 +08:00
Alexandru Ardelean
aa7454e461
python-packages: remove myself as maintainer
There's been a bit of overlapping opinions on some of these packages.
The best thing to do here is to reduce ownership and relinquish my
control.

This patch does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 48ce6e48b6)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-12-20 17:55:44 +08:00
Kerma Gérald
f01af1e66f crowdsec-firewall-bouncer: update to 0.0.18
Update to upstream release 0.0.18

(cherry picked from commit 515f8489cc)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-12-19 14:46:01 +01:00
Michael Heimpold
87ffda7784
Merge pull request #17356 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.27
2021-12-18 10:08:59 +01:00
Michael Heimpold
f4519023c8 php7: update to 7.4.27
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-12-16 21:59:52 +01:00
Hannu Nyman
e818e3ed37 nano: update to version 6.0
Update nano editor to version 6.0

Version 6.0 enable toggling the display of the line numbers with
the shortcut key M-N (Alt-n). Also the cmdline option "-l" works.
Remove earlier patch regarding that.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0571f5400d)
2021-12-16 20:26:45 +02:00
Florian Eckert
e7e91ca071 libqmi: fix missing CONFIG_ prefix
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 43a0f68940)
2021-12-15 12:18:08 +01:00
Eric Luehrsen
7164762fd9 ldns: update to 1.8.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 7594e8581a)
2021-12-12 19:30:55 +01:00
Eric Luehrsen
59e70a29cc unbound: update to 1.14.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-12-12 09:40:08 +01:00
John Audia
e6628357a5 htop: update to 3.1.2-1
Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 3b041e3b45)
2021-12-10 18:57:34 +02:00
Etienne Champetier
c28d3dcb51 htop: explicitly disable some build options
Since 3.1.0 delayacct option is enabled if the needed dependencies
are detected, it was previously disabled.
Sensors also check for dependency so we need to explicitly
disable it when not enabled.

Fixes 5f91672055

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 253e3f558c)
2021-12-10 18:57:10 +02:00
Hannu Nyman
97574e9de2 htop: update to 3.1.0
Update htop to versio 3.1.0

* Adjust Makefile configuration options to update
* Avoid libcap dependency
* Backport post-release fix for old automake

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5f91672055)
2021-12-10 18:56:55 +02:00
Josef Schlehofer
386eb541d2
Merge pull request #17299 from nxhack/2102_node_14182
[21.02] node: bump to 14.18.2
2021-12-10 14:29:15 +01:00
Hirokazu MORIKAWA
6ddb16bc32 node: bump to 14.18.2
Update to v14.18.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-12-10 20:27:30 +09:00
Josef Schlehofer
916247d7bd
Merge pull request #17270 from BKPepe/update-python3
python3: update to version 3.9.9
2021-12-10 11:20:41 +01:00
Josef Schlehofer
4f251d6dfc
hwdata: update to version 0.354
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 20a759a6dd)
2021-12-09 02:05:26 +01:00
Josef Schlehofer
92129f9cfe
python-babel: update to version 2.9.1
Changelog:
https://github.com/python-babel/babel/releases/tag/v2.9.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e2932db1ce)
2021-12-08 23:35:48 +01:00
Josef Schlehofer
134bae3026
python-babel: update to version 2.9.0
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a31dc44d2d)
2021-12-08 23:35:44 +01:00
Jan Hák
5750f83376
knot: update to 3.1.4
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 60a80b31fb)
2021-12-07 22:59:21 +01:00
Eneas U de Queiroz
149c3014f7
gnutls: don't run aclocal --install
Remove the --install parameter when running aclocal.  The --install
argument is used to copy third-party files to the first -I directory.
gnutls has -I m4 first, which would copy files to its local build
directory.  However, openwrt prepends the staging dir m4 directory,
causing aclocal --install to copy an old definition of
ax_code_coverage.m4 into the staging dir.

If strace is built after gnutls, compilation will fail:

    Makefile:9303: *** missing separator.  Stop.

The version of ax_code_coverage.m4 that gets installed does not define
@CODE_COVERAGE_RULES@.

Removing the --install parameter in gnutls solves the issue.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 206eaae165)
2021-12-07 22:58:38 +01:00
Noah Meyerhans
4ee0319063
bind: bump to 9.17.20
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 249079187d)
2021-12-07 22:55:51 +01:00
Josef Schlehofer
cbc9de5f1d
knot-resolver: update to version 5.4.3
Release notes:
https://www.knot-resolver.cz/2021-12-01-knot-resolver-5.4.3.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 10ab230670)
2021-12-07 22:54:34 +01:00
Tianling Shen
bb89205f5a yq: Update to 4.16.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0f46facfdb)
2021-12-06 12:38:12 -08:00
Josef Schlehofer
1743adc23f
python3: update to version 3.9.9
- Updated setuptools and pip
- Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-12-04 23:15:27 +01:00
Josef Schlehofer
5ebaa73d5e
msmtp: update to version 1.8.1.9
Changelog:
https://marlam.de/msmtp/news/msmtp-1-8-19/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 173faad334)
2021-12-04 09:24:29 +01:00
Stan Grishin
e2f8ba9b58
Merge pull request #17259 from rs/nextdns-1.37.7-openwrt-21.02
[21.02] nextdns: Update to version 1.37.7
2021-12-03 11:16:20 -08:00
Michal Hrusecky
a9fed2403c
mariadb: Create compatibility symlinks
For every mysql* binary create corresponding mariadb binary and vice
versa.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2295c351ed)
2021-12-03 14:29:28 +01:00
Michal Hrusecky
0e40e25fc7
mariadb: Install all supporting sql files
Do not pick just few random SQL files to install, install all of them.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 4653d83048)
2021-12-03 14:29:24 +01:00
Michal Hrusecky
753fe1d21d
mariadb: Tweak default configuration
Remove from default configuration options that are compiled in like
default paths and character set. On the other hand add few examples of
tweak options that might be handy.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit a2c1a57282)
2021-12-03 14:29:19 +01:00
Michal Hrusecky
ed572e3898
mariadb: Init script improvements
Update init script so other user/group can be used. Also make sure that
init script can actually create an empty database instead of forcing the
user to do it by hand. Other new feature is taking care of migration
of the database when upgrading the database.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1be35284bb)
2021-12-03 14:29:07 +01:00
Michal Hrusecky
fb4c9e5c48
mariadb-common: Drop package and adjust configuration
The raison d'être of package mariadb-common was to provide common my.cnf
config file that was being used to include subdirectories and then to
push utf-8 as default everywhere. Let's make this file part of the
server package as there we actually set other options as well and drop
it from all clients. Instead let's set utf-8 as default in server,
client and client libraries. While at it also set socket to the more
common path and drop mysqld_safe script from the list of configuration
files and do other minor tweaks.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit d8ecded02d)
2021-12-03 14:29:02 +01:00
Olivier Poitrey
e84c488904 nextdns: Update to version 1.37.7
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-12-02 23:46:52 +00:00
Stan Grishin
d8a3dadcdd
Merge pull request #17254 from rs/nextdns-1.37.6-openwrt-21.02
[21.02] nextdns: Update to version 1.37.6
2021-12-02 12:43:27 -08:00
Olivier Poitrey
75a0ffc21f nextdns: Update to version 1.37.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-12-02 15:03:49 +00:00
Josef Schlehofer
a97bd31353
syslog-ng: update to version 3.35.1
Also bump the version in syslog-ng config file.
Removes this warning:

Nov 16 14:19:41 turris syslog-ng[15159]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.35 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.33'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d2fd36e28)
2021-11-30 23:58:06 +01:00
George Iv
3cad5b76d0 yggdrasil: bump to 0.4.2
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
2021-11-30 13:14:58 -08:00
William Fleurant
a7a724733f yggdrasil: uci ifname is now known as device
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2021-11-30 13:14:58 -08:00
Stan Grishin
c89f32d5c9
Merge pull request #17241 from rs/nextdns-1.37.5-openwrt-21.02
[21.02] nextdns: Update to version 1.37.5
2021-11-30 08:22:14 -08:00
Olivier Poitrey
271961e3a4 nextdns: Update to version 1.37.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-11-30 16:10:25 +00:00
Peter Gransdorfer
5d82c07163 ddns-scripts: use HTTPS for spdyn
Signed-off-by: Peter Gransdorfer <peter.gransdorfer@cattronix.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
- PKG_RELEASE number updated
(cherry picked from commit c0296bf25d)
2021-11-30 13:03:21 +01:00
Stan Grishin
6b876c04d4
Merge pull request #17233 from stangri/openwrt-21.02
[21.02] curl: update to 7.80.0
2021-11-29 02:00:11 -08:00
Hirokazu MORIKAWA
ff5728497f icu: bump to 70.1
ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.

This change will require minor modifications in php7 and php8.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-29 01:42:17 -08:00
Stan Grishin
8162066e11 curl: update to 7.80.0
* bump version to 7.80.0
* update maintainer email address

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 80ef61729b)
2021-11-29 09:31:47 +00:00
Stan Grishin
48abd18082
Merge pull request #17162 from stangri/openwrt-21.02
[21.02] nebula: update to 1.5.0
2021-11-29 01:22:42 -08:00
Tianling Shen
4877a3b72f yq: Update to 4.15.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 63f95db55e)
2021-11-27 17:18:11 +02:00
Kerma Gérald
4f78eb825f crowdsec: update to 1.2.1
crowdsec-firewall-boucer: update to 0.0.16

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 2861370567)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-11-23 23:28:39 +01:00
Alexandru Ardelean
f71a9c91cb
Merge pull request #17155 from jefferyto/golang-1.17.3-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.3
2021-11-23 13:35:32 +02:00
Gerard Ryan
b320cc083b docker: Update to 20.10.11
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-11-22 16:41:10 -08:00
Gerard Ryan
307236dca7 dockerd: Update to 20.10.11
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-11-22 16:41:10 -08:00
Gerard Ryan
b35eba3c97 containerd: Update to 1.4.12
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-11-22 16:41:10 -08:00
Nick Hainke
b74f8b68c5 conntrack-tools: import patch to fix cache
As written in the commit message:

Depending on your conntrackd configuration, events might get lost,
leaving stuck entries in the cache forever. Skip checking the conntrack
ID to allow for lazy cleanup by when a new entry that is represented by
the same tuple is added.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da619f19f4)
2021-11-21 06:18:23 -08:00
Tao Gong
47ce72c8ba conntrack-tools: add a patch to fix endianness issue
Signed-off-by: Tao Gong <gongtao0607@gmail.com>
(cherry picked from commit f62c15f92d)
2021-11-21 06:18:23 -08:00
Michael Heimpold
88bf2ecb78
Merge pull request #17170 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.26
2021-11-21 11:39:11 +01:00
Michael Heimpold
82e8726fc3
Merge pull request #17169 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.13
2021-11-21 11:39:00 +01:00
Michael Heimpold
41b3505f73 php8: update to 8.0.13
This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2e9c1a00ea)
2021-11-21 00:04:18 +01:00
Michael Heimpold
2381ced339 php7: update to 7.4.26
This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c6f27671a3)
2021-11-21 00:00:54 +01:00
Josef Schlehofer
495c76cd51 rosy-file-server: drop this package
Reasons to drop this package:
a) this package depends on luci-app-rosy-file-server
Unfortunately, it was marked as broken as it is unmaintained.

See: 34b682afac

b) maintainer is inactive
c) rosinson website does not seem to be working

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f1893a426a)
2021-11-20 16:47:07 +02:00
Stan Grishin
103484c4b9 nebula: update to 1.5.0
* update binaries to version 1.5.0 (thanks @jefferyto)
* update maintainer's email address

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1421440174)
2021-11-19 21:55:37 +00:00
Stan Grishin
f543e82a4d
Merge pull request #17159 from rs/nextdns-1.37.4-openwrt-21.02
[21.02] nextdns: Update to version 1.37.4
2021-11-19 09:49:55 -08:00
Olivier Poitrey
e112fc9535 nextdns: Update to version 1.37.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-11-19 17:34:52 +00:00
Jeffery To
8d99ece4bd
golang: Update to 1.17.3
Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 901f80aae7)
2021-11-19 22:02:43 +08:00
Paul Spooren
c0ceaca007
auc: remove superfluous variables
Remove parsing of data which is not used within `auc`. Later iterations
may use these but they can be gradually added whenever needed.

Also remove HTTP code handling of error codes no longer used by the
backend. Early iterations of the server where infinitely complex to
figure out created images and announce them to clients but ever since
everything is stored in JSON, things got better (aka simpler).

If a package is missing on the upstream server, color it in red.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 6527d65b9b)
2021-11-15 21:18:38 +00:00
Paul Spooren
34e512ac2a
auc: use /json/v1/
Currently `auc` uses the outdated /json/ path, this commit uses
/json/v1/ to be more future proof.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 69b5c28929)
2021-11-15 21:18:31 +00:00
Daniel Golle
a95f71a736
auc: fix some minor issues
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 51f9df5b92)
2021-11-15 21:18:20 +00:00
Tianling Shen
15beed2b46 rclone: Update to 1.57.0
- Disabled unused plugins and re-enabled CGO.
- Fixed test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f712dc311e)
2021-11-15 13:10:53 -08:00
Tianling Shen
966e3cc097 yq: Update to 4.14.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8eab3a2bf2)
2021-11-15 13:10:38 -08:00
Daniel Golle
2c6faddd3b
exim: update to version 4.95
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 40c71110f0)
2021-11-15 20:05:40 +00:00
Daniel Golle
4f84a86318
exim: some clean ups
* use username/group 'exim' instead of mail
 * register configuration file
 * make sure /usr/lib/exim/lookups exists

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 66a62e2fcf)
2021-11-15 20:05:35 +00:00
Daniel Golle
72288cc396
exim: add default config and init script, enable lmtp
Ship default configuration /etc/exim/exim.conf as well as
a simple procd init script. Enable building with LMTP for better
integration with dovecot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31d12ead78)
2021-11-15 20:05:31 +00:00
Daniel Golle
783ee334f0
exim: update to version 4.94.2
Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c241cb12bb)
2021-11-15 20:05:26 +00:00
Rosen Penev
cead8569ef
exim: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de9c527e9a)
2021-11-15 20:05:22 +00:00
Daniel Golle
b30fc0a677
gpgme: update to version 1.16.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e0e5dea89e)
2021-11-15 20:05:17 +00:00
Oskari Rauta
c55523b8c3
podman: update to 3.4.1
A lot of changes since 3.3.1.

Full (long) lists of release notes between
versions are available at
https://github.com/containers/podman/releases

containers.conf updated

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3e5761d6cd)
2021-11-15 20:05:13 +00:00
Huangbin Zhan
23415c4377
podman: fix broken conffiles
Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit e6e770b268)
2021-11-15 20:05:08 +00:00
W. Michael Petullo
4ccf034829
podman: update to 3.3.1
Earlier versions of podman did not make use of TMPDIR when running "podman
run ...". Podman's default, /var/tmp, presents a problem to rootless
use since OpenWrt's /var/tmp does not permit writes by non-root users.
Podman 3.3.1 makes full use of TMPDIR.

This is part of an attempt to get rootless podman to work on OpenWrt.
See https://github.com/openwrt/packages/issues/15096.

See also the upstream issue at
https://github.com/containers/podman/issues/10698.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 416eced174)
2021-11-15 20:05:03 +00:00
W. Michael Petullo
37df6c3ca0
podman: change permissions on /usr/share/containers/seccomp.json
Running podman as users other than root seems to require that those
users can read /usr/share/containers/seccomp.json. This change sets the
permissions on that file to match those used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a41556af4f)
2021-11-15 20:04:58 +00:00
Oskari Rauta
ea7b959fde
podman: update to 3.2.0
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit e565bebf41)
2021-11-15 20:04:54 +00:00
W. Michael Petullo
16a3da37a8
podman: change permissions on /etc/containers
Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f51ef46aa6)
2021-11-15 20:04:49 +00:00
Oskari Rauta
a129759f04
podman: bumb version to 3.1.2
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b6299c763a)
2021-11-15 20:04:44 +00:00
Oskari Rauta
405bc67f82
podman: update to 3.1.1
- Add support for AppArmor
 - Gracefully stop containers and pods on shutdown

I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better.
I also enabled AppArmor support for future possibilities.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5bb8844fe3)
2021-11-15 20:04:40 +00:00
Oskari Rauta
961551a85c
podman: Add selinux variant and several improvements
* add -selinux variant which depends on libselinux
* init script for background service
* updated configurations
* maintainer change as requested

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit abce423851)
2021-11-15 20:04:35 +00:00
Daniel Golle
cb1d97d52a
podman: add 'crun' to containers.conf
Now that 'crun' has been packaged, add support for it in podman.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 954be76e6a)
2021-11-15 20:04:30 +00:00
Daniel Golle
90e58bdb97
podman: update to version 3.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3c758231cb)
2021-11-15 20:04:26 +00:00
Oskari Rauta
2b73497737
conmon: update to 2.0.30
bug fixes:
 - Remove unreachable code path
 - exit: report if the exit command was killed
 - exit: fix race zombie reaper
 - conn_sock: allow watchdog messages through the notify socket proxy
 - seccomp: add support for seccomp notify

misc:
 - Add seccomp to build dependency

included patch removes unnecessary dependency of libdl and also allows a succesfull build
disabled for arc where libseccomp does not seem to be available

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ab08ad2ad9)
2021-11-15 20:04:21 +00:00
Oskari Rauta
6e74b5d7ba
conmon: update to 2.0.29
Patch fixing segfaults on nulls was removed due to patch's content being now included in conmon's source since containers/conmon@355dbf1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9fdfe2e2c7)
2021-11-15 20:04:16 +00:00
Oskari Rauta
18cc7640b6
conmon: fix segfault, correct a typo and update description
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 463227f70c)
2021-11-15 20:04:11 +00:00
Daniel Golle
78a629de7a
conmon: update to version 2.0.27
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 301abeecdc)
2021-11-15 20:04:06 +00:00
Rosen Penev
e4d64cc279
conmon: update to 2.0.26
Switched to building with meson as it works better in a parallel
context.

Small Makefile adjustments for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c8128df4e4)
2021-11-15 20:04:02 +00:00
Daniel Golle
da757a11ed
cni-plugins: update to version 1.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b42ea814a0)
2021-11-15 20:03:57 +00:00
Daniel Golle
95c6044151
cni-plugins: update to version 1.0.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ab5050ed65)
2021-11-15 20:03:53 +00:00
Daniel Golle
89574510eb
cni-plugins: depend on kmod-veth
cni-plugins makes use of veth, make sure kernel module is installed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1b25b6e239)
2021-11-15 20:03:48 +00:00
Daniel Golle
3a8dac1bc7
cni-plugins: update to version 0.9.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d3da072411)
2021-11-15 20:03:44 +00:00
Daniel Golle
2a684bdfab
cni: update to version 1.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 043bc28dd1)
2021-11-15 20:03:39 +00:00
Oskari Rauta
e1489cd0f4
cni: update to 0.8.1
This is a security release that fixes a single bug:
 - tighten up plugin-finding logic (#811)

Users of libcni are strongly encouraged to update.

Added me to list of maintainers as requested by @dangowrt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ceaccc1c7a)
2021-11-15 20:03:34 +00:00
Daniel Golle
2d027dc824
libinput: update to version 1.19.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23ac7563c2)
2021-11-15 20:03:30 +00:00
Daniel Golle
0972feac51
libinput: update to version 1.19.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e852f509cf)
2021-11-15 20:03:25 +00:00
Daniel Golle
975bb6f486
libinput: package libinput cli applets and quriks
Also package /usr/libexec/libinput/* and /usr/share/lib/input/*.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f53cd4232a)
2021-11-15 20:03:21 +00:00
Daniel Golle
cd42b74ac8
libinput: update to version 1.18.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 112e5628f4)
2021-11-15 20:03:16 +00:00
Daniel Golle
4042c299bd
libinput: update to version 1.17.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81ccb88a80)
2021-11-15 20:03:11 +00:00
Daniel Golle
2e5a72bf50
libevdev: update to version 1.12.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 60bc9982b4)
2021-11-15 20:03:07 +00:00
Daniel Golle
d337bce97f
libextractor: update to version 1.11
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 42707fc1ee)
2021-11-15 20:03:02 +00:00
Daniel Golle
fd4648a61e
pyodbc: update to version 4.0.32
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 264f7b2f5f)
2021-11-15 20:02:57 +00:00
Tianling Shen
aac8be18a7
pyodbc: update hash
This package was updated without a hash change.

Fixes: c157522580 ("pyodbc: update to version 4.0.31")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b783386890)
2021-11-15 20:02:53 +00:00
Daniel Golle
fe1b4a705f
pyodbc: update to version 4.0.31
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c157522580)
2021-11-15 20:02:49 +00:00
Daniel Golle
c4c8aeef2a
Werkzeug: update to version 2.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e971718892)
2021-11-15 20:02:44 +00:00
Daniel Golle
0eb4b34fe1
Jinja2: update to version 3.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c3d48497f)
2021-11-15 20:02:39 +00:00
Daniel Golle
1c0dba8838
click: update to version 8.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ea6c94a48)
2021-11-15 20:02:33 +00:00
Daniel Golle
738e354e2c
perl-mail-spamassassin: update to version 3.4.6
Fixes CVE-2020-1946

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86bd165f8c)
2021-11-15 20:02:28 +00:00
Rosen Penev
68e5146b1c
perl-mail-spamassassin: fix compilation without deprecated OpenSSL APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 02d54e1a6f)
2021-11-15 20:02:23 +00:00
Daniel Golle
7882b7a012
perl-net-dns: update to version 1.32
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 05dcea0289)
2021-11-15 20:02:17 +00:00
Daniel Golle
de68cf3c49
perl-net-dns: update to version 1.30
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1876cd2ff2)
2021-11-15 20:02:11 +00:00
Daniel Golle
8dbccb11e4
opentracker: update to git HEAD of 2021-08-23
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0e380d8cff)
2021-11-15 20:02:06 +00:00
Daniel Golle
10a19bf58e
opentracker: update to git HEAD
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0a38cb930a)
2021-11-15 20:02:02 +00:00
Daniel Golle
1bab442dee
opentracker: update to git HEAD
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ddeb936ce1)
2021-11-15 20:01:57 +00:00
Daniel Golle
9fde4ba670
libksba: update to version 1.6.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0876a981c2)
2021-11-15 20:01:52 +00:00
Daniel Golle
1322801587
libksba: update to version 1.5.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1c7ef6c666)
2021-11-15 20:01:46 +00:00
Daniel Golle
821bcc603e
libassuan: update to version 2.5.5
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1f50a9e417)
2021-11-15 20:01:41 +00:00
W. Michael Petullo
2260a2227f
libgpg-error: patch to fix cross-compile
Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit 33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 71b7f74ff1)
2021-11-15 20:01:35 +00:00
W. Michael Petullo
8c8e574884
libgpg-error: update to 1.42
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c664e1f207)
2021-11-15 20:01:28 +00:00
Daniel Golle
a7a0519590
i2c-tools: update to version 4.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 4ed7701b78)
2021-11-15 20:01:23 +00:00
Daniel Golle
698f54b328
hiredis: update to version 1.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c15172f7f7)
2021-11-15 20:01:18 +00:00
Rosen Penev
543c0969d1
hiredis: fix compilation with macOS
uname is used to test the host OS. Override it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ce3a961d3)
2021-11-15 20:01:08 +00:00
Daniel Golle
2fb6292391
gawk: update to version 5.1.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit be6099fb7e)
2021-11-15 20:01:04 +00:00
Daniel Golle
dc8398b66b
ccid: update to version 1.4.36
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f8e79854f9)
2021-11-15 20:00:59 +00:00
Rosen Penev
7ee645cba7
ccid: fix compilation under macOS
Remove a bad uname check.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a7d1a5d2c)
2021-11-15 20:00:54 +00:00
Daniel Golle
920608fdc9
ccid: update to version 1.4.35
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a87236861f)
2021-11-15 20:00:49 +00:00
Daniel Golle
c0d45ae37e
ccid: update to version 1.4.34
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c22638cb83)
2021-11-15 20:00:45 +00:00
Daniel Golle
4c9cb7aa5d
cryptsetup: update to version 2.4.1
Package new experimental SSH token authenticator plugin as new package
'cryptsetup-ssh'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 97dd009f58)
2021-11-15 20:00:40 +00:00
Javier Marcet
d6474f836b
cryptsetup: update to version 2.3.6
Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 2bff0b47aa)
2021-11-15 20:00:33 +00:00
Daniel Golle
c840b702b5
cryptsetup: update to version 2.3.5
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c644917ca7)
2021-11-15 20:00:28 +00:00
Daniel Golle
010ac65551
opensc: update to version 0.22.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a8f37fc15b)
2021-11-15 20:00:23 +00:00
Daniel Golle
45388a559d
opensc: update to version 0.21.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c84ab8890c)
2021-11-15 20:00:18 +00:00
Daniel Golle
4f879fe495
pcsc-lite: update to version 1.9.4
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7e2a56e77d)
2021-11-15 20:00:13 +00:00
Daniel Golle
98bd765852
pcsc-lite: update to version 1.9.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit fee9ad1c68)
2021-11-15 20:00:07 +00:00
Daniel Golle
717f494ca7
postgresql: update to version 13.5
Addresses CVE-2021-3393 and CVE-2021-20229.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-15 20:00:02 +00:00
Daniel Golle
3b0f19d6d2
lvm2: update to version 2.03.14
Drop two local patches which were replaced by upstream commits.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 74969337cf)
2021-11-15 19:59:57 +00:00
Daniel Golle
bc5bb12547
lvm2: update to version 2.03.13
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f20f69e63b)
2021-11-15 19:59:52 +00:00
Daniel Golle
3bbdaa49e0
lvm2: add hotplug script to scan and enable PVs on hotplug
Automatically scan and activate physical volumes when added at runtime.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f32236e542)
2021-11-15 19:59:47 +00:00
Daniel Golle
633e6a3032
lvm2: update to version 2.03.12
Two notable changes are devices file and metadata based autoactivation.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit dc27d43f29)
2021-11-15 19:59:42 +00:00
Daniel Golle
99dcad1aee
lvm2: don't use -normal suffix for non-SELinux variants
This was probably a work-around for an issue with dependencies which
was fixed by
988ed00802

Remove it as all other packages with `-selinux` variants do provide
a non-SELinux-variant without any suffix and that works now, see
procd vs. procd-selinux
busybox vs. busybox-selinux

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 43597b918a)
2021-11-15 19:59:37 +00:00
Daniel Golle
ec01d0c395
libudev-zero: update to version 1.0.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 36b9ff3c83)
2021-11-15 19:59:33 +00:00
Daniel Golle
beffb3c3ff
libudev-zero: update to version 0.5.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 50bb46baaa)
2021-11-15 19:59:27 +00:00
Daniel Golle
3d417377b3
libudev-zero: update to version 0.4.8
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7341e39768)
2021-11-15 19:59:20 +00:00
Josef Schlehofer
b1d69822db
Merge pull request #17113 from paper42/cve-2019-19906-21
[21.02] cyrus-sasl: patch CVE-2019-19906
2021-11-15 00:23:44 +01:00
Giovanni Giacobbi
6918a2c9a8 php8: Clean up and update distributed php.ini for php 8.0.12
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 8.0.12
- Added newly existing directives commented out
- Added '~E_DEPRECATED' to 'error_reporting'

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
(cherry picked from commit f54b987c8f)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-14 08:50:43 +01:00
Michal Vasilek
44838c21e4
cyrus-sasl: patch CVE-2019-19906
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit f7717bd382)
2021-11-13 16:09:28 +01:00
Michael Heimpold
55e2919e47
Merge pull request #17111 from thg2k/pr/21_php74_ini_1
[21.02] php7: Update and clean up distributed php7.ini
2021-11-12 07:47:26 +01:00
Ren Zongjia
ad1c43328f dockerd: Update to 20.10.10
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Ren Zongjia
786d3c7d73 docker: Update to 20.10.10
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Ren Zongjia
895dac37b6 containerd: Update to 1.4.11
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Ren Zongjia
2c928a0980 runc: Update to 1.0.2
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-11-11 03:14:46 -08:00
Giovanni Giacobbi
7e45ad87f3
php7: Clean up and update distributed php.ini for php 7.4.25
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 7.4.25
- Added '~E_DEPRECATED' to 'error_reporting'

Directives removed that no longer exist as of PHP 7.4.25:
- zend.ze1_compatibility_mode
- y2k_compliance
- register_globals
- register_long_arrays
- magic_quotes_gpc
- magic_quotes_runtime
- magic_quotes_sybase
- always_populate_raw_post_data

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
2021-11-11 10:18:44 +00:00
Hannu Nyman
309c5d62ae nano: enable showing line numbers with M-N (Alt-n)
Backport new upstream patch to enable toggling the display of
the line numbers with the shortcut key M-N (Alt-n).

Also the cmdline option "-l" works.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 9023845d50)
2021-11-10 20:33:15 +02:00
Michael Heimpold
13c5c2493e
Merge pull request #17099 from mhei/php7-pecl-updates
[21.02] Pull latest php7 pecl package updates from master
2021-11-10 07:45:43 +01:00
Hannu Nyman
50fdbd3a7c nano: enable line numbers (from cmdline)
Enable showing line numbers, which makes it easier to find
the correct place in long files. Due to the "tiny" build,
the functionality is only available from cmdline with "-l"
option.
For example:  nano -l /etc/banner

Key shortcut M-n is disabled due to "tiny".
See https://savannah.gnu.org/bugs/?61441 for explanation.

Also
* remove without-slang config option, deprecated in Dec 2020
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ae7f62d637)
2021-11-09 23:12:39 +02:00
Karl Palsson
07b7e67e6f mosquitto: bump to 2.0.13
Security and bugfix releases.

Changelogs:
https://mosquitto.org/blog/2021/10/version-2-0-13-released/
https://mosquitto.org/blog/2021/08/version-2-0-12-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-11-09 10:29:18 +00:00
Michael Heimpold
8c504b293e php7-pecl-redis: update to 5.3.4
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 82f115bded)
2021-11-08 07:50:52 +01:00
Michael Heimpold
ab0bcf1ea1 php7-pecl-imagick: update to 3.5.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 755e3c2eb6)
2021-11-08 07:50:26 +01:00
Michael Heimpold
1ded6ea244 php7-pecl-http: update to version 3.2.4
This is the latest version, which still has support for PHP 7.x.

It's an intermediate step in the transition to PHP 8.x.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5fe58d0002)
2021-11-08 07:50:16 +01:00
Michael Heimpold
b99386f676
Merge pull request #17052 from mhei/21.01-php8-icu-compat
[21.02] php8: Support for icu 70.1
2021-11-03 17:27:52 +01:00
Michael Heimpold
45a7379b6b
Merge pull request #17053 from mhei/21.01-php7-icu-compat
[21.02] php7: Support for icu 70.1
2021-11-03 17:27:36 +01:00
Tianling Shen
37941038af xray-core: remove dead jail files
It never works... And Xray-core needs root access to work.

Bump geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab540e6990)
2021-11-03 08:14:17 -07:00
Michal Hrusecky
4df93ea611
afuse: Add new package
This commit add new package afuse into packages feed.

afuse is an automounting file system implemented in user-space using
FUSE. It implements the most basic functionality that can be expected by
an automounter; that is it manages a directory of virtual directories.
If one of these virtual directories is accessed and is not already
automounted, afuse will attempt to mount a filesystem onto that
directory. If the mount succeeds the requested access proceeds as
normal, otherwise it will fail with an error.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 3d0f73ea67)
2021-11-03 13:43:58 +01:00
Josef Schlehofer
844ba69911
Merge pull request #17017 from miska/mariadb-21.02
mariadb: Update to version 10.4.21
2021-11-03 08:47:32 +01:00
Hirokazu MORIKAWA
6eecc3bd4c php7: Support for icu 70.1
This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit bc13112a7c)
2021-11-03 08:00:38 +01:00
Hirokazu MORIKAWA
f173d1d1da php8: Support for icu 70.1
This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 4da149b68a)
2021-11-02 07:37:12 +01:00
Josef Schlehofer
f2300cd651
tvheadend: add patch to update hdhomerun
Tarball with libhdhomerun_20171221 [1] was removed from upstream repository
and as it can not be found.

[1] http://download.silicondust.com/hdhomerun/libhdhomerun_20171221.tgz

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dacda65d37)
2021-11-01 11:24:17 +01:00
Elon Huang
3aa30ceee4 rclone-ng: initial package
Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9b7e817f93)
2021-11-01 00:12:54 -07:00
Elon Huang
33b8520640 rclone-webui-react: initial package
Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5204e148b3)
2021-11-01 00:12:54 -07:00
Tianling Shen
6986994097 rclone: add test script
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e475df4b79)
2021-11-01 00:12:54 -07:00
Tianling Shen
139dcb277b rclone: fix logic err in service file
- Corrected `enable` detection.
- Granted config/log write permission for `rclone` user.

Fixes: d518239888 ("rclone: initial package")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 00747f7b97)
2021-11-01 00:12:54 -07:00
Elon Huang
ebabd2430c rclone: initial package
Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d518239888)
2021-11-01 00:12:54 -07:00
Tianling Shen
3ff099e0d3 yq: Update to 4.14.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 06bb78cf4d)
2021-10-30 14:59:33 -07:00
Michal Hrusecky
fdda9ff98b
mariadb: Update to version 10.4.21
Update to the latest stable version. Also contains minor Makefile
polishing - better source RL and correctly formatted license.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-10-30 19:58:22 +02:00
Glenn Strauss
6b2535230a lighttpd: update to lighttpd 1.4.61 release hash
also remove patches incorporated upstream into lighttpd 1.4.61

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9786df13a82e58e36d4730e209ea6849fa27a113)
2021-10-30 01:05:20 -07:00
Glenn Strauss
a740068f03 lighttpd: update to lighttpd 1.4.60 release hash
also remove patches incorporated upstream into lighttpd 1.4.60

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 07446a73ca)
2021-10-30 01:05:20 -07:00
Philip Prindeville
6d753e5699 bind: Bump to 9.17.19
The following CVE updates are included:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously be
  abused by an attacker to significantly degrade resolver performance.

* CVE-2021-25218: An assertion failure occurred when named attempted
  to send a UDP packet that exceeded the MTU size, if Response Rate
  Limiting (RRL) was enabled.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Noah Meyerhans <frodo@morgul.net>

(cherry-picked from commit c2de702cbd)
2021-10-29 09:02:30 -07:00
Rosen Penev
74081b945c
nginx: fix compilation with BUILD_NLS
Requires nls.mk because of libxml2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de176d6f6f)
2021-10-27 16:32:58 +02:00
Rosen Penev
f57e56fd46
generate-ipv6-address: fix PIC compilation
This is a single C file. Don't bother using the Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6123f3b48e)
2021-10-27 16:28:52 +02:00
Michael Heimpold
9fa60fb624
Merge pull request #16989 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.12
2021-10-27 09:45:10 +02:00
Michael Heimpold
19be77f0e5
Merge pull request #16991 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.25
2021-10-27 09:44:57 +02:00
Michael Heimpold
7f10cee8ce php7: update to 7.4.25
This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1df333bfb0)
2021-10-26 22:26:31 +02:00
Michael Heimpold
a446dba542 php8: update to 8.0.12
This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fb7a33a114)
2021-10-26 22:01:53 +02:00
Nick Hainke
b6d2c8f69d dawn: set symm_enc default to 0
User mpeleshenko reported that symm encryption breaks hearing map.
Set the default to 0.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b7fb614dd)
2021-10-26 19:20:42 +02:00
Rosen Penev
733126fc8a
mariadb: update to 10.4.18
Remove uClibc depends. It's gone now.

Remove CMAKE_INSTALL to avoid installing to InstallDev.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8a62f2ea6b)
2021-10-26 12:04:03 +02:00
Michal Vasilek
18a48195cf
python-websockets: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bc10fbaebf)
2021-10-26 11:09:08 +02:00
Eneas U de Queiroz
bf3fc8365f
atlas-probe: allow parallel build
Set PKG_BUILD_PARALLEL:=1

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 9e8f127c31)
2021-10-26 11:08:10 +02:00
Eneas U de Queiroz
11f686bc36
atlas-probe: Fix compilation with gcc11
This uses some definitions from <sys/cdefs.h> in gcc 8.4.0, not present
in musl or gcc11.

Also use clock_gettime() instead of syscall(__NR_clock_gettime,...),
which is not currently defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 281df4bcf5)
2021-10-26 11:08:06 +02:00
Michal Vasilek
9d02dfdbb6
knot-resolver: update to 5.4.2
* refresh patches
* disabling kres_gen_test is not required anymore for cross compilation, it was fixed upstream with the 5.4.1 release

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2b3b2ffe42)
2021-10-26 11:07:56 +02:00
Josef Schlehofer
55ba910179
git: update to version 2.33.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 972e6ed2e7)
2021-10-26 11:07:44 +02:00
Josef Schlehofer
5a96548c25
msmtp: update to version 1.8.17
- Use AUTORELEASE fce
It helps when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 18261fcd31)
2021-10-26 11:07:34 +02:00
Josef Schlehofer
e6cea0eb58
syslog-ng: update to version 3.34.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8e88ef51e)
2021-10-26 11:07:30 +02:00
Josef Schlehofer
08107fbc53
dnscrypt-proxy2: update to version 2.1.1
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6b37a15230)
2021-10-26 11:07:24 +02:00
Jan Pavlinec
63a261a34c
checksec: update to version 2.5.0
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit db358e8a89)
2021-10-26 11:07:18 +02:00
Michal Vasilek
e0a2da4634
miniflux: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9697b69609)
2021-10-26 11:07:02 +02:00
Jan Pavlinec
bc785e584d
redis: update to version 6.2.6
Fixes:
- CVE-2021-41099
- CVE-2021-32762
- CVE-2021-32687
- CVE-2021-32675
- CVE-2021-32672
- CVE-2021-32628
- CVE-2021-32627
- CVE-2021-32626

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 766a5b285e)
2021-10-26 11:06:33 +02:00
Jan Pavlinec
edadea28c6
redis: update to version 6.2.5
Fixes CVE-2021-32761

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3cc8a1f37e)
2021-10-26 11:06:28 +02:00
Jan Pavlinec
86ce4cee0e
redis: update to version 6.2.4
Fixes CVE-2021-32625

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c7ffa391f1)
2021-10-26 11:06:22 +02:00
Jan Pavlinec
0412c3f0eb
redis: update to version 6.2.3
Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5f47bec5e8)
2021-10-26 11:06:18 +02:00
Jan Pavlinec
f5464f16d9
redis: update to version 6.2.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5894ca38b2)
2021-10-26 11:06:04 +02:00
Jan Pavlinec
cdd2b4668d
redis: update to version 6.2.1
Changes:
-remove zmalloc patch which is part of release

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d4ead62706)
2021-10-26 11:06:00 +02:00
Jan Pavlinec
a92f8ea070
redis: update to version 6.2.0
Fixes CVE-2021-21309

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e0962e8f4)
2021-10-26 11:05:56 +02:00
Jan Hák
14a3dfd307
knot: update to version 3.1.3
Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 175087bf25)
2021-10-26 11:05:15 +02:00
Nick Hainke
5fccb6fd7d dawn: update to 2021-10-26
ddc007e32ced ubus: avoid use after free in handle_probe_req()
e1275713c057 github: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 2e02deb5a9)
2021-10-26 08:45:55 +02:00
Nick Hainke
e2d1c8a0d3 dawn: respawn dawn in case of crash
Some users report that DAWN sometimes crashes after a while. Mostly
this happens after the new update has been rolled out.

Since I would not like to go back to the older version, I add as
a workaround for now that DAWN automatically respawned.

Workaround for:
https://github.com/berlin-open-wireless-lab/DAWN/issues/151

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit c1490175d3)
2021-10-26 08:45:55 +02:00
Nick Hainke
44629438da dawn: update to 2021-10-13
d222d12bcb58 ubus: use local blub_buffer definitions and free

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 147c401d19)
2021-10-26 08:45:55 +02:00
Nick Hainke
4855c37bdb dawn: update to 2021-08-05
* c70773a - datastorage: use signal strength as a metric
* 14e0f83 - Don't display debugging output with DAWN_NO_OUTPUT
* 97e5de1 - uci: add neighbor list priority options
* 2b1a53c - dawn_uci: set default values
* 6eb747b - Use separate configs for 802.11g & 802.11a bands
* 1e34357 - Verify compatibility before parsing config message
* a7a8309 - List all neighbors with same score when kicking
* 3ba0fa4 - Change beacon request fields to appropriate values
* 009aab9 - Change mode config parameter from int to string

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 2039e3fce0)
2021-10-26 08:45:55 +02:00
Michal Vasilek
ded142471e docker: update to 20.10.9
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-23 12:27:46 -07:00
Michal Vasilek
4ae2fa2df7 dockerd: update to 20.10.9
* switch to AUTORELEASE
* fixes CVE-2021-41089

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-23 12:27:46 -07:00
Tianling Shen
a8b45f6f6b yq: Update to 4.13.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 336577fe29)
2021-10-22 22:21:59 -07:00
Olivier Poitrey
97cd95d09d nextdns: Update to version 1.37.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-10-22 10:13:50 -07:00
Marcos Del Sol Vives
26e9cbc4c7 ksmbd-tools: update to 3.4.2
Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
(cherry picked from commit 212f057df7)
2021-10-19 23:39:50 -07:00
Rosen Penev
6bc415fce5 ksmbd-tools: update to 3.4.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ac5097af94)
2021-10-19 23:39:50 -07:00
Fritz D. Ansel
6657d5f61a ksmbd: use hostname only as name
even if a fqdn (with domain) is set by user

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
(cherry picked from commit 47e87e1b75)
2021-10-19 23:39:50 -07:00
Rosen Penev
8677e7efa9 ksmbd-tools: update to 3.4.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0162bd3a9f)
2021-10-19 23:39:50 -07:00
Alexandru Ardelean
35fefa105a django: bump to version 3.2.8
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-19 13:22:47 -07:00
Stan Grishin
18d1216558
Merge pull request #16930 from stangri/openwrt-21.02
[21.02] vpn-policy-routing: bugfixes: killall and tmpfs params
2021-10-18 23:35:23 -07:00
Stan Grishin
4d08672100 vpn-policy-routing: bugfixes: killall and tmpfs params
* bugfix: change killall param from -HUP to -s HUP
* bugfix: change tmpfs param from status to gateway

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 2b6c8d8273)
2021-10-19 06:13:04 +00:00
Hirokazu MORIKAWA
c8c12fdadc node: bump to 14.18.1 / October 12th 2021 Security Releases
October 12th 2021 Security Releases:
 HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959)
 HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-10-18 21:59:15 -07:00
Stan Grishin
64b5d2ab3f
Merge pull request #16924 from stangri/openwrt-21.02
[21.02] vpn-policy-routing: revert to 0.3.4-8
2021-10-18 19:58:33 -07:00
Stan Grishin
33c4ad1216 vpn-policy-routing: revert to 0.3.4-8
* there are reports that 0.3.5-x versions do not work on some configs
* the development of the new features moved to the new package (pbr)
* revert to the last known good version of vpn-policy-routing

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 77514c10a7)
2021-10-19 02:36:11 +00:00
Tianling Shen
a1556162ad msgpack-c: Update to 4.0.0
- Fixed typo error in PKG_LICENSE_FILES.
- Updated CMAKE_OPTIONS.
- Refreshed the patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e4d463b89d)
2021-10-18 11:45:36 -07:00
Rosen Penev
b0efc16972 msgpack-c: don't check for GTest
Not available with OpenWrt. Fixes compilation when host GTest is
present.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7f34b03356)
2021-10-18 11:45:36 -07:00
Michal Vasilek
5195be18ae
nnn: update to 4.2
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 42bf46039c)
2021-10-18 03:39:12 +02:00
Rosen Penev
70ddf05436
fakepop: fix compilation with PKG_ASLR
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 15d2ed15ca)
2021-10-17 10:38:57 +02:00
Rosen Penev
9b2e060e53
lxc: update to 4.0.10
Remove getline patch. It seems to be for uClibc, which is no longer in
the tree.

Remove commands patch. Issue was fixed upstream. Same with the tests
patch.

Remove gpg patch. It's an upstream backport.

Refreshed others.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3df43e2f66)
2021-10-17 09:54:52 +02:00
Stan Grishin
d99e44dedb
Merge pull request #16899 from stangri/openwrt-21.02
[21.02] simple-adblock: update to 1.8.8-1
2021-10-15 15:29:16 -07:00
Stan Grishin
b7bec631e2 simple-adblock: update to 1.8.8-1
* update 'check' function

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit d11f310230)
2021-10-15 21:49:22 +00:00
Stan Grishin
6acf83e2e0
Merge pull request #16896 from stangri/openwrt-21.02
[21.02] curl: update to 7.79.1
2021-10-15 14:15:48 -07:00
Stan Grishin
3faeb8b09d curl: update to 7.79.1
* update to [7.79.1](https://curl.se/changes.html#7_79_1)

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-10-15 20:59:53 +00:00
Josef Schlehofer
dd8e7e7416
Merge pull request #16889 from paper42/knot-3.1.2-21
[21.02]: knot: update to 3.1.2
2021-10-15 15:09:51 +02:00
Michal Vasilek
e4dec5bea3
knot: update to 3.1.2
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-15 00:10:49 +02:00
Kerma Gérald
a597e12e26 crowdsec-firewall-bouncer: initial package v0.0.15
/net/crowdsec-firewall-bouncer/

crowdsec-firewall-bouncer will fetch new and old decisions from
 a CrowdSec API to add them in a blocklist used by supported firewalls.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 676a621647)
2021-10-13 22:18:34 -07:00
Kerma Gérald
738fda6b64 crowdsec: initial package v1.2.0
/net/crowdsec/

Crowdsec - An open-source, lightweight agent to detect
 and respond to bad behaviours.
 It also automatically benefits from a global community-wide
 IP reputation database.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 8903d1b7ca)
2021-10-13 22:18:34 -07:00
Tianling Shen
b92db741e5 yq: Update to 4.13.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f51a0188c)
2021-10-13 22:17:41 -07:00
Stan Grishin
9e3f743ed6
Merge pull request #16884 from stangri/openwrt-21.02
[21.02] https-dns-proxy: update to 2021-09-27
2021-10-13 22:08:27 -07:00
Stan Grishin
b1bd6ec8fb https-dns-proxy: update to 2021-09-27
* update to [2021-09-27](da2501f542)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit f8d16338da)
2021-10-14 04:56:07 +00:00
Michal Vasilek
ac6566a7d4 tor: update to 0.4.5.10
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-10-13 18:29:29 +03:00
Georgi Valkov
db856b6175 acme: update to 3.0.1
On September the 29th, the certificate for R3, the intermediate
CA of Let's Encrypt expired, followed by the root CA expiration
on September the 30th. Update the acme client to 3.0.1,
to make sure newly generated certificates are using the new CA.
This is a backport of 468fc5fca4.
https://github.com/openwrt/packages/pull/16801

Default to letsencrypt because the upstream default may change.
Passing --staging is no longer needed, since --serever will
select a staging server if needed.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
Tested-by: Georgi Valkov <gvalkov@abv.bg>
Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>
2021-10-12 20:13:59 +02:00
Jeffery To
70a8a309a6 golang: Update to 1.17.2
Includes fix for CVE-2021-38297 (passing very large arguments to WASM
module functions can cause portions of the module to be overwritten).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dd986cde7fba08b7c01e3c2a7e25ae612319041f)
2021-10-10 18:27:44 -07:00
Michael Heimpold
760876059e
Merge pull request #16806 from mhei/21.02-php8-update
[21.02] php8: update to 8.0.11
2021-10-09 10:58:45 +02:00
Michael Heimpold
1a1220efbd
Merge pull request #16805 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.24
2021-10-09 10:58:29 +02:00
Eneas U de Queiroz
f41827d277 perl: perlmod.mk: use flock when hostpkg/perl used
Avoid parallel relinking and usage of the host perl binary by wrapping
its usage around flock calls.

Sometimes, two packages will try to relink the static host perl binary
at the same time.  Neither of them will have the other's module linked
in, and one of them will unavoidably clobber the other one's binary.

This will lead to errors when a package will not be able to find a
module that was supposed to be installed.

To fix that, an exclusive flock is used when relinking, with a 900
seconds timeout to avoid locking up the build process forever.

This is not enough because the binary may be concurrently used to build
another module package; perl is used in Configure, Compile, and Install
procedures.  If timing is right, a package will fail with a "permission
denied" error.

So a shared flock call is added in Configure, Compile, and Install
definitions for host and target, with a shorter, 300 seconds timeout.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1e18c4324f)
2021-10-08 09:47:46 -07:00
Max S Kash
58181f8fe6 ttyd: fix ssl ca option init
Signed-off-by: Max S Kash <asukms@ya.ru>
2021-10-08 09:43:56 -07:00
Alexandru Ardelean
0139e44ff2 python-pytz: bump to version 2021.3
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-08 09:41:14 -07:00
Hannu Nyman
e155b3d293 nano: update to 5.9
Update nano editor to version 5.9.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38143e6f8b)
2021-10-08 18:25:44 +03:00
Moritz Warning
39a116f589 smcroute: update to version 2.5.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-10-08 17:14:37 +02:00
Leo Soares
d09b92396a autossh: fix procd env issue
This commit fixes an issue where the `AUTOSSH_GATETIME` is not available in the `procd`  environment which gets overwritten by the second `procd_set_param env` call.
It now calls the `procd_set_param env` once with the two variables, instead of twice.

Signed-off-by: Leo Soares <leo@hyper.ag>
(cherry picked from commit 9c4d79519c)
2021-10-06 12:33:44 -07:00
Rosen Penev
da56846711 autossh: fix compilation without ssh installed
configure script looks for host ssh. Just pass the configure variable
directly. --with-ssh doesn't work.

Also get rid of custom Compile section. It's not needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63b7febf5f)
2021-10-06 12:33:39 -07:00
Michael Heimpold
3741e45eae php8: update to 8.0.11
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 6969fedfd9)
2021-10-05 22:41:35 +02:00
Michael Heimpold
b188ecff22 php8: fix module loading with glibc (refs #16642)
Without -ldl linker flag .so extensions are not loaded
when glibc is used. Fix it by providing adjusted LDFLAGS
for this case.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1bff138517)
2021-10-05 22:41:35 +02:00
Michael Heimpold
934de93ad4 php8: update to 8.0.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 449acc7dac)
2021-10-05 22:41:35 +02:00
Michael Heimpold
998d21563d php7: update to 7.4.24
This fixes:
    - CVE-2021-21706

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 96a04adbf3)
2021-10-05 22:39:03 +02:00
Michael Heimpold
49ffbab9ca php7: fix module loading with glibc (refs #16642)
Without -ldl linker flag .so extensions are not loaded
when glibc is used. Fix it by providing adjusted LDFLAGS
for this case.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d153c61650)
2021-10-05 22:38:50 +02:00
Kamil Trzciński
dc5faddacb
travelmate: support meta-refresh with single-quote
Currently `travelmate` only support `<meta` tag
if it contains `"`. This updates `travelmate.sh` to support
`'` as well.

```html
<meta...content='1; url=
```

Signed-off-by: Kamil Trzciński <ayufan@ayufan.eu>
(cherry picked from commit 2cbd9a2eb1)
2021-10-04 20:36:13 +02:00
Gerard Ryan
c98f060039 cache-domains: Fixed remote script usage change
* Removed all unnecessary files after configuration
* Reduced code duplication
* Changed to symlinking config instead of copying

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-10-03 16:43:45 -07:00
Hannu Nyman
1f3f63f5de haveged: update to 1.9.15
Update haveged to version 1.9.15.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2021-10-03 21:06:50 +03:00
Tianling Shen
670fe1ea16 yq: Update to 4.13.3
Fixes: CVE-2021-33196

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 86e26a0c3b)
2021-10-02 16:21:56 -07:00
Alexandru Ardelean
7fcb8024d7 openpyxl: bump to version 3.0.9
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-30 14:28:44 -07:00
Niels Widger
c0b23efab0 [openwrt-21.02] delve: Update to 1.7.2
See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
2021-09-27 22:20:38 -07:00
Chukun Pan
365b62f4f1 zerotier: update to 1.6.6
This is a security release (see [1]).

[1] https://www.zerotier.com/2021/09/21/incident-response-to-september-20th-2021

Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>
(cherry picked from commit 7f50af8949)
2021-09-27 11:00:41 -07:00
Tianling Shen
172ebab285 xray-core: Update to 1.4.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0a2fb81acc)
2021-09-25 11:11:07 -07:00
Tianling Shen
5d3faa6a4b yq: Update to 4.13.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f97d8182b8)
2021-09-25 11:10:37 -07:00
Paul Spooren
7130515250 attendedsysupgrade-common: use sysupgrade.openwrt.org
A new server was added which runs within the OpenWrt cloud, it's much
faster and should be used instead. For development the server at
https://asu.aparcar.org stays available.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-09-24 12:01:34 -10:00
Nicholas Smith
ecf1e65752
libmbim: bump to 1.24.8
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 2e3fb9c996)
2021-09-22 11:09:01 +02:00
Nicholas Smith
54a0951641
modemmanager: bump to 1.16.6
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 5bfe8ed2df)
2021-09-22 11:08:21 +02:00
Nicholas Smith
dab28002f5
libqmi: bump to 1.28.8
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 4e67af0cc1)
2021-09-22 11:06:29 +02:00
Nicholas Smith
602dbc60f1
libqmi: bump to 1.28.6
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 875e7a759d)
2021-09-22 11:06:24 +02:00
John Audia
d8f33f73e0 lxc: remove legacy cgroups from common.conf
I am unaware of any kernel currently provided that retains cgroup v1 support.
This patch removes these lines in /usr/share/lxc/config/common.conf to allow
for error free usage.

Providing common.conf as-is will result in failure to start. One solution is to
comment out the legacy lines.[1] This requires users to either provide a custom
version of this file on their builds or to manually edit it with each update.

Since many do not build their own, the first option is not available to them.
Manually editing the file with each update will cause a failure to start
containers set to auto-start upon rebooting into the update.

1. https://forum.openwrt.org/t/openwrt-arm64-quick-lxc-howto-guide-lms-in-debian-system-in-lxc-container/99835

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 049cf1e1b0)
2021-09-22 00:40:36 -07:00
Michal Vasilek
67e9ed1d51 syncthing: update to 1.18.2
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a172a52fb)
2021-09-20 11:05:22 -10:00
Josef Schlehofer
2cd1fa16b8
python-astral: update to version 2.2
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1deaf6dbbe)
2021-09-17 16:09:27 +02:00
Michal Vasilek
e1c24c07f4
fail2ban: patch CVE-2021-32749
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 273a6d19c5)
2021-09-17 15:27:43 +02:00
Michael Heimpold
7268909184
Merge pull request #16635 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.23
2021-09-16 08:14:00 +02:00
Rosen Penev
97813bac7e
Merge pull request #16633 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.13.0
2021-09-15 21:18:51 -07:00
Michael Heimpold
6979ce4a62 php7: fix config file upgrade issue (fixes #14623)
The addressed issue is related to #6893 as its resolution
is actually causing the problem.

When changing the priority of the config file it happens
that after a sysupgrade the previous file is restored
and the new file is added, ending up in a situation
like this:

/etc/php7/15_openssl.ini
/etc/php7/20_openssl.ini

Causing a double extension=openssl.so to be parsed,
which is not appropriate and leads to error message.

The same problem might also occur for mysqli since there
was also a priority change - let's take care about this
at the same time.

The solution is to remove one of the files. Since it is
a configuration file, the user might have adjusted it, so
lets just use the previous version to replace the new
installed version.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit e51a049301)
2021-09-15 21:18:31 +02:00
Michael Heimpold
2929694f87 php7: update to 7.4.23
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fb9e05615b)
2021-09-15 21:18:19 +02:00
Tianling Shen
54d1c110b1
yq: Update to 4.13.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 993315f90a)
2021-09-16 01:45:20 +08:00
Dirk Brenken
fd21207cf8
travelmate: update to 2.0.7-2
* removed the newly introduced wpa-supplicant dependency as it makes trouble with a circular dependency

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 40f1071a39)
2021-09-15 14:53:21 +02:00
Alexandru Ardelean
2bb2a48d14 openpyxl: bump to version 3.0.8
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-14 20:17:10 -07:00
Dobroslaw Kijowski
50351667a0
adguardhome: bump to 0.106.3
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.3

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 3626cc96f8)
2021-09-14 11:31:43 +02:00
Dobroslaw Kijowski
a98adbc479
adguardhome: bump to 0.106.2
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit b704844658)
2021-09-14 11:31:39 +02:00
Dobroslaw Kijowski
8236e0441d
adguardhome: bump to 0.106.1
* Create working directory when it is not present. Apparently
  some recent change made adguardhome fail to start when working
  directory is missing.
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.1

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 350ba8cbbd)
2021-09-14 11:31:35 +02:00
Dobroslaw Kijowski
b5ad600a76
adguardhome: bump to 0.106.0
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.0
* Add build time LDFLAG introduced in commit [1].

[1]: 1d07afb30e (diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R67)

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 48bf0f8e81)
2021-09-14 11:31:30 +02:00
Dobroslaw Kijowski
be38dc31ec
adguardhome: bump to 0.105.2
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d12c6658e4)
2021-09-14 11:31:26 +02:00
Dobroslaw Kijowski
b1b8128e41
adguardhome: bump to 0.105.1
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.0
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.1
* Add node-yarn/host dependency as it is needed since [1].
* Adjust LDFLAGS to the new ones introduced in [2].
* Invoke targets from make instead of manually running npm and yarn.
* Replace GO_PKG_EXCLUDES with GO_PKG_BUILD_PKG as our intention is to
  build only one specific package (a cosmetic change).

[1]: 5e20ac7ed5 (diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R140)
[2]: 0d67aa251d (diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R60)

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d208610b8d)
2021-09-14 11:31:22 +02:00
Josef Schlehofer
c61d7c2b5d
Merge pull request #16621 from jefferyto/golang-1.17.1-openwrt-21.02
[openwrt-21.02] golang: Update to 1.17.1
2021-09-14 11:30:08 +02:00
Josef Schlehofer
d203b3bba9
Merge pull request #16627 from acooler15/add_parted-21.02
[21.02]parted: add new package
2021-09-14 09:54:41 +02:00
Ren Zongjia
8a06dc026c autoconf: fix shebang
Fix shebang errors for autom4te, autoreconf, autoheader, autoscan, autoupdate, ifnames.

resolve openwrt/packages#16604

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
(cherry picked from commit 72f3dfcb0e)
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-09-13 00:27:44 -07:00
Oskari Rauta
8638a565cd parted: add new package
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5ad56ca340)
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
2021-09-13 15:15:01 +08:00
Jeffery To
3fdaf7d8dd
golang: Update to 1.17.1
Includes fix for CVE-2021-39293 (archive/zip: overflow in preallocation
check can cause OOM panic).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aa96b8408f)
2021-09-13 05:55:21 +08:00
Richard Gering
929b57d853
banip: update 0.7.10-3
* Updated firehol ipset URLs

Signed-off-by: Richard Gering <rg4github@dutchies.us>
(cherry picked from commit e803f3d75f)
2021-09-12 08:27:05 +02:00
Dirk Brenken
af46ac4bf8
travelmate: update to 2.0.7
* add wpa-supplicant package dependency
* removed no longer working 'db-bahn.login' and 'wifionice.login' auto-login scripts
* added the new 'wifibahn.login' script for auto-logins to captive portals WIFI@BAHN (DE),
  run tested on a single ICE (station logins are currently unsupported!)
* vodafone.login prepared to support free/time limited logins (still WIP!)
* change return code handling in login scripts and travelmate
* refine f_wifi function
* fix a few conercase issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3167e00aff)
2021-09-11 21:22:15 +02:00
Luiz Angelo Daros de Luca
a39c803fb3
Merge pull request #16524 from paper42/hplip-no-aslr-21
[21.02] hplip: add a patch to fix PIE builds
2021-09-10 19:36:31 -03:00
Michal Vasilek
40b7ea6064 ntfs-3g: patch CVE-2019-9755
* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-10 13:11:26 -07:00
Alexandru Ardelean
e72cc2b0a1 python3: bump version to 3.9.7
Refreshed patches.
And apply hack for line-endings in pep517 (from pip).

Hack comment:
  # FIXME: [1] get rid of this asap; 'patch' doesn't like Windows endings, and this file is full of them...
  #        I actually tried this in a number of ways and the only way to fix this is to implement
  #        a poor-man's dos2unix using sed.
  #        The issue is with the pip package; it seems that it throws in some Windows line-endings
  #        and 'patch' won't handle them. So, we do a "dos2unix" and then patch.
  #        We can get rid of this once this is solved upstream and in pip:
  #            https://github.com/pypa/pep517/pull/130

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 26988f905f)
2021-09-10 13:10:53 -07:00
Vladislav Grigoryev
cd82a36bac fail2ban: fix hotplug when disabled
Avoid restarting fail2ban by hotplug when the service is disabled.
Related issue: https://github.com/openwrt/packages/issues/16601

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
(cherry picked from commit 57aab9f1d1)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-09-10 14:14:22 -04:00
Alexandru Ardelean
a5109ac20b django: bump to version 3.2.7
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-09 14:31:05 -07:00
Kerma Gérald
98708c83e5 fail2ban: fix package for fail2ban v0.11.2
fail2ban v0.11.2 package version 2

Following PR #15098, add fixes to build fail2ban package:
- remove use of fail2ban-python (directly use python3 in script)
- remove link to python3 in /usr/bin (break the package build)
- remove python-tests (reduce the package size)

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 56a084d3922c84e936ef660a67a2156439223393)
2021-09-09 16:23:49 -04:00
Kerma Gérald
f056f252ce fail2ban: initial package of fail2ban version 0.11.2
python3-pyinotify: initial package version 0.9.6 of pyinotify for python3

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit bcb8775e48eb8f99a76b05a8539a0140513e4158)
2021-09-09 16:23:49 -04:00
Olivier Poitrey
89bdb70f17 nextdns: Update to version 1.37.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-09 12:47:42 -04:00
Ansuel Smith
58b23e9bcd unbound: backport fix for permission denied error
Currently there is a problem with log spam when ipv6 network
is dropped. Fix this by backporting a patch to silence these errors
when verbose logging is not enabled.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit f2f05088a5a12bf9963b83d9613bb96335a27e66)
2021-09-09 09:09:53 -04:00
Eric Luehrsen
60a7fc7825 unbound: update to 1.3.2
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 17c25269d7)
2021-09-09 09:09:53 -04:00
Felix Fietkau
b81785de99 unbound: fix build on non-linux systems
Override places that call uname to detect target features

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit cc1d0aa3d2)
2021-09-09 09:09:53 -04:00
Jo-Philipp Wich
8ca8872b3d cgi-io: update to latest Git HEAD
98cef9d Retry splice() syscall on EINTR

Fixes: https://github.com/openwrt/luci/issues/5342
Fixes: https://bugs.openwrt.org/index.php?do=details&task_id=4006
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit db8e0fdea4)
2021-09-08 22:06:39 +02:00
Christian Lachner
4ba1aac1fd haproxy: Update HAProxy to v2.2.17
- This update fixes CVE-2021-40346; see: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-09-08 07:33:14 -07:00
Andy Walsh
178b9484d1 wsdd2: update to git (2021-08-09), switch to Netgear repo
* update to git (2021-08-09)
* switch to Netgear repo

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-09-08 07:30:12 -07:00
Andy Walsh
5939310841 samba: update to 4.14.7
* update to 4.14.7
* remove domain if fqdn was set
* allow disabling wsdd2 in menuconfig

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-09-08 07:29:30 -07:00
Jan Pavlinec
ca591b551b
tor: update to version 0.4.5.8
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5c9ab1ff67)
2021-09-08 11:49:17 +02:00
Rosen Penev
a0105a0f5a
Merge pull request #16559 from 1715173329/xray-2102
[openwrt-21.02] xray-core: Update to 1.4.3
2021-09-07 14:58:27 -07:00
Olivier Poitrey
a5206895eb nextdns: Update to version 1.37.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 14:57:56 -07:00
Tianling Shen
642d2b0a58
xray-core: Update to 1.4.3
- Updated geodata to latest version
- Removed upstreamed patches

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3f448adabb)
2021-09-08 04:03:24 +08:00
Dirk Brenken
6071edf170
banip: update 0.7.10-2
* optimize dns resolve function
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f630037043)
2021-09-07 21:18:58 +02:00
Olivier Poitrey
9cf487461c nextdns: Update to version 1.37.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-09-07 11:31:23 -07:00
Alexandru Ardelean
dd093d4106
pillow: bump to version 8.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit afdcfb525c)
2021-09-07 16:49:39 +02:00
Dennis Schüsselbauer
7022e99132 acme: Fix uhttpd restart to load new certificates
Fixes issue #16256

Bump PKG_RELEASE to 6.

Signed-off-by: Dennis Schüsselbauer <scde@users.noreply.github.com>

(cherry picked from commit d69534751e)
2021-09-06 14:29:35 -07:00
Josef Schlehofer
6256cf49dd
python-certifi: update to version 2021.5.30
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 571326bd48)
2021-09-06 17:32:20 +02:00
Alexandru Ardelean
59dab31e03
squashfs-tools: bump to version 4.5
Drop GCC 10 build patch
Adds 2 more utilities which are symlinks to mksquashfs,unsquashfs.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 399bb7f992)
2021-09-06 11:48:41 +02:00
Michal Vasilek
73364d0c4d
hplip: add a patch to respect CFLAGS
* fixes build with PIE
* use AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-06 11:22:48 +02:00
Hannu Nyman
6b11337208 collectd: sensors plugin - depend on lm-sensors
Change the sensors plugin's dependency from libsensors
to lm-sensors, so that also the /usr/sbin/sensors executable
gets installed if the plugin is selected.

Although that is not needed for collectd itself,
the LuCI statistics app expects to find the sensors executable
if the plugin has been installed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 210ff7e953)
2021-09-04 11:04:33 +03:00
Brian J. Murrell
090623ac11 mwan3: Use shebang in /etc/mwan3.user
To allow the script to define what it should be run with.
This let's the user use bash if it's available, or python, or perl, etc.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Update PKG_VERSION to 2.10.12
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3d824ea288)
2021-09-03 11:51:01 +02:00
Robert Högberg
119a05ffdf perlbase-data: Add dependency on perlbase-scalar
Data::Dumper requires Scalar::Util -> add missing dependency.

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
2021-09-02 13:46:47 -07:00
Michael Heimpold
502ca434ca
lttng-tools: fix linking with full language support enabled
This fixes fallout after d18692c.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ce4701cc92)
2021-09-02 12:02:13 +02:00
Rosen Penev
73bd199abf
stoken: fix compilation with BUILD_NLS
Fixes linking issue as libxml2 uses iconv.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 60682c0235)
2021-09-02 12:00:59 +02:00
Rosen Penev
7674639c57
augeas: fix compilation with BUILD_NLS
Needs nls.mk because of libxml2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 80a0261a5d)
2021-09-02 11:59:33 +02:00
Rosen Penev
694d4c09b7
Merge pull request #16517 from jefferyto/golang-packages-remove-strip-ldflags-openwrt-21.02
[openwrt-21.02] treewide: Remove GO_PKG_LDFLAGS for stripping binaries
2021-09-01 17:16:16 -07:00
Jeffery To
9d4046157b
treewide: Remove GO_PKG_LDFLAGS for stripping binaries
The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.

When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.

This removes these flags for all relevant packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-09-02 06:07:05 +08:00
Nguyen Quang Minh
0b8baefec2 openvpn: add OpenVPN option push-peer-info
This will allow the server to know more info about the client like
HWADDR, very useful for managing IoT devices.

See: https://www.mankier.com/8/openvpn#--push-peer-info

Signed-off-by: Nguyen Quang Minh <minhnq31@fpt.com.vn>
2021-09-01 14:19:09 -07:00
Rosen Penev
473e27bada
Merge pull request #16514 from jefferyto/python-cryptography-3.4.8-openwrt-21.02
[openwrt-21.02] python-cryptography: Update to 3.4.8
2021-09-01 14:08:46 -07:00
Jeffery To
82dc4c08b1
python-cryptography: Update to 3.4.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 69ae9c29a2)
2021-09-02 02:33:25 +08:00
Jan Pavlinec
65057dcbb5
tailscale: update to version 1.12.3
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 23d90cabd2)
2021-09-01 14:51:35 +02:00
Jan Pavlinec
f818f4a0d5
tailscale: update to version 1.12.1
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit bb419b3227)
2021-09-01 14:51:31 +02:00
Jan Pavlinec
13faefa9b2
tailscale: update to version 1.8.7
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit fabaf9f184)
2021-09-01 14:51:22 +02:00
Jan Pavlinec
a1b8c64c2d
tailscale: update to version 1.8.1
Add readme with simple tailscale howto.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 791de7b5d0)
2021-09-01 14:51:17 +02:00
Josef Schlehofer
b2665dd098
Merge pull request #16512 from paper42/libssh-21
[21.02] libssh: update to 0.9.6
2021-09-01 10:48:38 +02:00
Michal Vasilek
d721fea58e
libssh: update to 0.9.6
* fixes CVE-2021-3634

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-09-01 09:56:00 +02:00
Etienne Champetier
fa1791dbc8 htop: Add HTOP_LMSENSORS config option
Enabled by default for x86, this enables lm-sensors support in htop.
Also add --enable-linux-affinity to avoid autodetecting it

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 37ca4e923d)
2021-08-31 16:27:39 -04:00
Dirk Brenken
19998f14f2
banip: update 0.7.10
* switch to unencrypted http downloads for ipdeny.com due to persistant certificate issues
* compact json generator code (tested with report files > 2MB)
* various code cleanups and optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8ac0103cbd)
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-31 11:29:13 +02:00
Rosen Penev
b38bda5ee4
Merge pull request #16494 from 1715173329/xray-2102
[openwrt-21.02] xray-core: fix build under go 1.17
2021-08-30 20:15:53 -07:00
Tianling Shen
36ffcd66f1
xray-core: fix build under go 1.17
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dcd3f288e4)
2021-08-30 13:50:13 +08:00
Jeffery To
2b17d1ca9e golang: Update to 1.17
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d0aab6b8bc)
2021-08-29 17:53:41 -07:00
Sebastian Kemper
0e3c2d9591 gpsd: bump to 3.23
Contains fix for time jumping back 1024 weeks after 23-October-2021.

Changes:

- Between current version and 3.23 the ABI version changed from 27 to
  29. Add ABI_VERSION variable to package as the jumps occur often.
- 0001-no-distutils-import.patch: removed because current patch doesn't
  work with new release and host python3-distutils is a build
  requirement anyway.
- 0002-ncurses6_detection.patch: fixed the patch. Currently the first
  "elif" checks for "ncurses6-config". But this is only provided by
  ncurses/host package, so the CFLAGS then contain includes that point
  into $(STAGING_DIR_HOSTPKG). The ncurses target package only installs
  "ncursesw6-config" into the staging area. So this is the only tool of
  interest. Also, the hunk moved from SConstruct to SConscript.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-08-29 17:53:22 -07:00
Rosen Penev
3e99ec5719
Merge pull request #16478 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.12.1
2021-08-27 13:30:58 -07:00
Tianling Shen
3b73213bfd
yq: Update to 4.12.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8dfc2e06c6)
2021-08-28 00:43:51 +08:00
Daniel Golle
954eba88a3
auc: update to version 0.2.4
* Brings support for future connexion based API.
 * read `detail` not `message` from server
 * use regular verrevcmp for branch names, fixes update indication
 * break out usage() from main() function
 * require '-f' in case installed package is missing in remote lists
 * don't use ENETUNREACH for unlrelated error
 * Fix check for mandatory fields (stray parenthesis)
 * Don't even fetch package lists if checking only for release.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 8486f64fea)
(cherry picked from commit 23ce5b0e6f)
(cherry picked from commit 2edbc4c805)
(cherry picked from commit bd4ad7b0ba)
2021-08-27 03:53:03 +01:00
Tianling Shen
af4098118c yq: Update to 4.12.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c881b29cfdfd274b721775d1d0de71eb02a27201)
2021-08-25 22:49:19 +03:00
Michal Vasilek
cec17047dc apr: patch CVE-2021-35940
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 0777e40b74)
2021-08-24 19:05:22 -07:00
Stan Grishin
425b81edeb
Merge pull request #16456 from rs/nextdns-1.36.0-openwrt-21.02
[21.02] nextdns: Update to version 1.36.0
2021-08-24 17:07:53 -07:00
Olivier Poitrey
1c982c63a8 nextdns: Update to version 1.36.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-08-24 23:40:32 +00:00
Karl Palsson
4adf9a1c1b mosquitto: allow auth options with per listener settings
Some settings can be either global or per listener, and we need to
support both forms in UCI.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-08-24 14:20:55 +00:00
Karl Palsson
c4f61bf57b mosquitto: init: support more UCI options
Recent versions of mosquitto have added a lot more fine grained control
of various options.  Add UCI support for all of them, and fix a couple
of things that were configured as per listener, that are actually global
settings.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-08-24 12:09:03 +00:00
Simon Polack
6c9d59571f airos-dfs-reset: add airos-dfs-reset
Ubiquitis airmax based gear does not fallback to original port after DFS
event is over. This tool triggers the fallback automatically by soft-restarting
unconditionally, whenever the configured freq differs from the running.

Signed-off-by: Simon Polack <spolack+git@mailbox.org>
(cherry picked from commit e36e8a6a3b)
2021-08-24 11:13:38 +02:00
Rosen Penev
b0a672279b
Merge pull request #16443 from nwidger/delve-1.7.1-openwrt-21.02
[openwrt-21.02] delve: Update to 1.7.1
2021-08-23 12:19:47 -07:00
Niels Widger
baceb237a6 [openwrt-21.02] delve: Update to 1.7.1
See
https://github.com/go-delve/delve/blob/master/CHANGELOG.md#171-2021-08-18
for changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
(cherry picked from 3583fd1c2)
2021-08-23 08:40:12 -04:00
Etienne Champetier
0bd7e25f2f phantap: update to latest commit
26bd876 Switch from ifname to device
d8d3d5f Fix blog post link

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit ac2b796704e02a1332c468c9dd9354426142ab7d)
2021-08-22 07:53:58 -04:00
Dirk Brenken
06011c690d
travelmate: update to 2.0.6
* replaced pipe input for a while/read-loop with a here document/variable as input
  (fix various subshell related bugs and oddities)
* further improve abort and re-connection handling
* prevent alleged detected connection failures (false positives) with an additional gw check,
  to stabilize VPN connections in particular

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1c0fcbd28b)
2021-08-22 08:43:52 +02:00
Dirk Brenken
3733d0a7da
travelmate: update to 2.0.5-3
* simplify the scan logic, to get rid of nifty IFS tricks
* limit the nearby scan results to process only the strongest uplinks, set 'trm_maxscan' accordingly (default '10')
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 58a3cf1f01)
2021-08-22 08:43:40 +02:00
Etienne Champetier
d89bb6bec6 https-dns-proxy: patch CMakeList.txt to use OpenWrt CFLAGS
This fixes compilation issues with ASLR PIE enabled

We were compiling with '-g -DDEBUG'

https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 374e1dd56e)
2021-08-20 21:03:24 -04:00
Ted Hess
8b5002a6ef
dnscrypt-proxy2: Upgrade to 2.1.0
Adjust build opts to force GOPATH mode by setting GO111MODULE off.
Ref: https://go.dev/blog/go116-module-changes

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 6981009f48)
2021-08-20 19:42:55 +02:00
Petr Štetiar
ffb8b452a1 c-ares: update to version 1.17.2
Missing input validation of host names returned by Domain Name Servers
in the c-ares library can lead to output of wrong hostnames (leading to
Domain Hijacking).

The Common Vulnerabilities and Exposures (CVE) project has assigned the
name CVE-2021-3672 to this issue.

References: https://c-ares.haxx.se/adv_20210810.html
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2021-08-20 14:46:07 +00:00
Michal Vasilek
ce0c9af931
mc: add a missing Syntax file
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 312caff03b)
Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-20 11:57:56 +02:00
Michal Vasilek
f5669e3a68
mblaze: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 80f7a8ec8b)
2021-08-19 21:26:23 +02:00
Josef Schlehofer
af616fc584
hwdata: update to version 0.350
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d5bed38e8)
2021-08-19 21:26:03 +02:00
Marius Dinu
0240320e8d
tvheadend: update to v4.2.8, remove static ffmpeg
- refresh patches
 - add missing dependency: libffi

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

[edited commit message and the maintainer line]

(cherry picked from commit 326da3dbbc)
2021-08-19 21:24:59 +02:00
Rosen Penev
4ddc4a6135
tvheadend: fix compilation with GCC 9 and 10
Without this, compilation fails because of a fortify-source header.
There's something defining and undefining _GNU_SOURCE somewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 57c6c5e73f)
2021-08-19 21:24:53 +02:00
Josef Schlehofer
fdee10fded
python3-setuptools: add _distutils_hack
I tried to install matplotlib by using pip and it failed with the following output:

2021-08-18T11:52:26,171 Collecting matplotlib
2021-08-18T11:52:26,173   Created temporary directory: /tmp/pip-unpack-wuth2u0e
2021-08-18T11:52:26,565   Using cached matplotlib-3.4.3.tar.gz (37.9 MB)
2021-08-18T11:52:38,659   Added matplotlib from https://files.pythonhosted.org/packages/21/37/           197e68df384ff694f78d687a49ad39f96c67b8d75718bc61503e1676b617/matplotlib-3.4.3.tar.                       gz#sha256=fc4f526dfdb31c9bd6b8ca06bf9fab663ca12f3ec9cdf4496fb44bc680140318 to build tracker '/tmp/pip-   req-tracker-u30x8pht'
2021-08-18T11:52:38,660     Running setup.py (path:/tmp/pip-install-afiyiers/                            matplotlib_8e717e38862f4976a3d6cb1832ba3261/setup.py) egg_info for package matplotlib
2021-08-18T11:52:38,661     Created temporary directory: /tmp/pip-pip-egg-info-kbtiezxq
2021-08-18T11:52:38,662     Running command python setup.py egg_info
2021-08-18T11:52:38,831     Traceback (most recent call last):
2021-08-18T11:52:38,832       File "<string>", line 1, in <module>
2021-08-18T11:52:38,832       File "/usr/lib/python3.9/site-packages/setuptools/__init__.py", line 8, in <module>
2021-08-18T11:52:38,833     ModuleNotFoundError: No module named '_distutils_hack'

More details about it:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968410

Once I applied the patch from the bug tracker, I got further to install
it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit feaaacc10f)
2021-08-19 21:24:20 +02:00
Jan Baier
affb4038cb
zabbix: Call killall with the -s
Some versions of killall do support the `killall -SIGNAL` syntax and
have only `-s SIGNAL` which should be supported everywhere.

I see the problem with *killall (PSmisc) 23.3* on latest TurrisOS 5.2

Signed-off-by: Jan Baier <jan.baier@amagical.net>
(cherry picked from commit 641f75d98a)
2021-08-19 21:24:10 +02:00
Michal Vasilek
d0444c0f57
git: update to 2.33.0
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e684672916)
2021-08-19 21:24:06 +02:00
Dirk Brenken
f1df60218b
Merge pull request #16397 from paper42/mc-21.02
[21.02] mc: update to 2.8.27
2021-08-18 21:23:43 +02:00
Michal Vasilek
e583b7e3e0
mc: update to 2.8.27
* fixes CVE-2021-36370
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-18 15:17:52 +02:00
Rosen Penev
a551032404
Merge pull request #16358 from jamesmacwhite/21.02-stubby-0.4.0
[21.02] stubby: version 0.4.0
2021-08-18 02:01:11 -07:00
Stan Grishin
3b573b65a8
Merge pull request #16384 from stangri/openwrt-21.02
[21.02] curl: update to 7.78.0
2021-08-16 19:24:52 -07:00
Stan Grishin
542aa086ea curl: update to 7.78.0
* update to 7.78.0
* change maintainer
* remove obsolete mirror (curl.mirror.anstey.ca)
* update main curl URLs

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 243c86ffc8)
2021-08-17 02:16:01 +00:00
Daniel Golle
dd49c191af auc: update to version 0.2.0
Cherry-picked from
9c491c6cb auc: update to version 0.1.9
4d789eac3 auc: handle root filesystem type
545c93d45 auc: improve branch selection logic
6c784dff2 auc: move function to right place
b1d38e7ab auc: update to version 0.2.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-16 23:52:02 +01:00
Eneas U de Queiroz
395f55203f unixodbc: use 'install' when copying host binaries
'cp' fails with a text file busy error if it tries to overwrite an
executable file that is running.  'install' unlinks the file first, so
it will not cause the problem.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 47f98d7030)
2021-08-14 13:44:43 -07:00
Eneas U de Queiroz
b3c416b2d8 perl: perlmod.mk: use 'install' for host binaries
When installing a host perl module, the host perl binary in the staging
dir is replaced by using 'cp'.  However, if the binary is running in a
parallel job, cp will fail with a text file busy error.  Use
$(INSTALL_BIN), which unliks the file first to avoid the error.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 19c7496648)
2021-08-14 13:44:42 -07:00
James White
5665c3bdf9 stubby: Add multi WAN support for procd trigger
Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 1ad5e3f88c)
2021-08-14 07:50:51 +01:00
Jonathan G. Underwood
1ca9b3c98e stubby: remove maintainer
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
(cherry picked from commit 791a8fb2bc)
2021-08-14 07:50:41 +01:00
Rosen Penev
39b4016382 stubby: remove libidn2 and libunwind dependencies
There's no good way to get rid of these, so just delete the cmake files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4ebc879855)
2021-08-14 07:49:55 +01:00
Rui Salvaterra
57eab26bba stubby: bump to 0.4.0
Remove obsolete patch.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a01696890c)
2021-08-14 07:48:21 +01:00
Rosen Penev
f51e2db37d
Merge pull request #16355 from commodo/django-bump-21.02
[21.02] django: bump to version 3.2.6
2021-08-13 13:41:25 -07:00
Toke Høiland-Jørgensen
cb7030229f sqm-scripts: bump to v1.5.1
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2021-08-13 18:12:45 +02:00
Dirk Brenken
eed183c5fd
travelmate: update to 2.0.5-2
* scan for open uplinks even if no other station has been added/configured

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e6e3c9481d)
2021-08-13 11:19:50 +02:00
Dirk Brenken
3eab476000
travelmate: update to 2.0.5
* support the new travelmate option 'macaddr' to use a pre-defined MAC address (per uplink)
* vpn connections are now handled separately for each uplink
* The autoadd-feature for adding open uplinks will now be limited by the 'trm_maxautoadd' option. The default is '5', '0' disables this limitation.
* more code cleanups und optimizations to reduce the repetitive connection handling workload
* bugfixes regarding multiple radio support
* refine cp detection (no longer write and parse an error file)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c6328bad6c)
2021-08-13 11:16:38 +02:00
Alexandru Ardelean
20ff270f29 django: bump to version 3.2.6
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-08-13 11:37:24 +03:00
Rosen Penev
fc129aac91
Merge pull request #16338 from G-M0N3Y-2503/docker-20.10.8-backport
Docker 20.10.8 backport
2021-08-12 11:12:41 -07:00
Gerard Ryan
b3cfba1ded dockerd: Updated to 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:11 +10:00
Gerard Ryan
8326710294 docker: Updated to 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:11 +10:00
Gerard Ryan
6fb2beb6aa containerd: Updated to 1.4.9 for docker 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:10 +10:00
Gerard Ryan
f815bdd729 runc: Updated to 1.0.1 for docker 20.10.8
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-08-12 20:12:10 +10:00
Paul Spooren
10b2956260
whois: update to 5.5.9
* Updated the .ga TLD server.
* Removed the .cd and cf TLD servers.
* Removed 72 new gTLDs which are no longer active.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit d424d19b5a)
2021-08-11 23:58:32 +02:00
Rosen Penev
6f82209e47
whois: update to 5.5.8
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a527806211)
2021-08-11 23:58:24 +02:00
Rosen Penev
eda1e1045b
gitlab-runner: update to 14.0.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd51f58b14)
2021-08-11 23:36:57 +02:00
Rosen Penev
aa4171673e
clamav: update to 0.103.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2a685d665c)
2021-08-11 23:36:48 +02:00
Josef Schlehofer
2fc25208a3
irssi: add test.sh
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 21992344b5)
2021-08-11 23:36:18 +02:00
Rosen Penev
8de166f424
irssi: update to 1.2.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 752656c6be)
2021-08-11 23:36:11 +02:00
Ansuel Smith
e264d66894
atlas-sw-probe: fix copypaste error and clean tmp dir on exit
- Fix copypaste error for PUB_KEY link creation
- Clean tmp dir on exit to clear any remaining data

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 842a9d399f)
2021-08-11 23:35:43 +02:00
Daniel Golle
9cb317541b
Flash: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 2abbf288ed)
2021-08-11 23:32:56 +02:00
Daniel Golle
eb5e13d370
Jinja2: update to version 3.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7b5b9b9d11)
2021-08-11 23:32:49 +02:00
Daniel Golle
573338fe41
Werkzeug: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 65c12b3c2f)
2021-08-11 23:32:45 +02:00
Daniel Golle
d1007d29f2
MarkupSafe: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c30b804842)
2021-08-11 23:32:35 +02:00
Daniel Golle
9fa4ce04ae
click: update to version 8.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 01620b9cfb)
2021-08-11 23:32:31 +02:00
Daniel Golle
735f9ed872
itsdangerous: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ab3b605cf)
2021-08-11 23:32:25 +02:00
Josef Schlehofer
683137cbc5
Merge pull request #16195 from miska/snort3-21.02
net/snort3: Include default configs and snort2lua
2021-08-11 23:22:43 +02:00
Michal Vasilek
dccb988554
knot-resolver: update to version 5.4.0
* refresh patches
* disable kres_gen_test to fix cross

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit e7127d4684)
2021-08-09 23:13:15 +02:00
Michal Vasilek
e387725106
knot: update to version 3.1.0
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 81e0fcb76f)
2021-08-09 23:13:05 +02:00
Rosen Penev
ac2b25aacd
Merge pull request #16309 from jefferyto/golang-1.16.7-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16.7
2021-08-09 13:59:26 -07:00
Rosen Penev
2baf7e0baf
Merge pull request #16307 from jefferyto/python-twisted-21.7.0-openwrt-21.02
[openwrt-21.02] python-twisted: Update to 21.7.0, refresh patches
2021-08-09 13:58:54 -07:00
Jeffery To
a2819fab7e
golang: Update to 1.16.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4d7a71a7cb)
2021-08-09 17:53:22 +08:00
Jeffery To
1a3687049f
python-twisted: Update to 21.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4fa4cd8322)
2021-08-09 17:28:33 +08:00
Rosen Penev
589625789d
Merge pull request #16288 from Linaro1985/openwrt-21.02_fix_libxslt
[21.02] libxslt: fix compilation because of wrong libxml2 check in configure script
2021-08-07 16:57:31 -07:00
Maxim Anisimov
78a25390b7 libxslt: fix compilation because of wrong libxml2 check in configure script
More details: 90c34c8bb9

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
(cherry picked from commit b5ac497d66)
2021-08-05 09:15:46 +03:00
Rosen Penev
42eaa2ea2c
Merge pull request #16258 from stangri/21.02-curl
[21.02] curl: enable HTTP/2 support by default
2021-08-03 12:21:13 -07:00
Stan Grishin
d96b2c894e
Merge pull request #16275 from stangri/21.02-simple-adblock
[21.02] simple-adblock: update to 1.8.7-6
2021-08-02 00:25:40 -07:00
Stan Grishin
beba982403 simple-adblock: update to 1.8.7-6
* supports newer shellcheck
* restore EXTRA_COMMANDS compatibility with 19.07
* move status display from various functions to status_service
* bugfix: status_service line break after output
* minor arythmetic fix in status_service

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-08-02 07:03:55 +00:00
Stan Grishin
babb7144ea
Merge pull request #16253 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: update to 2021-07-29-1
2021-08-01 22:58:28 -07:00
Rosen Penev
4bd6eb8064
Merge pull request #16266 from nxhack/2102_node_14174
[21.02] node: bump to 14.17.4
2021-08-01 13:29:40 -07:00
Michael Heimpold
49b1a6f4cc
Merge pull request #16264 from mhei/21.02-php8-update
[21.02] php8 update to 8.0.9
2021-08-01 12:32:47 +02:00
Michael Heimpold
97c52348df
Merge pull request #16267 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.22
2021-08-01 12:32:25 +02:00
Michael Heimpold
f5e35bf1df
Merge pull request #16265 from mhei/libxml2-update
[21.02] libxml2: update to 2.9.12
2021-08-01 12:31:30 +02:00
Michael Heimpold
51de4b108e php7: update to 7.4.22
This fixes:
    - CVE-2021-21704
    - CVE-2021-21705

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

(cherry picked from commits
  - 555d0c9a29
  - f15aba89f7
  - 741d6d6768)
2021-08-01 06:51:18 +02:00
Michael Heimpold
38fc5d866d libxml2: update to 2.9.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 6b932d3ff7)
2021-08-01 06:36:48 +02:00
Michael Heimpold
e928ef733e php8: add CI runtime test
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2dad652446)
2021-07-31 15:34:11 +02:00
Michael Heimpold
91be67942d php8: update to 8.0.9
Also update opcache makefile patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commits
 - 5e82e6be71
 - 0154157b6c
 - 961b7c5a25
 - 7ddd5280d4
 - 9080dce60f)
2021-07-31 15:34:11 +02:00
Hirokazu MORIKAWA
bc6d77a7ce node: bump to 14.17.4
July 2021 Security Releases:

Use after free on close http2 on stream canceling (High) (CVE-2021-22930)
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-31 11:30:27 +09:00
Stan Grishin
af5c3af0c3 curl: enable HTTP/2 support by default
Description: Lack of support of HTTP/2 by default starts to hurt,
for example with https-dns-proxy package, some DoH resolvers (like mullvad)
no longer support HTTP/1 and are not usable.

This enables HTTP/2 support by default (which would bring ~68Kb libnghttp).

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 23:20:34 +00:00
Stan Grishin
3cb1894b83 https-dns-proxy: update to 2021-07-29-01
* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 13:11:52 +00:00
Olivier Poitrey
c4a323903f nextdns: Update to version 1.35.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-30 12:40:03 +03:00
Nick Hainke
bda6773b94 dawn: update to 2021-07-27
276ca16 msghandler: fix rrm array parsing
1e4871d datastorage: debug rrm capabilities

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 6582979678)
2021-07-27 16:07:52 +02:00
Dirk Brenken
25a0a5cc4a
travelmate: update to 2.0.4
* code cleanup
* add auto login script for Julianahoeve beach resort (NL)
* add auto login script for Vodafone hotspots (DE)
* add auto login script for telekom hotspots (DE)
* enhance captive portal detection to support html redirects as well
* change default captive portal detection url to
  'detectportal.firefox.com'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 380a5110b4)
2021-07-27 14:05:21 +02:00
Stan Grishin
aacfbe1534
Merge pull request #16145 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update to 0.3.5-1
2021-07-26 20:36:14 -07:00
Dirk Brenken
877b652147
adblock: bugfix 4.1.3-3
* fix regex to prepare google safesearch domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 69a2a68c31)
2021-07-26 20:01:09 +02:00
Rosen Penev
11455c0fd6 librouteros: don't build docs
Fixes compilation without host pod2man.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e41fd1794b)
2021-07-25 22:19:02 +03:00
Josef Schlehofer
ecea08671f
Merge pull request #16213 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.11.2
2021-07-24 17:27:40 +02:00
Tianling Shen
2c7ad7ca61
yq: Update to 4.11.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d8fcfb0628)
2021-07-24 18:30:25 +08:00
Michal Hrusecky
979464c6a1
net/snort3: Include default configs and snort2lua
Include default configuration files to have something to start from.
Also include snort2lua to help convert snort2 rules to snort3 to also
help with bootstrapping the configuration.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-22 14:15:53 +02:00
Josef Schlehofer
fefd882274
syslog-ng: update to version 3.33.2
Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4b06f9ff4c)
2021-07-22 07:51:03 +02:00
Scott Lamb
17c4b03320
ddns-scripts: use https for google ipv6 ddns url
This matches an ipv4 change in 21f5cdd2fa and has the same rationale.
Google requires https for both ipv6 and ipv6.

Signed-off-by: Scott Lamb <slamb@slamb.org>
(cherry picked from commit e5f45b94c0)
2021-07-21 23:54:17 +02:00
Rosen Penev
d2cb8f4eed
erlang: disable PIE
Fails to compile with it on.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5685d92268)
2021-07-21 23:53:42 +02:00
George Iv
fc598339c6 yggdrasil: bump to 0.4.0
- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit e135c4c867)
2021-07-20 20:57:25 -07:00
Rosen Penev
8d20c9ff4d
Merge pull request #16165 from stangri/21.02-vpnbypass
[21.02] vpnbypass: update to 1.3.2-1
2021-07-20 20:55:51 -07:00
Stan Grishin
4ea887e643 vpnbypass: updates to 1.3.2-1
bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-20 21:23:41 +00:00
Rosen Penev
28dacea430
Merge pull request #16154 from nwidger/niels/delve-1.7.0-openwrt-21.02
[openwrt-21.02] delve: Update to 1.7.0
2021-07-20 02:14:50 -07:00
Rosen Penev
903679ddb2
Merge pull request #16156 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.11.0
2021-07-20 02:14:18 -07:00
Josef Schlehofer
5e69e41081
Revert "net/miniupnpd: ext_ip_reserved_ignore support"
This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.

[1] https://github.com/openwrt/packages/issues/15258
[2] https://github.com/miniupnp/miniupnp/issues/542
[3] https://github.com/miniupnp/miniupnp/pull/511

This reverts commit b76aa99194.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 107f3376b5)
2021-07-20 10:25:21 +02:00
Jan Hak
117c6bf761
knot: update to version 3.0.8
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 5f374929cf)
2021-07-20 09:40:04 +02:00
Jan Hak
1c69a52703
knot: update to version 3.0.7
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 8d66f49bae)
2021-07-20 09:39:55 +02:00
Tianling Shen
17809e28a1
yq: Update to 4.11.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a5f657ecf7)
2021-07-19 22:15:30 +08:00
Niels Widger
eabde6aab5 delve: Update to 1.7.0
See
https://github.com/go-delve/delve/blob/master/CHANGELOG.md#170-2021-07-19
for changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
(cherry picked from 098d61ca1)
2021-07-19 08:39:15 -04:00
Rosen Penev
d74aedca8a
Merge pull request #16150 from jefferyto/golang-1.16.6-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16.6
2021-07-19 03:38:16 -07:00
Jeffery To
ec9700fee4
golang: Update to 1.16.6
Includes fix for CVE-2021-34558 (crypto/tls: clients can panic when
provided a certificate of the wrong type for the negotiated parameters).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c0c62227bd)
2021-07-19 07:18:08 +08:00
Rosen Penev
b8a50d7a6c
Merge pull request #16147 from luizluca/21.02/sane-fix_backport
[21.02] sane-backends fix usbid generation (backport)
2021-07-17 21:30:46 -07:00
Sebastian Kemper
f7ba01cdd4 sane-backends: use macros (properly), remove chmod
- use $(INSTALL_DIR) instead of mkdir
- using $(INSTALL_CONF) and then running chmod is pointless, use
  $(INSTALL_DATA) directly
- /etc/xinetd.d/sane-port doesn't need read protection from non-root
  users, use $(INSTALL_DATA) as well

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit f37006c2e6)
2021-07-18 00:58:40 -03:00
Sebastian Kemper
041e287766 sane-backends: fix usbid file generation
On some build systems (build bots, Debian Buster for example) the
current mechanism in the Build/Install define doesn't run. Replace it
with shell fu that works.

Issue was reported, see [1].

[1] https://github.com/openwrt/packages/issues/16085

Fixes #16085

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 977109e286)
2021-07-18 00:58:28 -03:00
Stan Grishin
48576dba7a vpn-policy-routing: update to 0.3.5-1
support for 21.02.0-rc2 and up
support for reloading a single interface on ifup/ifupdate
rename config file
updated shellcheck compatibility
remove obsolete create/remove_lock
interface processing optimizations to speed up reloads
drop dependency on curl in user scripts
uniform styling of functions

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-18 00:33:57 +00:00
Alexandru Ardelean
a0183d3f68 stress-ng: bump to version 0.12.10
Patch `010-soft-float.patch` can be dropped.
It was upstreamed via https://github.com/ColinIanKing/stress-ng/pull/126

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 6f48074e79)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
0805c11997 stress-ng: bump to version 0.12.07
Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 96692fa6c1)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
43a391e5fd stress-ng: bump to version 0.12.06
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 940492c577)
2021-07-16 20:29:16 -07:00
Alexandru Ardelean
752da2a8b9 stress-ng: bump to version 0.12.04
Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 987c82cc73)
2021-07-16 20:29:16 -07:00
Luiz Angelo Daros de Luca
23925c77a7 ruby: update to 3.0.2
This release fixes some bugs and these vulnerabilities:

* CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
* CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
* CVE-2021-31799: A command injection vulnerability in RDoc

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 1b41e8f641)
2021-07-16 16:07:23 +02:00
Rosen Penev
2b73ad0483
Merge pull request #16119 from commodo/python-updates1-21.02
[21.02] python-{simplejson,cffi}: bump versions
2021-07-15 11:44:35 -07:00
Rosen Penev
e67f5868a7
Merge pull request #16125 from jefferyto/addrwatch-fixes-openwrt-21.02
[openwrt-21.02] addrwatch: Various fixes
2021-07-15 11:42:00 -07:00
Rosen Penev
1d3a342f6b
Merge pull request #16128 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.8
2021-07-15 11:41:42 -07:00
Nick Hainke
dd1930f032 dawn: update to 2021-07-11
ec9a3a9 fix GCC11 compilation

Thanks to neheb and cotequeiroz.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit ee4616fb43b489003cab957e3a2d6f5f14c6fb97)
2021-07-15 18:58:07 +02:00
Nick Hainke
c6fcfda213 dawn: update to 2021-07-08
555268b ubus: filter neighbors by SSID when preparing nr
3db9607 data storage: match SSID when searching ap entry
a22f5a7 storage: ensure SSID strings are NULL-terminated

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 163ccbf0236824b29fd2158d3a287dda5e427b00)
2021-07-15 18:58:07 +02:00
Tianling Shen
8aeb26b413
yq: Update to 4.9.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 855e5b6eb5)
2021-07-15 17:25:58 +08:00
Jeffery To
cc78ba6b58
addrwatch: Various fixes
Makefile changes include:

* Remove USE_UCLIBC, as uclibc is no longer supported

* Package output modules

* Move main binary (back) to /usr/sbin, as it is system administration
  related and requires superuser privileges

New patches:

* 003-add-space-for-null-byte.patch - from
  374cfd2cab

* 004-more-specific-library-linking.patch - from
  27b57d9da3

* 005-use-c99-format-macro-constants.patch - from
  https://github.com/fln/addrwatch/pull/28

Init script changes include:

* Change from explicit disable to explicit enable, so that the service
  is disabled by default and on first install

* Set config option default values to default values of the main binary

* Fix command-line option names and format (from
  https://forum.openwrt.org/t/cant-start-addrwatch-service/60499/3)

* Always use the --quiet command-line option, as the procd instance is
  not configured to capture stdout/stderr

* Change the syslog config option to start the syslog output module

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 31ae85bca9)
2021-07-15 15:51:35 +08:00
James Vorderbruggen
6a24f88c3b yggdrasil: allow HTTPS connections
Signed-off-by: James Vorderbruggen <jamesvorder@gmail.com>
(cherry picked from commit ffff347396)
2021-07-14 12:27:58 -07:00
George Iv
0a5ab68823 yggdrasil: bump to 0.3.16
Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
(cherry picked from commit 76b642b50f)
2021-07-14 12:27:58 -07:00
Alexandru Ardelean
79417f0a37 python-cffi: bump to version 1.14.6
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e08b94b753)
2021-07-14 11:22:04 +03:00
Alexandru Ardelean
02a0c8a4fb python-simplejson: bump to version 3.17.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3f2d7052743500e993a5f4a39cef0dc0eaac4d60)
2021-07-14 09:41:10 +03:00
Etienne Champetier
1954ed36ab openvpn: enable LZO support by default for OpenSSL variant
User that don't control both OpenVPN client and server
might still need LZO support, so keep it enable by default for at least
OpenSSL variant.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 03c3c92496)
2021-07-13 11:51:46 -04:00
Josef Schlehofer
827fa8e21f
syslog-ng: disable mqtt
For now, disable mqtt as it was automatically enabled as the build
system finds compiled libpaho-mqtt-c and requires dependency.

---
Here is the output:
Package syslog-ng is missing dependencies for the following libraries:
libpaho-mqtt3c.so.1
---

This is a new feature since syslog-ng 3.33.1 and if anyone is interested
in it, it can be enabled.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e319e89fde)
2021-07-12 16:17:35 +02:00
Florian Eckert
f584949682 mwan3: bump PKG_VERSION to 2.10.11
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 44d79147ea)
2021-07-12 09:53:48 +02:00
Florian Eckert
7e71550f14 mwan3: add troublshoot command from LuCI
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 619b721c2f)
2021-07-12 09:53:25 +02:00
Florian Eckert
4f5b05ab8c mwan3: cleanup help output
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9dac71e3d)
2021-07-12 09:53:06 +02:00
Josef Schlehofer
588d781dfb
syslog-ng: update to version 3.33.1
- Release notes:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.1

- Bump version in config
It fixes:
WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.33 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.31'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2b4be08a8c)
2021-07-12 06:16:53 +02:00
Josef Schlehofer
8f284fa00d
Merge pull request #16088 from turris-cz/21.02/lxc-change-gpgkeyserver
lxc: add patch to switch GPG server
2021-07-11 20:44:19 +02:00
Rosen Penev
56d7a225e2
apache: update to 2.4.48
Refreshed patch.

Fixes:

CVE-2019-17567
CVE-2020-13938
CVE-2020-13950
CVE-2020-35452
CVE-2021-26690
CVE-2021-26691
CVE-2021-30641
CVE-2021-31618

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6dfd07097d)
2021-07-11 12:00:52 +02:00
Rosen Penev
bed3caea8a
Merge pull request #16093 from Andy2244/samba-4.14.5_(21)
[21.02] samba4: update to 4.14.5
2021-07-11 00:10:49 -07:00
Rosen Penev
f66e5a184a
Merge pull request #16092 from Andy2244/libtirpc-1.3.2_-21]
[21.02] libtirpc: update to 1.3.2
2021-07-11 00:10:44 -07:00
Rosen Penev
e490f89de7
Merge pull request #16091 from Andy2244/rpcbind-1.2.6_-21]
[21.02] rpcbind: update to 1.2.6
2021-07-11 00:10:36 -07:00
Rosen Penev
1d662b100a
Merge pull request #16090 from Andy2244/softethervpn-5.02.5180_(21)
[21.02] softethervpn5: update to 5.02.5180
2021-07-11 00:10:32 -07:00
Rosen Penev
e36ffd6a65
Merge pull request #16094 from Andy2244/wsdd2-git-2021-06-28_(21)
[21.02] wsdd2: update to git 2021-06-28
2021-07-11 00:10:26 -07:00
Daniel Golle
e11d70d0c0
transmission: add new syscalls to seccomp filter
Testing showed that additional syscalls are needed on ARMv7.
Add "getegid32", "geteuid32", "getgid32" and "getrandom" as they are
all innocent.
Bump PKG_RELEASE.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1141ee1e51
and commit a78e527012)
2021-07-10 22:58:48 +01:00
Josef Schlehofer
ee11ce67a2
netdata: update to version 1.30.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1d532fa545)
2021-07-10 22:29:33 +02:00
Andy Walsh
3ac73fa18b wsdd2: update to git 2021-06-28
* update to git 2021-06-28
* add extra startup delay

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:11:11 +02:00
Andy Walsh
7723235f47 samba4: update to 4.14.5
* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:09:29 +02:00
Andy Walsh
a2a9702f8a softethervpn5: update to 5.02.5180
* update to 5.02.5180
* add dep: libsodium

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 21:07:47 +02:00
Andy Walsh
104af774c6 rpcbind: update to 1.2.6
* update to 1.2.6
* remove upstream merged patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 20:56:50 +02:00
Andy Walsh
90341aa793 libtirpc: update to 1.3.2
* update to 1.3.2

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2021-07-10 20:54:53 +02:00
Josef Schlehofer
c66b3dc45a
lxc: add patch to switch GPG server
By default, there was used sks-keyservers.net pool, which has invalid
SSL certificate and they also announced that their service is deprecate
and no longer maintained.

Use the same GPG server as LXC is using by default in the newer
releases.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-10 18:05:53 +02:00
Josef Schlehofer
d948dc938b
Merge pull request #16065 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.7
2021-07-08 06:22:32 +02:00
Tianling Shen
a5a176d867
yq: Update to 4.9.7
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit faf915e97d)
2021-07-07 20:33:01 +08:00
Rosen Penev
ea8d0d246e
Merge pull request #16050 from nxhack/2102_libuv_CVE-2021-22918
[21.02] libuv: fix CVE-2021-22918
2021-07-06 23:02:17 -07:00
Alexandru Ardelean
4bc55dd043 python3: do a simple ls on pip & setuptools if not selected for build
I seem to forget to check/select setuptools and pip (that come bundled with
Python).
This change will do a simple 'ls' on the 2 wheel files, so that the build
fails even if just building Python.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-07-06 16:20:30 +02:00
Alexandru Ardelean
ef50ed85a5 python3: update to version 3.9.6
Refreshed patches.
Bumped pip to 21.1.3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 44e009364f5a115172f5825fbfd8c0b3730021a5)
2021-07-06 16:20:30 +02:00
Daniel Golle
033b04ee70 mwan3: use default routes from additional tables
Until now the additional tables listed in gobal 'rt_table_lookup' were
not considered for interfaces.
In order to be able to also use interface-defined routes from tables
other than main, consider also tables listed in 'rt_table_lookup'.
Update version to 2.10.10 as requested by maintainer.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit cb02b42007)
2021-07-06 08:00:17 +02:00
Hirokazu MORIKAWA
790a49c09f libuv: fix CVE-2021-22918
idna: fix OOB read in punycode decoder

libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.

b7466e31e4
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-07-06 14:02:43 +09:00
Nikos Mavrogiannopoulos
bfd2ad7a09
Merge pull request #16015 from DeathCamel58/openconnect-backport-iconv/intl-fixes
openconnect: backport iconv/intl fix
2021-07-05 19:43:08 +02:00
Rosen Penev
99c42c4b3e
Merge pull request #16042 from commodo/django-bump-21.02
[21.02] django: bump to version 3.2.5
2021-07-05 02:54:56 -07:00
Alexandru Ardelean
c605f4cb4c django: bump to version 3.2.5
Several bug-fixes.
Fix CVE-2021-35042

Release notes:
  https://docs.djangoproject.com/en/3.2/releases/3.2.5/

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3ee863421a675c41848261a17df145716a23d907)
2021-07-05 10:48:42 +03:00
Rosen Penev
23a799a7db
Merge pull request #16013 from commodo/python-dateutil-21.02
[21.02] python-dateutil: add setuptools-scm build dep
2021-07-03 15:16:37 -07:00
Rosen Penev
8a2619b8ca
Merge pull request #16024 from rs/nextdns-1.34.2-openwrt-21.02
[21.02] nextdns: Update to version 1.34.2
2021-07-03 15:15:37 -07:00
Olivier Poitrey
63ca71937f nextdns: Update to version 1.34.2
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-02 18:54:54 +00:00
Baptiste Jonglez
57ed36db42 tessdata: uncompress tarball only once to speed up builds
The previous approach was to uncompress N times a big tarball (638 MB)
where N=130 is the number of supported languages.  Each iteration would
only extract a single file, but it still needs to uncompress the whole
tarball.  This is of course completely inefficient.

Now, we uncompress the tarball only once to extract all relevant files,
and then iterate N times to copy the file needed for each language.

This massively speeds up builds, at the expense of temporarily requiring
more build space (about 1 GB more)

Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
(cherry picked from commit 7fe513971f)
2021-07-02 20:37:50 +02:00
Rosen Penev
3d7d41f712 tessdata: update to 2.1.0
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 37bffba074)
2021-07-02 20:37:45 +02:00
Dylan Corrales
7d9210015d openconnect: backport iconv/intl fix
This was pulled from #14741. #14734 affects me as well on Debian 11.

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>
2021-07-02 12:11:03 -04:00
Alexandru Ardelean
5201d8739c python-dateutil: add setuptools-scm build dep
Following:
  https://github.com/openwrt/packages/pull/16004
  https://github.com/openwrt/packages/pull/15995
  https://github.com/openwrt/packages/issues/15988

It seems that dateutil requires setuptools-scm to be installed.
As such, this is being added as a dependency.

Also, bump setuptools-scm to version 6.0.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e2026346cc)
2021-07-02 16:23:23 +03:00
Dirk Brenken
c2657a2e96
adblock: update 4.1.3-2
* add a tcpdump option to resolve IPs in adblock reporting,
  set 'adb_represolve' accordingly (disabled by default). If enabled
  tcpdump will perform a reverse DNS (PTR) lookup for each IP address
* add 'stalkerware' source (provided by @astryzia)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e5fd19d2e0)
2021-07-01 06:31:56 +02:00
Oskari Rauta
8e1a8026b9
crun: update to 0.20
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 0b609eb373)
2021-06-30 18:34:45 +02:00
Oskari Rauta
15b873947c
crun: bump to version 0.19.1
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 616d867e48)
2021-06-30 18:34:32 +02:00
Eneas U de Queiroz
dae7bdd915
crun: Don't build on arc
The package needs libseccomp, which does not currently support arc.
In order to avoid a circular dependency, we must avoid arc here as well.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 048e1d2d63)
2021-06-30 18:34:19 +02:00
Oskari Rauta
08abbfd9b4
crun: add package crun
crun is the prefered container run-time of podman, it's faster than
runc and has a much lower memory footprint.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 01d1a4969e)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Fixes: #15870
2021-06-30 18:33:54 +02:00
Daniel Golle
0f395b9947
auc: update to version 0.1.8
This fixes support for x86, auc now selects the right combined image
depending on the system being booted in EFI mode or not.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1204cb82f9)
2021-06-30 13:43:57 +01:00
Niels Widger
51dd1c1fdb delve: add package
Signed-off-by: Niels Widger <niels@qacafe.com>
2021-06-29 20:56:18 +03:00
Rosen Penev
e81fa692af
Merge pull request #15987 from G-M0N3Y-2503/backport-cache-domains-fix-wildcard
cache-domains: Fixed missing wildcard entries
2021-06-28 16:34:40 -07:00
Gerard Ryan
3fef9fffa7 cache-domains: Fixed missing wildcard entries
The fix requires the use of the generated dnsmasq `lancache.conf` file.
So I moved configuration of the hosts directory out of the UCI and into
the generated dnsmasq configuration file to simplify the script.

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-27 17:29:02 +10:00
Rosen Penev
dc67b2a183
Merge pull request #15976 from rs/nextdns-1.33.11-openwrt-21.02
[21.02] nextdns: Update to version 1.33.11
2021-06-26 12:43:56 -07:00
Olivier Poitrey
24e67d6fa7 nextdns: Update to version 1.33.11
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-06-26 18:00:32 +00:00
Dirk Brenken
4692a31beb
travelmate: startup fixes
* fix a possible race condition during boot
* use the new "device" syntax in the network wizard

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e407566cce)
2021-06-25 23:19:21 +02:00
Rosen Penev
6b85a951c5
Merge pull request #15940 from mkrkn/openwrt-21.02
[21.02] openvpn: update to 2.5.3
2021-06-23 16:42:51 -07:00
Magnus Kroken
29eab35c68 openvpn: update to 2.5.3
Remove upstreamed patch and fix test.sh script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2021-06-23 22:00:04 +02:00
Alexandru Ardelean
1216b02d4b tcpreplay: bump to version 4.3.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 7436d944fa)
2021-06-22 14:33:16 +02:00
Alexandru Ardelean
56e4da231d python-lxml: bump to version 4.6.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 89a6254b0a)
2021-06-22 14:33:16 +02:00
Alexandru Ardelean
535bcdb578 pillow: bump to version 8.1.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c6f8536efa)
2021-06-22 14:33:16 +02:00
Florian Eckert
1e01952ce8 ddns-scripts: get l3 device for bind network using curl
If pppoe is used for wan access. script set 'eth1' as interface for curl
call. The correct interface is however 'pppoe-wan'.

The script uses 'network_get_physdev' function to get real device for
bind_network but this is wrong. We need instead the l3_device of the the
logical interface.

In case if we don't use pppoe connection - 'l3_device' is equal to real device.

This was reported by the github user `welderpb` with P/R:
 https://github.com/openwrt/packages/pull/14431

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 036079b308)
2021-06-22 10:24:49 +02:00
Wenli Looi
99f838dd6d ddns-scripts: Fix for domains with dash
Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
(cherry picked from commit 9e2aad3fde)
2021-06-22 10:24:38 +02:00
Wenli Looi
12cd693294 ddns-scripts: Fix for wildcard subdomain
Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
(cherry picked from commit 93344aafa0)
2021-06-22 10:24:12 +02:00
Josef Schlehofer
5fa605a1fa
Merge pull request #15924 from nxhack/2102_icu_691
[21.02] icu: bump to 69.1
2021-06-20 10:04:24 +02:00
Hirokazu MORIKAWA
0db86f4184 icu: bump to 69.1
ICU 69 updates to CLDR 39 locale data with many additions and corrections. ICU 69 also includes significant improvements for measurement unit formatting and number formatting in general, as well as many other bug fixes and enhancements.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-06-20 14:16:04 +09:00
Rosen Penev
5dbac90c0e
Merge pull request #15909 from mlichvar/21.02-chrony-fix-uci-allow
[21.02] chrony: fix uci NTP access configuration
2021-06-19 13:13:15 -07:00
Miroslav Lichvar
c45c0a1d40 chrony: fix uci NTP access configuration
The chrony interface hotplug script reuses the handle_allow function
from the init script to allow NTP access on interfaces specified in uci.
The function requires /lib/functions/network.sh. Include the file in the
hotplug script to make the function work as expected.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2021-06-19 13:32:16 +02:00
Rosen Penev
b033c0dcda
Merge pull request #15901 from nxhack/2102_node_14171
[21.02] node: bump to 14.17.1
2021-06-19 00:41:33 -07:00
Rosen Penev
b206227ec3
Merge pull request #15905 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.9.6
2021-06-19 00:41:06 -07:00
Chen Minqiang
69e4207965
schroot: fix typo
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit 2b52fb6221)
2021-06-18 23:44:10 +02:00
Jan Pavlinec
1cc5bad232
knot-resolver: change scheduling priority
This should prevent some resolving issues by other router app.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 1d1eca32db)
2021-06-18 17:25:24 +02:00
Andy Walsh
77d5d0cba4
samba4: update to 4.13.9
* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 2057fc9ee4)
2021-06-18 17:25:15 +02:00
Tianling Shen
ce17b9e8f1
yq: Update to 4.9.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6c6b74b8f8)
2021-06-18 22:58:35 +08:00
Alexandru Ardelean
c3b06713b9 python-cryptography: bump to version 3.4.7
Dropped patches:
  0004-Replace-EVP_CIPHER_CTX_cleanup-with-EVP_CIPHER_CTX_r.patch
  0005-Switch-get_-Update-APIs-to-get0.patch

Reworked patches:
  0001-Add-new-ASN1_STRING_get0_data-API.patch
  0006-Add-X509_STORE_CTX_trusted_stack-compatibility-macro.patch
These 2 require that we keep only the CUSTOMIZATIONS stuff for now. Maybe
later we can drop this.

Ran 'make package/python-cryptography/refresh'.

Added patch:
  0004-disable-rust.patch
upstream did a sloppy job with the CRYPTOGRAPHY_DONT_BUILD_RUST logic; we
need to patch it, to make sure the setuptools-rust isn't installed.
We may need to carry this patch in our tree for a bit longer than upstream,
because in newer versions, CRYPTOGRAPHY_DONT_BUILD_RUST logic gets removed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 01d1b4581e)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-18 13:06:26 +03:00
Hirokazu MORIKAWA
4c22932e23 node: bump to 14.17.1
Notable Changes:
deps: update ICU to 69.1 (Michaël Zasso)
errors: align source-map stacks with spec (Benjamin Coe)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-06-18 18:06:04 +09:00
Dirk Brenken
26be379c82
banip: refine/fix nginx search pattern
* fix issue with nginx search pattern reported in forum support thread

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0c16840e26)
2021-06-17 22:28:29 +02:00
Hannu Nyman
a1dc635481 nano: update to 5.8
Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6f2ac237a1)
2021-06-17 19:04:40 +03:00
Daniel Golle
f69d625ac4 auc: compare versions using dpkg/opkg's verrevcmp
Using strcmp() to compare a version string doesn't work well.
Use verrevcmp() function from opkg instead.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 794cf3ac59,
as it was previously skipped also switch PKG_REVISION back to manual
to keep it in sync with master branch)
2021-06-16 12:23:40 +01:00
Alexandru Ardelean
92744fd598 django: bump to version 3.2.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 24a8f5874155398df8e64b29897a511d5d603e03)
2021-06-15 14:58:30 +03:00
Daniel Golle
a8ae03f889 auc: update to version 0.1.7
No longer fail in case a package is part of multiple lists (which may
happen temporarily in case it becomes 'nonshared').
Bump version to prepare for sync accross branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 9150e82768)
2021-06-15 10:52:09 +01:00
Daniel Golle
09fc258b54 auc: fix several issues
* don't segfault if server reply is incomplete
 * always request 'generic' image on x86/generic and x86/64
 * make SNAPSHOT branches sticky, eg. stay on 21.02-SNAPSHOT and do
   not 'upgrade' to 21.02.0-rc2.
 * output requested server URL when debugging

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 02bc1fc929)
2021-06-15 10:51:53 +01:00
Daniel Golle
1304580682 auc: support queue_position status from server
Display position in queue while waiting for build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5b7ff1ad65)
2021-06-15 10:51:53 +01:00
Florian Eckert
0fa45cf137 dockerd: refactoring uciadd and ucidel handling
This change makes the handling of adding and deleting interface, device
bridge and firewall more robust.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0fded274ec)
2021-06-15 11:32:24 +02:00
Jeffery To
5c43da5e10 python3: Add readline to dependency finder script
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1eeeba60d8cffc2f655c1ecbb277ca6734ac46b7)
2021-06-15 08:57:00 +03:00
Hirokazu MORIKAWA
4e75a8fb85 mg: bump to 6.9
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-06-15 08:56:17 +03:00
Josef Schlehofer
e738d2faf1
Merge pull request #15857 from jefferyto/python3-readline-openwrt-21.02
[openwrt-21.02] python3: add python3-readline subpackage
2021-06-14 09:53:33 +02:00
Dirk Brenken
7d8213dc8d
banip: update 0.7.9
* add switch 'ban_fetchinsecure' to allow insecure downloads
  without certificate check (disabled by default)
* better explain 'ban_fetchparm' in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 945513860d)
2021-06-14 06:35:34 +02:00
Dirk Brenken
45935d65a8
adblock: update 4.1.3
* fix a small json syntax issue in adblock.sources
* add easylist addon to reg_fr source
* add switch 'adb_fetchinsecure' to allow insecure downloads
  without certificate check (disabled by default)
* better explain 'adb_fetchparm' in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 74dec65b61)
2021-06-14 06:33:18 +02:00
Alexandru Ardelean
608a7422e0
python3: add python3-readline subpackage
Python3 comes with a built-in readline module. It wasn't included up until
now; mostly because it wasn't considered.

This change introduces it as a sub-package of the main Python3 package.
readline support is included in Python.

libreadline pulls libncursesw as a package, so python3-ncurses was
updated to pull libncursesw as well.
It should be the same package; mostly done for consistency.

Resolves the issue reported here:
  https://forum.openwrt.org/t/python3-repl-missing-readline/90039

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 49faf5d7ca)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-14 02:28:02 +08:00
Rosen Penev
e49cd72869
btrfs-progs: update to 5.11
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 95935f2baf)
2021-06-13 09:47:04 +02:00
Rosen Penev
09a422c97a shairport-sync: update to 3.3.8
Explicitly add libdaemon configure flag. It seems the default was
changed.

Add AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 94bc8a127c)
2021-06-12 16:09:16 -07:00
Rosen Penev
e0c2907e9c
Merge pull request #15840 from jefferyto/python-twisted-tls-conch-openwrt-21.02
[openwrt-21.02] python-twisted: Add tls/conch dependencies
2021-06-12 13:58:09 -07:00
Jeffery To
f66c5950ff
python-twisted: Add tls/conch dependencies
By adding these dependencies, it is much easier for users (both
applications that use Twisted and end users) to have secure
communications by default.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8349546208)
2021-06-12 19:01:35 +08:00
Josef Schlehofer
4f453177e4
Merge pull request #15836 from jefferyto/python-twisted-21.2.0-openwrt-21.02
[openwrt-21.02] python-twisted: Update to 21.2.0, redo patches
2021-06-12 01:20:59 +02:00
Jeffery To
f295e21aa9
python-twisted: Update to 21.2.0, redo patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b6e05d1fd)
2021-06-12 06:22:52 +08:00
Rosen Penev
3c522bb4ae
Merge pull request #15827 from jefferyto/python-package-updates-openwrt-21.02
[openwrt-21.02] python-six,et_xmlfile, django: bump package versions
2021-06-11 13:25:24 -07:00
Josef Schlehofer
bae049fa51
Merge pull request #15834 from jefferyto/python-incremental-21.3.0-openwrt-21.02
[openwrt-21.02] python-incremental: Update to 21.3.0, refresh patch
2021-06-11 22:16:52 +02:00
Josef Schlehofer
65a4945927
Merge pull request #15831 from jefferyto/python-zope-interface-5.4.0-openwrt-21.02
[openwrt-21.02] python-zope-interface: Update to 5.4.0
2021-06-11 22:16:30 +02:00
Josef Schlehofer
6abed847a5
Merge pull request #15829 from jefferyto/python-attrs-21.2.0-openwrt-21.02
[openwrt-21.02] python-attrs: Update to 21.2.0
2021-06-11 22:16:15 +02:00
Jeffery To
cac4f5fa73
python-incremental: Update to 21.3.0, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b2738e9da6)
2021-06-12 02:19:52 +08:00
Jeffery To
f082f8150f
python-zope-interface: Update to 5.4.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ffbde739c6)
2021-06-11 23:46:35 +08:00
Karl Palsson
dbc5434a42 net/mosquitto: Update to 2.0.11
This is a security and bugfix release.

Full release notes: https://mosquitto.org/blog/2021/06/version-2-0-11-released/

Fixes a remotely triggered memory leak
Fixes broker reconnections in certain failure situations
Fixes (non-standard) qos0 queuing

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-06-11 15:30:50 +00:00
Jeffery To
86fe94bdaf
python-attrs: Update to 21.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0dbb3769f3)
2021-06-11 22:57:53 +08:00
Alexandru Ardelean
958b495b37 python-idna: bump to version 3.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit fe698b5fca)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 16:49:51 +02:00
Alexandru Ardelean
96ee760579
django: bump to version 3.2.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 5a70c9e826)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:54 +08:00
Alexandru Ardelean
607b39494a
et_xmlfile: bump to version 1.1.0
Updating Eneas' email as requested on Github:
  https://github.com/openwrt/packages/pull/15622

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 6185156e69)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:42 +08:00
Alexandru Ardelean
e60ade49c2
python-six: bump to version 1.16.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit cf368395d0)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:29 +08:00
Alexandru Ardelean
69304783ec
django: bump to version 3.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c01d0f16cf)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-06-11 21:37:08 +08:00
Josef Schlehofer
2682fa5039
Merge pull request #15824 from jefferyto/golang-1.16.5-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16.5
2021-06-11 11:32:11 +02:00
Jeffery To
7f2db681f1
golang: Update to 1.16.5
1.16.1 included fixes for:

* CVE-2021-27918 - encoding/xml: infinite loop when using
  xml.NewTokenDecoder with a custom TokenReader
* CVE-2021-27919 - archive/zip: can panic when calling Reader.Open

1.16.4 included fixes for:

* CVE-2021-31525 - net/http: ReadRequest can stack overflow due to
  recursion with very large headers

1.16.5 includes fixes for:

* CVE-2021-33195 - net: Lookup functions may return invalid host names
* CVE-2021-33196 - archive/zip: malformed archive may cause panic or
  memory exhaustion
* CVE-2021-33197 - net/http/httputil: ReverseProxy forwards Connection
  headers if first one is empty

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fe3c49fe07)
2021-06-11 16:58:05 +08:00
Nick Hainke
5342be8198 samplicator: add samplicator
Samplicator receives UDP datagrams on a given port and resends those
datagrams to a specified set of receivers.

Use Cases:
- replicate Flow Samples to multiple receivers
- use with conntrackd to synchronize via unicast to multiple targets

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 41534e5a19)
2021-06-10 11:58:52 +02:00
Rosen Penev
74ee814b31
Merge pull request #15812 from G-M0N3Y-2503/docker-20.10.7-backport
Docker 20.10.7
2021-06-09 14:07:49 -07:00
Gerard Ryan
4ab37fd2a5 docker: Updated to 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
e8f023e7f2 dockerd: Updated to 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
c6f2c9ba86 libnetwork: Updated to 2021-05-25 for docker 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
196058bdcc containerd: Updated to 1.4.6 for docker 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
Gerard Ryan
3193a6b02f runc: Updated to 1.0.0-rc95 for docker 20.10.7
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-06-09 21:19:45 +10:00
David Bauer
a70f99a912
Merge pull request #15782 from blocktrron/pr-2102-xr_usb_serial_common
xr_usb_serial_common: fix kernel 5.4 builds
2021-06-08 10:01:14 +02:00
Rosen Penev
09bc463ac2
Merge pull request #15799 from PolynomialDivision/gpsd-2102
[21.02] Pull latest changes from gpsd
2021-06-07 19:20:05 -07:00
Nick Hainke
4a28b7fad3 gpsd: fix compilation with x86 glibc
The sysroot has to point to the toolchain directory. The directory
includes libraries like libm. However, the STAGING_DIR needs to be
added to the CFLAGS.

Fixes #15773

[As suggested by jow]

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 35b18ddfc4)
2021-06-07 22:18:54 +02:00
ekathva advaita
74a63743c7 gpsd: Add a new package gpsd-utils to add gpsdctl
gpsd-utils include management tools for GPS daemon - and this commmit
particularly introduces gpsdctl to add/remove device from the GPS
daemon's device list over control socket.

Signed-off-by: ekathva advaita <ekathva@hotmail.com>
(cherry picked from commit a86c3666f3)
2021-06-07 22:18:50 +02:00
Rosen Penev
ed7b332ed4
Merge pull request #15790 from DeathCamel58/libnet-config-21.02
[21.02] libnet-1.2.x: Export libnet-config in development environments
2021-06-06 12:50:15 -07:00
Dylan Corrales
81c4a9afcf libnet: Export libnet-config in development environments
Affects: libnet
Ref: Issue #15767, PR#15770

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>
2021-06-06 11:44:53 -04:00
Rosen Penev
aa97f703a0
Merge pull request #15779 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: update to 2021-06-03-1
2021-06-05 14:29:04 -07:00
David Bauer
ec7d12bd8e xr_usb_serial_common: fix kernel 5.4 builds
Building the xr_usb_serial module fails for Kenel 5.4 with CONFIG_PM
enabled:

xr_usb_serial_common.c:1574:15: error: 'ASYNCB_INITIALIZED' undeclared
(first use in this function); did you mean 'RCU_INITIALIZER'?

Use tty_port_initialized in order to determine the status of the TTY
port.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 69cf7836df)
2021-06-05 16:00:54 +02:00
Stan Grishin
e548667f14 https-dns-proxy: update to 2021-06-03-1
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-04 23:34:08 +00:00
Rosen Penev
e6ac172a4f
Merge pull request #15776 from 1715173329/xray-2102
[openwrt-21.02] xray-core: bump geodata to latest version
2021-06-04 15:08:39 -07:00
Tianling Shen
cef1cdaa2a
xray-core: bump geodata to latest version
Also removed `fullcone` option as this is outdated.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 53bbfe4de5)
2021-06-04 20:49:18 +08:00
Rosen Penev
8e2b960f95
Merge pull request #15764 from jamesmacwhite/iperf-3.10.1-21.02
[21.02] iperf3: Update to version 3.10.1
2021-06-03 03:24:31 -07:00
James White
f63872382b iperf3: Update to version 3.10.1
Signed-off-by: James White <james@jmwhite.co.uk>
2021-06-03 09:09:58 +01:00
Rosen Penev
aa0382f440
Merge pull request #15760 from stangri/21.02-miniupnpd
miniupnpd: disable ext_ip_reserved_ignore by default; fix grammar
2021-06-02 20:23:24 -07:00
Nikos Mavrogiannopoulos
df351ba9c9 ocserv: updated to 1.1.3
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2021-06-02 09:08:24 +02:00
Rosen Penev
32e56591c3
Merge pull request #15727 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default
2021-06-01 22:08:59 -07:00
Stan Grishin
cf5b982fe3 miniupnpd: disable ext_ip_reserved_ignore by default; fix grammar
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-02 04:56:56 +00:00
Stan Grishin
dab3db6218 https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-06-02 04:32:25 +00:00
Rosen Penev
ac7b1eff06
Merge pull request #15658 from mattreeve/openwrt-21.02
[21.02] rsync: Add rrsync script
2021-06-01 16:58:28 -07:00
Josef Schlehofer
c7a50e06b3
msmtp: update to version 1.8.15
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110abfb9f6)
2021-06-01 12:16:53 +02:00
Rosen Penev
87ce9112ea hwinfo: fix compilation with ARC
Added a small patch to fix compilation.

Renamed patch files to have a .patch suffix. Makes them easier to read
with vim and probably IDEs.

Remove UCLIBC depend since it's no longer present.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6af7fbbf01)
2021-05-31 17:30:34 -07:00
Rosen Penev
86ac045a58 luajit: for powerpc, add FPU dependency
powerpc support as of 2.1 does not work with soft float.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d23ca0010c)
2021-05-31 17:27:22 -07:00
Peter Stadler
52bfda48d5 nginx-util: do not use fallthrough attribute
fixes issue #15653

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
(cherry picked from commit 49a84e9b22)
2021-05-31 17:25:22 -07:00
Rosen Penev
6ee4be3d2d
Merge pull request #15638 from ErwanMAS/2102_tinc_allow_more_param_in_uci
[21.02] tinc: allow more parameter in uci
2021-05-29 16:04:04 -07:00
Rosen Penev
001691c2d5
Merge pull request #15716 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup
2021-05-29 15:00:01 -07:00
Stan Grishin
05d9528ad2 https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-05-29 20:12:18 +00:00
Rosen Penev
920c4f29c5
Merge pull request #15700 from nxhack/2102_reduce_npm_size
[21.02] node: Reduce node-npm package size
2021-05-29 01:33:04 -07:00
Noah Meyerhans
5f181154a5
bind: bump to 9.17.13
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 2e02d899ae)
2021-05-28 07:45:43 +02:00
Hirokazu MORIKAWA
23bec4e87b node: Reduce node-npm package size
Reduce package size by about 1MB.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-05-28 13:06:02 +09:00
Jan Pavlinec
e2b25c5036
python-cryptodomex: update to version 3.10.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d6cb4edb4a)
2021-05-27 17:04:35 +02:00
Jan Pavlinec
4507dbe936
gitlab-runner: update to version 13.12.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit cbb572534c)
2021-05-27 17:03:45 +02:00
Jan Pavlinec
535e9f534e
curl: update to version 7.77.0 (security fix)
Fixes:
CVE-2021-22897
CVE-2021-22898
CVE-2021-22901

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ff58fc3a9c)
2021-05-27 17:03:37 +02:00
Tianling Shen
58cb63bc79 yq: Update to 4.9.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 499aba939d229f96c8e14a06bec244a23ff840d4)
2021-05-24 20:05:45 +03:00
Michael Heimpold
515c87e43c
Merge pull request #15655 from mhei/21.02-php7-update
[21.02] php7: backports updates and fixes
2021-05-20 07:28:08 +02:00
Matt Reeve
f9876aa81b rsync: Add rrsync script
Rrsync is a perl script that is supplied as an extra with the rsync program.
It must be used in conjunction with openssh-server or openssh-server-pam
as it requires ~/.ssh/authorized_keys which is not supported by dropbear.

Rrsync allows selective access to subdirectories in either read-only, write-only or read-write mode,
depending on settings in authorized_keys. This allows for safer, restrictive access.
It's particularly useful for automated backup purposes.

An example usage would be this entry:

command="/usr/bin/rrsync -ro /home" <public key here>

This would allow a system connecting with this public key to be able to rsync FROM the
/home directory tree only. It could not write to this directory, nor read from any other directory.

Signed-off-by: Matt Reeve <matt@mreeve.com>
(cherry picked from commit 081229aa09)
2021-05-19 09:51:14 +01:00
Michael Heimpold
23ddd34b8a php7: update to 7.4.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 4e39d9fc7c)
2021-05-18 23:37:39 +02:00
Michael Heimpold
d928a35e17 php7: update to 7.4.18
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit aaaeef8b63)
2021-05-18 23:37:39 +02:00
Eneas U de Queiroz
e984b731a8 php7-pecl-imagick: configure --with-imagick=...
Add --with-imagick=$(STAGING_DIR)/usr so that configure picks
MagickWand-config from there, before it finds an eventual host-installed
version.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit f434a33a13)
2021-05-18 23:37:39 +02:00
Jan Hoffmann
a9a6f50c03 vnstat2: update to version 2.7
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2021-05-18 21:51:03 +03:00
Tianling Shen
f680d17545 yq: Update to 4.9.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2a7114a1aa0abc40f5bf0cfd63c05d3972a50d97)
2021-05-18 12:29:58 +03:00
Erwan MAS
f7ce67e29d tinc: Add possibility to populate more config variables via uci
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-05-17 20:19:44 -04:00
Alexandru Ardelean
8131eaf08c
python3: bump version to 3.9.5
Refreshed Python patches.
Updated pip & setuptools version.

For pip, patch '001-pep517-pyc-fix.patch' was reworked.

Also, the current version of the bundled pip (21.1.1) no longer supports
Python2, so the 'py2.py3' suffix gets replaced with just py3.

For setuptools, there is no longer a script/module:
  https://github.com/pypa/setuptools/pull/2544

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e312275dd9)
2021-05-17 13:12:31 +02:00
Alexandru Ardelean
bc4ebdc085
python3: introduce libpython3 with ABI_VERSION flag
Related to discussion:
  https://github.com/openwrt/packages/pull/14060

Every once in a while a version bump will occur that requires an ABI
change. Example: Python 3.8 to 3.9. When this happens some Python packages
would need to be rebuilt. In setups where everything gets rebuilt, this
isn't a problem.

It's usually a bigger problem when needing to upgrade something via
opkg.
To accommodate for this, we add a libpython with it's own ABI_VERSION
flag. If this ABI_VERSION changes, then this should propagate forward.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 27aee1fbf0)
2021-05-17 13:12:27 +02:00
Alexandru Ardelean
48fd33a730
python3: bump to version 3.9.4
For some reason Python3 jumped from 3.9.2 to 3.9.4 in about a week.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 156e2e354e)
2021-05-17 13:12:22 +02:00
Johnny Vogels
6a0d658f75
Bluez: Update to 5.56
Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
(cherry picked from commit 7299ba0517)
2021-05-17 13:02:15 +02:00
Johnny Vogels
9072b66e56
Bluez: Update to 5.55
Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
(cherry picked from commit d653862bd7)
2021-05-17 13:02:11 +02:00
Rosen Penev
b86383f038
znc: update to 1.8.2
Switch to CMake + Ninja to fix parallel compilation.

Switched PKG_BUILD_DIR to use PKG_INSTALL_DIR for easier readability.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b92f2c2bee)
2021-05-16 14:39:39 +02:00
Rosen Penev
701e3bff2d
Merge pull request #15631 from nxhack/2102_node_14170
[21.02] node: bump to v14.17.0
2021-05-16 01:04:08 -07:00
Jan Pavlinec
a4c39c931c
knot-resolver: update to version 5.3.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 112af34ff3)
2021-05-14 21:49:39 +02:00
W. Michael Petullo
d81ab573e6
syslog-ng: update to 3.32.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f93ef64793)
2021-05-14 21:48:54 +02:00
Jan Hak
bba31b1b5b
knot: update to version 3.0.6
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d578f60818)
2021-05-14 21:48:06 +02:00
Jan Hak
ab9286520b
knot: update to version 3.0.5
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d92a2cd21b)
2021-05-14 21:47:59 +02:00
Ansuel Smith
dc90d02b47
atlas-sw-probe: fix missing link on sysupgrade
Recreate symbolic link if it's missing after a sysupgrade with a private and public key present in /etc/atlas/

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 6031330749)
2021-05-14 21:47:31 +02:00
Luiz Angelo Daros de Luca
826f9965be
hplip: bump to 3.21.2
Patches refreshed:
* 010-libusb_fix.patch
* 020-remove_cups_dep_on_scan.patch
* 060-fix-uclibc.patch renamed to 060-fix-glibc.patch

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 2014f1fd0b)
2021-05-14 21:47:11 +02:00
Alexander Ryzhov
d3a0084f48
libtalloc: add Python3/host dependency
Otherwise, Package/Configure won't find distutils module from python3/host

Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry picked from commit d9879cb200)
2021-05-14 21:38:31 +02:00
Miroslav Lichvar
2bd0bed011 chrony: update to 4.1
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2021-05-14 08:08:03 +02:00
Hirokazu MORIKAWA
4258e21f81 node: bump to v14.17.0
Notable Changes:
Diagnostics channel (experimental module)
UUID support in the crypto module
Experimental support for AbortController and AbortSignal

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-05-13 15:52:37 +09:00
Rosen Penev
b63d8a32fc
Merge pull request #15606 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.8.0
2021-05-11 10:28:37 -07:00
Tianling Shen
40104b2377
yq: Update to 4.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 915311c3dc)
2021-05-11 21:40:26 +08:00
Jan Pavlinec
1d9a8b3546
python-engineio: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 9e011b2fc8)
2021-05-08 10:52:47 +02:00
Jan Pavlinec
763f8b467b
python-bidict: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ae0556e6a5)
2021-05-08 10:52:31 +02:00
Alexandru Ardelean
672b7c1d82
python-greenlet: support MIPS architecture
Fixes: https://github.com/openwrt/packages/issues/15370

This is inspired from:
   330bc94dcc/lang/python-greenlet/Makefile

The `PKG_USE_MIPS16:=0` is not taken into consideration when building
Python modules. That's because the sysconfig is used.

This is only an issue with greenlet (on MIPS) so far.

One option is to do `PKG_USE_MIPS16:=0` in the core Python package.
But, since we know that the `wlanslovenija` group has successfully used
greenlet on MIPS with this construct, we might as well adopt it until GCC10
becomes the main compiler.

As noted here:
  https://github.com/openwrt/packages/issues/15370#issuecomment-817015484
GCC10 doesn't have this problem.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit bde027188a)
2021-05-08 10:44:01 +02:00
Jan Pavlinec
d2085c2231
python-greenlet: add new package
Notes:
Build is disabled for arc and mips because
greenlet isn't ported for these platforms

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 837f1b5924)
2021-05-08 10:43:52 +02:00
Jan Pavlinec
ba0b60f50a
python-socketio: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit decbd7b43a)
2021-05-08 10:43:26 +02:00
Jan Pavlinec
96726c6ce4
python-eventlet: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d303bd6aac)
2021-05-08 10:41:36 +02:00
Jan Pavlinec
be42ff8e99
python-pysocks: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 780fc502d2)
2021-05-08 10:41:19 +02:00
Jan Pavlinec
9c24b20a13
python-flask-socketio: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 8133922a02)
2021-05-08 10:41:04 +02:00
Jan Pavlinec
7eea426c98
python-flask-httpauth: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 6c9627b45d)
2021-05-08 10:40:50 +02:00
Jan Pavlinec
897f231378
gitlab-runner: update to version 13.11.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 2acbb04c77)
2021-05-08 01:12:59 +02:00
Jan Pavlinec
dae3432f7e
onionshare-cli: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ae069fad3d)
2021-05-08 01:12:38 +02:00
Jan Pavlinec
a727f9692f
tailscale: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 229b34286d)
2021-05-08 01:12:03 +02:00
Daniel Golle
d54b6fe090
python-gnupg: update to version 0.4.7
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7b32ab78c0)
2021-05-08 01:09:31 +02:00
Jan Hak
bb638ae4da
libedit: update to version 20210419-3.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit b0870d792b)
2021-05-08 01:09:14 +02:00
Ansuel Smith
692b87b44c
atlas-sw-probe: improve key creation
- Exit start if a probe_key is not present
- Add create_key command to generate a private_key based on the provided username in the atlas config.
- Add registration instruction in /etc/atlas
- Rework script to save probe_key on sysupgrade (the key are now adviced to be placed in the /etc/atlas dir and a link is used to make them accessible in the atlas-sw-scripts etc dir)

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 0afe371bab)
2021-05-08 01:08:14 +02:00
Daniel Golle
807bd76335
debian-archive-keyring: update to 2021.1.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 640a6ba9bd)
2021-05-08 01:07:22 +02:00
Daniel Golle
fe2e5c27f8
Jinja2: update to version 2.11.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e70965b1aa)
2021-05-08 01:07:18 +02:00
Hirokazu MORIKAWA
d88cdaddf1
icu: add ABI_VERSION
To prevent inconsistencies in the coming version (69.1).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 1eb29ddc95)
2021-05-08 01:07:01 +02:00
Andy Walsh
29ad9f1ee6
samba4: update to 4.13.8
* update to 4.13.8
* remove faulty io_uring kernel detection
* fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254
* resolves #15512

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 93b34d4dda)
2021-05-08 01:06:28 +02:00
Jan Pavlinec
8f15e531f9
unbound: add cache-max-negative-ttl config option
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 9296409e88)
2021-05-08 01:06:07 +02:00
Noah Meyerhans
1b6abeb46f
bind: bump to 9.17.12
Fixes the following security issues:

* CVE-2021-25215 - named crashed when a DNAME record placed in the ANSWER
                   section during DNAME chasing turned out to be the final
                   answer to a client query.
* CVE-2021-25214 - Insufficient IXFR checks could result in named serving a
                   zone without an SOA record at the apex, leading to a
                   RUNTIME_CHECK assertion failure when the zone was
                   subsequently refreshed. This has been fixed by adding an
                   owner name check for all SOA records which are included
                   in a zone transfer.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit ccb1e8923e)
2021-05-08 01:05:42 +02:00
Aaron Goodman
2a1c0e11d4 mwan3: allow interfaces with no tracking IPs
In the procd refactor, support for interfaces with no tracking IPs was
inadvertentiy removed. This commit restores the previous behavior

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
(cherry picked from commit b7ea19bc96)
2021-05-06 12:20:18 +02:00
Florian Eckert
1103ba54b6 mwan3: update ubus status for not tracked interfaces
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit f1da872cd4)
2021-05-06 12:20:07 +02:00
Florian Eckert
e3e651b11e mwna3: fix whitespace
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit cbc5f0916c)
2021-05-06 12:19:58 +02:00
Josef Schlehofer
67484bfa70
hwdata: update to version 0.347
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 22ae08919e)
2021-05-05 09:40:55 +02:00
Dirk Brenken
a69f07e5d8
banip: update to 0.7.8
* fix pid file processing of the background monitor plus child
  processes (bug reported in the forum)
* made the enabled/disabled switch of the background monitor functional

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1402b3b56d)
2021-05-04 20:09:33 +02:00
Hannu Nyman
10a45baa6f nano: update version to 5.7
Upgrade nano editor to version 5.7.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 765e986857)
2021-05-01 23:51:46 +03:00
Hirokazu MORIKAWA
fefa7c7770 icu: add ABI_VERSION
To prevent inconsistencies in the coming version (69.1).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-05-01 17:26:16 +03:00
Christian Lachner
e9def406bb haproxy: Update HAProxy to v2.2.14
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-05-01 17:24:08 +03:00
Olivier Poitrey
d8c63ce29f nextdns: Update to version 1.32.1
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-30 17:26:49 -07:00
Dirk Brenken
d37803dc29
adblock: update to 4.1.2
* preserve DNS cache after adblock processing (unbound & bind)
* fix redirect issue with oisd basic url
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit df8651255f)
2021-04-30 17:09:06 +02:00
Rosen Penev
8a692578c5
Merge pull request #15526 from 1715173329/xray-2102
[openwrt-21.02] xray-core: remove PROVIDES
2021-04-28 17:25:53 -07:00
Moritz Warning
c2be25ea10 zerotier: update to 1.6.5
Minor ZeroTier update. Refreshed patches.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-04-28 17:21:12 -07:00
Hirokazu MORIKAWA
ad6f5b23d7 libupm: Disable node.js support
Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-28 01:21:53 -07:00
Josef Schlehofer
9d422d7ba9
Merge pull request #15508 from hswong3i/openwrt-21.02-SQUID_enable-ssl-crtd
[openwrt-21.02][cherry-pick] squid: Enable dynamic SSL certificate generation
2021-04-28 10:06:05 +02:00
Wong Hoi Sing Edison
d7f8f02574
squid: Enable dynamic SSL certificate generation
Maintainer: @neheb / @BKPepe / @zhanhb
Compile tested: ipq806x, generic, netgear_r7800, master
Run tested: ipq806x, generic, netgear_r7800, openwrt-19.07

Description:

Squid now only support HTTPS proxy in TCP tunnel mode (e.g. `ssl_bump splice all`):

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    ssl_bump splice all

In order to operate in SSL Bump mode, we need to compile with `--enable-ssl-crtd` for following configuration:

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    sslcrtd_program /usr/lib/squid/security_file_certgen -s /car/cache/squid/ssl_db -M 4MB
    ssl_bump stare all
    ssl_bump bump all

This PR switch the `SQUID_enable-ssl-crtd` into `default y`, therefore default enable SSL Bump mode.

Signed-off-by: Wong Hoi Sing Edison <hswong3i@pantarei-design.com>
(cherry picked from commit dbda77686d)
2021-04-28 11:28:40 +08:00
Hirokazu MORIKAWA
7358680c70 libmraa: Disable node.js support
Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-27 18:52:56 -07:00
Josef Schlehofer
755ecdbd6e
Merge pull request #15518 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.7.1
2021-04-28 00:01:57 +02:00
Tianling Shen
fee6ee1c8e
xray-core: use $(INSTALL_DATA) to install configuration files
Using `$(INSTALL_CONF)` will cause the program has no access to
configurations file when someone enabled the selinux support.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from bbc6c62c2a)
2021-04-27 20:35:39 +08:00
Tianling Shen
b75f619031
xray-core: remove PROVIDES
Xray now is no longer planning to keep compatibility with original
v2ray. Remove PROVIDES before it is totally broken.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 92efcc2956)
2021-04-27 20:35:20 +08:00
Tianling Shen
2a4742f353
yq: Update to 4.7.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 633d1dcf58)
2021-04-26 19:21:54 +08:00
Karl Palsson
407ef4d534 net/mosquitto: port is optional in root config
From mosquitto 2.x, port became optional and deprecated in the config,
and it was recommended that listeners be used instead.  Drop the hard
requirement in our config conversion script.

Reported in: https://github.com/openwrt/packages/issues/15506
Signed-off-by: <karlp@etactica.com>
2021-04-26 09:38:42 +00:00
Karl Palsson
547687319c net/mosquitto: fix log_type conversion in config
As reported in: https://github.com/openwrt/packages/issues/15506

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-26 09:38:42 +00:00
Rosen Penev
7119d559e9 ksmbd: update to 3.3.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9c6fc23e01)
2021-04-24 02:20:36 -07:00
Rosen Penev
0ed095a527 ksmbd-tools: update to 3.3.9
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2e7c403fff)
2021-04-24 02:19:33 -07:00
Glenn Strauss
a3596cb8a7 lighttpd: patches from upstream
- ignore Content-Length from backend if 101 Switching Protocols
- close HTTP/2 connection after bad password
- skip cert chain build for self-issued certs
- meson zstd fix
- ls-hpack upstream update
- discard some HTTP/2 DATA frames received after response

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 52f85a0e1f)
2021-04-24 01:05:25 -07:00
Dirk Brenken
a0a6f09447
banip: fix housekeeping
* fix whitelist housekeeping if you switch between normal- and
  'whitelist only' mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7cfb0f4657)
2021-04-23 17:46:29 +02:00
Florian Eckert
7a628d1432
Merge pull request #15502 from TDT-AG/pr/20210422-stunnel
stunnel: update version to 5.59
2021-04-23 11:36:22 +02:00
Josef Schlehofer
c36892a06c
Merge pull request #15501 from mkrkn/openwrt-21.02
[21.02] openvpn: update to 2.5.2
2021-04-22 22:11:18 +02:00
Magnus Kroken
22b2389989 openvpn: update to 2.5.2
Fixes two related security vulnerabilities (CVE-2020-15078) which
under very specific circumstances allow tricking a server using delayed
authentication (plugin or management) into returning a PUSH_REPLY before
the AUTH_FAILED message, which can possibly be used to gather
information about a VPN setup. In combination with "--auth-gen-token" or
a user-specific token auth solution it can be possible to get access to
a VPN with an otherwise-invalid account.

OpenVPN 2.5.2 also includes other bug fixes and improvements.

Add CI build test script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(cherry-picked from 6186fe732b)
2021-04-22 20:36:22 +02:00
Florian Eckert
cad3d2012c stunnel: update to 5.59
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2d56dbfc27)
2021-04-22 17:55:33 +02:00
Florian Eckert
7a7bfa8832 stunnel: update to 5.58
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 389c7f12cb)
2021-04-22 17:55:28 +02:00
Dirk Brenken
cf1ed852b9
banip: update to 0.7.7
* add a "whitelist only" mode, this option allows to restrict Internet
  access from/to a small number of secure websites/IPs, and block access
  from/to the rest of the Internet.

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 515397b009)
2021-04-22 05:51:21 +02:00
Hirokazu MORIKAWA
0d8a914d2e node: Resolve ICU conflict
Resolve conflicts between OpenWrt's ICU package and the ICU shipped with node.js.

https://github.com/openwrt/packages/issues/15437

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-21 19:27:00 +03:00
Gerard Ryan
c66290b80c dockerd: Updated to 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Gerard Ryan
330b8392fa docker: Updated to 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Gerard Ryan
8100df4242 libnetwork: Updated to 2021-01-26 for docker 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Gerard Ryan
fc66216c31 containerd: Updated to 1.4.4 for docker 20.10.6
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-21 19:20:00 +03:00
Rosen Penev
99cef20e91
Merge pull request #15478 from rs/nextdns-1.32.0-openwrt-21.02
[21.02] nextdns: Update to version 1.32.0
2021-04-20 17:29:49 -07:00
Daniel Danzberger
ed645bce9c
python-psycopg2: Add new package
Psycopg is the most popular PostgreSQL adapter for the Python programming language
It's used by the python-sqlalchemy for postgresql

This package was removed by this commit for lacking python3 support:
c37b15e1c4

Version 2.8.6 used in this package now supports pyhton3

Signed-off-by: Daniel Danzberger <daniel@dd-wrt.com>
(cherry picked from commit 7cfb9a04af)
2021-04-20 18:58:05 +02:00
Jan Pavlinec
5231e7d6b2
atlas-sw-probe: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c65a659e6d)
2021-04-20 18:44:42 +02:00
Jan Pavlinec
5ebbf7fb40
atlas-probe: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit cb30c106c0)
2021-04-20 18:44:37 +02:00
Olivier Poitrey
e4584c311d nextdns: Update to version 1.32.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 15:08:40 +00:00
Rosen Penev
5ea449c881
Merge pull request #15470 from rs/nextdns-1.12.5-openwrt-21.02
[21.02] nextdns: Update to version 1.12.5
2021-04-19 18:59:33 -07:00
Olivier Poitrey
5aef437506 nextdns: Update to version 1.12.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-20 01:38:41 +00:00
Rosen Penev
f7fadd934d
Merge pull request #15462 from rs/nextdns-1.12.3-openwrt-21.02
[21.02] nextdns: Update to version 1.12.3
2021-04-19 17:47:43 -07:00
Olivier Poitrey
e60797171c nextdns: Update to version 1.12.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-19 23:23:44 +00:00
Rosen Penev
391784c02a
Merge pull request #15458 from rs/nextdns-1.31.3-openwrt-21.02
[21.02] nextdns: Update to version 1.31.3
2021-04-19 16:08:33 -07:00
Olivier Poitrey
222f0838d9 nextdns: Update to version 1.31.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-04-19 22:50:29 +00:00
Florian Eckert
4ceeb8fc90 collectd: update PKG_RELEASE
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 1e2ba94064)
2021-04-19 08:35:39 +02:00
Florian Eckert
5b7b76e102 collectd: add percent calculation of bad block to ubi plugin
This patche adds the percent evaluation for the bad blocks.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit b4e24c12a6)
2021-04-19 08:35:29 +02:00
Florian Eckert
646f8dd14e collectd: prepare ubi plugin for percent calculation
This patche change prepares the ubi plugin to add the bad block evaluation in
percent.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 4927b53333)
2021-04-19 08:35:16 +02:00
Florian Eckert
b90c67c8f1 collectd: upate PKG_RELEASE number
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6e41bf73ba)
2021-04-19 08:34:52 +02:00
Florian Eckert
c45e9cadea collectd: make compile time debug option configurable
Enables the compiler option that collectd is compiled with
debugging support. This is used at development stages to get
more messages from the collectd during development.

This option is default disabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a4f74eb11c)
2021-04-19 08:34:43 +02:00
Florian Eckert
cdd28e1f48 collectd: fix COLLECTD_PLUGINS_SELECTED end of line
This removes the trailing back slash. This is not needed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 416ba35d50)
2021-04-19 08:34:32 +02:00
Florian Eckert
7304814cfc collectd: fix smart disk detection
On my system the attribute DEVTYPE was not set. The plugin could not
read any data and the function call blocked forever on this function and did
not returned. By removing it, all block devices under `/sys/class/block`
were checked.

Block devices that do not support SMART were not evaluated. The
collected displays the following message.

smart plugin: checking SMART status of /dev/loop4.
smart plugin: unable to open /dev/loop4.

If you do not like this message, you could only enable device in the uci that
does support SMART.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 543a2a970c)
2021-04-19 08:34:21 +02:00
Florian Eckert
83ff0d61ac collectd: enable collectd-mod-smart
Switching on compilation for collectd smart plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 092902a87e)
2021-04-19 08:34:07 +02:00
Florian Eckert
b593b87b78 libatasmart: initial checkin
This library is required by the smart plugin of the collectd.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 87e52cf180)
2021-04-19 08:33:57 +02:00
Dirk Brenken
c6046dd390
adblock: update to 4.1.1
* support the RPZ trigger 'RPZ-CLIENT-IP' to always allow/block certain
  clients based on their IP (currently only supported by bind!)
* avoid promiscuous mode in tcpdump setup for adblock reporting
* speed up dns report preparation
* support dns report mailing (/etc/init.d/adblock report mail)
* fix bind autodetection
* update LuCI-frontend (separate PR)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c531b6daea)
2021-04-18 21:12:10 +02:00
Rosen Penev
989d3320c1
squid: update to 4.14
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 682aebbaea)
2021-04-18 20:46:55 +02:00
Josef Schlehofer
8cbb49a12f
psmisc: move killall to /usr/libexec and add ALTERNATIVES
Currently, this package can not be installed while using standard path
of busybox, because binary killall wants to be installed on the same
location as busybox.

Collision:
• /usr/bin/killall: busybox (new-file), psmisc (existing-file)

Many of these binaries, which provides alternatives were moved to
folder /usr/libexec like wget, sed, findutils, less.
So I moved killall to /usr/libexec and others leave in touch and added
ALTERNATIVES for it, because preinstall script is no longer necessary.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8969e0fd1)
2021-04-18 19:51:06 +02:00
Hannu Nyman
6017b3f018 irqbalance: upgrade to version 1.8.0
Upgrade irqbalance to version 1.8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6631cfaa61)
2021-04-18 18:28:35 +03:00
Rosen Penev
06970b40c3
Merge pull request #15441 from 1715173329/yq-2102
[openwrt-21.02] yq: Update to 4.7.0
2021-04-17 15:40:38 -07:00
Tianling Shen
aa57054687
yq: Update to 4.7.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from c4d27271ad)
2021-04-18 03:55:19 +08:00
Eneas U de Queiroz
3d22e597f3 atheepmgr: avoid libpciaccess dependency
HAVE_LIBPCIACCESS that is currently passed through MAKE_VARS to disable
building with libpciaccess can't be set through the environment.
Instead, use CONFIG_CON_PCI, which can be passed through the environment
and will disable libpciaccess.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 5283711754)
2021-04-16 18:17:34 -07:00
Josef Schlehofer
1d835ebcdd
clamav: add libiconv dependencies when build with NLS
NLS means Native Language Support and when you have it enabled (it is
not default), clamav can not be compiled as it shows following error:

Package clamav is missing dependencies for the following libraries:
libiconv.so.2

Also, it is required that package libiconv-full is compiled first/before
than clamav and then try to compile clamav.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 87be6ffe60)
2021-04-15 17:12:41 +02:00
Luiz Angelo Daros de Luca
c1b697a64b openvpn-easy-rsa: add missing configfile
/etc/profile.d/50-openvpn-easy-rsa.sh was not listed as configfile
and changes were lost during upgrades.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit b0663e2959ff9dc37d0273aa3240a2ef0ed3c611)
2021-04-14 19:10:34 -07:00
Tomas Lara
487b45f8cc collectd: enable cpufreq for rockchip target
Enable collectd-mod-cpufreq  for rockchip

Signed-off-by: Tomas Lara <tl849670@gmail.com>
(cherry picked from commit 6bd8d29b70)
2021-04-13 19:16:30 +03:00
Luiz Angelo Daros de Luca
2e0c765d8b
Merge pull request #15414 from luizluca/21.02/ruby-3.0.1
[21.02] ruby: update to 3.0.1
2021-04-13 13:04:54 -03:00
Jo-Philipp Wich
1a169546f2 bonding: accept list of slaves in uci list notation
Rework the bonding.sh protocol handler to accept slave interface names
encoded in uci list notation. Also replace ifconfig up/down with ip
link calls while we're at it.

Fixes: #11455
Fixes: https://github.com/openwrt/luci/issues/4473
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 57a77386de)
2021-04-13 09:44:33 +02:00
Luiz Angelo Daros de Luca
739faab36c ruby: update to 3.0.1
Fixes two CVEs:

CVE-2021-28965: XML round-trip vulnerability in REXML
CVE-2021-28966: Path traversal in Tempfile on Windows

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-13 01:40:46 -03:00
Hirokazu MORIKAWA
a43822546e node: bump to v14.16.1
April 2021 Security Releases
- OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High) (CVE-2021-3450)
- OpenSSL - NULL pointer deref in signature_algorithms processing (High) (CVE-2021-3449)
- npm upgrade - Update y18n to fix Prototype-Pollution (High) (CVE-2020-7774)

OpenSSL-related vulnerabilities do not affect the OpenWrt package. Because OpenWrt's OpenSSL shared library has been updated.

NODEJS_ICU_SMALL is default

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-04-11 20:29:54 -07:00
Gregory L. Dietsche
9ed6335671
safe-search: prevent duplicate cron job installation
This patch prevents multiple cron jobs from being created to run the
safe-search-maintenance script.

To reproduce this bug, perform the following:
  - Install safe-search
  - Perform an OpenWRT firmware upgrade (choose to preserve user settings)
  - Install safe-search again

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
(cherry picked from commit 49535edffd)
2021-04-11 10:04:39 +02:00
Tiago Gaspar
f5d172aede
netdata: disable shared memory totals by default
Fix log spam:
daemon.err netdata[2090]: PROCFILE: Cannot open file '/proc/sysvipc/shm'
This is caused by a non existant /proc/sysvipc/shm because of the
CONFIG_PROC_STRIPPED option that is enabled by default in the kernel
generic target config

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 5f65d87bb7)
2021-04-11 09:58:34 +02:00
Stan Grishin
4dd677a89b https-dns-proxy: bugfix: race condition with dnsmasq
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 22:38:45 -07:00
Stan Grishin
da5df7542f simple-adblock: update to 1.8.7-3
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-10 17:08:57 -07:00
Dirk Brenken
e19f158a4b
adblock: fix games_tracking source url
Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ec20e9df96)
2021-04-09 18:46:19 +02:00
Josef Schlehofer
6a437bac7d
Merge pull request #15372 from farmergreg/21.02-safe-search
[21.02] safe-search: check for changed IP addresses weekly
2021-04-08 23:30:28 +02:00
Josef Schlehofer
365ce46075
Merge pull request #15371 from farmergreg/21.02-family-dns
[21.02] net/family-dns: Correct Reference to IPKG_INSTROOT
2021-04-08 23:28:05 +02:00
Greg Dietsche
fc63fa7adb family-dns: Correct Reference to IPKG_INSTROOT
IPKG_INSTROOT was misspelled.

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
(cherry picked from commit 1569131f95)
2021-04-08 15:55:17 -05:00
Gregory L. Dietsche
1f81b07d86 safe-search: check for changed IP addresses weekly
The current default of hourly is too fast. Some services such as
DuckDuckGo return IPs from a pool based on the user's location instead
of a fixed IP address. This change prevents unnecessary writes to the
flash memory by only updating once per week.

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
(cherry picked from commit 7164ccf155)
2021-04-08 15:53:19 -05:00
Rosen Penev
5e764adf30 minisatip: add libdvbcsa support
Unconditionally enable with BUILD_PATENTED.

Simplify configure args.

Add missing PKG_CONFIG_DEPENDS

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3d65773650)
2021-04-07 23:51:43 -07:00
Jo-Philipp Wich
3ba100928a openvpn: fix invoking user up & down commands from hotplug wrapper
This commit adds a number of fixes to the OpenVPN up/down hotplug command
wrapper which currently fails to actually invoke user defined up and down
commands for uci configurations not using external native configurations.

 - Use the `--setenv` to pass the user configured `up` and `down` commands
   as `user_up` and `user_down` environment variables respectively

 - Instead of attempting to scrape the `up` and `down` settings from the
   (possibly generated) native OpenVPN configuration in
   `/etc/hotplug.d/openvpn/01-user`, read them from the respective
   environment variables instead

 - Fix parsing of native configuration values in `get_openvpn_option()`;
   first try to parse a given setting as single quoted value, then as
   double quoted and finally as non-quoted, potentially white-space
   escaped one. This ensures that `up '/bin/foo'` is interpreted as
   `/bin/foo` and not `'/bin/foo'`

Ref: https://forum.openwrt.org/t/openvpn-up-down-configuration-ignored/91126
Supersedes: #15121, #15284
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry-picked from commit 7f065a94bb)
2021-04-07 22:54:36 +02:00
Alexander Egorenkov
00db3d345f openvpn: add OpenVPN option server-poll-timeout
See https://www.mankier.com/8/openvpn#--server-poll-timeout

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
(cherry-picked from commit 5789faab67)
2021-04-07 22:54:36 +02:00
Magnus Kroken
f5c82550da openvpn: update to 2.5.1
Set myself as maintainer.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(cherry-picked from commit 204c0901b8)
2021-04-07 22:54:36 +02:00
Jan Pavlinec
6241ec3f62
curl: update to version 7.76.0
Fixes CVE-2021-22876 and CVE-2021-22890

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b971310549)
2021-04-07 14:19:54 +02:00
Rafał Dzięgiel
d9ac276fba
libdvbcsa: add new package
Libdvbcsa is a free implementation of the DVB Common Scrambling Algorithm DVB/CSA - with encryption and decryption capabilities.

OpenWrt packages like `tvheadend` and `minisatip` can benefit from it.

Signed-off-by: Rafał Dzięgiel <rafostar.github@gmail.com>
(cherry picked from commit 51c5a8b4bc)
2021-04-07 14:19:41 +02:00
Jan Pavlinec
7f2d84615e
python-pytest: update to version 6.2.3
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e979ceb6b)
2021-04-07 14:18:59 +02:00
Jan Pavlinec
ed91ba746a
knot-resolver: update to version 5.3.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3e3025b191)
2021-04-07 14:18:53 +02:00
Josef Schlehofer
a6cd649edf
youtube-dl: update to version 2021.4.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 701ded952a)
2021-04-07 14:18:47 +02:00
Josef Schlehofer
f5246aaa29
zeroconf: update to version 0.29.0
Update copyright in Makefile

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 757b0ea647)
2021-04-07 14:18:42 +02:00
Rosen Penev
9e9560362a ksmbd: update to 3.3.8
Major changes are:
  clean-up codes using checkpatch --strict option.
  fix several warning and build failure from linux-next.
  change the minimum supported kernel version to v5.4.
  use xarray for tree connect list.
  fix reviews from lkml.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fa6f182a21)
2021-04-07 00:49:09 -07:00
Rosen Penev
454280ae49 ksmbd-tools: update to 3.3.8
Major changes are:
  disable symlink by default.
  remove smack inherit leftovers.
  Enable guest access on IPC$ share by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c6fa2d5bfa)
2021-04-07 00:48:57 -07:00
Kirill Nikolaev
40d885de8e ksmbd-tools: Add a mDNS TXT record for the ksmbd service
MacOS ignores Bonjour services for which TXT records are not returned. This changes forces umdns service to return a TXT record (`daemon=ksmbd`) for the ksmbd service. The exact content is unimportant and to the best of my knowledge nothing reads the `daemon` tag.

Symptoms of the problem (which are also debugging steps):
* Finder refuses to open the OpenWRT "computer" in the Network list.
* Discovery.app (Bonjour Browser) lists the _ssh._tcp service, but the submenu for it doesn't unfold and no address is shown.
* `dns-sd -L OpenWrt _smb._tcp` doesn't return any address.

Signed-off-by: Kirill Nikolaev <cyril7@gmail.com>
(cherry picked from commit 272b0a5c18)
2021-04-07 00:48:57 -07:00
Sven Roederer
b007b4854c xinetd: honor ${IPKG_INSTROOT} when sourcing /lib/functions.sh
Avoid "file not found"-error when embedding via Imagebuilder.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit bdab7e6bfe)
2021-04-07 08:33:45 +02:00
Philip Prindeville
27caf23cc4 strongswan: bump to 5.9.2
Retire weak algorithms like MD5 and 3DES.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ae3d5aa73e)
2021-04-06 16:05:19 -07:00
Philip Prindeville
11e289b48b strongswan: force PIC on all builds
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit a72780a9c2)
2021-04-06 16:05:19 -07:00
Philip Prindeville
57836bb7d0 strongswan: migrate to swanctl configs
Derived from the ipsec initd script, with the following changes:

(1) various code improvements, corrections (get rid of left/right
    updown scripts, since there's only one), etc;
(2) add reauth and fragmentation parameters;
(3) add x.509 certificate-based authentication;

and other minor changes.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit f9d91f1f47)
2021-04-06 16:05:19 -07:00
Philip Prindeville
a6eaab4553 strongswan: remove synthesized ipsec conf files
If you shutdown ipsec service, and it doesn't clean up
/var/ipsec/ipsec.conf, then when you start swanctl service it
might see an incompatible file on startup.  Remedy is to
remove unneeded files when shutting down the service.  They
can always be regenerated when the service starts again.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit baa38a1420)
2021-04-06 16:05:19 -07:00
Philip Prindeville
c5335e865d strongswan: move ipsec conf files to subpackage
These config files are only used by the ipsec interface to charon,
and shouldn't be part of the base package.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit e626255b37)
2021-04-06 16:05:19 -07:00
Philip Prindeville
56feabdcdc strongswan: make the include's in the .conf files persistent
Having scripts diddle user written config files seems potentially
dangerous.  Plus there's really no downside to including some
empty files.  Best to just make the includes be permanent.

Additional feature suggested by Luiz: if a -opkg version of the
config file was created unnecessarily, remove it as part of the
upgrade process since changes won't be happening to that file
as an artifact of the service starting.  The include lines are
now permanent, which means that (1) additional configuration
synthesized by UCI won't be anywhere that opkg (or sysupgrade,
for that matter) cares about since it won't be persistent, and
(2) if changes are being made, then they're being done by a
person with an editor and they really should be distinguished.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 643df01275)
2021-04-06 16:05:19 -07:00
Philip Prindeville
2983a7f9ef strongswan: change maintainers
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 0bd4410e30)
2021-04-06 16:05:19 -07:00
Philip Prindeville
cc8a4252b1 strongswan: fix local_gateway discovery
This has been observed by myself and @luizluca: ip route get is
appending uid0 to the output, as seen from:

root@OpenWrt2:~# ip route get 1.1.1.1
1.1.1.1 via 174.27.160.1 dev eth3 src 174.27.182.184 uid 0
    cache
root@OpenWrt2:~#

so the fix is an anchored match, discarding all else. Also, using
ip -o means never having to do multiline matches...

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit ec72d3a9e4)
2021-04-06 16:05:19 -07:00
David Bauer
d9f1bc3754 mtd-rw: fix build failure with kernel 5.10
When building mtd-rw for a target based on Kernel 5.10 which has
CONFIG_MTD disabled the build fails with

ERROR: "put_mtd_device" [../mtd-rw.ko] undefined!
ERROR: "get_mtd_device" [../mtd-rw.ko] undefined!

Omit building the package for such a target.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c6b3d94929)
2021-04-06 16:02:22 -07:00
Rosen Penev
3a3b7c6eee clamav: update to 0.103.1
Convert to using CMake in order to speed up compilation and to fix
compilation under glibc.

Add extra dependencies since they're now needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7cd687cb7e)
2021-04-06 16:01:00 -07:00
Rosen Penev
e1b21ddda2 python3-libsemanage: update to 3.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit acb72e7452)
2021-04-06 15:59:19 -07:00
Rosen Penev
39023fe0a2 setools: update to 4.4.0
Remove no longer needed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 39bce0e719)
2021-04-06 15:59:19 -07:00
Ondřej Caletka
aefb3927ce jool: Update to 4.1.5
Compile and run tested on: mvebu (Turris Omnia)

Signed-off-by: Ondřej Caletka <ondrej@caletka.cz>
(cherry picked from commit 0c044284b7)
2021-04-06 14:51:29 -07:00
Sven Roederer
e9a109cc8c nut: fix typo in nutshutdown script
Even it's only cosmetic and should not affect the function of regular system,
fix the name of the IPKG_INSTROOT variable.
Typo was added long ago with 8400c9a6ec.

Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
(cherry picked from commit f25f49a8b7)
2021-04-06 14:51:29 -07:00
Karl Palsson
2fcc5d5c9f mosquitto: bump to 2.0.10
This is a security fix, affecting 2.0.0 through to 2.0.9.  Mosquitto instances
could be remotely DoS'd by authenticated clients.

Release notes at: https://github.com/eclipse/mosquitto/blob/v2.0.10/ChangeLog.txt
CVE number has not yet been assigned.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-04-06 14:14:57 +00:00
Christian Lachner
ab26cb98e1 haproxy: Update HAProxy to v2.2.13
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-04-06 12:56:14 +03:00
Gerard Ryan
d382ce0bc7 cache-domains: Fixed host files directory
* Hid unnecessary output

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-04-05 17:15:36 -07:00
Rosen Penev
58d5865471
Merge pull request #15331 from 1715173329/xray-2102
[openwrt-21.02] xray-core: Update to 1.4.2
2021-04-03 19:07:23 -07:00
Dirk Brenken
326661db31
banip: bugfix 0.7.6-2
* fix housekeeping of external list sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 86a20c7955)
2021-04-03 19:20:09 +02:00
Tianling Shen
5dd5cabd74
xray-core: Update to 1.4.2
Updated geo datas to latest version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 781c70077b)
2021-04-02 17:29:18 +08:00
Tianling Shen
5543e0925a
xray-core: init: add browser dialer support
Since v1.4.1, Xray has introduced a new feature to transfer data via
browsers, which can disguise itself as a normal browser to cheat
network censorship.

For more details, see https://github.com/XTLS/Xray-core/pull/421.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 736667ce6e)
2021-04-02 17:29:03 +08:00
Stan Grishin
d13b4c53f6 simple-adblock: jsonOps-related bugfixes
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-04-01 23:03:38 -10:00
Tianling Shen
fb402a71e0 xray-core: Update to 1.4.1
Updated geodata to latest version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from ee9868cb20f78b01df1996090f1fe224a5e4c017)
2021-03-31 17:37:39 -10:00
Tianling Shen
ee38781149 yq: Update to 4.6.3
- Re-assigned myself as the maintainer
- Used $(AUTORELEASE) for PKG_RELEASE

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 82ebe3e49a50075116da4b677eacae91e6fcd2c4)
2021-03-31 17:36:51 -10:00
Martin Matějek
c07c27ce7f
python3-pyroute2: update to version 0.5.16
Signed-off-by: Martin Matějek <martin.matejek@gmx.com>
(cherry picked from commit df4b1ae24e)
2021-03-30 21:47:40 +02:00
Dirk Brenken
28024c0ced
banip: update to 0.7.6
* rework the central iptables function to significantly
  reduce the code complexity and the overall number of iptables calls
* check early and only once in the chain for ctstate NEW and
  return otherwise (thanks @ldir-EDB0)
* made the whitelist ordering within the chain more flexible

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1235acdde6)
2021-03-29 17:54:02 +02:00
Josef Schlehofer
5dec63279c
hwdata: update to version 0.345
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5e30a07908)
2021-03-29 00:24:10 +02:00
Jan Pavlinec
7bd8b26e1e
python-zipp: update to version 3.4.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 7f85073979)
2021-03-29 00:23:44 +02:00
Jan Pavlinec
d3facdda9a
subversion: update to 1.14.1
Fixes CVE-2020-17525

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 0dd5354abc)
2021-03-29 00:23:34 +02:00
Jan Pavlinec
74b0a3de7e
zstd: update to version 1.4.9
Fixes CVE-2021-24032

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ebc4939dd2)
2021-03-29 00:23:09 +02:00
Jan Pavlinec
1f47b58bbe
git: update to version 2.30.2
Fixes CVE-2021-21300

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a4f058ec5c)
2021-03-29 00:23:00 +02:00
Paul Spooren
bb3eb4d98c
CI: use new openwrt Docker username
We now own `openwrtorg` and `openwrt`, where the latter replaces the
former. Slowly migrate over.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b164a3aa32)
2021-03-29 00:22:08 +02:00
Rosen Penev
7e7adfceef
reptyr: add mips64el to the DEPENDS list
MIPS is completely unsupported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 03515d00cd)
2021-03-29 00:21:49 +02:00
Rosen Penev
5e1909711a
bind: update to 9.17.11
Backport upstream OpenSSL deprecated API patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd64cb713b)
2021-03-29 00:21:38 +02:00
Josef Schlehofer
4322399166
netdata: update to version 1.29.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbfdc)
2021-03-29 00:21:31 +02:00
Josef Schlehofer
8870abe052
sshpass: update to version 1.09
Changelog [1]:
Version 1.09
	* Explicitly set the controlling TTY

Version 1.08
	* Report when IP key has changed
	* Scrub the environment variable for -e

Version 1.07
	* Pass signals that should terminate to ssh
	* Fix race around signal handling
	* Report IPC errors to stderr
	* Report if can't open -f password file

[1] https://sourceforge.net/p/sshpass/code/76/tree/trunk/ChangeLog

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5799d0b1ee)
2021-03-29 00:21:25 +02:00
Josef Schlehofer
ffdfd13550
nnn: update to version 3.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ad116f29ce)
2021-03-29 00:21:17 +02:00
Josef Schlehofer
ec9563fa21
syslog-ng: update to version 3.31.2
Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e968e)
2021-03-29 00:21:12 +02:00
Jan Pavlinec
7e33ed6ec0
gitlab-runner: update to version 13.10.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d7e2b608e6)
2021-03-29 00:15:44 +02:00
Rosen Penev
23c8b3a689
gitlab-runner: update to 13.9.0
Remove no MIPS depends as it supports MIPS now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1329b9fe2e)
2021-03-29 00:15:38 +02:00
Jan Pavlinec
b69cba5a62
gnutls: update to version 3.7.1
Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 323461a1f0)
2021-03-29 00:14:54 +02:00
Philip Prindeville
04985c7984
libmariadb: add dependency on libcurl
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 5b2d35a8d0)
2021-03-29 00:13:58 +02:00
Nicholas Smith
fbc11c23f4
libqmi: bump to 1.28.2
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 570ff69ec6)
2021-03-29 00:09:16 +02:00
Nicholas Smith
af73bbb6a2
libqrtr-glib: add libqrtr-glib
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit cfe24305de)
2021-03-29 00:08:54 +02:00
Nicholas Smith
a6d7570c6d
libqmi: bump to 1.28.0
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit c9709a3c82)
2021-03-29 00:08:48 +02:00
Nicholas Smith
2aca8619f5
modemmanager: bump to 1.16.2
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 02d8bbcfe0)
2021-03-29 00:08:00 +02:00
Nicholas Smith
1ef858568d
modemmanager: bump to version 1.16.0
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 54a9b58ffd)
2021-03-29 00:07:51 +02:00
Dirk Brenken
76444a4740
banip: update to 0.7.5-4
* fix another IPv4/IPv6 related iptables chain creation problem
* fix counter during ipset creation
* fix regex for debug counters
* fix ipset housekeeping for local sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fb4bfd259d)
2021-03-26 22:13:21 +01:00
Stan Grishin
de20008a8f https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:06 -07:00
Dirk Brenken
8cd2870e85
adblock: update 4.1.0-3
* add a restrictive "jail mode only" variant, just point your
  jail directory to your primary dns directory
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit df9ee1388e)
2021-03-23 11:41:17 +01:00
Rosen Penev
6b90ecde11
Merge pull request #15220 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: support for additional Force DNS ports
2021-03-22 11:57:03 -07:00
Rosen Penev
e647b52672
Merge pull request #15227 from cotequeiroz/pic_quote-21.02
[21.02] Cherry-picks from PRs dealing with $(FPIC) quoting
2021-03-22 11:56:33 -07:00
Eneas U de Queiroz
d6942bd8a4
nss: fix compilation with QUILT
Commit 657574f45 disabled building the host nsinstall program when using
QUILT.  However, the host nsinstall is needed to compile the package,
breaking compilation with QUILT.

Move the native compile to Build/Configure, which will not be called for
prepare, refresh, or update targets, but will be called before
Build/Compile.

nss does not have a configure script, so Build/Configure/Default is not
being called.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit fbed6751b0)
2021-03-22 13:23:13 -03:00
Eneas U de Queiroz
311ab91528
nss: quote $(FPIC), as it may have multiple flags
FPIC may be defined with more than one flag.  In that case, it becomes
necessary to use it inside QUOTES in a shell context.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c5f91a2a56)
2021-03-22 13:23:12 -03:00
Philip Prindeville
17f63e9501
treewide: fix places where $(FPIC) is unquoted
Fixes part of issue #14921.

When $(FPIC) gets added to TARGET_CFLAGS (for instance), we can
count on $(TARGET_CFLAGS) in turn being quoted when it gets
expanded.  But there are a few places where $(FPIC) gets
expanded directly into environment variables passed on the
command line, such as when setting lt_cv_* variables as in this
case.

It's wrong to assume that the expansion of $(FPIC) won't require
quoting (such as it containing spaces) if it has multiple compiler
flags.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 0d5c6769f1)
2021-03-22 13:23:10 -03:00
Florian Eckert
0e293fa42a
Merge pull request #15158 from TDT-AG/pr/20210218-openwrt-21.02-watchcat
watchcat: update to support procd
2021-03-22 08:48:04 +01:00
Stan Grishin
17637d985c https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:29:01 +00:00
Erwan MAS
2b0311b5fe tinc: new maintainer
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-03-20 23:19:42 -07:00
Erwan MAS
9841aaf290 tinc: fix missing HASH
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-03-20 23:19:42 -07:00
Erwan MAS
7fdeffbfb4 tinc: Bump to version 1.1 commit 3ee0d5dd
Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
2021-03-20 23:19:42 -07:00
Rosen Penev
c64394460a
Merge pull request #15164 from gladiac1337/haproxy-2.2.11-21.02
[openwrt-21.02] haproxy: Update HAProxy to v2.2.11
2021-03-19 15:51:43 -07:00
Dirk Brenken
571744a332
banip: update 0.7.5-3
* fix iptables/chain creation in setups without IPv6 support

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 80466dd045)
2021-03-19 22:24:01 +01:00
Christian Lachner
9e3d1607cb haproxy: Update HAProxy to v2.2.11
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:34:47 +01:00
Tianling Shen
53a666e385 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa50)
2021-03-18 22:19:34 -10:00
Tianling Shen
7780dec333 msgpack-c: add new package
This is needed by tmate.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cfc965b107)
2021-03-18 22:19:34 -10:00
Nicholas Smith
9c94561ca0 watchcat: update to support procd
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 399279b363)
2021-03-18 12:43:32 +01:00
Daniel Golle
8210edd108
auc: bump to version 0.1.6
Fixes running on release branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 004abfec75)
2021-03-18 01:40:48 +00:00
Daniel Golle
8b8b70ef55 auc: sync with development branch
* update to new server API
 * include version_code in request
 * include versions of selected packages in request
 * add SHA256 verification via busybox sha256sum
 * sort attributes in policies alphabetically
 * move all API-specific string constants to precompiler macros
 * set correct MIME type for JSON post request (application/json)
 * output string error message if something goes wrong
 * auto-generate version string

(cherry squashed from commit 85ba80592b,
commit 985b0f8f63 and
commit fb26b424e8)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-17 23:58:15 +00:00
Jan Pavlinec
1a9539166d tor: update to version 0.4.5.7
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-17 19:56:04 +02:00
Florian Eckert
b544e0aa58 mwan3: add connecting and disconnecting event to mwan3track
If the interface goes into failure state (is disconnecting)
then with this change one hotplug.d event is generated.

The same is true for the recovery state (is connecting), when the interface
comes back from a failure state.

In both cases, a hotplug.d event for the iface is triggered. Once
with the $ACTION=disconnecting and once for the $ACTION=connecting.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5348732b98)
2021-03-17 14:17:23 +01:00
Dirk Brenken
3802d70e6b
banip: update to 0.7.5-2
* refine the new dns resolving process
* add a caching mechanism for the resolved IPs, the detached name
  lookup takes place only during 'restart' or 'reload' action, 'start'
  and 'refresh' actions are using an auto-generated backup instead.
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 909a87c2f5)
2021-03-15 22:32:56 +01:00
Karl Palsson
1c5c3a4108 lang/lua-libmodbus: bump to 0.7 release
Includes fixes for OpenWrt's Lnum patched lua.
Release notes at: https://github.com/etactica/lua-libmodbus/blob/v0.7/changelog

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 16:09:29 +00:00
Karl Palsson
be12ef3bc2 net/mosquitto: Update to 2.0.9
This is a bugfix release, with minor security fixes for outgoing bridge
connections and the client library.

Full details here: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 16:09:04 +00:00
Rosen Penev
b508c6fd16 gerbera: update to 1.7.0
Switch to AUTORELEASE for simplicity.

Switch to building with ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit be54cf98eb)
2021-03-14 16:54:15 -07:00
Rosen Penev
fba5673cb9 libnpupnp: update to 4.1.1
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 12044355b0)
2021-03-14 16:54:15 -07:00
Rosen Penev
7bc83e576f pugixml: update to 1.11.4
Switch to AUTORELEASE for simplicity.

Switch to ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2c8c25d6f8)
2021-03-14 16:54:15 -07:00
Rosen Penev
568642ef96 taglib: update to 1.12-beta-2
Switch to AUTORELEASE for simplicity.

Switch to building with ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c94614841f)
2021-03-14 16:54:15 -07:00
Rosen Penev
bc18279ac0 libmatroska: update to 1.6.3
Switch to AUTORELEASE for simplicity.

Switch to ninja for faster compilation.

Remove LTO as it's broken on this package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3074960bb6)
2021-03-14 16:54:15 -07:00
Rosen Penev
beb319fad7 libebml: update to 1.4.2
Switch to AUTORELEASE for simplicity.

Switch to ninja for faster compilation.

Remove LTO as it's broken on this package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7888403545)
2021-03-14 16:54:15 -07:00
Rosen Penev
14030e690a
Merge pull request #15123 from 1715173329/21.02-xray-update
[openwrt-21.02] xray-core: Update to 1.4.0
2021-03-14 16:34:54 -07:00
Tianling Shen
0e2a545f1d
xray-core: Update to 1.4.0
- Re-assigned myself as the maintainer
- Updated geodata to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from a28580a530)
2021-03-15 00:16:37 +08:00
Hannu Nyman
221f81d2c3
Merge pull request #15085 from cotequeiroz/pigeonhole-21.02
[21.02] pigeonhole: cherry-pick bumps to 0.5.14 from master
2021-03-14 11:12:39 +02:00
Dirk Brenken
ab8304e9d0
banip: bump to 0.7.5
* black- and whitelist now supporting domain names as well - the
corresponding IPs (IPv4 & IPv6) will be resolved in a detached
background process and added to the IPsets

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 804249a571)
2021-03-14 07:03:00 +01:00
Rosen Penev
55f6734c6c
Merge pull request #15113 from G-M0N3Y-2503/docker-20.10.5
docker,dockerd: Updated to 20.10.5
2021-03-13 06:10:47 -08:00
Gerard Ryan
9893ce9b43 docker,dockerd: Updated to 20.10.5
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-13 22:55:25 +10:00
Christian Lachner
3ab01827b1 haproxy: Update HAProxy to v2.2.10
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-13 14:43:34 +02:00
Rosen Penev
441bfb3299 ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a1a8f3659)
2021-03-12 18:18:14 -08:00
Rosen Penev
189d4aeb7d ksmbd: update to 3.3.7
Major change are:

Fix an issue that directories appear as files when using windows
backup.
Fix xfstests generic/241 failure on life test.
Update ksmbd shutdown and debug print on/off using ksmbd.control in
cifsd.rst.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 851b9b252f)
2021-03-12 18:18:14 -08:00
Rosen Penev
07da99cb83 ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d95edf16ef)
2021-03-12 13:23:25 -08:00
Martin Blumenstingl
e50a8fb191 ksmbd-tools: update to 3.3.5
Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 58f91090f5)
2021-03-12 13:23:25 -08:00
Rosen Penev
2d2e6fe19e ksmbd: update to 3.3.6
Major changes are:

Fix kernel oops from fuse+ntfs driver.
Fix the issue of change the directory to the file using Nautilus
client.
Fix ksmbd build break with the latest linux-5.12-rc1.
Fix potential memleak and use after free.
Fix use after free from KASAN(racy issue)

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8e3a4adea3)
2021-03-12 13:23:25 -08:00
Martin Blumenstingl
b516dbdba6 ksmbd: update to 3.3.5
Major changes for version 3.3.5 are:
- Add support for version 4 dos attribute structure of samba.
- Implement maximal allowed desired access.
- Fix several error handling.
- Fix a few smbtorture failures.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
(cherry picked from commit 71aef26ecb)
2021-03-12 13:23:25 -08:00
Paul Spooren
037597d1e5 syncthing: update to 1.14.0
https://github.com/syncthing/syncthing/releases/tag/v1.14.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 2ce9215213)
2021-03-11 12:13:11 -10:00
Eneas U de Queiroz
cbd5c9cb92
pigeonhole: bump to 0.5.14
ChangeLog:
 - IMAP FILTER command: cmd-filter-sieve - Do not allow NIL as script
   name argument.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit e40776d264)
2021-03-10 21:21:29 -03:00
Rosen Penev
6d18aa43d0
pigeonhole: update to 0.5.13
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3eb83963cf)
2021-03-10 21:21:29 -03:00
Dirk Brenken
86a896757c
adblock: small update
* add adguard_tracking source (list with cname trackers)
* optimize/sort output of active sources in status
* optimize log output in EMails

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f91e5cc666)
2021-03-10 14:44:40 +01:00
Michael Heimpold
d576b0eefc
Merge pull request #15064 from mhei/21.02-php8
[21.02] php8: backport fixes and update from master
2021-03-10 07:21:25 +01:00
Michael Heimpold
1eddcdefc9
Merge pull request #15062 from mhei/21.02-php7-update
[21.02] php7: update to 7.4.16
2021-03-08 23:10:57 +01:00
Rosen Penev
63280ad8de
Merge pull request #15053 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: better processing of custom user files
2021-03-08 12:26:29 -08:00
Michael Heimpold
f4a36a0c60 php8: update to 8.0.3
Also update opcache compile fix patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit e819f630a2)
2021-03-08 21:26:22 +01:00
Eneas U de Queiroz
61bd6aa423 php8: fix pecl build with QUILT
This is d4979cff0 ported to php8.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit db3389edc2)
2021-03-08 21:26:17 +01:00
Eneas U de Queiroz
10d3f10a81 php8: fix build with QUILT
This is d4979cff0 ported to php8.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 8c6d7dc37c)
2021-03-08 21:26:00 +01:00
Rosen Penev
4a13111f9f
Merge pull request #15051 from stangri/21.02-simple-adblock
[21.02] simple-adblock: update to 1.8.5-1
2021-03-08 12:25:23 -08:00
Stan Grishin
e0a9c7fbcf vpn-policy-routing: better processing of custom user files
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:34:50 +00:00
Stan Grishin
94b4cce292 simple-adblock: update to 1.8.5-1
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-08 10:25:23 +00:00
Michael Heimpold
d5e5d544bb php7: update to 7.4.16
Also refresh patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 87e852fc71)
2021-03-07 22:10:11 +01:00
Dirk Neukirchen
1831941e73
i2pd: fix startup
i2pd reports:
missing/unreadable config file: /etc/i2pd/i2pd.conf

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 4f42a7a95a)
2021-03-07 02:17:23 +01:00
Jan Pavlinec
7bc80b5956
python-aiohttp: update to version 3.7.4
Note:
Fixes CVE-2021-21330
Add new required dependecy python3-typing-extensions

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c99a19f614)
2021-03-07 02:16:50 +01:00
Jan Pavlinec
dd3747ea18
python-typing-extensions: add new package
Note:
Dependency for python3-aiohttp

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 034cba33c6)
2021-03-07 02:16:39 +01:00
Michael Heimpold
ca89f03da2
hs20: fix linking with full language support enabled
After d18692c, we need to include nls.mk to setup correct
environment variables so that linking succeeds.

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 3b177a9d60)
2021-03-07 02:16:29 +01:00
Michael Heimpold
e95688fa82
aria2: fix linking with full language support enabled
After d18692c, we need to include nls.mk to setup correct
environment variables so that linking succeeds.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ab52802e38)
2021-03-07 02:15:47 +01:00
Rosen Penev
3ec544b7d2
reptyr: do not build on mips64
mips of any kind is not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a30518f99e)
2021-03-07 02:12:16 +01:00
Hannu Nyman
801d4cae62 nano: update to 5.6.1
Update nano editor to version 5.6.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0f4138db0b)
2021-03-06 10:28:39 +02:00
Rosen Penev
7a5d66cbb7
Merge pull request #14993 from 1715173329/2102-newyq
[openwrt-21.02] yq: Update to 4.6.1
2021-03-02 19:53:33 -08:00
Rosen Penev
d1519f07f8
Merge pull request #14995 from 1715173329/2102-xr-go1.16
[openwrt-21.02] xray-core: Update to 1.3.1
2021-03-02 19:51:50 -08:00
Josef Schlehofer
ac8fe0eb07
Merge pull request #14908 from jefferyto/python-3.9.2-openwrt-21.02
[openwrt-21.02] python3: Update to 3.9.2, refresh patches
2021-03-03 00:09:13 +01:00
Jeffery To
b35fb7e8f9
python3: Update to 3.9.2, refresh patches
Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
  as a query args separator

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6d9005d5ac)
2021-03-02 23:14:19 +08:00
Tianling Shen
4270ac1e0b
xray-core: Update to 1.3.1
- updated geodata to latest version
- updated project url

Fixes: #14972

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 264ce0d0ee)
2021-03-02 23:13:01 +08:00
Tianling Shen
8b9927ec8d
yq: Update to 4.6.1
Fixed performance issue.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(backported from 32515ced93)
2021-03-02 21:13:44 +08:00
Rosen Penev
d5c323ee68
Merge pull request #14990 from G-M0N3Y-2503/dockerd-20.10.4
docker,dockerd,runc: Docker 20.10.4 Update
2021-03-02 03:19:19 -08:00
Rosen Penev
a03345d9b7
Merge pull request #14989 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update to 0.3.2-18
2021-03-02 01:57:02 -08:00
Jan Pavlinec
a1a7a8615c
knot-resolver: update to version 5.3.0
Changes:
- remove arch limit
- add libnghttpd2 dependency

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 9103076ec7)
2021-03-02 10:34:24 +01:00
Gerard Ryan
a84a660a0e docker,dockerd: Updated to 20.10.4
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-02 18:35:39 +10:00
Gerard Ryan
a4a36c807a runc: Updated to 1.0.0-rc93
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-02 18:35:38 +10:00
Rosen Penev
f0682c1d30
Merge pull request #14976 from G-M0N3Y-2503/dockerd-ipv6-config-bridge
dockerd: ipv6 bridge config
2021-03-01 17:19:53 -08:00
Paul Spooren
f58f95e3aa syncthing: update to 1.13.1
Also start using $(AUTORELEASE)

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit dda59fedcc)
2021-03-01 11:41:33 -10:00
Paul Spooren
53fa877e8e CI: fix handling of release branches
The "changed package" logic triggers all packages changed since
`origin/master` while for releases branches all changes since e.g.
`origin/openwrt-21.02` should be considered.

First figure out the active branch, then find changed packages.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-03-01 11:41:33 -10:00
Stan Grishin
dd27fb27f3 vpn-policy-routing: update to 0.3.2-18
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-01 21:38:57 +00:00
Florian Eckert
0042f2dfa7 mwan3: disable DNS lookups for ping checks
By default, ping does a reverse DNS of the IP that you are pinging.
When you have a network issue (such as when a link has just gone down
and you haven't yet marked it down), this lookup can cause failures on
tests for links that are still good.

This option only works for iputils ping.
For busybox the option is not evaluated, but it is accepted without
throwing an error.

Fixes: #14968
Fixes: #14924

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Suggested-by: David Lang <david@lang.hm>
(cherry picked from commit 7cfb282432)
2021-03-01 12:44:22 +01:00
Gerard Ryan
d2a0d5b6fd dockerd: package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-01 18:11:06 +10:00
Gerard Ryan
68da5fea94 dockerd: Added options to setup a dualstack default bridge
* Added IPv6 Support

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-03-01 18:11:06 +10:00
Ilya Lipnitskiy
b9ff010dca
CI: enhance package detection logic
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
(cherry picked from commit a2b08b5cbf)
2021-03-01 08:47:15 +01:00
Rosen Penev
5b0c55ecb4
Merge pull request #14946 from G-M0N3Y-2503/docker-20.10.3
docker,dockerd: Updated to 20.10.3
2021-02-28 15:03:06 -08:00
Rosen Penev
4c6acdb752
Merge pull request #14963 from EricLuehrsen/unbound_1131_2102
[openwrt-21.02] unbound: update to 1.13.1
2021-02-28 15:02:22 -08:00
Eric Luehrsen
f75ca7f5e0 unbound: update to 1.13.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-02-28 16:21:41 -05:00
Philip Prindeville
d64ce32a34
safe-search: fix typos in package scripting
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 8d09fc0cfb)
2021-02-28 13:11:00 +01:00
Bernhard Voelker
17f2ef9a0e
utils/findutils: update to 4.8.0
* utils/findutils/Makefile (PKG_VERSION): Update to latest.
(PKG_RELEASE): Reset to 1.
(PKG_HASH): Update.

Signed-off-by: Bernhard Voelker <mail@bernhard-voelker.de>
(cherry picked from commit 3614a520d2)
2021-02-28 13:10:55 +01:00
David Bauer
ac11726f14
static-neighbor-reports: add missing Lua dependency
Add a missing dependency on Lua. Otherwise the script installing the
neighbor report can't be executed in case Lua is not installed on the
system.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 83d572af98)
2021-02-28 13:10:45 +01:00
Rosen Penev
3764821fee
vim: fix compile with BUILD_NLS
Avoids having to use msgfmt, which happens to be broken with gettext-full.

msgfmt is used for the desktop gvim application, which is not used here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d5ddc98cb6)
2021-02-28 13:10:21 +01:00
Gerard Ryan
fbb4eb90d1 docker,dockerd: Updated to 20.10.3
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 21:04:44 +10:00
Gerard Ryan
71ca7dd08a docker,dockerd: Added git-short-commit to verify short commit
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 21:04:16 +10:00
Rosen Penev
549db8ee27
Merge pull request #14937 from nxhack/2102_add_node-yarn
[21.02] node-yarn: add new package - for building adguardhome
2021-02-28 01:30:07 -08:00
Rosen Penev
5581f5ec48
Merge pull request #14935 from G-M0N3Y-2503/dockerd-use-host-dns
dockerd: Added option to configrue docker to use host Dnsmasq for DNS
2021-02-28 01:29:22 -08:00
Gerard Ryan
59373d5e4d dockerd: Package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 10:25:45 +10:00
Gerard Ryan
f726fcfe9e dockerd: set docker zone chain defaults to ACCEPT
* Since the docker0 is a private network by default we can be
  more accepting like the LAN is by default

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 10:23:41 +10:00
Gerard Ryan
d758e89fa5 dockerd: Added option to set dns servers
* The default server is the default switch so that
  queries will go through the hosts dnsmasq by default

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-28 10:23:41 +10:00
Rosen Penev
112e7f5e7d
Merge pull request #14839 from G-M0N3Y-2503/dockerd-maintainence-backport
dockerd: misc maintainence
2021-02-27 15:46:10 -08:00
Rosen Penev
46b84dc335
Merge pull request #14920 from luizluca/21.02/sane-backends-1.0.32
[21.02] sane backends 1.0.32
2021-02-27 01:35:06 -08:00
Dirk Brenken
77efbe8ac7
adblock: update 4.1.0
* major source changes:
  * split oisd.nl in basic and full variant
  * add swedish regional list
  * made archive categories for shallalist and utcapitole selectable
    via LuCI
  * made all list variants of energized and stevenblack selectable
    via LuCI
* removed dns filereset mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 215ffbe357)
2021-02-27 06:46:32 +01:00
Dirk Brenken
c094b09da2
travelmate: update to 2.0.3
* refine the wifi reconfigure logic

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2b476ffd38)
2021-02-27 06:43:57 +01:00
Dirk Brenken
d15c358b82
Merge pull request #14919 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: bugfix: netflix user file missing redirect
2021-02-27 06:22:11 +01:00
Gerard Ryan
1c848f1f2c dockerd: Package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:57 +10:00
Gerard Ryan
0c82aad0be dockerd: Added iptables wait to ensure rules are added
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Gerard Ryan
8bc1ac1589 dockerd: Made blocked_interfaces ip rule REJECT
* Changed from DROP to REJECT to be consistant with other firewall rules

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Gerard Ryan
348bcb6e68 dockerd: made registry_mirrors and hosts omittable
* Moved logic out of config writing
* Made default config only specify OpenWrt dictated defaults
  Otherwise, docker defaults can be assumed

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Gerard Ryan
f12f31cd10 dockerd: Normalized config quotation marks
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
2021-02-27 13:39:31 +10:00
Stan Grishin
1963605aed vpn-policy-routing: bugfix: netflix user file missing redirect
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 22:03:54 +00:00
Rosen Penev
6f2829de2c sane-backends: update to 1.0.32
Dropped patches:
-102-pixma_Restore_old_behaviour_in_case_XML_support_is_missing.patch (merged)
-101-fix_uclibc_std_rand.patch std::round was unavailable because of a wrong configure
 var from the uClibc days. Fixed upstream with 1647790ae6202bd70b199e2aa44f8eb43e8d3af1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit bf1a138f92)
(cherry picked from commit 49e75e8105)
2021-02-26 16:40:21 -03:00
Rosen Penev
fb40eb45a6 libv4l: fix glibc compilation
There was a typo in the linker flags.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b945b0790f)
2021-02-26 16:40:21 -03:00
Eneas U de Queiroz
8d8d71b87d
php7: fix build with QUILT
When building with QUILT, unlike the regular build, Build/Prepare does
not apply the patches.  So when buildconf is called with QUILT on, at
the end of Build/Prepare, it will not have the patched sources, and
build will fail.

To fix the problem, run buildconf in Build/Prepare only when QUILT is
off, and do it in Build/Configure otherwise.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit d4979cff06)
2021-02-26 18:07:35 +01:00
Eneas U de Queiroz
6e200ab632
php7: fix pecl build with QUILT
Commit d741a64b7 ("lang/php7: Don't run phpize7 with QUILT") changed
pecl.mk to not run phpize7 during Package/prepare if QUILT is set.  The
intention was to allow prepare, refresh and update targets to run
without building dependencies.

As a side-effect, Package/configure and Package/compile fail when QUILT
is defined because they can't find ./configure or a Makefile.  It also
impacts the github tests run with pull requests, because QUILT is
defined there.

To avoid that failure and still keep the prepare, refresh, and update
speedup, call phpize7 before Package/Configure if QUILT is defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 3476816cc8)
2021-02-26 18:07:30 +01:00
Alexandru Ardelean
1d5445f530
mstpd: bump to version 0.0.9
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 8520aba273)
2021-02-26 18:07:25 +01:00
Luiz Angelo Daros de Luca
276b28c196
ruby: update to 3.0.0
This release goal is performance, concurrency, and typing. See details
in https://www.ruby-lang.org/en/news/2020/12/25/ruby-3-0-0-released/

New subpackages (reflect of mostly complete upstream ruby gemification)
- ruby-abbrev (from ruby-misc)
- ruby-base64 (from ruby-misc)
- ruby-coverage (from ruby-misc)
- ruby-continuation (from ruby-misc)
- ruby-debug (from ruby-debuglib)
- ruby-english (from ruby-misc)
- ruby-expect (from ruby-misc)
- ruby-fiber (from ruby-misc)
- ruby-find (from ruby-filelib)
- ruby-io-nonblock (from ruby-multithread)
- ruby-io-wait (from ruby-multithread)
- ruby-monitor (from ruby-multithread)
- ruby-net-ftp (from ruby-net)
- ruby-net-http (from ruby-net)
- ruby-net-imap (from ruby-net)
- ruby-net-pop (from ruby-net)
- ruby-net-protocol (from ruby-net)
- ruby-objspace (from ruby-debuglib)
- ruby-open-uri (from ruby-net)
- ruby-pathname (from ruby-filelib)
- ruby-pp (from ruby-prettyprint)
- ruby-pty (from ruby-misc)
- ruby-rbs (NEW)
- ruby-resolv (from ruby-socket)
- ruby-resolv-replace (from ruby-socket)
- ruby-securerandom (from ruby-misc)
- ruby-set (from ruby-misc)
- ruby-shellwords (from ruby-misc)
- ruby-syslog (from ruby-logger)
- ruby-tempfile (from ruby-filelib)
- ruby-tmpdir (from ruby-filelib)
- ruby-tsort (from ruby-misc)
- ruby-typeprof (NEW)
- ruby-un (from ruby-mkmf)
- ruby-weakref (from ruby-misc)

Removed subpackages
- ruby-debuglib (split into ruby-debug,ruby-objspace)
- ruby-filelib (split into ruby-find,ruby-pathname,ruby-tempfile,ruby-tmpdir)
- ruby-misc (split into ruby-abbrev,ruby-base64,ruby-continuation,
    ruby-coverage,ruby-english,ruby-expect,ruby-fiber,ruby-securerandom,
    ruby-set,ruby-shellwords,ruby-tsort,ruby-weakref)
- ruby-multithread (split into ruby-io-nonblock,ruby-io-wait,ruby-monitor)
- ruby-net (split into ruby-net-ftp,ruby-net-http,ruby-net-imap,ruby-net-pop,
    ruby-net-protocol,ruby-open-uri)
- ruby-net-telnet (removed upstream)
- ruby-sdbm (removed upstream)
- ruby-webrick (removed upstream)
- ruby-xmlrpc (removed upstream)

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit fe4020f23e)
2021-02-26 13:04:06 +01:00
Rosen Penev
e3cf0d1218
boinc: update to 7.16.16
Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ce361e3c1a)
2021-02-26 13:03:33 +01:00
Rosen Penev
50512fccd1
dovecot: update to 2.3.13
Fixed and refreshed patches.

Switched to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6baf7dd125)
2021-02-26 13:03:27 +01:00
Rosen Penev
54a511072b
curl: update to 7.75.0
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d55ea14a46)
2021-02-26 13:03:22 +01:00
Hirokazu MORIKAWA
30a45f2810
node: bump to v14.16.0
Update to v14.16.0

February 2021 Security Releases
- HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (Critical) (CVE-2021-22883)
- DNS rebinding in --inspect (CVE-2021-22884)
- OpenSSL - Integer overflow in CipherUpdate (CVE-2021-23840)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit a68820bb74)
2021-02-26 12:49:41 +01:00
Hirokazu MORIKAWA
6c47d84759
node: make hostpkg icu-enabled
Made the necessary changes to build the latest version of adguardhome.
See this thread : https://github.com/openwrt/packages/pull/14717

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 884761c4df)
2021-02-26 12:49:25 +01:00
Eneas U de Queiroz
782d320172
dockerd: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8a4bb56478)
2021-02-26 12:48:48 +01:00
Gerard Ryan
2b00d0be06
dockerd: Package release bump
Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit e882ff47e5)
2021-02-26 12:48:43 +01:00
Eneas U de Queiroz
40b63e39aa
oci-runtime-tools: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit bb9641e702)
2021-02-26 12:47:31 +01:00
Eneas U de Queiroz
b0a410d378
libnetwork: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit d9f7dff4a0)
2021-02-26 12:47:26 +01:00
Eneas U de Queiroz
66ec425ce7
docker: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 5b2d0609c7)
2021-02-26 12:47:22 +01:00
Eneas U de Queiroz
751715e824
containerd: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 2d48a7b6e0)
2021-02-26 12:47:15 +01:00
Eneas U de Queiroz
aa382aad96
cni: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 619270da0e)
2021-02-26 12:47:10 +01:00
Eneas U de Queiroz
067f4b56b3
tor-fw-helper: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit cffae02037)
2021-02-26 12:47:06 +01:00
Eneas U de Queiroz
c33122dbd9
restic-rest-server: fix build with golang 1.16
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.

Module-aware mode will be mandatory in the next golang release.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit b732157dec)
2021-02-26 12:47:02 +01:00
Hirokazu MORIKAWA
243cc9a3f0 node-yarn: add new package - for building adguardhome
Add the necessary new package to build the latest version of adguardhome.
See this thread : https://github.com/openwrt/packages/pull/14717

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-02-26 17:48:28 +09:00
Alexandru Ardelean
cac54a66f4
django: bump to version 3.1.7
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmai.com>
(cherry picked from commit dd58d24699)
2021-02-26 07:38:51 +01:00
Eneas U de Queiroz
97bec5a53a
setools: Avoid using host libraries
This adds $STAGING_DIR to library search paths in setup.py, to avoid
picking up host libraries when linking.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 0aff79f29f)
2021-02-26 07:38:25 +01:00
Eneas U de Queiroz
0890169df1
libupm: enforce disabling python2
If there are more than two python3 interpreters, and no python2,
libupm thinks one of them is python2 and fails.  Avoid that by
telling it that python2 was not found.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 30a8d8db6a)
2021-02-26 07:38:18 +01:00
Eneas U de Queiroz
673c341394
lxc: fix build without seccomp if libseccomp built
This fixes compiling lxc without seccomp support if libseccomp is
already installed to the staging dir.  Patches were applied upstream.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 470176905d)
2021-02-26 07:38:02 +01:00
Eneas U de Queiroz
eec3ece900
libdaq3,snort3: install/use libdaq3 in its own dir
If used with default paths, libdaq 2.x and libdaq 3.x will overwrite
some of the other version's files.  Install them in different places to
avoid trouble.

Snort is the only package that uses libdaq, so update it at the same
time to avoid creating a failing commit.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 92cdc620b6)
2021-02-26 07:37:41 +01:00
Eneas U de Queiroz
6b05c7ae76
libdaq,snort: install/use libdaq2 in its own dir
If used with default paths, libdaq 2.x and libdaq 3.x will overwrite
some of the other version's files.  Install them in different places to
avoid trouble.

Snort is the only package that uses libdaq, so update it at the same
time to avoid creating a failing commit.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 48e2b6ebb3)
2021-02-26 07:37:32 +01:00
Rosen Penev
7852ef7ccb
Merge pull request #14904 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update user netflix file
2021-02-25 21:12:33 -08:00
Stan Grishin
b681aac3c2 vpn-policy-routing: update user netflix file
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-26 02:16:59 +00:00
Rosen Penev
2a5896dcae
Merge pull request #14884 from jefferyto/treewide-refresh-patches-openwrt-21.02
[openwrt-21.02] treewide: Run refresh on all packages
2021-02-25 14:05:23 -08:00
Hannu Nyman
7263be101b nano: update to version 5.6
Upgrade nano to version 5.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit dffdfe4ac8)
2021-02-25 16:59:31 +02:00
Rosen Penev
681eced8ba
Merge pull request #14889 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: custom user scripts improvements
2021-02-24 16:53:44 -08:00
Stan Grishin
dc8a73d171 vpn-policy-routing: custom user scripts improvements
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-24 19:44:26 +00:00
Ilya Lipnitskiy
b1cbd93bcd
treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
(cherry picked from commit 5d8d4fbbcb)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-02-25 01:26:05 +08:00
Jan Hak
99a5a094eb
liburcu: update to version 0.12.2
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 9443203377)
2021-02-24 10:22:52 +01:00
Jan Hak
9b29246fec
libedit: update to version 20210216-3.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit fd7f43ae46)
2021-02-24 10:20:00 +01:00
Jan Pavlinec
0d56e8c19e
knot-resolver: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit bb1f6174fa)
2021-02-23 14:20:29 +01:00
Rosen Penev
1da33ba207
Merge pull request #14852 from 1715173329/2102-xr-mter
[openwrt-21.02] xray-core: remove myself from maintainters
2021-02-23 05:18:04 -08:00
Rosen Penev
9698c73b5d
Merge pull request #14866 from stangri/21.02-https-dns-proxy
[21.02] https-dns-proxy: add Force DNS support
2021-02-23 05:11:21 -08:00
Rosen Penev
be990d48e2
Merge pull request #14868 from stangri/21.02-vpn-policy-routing
[21.02] vpn-policy-routing: update config file, support PROCD_RELOAD_DELAY
2021-02-23 05:10:59 -08:00
Josef Schlehofer
5666034823 screen: backport fix for CVE-2021-26937
Security reports:
- https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html
This issue can be reproduced even on OpenWrt
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982435

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c250298fa3)
2021-02-23 06:10:06 -05:00
Stan Grishin
4a067d59fd vpn-policy-routing: update config file, support PROCD_RELOAD_DELAY
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-23 01:12:39 +00:00
Stan Grishin
02a91cc3ef https-dns-proxy: add Force DNS support
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-02-23 01:04:52 +00:00
Rosen Penev
597fbe5f03
Merge pull request #14834 from jefferyto/golang-1.16-openwrt-21.02
[openwrt-21.02] golang: Update to 1.16
2021-02-22 15:16:21 -08:00
Rosen Penev
ca712dd259
Merge pull request #14851 from 1715173329/2102-yq-mter
[openwrt-21.02] yq: bump to 4.6.0, remove myself from maintainters
2021-02-22 14:43:15 -08:00
Rosen Penev
a384058a89
Merge pull request #14848 from jefferyto/python-config-macos-openwrt-21.02
[openwrt-21.02] python3: Fix target python-config when building on macOS
2021-02-22 14:21:21 -08:00
Josef Schlehofer
743d7bcf2d
netdata: update to version 1.29.2
Release notes:
https://github.com/netdata/netdata/releases/tag/v1.29.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e8021bf14d)
2021-02-22 19:54:00 +01:00
Tianling Shen
b21c5c1e1c
xray-core: remove myself from maintainters
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from 024112605a)
2021-02-23 00:37:48 +08:00
Tianling Shen
4836e407d7
yq: Update to 4.6.0
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from b8a2c86aa7)
2021-02-23 00:35:15 +08:00
Tianling Shen
bc23fd3d28
yq: remove myself from maintainters
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
(Backported from f56d697985)
2021-02-23 00:34:50 +08:00
Jeffery To
6ce32c3b5e
python3: Fix target python-config when building on macOS
The Python version of python-config is installed when building on macOS,
rather than the shell script version when building on Linux. When run on
macOS, the Python version of python-config will return values with
Mac-specific customizations.

This patches the python-config install recipe so that which version is
installed can be controlled by the package makefile. When building on
macOS, this installs the Python version for host Python and the shell
script version for target Python.

This also updates Host/Compile and Host/Install to use the default host
build recipes, so that the various HOST_* variables are taken into
account automatically.

Fixes https://github.com/openwrt/packages/issues/14652

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 18330902a0)
2021-02-22 22:09:54 +08:00
Jeffery To
75d276fe33
golang: Update to 1.16
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dc587eccb7)
2021-02-22 17:08:36 +08:00
Jan Pavlinec
2bb46e74f9
git-lfs: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 0bc2f89ae1)
2021-02-21 08:56:56 +01:00
Matt Merhar
91902ec5e7
perl-try-tiny: use relative include of perlmod.mk
The $(TOPDIR) seemed to cause Makefile parsing issues with CI.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 52668b1e97)
2021-02-21 08:50:30 +01:00
Jan Pavlinec
eec6b56d8a
dnstap: update to version 0.4.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5514fca2b7)
2021-02-21 08:49:55 +01:00
Noah Meyerhans
99f620137f
bind: bump to 9.17.10
Add build dependency on libnghttp2 for DNS-over-HTTPS support

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit f33ab76019)
2021-02-21 08:49:31 +01:00
Jan Pavlinec
50b5c5b77f
tor: update to version 0.4.5.6
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17056742ad)
2021-02-21 08:49:09 +01:00
Moritz Warning
86cf417bfe
zerotier: bump to 1.6.4
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-21 08:48:49 +01:00
Dirk Brenken
185a717e19
banip: update to 0.7.3
* fix search string/pipe preparation for the background service
* fix IPSet maxelem limitation, made it more flexible
* fix potential error during resume action
* add Cisco Talos IP blacklist
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit b65353b4f7)
2021-02-20 15:14:49 +01:00
Álvaro Fernández Rojas
af6827459a rng-tools: fix init START
We should be using "00" to deal with alphabetical order.

Fixes: d9cea6747 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from 55b22d131)
2021-02-20 09:00:55 +01:00
Álvaro Fernández Rojas
d9cea67477 rng-tools: start as early as possible
Raspberry Pi devices (bcm2708) need this to get from:
[  102.310494] random: crng init done
to:
[   12.539744] random: crng init done

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from commit e9a126c14)
2021-02-20 08:49:20 +01:00
Rosen Penev
3cf70cd68c
Merge pull request #14805 from apple-etan/21-02/feature/ek/libnetfilter-queue/ipv6
libnetfilter-queue: fix IPv6 header handling
2021-02-19 19:03:44 -08:00
Etan Kissling
aeb793af11 libnetfilter-queue: fix IPv6 header handling
Import 51f25df304aeaa6c1b02ef7456a61278ee70c102 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit a16faf72b1)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>
2021-02-19 23:52:32 +01:00
Rosen Penev
cb448e732d
Merge pull request #14803 from apple-etan/21-02/feature/ek/libnetfilter-queue/icmp
libnetfilter-queue: add pkt_buff function for ICMP
2021-02-19 14:50:46 -08:00
Etan Kissling
57662eade1 libnetfilter-queue: add pkt_buff function for ICMP
Import 662c8f44d53492d2e0ebd430dadef12d580ec330 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit 73060f9104)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>
2021-02-19 22:47:51 +01:00
Rosen Penev
4896f0a021
Merge pull request #14795 from apple-etan/21-02/feature/ek/libnetfilter-queue/fixup
libnetfilter-queue: re-add PKG_FIXUP to fix build
2021-02-19 12:40:13 -08:00
Eneas U de Queiroz
603be683aa
reptyr: Don't build for mipsel
The package does not support any mips archs, including mipsel.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit ac3beceb96)
2021-02-19 16:42:36 -03:00
Etan Kissling
9afc3eb8b6 libnetfilter-queue: re-add PKG_FIXUP to fix build
Currently when trying to build this package a build error is produced:

WARNING: 'automake-1.16' is missing on your system.
         You should only need it if you modified 'Makefile.am' or
         'configure.ac' or m4 files included by 'configure.ac'.
         The 'automake' program is part of the GNU Automake package:
         <https://www.gnu.org/software/automake>
         It also requires GNU Autoconf, GNU m4 and Perl in order to run:
         <https://www.gnu.org/software/autoconf>
         <https://www.gnu.org/software/m4/>
         <https://www.perl.org/>

This error is due to an attempt to use the native host tools instead of
the OpenWrt build system generated ones. By re-adding PKG_FIXUP it is
ensured that the correct version of the host tools are used.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
(cherry picked from commit cab73ac826)
Signed-off-by: Etan Kissling <etan_kissling@apple.com>
2021-02-19 13:12:16 +01:00
Álvaro Fernández Rojas
294f08020e bcm27xx-eeprom: update to latest version
New eeprom firmwares support recently added RPi 400 and CM4.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry-picked from commit 7bbf6d1d0)
2021-02-19 11:13:58 +01:00
Dirk Brenken
27a448f42f
banip: update to 0.7.2
* add scanning for suspicious nginx events
* add a log counter to track the number of the failed requests
  or login repetitions of the same ip in the log before banning,
  defaults are: ssh (3), luci (3), nginx (5)
* optimize the background service handling
* add 'greensnow' as a new source
* update readme and LuCI frontend regarding the new log count options

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 55d663d291)
2021-02-18 15:36:00 +01:00
1443 changed files with 33176 additions and 15166 deletions

View file

@ -1,4 +1,4 @@
FROM debian:9
FROM debian:10
# Configuration version history
@ -8,6 +8,7 @@ FROM debian:9
# v1.0.3 - Verify usign signatures
# v1.0.4 - Add support for Python3
# v1.0.5 - Add 19.07 public keys, verify keys
# v1.0.6 - Add 21.02 public keys, update Debian image to version 10, add rsync
RUN apt update && apt install -y \
build-essential \
@ -23,6 +24,7 @@ python \
python3 \
signify-openbsd \
subversion \
rsync \
time \
unzip \
wget \
@ -54,6 +56,11 @@ RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc
&& gpg --fingerprint --with-colons '<pgpsign-19.07@openwrt.org>' | grep '^fpr:::::::::D9C6901F45C9B86858687DFF28A39BC32074BE7A:$' \
&& echo 'D9C6901F45C9B86858687DFF28A39BC32074BE7A:6:' | gpg --import-ownertrust
# OpenWrt Build System (PGP key for 21.02 release builds)
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/88CA59E8.asc' | gpg --import \
&& gpg --fingerprint --with-colons '<pgpsign-21.02@openwrt.org>' | grep '^fpr:::::::::667205E379BAF348863A5C6688CA59E88F681580:$' \
&& echo '667205E379BAF348863A5C6688CA59E88F681580:6:' | gpg --import-ownertrust
# untrusted comment: Public usign key for unattended snapshot builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs -o /home/build/usign/b5043e70f9a75cde \
&& echo 'd7ac10f9ed1b38033855f3d27c9327d558444fca804c685b17d9dcfb0648228f */home/build/usign/b5043e70f9a75cde' | sha256sum --check
@ -61,3 +68,6 @@ RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9
# untrusted comment: Public usign key for 19.07 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/f94b9dd6febac963' --create-dirs -o /home/build/usign/f94b9dd6febac963 \
&& echo 'b1d09457cfbc36fccfe18382d65c54a2ade3e7fd3902da490a53aa517b512755 */home/build/usign/f94b9dd6febac963' | sha256sum --check
# untrusted comment: Public usign key for 21.02 release builds
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/2f8b0b98e08306bf' --create-dirs -o /home/build/usign/2f8b0b98e08306bf && echo 'd102bdd75421c62490b97f520f9db06aadb44ad408b244755d26e96ea5cd3b7f */home/build/usign/2f8b0b98e08306bf' | sha256sum --check

View file

@ -1,6 +1,6 @@
# Build/update the docker image
docker pull debian:9
docker pull debian:10
docker build --rm -t docker.io/openwrtorg/packages-cci:latest .
docker tag <IMAGE ID> docker.io/openwrtorg/packages-cci:<VERSION-TAG>
docker push docker.io/openwrtorg/packages-cci

View file

@ -2,7 +2,7 @@ version: 2.0
jobs:
build:
docker:
- image: docker.io/openwrtorg/packages-cci:v1.0.5
- image: docker.io/openwrtorg/packages-cci:v1.0.6
environment:
- SDK_HOST: "downloads.openwrt.org"
- SDK_PATH: "snapshots/targets/ath79/generic"

View file

@ -1,5 +1,5 @@
ARG ARCH=x86-64
FROM openwrtorg/rootfs:$ARCH
FROM openwrt/rootfs:$ARCH
ADD entrypoint.sh /entrypoint.sh

63
.github/workflows/formal.yml vendored Normal file
View file

@ -0,0 +1,63 @@
name: Test Formalities
on:
pull_request:
jobs:
build:
name: Test Formalities
runs-on: ubuntu-latest
strategy:
fail-fast: false
steps:
- uses: actions/checkout@v2
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Test formalities
run: |
source .github/workflows/ci_helpers.sh
RET=0
for commit in $(git rev-list HEAD ^origin/$BRANCH); do
info "=== Checking commit '$commit'"
if git show --format='%P' -s $commit | grep -qF ' '; then
err "Pull request should not include merge commits"
RET=1
fi
author="$(git show -s --format=%aN $commit)"
if echo $author | grep -q '\S\+\s\+\S\+'; then
success "Author name ($author) seems ok"
else
err "Author name ($author) need to be your real name 'firstname lastname'"
RET=1
fi
subject="$(git show -s --format=%s $commit)"
if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert '; then
success "Commit subject line seems ok ($subject)"
else
err "Commit subject line MUST start with '<package name>: ' ($subject)"
RET=1
fi
body="$(git show -s --format=%b $commit)"
sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
if echo "$body" | grep -qF "$sob"; then
success "Signed-off-by match author"
else
err "Signed-off-by is missing or doesn't match author (should be '$sob')"
RET=1
fi
done
exit $RET

View file

@ -32,12 +32,26 @@ jobs:
with:
fetch-depth: 0
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Determine changed packages
run: |
# only detect packages with changed Makefiles
PACKAGES="$(git diff --diff-filter=d --name-only origin/master \
| grep -E 'Makefile$|test.sh$' | grep -Ev '/files/|/src/' \
| awk -F/ '{ print $(NF-1) }' | tr '\n' ' ')"
# only detect packages with changes
PKG_ROOTS=$(find . -name Makefile | grep -v ".*/src/Makefile" | sed -e 's@./\(.*\)/Makefile@\1/@')
CHANGES=$(git diff --diff-filter=d --name-only origin/$BRANCH...)
for ROOT in $PKG_ROOTS; do
for CHANGE in $CHANGES; do
if [[ "$CHANGE" == "$ROOT"* ]]; then
PACKAGES+=$(echo "$ROOT" | sed -e 's@.*/\(.*\)/@\1 @')
break
fi
done
done
# fallback to test packages if nothing explicitly changes this is
# should run if other mechanics in packages.git changed
@ -46,14 +60,8 @@ jobs:
echo "Building $PACKAGES"
echo "PACKAGES=$PACKAGES" >> $GITHUB_ENV
- name: Determine branch name
run: |
BRANCH="${GITHUB_BASE_REF#refs/heads/}"
echo "Building for $BRANCH"
echo "BRANCH=$BRANCH" >> $GITHUB_ENV
- name: Build
uses: openwrt/gh-action-sdk@v1
uses: openwrt/gh-action-sdk@v4
env:
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
FEEDNAME: packages_ci
@ -86,7 +94,7 @@ jobs:
run: |
docker build -t test-container --build-arg ARCH .github/workflows/
env:
ARCH: ${{ matrix.arch }}
ARCH: ${{ matrix.arch }}-${{ env.BRANCH }}
- name: Test via Docker container
if: ${{ matrix.runtime_test }}

View file

@ -1,6 +1,6 @@
--- a/bin/BackupPC_archive 2017-01-26 02:31:24.000000000 +0100
+++ b/bin/BackupPC_archive 2018-04-05 21:11:14.428000000 +0200
@@ -299,7 +299,7 @@
--- a/bin/BackupPC_archive
+++ b/bin/BackupPC_archive
@@ -299,7 +299,7 @@ sub ArchiveCleanup
if ( $NeedPostCmd ) {
UserCommandRun("ArchivePostUserCmd");
if ( $? && $Conf{UserCmdCheckStatus} ) {
@ -9,9 +9,9 @@
$stat{xferOK} = 0;
}
}
--- a/bin/BackupPC_dump 2017-01-26 02:31:24.000000000 +0100
+++ b/bin/BackupPC_dump 2018-04-05 21:12:23.640000000 +0200
@@ -1067,7 +1067,7 @@
--- a/bin/BackupPC_dump
+++ b/bin/BackupPC_dump
@@ -1067,7 +1067,7 @@ sub catch_signal
# Send ALRMs to BackupPC_tarExtract if we are using it
#
if ( $tarPid > 0 ) {
@ -20,9 +20,9 @@
}
#
--- a/configure.pl 2017-01-26 02:31:24.000000000 +0100
+++ b/configure.pl 2018-04-05 21:39:24.668000000 +0200
@@ -333,7 +333,10 @@
--- a/configure.pl
+++ b/configure.pl
@@ -333,7 +333,10 @@ while ( 1 ) {
$Conf{BackupPCUser} || "backuppc",
"backuppc-user");
if ( $opts{"set-perms"} ) {
@ -34,7 +34,7 @@
last if ( $name ne "" );
print <<EOF;
@@ -800,6 +803,7 @@
@@ -800,6 +803,7 @@ $Conf{ParPath} = '' if ( $Conf{ParPath}
#
# Figure out sensible arguments for the ping command
#
@ -42,9 +42,9 @@
if ( defined($Conf{PingArgs}) ) {
$Conf{PingCmd} = '$pingPath ' . $Conf{PingArgs};
} elsif ( !defined($Conf{PingCmd}) ) {
--- a/lib/BackupPC/CGI/View.pm 2017-01-26 02:31:24.000000000 +0100
+++ b/lib/BackupPC/CGI/View.pm 2018-04-05 21:46:22.664000000 +0200
@@ -46,7 +46,7 @@
--- a/lib/BackupPC/CGI/View.pm
+++ b/lib/BackupPC/CGI/View.pm
@@ -46,7 +46,7 @@ sub action
my $compress = 0;
my $fh;
my $host = $In{host};
@ -53,7 +53,7 @@
my $type = $In{type};
my $linkHosts = 0;
my($file, $comment);
@@ -136,6 +136,10 @@
@@ -136,6 +136,10 @@ sub action
}
$s =~ s/[\n\r]+//g;
if ( $s =~ /smb: \\>/
@ -64,9 +64,9 @@
|| $s =~ /^\s*(\d+) \(\s*\d+\.\d kb\/s\) (.*)$/
|| $s =~ /^tar: dumped \d+ files/
|| $s =~ /^\s*added interface/i
--- a/lib/BackupPC/Lib.pm 2017-01-26 02:31:24.000000000 +0100
+++ b/lib/BackupPC/Lib.pm 2018-04-05 21:48:38.048000000 +0200
@@ -512,7 +512,8 @@
--- a/lib/BackupPC/Lib.pm
+++ b/lib/BackupPC/Lib.pm
@@ -512,7 +512,8 @@ sub dirRead
}
if ( $IODirentOk ) {
@entries = sort({ $a->{inode} <=> $b->{inode} } readdirent($fh));
@ -76,9 +76,9 @@
} else {
@entries = map { { name => $_} } readdir($fh);
}
--- a/lib/BackupPC/Xfer/Smb.pm 2017-01-26 02:31:24.000000000 +0100
+++ b/lib/BackupPC/Xfer/Smb.pm 2018-04-05 21:57:16.616000000 +0200
@@ -219,7 +219,7 @@
--- a/lib/BackupPC/Xfer/Smb.pm
+++ b/lib/BackupPC/Xfer/Smb.pm
@@ -219,7 +219,7 @@ sub readOutput
#
# MAKSYM 14082016: The next regex will never match on Samba-4.3, as
# smbclient doesn't produce output required; keeping it for older Sambas
@ -87,7 +87,7 @@
my $sambaFileSize = $1;
my $pcFileName = $2;
(my $fileName = $pcFileName) =~ s/\\/\//g;
@@ -281,6 +281,9 @@
@@ -281,6 +281,9 @@ sub readOutput
} elsif ( /smb: \\>/
|| /^\s*tar:\d+/ # MAKSYM 14082016: ignoring 2 more Samba-4.3 specific lines
|| /^\s*WARNING:/i

View file

@ -2,12 +2,12 @@ include $(TOPDIR)/rules.mk
include $(INCLUDE_DIR)/kernel.mk
PKG_NAME:=debian-archive-keyring
PKG_VERSION:=2019.1
PKG_RELEASE:=2
PKG_VERSION:=2021.1.1
PKG_RELEASE:=$(AUTORELEASE)
PKG_SOURCE:=debian-archive-keyring_2019.1_all.deb
PKG_SOURCE:=debian-archive-keyring_2021.1.1_all.deb
PKG_SOURCE_URL:=http://ftp.debian.org/debian/pool/main/d/debian-archive-keyring/
PKG_HASH:=9cefd8917f3d97a999c136aa87f04a3024408b5bc1de470de7d6dfa5e4bd4361
PKG_HASH:=56beca470dcd9b6d7e6c3c9e9d702101e01e9467e62810a8c357bd7b9c26251d
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>

View file

@ -1,7 +1,5 @@
Index: gkrellm-2.3.10/server/gkrellmd.conf
===================================================================
--- gkrellm-2.3.10.orig/server/gkrellmd.conf 2008-03-09 10:19:26.000000000 +0100
+++ gkrellm-2.3.10/server/gkrellmd.conf 2008-03-09 10:19:26.000000000 +0100
--- a/server/gkrellmd.conf
+++ b/server/gkrellmd.conf
@@ -4,7 +4,7 @@
# the client update frequency. Values may be from 1 to 10 and should be
# smaller values to reduce network traffic.
@ -31,5 +29,5 @@ Index: gkrellm-2.3.10/server/gkrellmd.conf
-#detach
+detach
# Time interval between checks for various monitors. If nfs-interval
# is <= 0 then gkrellmd will not read data for nfs file system types.
# Enable writing logging message to the system syslog file
# NOTE: On windows this enables logging to the windows event log

View file

@ -8,12 +8,12 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=htop
PKG_VERSION:=3.0.5
PKG_RELEASE:=1
PKG_VERSION:=3.2.1
PKG_RELEASE:=$(AUTORELEASE)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/htop-dev/htop/tar.gz/$(PKG_VERSION)?
PKG_HASH:=4c2629bd50895bd24082ba2f81f8c972348aa2298cc6edc6a21a7fa18b73990c
PKG_HASH:=b5ffac1949a8daaabcffa659c0964360b5008782aae4dfa7702d2323cfb4f438
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
@ -24,6 +24,9 @@ PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
PKG_CONFIG_DEPENDS:= CONFIG_HTOP_LMSENSORS
PKG_BUILD_DEPENDS:= HTOP_LMSENSORS:lm-sensors
include $(INCLUDE_DIR)/package.mk
define Package/htop
@ -41,8 +44,24 @@ define Package/htop/description
see all processes and their full command lines.
endef
define Package/htop/config
config HTOP_LMSENSORS
bool "Compile Htop with lm-sensors support"
depends on PACKAGE_htop
default y if TARGET_x86
help
Build htop with lm-sensors support.
This doesn't add lm-sensors as dependency,
if present it'll loaded using dlopen().
endef
CONFIGURE_ARGS += \
--$(if $(CONFIG_HTOP_LMSENSORS),en,dis)able-sensors \
--enable-affinity \
--disable-capabilities \
--disable-delayacct \
--disable-unicode \
--disable-unwind \
--disable-hwloc
CONFIGURE_VARS += \

View file

@ -11,11 +11,9 @@ Fixes: ID:461
src/plugins/lanplus/lanplus_crypt_impl.c | 28 ++++++++++++++--------------
1 file changed, 14 insertions(+), 14 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index d5fac37..3c0df23 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -164,10 +164,10 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -164,10 +164,10 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@ -30,7 +28,7 @@ index d5fac37..3c0df23 100644
*bytes_written = 0;
@@ -191,7 +191,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -191,7 +191,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
assert((input_length % IPMI_CRYPT_AES_CBC_128_BLOCK_SIZE) == 0);
@ -39,7 +37,7 @@ index d5fac37..3c0df23 100644
{
/* Error */
*bytes_written = 0;
@@ -201,7 +201,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -201,7 +201,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
uint32_t tmplen;
@ -48,7 +46,7 @@ index d5fac37..3c0df23 100644
{
*bytes_written = 0;
return; /* Error */
@@ -210,7 +210,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -210,7 +210,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
/* Success */
*bytes_written += tmplen;
@ -57,7 +55,7 @@ index d5fac37..3c0df23 100644
}
}
}
@@ -239,10 +239,10 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -239,10 +239,10 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@ -72,7 +70,7 @@ index d5fac37..3c0df23 100644
if (verbose >= 5)
@@ -266,7 +266,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -266,7 +266,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
assert((input_length % IPMI_CRYPT_AES_CBC_128_BLOCK_SIZE) == 0);
@ -81,7 +79,7 @@ index d5fac37..3c0df23 100644
{
/* Error */
lprintf(LOG_DEBUG, "ERROR: decrypt update failed");
@@ -277,7 +277,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -277,7 +277,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
{
uint32_t tmplen;
@ -90,7 +88,7 @@ index d5fac37..3c0df23 100644
{
char buffer[1000];
ERR_error_string(ERR_get_error(), buffer);
@@ -290,7 +290,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -290,7 +290,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
{
/* Success */
*bytes_written += tmplen;
@ -99,6 +97,3 @@ index d5fac37..3c0df23 100644
}
}
--
2.16.1

View file

@ -9,11 +9,9 @@ Complaint was that ctx isn't initialized.
src/plugins/lanplus/lanplus_crypt_impl.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index 3c0df23..d12d0e3 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -164,7 +164,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -164,7 +164,7 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@ -22,7 +20,7 @@ index 3c0df23..d12d0e3 100644
EVP_CIPHER_CTX_init(ctx);
EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
@@ -239,7 +239,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -239,7 +239,7 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint8_t * output,
uint32_t * bytes_written)
{
@ -31,6 +29,3 @@ index 3c0df23..d12d0e3 100644
EVP_CIPHER_CTX_init(ctx);
EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
--
2.16.1

View file

@ -11,11 +11,9 @@ deprecated, and by checking return value of call to former function.
src/plugins/lanplus/lanplus_crypt_impl.c | 14 ++++++++++----
1 file changed, 10 insertions(+), 4 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index d12d0e3..0e330c1 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -165,10 +165,13 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -165,10 +165,13 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@ -31,7 +29,7 @@ index d12d0e3..0e330c1 100644
*bytes_written = 0;
@@ -240,11 +243,14 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -240,11 +243,14 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@ -48,6 +46,3 @@ index d12d0e3..0e330c1 100644
if (verbose >= 5)
{
printbuf(iv, 16, "decrypting with this IV");
--
2.16.1

View file

@ -10,11 +10,9 @@ leak.
src/plugins/lanplus/lanplus_crypt_impl.c | 44 +++++++++++++++++---------------
1 file changed, 23 insertions(+), 21 deletions(-)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index 0e330c1..9652a5e 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -165,13 +165,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -165,13 +165,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@ -28,7 +26,7 @@ index 0e330c1..9652a5e 100644
*bytes_written = 0;
@@ -185,6 +178,14 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -185,6 +178,14 @@ lanplus_encrypt_aes_cbc_128(const uint8_
printbuf(input, input_length, "encrypting this data");
}
@ -43,7 +41,7 @@ index 0e330c1..9652a5e 100644
/*
* The default implementation adds a whole block of padding if the input
@@ -198,7 +199,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -198,7 +199,6 @@ lanplus_encrypt_aes_cbc_128(const uint8_
{
/* Error */
*bytes_written = 0;
@ -51,7 +49,7 @@ index 0e330c1..9652a5e 100644
}
else
{
@@ -206,16 +206,17 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -206,16 +206,17 @@ lanplus_encrypt_aes_cbc_128(const uint8_
if(!EVP_EncryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
@ -71,7 +69,7 @@ index 0e330c1..9652a5e 100644
}
@@ -243,13 +244,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -243,13 +244,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_
uint32_t * bytes_written)
{
EVP_CIPHER_CTX *ctx = NULL;
@ -85,7 +83,7 @@ index 0e330c1..9652a5e 100644
if (verbose >= 5)
{
@@ -258,12 +252,20 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -258,12 +252,20 @@ lanplus_decrypt_aes_cbc_128(const uint8_
printbuf(input, input_length, "decrypting this data");
}
@ -107,7 +105,7 @@ index 0e330c1..9652a5e 100644
/*
* The default implementation adds a whole block of padding if the input
* data is perfectly aligned. We would like to keep that from happening.
@@ -277,7 +279,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -277,7 +279,6 @@ lanplus_decrypt_aes_cbc_128(const uint8_
/* Error */
lprintf(LOG_DEBUG, "ERROR: decrypt update failed");
*bytes_written = 0;
@ -115,7 +113,7 @@ index 0e330c1..9652a5e 100644
}
else
{
@@ -285,20 +286,21 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -285,20 +286,21 @@ lanplus_decrypt_aes_cbc_128(const uint8_
if (!EVP_DecryptFinal_ex(ctx, output + *bytes_written, (int *)&tmplen))
{
@ -139,6 +137,3 @@ index 0e330c1..9652a5e 100644
if (verbose >= 5)
{
--
2.16.1

View file

@ -14,11 +14,9 @@ Signed-off-by: Rosen Penev <rosenp@gmail.com>
src/plugins/lanplus/lanplus_crypt_impl.c | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/src/plugins/lanplus/lanplus_crypt_impl.c b/src/plugins/lanplus/lanplus_crypt_impl.c
index 9652a5e..e94401e 100644
--- a/src/plugins/lanplus/lanplus_crypt_impl.c
+++ b/src/plugins/lanplus/lanplus_crypt_impl.c
@@ -183,7 +183,11 @@ lanplus_encrypt_aes_cbc_128(const uint8_t * iv,
@@ -183,7 +183,11 @@ lanplus_encrypt_aes_cbc_128(const uint8_
lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
return;
}
@ -30,7 +28,7 @@ index 9652a5e..e94401e 100644
EVP_EncryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
@@ -262,7 +266,11 @@ lanplus_decrypt_aes_cbc_128(const uint8_t * iv,
@@ -262,7 +266,11 @@ lanplus_decrypt_aes_cbc_128(const uint8_
lprintf(LOG_DEBUG, "ERROR: EVP_CIPHER_CTX_new() failed");
return;
}
@ -42,6 +40,3 @@ index 9652a5e..e94401e 100644
EVP_DecryptInit_ex(ctx, EVP_aes_128_cbc(), NULL, key, iv);
EVP_CIPHER_CTX_set_padding(ctx, 0);
--
2.7.4

View file

@ -17,8 +17,6 @@ The same issue affects the `read_fru_area` function.
lib/ipmi_fru.c | 33 +++++++++++++++++++++++++++++++--
1 file changed, 31 insertions(+), 2 deletions(-)
diff --git a/lib/ipmi_fru.c b/lib/ipmi_fru.c
index cf00effc82a2..af99aa99444c 100644
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -615,7 +615,10 @@ int
@ -33,7 +31,7 @@ index cf00effc82a2..af99aa99444c 100644
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -628,10 +631,12 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -628,10 +631,12 @@ read_fru_area(struct ipmi_intf * intf, s
finish = offset + length;
if (finish > fru->size) {
@ -46,7 +44,7 @@ index cf00effc82a2..af99aa99444c 100644
}
memset(&req, 0, sizeof(req));
@@ -667,6 +672,7 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -667,6 +672,7 @@ read_fru_area(struct ipmi_intf * intf, s
}
}
@ -54,7 +52,7 @@ index cf00effc82a2..af99aa99444c 100644
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -707,9 +713,18 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -707,9 +713,18 @@ read_fru_area(struct ipmi_intf * intf, s
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
@ -73,7 +71,7 @@ index cf00effc82a2..af99aa99444c 100644
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function
* still attempts to parse what was returned */
@@ -742,7 +757,9 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -742,7 +757,9 @@ read_fru_area_section(struct ipmi_intf *
uint32_t offset, uint32_t length, uint8_t *frubuf)
{
static uint32_t fru_data_rqst_size = 20;
@ -84,7 +82,7 @@ index cf00effc82a2..af99aa99444c 100644
struct ipmi_rs * rsp;
struct ipmi_rq req;
uint8_t msg_data[4];
@@ -755,10 +772,12 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -755,10 +772,12 @@ read_fru_area_section(struct ipmi_intf *
finish = offset + length;
if (finish > fru->size) {
@ -97,7 +95,7 @@ index cf00effc82a2..af99aa99444c 100644
}
memset(&req, 0, sizeof(req));
@@ -773,6 +792,8 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -773,6 +792,8 @@ read_fru_area_section(struct ipmi_intf *
if (fru->access && fru_data_rqst_size > 16)
#endif
fru_data_rqst_size = 16;
@ -106,7 +104,7 @@ index cf00effc82a2..af99aa99444c 100644
do {
tmp = fru->access ? off >> 1 : off;
msg_data[0] = id;
@@ -804,8 +825,16 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
@@ -804,8 +825,16 @@ read_fru_area_section(struct ipmi_intf *
}
tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
@ -123,6 +121,3 @@ index cf00effc82a2..af99aa99444c 100644
/* sometimes the size returned in the Info command
* is too large. return 0 so higher level function
--
2.27.0

View file

@ -16,11 +16,9 @@ copy into the buffer.
lib/dimm_spd.c | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)
diff --git a/lib/dimm_spd.c b/lib/dimm_spd.c
index 41e30dbb4bda..68f3b4fa1eff 100644
--- a/lib/dimm_spd.c
+++ b/lib/dimm_spd.c
@@ -1621,7 +1621,7 @@ ipmi_spd_print_fru(struct ipmi_intf * intf, uint8_t id)
@@ -1621,7 +1621,7 @@ ipmi_spd_print_fru(struct ipmi_intf * in
struct ipmi_rq req;
struct fru_info fru;
uint8_t *spd_data, msg_data[4];
@ -29,7 +27,7 @@ index 41e30dbb4bda..68f3b4fa1eff 100644
msg_data[0] = id;
@@ -1697,6 +1697,13 @@ ipmi_spd_print_fru(struct ipmi_intf * intf, uint8_t id)
@@ -1697,6 +1697,13 @@ ipmi_spd_print_fru(struct ipmi_intf * in
}
len = rsp->data[0];
@ -43,6 +41,3 @@ index 41e30dbb4bda..68f3b4fa1eff 100644
memcpy(&spd_data[offset], rsp->data + 1, len);
offset += len;
} while (offset < fru.size);
--
2.27.0

View file

@ -13,11 +13,9 @@ overflow.
lib/ipmi_session.c | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/lib/ipmi_session.c b/lib/ipmi_session.c
index 141f0f4ec8dd..b9af1fd75d40 100644
--- a/lib/ipmi_session.c
+++ b/lib/ipmi_session.c
@@ -309,8 +309,10 @@ ipmi_get_session_info(struct ipmi_intf * intf,
@@ -309,8 +309,10 @@ ipmi_get_session_info(struct ipmi_intf
}
else
{
@ -30,7 +28,7 @@ index 141f0f4ec8dd..b9af1fd75d40 100644
}
break;
@@ -341,8 +343,10 @@ ipmi_get_session_info(struct ipmi_intf * intf,
@@ -341,8 +343,10 @@ ipmi_get_session_info(struct ipmi_intf
break;
}
@ -43,6 +41,3 @@ index 141f0f4ec8dd..b9af1fd75d40 100644
} while (i <= session_info.session_slot_count);
break;
--
2.27.0

View file

@ -16,11 +16,9 @@ on the final copy.
lib/ipmi_channel.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/lib/ipmi_channel.c b/lib/ipmi_channel.c
index fab2e5483d12..8cd7c59a4273 100644
--- a/lib/ipmi_channel.c
+++ b/lib/ipmi_channel.c
@@ -413,7 +413,10 @@ ipmi_get_channel_cipher_suites(struct ipmi_intf *intf, const char *payload_type,
@@ -413,7 +413,10 @@ ipmi_get_channel_cipher_suites(struct ip
lprintf(LOG_ERR, "Unable to Get Channel Cipher Suites");
return -1;
}
@ -32,6 +30,3 @@ index fab2e5483d12..8cd7c59a4273 100644
lprintf(LOG_ERR, "Get Channel Cipher Suites failed: %s",
val2str(rsp->ccode, completion_code_vals));
return -1;
--
2.27.0

View file

@ -16,11 +16,9 @@ stack buffer overflow can occur.
lib/ipmi_lanp.c | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/lib/ipmi_lanp.c b/lib/ipmi_lanp.c
index 65d881bc5890..022c7f1605ed 100644
--- a/lib/ipmi_lanp.c
+++ b/lib/ipmi_lanp.c
@@ -1809,7 +1809,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1809,7 +1809,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@ -29,7 +27,7 @@ index 65d881bc5890..022c7f1605ed 100644
/* set new ipaddr */
memcpy(data+3, temp, 4);
printf("Setting LAN Alert %d IP Address to %d.%d.%d.%d\n", alert,
@@ -1824,7 +1824,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1824,7 +1824,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@ -38,7 +36,7 @@ index 65d881bc5890..022c7f1605ed 100644
/* set new macaddr */
memcpy(data+7, temp, 6);
printf("Setting LAN Alert %d MAC Address to "
@@ -1838,7 +1838,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1838,7 +1838,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@ -47,7 +45,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (strncasecmp(argv[1], "def", 3) == 0 ||
strncasecmp(argv[1], "default", 7) == 0) {
@@ -1864,7 +1864,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1864,7 +1864,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@ -56,7 +54,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (strncasecmp(argv[1], "on", 2) == 0 ||
strncasecmp(argv[1], "yes", 3) == 0) {
@@ -1889,7 +1889,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1889,7 +1889,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@ -65,7 +63,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (strncasecmp(argv[1], "pet", 3) == 0) {
printf("Setting LAN Alert %d destination to PET Trap\n", alert);
@@ -1917,7 +1917,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1917,7 +1917,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@ -74,7 +72,7 @@ index 65d881bc5890..022c7f1605ed 100644
if (str2uchar(argv[1], &data[2]) != 0) {
lprintf(LOG_ERR, "Invalid time: %s", argv[1]);
@@ -1933,7 +1933,7 @@ ipmi_lan_alert_set(struct ipmi_intf * intf, uint8_t chan, uint8_t alert,
@@ -1933,7 +1933,7 @@ ipmi_lan_alert_set(struct ipmi_intf * in
if (p == NULL) {
return (-1);
}
@ -83,6 +81,3 @@ index 65d881bc5890..022c7f1605ed 100644
if (str2uchar(argv[1], &data[3]) != 0) {
lprintf(LOG_ERR, "Invalid retry: %s", argv[1]);
--
2.27.0

View file

@ -23,11 +23,9 @@ into fixed buffer of size `17` bytes from this calculated length.
lib/ipmi_sdr.c | 40 ++++++++++++++++++++++++----------------
2 files changed, 25 insertions(+), 17 deletions(-)
diff --git a/lib/ipmi_fru.c b/lib/ipmi_fru.c
index af99aa99444c..98bc9840955a 100644
--- a/lib/ipmi_fru.c
+++ b/lib/ipmi_fru.c
@@ -3062,7 +3062,7 @@ ipmi_fru_print(struct ipmi_intf * intf, struct sdr_record_fru_locator * fru)
@@ -3062,7 +3062,7 @@ ipmi_fru_print(struct ipmi_intf * intf,
return 0;
memset(desc, 0, sizeof(desc));
@ -36,11 +34,9 @@ index af99aa99444c..98bc9840955a 100644
desc[fru->id_code & 0x01f] = 0;
printf("FRU Device Description : %s (ID %d)\n", desc, fru->device_id);
diff --git a/lib/ipmi_sdr.c b/lib/ipmi_sdr.c
index 2a9cbe3087af..62aac08a9002 100644
--- a/lib/ipmi_sdr.c
+++ b/lib/ipmi_sdr.c
@@ -2084,7 +2084,7 @@ ipmi_sdr_print_sensor_eventonly(struct ipmi_intf *intf,
@@ -2084,7 +2084,7 @@ ipmi_sdr_print_sensor_eventonly(struct i
return -1;
memset(desc, 0, sizeof (desc));
@ -49,7 +45,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (verbose) {
printf("Sensor ID : %s (0x%x)\n",
@@ -2135,7 +2135,7 @@ ipmi_sdr_print_sensor_mc_locator(struct ipmi_intf *intf,
@@ -2135,7 +2135,7 @@ ipmi_sdr_print_sensor_mc_locator(struct
return -1;
memset(desc, 0, sizeof (desc));
@ -58,7 +54,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (verbose == 0) {
if (csv_output)
@@ -2228,7 +2228,7 @@ ipmi_sdr_print_sensor_generic_locator(struct ipmi_intf *intf,
@@ -2228,7 +2228,7 @@ ipmi_sdr_print_sensor_generic_locator(st
char desc[17];
memset(desc, 0, sizeof (desc));
@ -67,7 +63,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (!verbose) {
if (csv_output)
@@ -2285,7 +2285,7 @@ ipmi_sdr_print_sensor_fru_locator(struct ipmi_intf *intf,
@@ -2285,7 +2285,7 @@ ipmi_sdr_print_sensor_fru_locator(struct
char desc[17];
memset(desc, 0, sizeof (desc));
@ -76,7 +72,7 @@ index 2a9cbe3087af..62aac08a9002 100644
if (!verbose) {
if (csv_output)
@@ -2489,35 +2489,43 @@ ipmi_sdr_print_name_from_rawentry(struct ipmi_intf *intf, uint16_t id,
@@ -2489,35 +2489,43 @@ ipmi_sdr_print_name_from_rawentry(struct
int rc =0;
char desc[17];
@ -132,6 +128,3 @@ index 2a9cbe3087af..62aac08a9002 100644
return rc;
}
--
2.27.0

View file

@ -9,8 +9,6 @@ Signed-off-by: Vaclav Dolezal <vdolezal@redhat.com>
lib/ipmi_hpmfwupg.c | 2 ++
2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/include/ipmitool/ipmi_hpmfwupg.h b/include/ipmitool/ipmi_hpmfwupg.h
index de65292b..07f597be 100644
--- a/include/ipmitool/ipmi_hpmfwupg.h
+++ b/include/ipmitool/ipmi_hpmfwupg.h
@@ -800,7 +800,7 @@ typedef struct _VERSIONINFO {
@ -22,11 +20,9 @@ index de65292b..07f597be 100644
#define TARGET_VER (0x01)
#define ROLLBACK_VER (0x02)
diff --git a/lib/ipmi_hpmfwupg.c b/lib/ipmi_hpmfwupg.c
index 4aa8cecd..d63d2c15 100644
--- a/lib/ipmi_hpmfwupg.c
+++ b/lib/ipmi_hpmfwupg.c
@@ -58,6 +58,8 @@
@@ -58,6 +58,8 @@ ipmi_intf_get_max_request_data_size(stru
extern int verbose;

View file

@ -1,5 +1,3 @@
diff --git a/daemon/Makefile b/daemon/Makefile
index e028e95..1233855 100644
--- a/daemon/Makefile
+++ b/daemon/Makefile
@@ -6,7 +6,7 @@ THISDIR = $(shell pwd)

View file

@ -8,8 +8,8 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=netdata
PKG_VERSION:=1.29.1
PKG_RELEASE:=1
PKG_VERSION:=1.30.1
PKG_RELEASE:=2
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>, Daniel Engberg <daniel.engberg.lists@pyret.net>
PKG_LICENSE:=GPL-3.0-or-later
@ -18,7 +18,7 @@ PKG_CPE_ID:=cpe:/a:my-netdata:netdata
PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/netdata/netdata/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=d5029b466e801966b7fb483905d61a290cec7c19ec95f96ae2fbff14c723ee37
PKG_HASH:=e05f8b59d283fb2844280455b9481a2f9104730fd77f535312ff2fec40a6bc11
PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1

View file

@ -27,3 +27,6 @@
[health]
enabled = no
[plugin:proc:ipc]
shared memory totals = no

View file

@ -14,7 +14,7 @@ start_service() {
mkdir -m 0755 -p /var/log/netdata
chown nobody /var/log/netdata
procd_open_instance
procd_set_param command $APPBINARY -nd -c $CONFIGFILE
procd_set_param command $APPBINARY -D -c $CONFIGFILE
procd_set_param file $CONFIGFILE
procd_set_param respawn
procd_close_instance

View file

@ -5,48 +5,41 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-config
PKG_SOURCE_VERSION:=0.5.0
PKG_RELEASE:=1
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=337a3a9542a0898da9f951256b0d19b6bc87ced98f4ec6dc9646172b551880ef
PKG_MAINTAINER:=Federico Capoano <f.capoano@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKGARCH:=all
PKG_SOURCE_URL:=https://github.com/openwisp/openwisp-config.git
PKG_MIRROR_HASH:=7daa10a9d170e665f33a5555a246b4da2223c2d8d0e8a047edb01701c8886986
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=1.0.1
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-config/default
TITLE:=Remote configuration management agent ($(2) variant)
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+curl +lua +libuci-lua +luafilesystem +luci-lib-nixio $(3)
VARIANT:=$(1)
PKGARCH:=all
URL:=http://openwisp.org
define Package/openwisp-config
TITLE:=Remote configuration management agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+curl \
+lua \
+libuci-lua \
+luafilesystem \
+luci-lib-nixio \
+ca-certificates
PKGARCH:=all
URL:=https://openwisp.org
endef
Package/openwisp-config-openssl=$(call Package/openwisp-config/default,openssl,OpenSSL,+ca-certificates +libopenssl)
Package/openwisp-config-mbedtls=$(call Package/openwisp-config/default,mbedtls,mbedTLS,+ca-certificates +libmbedtls)
Package/openwisp-config-wolfssl=$(call Package/openwisp-config/default,wolfssl,WolfSSL,+ca-certificates +libwolfssl)
Package/openwisp-config-nossl=$(call Package/openwisp-config/default,nossl,No SSL)
define Build/Compile
endef
define Package/openwisp-config-$(BUILD_VARIANT)/conffiles
define Package/openwisp-config/conffiles
/etc/config/openwisp
endef
CONFIG_OPENWISP_UCI:=ssl
ifeq ($(BUILD_VARIANT),nossl)
CONFIG_OPENWISP_UCI:=nossl
endif
define Package/openwisp-config-$(BUILD_VARIANT)/install
define Package/openwisp-config/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
@ -62,7 +55,7 @@ define Package/openwisp-config-$(BUILD_VARIANT)/install
$(PKG_BUILD_DIR)/openwisp-config/files/openwisp.init \
$(1)/etc/init.d/openwisp_config
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp-$(CONFIG_OPENWISP_UCI).config \
$(INSTALL_CONF) $(PKG_BUILD_DIR)/openwisp-config/files/openwisp.config \
$(1)/etc/config/openwisp
$(INSTALL_BIN) \
@ -104,7 +97,4 @@ define Package/openwisp-config-$(BUILD_VARIANT)/install
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp/
endef
$(eval $(call BuildPackage,openwisp-config-openssl))
$(eval $(call BuildPackage,openwisp-config-mbedtls))
$(eval $(call BuildPackage,openwisp-config-wolfssl))
$(eval $(call BuildPackage,openwisp-config-nossl))
$(eval $(call BuildPackage,openwisp-config))

View file

@ -0,0 +1,116 @@
# openwisp.org
#
# This is free software, licensed under the GNU General Public License v3.
# See /LICENSE for more information.
include $(TOPDIR)/rules.mk
PKG_NAME:=openwisp-monitoring
PKG_RELEASE:=1
PKG_MAINTAINER:=Federico Capoano <support@openwisp.io>
PKG_LICENSE:=GPL3.0-or-later
PKG_LICENSE_FILES:=LICENSE
PKG_SOURCE_URL:=https://github.com/openwisp/openwrt-openwisp-monitoring.git
PKG_MIRROR_HASH:=ce2ed94d24f68c58320ca700a088471368e1097754be23ad6053842cf0aaa97e
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=0.1.1
PKGARCH:=all
include $(INCLUDE_DIR)/package.mk
define Package/openwisp-monitoring
TITLE:=OpenWISP Monitoring agent
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+netjson-monitoring +openwisp-config
URL:=http://openwisp.org
endef
define Package/netjson-monitoring
TITLE:=NetJson Monitoring
CATEGORY:=Administration
SECTION:=admin
SUBMENU:=openwisp
DEPENDS:=+libubus-lua +lua-cjson +rpcd +rpcd-mod-iwinfo
URL:=http://openwisp.org
endef
define Build/Compile
endef
define Package/openwisp-monitoring/conffiles
/etc/config/openwisp-monitoring
endef
define Package/netjson-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/usr/libexec \
$(1)/usr/lib/lua/openwisp-monitoring \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/sbin/netjson-monitoring.lua \
$(1)/usr/libexec/netjson-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/netjson-monitoring \
$(1)/usr/sbin/netjson-monitoring
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/dhcp.lua \
$(1)/usr/lib/lua/openwisp-monitoring/dhcp.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/interfaces.lua \
$(1)/usr/lib/lua/openwisp-monitoring/interfaces.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/monitoring.lua \
$(1)/usr/lib/lua/openwisp-monitoring/monitoring.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/utils.lua \
$(1)/usr/lib/lua/openwisp-monitoring/utils.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/neighbors.lua \
$(1)/usr/lib/lua/openwisp-monitoring/neighbors.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/resources.lua \
$(1)/usr/lib/lua/openwisp-monitoring/resources.lua
$(INSTALL_DATA) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/lib/openwisp-monitoring/wifi.lua \
$(1)/usr/lib/lua/openwisp-monitoring/wifi.lua
$(CP) $(PKG_BUILD_DIR)/VERSION $(1)/etc/openwisp-monitoring/
endef
define Package/openwisp-monitoring/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.agent \
$(1)/usr/sbin/openwisp-monitoring
$(INSTALL_BIN) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.init \
$(1)/etc/init.d/openwisp-monitoring
$(INSTALL_CONF) \
$(PKG_BUILD_DIR)/openwisp-monitoring/files/monitoring.config \
$(1)/etc/config/openwisp-monitoring
endef
$(eval $(call BuildPackage,openwisp-monitoring))
$(eval $(call BuildPackage,netjson-monitoring))

View file

@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=schroot
PKG_VERSION:=1.6.10
PKG_RELEASE:=2
PKG_RELEASE:=3
PKG_SOURCE:=$(PKG_NAME)_$(PKG_VERSION).orig.tar.xz
PKG_SOURCE_URL:=http://deb.debian.org/debian/pool/main/s/schroot
@ -37,7 +37,7 @@ define Package/schroot/description
Securely enter a chroot and run a command or login shell.
endef
define Package/sudo/conffiles
define Package/schroot/conffiles
/etc/schroot/
endef

View file

@ -1,5 +1,5 @@
--- ./configure.ac-orig 2019-12-09 12:56:45.217308628 +0100
+++ ./configure.ac 2019-12-09 12:57:18.667492923 +0100
--- a/configure.ac
+++ b/configure.ac
@@ -284,22 +284,8 @@ if test -z "$DOXYGEN"; then
HAVE_DOXYGEN="no"
fi
@ -91,8 +91,8 @@
AC_MSG_CHECKING([for boost::iostreams in -lboost_iostreams])
saved_LIBS="${LIBS}"
--- ./bin/schroot-base/schroot-base-run.h-orig 2019-12-09 04:23:51.881428446 +0100
+++ ./bin/schroot-base/schroot-base-run.h 2019-12-09 04:24:14.934887089 +0100
--- a/bin/schroot-base/schroot-base-run.h
+++ b/bin/schroot-base/schroot-base-run.h
@@ -61,8 +61,8 @@ namespace schroot_base
std::cout.imbue(std::locale());
std::cerr.imbue(std::locale());
@ -104,8 +104,8 @@
typename options_type::ptr opts(new options_type);
main_type kit(opts);
--- ./sbuild/sbuild-feature.h-orig 2019-12-09 04:23:51.881428446 +0100
+++ ./sbuild/sbuild-feature.h 2019-12-09 04:24:14.934887089 +0100
--- a/sbuild/sbuild-feature.h
+++ b/sbuild/sbuild-feature.h
@@ -24,6 +24,7 @@
#include <string>
@ -114,8 +114,8 @@
namespace sbuild
{
--- ./etc/setup.d/20copyfiles-orig 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/setup.d/20copyfiles 2019-12-09 13:56:45.277145648 +0100
--- a/etc/setup.d/20copyfiles
+++ b/etc/setup.d/20copyfiles
@@ -39,9 +39,9 @@ copy_file()
if [ -e "$2" ]; then
@ -128,8 +128,8 @@
if [ "$da" = "$db" ]; then
COPY="false"
--- ./etc/setup.d/20nssdatabases-orig 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/setup.d/20nssdatabases 2019-12-09 13:57:34.397419039 +0100
--- a/etc/setup.d/20nssdatabases
+++ b/etc/setup.d/20nssdatabases
@@ -29,7 +29,7 @@ set -e
dup_nss()
{
@ -151,47 +151,44 @@
# If the database inside and outside the chroot is the
# same, it's very likely that dup_nss would blank the
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/all/all/nssdatabases ./etc/profile-templates/all/all/nssdatabases
--- ./etc/profile-templates/all/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/all/all/nssdatabases 2019-12-09 14:03:12.799297723 +0100
@@ -4,4 +4,4 @@
--- a/etc/profile-templates/all/all/nssdatabases
+++ b/etc/profile-templates/all/all/nssdatabases
@@ -3,5 +3,5 @@
# <database name>
passwd
shadow
-group
-gshadow
+#group
+#gshadow
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/buildd/all/nssdatabases ./etc/profile-templates/buildd/all/nssdatabases
--- ./etc/profile-templates/buildd/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/buildd/all/nssdatabases 2019-12-09 14:03:12.802631074 +0100
@@ -4,4 +4,4 @@
--- a/etc/profile-templates/buildd/all/nssdatabases
+++ b/etc/profile-templates/buildd/all/nssdatabases
@@ -3,5 +3,5 @@
# <database name>
passwd
shadow
-group
-gshadow
+#group
+#gshadow
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/default/all/nssdatabases ./etc/profile-templates/default/all/nssdatabases
--- ./etc/profile-templates/default/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/default/all/nssdatabases 2019-12-09 14:03:12.809297778 +0100
--- a/etc/profile-templates/default/all/nssdatabases
+++ b/etc/profile-templates/default/all/nssdatabases
@@ -1,4 +1,4 @@
services
protocols
-networks
+#networks
hosts
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/desktop/all/nssdatabases ./etc/profile-templates/desktop/all/nssdatabases
--- ./etc/profile-templates/desktop/all/nssdatabases 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/desktop/all/nssdatabases 2019-12-09 14:03:12.812631129 +0100
--- a/etc/profile-templates/desktop/all/nssdatabases
+++ b/etc/profile-templates/desktop/all/nssdatabases
@@ -1,4 +1,4 @@
services
protocols
-networks
+#networks
hosts
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/default/linux/fstab ./etc/profile-templates/default/linux/fstab
--- ./etc/profile-templates/default/linux/fstab 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/default/linux/fstab 2019-12-09 14:18:46.970887080 +0100
--- a/etc/profile-templates/default/linux/fstab
+++ b/etc/profile-templates/default/linux/fstab
@@ -7,7 +7,7 @@
# to run additional services in the chroot. However, note that this
# may potentially cause undesirable behaviour on upgrades, such as
@ -203,9 +200,8 @@ diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/default/linux/f
-#/run/shm /run/shm none rw,bind 0 0
+/tmp/shm /dev/shm none rw,bind 0 0
+/tmp/shm /run/shm none rw,bind 0 0
diff -X /home/jmarcet/.rsync-filter -pru ./etc/profile-templates/desktop/linux/fstab ./etc/profile-templates/desktop/linux/fstab
--- ./etc/profile-templates/desktop/linux/fstab 2018-11-03 14:26:12.000000000 +0100
+++ ./etc/profile-templates/desktop/linux/fstab 2019-12-09 14:22:14.148555674 +0100
--- a/etc/profile-templates/desktop/linux/fstab
+++ b/etc/profile-templates/desktop/linux/fstab
@@ -12,7 +12,7 @@
# to run additional services in the chroot. However, note that this
# may potentially cause undesirable behaviour on upgrades, such as

View file

@ -1,6 +1,6 @@
--- a/lib/util/Makefile.in
+++ b/lib/util/Makefile.in
@@ -200,10 +200,10 @@ libsudo_util.la: $(LTOBJS) @LT_LDDEP@
@@ -207,10 +207,10 @@ libsudo_util.la: $(LTOBJS) @LT_LDDEP@
esac
siglist.c: mksiglist

View file

@ -1,6 +1,6 @@
--- a/Makefile.in
+++ b/Makefile.in
@@ -64,7 +64,7 @@ SHELL = @SHELL@
@@ -73,7 +73,7 @@ SHELL = @SHELL@
SED = @SED@
INSTALL = $(SHELL) $(top_srcdir)/install-sh -c

View file

@ -1,8 +1,8 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=syslog-ng
PKG_VERSION:=3.30.1
PKG_RELEASE:=1
PKG_VERSION:=3.38.1
PKG_RELEASE:=$(AUTORELEASE)
PKG_MAINTAINER:=Josef Schlehofer <josef.schlehofer@nic.cz>
PKG_LICENSE:=LGPL-2.1-or-later GPL-2.0-or-later
@ -11,7 +11,7 @@ PKG_CPE_ID:=cpe:/a:balabit:syslog-ng
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/syslog-ng/syslog-ng/releases/download/$(PKG_NAME)-$(PKG_VERSION)/
PKG_HASH:=44e54a6186af14d01affa06bf7391cfe8fc2460bd4ba211aab5469d8b1ca5b4b
PKG_HASH:=5491f686d0b829b69b2e0fc0d66a62f51991aafaee005475bfa38fab399441f7
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
@ -27,7 +27,7 @@ define Package/syslog-ng
CATEGORY:=Administration
TITLE:=A powerful syslog daemon
URL:=https://www.syslog-ng.com/products/open-source-log-management/
DEPENDS:=+libpcre +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid
DEPENDS:=+libpcre +glib2 +libopenssl +libpthread +librt +zlib +libdbi +libjson-c +libcurl +libuuid +SYSLOGNG_LOGROTATE:logrotate
endef
define Package/syslog-ng/description
@ -42,11 +42,39 @@ define Package/syslog-ng/conffiles
/etc/scl.conf
endef
define Package/syslog-ng/config
config SYSLOGNG_LOGROTATE
bool "Logrotate support"
depends on PACKAGE_syslog-ng
default n
help
It adds support for logrotate functionality.
config SYSLOGNG_LOGROTATE_MAXSIZE
string "Maximum size of /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default "1M"
help
Log files are rotated when they grow bigger than defined size bytes.
config SYSLOGNG_LOGROTATE_ROTATE_COUNT
int "Maximum rotation count for /var/log/messages log file"
depends on SYSLOGNG_LOGROTATE
default 1
help
Log files are rotated count times before being removed or mailed to
the address specified in a mail directive. If count is 0, old
versions are removed rather than rotated.
endef
define Build/Configure
$(SED) 's,-I/usr/include,,' $(PKG_BUILD_DIR)/configure
$(Build/Configure/Default)
endef
LOGROTATE_MAXSIZE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_MAXSIZE))
LOGROTATE_ROTATE:=$(call qstrip,$(CONFIG_SYSLOGNG_LOGROTATE_ROTATE_COUNT))
CONFIGURE_ARGS += \
--disable-afsnmp \
$(call autoconf_bool,CONFIG_IPV6,ipv6) \
@ -58,6 +86,7 @@ CONFIGURE_ARGS += \
--enable-json=yes \
--enable-http=yes \
--disable-smtp \
--disable-mqtt \
--disable-redis \
--disable-dependency-tracking \
--disable-python \
@ -90,6 +119,14 @@ define Package/syslog-ng/install
$(INSTALL_DIR) $(1)/usr/share/syslog-ng/include/
$(CP) -r ./files/scl $(1)/usr/share/syslog-ng/include/
ifneq ($(strip $(CONFIG_SYSLOGNG_LOGROTATE)),)
$(INSTALL_DIR) $(1)/etc/logrotate.d
sed \
-e 's#@MAXSIZE@#$(LOGROTATE_MAXSIZE)#g' \
-e 's#@ROTATE@#$(LOGROTATE_ROTATE)#g' \
./files/syslog-ng.logrotate > $(1)/etc/logrotate.d/syslog-ng.conf
endif
endef
define Package/syslog-ng/postinst

View file

@ -4,7 +4,7 @@
# More details about these settings can be found here:
# https://www.syslog-ng.com/technical-documents/list/syslog-ng-open-source-edition
@version: 3.30
@version: 4.0
@include "scl.conf"
options {

View file

@ -0,0 +1,12 @@
/var/log/messages {
compress
copytruncate
delaycompress
notifempty
maxsize @MAXSIZE@
missingok
postrotate
/usr/sbin/syslog-ng-ctl reload > /dev/null
endscript
rotate @ROTATE@
}

View file

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=zabbix
PKG_VERSION:=5.0.7
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://cdn.zabbix.com/zabbix/sources/stable/5.0/
@ -24,33 +24,12 @@ PKG_INSTALL:=1
PKG_BUILD_PARALLEL:=1
PKG_CONFIG_DEPENDS:= \
CONFIG_ZABBIX_GNUTLS \
CONFIG_ZABBIX_OPENSSL \
CONFIG_ZABBIX_MYSQL \
CONFIG_ZABBIX_POSTGRESQL
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/nls.mk
define Package/zabbix-agentd/config
comment "SSL support"
choice
prompt "Selected SSL library"
default ZABBIX_NOSSL
config ZABBIX_OPENSSL
bool "OpenSSL"
config ZABBIX_GNUTLS
bool "GnuTLS"
config ZABBIX_NOSSL
bool "No SSL support"
endchoice
endef
define Package/zabbix-server/config
comment "Database Software"
@ -74,12 +53,31 @@ define Package/zabbix/Default
TITLE:=Zabbix
URL:=https://www.zabbix.com/
USERID:=zabbix=53:zabbix=53
DEPENDS += $(ICONV_DEPENDS) +libpcre +zlib +ZABBIX_GNUTLS:libgnutls +ZABBIX_OPENSSL:libopenssl
DEPENDS+=$(ICONV_DEPENDS) +libpcre +zlib
endef
define Package/zabbix-agentd
$(call Package/zabbix/Default)
TITLE+= agentd
PROVIDES:=zabbix-agentd
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-agentd-openssl
$(call Package/zabbix/Default)
TITLE+= agentd (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-agentd
VARIANT:=openssl
endef
define Package/zabbix-agentd-gnutls
$(call Package/zabbix/Default)
TITLE+= agentd (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-agentd
VARIANT:=gnutls
endef
define Package/zabbix-extra-mac80211
@ -103,19 +101,80 @@ endef
define Package/zabbix-sender
$(call Package/zabbix/Default)
TITLE+= sender
PROVIDES:=zabbix-sender
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-sender-openssl
$(call Package/zabbix/Default)
TITLE+= sender (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-sender
VARIANT:=openssl
endef
define Package/zabbix-sender-gnutls
$(call Package/zabbix/Default)
TITLE+= sender (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-sender
VARIANT:=gnutls
endef
define Package/zabbix-get
$(call Package/zabbix/Default)
TITLE+= get
PROVIDES:=zabbix-get
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-server
define Package/zabbix-get-openssl
$(call Package/zabbix/Default)
TITLE+= get (with OpenSSL)
DEPENDS+= +libopenssl
PROVIDES:=zabbix-get
VARIANT:=openssl
endef
define Package/zabbix-get-gnutls
$(call Package/zabbix/Default)
TITLE+= get (with GnuTLS)
DEPENDS+= +libgnutls
PROVIDES:=zabbix-get
VARIANT:=gnutls
endef
define Package/zabbix-server/Default
$(call Package/zabbix/Default)
TITLE+= server
DEPENDS += +ZABBIX_POSTGRESQL:libpq +ZABBIX_MYSQL:libmariadbclient +libevent2
endef
define Package/zabbix-server
$(call Package/zabbix-server/Default)
PROVIDES:=zabbix-server
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-server-openssl
$(call Package/zabbix-server/Default)
TITLE+= (with OpenSSL)
PROVIDES:=zabbix-server
DEPENDS+= +libopenssl
VARIANT:=openssl
endef
define Package/zabbix-server-gnutls
$(call Package/zabbix-server/Default)
TITLE+= (with GnuTLS)
PROVIDES:=zabbix-server
DEPENDS+= +libgnutls
VARIANT:=gnutls
endef
define Package/zabbix-server-frontend
$(call Package/zabbix/Default)
TITLE+= server-frontend
@ -124,12 +183,35 @@ define Package/zabbix-server-frontend
+php7-mod-session +php7-mod-sockets +php7-mod-mbstring +php7-mod-gettext
endef
define Package/zabbix-proxy
define Package/zabbix-proxy/Default
$(call Package/zabbix/Default)
TITLE+= proxy
DEPENDS += +ZABBIX_POSTGRESQL:libpq +ZABBIX_MYSQL:libmariadbclient +libevent2
endef
define Package/zabbix-proxy
$(call Package/zabbix-proxy/Default)
PROVIDES:=zabbix-proxy
VARIANT:=nossl
DEFAULT_VARIANT:=1
endef
define Package/zabbix-proxy-openssl
$(call Package/zabbix-proxy/Default)
TITLE+= (with OpenSSL)
PROVIDES:=zabbix-proxy
DEPENDS+= +libopenssl
VARIANT:=openssl
endef
define Package/zabbix-proxy-gnutls
$(call Package/zabbix-proxy/Default)
TITLE+= (with GnuTLS)
PROVIDES:=zabbix-proxy
DEPENDS+= +libgnutls
VARIANT:=gnutls
endef
define Package/zabbix-extra-mac80211/description
An extra package for zabbix-agentd that adds a discovery rule for mac80211 wifi phy and many userparameters.
It contains an suid helper to allow zabbix-agentd to still run as zabbix user and not as root.
@ -158,9 +240,15 @@ CONFIGURE_ARGS+= \
$(if $(CONFIG_ZABBIX_POSTGRESQL),--with-postgresql) \
--with-libevent=$(STAGING_DIR)/usr/include/libevent \
--with-libpcre=$(STAGING_DIR)/usr/include \
--with-zlib=$(STAGING_DIR)/usr/include \
$(if $(CONFIG_ZABBIX_GNUTLS),--with-gnutls="$(STAGING_DIR)/usr") \
$(if $(CONFIG_ZABBIX_OPENSSL),--with-openssl="$(STAGING_DIR)/usr")
--with-zlib=$(STAGING_DIR)/usr/include
ifeq ($(BUILD_VARIANT),openssl)
CONFIGURE_ARGS+= --with-openssl="$(STAGING_DIR)/usr"
endif
ifeq ($(BUILD_VARIANT),gnutls)
CONFIGURE_ARGS+= --with-gnutls="$(STAGING_DIR)/usr"
endif
CONFIGURE_VARS += \
ac_cv_header_sys_sysinfo_h=no
@ -215,12 +303,20 @@ endef
define Package/zabbix-agentd/conffiles
/etc/zabbix_agentd.conf
endef
Package/zabbix-agentd-openssl/conffiles = $(Package/zabbix-agentd/conffiles)
Package/zabbix-agentd-gnutls/conffiles = $(Package/zabbix-agentd/conffiles)
define Package/zabbix-server/conffiles
/etc/zabbix_server.conf
endef
Package/zabbix-server-openssl/conffiles = $(Package/zabbix-server/conffiles)
Package/zabbix-server-gnutls/conffiles = $(Package/zabbix-server/conffiles)
define Package/zabbix-proxy/conffiles
/etc/zabbix_proxy.conf
endef
Package/zabbix-proxy-openssl/conffiles = $(Package/zabbix-proxy/conffiles)
Package/zabbix-proxy-gnutls/conffiles = $(Package/zabbix-proxy/conffiles)
ifdef CONFIG_PACKAGE_zabbix-extra-mac80211
define Build/Prepare/zabbix-extra-mac80211
@ -249,6 +345,8 @@ define Package/zabbix-agentd/install
$(call Package/zabbix/install/etc,$(1),agentd)
$(call Package/zabbix/install/init.d,$(1),agentd)
endef
Package/zabbix-agentd-openssl/install = $(Package/zabbix-agentd/install)
Package/zabbix-agentd-gnutls/install = $(Package/zabbix-agentd/install)
define Package/zabbix-extra-mac80211/install
$(call Package/zabbix/install/zabbix.conf.d,$(1),mac80211)
@ -266,7 +364,7 @@ endef
define Package/zabbix-extra-network/postinst
#!/bin/sh
if [ -z "$${IPKG_INSTROOT}" ]; then
killall -HUP ubusd
killall -s HUP ubusd
fi
endef
@ -279,22 +377,28 @@ endef
define Package/zabbix-extra-wifi/postinst
#!/bin/sh
if [ -z "$${IPKG_INSTROOT}" ]; then
killall -HUP ubusd
killall -s HUP ubusd
fi
endef
define Package/zabbix-sender/install
$(call Package/zabbix/install/bin,$(1),sender)
endef
Package/zabbix-sender-openssl/install = $(Package/zabbix-sender/install)
Package/zabbix-sender-gnutls/install = $(Package/zabbix-sender/install)
define Package/zabbix-get/install
$(call Package/zabbix/install/bin,$(1),get)
endef
Package/zabbix-get-openssl/install = $(Package/zabbix-get/install)
Package/zabbix-get-gnutls/install = $(Package/zabbix-get/install)
define Package/zabbix-server/install
$(call Package/zabbix/install/sbin,$(1),server)
$(call Package/zabbix/install/etc,$(1),server)
endef
Package/zabbix-server-openssl/install = $(Package/zabbix-server/install)
Package/zabbix-server-gnutls/install = $(Package/zabbix-server/install)
define Package/zabbix-server-frontend/install
$(INSTALL_DIR) $(1)/www/zabbix
@ -305,13 +409,25 @@ define Package/zabbix-proxy/install
$(call Package/zabbix/install/sbin,$(1),proxy)
$(call Package/zabbix/install/etc,$(1),proxy)
endef
Package/zabbix-proxy-openssl/install = $(Package/zabbix-proxy/install)
Package/zabbix-proxy-gnutls/install = $(Package/zabbix-proxy/install)
$(eval $(call BuildPackage,zabbix-agentd))
$(eval $(call BuildPackage,zabbix-agentd-openssl))
$(eval $(call BuildPackage,zabbix-agentd-gnutls))
$(eval $(call BuildPackage,zabbix-extra-mac80211))
$(eval $(call BuildPackage,zabbix-extra-network))
$(eval $(call BuildPackage,zabbix-extra-wifi))
$(eval $(call BuildPackage,zabbix-sender))
$(eval $(call BuildPackage,zabbix-sender-openssl))
$(eval $(call BuildPackage,zabbix-sender-gnutls))
$(eval $(call BuildPackage,zabbix-server))
$(eval $(call BuildPackage,zabbix-server-openssl))
$(eval $(call BuildPackage,zabbix-server-gnutls))
$(eval $(call BuildPackage,zabbix-server-frontend))
$(eval $(call BuildPackage,zabbix-proxy))
$(eval $(call BuildPackage,zabbix-proxy-openssl))
$(eval $(call BuildPackage,zabbix-proxy-gnutls))
$(eval $(call BuildPackage,zabbix-get))
$(eval $(call BuildPackage,zabbix-get-openssl))
$(eval $(call BuildPackage,zabbix-get-gnutls))

View file

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=autoconf
PKG_VERSION:=2.70
PKG_RELEASE:=1
PKG_RELEASE:=2
PKG_SOURCE_URL:=@GNU/autoconf
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
@ -39,9 +39,12 @@ endef
CONFIGURE_VARS += M4=m4 EMACS=no
FIX_PATHS = $(SED) '1c \#!/usr/bin/perl' -e 's| /[^ ]*/bin/perl| /usr/bin/perl|g'
define Package/autoconf/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/* $(1)/usr/bin/
grep -rEl "#\!.*perl" $(1)/usr/bin/ | xargs $(FIX_PATHS)
$(INSTALL_DIR) $(1)/usr/share/autoconf
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/autoconf/INSTALL \
$(1)/usr/share/autoconf/

8
devel/autoconf/test.sh Normal file
View file

@ -0,0 +1,8 @@
#!/bin/sh
autoconf --version | grep $2 && \
autoheader --version | grep $2 && \
autom4te --version | grep $2 && \
autoreconf --version | grep $2 && \
autoscan --version | grep $2 && \
autoupdate --version | grep $2 && \
ifnames --version | grep $2

48
devel/delve/Makefile Normal file
View file

@ -0,0 +1,48 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=delve
PKG_VERSION:=1.8.2
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/go-delve/delve/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=fbf6ea7e1ed0c92e543c7f5f2343928e185e11e4cba1c7c9d3bfc28d1c323900
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE
PKG_MAINTAINER:=Niels Widger <niels@qacafe.com>
PKG_BUILD_DEPENDS:=golang/host
PKG_BUILD_PARALLEL:=1
PKG_USE_MIPS16:=0
GO_PKG:=github.com/go-delve/delve/
GO_PKG_BUILD_PKG:=github.com/go-delve/delve/cmd/dlv/
GO_PKG_LDFLAGS_X:=main.Build=$(PKG_VERSION)
include $(INCLUDE_DIR)/package.mk
include ../../lang/golang/golang-package.mk
# this is a subset of $(GO_ARCH_DEPENDS) as delve does not support all
# architectures, see build constraints in
# https://github.com/go-delve/delve/blob/v$(PKG_VERSION)/pkg/proc/native/support_sentinel.go
DELVE_GO_ARCH_DEPENDS:=@(aarch64||i386||x86_64)
define Package/delve
SECTION:=devel
CATEGORY:=Development
TITLE:=Debugger for the Go programming language
URL:=https://github.com/go-delve/delve
DEPENDS:=$(DELVE_GO_ARCH_DEPENDS)
endef
define Package/delve/description
Delve is a debugger for the Go programming language. The goal of the
project is to provide a simple, full featured debugging tool for Go.
Delve should be easy to invoke and easy to use. Chances are if you're
using a debugger, things aren't going your way. With that in mind,
Delve should stay out of your way as much as possible.
endef
$(eval $(call GoBinPackage,delve))
$(eval $(call BuildPackage,delve))

View file

@ -1,16 +1,54 @@
#
# Copyright (C) 2008 OpenWrt.org
# Copyright (C) 2002-2003 Erik Andersen <andersen@uclibc.org>
# Copyright (C) 2004 Manuel Novoa III <mjn3@uclibc.org>
# Copyright (C) 2005-2006 Felix Fietkau <nbd@nbd.name>
# Copyright (C) 2006-2014 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
include $(TOPDIR)/rules.mk
define Package/gcc/description
Build a native toolchain for compiling on target
device.
endef
PKG_NAME:=gcc
GCC_VERSION:=$(call qstrip,$(CONFIG_GCC_VERSION))
PKG_VERSION:=$(firstword $(subst +, ,$(GCC_VERSION)))
PKG_RELEASE:=$(AUTORELEASE)
GCC_DIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_URL:=@GNU/gcc/gcc-$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_INSTALL:=1
PKG_FIXUP:=libtool
PKG_BUILD_PARALLEL:=1
PKG_CPE_ID:=cpe:/a:gnu:gcc
ifeq ($(PKG_VERSION),8.4.0)
PKG_HASH:=e30a6e52d10e1f27ed55104ad233c30bd1e99cfb5ff98ab022dc941edd1b2dd4
endif
ifeq ($(PKG_VERSION),9.3.0)
PKG_HASH:=71e197867611f6054aa1119b13a0c0abac12834765fe2d81f35ac57f84f742d1
endif
ifeq ($(PKG_VERSION),10.2.0)
PKG_HASH:=b8dd4368bb9c7f0b98188317ee0254dd8cc99d1e3a18d0ff146c855fe16c1d8c
endif
PATCH_DIR=./patches/$(GCC_VERSION)
include $(INCLUDE_DIR)/package.mk
define Package/gcc
SECTION:=devel
@ -21,26 +59,6 @@ define Package/gcc
MENU:=1
endef
PKG_NAME:=gcc
# PKG_VERSION=7.3.0
PKG_VERSION=7.4.0
PKG_RELEASE:=5
PKG_SOURCE_URL:=@GNU/gcc/gcc-$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_INSTALL:=1
PKG_FIXUP:=libtool
PKG_BUILD_PARALLEL:=1
PKG_CPE_ID:=cpe:/a:gnu:gcc
ifeq ($(PKG_VERSION),7.3.0)
PKG_HASH:=832ca6ae04636adbb430e865a1451adf6979ab44ca1c8374f61fba65645ce15c
endif
ifeq ($(PKG_VERSION),7.4.0)
PKG_HASH:=eddde28d04f334aec1604456e536416549e9b1aa137fc69204e65eb0c009fe51
endif
define Package/gcc/config
source "$(SOURCE)/Config.in"
endef
@ -62,13 +80,12 @@ ifeq ($(CONFIG_INCLUDE_STATIC_LINK_SPEC),y)
REMOVE_STATIC_SPEC=rm /usr/lib/$(PKG_NAME)/$(REAL_GNU_TARGET_NAME)/$(PKG_VERSION)/specs
endif
include $(INCLUDE_DIR)/package.mk
TARGET_LANGUAGES:="c,c++"
BUGURL=https://dev.openwrt.org/
PKGVERSION=OpenWrt GCC $(PKG_VERSION)
TARGET_CPPFLAGS += -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS
# not using sstrip here as this fucks up the .so's somehow
# not using sstrip here as this messes up the .so's somehow
STRIP:=$(TOOLCHAIN_DIR)/bin/$(TARGET_CROSS)strip
RSTRIP:= \
NM="$(TOOLCHAIN_DIR)/bin/$(TARGET_CROSS)nm" \
@ -81,6 +98,7 @@ ifneq ($(CONFIG_SOFT_FLOAT),y)
ARM_FLOAT_OPTION:= --with-float=hard
endif
endif
GMPSRC=gmp-6.1.0
define Download/gmp
@ -110,7 +128,7 @@ $(eval $(call Download,mpfr))
define Build/Prepare
$(PKG_UNPACK)
# we have to download and unpack additional stuff before patching
# we have to download and unpack additional stuff before patching
tar -C $(PKG_BUILD_DIR) -xvjf $(DL_DIR)/$(GMPSRC).tar.bz2
ln -sf $(PKG_BUILD_DIR)/$(GMPSRC) $(PKG_BUILD_DIR)/gmp
tar -C $(PKG_BUILD_DIR) -xvzf $(DL_DIR)/$(MPCSRC).tar.gz
@ -125,7 +143,7 @@ define Build/Prepare
cp $(PKG_BUILD_DIR)/config.sub $(PKG_BUILD_DIR)/mpc/
endef
CONFIGURE_ARGS += CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
CONFIGURE_ARGS += CXXFLAGS_FOR_TARGET="-g -O2 -D_GLIBCXX_INCLUDE_NEXT_C_HEADERS"
define Build/Configure
(cd $(PKG_BUILD_DIR); rm -f config.cache; \
@ -168,8 +186,10 @@ define Build/Configure
endef
define Build/Compile
export SHELL="$(BASH)"; $(MAKE_VARS) $(MAKE) -C $(PKG_BUILD_DIR) \
DESTDIR="$(PKG_INSTALL_DIR)" $(MAKE_ARGS) all install
export SHELL="$(BASH)"; $(MAKE_VARS) $(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
DESTDIR="$(PKG_INSTALL_DIR)" $(MAKE_ARGS) all
export SHELL="$(BASH)"; $(MAKE_VARS) $(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
DESTDIR="$(PKG_INSTALL_DIR)" $(MAKE_ARGS) install
endef
ENVCFLAGS:="$(TARGET_OPTIMIZATION) $(EXTRA_OPTIMIZATION)
@ -192,6 +212,7 @@ define Package/gcc/install
ln -s $(REAL_GNU_TARGET_NAME)-g++ $(1)/usr/bin/g++
ln -s $(REAL_GNU_TARGET_NAME)-g++ $(1)/usr/bin/$(REAL_GNU_TARGET_NAME)-c++
ln -s $(REAL_GNU_TARGET_NAME)-gcc $(1)/usr/bin/gcc
ln -s $(REAL_GNU_TARGET_NAME)-gcc $(1)/usr/bin/cc
ln -s $(REAL_GNU_TARGET_NAME)-gcc $(1)/usr/bin/$(REAL_GNU_TARGET_NAME)-gcc-$(PKG_VERSION)
cp -ar $(PKG_INSTALL_DIR)/usr/lib/gcc $(1)/usr/lib
cp -ar $(TOOLCHAIN_DIR)/include $(1)/usr

View file

@ -1,77 +0,0 @@
commit 31285a20390a5e53a74a2a71d1b5c82f366ddd5a
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue May 6 11:49:05 2014 +0000
gcc: revert an upstream patch that is causing a regression on powerpc
https://forum.openwrt.org/viewtopic.php?pid=232494#p232494
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40709
Revert of:
commit 275035b56823b26d5fb7e90fad945b998648edf2
Author: bergner <bergner@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Thu Sep 5 14:09:07 2013 +0000
PR target/58139
* reginfo.c (choose_hard_reg_mode): Scan through all mode classes
looking for widest mode.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@202286 138bc75d-0d04-0410-961f-82ee72b054a4
--- a/gcc/reginfo.c
+++ b/gcc/reginfo.c
@@ -637,35 +637,40 @@ choose_hard_reg_mode (unsigned int regno
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_FLOAT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_VECTOR_FLOAT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
+ if (found_mode != VOIDmode)
+ return found_mode;
+
for (mode = GET_CLASS_NARROWEST_MODE (MODE_VECTOR_INT);
mode != VOIDmode;
mode = GET_MODE_WIDER_MODE (mode))
if ((unsigned) hard_regno_nregs[regno][mode] == nregs
&& HARD_REGNO_MODE_OK (regno, mode)
- && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode))
- && GET_MODE_SIZE (mode) > GET_MODE_SIZE (found_mode))
+ && (! call_saved || ! HARD_REGNO_CALL_PART_CLOBBERED (regno, mode)))
found_mode = mode;
if (found_mode != VOIDmode)

View file

@ -1,46 +0,0 @@
@@ -0,0 +1,45 @@
diff --git a/gcc/configure b/gcc/configure
index 3793681..bcda752 100755
--- a/gcc/configure
+++ b/gcc/configure
@@ -26876,19 +26876,6 @@ $as_echo "#define TARGET_LIBC_PROVIDES_SSP 1" >>confdefs.h
fi
-# Test for <sys/sdt.h> on the target.
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking sys/sdt.h in the target C library" >&5
-$as_echo_n "checking sys/sdt.h in the target C library... " >&6; }
-have_sys_sdt_h=no
-if test -f $target_header_dir/sys/sdt.h; then
- have_sys_sdt_h=yes
-
-$as_echo "#define HAVE_SYS_SDT_H 1" >>confdefs.h
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $have_sys_sdt_h" >&5
-$as_echo "$have_sys_sdt_h" >&6; }
# Check if TFmode long double should be used by default or not.
# Some glibc targets used DFmode long double, but with glibc 2.4
diff --git a/gcc/configure.ac b/gcc/configure.ac
index 3ee1d67..e321218 100644
--- a/gcc/configure.ac
+++ b/gcc/configure.ac
@@ -4796,16 +4796,6 @@ if test x$gcc_cv_libc_provides_ssp = xyes; then
[Define if your target C library provides stack protector support])
fi
-# Test for <sys/sdt.h> on the target.
-GCC_TARGET_TEMPLATE([HAVE_SYS_SDT_H])
-AC_MSG_CHECKING(sys/sdt.h in the target C library)
-have_sys_sdt_h=no
-if test -f $target_header_dir/sys/sdt.h; then
- have_sys_sdt_h=yes
- AC_DEFINE(HAVE_SYS_SDT_H, 1,
- [Define if your target C library provides sys/sdt.h])
-fi
-AC_MSG_RESULT($have_sys_sdt_h)
# Check if TFmode long double should be used by default or not.
# Some glibc targets used DFmode long double, but with glibc 2.4

View file

@ -0,0 +1,24 @@
commit 81cc26c706b2bc8c8c1eb1a322e5c5157900836e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Oct 19 21:45:51 2014 +0000
gcc: do not assume that the Mac OS X filesystem is case insensitive
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 42973
--- a/include/filenames.h
+++ b/include/filenames.h
@@ -44,11 +44,6 @@ extern "C" {
# define IS_DIR_SEPARATOR(c) IS_DOS_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_DOS_ABSOLUTE_PATH (f)
#else /* not DOSish */
-# if defined(__APPLE__)
-# ifndef HAVE_CASE_INSENSITIVE_FILE_SYSTEM
-# define HAVE_CASE_INSENSITIVE_FILE_SYSTEM 1
-# endif
-# endif /* __APPLE__ */
# define HAS_DRIVE_SPEC(f) (0)
# define IS_DIR_SEPARATOR(c) IS_UNIX_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_UNIX_ABSOLUTE_PATH (f)

View file

@ -12,7 +12,7 @@ Date: Tue Feb 26 16:16:33 2013 +0000
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3121,18 +3121,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
@@ -3285,18 +3285,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)

View file

@ -5,7 +5,7 @@ instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3098,6 +3098,12 @@ mips_emit_call_insn (rtx pattern, rtx or
@@ -3132,6 +3132,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}

View file

@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -875,7 +875,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View file

@ -10,7 +10,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19790,7 +19790,7 @@ mips_option_override (void)
@@ -20041,7 +20041,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */

View file

@ -8,7 +8,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -920,11 +920,12 @@ $(libgcov-driver-objects): %$(objext): $
@@ -929,11 +929,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
@ -22,7 +22,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
-rm -f $@
objects="$(objects)"; \
@@ -945,7 +946,7 @@ all: libunwind.a
@@ -957,7 +958,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
@ -31,7 +31,7 @@ Date: Mon Oct 19 23:26:09 2009 +0000
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1151,6 +1152,10 @@ install-shared:
@@ -1163,6 +1164,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a

View file

@ -0,0 +1,28 @@
commit 7edc8ca5456d9743dd0075eb3cc5b04f4f24c8cc
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 19:34:36 2011 +0000
add armv4 fixup patches
SVN-Revision: 25322
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -91,10 +91,15 @@
#define MUSL_DYNAMIC_LINKER \
"/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}%{mfdpic:-fdpic}.so.1"
+/* For armv4 we pass --fix-v4bx to linker to support EABI */
+#undef TARGET_FIX_V4BX_SPEC
+#define TARGET_FIX_V4BX_SPEC " %{mcpu=arm8|mcpu=arm810|mcpu=strongarm*"\
+ "|march=armv4|mcpu=fa526|mcpu=fa626:--fix-v4bx}"
+
/* At this point, bpabi.h will have clobbered LINK_SPEC. We want to
use the GNU/Linux version, not the generic BPABI version. */
#undef LINK_SPEC
-#define LINK_SPEC EABI_LINK_SPEC \
+#define LINK_SPEC EABI_LINK_SPEC TARGET_FIX_V4BX_SPEC \
LINUX_OR_ANDROID_LD (LINUX_TARGET_LINK_SPEC, \
LINUX_TARGET_LINK_SPEC " " ANDROID_LINK_SPEC)

View file

@ -0,0 +1,54 @@
commit dcfc40358b5a3cae7320c17f8d1cebd5ad5540cd
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Feb 12 20:25:47 2012 +0000
gcc 4.6: port over the missing patch 850-use_shared_libgcc.patch to prevent libgcc crap from leaking into every single binary
SVN-Revision: 30486
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -132,10 +132,6 @@
"%{Ofast|ffast-math|funsafe-math-optimizations:crtfastmath.o%s} " \
LINUX_OR_ANDROID_LD (GNU_USER_TARGET_ENDFILE_SPEC, ANDROID_ENDFILE_SPEC)
-/* Use the default LIBGCC_SPEC, not the version in linux-elf.h, as we
- do not use -lfloat. */
-#undef LIBGCC_SPEC
-
/* Clear the instruction cache from `beg' to `end'. This is
implemented in lib1funcs.S, so ensure an error if this definition
is used. */
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -66,6 +66,10 @@ see the files COPYING3 and COPYING.RUNTI
builtin_version ("CRuntime_Musl"); \
} while (0)
+#ifndef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{static|static-libgcc:-lgcc}%{!static:%{!static-libgcc:-lgcc_s}}"
+#endif
+
/* Determine which dynamic linker to use depending on whether GLIBC or
uClibc or Bionic or musl is the default C library and whether
-muclibc or -mglibc or -mbionic or -mmusl has been passed to change
--- a/libgcc/mkmap-symver.awk
+++ b/libgcc/mkmap-symver.awk
@@ -136,5 +136,5 @@ function output(lib) {
else if (inherit[lib])
printf("} %s;\n", inherit[lib]);
else
- printf ("\n local:\n\t*;\n};\n");
+ printf ("\n\t*;\n};\n");
}
--- a/gcc/config/rs6000/linux.h
+++ b/gcc/config/rs6000/linux.h
@@ -62,6 +62,9 @@
#undef CPP_OS_DEFAULT_SPEC
#define CPP_OS_DEFAULT_SPEC "%(cpp_os_linux)"
+#undef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View file

@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000-logue.c
+++ b/gcc/config/rs6000/rs6000-logue.c
@@ -348,7 +348,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View file

@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#elif !defined(USE_TM_CLONE_REGISTRY)
# define USE_TM_CLONE_REGISTRY 0
#endif

View file

@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View file

@ -0,0 +1,146 @@
commit 99368862e44740ff4fd33760893f04e14f9dbdf1
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Jul 31 00:52:27 2007 +0000
Port the mbsd_multi patch from freewrt, which adds -fhonour-copts. This will emit warnings in packages that don't use our target cflags properly
SVN-Revision: 8256
This patch brings over a feature from MirBSD:
* -fhonour-copts
If this option is not given, it's warned (depending
on environment variables). This is to catch errors
of misbuilt packages which override CFLAGS themselves.
This patch was authored by Thorsten Glaser <tg at mirbsd.de>
with copyright assignment to the FSF in effect.
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
+/* Check if a port honours COPTS. */
+static int honour_copts = 0;
+
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -455,6 +458,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
+ case OPT_fhonour_copts:
+ if (c_language == clk_c) {
+ honour_copts++;
+ }
+ break;
+
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1168,6 +1177,47 @@ c_common_init (void)
return false;
}
+ if (c_language == clk_c) {
+ char *ev = getenv ("GCC_HONOUR_COPTS");
+ int evv;
+ if (ev == NULL)
+ evv = -1;
+ else if ((*ev == '0') || (*ev == '\0'))
+ evv = 0;
+ else if (*ev == '1')
+ evv = 1;
+ else if (*ev == '2')
+ evv = 2;
+ else if (*ev == 's')
+ evv = -1;
+ else {
+ warning (0, "unknown GCC_HONOUR_COPTS value, assuming 1");
+ evv = 1; /* maybe depend this on something like MIRBSD_NATIVE? */
+ }
+ if (evv == 1) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in lenient mode");
+ return false;
+ } else if (honour_copts != 1) {
+ warning (0, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ } else if (evv == 2) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in strict mode");
+ return false;
+ } else if (honour_copts != 1) {
+ error ("someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ return false;
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
+
return true;
}
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1590,6 +1590,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ WarnRemoved
+fhonour-copts
+C ObjC C++ ObjC++ RejectNegative
+
fhosted
C ObjC
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1657,6 +1657,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
+fhonour-copts
+Common RejectNegative
+
; Nonzero means ignore `#ident' directives. 0 means handle them.
; Generate position-independent code for executables if possible
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -8169,6 +8169,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.
+@item -fhonour-copts
+@opindex fhonour-copts
+If @env{GCC_HONOUR_COPTS} is set to 1, abort if this option is not
+given at least once, and warn if it is given more than once.
+If @env{GCC_HONOUR_COPTS} is set to 2, abort if this option is not
+given exactly once.
+If @env{GCC_HONOUR_COPTS} is set to 0 or unset, warn if this option
+is not given exactly once.
+The warning is quelled if @env{GCC_HONOUR_COPTS} is set to @samp{s}.
+This flag and environment variable only affect the C language.
+
@item -Wstack-protector
@opindex Wstack-protector
@opindex Wno-stack-protector
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -2308,6 +2308,9 @@ common_handle_option (struct gcc_options
/* Currently handled in a prescan. */
break;
+ case OPT_fhonour_copts:
+ break;
+
case OPT_Werror:
dc->warning_as_error_requested = value;
break;

View file

@ -0,0 +1,22 @@
Author: Jo-Philipp Wich <jow@openwrt.org>
Date: Sat Apr 21 03:02:39 2012 +0000
gcc: add patch to make the getenv() spec function nonfatal if requested environment variable is unset
SVN-Revision: 31390
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -9396,8 +9396,10 @@ getenv_spec_function (int argc, const ch
}
if (!value)
- fatal_error (input_location,
- "environment variable %qs not defined", varname);
+ {
+ warning (input_location, "environment variable %qs not defined", varname);
+ value = "";
+ }
/* We have to escape every character of the environment variable so
they are not interpreted as active spec characters. A

View file

@ -0,0 +1,111 @@
From da45b3fde60095756f5f6030f6012c23a3d34429 Mon Sep 17 00:00:00 2001
From: Andrew McDonnell <bugs@andrewmcdonnell.net>
Date: Fri, 3 Oct 2014 19:09:00 +0930
Subject: Add .note.GNU-stack section
See http://lists.busybox.net/pipermail/uclibc/2014-October/048671.html
Below copied from https://gcc.gnu.org/ml/gcc-patches/2014-09/msg02430.html
Re: [Patch, MIPS] Add .note.GNU-stack section
From: Steve Ellcey <sellcey at mips dot com>
On Wed, 2014-09-10 at 10:15 -0700, Eric Christopher wrote:
>
>
> On Wed, Sep 10, 2014 at 9:27 AM, <pinskia@gmail.com> wrote:
> This works except you did not update the assembly files in
> libgcc or glibc. We (Cavium) have the same patch in our tree
> for a few released versions.
> Mind just checking yours in then Andrew?
> Thanks!
> -eric
I talked to Andrew about what files he changed in GCC and created and
tested this new patch. Andrew also mentioned changing some assembly
files in glibc but I don't see any use of '.section .note.GNU-stack' in
any assembly files in glibc (for any platform) so I wasn't planning on
creating a glibc to add them to mips glibc assembly language files.
OK to check in this patch?
Steve Ellcey
sellcey@mips.com
2014-09-26 Steve Ellcey <sellcey@mips.com>
---
gcc/config/mips/mips.c | 3 +++
libgcc/config/mips/crti.S | 4 ++++
libgcc/config/mips/crtn.S | 3 +++
libgcc/config/mips/mips16.S | 4 ++++
libgcc/config/mips/vr4120-div.S | 4 ++++
5 files changed, 18 insertions(+)
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -22881,6 +22881,9 @@ mips_asm_file_end (void)
#define TARGET_ASM_FILE_END mips_asm_file_end
+#undef TARGET_ASM_FILE_END
+#define TARGET_ASM_FILE_END file_end_indicate_exec_stack
+
struct gcc_target targetm = TARGET_INITIALIZER;
#include "gt-mips.h"
--- a/libgcc/config/mips/crti.S
+++ b/libgcc/config/mips/crti.S
@@ -24,6 +24,10 @@ see the files COPYING3 and COPYING.RUNTI
/* An executable stack is *not* required for these functions. */
#include "gnustack.h"
+
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+
/* 4 slots for argument spill area. 1 for cpreturn, 1 for stack.
Return spill offset of 40 and 20. Aligned to 16 bytes for n32. */
--- a/libgcc/config/mips/crtn.S
+++ b/libgcc/config/mips/crtn.S
@@ -24,6 +24,9 @@ see the files COPYING3 and COPYING.RUNTI
/* An executable stack is *not* required for these functions. */
#include "gnustack.h"
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+
/* 4 slots for argument spill area. 1 for cpreturn, 1 for stack.
Return spill offset of 40 and 20. Aligned to 16 bytes for n32. */
--- a/libgcc/config/mips/mips16.S
+++ b/libgcc/config/mips/mips16.S
@@ -51,6 +51,10 @@ see the files COPYING3 and COPYING.RUNTI
values using the soft-float calling convention, but do the actual
operation using the hard floating point instructions. */
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+ .previous
+
#if defined _MIPS_SIM && (_MIPS_SIM == _ABIO32 || _MIPS_SIM == _ABIO64)
/* This file contains 32-bit assembly code. */
--- a/libgcc/config/mips/vr4120-div.S
+++ b/libgcc/config/mips/vr4120-div.S
@@ -29,6 +29,10 @@ see the files COPYING3 and COPYING.RUNTI
-mfix-vr4120. div and ddiv do not give the correct result when one
of the operands is negative. */
+/* An executable stack is *not* required for these functions. */
+ .section .note.GNU-stack,"",%progbits
+ .previous
+
.set nomips16
#define DIV \

View file

@ -12,8 +12,6 @@ Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
libffi/src/mips/o32.S | 17 +++++++++++++++++
2 files changed, 34 insertions(+)
diff --git a/libffi/src/mips/n32.S b/libffi/src/mips/n32.S
index c6985d30a6f..8f25994773c 100644
--- a/libffi/src/mips/n32.S
+++ b/libffi/src/mips/n32.S
@@ -107,6 +107,16 @@ loadregs:
@ -89,8 +87,6 @@ index c6985d30a6f..8f25994773c 100644
cls_retstruct_small2:
REG_L v0, V0_OFF2($sp)
diff --git a/libffi/src/mips/o32.S b/libffi/src/mips/o32.S
index eb279813a76..1aff4b14814 100644
--- a/libffi/src/mips/o32.S
+++ b/libffi/src/mips/o32.S
@@ -82,13 +82,16 @@ sixteen:
@ -170,6 +166,3 @@ index eb279813a76..1aff4b14814 100644
1:
REG_L $3, V1_OFF2($fp)
REG_L $2, V0_OFF2($fp)
--
2.16.3

View file

@ -0,0 +1,67 @@
From dda6b050cd74a352670787a294596a9c56c21327 Mon Sep 17 00:00:00 2001
From: Yousong Zhou <yszhou4tech@gmail.com>
Date: Fri, 4 May 2018 18:20:53 +0800
Subject: [PATCH] gotools: fix compilation when making cross compiler
libgo is "the runtime support library for the Go programming language.
This library is intended for use with the Go frontend."
gccgo will link target files with libgo.so which depends on libgcc_s.so.1, but
the linker will complain that it cannot find it. That's because shared libgcc
is not present in the install directory yet. libgo.so was made without problem
because gcc will emit -lgcc_s when compiled with -shared option. When gotools
were being made, it was supplied with -static-libgcc thus no link option was
provided. Check LIBGO in gcc/go/gcc-spec.c for how gccgo make a builtin spec
for linking with libgo.so
- GccgoCrossCompilation, https://github.com/golang/go/wiki/GccgoCrossCompilation
- Cross-building instructions, http://www.eglibc.org/archives/patches/msg00078.html
When 3-pass GCC compilation is used, shared libgcc runtime libraries will be
available after gcc pass2 completed and will meet the gotools link requirement
at gcc pass3
---
gotools/Makefile.am | 4 +++-
gotools/Makefile.in | 4 +++-
2 files changed, 6 insertions(+), 2 deletions(-)
--- a/gotools/Makefile.am
+++ b/gotools/Makefile.am
@@ -26,6 +26,7 @@ PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@@ -41,7 +42,8 @@ GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
--- a/gotools/Makefile.in
+++ b/gotools/Makefile.in
@@ -337,6 +337,7 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_FALSE@GOCOMPILER = $(GOC)
@@ -346,7 +347,8 @@ LIBGOTOOL = $(libgodir)/libgotool.a
GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
libgosrcdir = $(srcdir)/../libgo/go
cmdsrcdir = $(libgosrcdir)/cmd

View file

@ -1,28 +0,0 @@
commit 1877bc9d8f2be143fbe530347a945850d0ecd234
Author: Steven Barth <cyrus@openwrt.org>
Date: Mon Jun 22 10:31:07 2015 +0000
gcc/musl: rework SSP-support
Make musl provide libssp_nonshared.a and make GCC link it unconditionally
if musl is used. This should be a no-op if SSP is disabled and seems to be
the only reliable way of dealing with SSP over all packages due to the mess
that is linkerflags handling in packages.
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 46108
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -861,7 +861,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View file

@ -1,34 +0,0 @@
From: ktkachov <ktkachov@138bc75d-0d04-0410-961f-82ee72b054a4>
Date: Wed, 22 Apr 2015 14:20:01 +0000 (+0000)
Subject: unwind fix for musl
X-Git-Url: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff_plain;h=a2e31d0681d8a47389b8a3552622fbd9827bcef4
unwind fix for musl
On behalf of szabolcs.nagy@arm.com
2015-04-22 Gregor Richards <gregor.richards@uwaterloo.ca>
Szabolcs Nagy <szabolcs.nagy@arm.com>
* unwind-dw2-fde-dip.c (USE_PT_GNU_EH_FRAME): Define it on
Linux if target provides dl_iterate_phdr.
git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@222328 138bc75d-0d04-0410-961f-82ee72b054a4
---
--- a/libgcc/unwind-dw2-fde-dip.c
+++ b/libgcc/unwind-dw2-fde-dip.c
@@ -59,6 +59,12 @@
#if !defined(inhibit_libc) && defined(HAVE_LD_EH_FRAME_HDR) \
&& defined(TARGET_DL_ITERATE_PHDR) \
+ && defined(__linux__)
+# define USE_PT_GNU_EH_FRAME
+#endif
+
+#if !defined(inhibit_libc) && defined(HAVE_LD_EH_FRAME_HDR) \
+ && defined(TARGET_DL_ITERATE_PHDR) \
&& (defined(__DragonFly__) || defined(__FreeBSD__))
# define ElfW __ElfN
# define USE_PT_GNU_EH_FRAME

View file

@ -1,14 +1,13 @@
--- a/gcc/real.h
+++ b/gcc/real.h
@@ -75,9 +75,10 @@
@@ -70,8 +70,10 @@ struct GTY(()) real_value {
+ (REAL_VALUE_TYPE_SIZE%HOST_BITS_PER_WIDE_INT ? 1 : 0)) /* round up */
/* Verify the guess. */
+#ifndef __LP64__
extern char test_real_width
[sizeof (REAL_VALUE_TYPE) <= REAL_WIDTH * sizeof (HOST_WIDE_INT) ? 1 : -1];
-
+#endif
/* Calculate the format for CONST_DOUBLE. We need as many slots as
are necessary to overlay a REAL_VALUE_TYPE on them. This could be
as many as four (32-bit HOST_WIDE_INT, 128-bit REAL_VALUE_TYPE).

View file

@ -0,0 +1,35 @@
commit 098bd91f5eae625c7d2ee621e10930fc4434e5e2
Author: Luka Perkov <luka@openwrt.org>
Date: Tue Feb 26 16:16:33 2013 +0000
gcc: don't build documentation
This closes #13039.
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 35807
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3204,18 +3204,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)
-doc/%.info: %.texi
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I . -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/%.info:
# Duplicate entry to handle renaming of gccinstall.info
-doc/gccinstall.info: $(TEXI_GCCINSTALL_FILES)
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/gccinstall.info:
doc/cpp.dvi: $(TEXI_CPP_FILES)
doc/gcc.dvi: $(TEXI_GCC_FILES)

View file

@ -0,0 +1,20 @@
Fix https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84790.
MIPS16 functions have a static assembler prologue which clobbers
registers v0 and v1. Add these register clobbers to function call
instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3102,6 +3102,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}
+ if (TARGET_MIPS16 && TARGET_USE_GOT)
+ {
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS16_PIC_TEMP);
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS_PROLOGUE_TEMP (word_mode));
+ }
+
if (TARGET_MIPS16
&& TARGET_EXPLICIT_RELOCS
&& TARGET_CALL_CLOBBERED_GP)

View file

@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -868,7 +868,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View file

@ -0,0 +1,21 @@
commit ecf7671b769fe96f7b5134be442089f8bdba55d2
Author: Felix Fietkau <nbd@nbd.name>
Date: Thu Aug 4 20:29:45 2016 +0200
gcc: add a patch to generate better code with Os on mips
Also happens to reduce compressed code size a bit
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19847,7 +19847,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */
- if (optimize_size)
+ if (0 && optimize_size)
mips_cost = &mips_rtx_cost_optimize_size;
else
mips_cost = &mips_rtx_cost_data[mips_tune];

View file

@ -0,0 +1,11 @@
--- a/gcc/config/arm/arm.h
+++ b/gcc/config/arm/arm.h
@@ -155,7 +155,7 @@ extern tree arm_fp16_type_node;
/* Thumb-1 only. */
#define TARGET_THUMB1_ONLY (TARGET_THUMB1 && !arm_arch_notm)
-#define TARGET_LDRD (arm_arch5e && ARM_DOUBLEWORD_ALIGN \
+#define TARGET_LDRD (arm_arch6 && ARM_DOUBLEWORD_ALIGN \
&& !TARGET_THUMB1)
#define TARGET_CRC32 (arm_arch_crc)

View file

@ -0,0 +1,33 @@
commit 8570c4be394cff7282f332f97da2ff569a927ddb
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 20:06:12 2011 +0000
fixup arm soft-float symbols
SVN-Revision: 25325
--- a/libgcc/config/arm/t-linux
+++ b/libgcc/config/arm/t-linux
@@ -1,6 +1,10 @@
LIB1ASMSRC = arm/lib1funcs.S
LIB1ASMFUNCS = _udivsi3 _divsi3 _umodsi3 _modsi3 _dvmd_lnx _clzsi2 _clzdi2 \
- _ctzsi2 _arm_addsubdf3 _arm_addsubsf3
+ _ctzsi2 _arm_addsubdf3 _arm_addsubsf3 \
+ _arm_negdf2 _arm_muldivdf3 _arm_cmpdf2 _arm_unorddf2 \
+ _arm_fixdfsi _arm_fixunsdfsi _arm_truncdfsf2 \
+ _arm_negsf2 _arm_muldivsf3 _arm_cmpsf2 _arm_unordsf2 \
+ _arm_fixsfsi _arm_fixunssfsi
# Just for these, we omit the frame pointer since it makes such a big
# difference.
--- a/gcc/config/arm/linux-elf.h
+++ b/gcc/config/arm/linux-elf.h
@@ -58,8 +58,6 @@
%{shared:-lc} \
%{!shared:%{profile:-lc_p}%{!profile:-lc}}"
-#define LIBGCC_SPEC "%{mfloat-abi=soft*:-lfloat} -lgcc"
-
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
#define LINUX_TARGET_LINK_SPEC "%{h*} \

View file

@ -0,0 +1,44 @@
commit c96312958c0621e72c9b32da5bc224ffe2161384
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Oct 19 23:26:09 2009 +0000
gcc: create a proper libgcc_pic.a static library for relinking (4.3.3+ for now, backport will follow)
SVN-Revision: 18086
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -923,11 +923,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
+libgcc_pic.a: $(libgcc-s-objects)
libgcov.a: $(libgcov-objects)
libunwind.a: $(libunwind-objects)
libgcc_eh.a: $(libgcc-eh-objects)
-libgcc.a libgcov.a libunwind.a libgcc_eh.a:
+libgcc.a libgcov.a libunwind.a libgcc_eh.a libgcc_pic.a:
-rm -f $@
objects="$(objects)"; \
@@ -948,7 +949,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
-all: libgcc_eh.a libgcc_s$(SHLIB_EXT)
+all: libgcc_eh.a libgcc_pic.a libgcc_s$(SHLIB_EXT)
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1154,6 +1155,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a
+ $(INSTALL_DATA) libgcc_pic.a $(mapfile) $(DESTDIR)$(inst_libdir)/
+ chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+ $(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+
$(subst @multilib_dir@,$(MULTIDIR),$(subst \
@shlib_base_name@,libgcc_s,$(subst \
@shlib_slibdir_qual@,$(MULTIOSSUBDIR),$(SHLIB_INSTALL))))

View file

@ -50,5 +50,5 @@ Date: Sun Feb 12 20:25:47 2012 +0000
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}}"
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View file

@ -0,0 +1,22 @@
commit 64661de100da1ec1061ef3e5e400285dce115e6b
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun May 10 13:16:35 2015 +0000
gcc: add some size optimization patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 45664
--- a/libgcc/config/t-libunwind
+++ b/libgcc/config/t-libunwind
@@ -2,8 +2,7 @@
HOST_LIBGCC2_CFLAGS += -DUSE_GAS_SYMVER
-LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c \
- $(srcdir)/unwind-compat.c $(srcdir)/unwind-dw2-fde-compat.c
+LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
LIB2ADDEHSTATIC = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
# Override the default value from t-slibgcc-elf-ver and mention -lunwind

View file

@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -24780,7 +24780,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View file

@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View file

@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View file

@ -17,7 +17,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -108,6 +108,9 @@ static int class_dump_flags;
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
@ -27,7 +27,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -456,6 +459,12 @@ c_common_handle_option (size_t scode, co
@@ -459,6 +462,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
@ -40,7 +40,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1084,6 +1093,47 @@ c_common_init (void)
@@ -1125,6 +1134,47 @@ c_common_init (void)
return false;
}
@ -80,7 +80,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (0, "someone does not honour COPTS correctly, passed %d times",
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
@ -90,7 +90,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1412,6 +1412,9 @@ C++ ObjC++ Optimization Alias(fexception
@@ -1469,6 +1469,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ Ignore Warn(switch %qs is no longer supported)
@ -102,7 +102,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1510,6 +1510,9 @@ fguess-branch-probability
@@ -1551,6 +1551,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
@ -114,7 +114,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -1954,6 +1954,9 @@ common_handle_option (struct gcc_options
@@ -2073,6 +2073,9 @@ common_handle_option (struct gcc_options
opts, opts_set, loc, dc);
break;
@ -126,7 +126,7 @@ Date: Tue Jul 31 00:52:27 2007 +0000
opts->x_warn_larger_than = value != -1;
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -6572,6 +6572,17 @@ This option is only supported for C and
@@ -7013,6 +7013,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.

View file

@ -7,7 +7,7 @@ Date: Sat Apr 21 03:02:39 2012 +0000
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -9281,8 +9281,10 @@ getenv_spec_function (int argc, const ch
@@ -9347,8 +9347,10 @@ getenv_spec_function (int argc, const ch
value = varname;
if (!value)

View file

@ -48,9 +48,9 @@ sellcey@mips.com
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -22567,6 +22567,9 @@ mips_promote_function_mode (const_tree t
#undef TARGET_CUSTOM_FUNCTION_DESCRIPTORS
#define TARGET_CUSTOM_FUNCTION_DESCRIPTORS 2
@@ -22640,6 +22640,9 @@ mips_starting_frame_offset (void)
#undef TARGET_STARTING_FRAME_OFFSET
#define TARGET_STARTING_FRAME_OFFSET mips_starting_frame_offset
+#undef TARGET_ASM_FILE_END
+#define TARGET_ASM_FILE_END file_end_indicate_exec_stack

View file

@ -0,0 +1,168 @@
From c0c62fa4256f805389f16ebfc4a60cf789129b50 Mon Sep 17 00:00:00 2001
From: BangLang Huang <banglang.huang@foxmail.com>
Date: Wed, 9 Nov 2016 10:36:49 +0800
Subject: [PATCH] libffi: fix MIPS softfloat build issue
Backported from github.com/libffi/libffi#272
Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
---
libffi/src/mips/n32.S | 17 +++++++++++++++++
libffi/src/mips/o32.S | 17 +++++++++++++++++
2 files changed, 34 insertions(+)
--- a/libffi/src/mips/n32.S
+++ b/libffi/src/mips/n32.S
@@ -107,6 +107,16 @@ loadregs:
REG_L t6, 3*FFI_SIZEOF_ARG($fp) # load the flags word into t6.
+#ifdef __mips_soft_float
+ REG_L a0, 0*FFI_SIZEOF_ARG(t9)
+ REG_L a1, 1*FFI_SIZEOF_ARG(t9)
+ REG_L a2, 2*FFI_SIZEOF_ARG(t9)
+ REG_L a3, 3*FFI_SIZEOF_ARG(t9)
+ REG_L a4, 4*FFI_SIZEOF_ARG(t9)
+ REG_L a5, 5*FFI_SIZEOF_ARG(t9)
+ REG_L a6, 6*FFI_SIZEOF_ARG(t9)
+ REG_L a7, 7*FFI_SIZEOF_ARG(t9)
+#else
and t4, t6, ((1<<FFI_FLAG_BITS)-1)
REG_L a0, 0*FFI_SIZEOF_ARG(t9)
beqz t4, arg1_next
@@ -193,6 +203,7 @@ arg7_next:
arg8_doublep:
l.d $f19, 7*FFI_SIZEOF_ARG(t9)
arg8_next:
+#endif
callit:
# Load the function pointer
@@ -214,6 +225,7 @@ retint:
b epilogue
retfloat:
+#ifndef __mips_soft_float
bne t6, FFI_TYPE_FLOAT, retdouble
jal t9
REG_L t4, 4*FFI_SIZEOF_ARG($fp)
@@ -272,6 +284,7 @@ retstruct_f_d:
s.s $f0, 0(t4)
s.d $f2, 8(t4)
b epilogue
+#endif
retstruct_d_soft:
bne t6, FFI_TYPE_STRUCT_D_SOFT, retstruct_f_soft
@@ -429,6 +442,7 @@ ffi_closure_N32:
REG_S a6, A6_OFF2($sp)
REG_S a7, A7_OFF2($sp)
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, F12_OFF2($sp)
s.d $f13, F13_OFF2($sp)
@@ -438,6 +452,7 @@ ffi_closure_N32:
s.d $f17, F17_OFF2($sp)
s.d $f18, F18_OFF2($sp)
s.d $f19, F19_OFF2($sp)
+#endif
# Call ffi_closure_mips_inner_N32 to do the real work.
LA t9, ffi_closure_mips_inner_N32
@@ -458,6 +473,7 @@ cls_retint:
b cls_epilogue
cls_retfloat:
+#ifndef __mips_soft_float
bne v0, FFI_TYPE_FLOAT, cls_retdouble
l.s $f0, V0_OFF2($sp)
b cls_epilogue
@@ -500,6 +516,7 @@ cls_retstruct_f_d:
l.s $f0, V0_OFF2($sp)
l.d $f2, V1_OFF2($sp)
b cls_epilogue
+#endif
cls_retstruct_small2:
REG_L v0, V0_OFF2($sp)
--- a/libffi/src/mips/o32.S
+++ b/libffi/src/mips/o32.S
@@ -82,13 +82,16 @@ sixteen:
ADDU $sp, 4 * FFI_SIZEOF_ARG # adjust $sp to new args
+#ifndef __mips_soft_float
bnez t0, pass_d # make it quick for int
+#endif
REG_L a0, 0*FFI_SIZEOF_ARG($sp) # just go ahead and load the
REG_L a1, 1*FFI_SIZEOF_ARG($sp) # four regs.
REG_L a2, 2*FFI_SIZEOF_ARG($sp)
REG_L a3, 3*FFI_SIZEOF_ARG($sp)
b call_it
+#ifndef __mips_soft_float
pass_d:
bne t0, FFI_ARGS_D, pass_f
l.d $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
@@ -130,6 +133,7 @@ pass_f_d:
# bne t0, FFI_ARGS_F_D, call_it
l.s $f12, 0*FFI_SIZEOF_ARG($sp) # load $fp regs from args
l.d $f14, 2*FFI_SIZEOF_ARG($sp) # passing double and float
+#endif
call_it:
# Load the function pointer
@@ -158,14 +162,23 @@ retfloat:
bne t2, FFI_TYPE_FLOAT, retdouble
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.s $f0, 0(t0)
+#else
+ REG_S v0, 0(t0)
+#endif
b epilogue
retdouble:
bne t2, FFI_TYPE_DOUBLE, noretval
jalr t9
REG_L t0, SIZEOF_FRAME + 4*FFI_SIZEOF_ARG($fp)
+#ifndef __mips_soft_float
s.d $f0, 0(t0)
+#else
+ REG_S v1, 4(t0)
+ REG_S v0, 0(t0)
+#endif
b epilogue
noretval:
@@ -261,9 +274,11 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp save if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
# Store all possible float/double registers.
s.d $f12, FA_0_0_OFF2($fp)
s.d $f14, FA_1_0_OFF2($fp)
+#endif
1:
# Call ffi_closure_mips_inner_O32 to do the work.
la t9, ffi_closure_mips_inner_O32
@@ -281,6 +296,7 @@ $LCFI7:
li $13, 1 # FFI_O32
bne $16, $13, 1f # Skip fp restore if FFI_O32_SOFT_FLOAT
+#ifndef __mips_soft_float
li $9, FFI_TYPE_FLOAT
l.s $f0, V0_OFF2($fp)
beq $8, $9, closure_done
@@ -288,6 +304,7 @@ $LCFI7:
li $9, FFI_TYPE_DOUBLE
l.d $f0, V0_OFF2($fp)
beq $8, $9, closure_done
+#endif
1:
REG_L $3, V1_OFF2($fp)
REG_L $2, V0_OFF2($fp)

View file

@ -25,8 +25,6 @@ at gcc pass3
gotools/Makefile.in | 4 +++-
2 files changed, 6 insertions(+), 2 deletions(-)
diff --git a/gotools/Makefile.am b/gotools/Makefile.am
index 5f3940a278b..9c22f5df103 100644
--- a/gotools/Makefile.am
+++ b/gotools/Makefile.am
@@ -26,6 +26,7 @@ PWD_COMMAND = $${PWDCMD-pwd}
@ -36,38 +34,34 @@ index 5f3940a278b..9c22f5df103 100644
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
if NATIVE
@@ -38,7 +39,8 @@ endif
GOCFLAGS = $(CFLAGS_FOR_TARGET)
LIBGOTOOL = $(libgodir)/libgotool.a
@@ -41,7 +42,8 @@ GOCFLAGS = $(CFLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
cmdsrcdir = $(srcdir)/../libgo/go/cmd
diff --git a/gotools/Makefile.in b/gotools/Makefile.in
index 4386576b011..0bdd9290e01 100644
libgosrcdir = $(srcdir)/../libgo/go
--- a/gotools/Makefile.in
+++ b/gotools/Makefile.in
@@ -252,13 +252,15 @@ mkinstalldirs = $(SHELL) $(toplevel_srcdir)/mkinstalldirs
@@ -263,6 +263,7 @@ mkinstalldirs = $(SHELL) $(toplevel_srcd
PWD_COMMAND = $${PWDCMD-pwd}
STAMP = echo timestamp >
libgodir = ../$(target_noncanonical)/libgo
+libgccdir = ../$(target_noncanonical)/libgcc
LIBGODEP = $(libgodir)/libgo.la
LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_FALSE@GOCOMPILER = $(GOC)
# Use the compiler we just built.
@@ -271,7 +272,8 @@ LIBGOTOOL = $(libgodir)/libgotool.a
@NATIVE_TRUE@GOCOMPILER = $(GOC_FOR_TARGET) $(XGCC_FLAGS_FOR_TARGET)
GOCOMPILE = $(GOCOMPILER) $(GOCFLAGS)
AM_GOCFLAGS = -I $(libgodir)
-AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs
+AM_LDFLAGS = -L $(libgodir) -L $(libgodir)/.libs \
+ -L $(libgccdir) -L $(libgccdir)/.libs -lgcc_s
GOLINK = $(GOCOMPILER) $(GOCFLAGS) $(AM_GOCFLAGS) $(LDFLAGS) $(AM_LDFLAGS) -o $@
cmdsrcdir = $(srcdir)/../libgo/go/cmd
go_cmd_go_files = \
--
2.16.3
libgosrcdir = $(srcdir)/../libgo/go
cmdsrcdir = $(libgosrcdir)/cmd

View file

@ -1,32 +0,0 @@
commit b050f87d13b5dc7ed82feb9a90f4529de58bdf25
Author: Felix Fietkau <nbd@openwrt.org>
Date: Wed Feb 19 19:20:10 2014 +0000
gcc: prevent the use of LDRD/STRD on ARMv5TE
These instructions are for 64-bit load/store. On ARMv5TE, the CPU
requires addresses to be aligned to 64-bit. When misaligned, behavior is
undefined (effectively either loads the same word twice on LDRD, or
corrupts surrounding memory on STRD).
On ARMv6 and newer, unaligned access is safe.
Removing these instructions for ARMv5TE is necessary, because GCC
ignores alignment information in pointers and does unsafe optimizations
that have shown up as bugs in various places.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39638
--- a/gcc/config/arm/arm.h
+++ b/gcc/config/arm/arm.h
@@ -150,7 +150,7 @@ extern tree arm_fp16_type_node;
/* Thumb-1 only. */
#define TARGET_THUMB1_ONLY (TARGET_THUMB1 && !arm_arch_notm)
-#define TARGET_LDRD (arm_arch5e && ARM_DOUBLEWORD_ALIGN \
+#define TARGET_LDRD (arm_arch6 && ARM_DOUBLEWORD_ALIGN \
&& !TARGET_THUMB1)
#define TARGET_CRC32 (arm_arch_crc)

View file

@ -1,18 +0,0 @@
commit d8c570a1531035c3e26bcd94741e5f5b9c36b5d9
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Mar 5 00:51:01 2012 +0000
gcc: do not emit references to _savegpr_* and _restgpr_* on powerpc, as they are tricky to deal with wrt. libgcc. they cannot be linked dynamically
SVN-Revision: 30814
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -26981,7 +26981,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View file

@ -1,22 +0,0 @@
commit 565988ab47bd9b96b50608564aee2104aeb4b7ae
Author: Felix Fietkau <nbd@nbd.name>
Date: Tue Dec 13 14:20:49 2016 +0100
gcc: rip out transactional memory related bloat from crtbegin
Slightly improves compression for each executable, saving about 4k from
the default ar71xx rootfs
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View file

@ -0,0 +1,24 @@
commit 81cc26c706b2bc8c8c1eb1a322e5c5157900836e
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Oct 19 21:45:51 2014 +0000
gcc: do not assume that the Mac OS X filesystem is case insensitive
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 42973
--- a/include/filenames.h
+++ b/include/filenames.h
@@ -43,11 +43,6 @@ extern "C" {
# define IS_DIR_SEPARATOR(c) IS_DOS_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_DOS_ABSOLUTE_PATH (f)
#else /* not DOSish */
-# if defined(__APPLE__)
-# ifndef HAVE_CASE_INSENSITIVE_FILE_SYSTEM
-# define HAVE_CASE_INSENSITIVE_FILE_SYSTEM 1
-# endif
-# endif /* __APPLE__ */
# define HAS_DRIVE_SPEC(f) (0)
# define IS_DIR_SEPARATOR(c) IS_UNIX_DIR_SEPARATOR (c)
# define IS_ABSOLUTE_PATH(f) IS_UNIX_ABSOLUTE_PATH (f)

View file

@ -0,0 +1,35 @@
commit 098bd91f5eae625c7d2ee621e10930fc4434e5e2
Author: Luka Perkov <luka@openwrt.org>
Date: Tue Feb 26 16:16:33 2013 +0000
gcc: don't build documentation
This closes #13039.
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 35807
--- a/gcc/Makefile.in
+++ b/gcc/Makefile.in
@@ -3203,18 +3203,10 @@ doc/gcc.info: $(TEXI_GCC_FILES)
doc/gccint.info: $(TEXI_GCCINT_FILES)
doc/cppinternals.info: $(TEXI_CPPINT_FILES)
-doc/%.info: %.texi
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I . -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/%.info:
# Duplicate entry to handle renaming of gccinstall.info
-doc/gccinstall.info: $(TEXI_GCCINSTALL_FILES)
- if [ x$(BUILD_INFO) = xinfo ]; then \
- $(MAKEINFO) $(MAKEINFOFLAGS) -I $(gcc_docdir) \
- -I $(gcc_docdir)/include -o $@ $<; \
- fi
+doc/gccinstall.info:
doc/cpp.dvi: $(TEXI_CPP_FILES)
doc/gcc.dvi: $(TEXI_GCC_FILES)

View file

@ -0,0 +1,20 @@
Fix https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84790.
MIPS16 functions have a static assembler prologue which clobbers
registers v0 and v1. Add these register clobbers to function call
instructions.
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -3131,6 +3131,12 @@ mips_emit_call_insn (rtx pattern, rtx or
emit_insn (gen_update_got_version ());
}
+ if (TARGET_MIPS16 && TARGET_USE_GOT)
+ {
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS16_PIC_TEMP);
+ clobber_reg (&CALL_INSN_FUNCTION_USAGE (insn), MIPS_PROLOGUE_TEMP (word_mode));
+ }
+
if (TARGET_MIPS16
&& TARGET_EXPLICIT_RELOCS
&& TARGET_CALL_CLOBBERED_GP)

View file

@ -0,0 +1,13 @@
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -876,7 +876,9 @@ proper position among the other output f
#endif
#ifndef LINK_SSP_SPEC
-#ifdef TARGET_LIBC_PROVIDES_SSP
+#if DEFAULT_LIBC == LIBC_MUSL
+#define LINK_SSP_SPEC "-lssp_nonshared"
+#elif defined(TARGET_LIBC_PROVIDES_SSP)
#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \
"|fstack-protector-strong|fstack-protector-explicit:}"
#else

View file

@ -0,0 +1,21 @@
commit ecf7671b769fe96f7b5134be442089f8bdba55d2
Author: Felix Fietkau <nbd@nbd.name>
Date: Thu Aug 4 20:29:45 2016 +0200
gcc: add a patch to generate better code with Os on mips
Also happens to reduce compressed code size a bit
Signed-off-by: Felix Fietkau <nbd@nbd.name>
--- a/gcc/config/mips/mips.c
+++ b/gcc/config/mips/mips.c
@@ -19994,7 +19994,7 @@ mips_option_override (void)
flag_pcc_struct_return = 0;
/* Decide which rtx_costs structure to use. */
- if (optimize_size)
+ if (0 && optimize_size)
mips_cost = &mips_rtx_cost_optimize_size;
else
mips_cost = &mips_rtx_cost_data[mips_tune];

View file

@ -0,0 +1,33 @@
commit 8570c4be394cff7282f332f97da2ff569a927ddb
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 20:06:12 2011 +0000
fixup arm soft-float symbols
SVN-Revision: 25325
--- a/libgcc/config/arm/t-linux
+++ b/libgcc/config/arm/t-linux
@@ -1,6 +1,10 @@
LIB1ASMSRC = arm/lib1funcs.S
LIB1ASMFUNCS = _udivsi3 _divsi3 _umodsi3 _modsi3 _dvmd_lnx _clzsi2 _clzdi2 \
- _ctzsi2 _arm_addsubdf3 _arm_addsubsf3
+ _ctzsi2 _arm_addsubdf3 _arm_addsubsf3 \
+ _arm_negdf2 _arm_muldivdf3 _arm_cmpdf2 _arm_unorddf2 \
+ _arm_fixdfsi _arm_fixunsdfsi _arm_truncdfsf2 \
+ _arm_negsf2 _arm_muldivsf3 _arm_cmpsf2 _arm_unordsf2 \
+ _arm_fixsfsi _arm_fixunssfsi
# Just for these, we omit the frame pointer since it makes such a big
# difference.
--- a/gcc/config/arm/linux-elf.h
+++ b/gcc/config/arm/linux-elf.h
@@ -58,8 +58,6 @@
%{shared:-lc} \
%{!shared:%{profile:-lc_p}%{!profile:-lc}}"
-#define LIBGCC_SPEC "%{mfloat-abi=soft*:-lfloat} -lgcc"
-
#define GLIBC_DYNAMIC_LINKER "/lib/ld-linux.so.2"
#define LINUX_TARGET_LINK_SPEC "%{h*} \

View file

@ -0,0 +1,44 @@
commit c96312958c0621e72c9b32da5bc224ffe2161384
Author: Felix Fietkau <nbd@openwrt.org>
Date: Mon Oct 19 23:26:09 2009 +0000
gcc: create a proper libgcc_pic.a static library for relinking (4.3.3+ for now, backport will follow)
SVN-Revision: 18086
--- a/libgcc/Makefile.in
+++ b/libgcc/Makefile.in
@@ -927,11 +927,12 @@ $(libgcov-driver-objects): %$(objext): $
# Static libraries.
libgcc.a: $(libgcc-objects)
+libgcc_pic.a: $(libgcc-s-objects)
libgcov.a: $(libgcov-objects)
libunwind.a: $(libunwind-objects)
libgcc_eh.a: $(libgcc-eh-objects)
-libgcc.a libgcov.a libunwind.a libgcc_eh.a:
+libgcc.a libgcov.a libunwind.a libgcc_eh.a libgcc_pic.a:
-rm -f $@
objects="$(objects)"; \
@@ -955,7 +956,7 @@ all: libunwind.a
endif
ifeq ($(enable_shared),yes)
-all: libgcc_eh.a libgcc_s$(SHLIB_EXT)
+all: libgcc_eh.a libgcc_pic.a libgcc_s$(SHLIB_EXT)
ifneq ($(LIBUNWIND),)
all: libunwind$(SHLIB_EXT)
libgcc_s$(SHLIB_EXT): libunwind$(SHLIB_EXT)
@@ -1161,6 +1162,10 @@ install-shared:
chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_eh.a
$(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_eh.a
+ $(INSTALL_DATA) libgcc_pic.a $(mapfile) $(DESTDIR)$(inst_libdir)/
+ chmod 644 $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+ $(RANLIB) $(DESTDIR)$(inst_libdir)/libgcc_pic.a
+
$(subst @multilib_dir@,$(MULTIDIR),$(subst \
@shlib_base_name@,libgcc_s,$(subst \
@shlib_slibdir_qual@,$(MULTIOSSUBDIR),$(SHLIB_INSTALL))))

View file

@ -0,0 +1,28 @@
commit 7edc8ca5456d9743dd0075eb3cc5b04f4f24c8cc
Author: Imre Kaloz <kaloz@openwrt.org>
Date: Wed Feb 2 19:34:36 2011 +0000
add armv4 fixup patches
SVN-Revision: 25322
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -91,10 +91,15 @@
#define MUSL_DYNAMIC_LINKER \
"/lib/ld-musl-arm" MUSL_DYNAMIC_LINKER_E "%{mfloat-abi=hard:hf}.so.1"
+/* For armv4 we pass --fix-v4bx to linker to support EABI */
+#undef TARGET_FIX_V4BX_SPEC
+#define TARGET_FIX_V4BX_SPEC " %{mcpu=arm8|mcpu=arm810|mcpu=strongarm*"\
+ "|march=armv4|mcpu=fa526|mcpu=fa626:--fix-v4bx}"
+
/* At this point, bpabi.h will have clobbered LINK_SPEC. We want to
use the GNU/Linux version, not the generic BPABI version. */
#undef LINK_SPEC
-#define LINK_SPEC EABI_LINK_SPEC \
+#define LINK_SPEC EABI_LINK_SPEC TARGET_FIX_V4BX_SPEC \
LINUX_OR_ANDROID_LD (LINUX_TARGET_LINK_SPEC, \
LINUX_TARGET_LINK_SPEC " " ANDROID_LINK_SPEC)

View file

@ -0,0 +1,54 @@
commit dcfc40358b5a3cae7320c17f8d1cebd5ad5540cd
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun Feb 12 20:25:47 2012 +0000
gcc 4.6: port over the missing patch 850-use_shared_libgcc.patch to prevent libgcc crap from leaking into every single binary
SVN-Revision: 30486
--- a/gcc/config/arm/linux-eabi.h
+++ b/gcc/config/arm/linux-eabi.h
@@ -129,10 +129,6 @@
"%{Ofast|ffast-math|funsafe-math-optimizations:crtfastmath.o%s} " \
LINUX_OR_ANDROID_LD (GNU_USER_TARGET_ENDFILE_SPEC, ANDROID_ENDFILE_SPEC)
-/* Use the default LIBGCC_SPEC, not the version in linux-elf.h, as we
- do not use -lfloat. */
-#undef LIBGCC_SPEC
-
/* Clear the instruction cache from `beg' to `end'. This is
implemented in lib1funcs.S, so ensure an error if this definition
is used. */
--- a/gcc/config/linux.h
+++ b/gcc/config/linux.h
@@ -66,6 +66,10 @@ see the files COPYING3 and COPYING.RUNTI
builtin_version ("CRuntime_Musl"); \
} while (0)
+#ifndef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{static|static-libgcc:-lgcc}%{!static:%{!static-libgcc:-lgcc_s}}"
+#endif
+
/* Determine which dynamic linker to use depending on whether GLIBC or
uClibc or Bionic or musl is the default C library and whether
-muclibc or -mglibc or -mbionic or -mmusl has been passed to change
--- a/libgcc/mkmap-symver.awk
+++ b/libgcc/mkmap-symver.awk
@@ -136,5 +136,5 @@ function output(lib) {
else if (inherit[lib])
printf("} %s;\n", inherit[lib]);
else
- printf ("\n local:\n\t*;\n};\n");
+ printf ("\n\t*;\n};\n");
}
--- a/gcc/config/rs6000/linux.h
+++ b/gcc/config/rs6000/linux.h
@@ -62,6 +62,9 @@
#undef CPP_OS_DEFAULT_SPEC
#define CPP_OS_DEFAULT_SPEC "%(cpp_os_linux)"
+#undef LIBGCC_SPEC
+#define LIBGCC_SPEC "%{!static:%{!static-libgcc:-lgcc_s}} -lgcc"
+
#undef LINK_SHLIB_SPEC
#define LINK_SHLIB_SPEC "%{shared:-shared} %{!shared: %{static:-static}} \
%{static-pie:-static -pie --no-dynamic-linker -z text}"

View file

@ -0,0 +1,22 @@
commit 64661de100da1ec1061ef3e5e400285dce115e6b
Author: Felix Fietkau <nbd@openwrt.org>
Date: Sun May 10 13:16:35 2015 +0000
gcc: add some size optimization patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 45664
--- a/libgcc/config/t-libunwind
+++ b/libgcc/config/t-libunwind
@@ -2,8 +2,7 @@
HOST_LIBGCC2_CFLAGS += -DUSE_GAS_SYMVER
-LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c \
- $(srcdir)/unwind-compat.c $(srcdir)/unwind-dw2-fde-compat.c
+LIB2ADDEH = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
LIB2ADDEHSTATIC = $(srcdir)/unwind-sjlj.c $(srcdir)/unwind-c.c
# Override the default value from t-slibgcc-elf-ver and mention -lunwind

View file

@ -0,0 +1,11 @@
--- a/gcc/config/rs6000/rs6000.c
+++ b/gcc/config/rs6000/rs6000.c
@@ -24474,7 +24474,7 @@ rs6000_savres_strategy (rs6000_stack_t *
/* Define cutoff for using out-of-line functions to save registers. */
if (DEFAULT_ABI == ABI_V4 || TARGET_ELF)
{
- if (!optimize_size)
+ if (1)
{
strategy |= SAVE_INLINE_FPRS | REST_INLINE_FPRS;
strategy |= SAVE_INLINE_GPRS | REST_INLINE_GPRS;

View file

@ -0,0 +1,11 @@
--- a/libgcc/crtstuff.c
+++ b/libgcc/crtstuff.c
@@ -152,7 +152,7 @@ call_ ## FUNC (void) \
#endif
#if !defined(USE_TM_CLONE_REGISTRY) && defined(OBJECT_FORMAT_ELF)
-# define USE_TM_CLONE_REGISTRY 1
+# define USE_TM_CLONE_REGISTRY 0
#endif
/* We do not want to add the weak attribute to the declarations of these

View file

@ -0,0 +1,9 @@
--- a/libgcc/config/mips/t-mips16
+++ b/libgcc/config/mips/t-mips16
@@ -43,3 +43,6 @@ SYNC_CFLAGS = -mno-mips16
# Version these symbols if building libgcc.so.
SHLIB_MAPFILES += $(srcdir)/config/mips/libgcc-mips16.ver
+
+CRTSTUFF_T_CFLAGS += -mno-mips16
+CRTSTUFF_T_CFLAGS_S += -mno-mips16

View file

@ -0,0 +1,146 @@
commit 99368862e44740ff4fd33760893f04e14f9dbdf1
Author: Felix Fietkau <nbd@openwrt.org>
Date: Tue Jul 31 00:52:27 2007 +0000
Port the mbsd_multi patch from freewrt, which adds -fhonour-copts. This will emit warnings in packages that don't use our target cflags properly
SVN-Revision: 8256
This patch brings over a feature from MirBSD:
* -fhonour-copts
If this option is not given, it's warned (depending
on environment variables). This is to catch errors
of misbuilt packages which override CFLAGS themselves.
This patch was authored by Thorsten Glaser <tg at mirbsd.de>
with copyright assignment to the FSF in effect.
--- a/gcc/c-family/c-opts.c
+++ b/gcc/c-family/c-opts.c
@@ -107,6 +107,9 @@ static dump_flags_t original_dump_flags;
/* Whether any standard preincluded header has been preincluded. */
static bool done_preinclude;
+/* Check if a port honours COPTS. */
+static int honour_copts = 0;
+
static void handle_OPT_d (const char *);
static void set_std_cxx98 (int);
static void set_std_cxx11 (int);
@@ -452,6 +455,12 @@ c_common_handle_option (size_t scode, co
flag_no_builtin = !value;
break;
+ case OPT_fhonour_copts:
+ if (c_language == clk_c) {
+ honour_copts++;
+ }
+ break;
+
case OPT_fconstant_string_class_:
constant_string_class_name = arg;
break;
@@ -1138,6 +1147,47 @@ c_common_init (void)
return false;
}
+ if (c_language == clk_c) {
+ char *ev = getenv ("GCC_HONOUR_COPTS");
+ int evv;
+ if (ev == NULL)
+ evv = -1;
+ else if ((*ev == '0') || (*ev == '\0'))
+ evv = 0;
+ else if (*ev == '1')
+ evv = 1;
+ else if (*ev == '2')
+ evv = 2;
+ else if (*ev == 's')
+ evv = -1;
+ else {
+ warning (0, "unknown GCC_HONOUR_COPTS value, assuming 1");
+ evv = 1; /* maybe depend this on something like MIRBSD_NATIVE? */
+ }
+ if (evv == 1) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in lenient mode");
+ return false;
+ } else if (honour_copts != 1) {
+ warning (0, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ } else if (evv == 2) {
+ if (honour_copts == 0) {
+ error ("someone does not honour COPTS at all in strict mode");
+ return false;
+ } else if (honour_copts != 1) {
+ error ("someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ return false;
+ }
+ } else if (evv == 0) {
+ if (honour_copts != 1)
+ inform (UNKNOWN_LOCATION, "someone does not honour COPTS correctly, passed %d times",
+ honour_copts);
+ }
+ }
+
return true;
}
--- a/gcc/c-family/c.opt
+++ b/gcc/c-family/c.opt
@@ -1521,6 +1521,9 @@ C++ ObjC++ Optimization Alias(fexception
fhonor-std
C++ ObjC++ Deprecated
+fhonour-copts
+C ObjC C++ ObjC++ RejectNegative
+
fhosted
C ObjC
Assume normal C execution environment.
--- a/gcc/common.opt
+++ b/gcc/common.opt
@@ -1589,6 +1589,9 @@ fguess-branch-probability
Common Report Var(flag_guess_branch_prob) Optimization
Enable guessing of branch probabilities.
+fhonour-copts
+Common RejectNegative
+
; Nonzero means ignore `#ident' directives. 0 means handle them.
; Generate position-independent code for executables if possible
; On SVR4 targets, it also controls whether or not to emit a
--- a/gcc/doc/invoke.texi
+++ b/gcc/doc/invoke.texi
@@ -7666,6 +7666,17 @@ This option is only supported for C and
@option{-Wall} and by @option{-Wpedantic}, which can be disabled with
@option{-Wno-pointer-sign}.
+@item -fhonour-copts
+@opindex fhonour-copts
+If @env{GCC_HONOUR_COPTS} is set to 1, abort if this option is not
+given at least once, and warn if it is given more than once.
+If @env{GCC_HONOUR_COPTS} is set to 2, abort if this option is not
+given exactly once.
+If @env{GCC_HONOUR_COPTS} is set to 0 or unset, warn if this option
+is not given exactly once.
+The warning is quelled if @env{GCC_HONOUR_COPTS} is set to @samp{s}.
+This flag and environment variable only affect the C language.
+
@item -Wstack-protector
@opindex Wstack-protector
@opindex Wno-stack-protector
--- a/gcc/opts.c
+++ b/gcc/opts.c
@@ -2314,6 +2314,9 @@ common_handle_option (struct gcc_options
/* Currently handled in a prescan. */
break;
+ case OPT_fhonour_copts:
+ break;
+
case OPT_Werror:
dc->warning_as_error_requested = value;
break;

View file

@ -0,0 +1,22 @@
Author: Jo-Philipp Wich <jow@openwrt.org>
Date: Sat Apr 21 03:02:39 2012 +0000
gcc: add patch to make the getenv() spec function nonfatal if requested environment variable is unset
SVN-Revision: 31390
--- a/gcc/gcc.c
+++ b/gcc/gcc.c
@@ -9318,8 +9318,10 @@ getenv_spec_function (int argc, const ch
}
if (!value)
- fatal_error (input_location,
- "environment variable %qs not defined", varname);
+ {
+ warning (input_location, "environment variable %qs not defined", varname);
+ value = "";
+ }
/* We have to escape every character of the environment variable so
they are not interpreted as active spec characters. A

Some files were not shown because too many files have changed in this diff Show more